last executing test programs: 2m9.537240525s ago: executing program 3 (id=4): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 2m9.41732075s ago: executing program 3 (id=6): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000300)={[{@dioread_nolock}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@nodelalloc}, {@errors_remount}, {@acl}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@jqfmt_vfsold}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nombcache}], [{@fowner_eq}, {@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@fsname={'fsname', 0x3d, '.'}}, {@subj_type={'subj_type', 0x3d, '/)/-:$//('}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}]}, 0xfd, 0x573, &(0x7f0000000cc0)="$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") creat(0x0, 0x40) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x8) fallocate(r0, 0x0, 0xeffb, 0xe396) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x14b442, 0x2) pwritev2(r1, &(0x7f0000000100)=[{&(0x7f0000000180)='@', 0x1}], 0x1, 0x5412, 0x0, 0x0) 2m8.979994921s ago: executing program 3 (id=7): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x61) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) acct(&(0x7f0000000140)='./file0/file2\x00') 2m8.78543259s ago: executing program 3 (id=8): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x10040) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010001, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x8, 0x5}]}}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010001, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) 2m8.329341202s ago: executing program 3 (id=9): bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r0}, &(0x7f0000000500), &(0x7f0000000580)}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m8.149078141s ago: executing program 32 (id=9): bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r0}, &(0x7f0000000500), &(0x7f0000000580)}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m23.748304112s ago: executing program 4 (id=225): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x11, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a0000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a500000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x10, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000003c0)=r1, 0x4) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000340)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001d0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bbfbffa8499c69ac76dd752d00", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 1m23.324838103s ago: executing program 4 (id=231): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x18) getdents64(r0, 0x0, 0x0) lseek(r0, 0x401, 0x0) 1m22.891753063s ago: executing program 4 (id=234): sendmsg$inet6(0xffffffffffffffff, 0x0, 0x48043) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000006800e97800000000000000000a00000000000000040004"], 0x1c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x2, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) 1m22.736066631s ago: executing program 4 (id=236): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x2, 0x5505, &(0x7f0000002480)="$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") r0 = open(&(0x7f0000001b80)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20000088) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 1m20.26428283s ago: executing program 4 (id=256): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000380)={0x20, 0x15, 0x4, "abe763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000240)={0x0, 0x16, 0x4, "f0853471"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000e40)={0x84, &(0x7f0000000980)={0x0, 0xb, 0x4, "65f6d245"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m18.62292601s ago: executing program 4 (id=261): r0 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) pipe(0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0x40045b0a, &(0x7f0000000040)) 1m17.981266921s ago: executing program 33 (id=261): r0 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) pipe(0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0x40045b0a, &(0x7f0000000040)) 2.711765898s ago: executing program 0 (id=743): r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000000)=0x2, 0x4) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x78, 0x0, 0x80, {0xc, 0x3, 0x0, {0xfffffffffffffffd, 0x0, 0xfffffffffffffffc, 0x0, 0x8, 0xffffffff, 0xfffffffe, 0x0, 0x80000, 0x8000, 0x0, 0x0, 0x0, 0x1, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$inet6(r0, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002'], 0x28}}], 0x1, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x10000, &(0x7f0000000040)={0xa, 0x4e21, 0x9, @private0, 0x23}, 0x1c) 2.419164833s ago: executing program 0 (id=746): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x48, &(0x7f0000000200)=[@in6={0xa, 0x4e21, 0x7ff, @private2, 0xeb2}, @in6={0xa, 0x4e21, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9}, @in={0x2, 0x4e21, @remote}]}, &(0x7f0000000180)=0x10) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000340)="480000001400190d09034beafd0d36020a841a000000230f00000000a2bc5603ca00000f7f89004e00200000000101ff00c00e03000200000000000000000300005839c900910000", 0x48}], 0x1) 2.062195271s ago: executing program 2 (id=749): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="4dc07f947163300c", 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000005c40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="6773c29de5f3edc73acd0b738d9e1b071da67d76ea5d17f8b7bf3ef0d00990eea781c90dae944f9458f6bad02e4f262a7fb59a3b6fec44728f1c38e79d57a74f5051de267143d1cd2dcf5a49d0bf418a7e6af7567a8eec8525c458d149490844bf7054466a6e712608db3c", 0x6b}, {&(0x7f0000000480)="8ba8986f5073535c01ccbac002000000e60a851070d6ba", 0x17}, {&(0x7f0000000500)="132fe24479d0b330a241ee854a2c469ebb862c9fd9215ef0990a53810beb1a583787ce1c4bc4c0fe8cc43dc6ab29f27b8be12b263d3e851b39903d2e582ad97299262521c232e24bfca012695e8fab1bf485a5b2f4a25ecc1f83", 0x5a}, {&(0x7f0000000380)="7d52432a2df04ccc54edc082195b84594a9a0de5fbdef955ec84289566a5ee4d302940b2a875853b80acca7043f87c2790692bced80f3e9fc9856e5f02358c1879d2da0e98217d9cfb5cc0591ec55525a7aa8af9da2881662d3bbad36846d4260472a23b5760726dd1a54a899fcd985616b153c20f3c3bf853e920a620c773718be1da84622ec2c83b504bae1cc6786abbcd3f9503b730d26c176698802ed85df0a90fad4403ecf4682b83c491808f409857d84a2674", 0xb6}], 0x4}}, {{0x0, 0x0, &(0x7f0000003c00)=[{&(0x7f00000002c0)="9514c92ae58f97b0fb4e98af7b3ac662794deb2fde895e2f21845a3424a05d2de53e2606ad88f582226b4e296501f78a907b4875f6fda8cb306a93afec226e", 0x3f}, {&(0x7f0000000080)="6df1ee6abeff8d02648b8f51dae4566d6fb934105597f2befbb8ddd3301550", 0x1f}], 0x2}}, {{0x0, 0x0, &(0x7f0000004400)=[{&(0x7f0000004380)="0158bf8582b631dc550e90cbde7d545d2e5180fcbcc14fbc3c1f25068673b725cfae663e065ba56fe1564c554bfe7a88051d140efac83f4797dcc4f08622", 0x3e}], 0x1}}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000140)="056ca4e8e339fdc68f270cc1a0a648f32a676dd2fd6d054ce481f039628778e382102fab00568b0eb6a5d1b9cf4f6df4a4355d0dc772e0cd4e9c7f", 0x3b}], 0x1}}], 0x4, 0x24008085) recvmsg$can_bcm(r1, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x12102) 1.923451637s ago: executing program 2 (id=751): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff274"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) sendmmsg$inet(r1, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000800)="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", 0x360}, {&(0x7f0000000b80)="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", 0x21e}, {&(0x7f0000000dc0)="30419d20437c98b91b9455046f57b5fc090000000000001a7838ddb9000067c30aa7352abbdf98e9bf033a3184a11e84639d3b9164d9c5d729f3dd409d39ff041e657c8df70e1607d589", 0x4a}], 0x3, 0x0, 0x0, 0x900}}], 0x1, 0x40) 1.922821527s ago: executing program 1 (id=752): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(0x3) r1 = socket(0xa, 0x3, 0x87) sendto(r1, &(0x7f00000003c0)="e1118ce4769b", 0xfdef, 0x800, &(0x7f0000000600)=@l2tp6={0xa, 0x0, 0x7, @local, 0x5}, 0x80) r2 = eventfd2(0x4f9e1aa, 0x80000) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x40, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 1.778133344s ago: executing program 1 (id=753): syz_usb_connect(0x0, 0x3e, &(0x7f0000001100)=ANY=[@ANYBLOB="1201000020dafb2099041010f5050102030109022c00010000000009040000016f2bae000824020100000000092402020000000000090585da20"], 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x61d0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) syz_mount_image$hfs(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x200000, &(0x7f0000000100)={[{@codepage={'codepage', 0x3d, 'cp857'}}, {@type={'type', 0x3d, "56a167c1"}}, {@gid}, {@type={'type', 0x3d, "9d4b9598"}}, {@umask={'umask', 0x3d, 0x8}}, {}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@file_umask={'file_umask', 0x3d, 0x3}}]}, 0x4, 0x322, &(0x7f0000000600)="$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") close_range(r0, 0xffffffffffffffff, 0x3f00000000000000) syz_open_dev$sndctrl(&(0x7f0000000240), 0x805, 0x88400) 1.713965107s ago: executing program 2 (id=754): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "2d9421fe8a4c9563", "cf6ff9ff337ed301000100c747fbbfc1", '\x00', "4f9e86d67a8426bd"}, 0x28) recvfrom(r0, 0x0, 0x0, 0x2021, 0x0, 0x0) 1.677780698s ago: executing program 5 (id=756): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000180)=@broute={'broute\x00', 0x20, 0x3, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000003c0], 0x0, 0x0, &(0x7f00000003c0)=ANY=[]}, 0x78) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000002480)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5, &(0x7f0000000040)}, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='nfs4\x00', 0x0, &(0x7f00000001c0)='\x01') 1.608496122s ago: executing program 2 (id=757): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0xf0b, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}}, 0x4000000) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000007000010010ab4be68e8da23507000000", @ANYRES32=r2, @ANYBLOB="1000018004000480080001"], 0x28}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.556755155s ago: executing program 5 (id=758): socket$nl_route(0x10, 0x3, 0x0) socket(0x18, 0x80005, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x20) r0 = io_uring_setup(0x21dd, &(0x7f00000001c0)={0x0, 0x1fffff, 0x0, 0x2, 0x381}) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xd, &(0x7f0000000140)={0x7, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000040)=[{0x0, 0xffffffff00000005}], &(0x7f0000000180)=[0xffffffff, 0x7fffffff, 0x2, 0x6, 0x101, 0x1], 0x7}, 0x20) 1.481232708s ago: executing program 6 (id=759): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000300)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x10, 0x0, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2a}}}}, 0x90) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4ea5, 0x9, @mcast1, 0x8}, r1, 0x8001}}, 0xff7a) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 1.448534069s ago: executing program 0 (id=760): setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd0600ffdbdb252100000020000300", @ANYRES32=r3, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}}, 0x28000) 1.44782613s ago: executing program 2 (id=761): socket$packet(0x11, 0x3, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000140)={@val={0x8, 0x800}, @val={0x2, 0x3, 0x0, 0x1}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x89, 0x0, @rand_addr=0x64010101, @multicast2=0xe0000001}, {{0x0, 0x4e23, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}, 0x36) 1.331073135s ago: executing program 5 (id=762): socket(0x2, 0x80805, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@restrict]}}, 0x0, 0x26}, 0x20) socket(0x400000000010, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0xd, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff0800090000000000080011000000000008000e00800000000800", @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0xc840}, 0x0) 1.299266757s ago: executing program 6 (id=763): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "d607f8f9951e76c13f64323723e7eecdf40c363403eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f001d34c09f39c3539e4f8d3ee0878ae95bc7f52363c468b257ff3e24852548deb01efd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3b90400000000000000c279f03558083906666827d61dcc3a633bffff250b5a293e3877adc1660edbc9a0307a25720a170e7f5670e419dc44febf7ddc73fd4a5a0b6c28eb31b138b544ce3ec809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800", "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"}) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, 0x0}, 0x20) 1.197897272s ago: executing program 0 (id=764): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) readv(r0, &(0x7f00000007c0)=[{&(0x7f0000000580)=""/130, 0x82}], 0x1) timerfd_create(0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) write$bt_hci(r0, &(0x7f0000000280)=ANY=[@ANYRES16=r0], 0x6) 1.110473126s ago: executing program 1 (id=765): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="00070000420091"], 0xfe33) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/4125, 0x101d}], 0x1}, 0x40002022) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030030000b12d25a80648c2594f90224fc60100c034002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 1.054914249s ago: executing program 5 (id=766): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x8010) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x44f01}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1.054128789s ago: executing program 6 (id=767): syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000200)='./file0\x00', 0x2000000, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x1, 0x55a, &(0x7f0000000b80)="$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") write(0xffffffffffffffff, &(0x7f0000000100)="f0d319933f17f819727b20", 0xb) lgetxattr(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trusted.'], 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x21c0, 0x103) 854.419539ms ago: executing program 0 (id=768): syz_usb_connect$midi(0x6, 0x31, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x1430, 0x474b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1f, 0x1, 0x1, 0x3f, 0x20, 0x1, "", {{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1, 0x3, 0x20, 0x5, [], [{{0x9, 0x5, 0xf, 0x15, 0x400, 0x1, 0x5, 0x3, {0x4}}}]}}}}}]}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="010026bd7000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="6700330080200900ffffffffffff080211"], 0x84}, 0x1, 0x0, 0x0, 0x84}, 0x0) 802.235861ms ago: executing program 6 (id=769): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f00000000c0)={0x7}, 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r0, 0x1) 562.030933ms ago: executing program 2 (id=770): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc0000000000000080", 0x38}], 0x1) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe) 501.763496ms ago: executing program 5 (id=771): bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000180)={@multicast2, @loopback}, 0xc) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000200)={'lo\x00'}) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e00000027f0007000000000002"], 0x18) 478.777287ms ago: executing program 6 (id=772): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000200), 0x20a00, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000480)=0x1) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fstat(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r2, r2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x5) 401.93413ms ago: executing program 1 (id=773): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000000), 0x1000000, &(0x7f0000000380)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}}) syz_fuse_handle_req(r0, &(0x7f0000009b40)="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", 0x2000, &(0x7f0000007a80)={&(0x7f0000006400)={0x50, 0x0, 0x1ff, {0x7, 0x29, 0x1, 0x24ff871999e0dde7, 0xdcf, 0x4005, 0xb, 0x800, 0x0, 0x0, 0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)={0x78, 0x0, 0x1, {0x0, 0x8, 0x0, {0x2, 0x2, 0x5, 0xffffffffffffffff, 0x1, 0xfffffffffffffffb, 0x9e9, 0x7, 0x3f, 0x6000, 0x5, 0xffffffffffffffff, 0xee01, 0x3c, 0x4f6}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2000, 0x2dd8806920477201, 0x0) 247.107518ms ago: executing program 1 (id=774): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000001c0)="82ab", 0x2}], 0x1}}], 0x1, 0x4404c880) sendto$inet6(r0, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd) 168.201292ms ago: executing program 5 (id=775): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x15, [0x6, 0xc95a, 0xfffffff3, 0x8, 0x7d, 0x2, 0x5bf, 0x7f, 0x6, 0x46, 0xfffffff2, 0x5f, 0x2, 0xfffffffd, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x4, 0x80000001, 0x7, 0x7, 0x3, 0x3c5b, 0x5, 0xfffffffc, 0xffffffff, 0xfffffffe, 0x1f461e2c, 0x4, 0xe661, 0x6, 0x1000007, 0x3, 0x8001, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x0, 0x5, 0x3d, 0x8f, 0x6, 0x9, 0x0, 0x5, 0x4, 0x15, 0x4, 0x80, 0xfffffffc, 0x5, 0x5, 0x8, 0x0, 0x9, 0x3e], [0x10000007, 0x10002, 0x12b, 0x4734646, 0x9, 0xfffffff3, 0x129432e6, 0x3, 0xf9, 0xd, 0x2bf, 0x6c9, 0x1ff, 0xfffffffe, 0x3, 0x1, 0x7, 0x10000005, 0x2f, 0xe, 0x313, 0x1, 0xea0, 0xfffffff9, 0xfffffffd, 0x4, 0x80, 0x5, 0x400, 0xffffffff, 0x6, 0x400001, 0xff, 0x1005, 0x8007fe, 0x5f31, 0x4, 0xffffffff, 0x238, 0x1000004, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x5, 0x0, 0x10000003, 0x8000, 0xffff, 0x2, 0x7f, 0x1, 0x8, 0x100003, 0x7, 0x0, 0x7, 0x6, 0x9, 0x48c93690, 0x2, 0xff], [0x9, 0x1, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x70, 0x8, 0x8a, 0x3, 0x10000009, 0x3e7, 0xb, 0x5, 0x2, 0x40002, 0xf, 0x8, 0x84, 0x6d01, 0x5, 0x3d, 0x3, 0x200, 0x9, 0x3, 0x4, 0x0, 0x543, 0xa2, 0x7, 0x53cf697b, 0x5, 0x4, 0x54fe12da, 0xbf, 0x5, 0x3, 0x400000, 0xfffffff9, 0x0, 0x5, 0x5, 0x0, 0x6, 0xfffffffb, 0x120000, 0x3, 0x4fa, 0xfffff1d1, 0x4, 0x5], [0x9, 0xbb31, 0x3, 0x7fd3, 0x5, 0x1, 0x7, 0x1, 0x51bf, 0x9, 0xce7, 0x1ff, 0x6, 0x80000000, 0x5, 0x3, 0x104, 0x80000000, 0x3, 0x7fff, 0x8ffff, 0xa61d, 0x2, 0x5, 0x1, 0x2, 0x7, 0x60a7, 0x6, 0x2, 0x1, 0x80000003, 0x5, 0x8, 0xff, 0x1000003, 0x3, 0xffff, 0x3, 0x8, 0x100, 0x9602, 0xa, 0x2, 0x2, 0x6, 0x1, 0x10000, 0x3, 0x2, 0x2b91, 0xa20, 0x8, 0x9, 0x1, 0x6c0b, 0x0, 0x1, 0x2, 0xb1c, 0x1, 0x200, 0x40fff, 0xfff]}, 0x45c) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x8401) openat$mice(0xffffffffffffff9c, &(0x7f00000000c0), 0x440) fcntl$setstatus(r1, 0x4, 0x2400) write$char_usb(r0, &(0x7f0000000040)="e2", 0x918) 58.142457ms ago: executing program 6 (id=776): r0 = socket(0x10, 0x803, 0x0) write(r0, &(0x7f0000000340)="2600000022004701050007108980e8ff06006d20002b1ffec0e90101c7bb0000b00000000000", 0x26) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000d9bffc)=0x7, 0x4) sendto(r0, &(0x7f0000000200)="120000001a00e7efa8ff1b3fc329c94a41bc", 0x12, 0x24008000, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x0, 0x0) 669.34µs ago: executing program 1 (id=777): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000040)="8e", 0x1, 0x24008001, 0x0, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r0, 0x0, r1, 0x0, 0x1, 0x1) 0s ago: executing program 0 (id=778): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$OCFS2_IOC_REFLINK(r0, 0x40186f04, &(0x7f0000000300)={0x0, &(0x7f0000000280)='^/\x1d*:\x00', 0x7fff}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'dummy0\x00'}) kernel console output (not intermixed with test programs): DDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.674582][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.683372][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.692294][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.704621][ T4270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.716229][ T4270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.729000][ T4270] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.761325][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.771364][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.772828][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.795041][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.798403][ T4270] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.813052][ T4270] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.822856][ T4270] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.832055][ T4270] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.855224][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.865975][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.888682][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.897881][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.932341][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.943631][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.953243][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.963039][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.971987][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.006751][ T4268] device veth0_macvtap entered promiscuous mode [ 75.027708][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.046271][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.066344][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.084021][ T4268] device veth1_macvtap entered promiscuous mode [ 75.102533][ T4275] device veth0_macvtap entered promiscuous mode [ 75.115162][ T4275] device veth1_macvtap entered promiscuous mode [ 75.128060][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.140346][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.173379][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.183792][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.195447][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.212774][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.222983][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.287549][ T4278] device veth0_vlan entered promiscuous mode [ 75.302998][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.321240][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.342122][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.343801][ T4349] loop3: detected capacity change from 0 to 1024 [ 75.355148][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.372481][ T4349] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 75.385574][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.414910][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.427011][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.442802][ T4278] device veth1_vlan entered promiscuous mode [ 75.451862][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.455621][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.471661][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.481894][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.486709][ T4349] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 75.492657][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.512478][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.523209][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.534789][ T4268] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.558905][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.569783][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.604814][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.637768][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.648957][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.668430][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.685081][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 75.710138][ T4267] EXT4-fs (loop3): unmounting filesystem. [ 75.716249][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.724763][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.734152][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.744828][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.797780][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.815144][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.831637][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.842552][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.853355][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.863914][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.881589][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.887304][ T4354] Process accounting resumed [ 75.893642][ T4268] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.910767][ T4275] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.923293][ T4275] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.935730][ T4275] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.944488][ T4275] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.971841][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 75.981071][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.990201][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.003742][ T4268] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.013767][ T4268] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.022838][ T4268] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.032251][ T4268] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.118222][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.127701][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.161694][ T4278] device veth0_macvtap entered promiscuous mode [ 76.179165][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.189927][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.199455][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.245952][ T4278] device veth1_macvtap entered promiscuous mode [ 76.262767][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 76.273666][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 76.289832][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.337257][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.360184][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.390921][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.438580][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.452751][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.473048][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.483966][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.500930][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.511129][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.526128][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.541036][ T4278] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.550976][ T4284] Bluetooth: hci2: command 0x0419 tx timeout [ 76.551049][ T4283] Bluetooth: hci3: command 0x0419 tx timeout [ 76.571356][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.583354][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.593953][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.605546][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.616175][ T4284] Bluetooth: hci4: command 0x0419 tx timeout [ 76.616274][ T4283] Bluetooth: hci1: command 0x0419 tx timeout [ 76.635744][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.652648][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.668712][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.681748][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.700273][ T4278] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.725033][ T4278] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.740109][ T4278] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.749906][ T4278] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.763423][ T4278] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.774669][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.794202][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.815535][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.838246][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.910132][ T46] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.948157][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.985760][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.018483][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.039270][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.045804][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.089320][ T4284] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 77.112848][ T4284] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 77.121820][ T4284] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 77.128856][ T46] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.146506][ T4285] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 77.154222][ T4285] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 77.162442][ T4285] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 77.228165][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.287605][ T1107] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.295494][ T1107] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.317735][ T4360] loop0: detected capacity change from 0 to 32768 [ 77.379030][ T46] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.431615][ T4360] XFS (loop0): Mounting V5 Filesystem [ 77.444033][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.512431][ T46] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.586050][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.589787][ T4360] XFS (loop0): Ending clean mount [ 77.593913][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.634117][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.659846][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.693429][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.768082][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.976782][ T4314] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 78.138161][ T4270] XFS (loop0): Unmounting Filesystem [ 78.182766][ T4314] usb 2-1: Using ep0 maxpacket: 32 [ 78.197384][ T4314] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 78.258386][ T4362] chnl_net:caif_netlink_parms(): no params data found [ 78.281547][ T4314] usb 2-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 78.293457][ T4314] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.311903][ T4314] usb 2-1: Product: syz [ 78.318006][ T4314] usb 2-1: Manufacturer: syz [ 78.322654][ T4314] usb 2-1: SerialNumber: syz [ 78.343123][ T4314] usb 2-1: config 0 descriptor?? [ 78.362490][ T4314] usb 2-1: bad CDC descriptors [ 78.382351][ T4314] usb 2-1: unsupported MDLM descriptors [ 78.658097][ T14] usb 2-1: USB disconnect, device number 2 [ 78.822110][ T4362] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.843217][ T4362] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.898804][ T4362] device bridge_slave_0 entered promiscuous mode [ 78.935266][ T4362] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.961285][ T4362] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.973700][ T4362] device bridge_slave_1 entered promiscuous mode [ 79.219805][ T4362] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.248872][ T4362] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.269069][ T4283] Bluetooth: hci0: command 0x0409 tx timeout [ 79.557771][ T4362] team0: Port device team_slave_0 added [ 79.569052][ T4362] team0: Port device team_slave_1 added [ 79.770663][ T4362] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.782467][ T4362] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.876028][ T4362] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.932540][ T4362] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.967350][ T4362] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.037745][ T4362] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.323840][ T4411] loop4: detected capacity change from 0 to 32768 [ 80.369462][ T4428] loop2: detected capacity change from 0 to 256 [ 80.439973][ T4362] device hsr_slave_0 entered promiscuous mode [ 80.492062][ T4362] device hsr_slave_1 entered promiscuous mode [ 80.526711][ T4362] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.538562][ T4362] Cannot create hsr debugfs directory [ 80.706376][ T4418] loop0: detected capacity change from 0 to 32768 [ 80.886723][ T4418] XFS (loop0): Mounting V5 Filesystem [ 80.967996][ T4418] XFS (loop0): Ending clean mount [ 81.007356][ T4418] XFS (loop0): Quotacheck needed: Please wait. [ 81.135816][ T4418] XFS (loop0): Quotacheck: Done. [ 81.323731][ T46] device hsr_slave_0 left promiscuous mode [ 81.334975][ T46] device hsr_slave_1 left promiscuous mode [ 81.341536][ T4283] Bluetooth: hci0: command 0x041b tx timeout [ 81.382665][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 81.442464][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 81.507151][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 81.514646][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 81.586855][ T46] device bridge_slave_1 left promiscuous mode [ 81.594271][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.692498][ T46] device bridge_slave_0 left promiscuous mode [ 81.706010][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.799583][ T4270] XFS (loop0): Unmounting Filesystem [ 81.878285][ T46] device veth1_macvtap left promiscuous mode [ 81.884684][ T46] device veth0_macvtap left promiscuous mode [ 81.935973][ T46] device veth1_vlan left promiscuous mode [ 81.946709][ T46] device veth0_vlan left promiscuous mode [ 81.967455][ T4450] loop4: detected capacity change from 0 to 1024 [ 82.006707][ T4450] EXT4-fs: Ignoring removed nomblk_io_submit option [ 82.077291][ T4450] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 82.141121][ T4450] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 82.166388][ T4450] System zones: 0-1, 3-36 [ 82.179199][ T4450] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 82.222913][ T4463] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 82.618725][ T4278] EXT4-fs (loop4): unmounting filesystem. [ 83.106165][ T22] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 83.313947][ T22] usb 2-1: config 0 has no interfaces? [ 83.345085][ T22] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 83.369972][ T22] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.399411][ T22] usb 2-1: Product: syz [ 83.403923][ T22] usb 2-1: Manufacturer: syz [ 83.415813][ T4283] Bluetooth: hci0: command 0x040f tx timeout [ 83.435818][ T22] usb 2-1: SerialNumber: syz [ 83.449811][ T22] usb 2-1: config 0 descriptor?? [ 84.157008][ T4489] syz.0.31 uses obsolete (PF_INET,SOCK_PACKET) [ 84.279661][ T46] team0 (unregistering): Port device team_slave_1 removed [ 84.425397][ T46] team0 (unregistering): Port device team_slave_0 removed [ 84.510679][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 84.609405][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 84.649541][ T4486] loop4: detected capacity change from 0 to 32768 [ 84.761048][ T4486] XFS (loop4): Mounting V5 Filesystem [ 84.828393][ T4486] XFS (loop4): Ending clean mount [ 85.065783][ T4278] XFS (loop4): Unmounting Filesystem [ 85.378300][ T46] bond0 (unregistering): Released all slaves [ 85.496545][ T4283] Bluetooth: hci0: command 0x0419 tx timeout [ 86.174103][ T4362] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 86.228454][ T4362] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 86.346613][ T4362] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 86.372873][ T4362] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 86.764353][ T4362] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.818633][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 86.831171][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 86.875135][ T4362] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.913172][ T1107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 86.923693][ T1107] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 86.940859][ T41] cfg80211: failed to load regulatory.db [ 86.973520][ T1107] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.980831][ T1107] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.040129][ T1107] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 87.050513][ T1107] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 87.071043][ T1107] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 87.097003][ T1107] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.104208][ T1107] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.152970][ T1107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 87.181213][ T1107] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 87.239978][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 87.259060][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 87.288518][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 87.324568][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 87.359314][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 87.386671][ T4512] loop0: detected capacity change from 0 to 40427 [ 87.403939][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 87.424556][ T4512] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 87.442216][ T4362] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 87.467808][ T4512] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 87.483934][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 87.501996][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 87.515973][ T4512] F2FS-fs (loop0): invalid crc value [ 87.528699][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 87.552251][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 87.582620][ T4512] F2FS-fs (loop0): Found nat_bits in checkpoint [ 87.785322][ T4512] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 87.791156][ T7] usb 2-1: USB disconnect, device number 3 [ 87.806955][ T4512] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 88.351938][ T7] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 88.554434][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 88.558170][ T7] usb 2-1: unable to get BOS descriptor or descriptor too short [ 88.583196][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 88.632425][ T4362] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.644378][ T7] usb 2-1: config 1 interface 0 has no altsetting 0 [ 88.688536][ T7] usb 2-1: string descriptor 0 read error: -22 [ 88.694842][ T7] usb 2-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.40 [ 88.736008][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.182752][ T7] logitech 0003:046D:C50C.0001: unexpected long global item [ 89.213084][ T7] logitech 0003:046D:C50C.0001: parse failed [ 89.232666][ T7] logitech: probe of 0003:046D:C50C.0001 failed with error -22 [ 89.245905][ T14] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 89.383772][ T4314] usb 2-1: USB disconnect, device number 4 [ 89.435805][ T14] usb 5-1: Using ep0 maxpacket: 16 [ 89.443132][ T14] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 89.495645][ T14] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 89.544801][ T14] usb 5-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 89.575427][ T14] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.613800][ T14] usb 5-1: config 0 descriptor?? [ 89.990924][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 90.007684][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 90.091332][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 90.120433][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 90.165728][ T4362] device veth0_vlan entered promiscuous mode [ 90.182388][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 90.207250][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 90.232884][ T4362] device veth1_vlan entered promiscuous mode [ 90.258045][ T14] usb 5-1: language id specifier not provided by device, defaulting to English [ 90.312183][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 90.332520][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 90.344530][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 90.363891][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 90.387708][ T4362] device veth0_macvtap entered promiscuous mode [ 90.401665][ T4362] device veth1_macvtap entered promiscuous mode [ 90.447869][ T4362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.466234][ T14] letsketch 0003:6161:4D15.0002: Device info:  [ 90.487045][ T4362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.538880][ T4362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.573321][ T4362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.603975][ T4362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.639748][ T4362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.672724][ T4362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.681809][ T14] letsketch 0003:6161:4D15.0002: Device info: ï“¿ [ 90.709113][ T4362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.745002][ T4362] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.772277][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 90.794775][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 90.820651][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 90.850794][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 90.900924][ T4362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.916713][ T14] usb 5-1: Max retries (5) exceeded reading string descriptor 202 [ 90.924712][ T14] letsketch: probe of 0003:6161:4D15.0002 failed with error -71 [ 90.952216][ T4362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.995922][ T14] usb 5-1: USB disconnect, device number 2 [ 91.010615][ T4362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.055408][ T4362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.115915][ T4362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.151705][ T4362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.182397][ T4362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.208880][ T4362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.233103][ T4362] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.253785][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 91.273305][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 91.296676][ T4362] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.311237][ T4362] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.321858][ T4362] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.339570][ T4362] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.486118][ T3599] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 91.534313][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.560474][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.605847][ T4381] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.614973][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 91.644363][ T4381] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.658979][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 91.699555][ T3599] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 91.726097][ T3599] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 91.745559][ T3599] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 91.795630][ T3599] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 91.845888][ T3599] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.874377][ T3599] usb 2-1: Product: syz [ 91.914101][ T3599] usb 2-1: Manufacturer: syz [ 91.945407][ T3599] usb 2-1: SerialNumber: syz [ 91.961408][ T4597] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 92.183902][ T4597] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 92.209791][ T4597] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 92.851674][ T4597] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 92.863329][ T4597] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 93.110944][ T3599] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 93.120173][ T3599] cdc_ncm 2-1:1.0: setting tx_max = 184 [ 93.323962][ T3599] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 93.396086][ T3599] usb 2-1: USB disconnect, device number 5 [ 93.416774][ T3599] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM (NO ZLP) [ 93.623742][ T4611] loop2: detected capacity change from 0 to 32768 [ 93.860414][ T4611] XFS (loop2): Mounting V5 Filesystem [ 94.004094][ T4662] process 'syz.1.62' launched '/dev/fd/4' with NULL argv: empty string added [ 94.351995][ T4611] XFS (loop2): Starting recovery (logdev: internal) [ 94.575596][ T4611] XFS (loop2): Ending recovery (logdev: internal) [ 94.631733][ T4311] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 94.704508][ T4644] loop4: detected capacity change from 0 to 40427 [ 94.752317][ T4644] F2FS-fs (loop4): build fault injection attr: rate: 684, type: 0x3ffff [ 94.797040][ T4644] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0x35f7 [ 94.833170][ T4311] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 94.839517][ T4644] F2FS-fs (loop4): invalid crc value [ 94.857440][ T4311] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 94.893800][ T4311] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 94.907253][ T4644] F2FS-fs (loop4): Found nat_bits in checkpoint [ 94.926645][ T4311] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 94.955249][ T4311] usb 1-1: SerialNumber: syz [ 95.114749][ T4644] F2FS-fs (loop4): Start checkpoint disabled! [ 95.153820][ T4644] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 95.157565][ T4683] loop1: detected capacity change from 0 to 1024 [ 95.208246][ T4311] usb 1-1: 0:2 : does not exist [ 95.298843][ T4311] usb 1-1: USB disconnect, device number 2 [ 95.447703][ T26] audit: type=1800 audit(1776393771.269:2): pid=4683 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.68" name="file1" dev="loop1" ino=27 res=0 errno=0 [ 95.479610][ T4275] XFS (loop2): Unmounting Filesystem [ 95.565647][ T4644] syz.4.59: attempt to access beyond end of device [ 95.565647][ T4644] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 95.597190][ T4353] udevd[4353]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 95.723008][ T4429] hfsplus: b-tree write err: -5, ino 25 [ 95.735014][ T4429] hfsplus: b-tree write err: -5, ino 4 [ 95.763120][ T4429] hfsplus: b-tree write err: -5, ino 2 [ 95.790992][ T4429] hfsplus: b-tree write err: -5, ino 26 [ 95.810339][ T4429] hfsplus: b-tree write err: -5, ino 27 [ 95.825997][ T4285] Bluetooth: hci5: command 0x1003 tx timeout [ 95.833595][ T4283] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 96.077084][ T11] kworker/u4:1: attempt to access beyond end of device [ 96.077084][ T11] loop4: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 97.378447][ T4722] loop2: detected capacity change from 0 to 1024 [ 97.426816][ T4722] ext4: Unknown parameter 'nombcach' [ 97.460283][ T57] Bluetooth: (null): Invalid header checksum [ 97.489723][ T57] Bluetooth: (null): Invalid header checksum [ 97.722787][ T4729] loop0: detected capacity change from 0 to 32768 [ 97.764750][ T4731] loop1: detected capacity change from 0 to 2048 [ 97.803277][ T4729] Dev loop0 SGI disklabel: csum bad, label corrupted [ 97.879135][ T4731] Alternate GPT is invalid, using primary GPT. [ 97.941725][ T4731] loop1: p1 p2 p3 [ 98.218692][ T4741] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 98.275755][ T14] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 98.468426][ T14] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 98.488898][ T4443] udevd[4443]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 98.489533][ T4344] udevd[4344]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 98.535851][ T14] usb 1-1: config 0 has no interface number 0 [ 98.541218][ T4749] Illegal XDP return value 4294967274 on prog (id 4) dev syz_tun, expect packet loss! [ 98.548699][ T4353] udevd[4353]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 98.580579][ T14] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 98.615881][ T14] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.624044][ T14] usb 1-1: Product: syz [ 98.662540][ T14] usb 1-1: Manufacturer: syz [ 98.677588][ T14] usb 1-1: SerialNumber: syz [ 98.706674][ T14] usb 1-1: config 0 descriptor?? [ 98.919812][ T14] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 98.952529][ T14] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 98.982817][ T14] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 99.006101][ T14] usb 1-1: media controller created [ 99.075166][ T14] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 99.097694][ T4283] Bluetooth: hci2: command 0x0406 tx timeout [ 99.195845][ T14] i2c i2c-1: ec100: i2c rd failed=-32 reg=33 [ 99.555876][ T4311] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 99.747825][ T4311] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 99.774763][ T4311] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 99.820441][ T4311] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 99.867635][ T4311] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 99.898275][ T4311] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.927233][ T4311] usb 3-1: config 0 descriptor?? [ 100.304415][ T14] usb 1-1: USB disconnect, device number 3 [ 100.373020][ T4311] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 100.435838][ T4311] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 100.932166][ T4794] device vlan2 entered promiscuous mode [ 100.952393][ T4794] device bond0 entered promiscuous mode [ 100.962381][ T4796] loop5: detected capacity change from 0 to 128 [ 101.000955][ T4794] device bond_slave_0 entered promiscuous mode [ 101.062194][ T4796] ======================================================= [ 101.062194][ T4796] WARNING: The mand mount option has been deprecated and [ 101.062194][ T4796] and is ignored by this kernel. Remove the mand [ 101.062194][ T4796] option from the mount to silence this warning. [ 101.062194][ T4796] ======================================================= [ 101.105958][ T4794] device bond_slave_1 entered promiscuous mode [ 101.242014][ T4796] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 101.325252][ T4796] hpfs: filesystem error: improperly stopped [ 101.372551][ T4796] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 101.382578][ T4796] hpfs: You really don't want any checks? You are crazy... [ 101.408288][ T4796] hpfs: Code page index out of array [ 101.435533][ T4796] hpfs: code page support is disabled [ 101.494138][ T4796] hpfs: hpfs_map_4sectors(): unaligned read [ 101.507708][ T4796] hpfs: hpfs_map_4sectors(): unaligned read [ 101.524855][ T4796] hpfs: filesystem error: unable to find root dir [ 102.443856][ T4833] loop2: detected capacity change from 0 to 1024 [ 102.485370][ T4807] loop0: detected capacity change from 0 to 32768 [ 102.493330][ T4833] EXT4-fs: Ignoring removed orlov option [ 102.541426][ T14] usb 3-1: USB disconnect, device number 2 [ 102.642193][ T4807] XFS (loop0): Mounting V5 Filesystem [ 102.647650][ T4833] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 102.729021][ T4833] EXT4-fs (loop2): Online resizing not supported with bigalloc [ 102.835046][ T4275] EXT4-fs (loop2): unmounting filesystem. [ 102.853282][ T4807] XFS (loop0): Ending clean mount [ 102.999964][ T26] audit: type=1804 audit(1776393778.819:3): pid=4807 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.102" name="/newroot/19/file1/file1" dev="loop0" ino=6150 res=1 errno=0 [ 103.101732][ T4848] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.113'. [ 103.177410][ T4270] XFS (loop0): Unmounting Filesystem [ 104.163075][ T41] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 104.358979][ T41] usb 5-1: config index 0 descriptor too short (expected 45, got 36) [ 104.385412][ T41] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.415991][ T41] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.438796][ T41] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 104.461089][ T41] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 104.473530][ T41] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.484196][ T41] usb 5-1: config 0 descriptor?? [ 104.900530][ T41] plantronics 0003:047F:FFFF.0004: unknown main item tag 0xd [ 104.938477][ T41] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 104.974759][ T41] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 105.168695][ T41] usb 5-1: USB disconnect, device number 3 [ 105.198588][ T4889] loop5: detected capacity change from 0 to 2048 [ 105.250036][ T4894] loop2: detected capacity change from 0 to 512 [ 105.259988][ T4894] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 105.335559][ T4894] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.129: invalid indirect mapped block 4294967295 (level 1) [ 105.469001][ T4889] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 105.493171][ T4894] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.129: invalid indirect mapped block 4294967295 (level 1) [ 105.549923][ T4890] fido_id[4890]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 105.571573][ T4889] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 105.591438][ T4894] EXT4-fs (loop2): 2 truncates cleaned up [ 105.635608][ T4894] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 105.783722][ T4894] capability: warning: `syz.2.129' uses deprecated v2 capabilities in a way that may be insecure [ 106.006700][ T4908] loop4: detected capacity change from 0 to 1024 [ 106.048046][ T4362] EXT4-fs (loop5): unmounting filesystem. [ 106.089230][ T4275] EXT4-fs (loop2): unmounting filesystem. [ 106.347116][ T4381] hfsplus: b-tree write err: -5, ino 25 [ 106.353037][ T4381] hfsplus: b-tree write err: -5, ino 4 [ 106.407166][ T4381] hfsplus: b-tree write err: -5, ino 2 [ 106.628240][ T4927] netlink: 'syz.2.139': attribute type 4 has an invalid length. [ 106.678596][ T4927] netlink: 'syz.2.139': attribute type 4 has an invalid length. [ 106.703378][ T4930] loop0: detected capacity change from 0 to 8 [ 107.077508][ T4937] loop2: detected capacity change from 0 to 2048 [ 107.168051][ T4937] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 107.288239][ T26] audit: type=1800 audit(1776393783.109:4): pid=4937 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.143" name="file1" dev="loop2" ino=1367 res=0 errno=0 [ 107.709091][ T4958] loop4: detected capacity change from 0 to 128 [ 108.366053][ T4311] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 108.423869][ T4976] overlayfs: failed to clone upperpath [ 108.575916][ T4311] usb 5-1: Using ep0 maxpacket: 8 [ 108.600279][ T4311] usb 5-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 108.640239][ T4311] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.675198][ T4311] usb 5-1: Product: syz [ 108.681131][ T4311] usb 5-1: Manufacturer: syz [ 108.714309][ T4311] usb 5-1: SerialNumber: syz [ 109.219067][ T4991] loop5: detected capacity change from 0 to 64 [ 109.374680][ T4311] usb 5-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 109.394474][ T4311] usb 5-1: clock source 0 is not valid, cannot use [ 109.791865][ T4981] loop0: detected capacity change from 0 to 32768 [ 109.826614][ T4311] usb 5-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 109.857459][ T4311] usb 5-1: clock source 0 is not valid, cannot use [ 109.880728][ T4311] usb 5-1: 2:1: cannot get freq (v2/v3): err -71 [ 109.904424][ T4311] usb 5-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 109.968172][ T4311] usb 5-1: USB disconnect, device number 4 [ 109.973009][ T4981] XFS (loop0): Mounting V5 Filesystem [ 110.208412][ T5021] udevd[5021]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 110.255492][ T4981] XFS (loop0): Ending clean mount [ 110.278242][ T4981] XFS (loop0): Quotacheck needed: Please wait. [ 110.349051][ T4981] XFS (loop0): Quotacheck: Done. [ 110.515997][ T4311] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 110.583591][ T5032] netlink: 32 bytes leftover after parsing attributes in process `syz.4.168'. [ 110.646775][ T5032] netlink: 32 bytes leftover after parsing attributes in process `syz.4.168'. [ 110.669690][ T5032] Zero length message leads to an empty skb [ 110.707606][ T4311] usb 3-1: config index 0 descriptor too short (expected 45, got 36) [ 110.725915][ T4311] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.755151][ T4311] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 110.783968][ T4311] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 110.846730][ T4311] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 110.874596][ T4311] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.893446][ T4311] usb 3-1: config 0 descriptor?? [ 110.929846][ T4270] XFS (loop0): Unmounting Filesystem [ 111.336562][ T4311] plantronics 0003:047F:FFFF.0005: unknown main item tag 0xd [ 111.371627][ T4311] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 111.427673][ T4311] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 111.619887][ T4311] usb 3-1: USB disconnect, device number 3 [ 111.801175][ T5054] fido_id[5054]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 112.136574][ T5039] loop5: detected capacity change from 0 to 40427 [ 112.190433][ T5039] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 112.211467][ T5039] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 112.237815][ T5039] F2FS-fs (loop5): invalid crc value [ 112.304809][ T5039] F2FS-fs (loop5): Found nat_bits in checkpoint [ 112.485441][ T5039] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 112.505802][ T5039] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 112.554434][ T5053] loop4: detected capacity change from 0 to 32768 [ 112.637197][ T5053] (syz.4.174,5053,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 112.689375][ T26] audit: type=1804 audit(1776393788.509:5): pid=5039 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.169" name="/newroot/20/bus/bus" dev="loop5" ino=10 res=1 errno=0 [ 112.710182][ T5053] (syz.4.174,5053,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 112.958513][ T5053] JBD2: Ignoring recovery information on journal [ 113.070936][ T5053] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 113.235868][ T4343] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 113.341341][ T5087] Bluetooth: MGMT ver 1.22 [ 113.435832][ T4343] usb 3-1: Using ep0 maxpacket: 16 [ 113.442990][ T4343] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.488941][ T4343] usb 3-1: config 0 interface 0 has no altsetting 0 [ 113.513622][ T4343] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 113.557669][ T4343] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.595070][ T4343] usb 3-1: config 0 descriptor?? [ 114.010833][ T4278] ocfs2: Unmounting device (7,4) on (node local) [ 114.041992][ T4343] nzxt-smart2 0003:1E71:2009.0006: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.2-1/input0 [ 114.483705][ T4343] usb 3-1: USB disconnect, device number 4 [ 114.566094][ T5115] netlink: 8 bytes leftover after parsing attributes in process `syz.1.184'. [ 114.584475][ T5106] fido_id[5106]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 114.942955][ T5127] netlink: 'syz.0.188': attribute type 1 has an invalid length. [ 115.057468][ T5127] 8021q: adding VLAN 0 to HW filter on device bond1 [ 115.152251][ T5130] bond1: (slave gretap1): making interface the new active one [ 115.193558][ T5130] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 115.235445][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 115.723966][ T5150] loop2: detected capacity change from 0 to 512 [ 115.770739][ T5118] loop4: detected capacity change from 0 to 32768 [ 115.853375][ T5150] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 115.861234][ T5118] ocfs2: Slot 0 on device (7,4) was already allocated to this node! [ 115.882933][ T5150] ext4 filesystem being mounted at /42/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 115.905456][ T5118] JBD2: Ignoring recovery information on journal [ 116.024330][ T5118] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 116.047797][ T26] audit: type=1800 audit(1776393791.869:6): pid=5160 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.194" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 116.229090][ T4275] EXT4-fs (loop2): unmounting filesystem. [ 116.436348][ T4278] ocfs2: Unmounting device (7,4) on (node local) [ 117.128247][ T5152] loop0: detected capacity change from 0 to 32768 [ 117.214557][ T5152] JBD2: Ignoring recovery information on journal [ 117.328237][ T5152] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 117.395879][ T4343] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 117.537201][ T5152] (syz.0.195,5152,0):ocfs2_rename:1687 ERROR: status = -39 [ 117.633564][ T4343] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.670595][ T4343] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 117.719865][ T4343] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.739613][ T4270] ocfs2: Unmounting device (7,0) on (node local) [ 117.781910][ T4343] usb 6-1: config 0 descriptor?? [ 117.951776][ T5171] loop4: detected capacity change from 0 to 32768 [ 118.006304][ T4343] usbhid 6-1:0.0: can't add hid device: -71 [ 118.012459][ T4343] usbhid: probe of 6-1:0.0 failed with error -71 [ 118.032355][ T5171] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.198 (5171) [ 118.076190][ T4343] usb 6-1: USB disconnect, device number 2 [ 118.170738][ T5171] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 118.250479][ T5171] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 118.269585][ T5171] BTRFS info (device loop4): force clearing of disk cache [ 118.289796][ T5171] BTRFS info (device loop4): metadata ratio 0 [ 118.315966][ T5171] BTRFS info (device loop4): enabling ssd optimizations [ 118.349724][ T5171] BTRFS info (device loop4): using spread ssd allocation scheme [ 118.400607][ T5171] BTRFS info (device loop4): using free space tree [ 118.606483][ T4343] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 118.805880][ T4343] usb 6-1: Using ep0 maxpacket: 32 [ 118.813134][ T4343] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.823561][ T5171] BTRFS info (device loop4): rebuilding free space tree [ 118.835887][ T4343] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 118.855178][ T4343] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.918130][ T4343] usb 6-1: config 0 descriptor?? [ 118.989493][ T4343] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 119.133979][ T4343] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 119.172147][ C1] ldusb 6-1:0.0: Ring buffer overflow, 8 bytes dropped [ 119.313552][ T4278] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 119.487971][ C1] ldusb 6-1:0.0: Ring buffer overflow, 8 bytes dropped [ 119.719777][ T4353] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 10 /dev/loop4 scanned by udevd (4353) [ 120.626819][ T4274] usb 6-1: USB disconnect, device number 3 [ 120.649417][ T4274] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 121.138500][ T5302] netlink: 'syz.4.225': attribute type 29 has an invalid length. [ 121.203892][ T5302] netlink: 'syz.4.225': attribute type 29 has an invalid length. [ 121.664386][ T5322] overlayfs: failed to decode file handle (len=8, type=251, flags=0, err=-61) [ 122.155873][ T5261] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 122.339843][ T5344] netlink: 27 bytes leftover after parsing attributes in process `syz.1.239'. [ 122.361504][ T5261] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.394299][ T5261] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 122.427318][ T5261] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 122.452321][ T5261] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.480185][ T5261] usb 1-1: Product: syz [ 122.504981][ T5261] usb 1-1: Manufacturer: syz [ 122.515816][ T5261] usb 1-1: SerialNumber: syz [ 122.558228][ T5261] cdc_mbim 1-1:1.0: skipping garbage [ 122.788102][ T5329] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 123.166619][ T5363] overlayfs: failed to clone upperpath [ 123.353574][ T5334] loop4: detected capacity change from 0 to 40427 [ 123.400854][ T5329] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 123.401771][ T5334] F2FS-fs (loop4): invalid crc value [ 123.418936][ T5261] cdc_mbim 1-1:1.0: setting tx_max = 184 [ 123.438282][ T5261] cdc_mbim 1-1:1.0: cdc-wdm0: USB WDM device [ 123.460747][ T5334] F2FS-fs (loop4): Found nat_bits in checkpoint [ 123.463633][ T5348] loop5: detected capacity change from 0 to 32768 [ 123.588228][ T5261] cdc_mbim 1-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.0-1, CDC MBIM, 16:49:3a:9e:5e:eb [ 123.658345][ T5334] F2FS-fs (loop4): Start checkpoint disabled! [ 123.684363][ T5261] usb 1-1: USB disconnect, device number 4 [ 123.692478][ T5261] cdc_mbim 1-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.0-1, CDC MBIM [ 123.700376][ T5334] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 123.711242][ T5348] XFS (loop5): Mounting V5 Filesystem [ 123.882337][ T5348] XFS (loop5): Ending clean mount [ 124.165626][ T4362] XFS (loop5): Unmounting Filesystem [ 124.423030][ T4278] syz-executor: attempt to access beyond end of device [ 124.423030][ T4278] loop4: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 124.497739][ T4278] syz-executor: attempt to access beyond end of device [ 124.497739][ T4278] loop4: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 124.530312][ T5405] loop0: detected capacity change from 0 to 512 [ 124.632785][ T5405] EXT4-fs error (device loop0): ext4_orphan_get:1405: inode #15: comm syz.0.255: inode has both inline data and extents flags [ 124.716047][ T5405] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.255: couldn't read orphan inode 15 (err -117) [ 124.765784][ T5405] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 124.852080][ T5405] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 7934 vs 220 free clusters [ 124.876765][ T9] kworker/u4:0: attempt to access beyond end of device [ 124.876765][ T9] loop4: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 124.965849][ T5414] netlink: 12 bytes leftover after parsing attributes in process `syz.5.253'. [ 125.127160][ T4270] EXT4-fs (loop0): unmounting filesystem. [ 125.465545][ T46] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.689228][ T46] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.765783][ T5422] netlink: 8 bytes leftover after parsing attributes in process `syz.0.259'. [ 125.907910][ T46] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.082633][ T46] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.882708][ T5436] loop2: detected capacity change from 0 to 256 [ 126.965176][ T5436] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d) [ 127.859045][ T4285] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 127.869008][ T4285] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 127.877469][ T4285] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 127.884804][ T5460] loop0: detected capacity change from 0 to 1024 [ 127.893307][ T4285] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 127.903413][ T4285] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 127.921215][ T4285] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 128.075408][ T5460] hfsplus: can't free extent [ 128.909378][ T5484] sctp: [Deprecated]: syz.0.278 (pid 5484) Use of int in max_burst socket option deprecated. [ 128.909378][ T5484] Use struct sctp_assoc_value instead [ 129.133068][ T5470] loop5: detected capacity change from 0 to 32768 [ 129.314737][ T5470] XFS (loop5): Mounting V5 Filesystem [ 129.401745][ T46] device hsr_slave_0 left promiscuous mode [ 129.421977][ T5506] loop0: detected capacity change from 0 to 2048 [ 129.476748][ T46] device hsr_slave_1 left promiscuous mode [ 129.491218][ T5506] Alternate GPT is invalid, using primary GPT. [ 129.504596][ T5470] XFS (loop5): Ending clean mount [ 129.517331][ T5506] loop0: p2 p3 p7 [ 129.523014][ T5470] XFS (loop5): Quotacheck needed: Please wait. [ 129.623429][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 129.646050][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 129.653274][ T5470] XFS (loop5): Quotacheck: Done. [ 129.683056][ T26] audit: type=1800 audit(1776393805.499:7): pid=5470 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.274" name="file1" dev="loop5" ino=4422 res=0 errno=0 [ 129.712155][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 129.769077][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 129.788572][ T26] audit: type=1800 audit(1776393805.609:8): pid=5514 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.274" name="file1" dev="loop5" ino=4422 res=0 errno=0 [ 129.863690][ T46] device bridge_slave_1 left promiscuous mode [ 129.915909][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.957335][ T46] device bridge_slave_0 left promiscuous mode [ 129.963710][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.976943][ T4283] Bluetooth: hci4: command 0x0409 tx timeout [ 130.037819][ T4362] XFS (loop5): Unmounting Filesystem [ 130.090105][ T5022] udevd[5022]: inotify_add_watch(7, /dev/loop0p7, 10) failed: No such file or directory [ 130.100793][ T4784] udevd[4784]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 130.110472][ T4353] udevd[4353]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 130.147267][ T46] device veth1_macvtap left promiscuous mode [ 130.170364][ T46] device veth0_macvtap left promiscuous mode [ 130.212884][ T4784] udevd[4784]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 130.213076][ T5022] udevd[5022]: inotify_add_watch(7, /dev/loop0p7, 10) failed: No such file or directory [ 130.235151][ T46] device veth1_vlan left promiscuous mode [ 130.250629][ T4353] udevd[4353]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 130.263091][ T46] device veth0_vlan left promiscuous mode [ 130.451735][ T4283] Bluetooth: hci0: link tx timeout [ 130.459031][ T4283] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 130.496049][ T4283] Bluetooth: hci0: link tx timeout [ 130.501270][ T4283] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 131.674757][ T5548] loop7: detected capacity change from 0 to 7 [ 131.720850][ T5548] Dev loop7: unable to read RDB block 7 [ 131.727026][ T5548] loop7: unable to read partition table [ 131.733311][ T5548] loop7: partition table beyond EOD, truncated [ 131.762466][ T5548] loop_reread_partitions: partition scan of loop7 (þ被xü—ŸÑà0–š<¨â·û) failed (rc=-5) [ 131.951243][ T46] team0 (unregistering): Port device team_slave_1 removed [ 132.030535][ T46] team0 (unregistering): Port device team_slave_0 removed [ 132.060872][ T4283] Bluetooth: hci4: command 0x041b tx timeout [ 132.139124][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 132.206401][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 132.536322][ T4283] Bluetooth: hci0: command 0x0406 tx timeout [ 132.675370][ T46] bond0 (unregistering): Released all slaves [ 132.844326][ T5455] chnl_net:caif_netlink_parms(): no params data found [ 132.885991][ T5533] device batadv_slave_0 entered promiscuous mode [ 132.934400][ T4283] Bluetooth: hci0: link tx timeout [ 132.939896][ T4283] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 132.975068][ T5537] device batadv_slave_0 left promiscuous mode [ 133.007894][ T5539] device batadv_slave_1 entered promiscuous mode [ 133.019911][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.025493][ T5543] device batadv_slave_1 left promiscuous mode [ 133.028587][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.205954][ T5455] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.213138][ T5455] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.327101][ T5455] device bridge_slave_0 entered promiscuous mode [ 133.352338][ T5455] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.379643][ T5455] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.407073][ T5455] device bridge_slave_1 entered promiscuous mode [ 133.587435][ T5455] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 133.643612][ T5455] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 134.595668][ C0] sched: RT throttling activated [ 134.596421][ T4283] Bluetooth: hci4: command 0x040f tx timeout [ 134.805068][ T5455] team0: Port device team_slave_0 added [ 134.849354][ T5455] team0: Port device team_slave_1 added [ 135.052633][ T5455] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 135.100493][ T5455] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 135.157408][ T5579] loop0: detected capacity change from 0 to 32768 [ 135.298030][ T5579] XFS (loop0): Mounting V5 Filesystem [ 135.328109][ T5455] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 135.436446][ T5455] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 135.459112][ T5579] XFS (loop0): Ending clean mount [ 135.524889][ T5455] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 135.719143][ T5455] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 135.814099][ T5592] loop2: detected capacity change from 0 to 262144 [ 135.836156][ T5592] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop2 scanned by syz.2.307 (5592) [ 135.869832][ T5592] BTRFS info (device loop2): first mount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 135.880118][ T5592] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 135.889559][ T5592] BTRFS info (device loop2): using free space tree [ 135.926315][ T4270] XFS (loop0): Unmounting Filesystem [ 136.025462][ T5455] device hsr_slave_0 entered promiscuous mode [ 136.075992][ T5455] device hsr_slave_1 entered promiscuous mode [ 136.089150][ T26] audit: type=1326 audit(1776393811.909:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5619 comm="syz.1.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f381593db99 code=0x7ffc0000 [ 136.161304][ T5455] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 136.183774][ T5455] Cannot create hsr debugfs directory [ 136.193486][ T26] audit: type=1326 audit(1776393811.939:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5619 comm="syz.1.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f381593db99 code=0x7ffc0000 [ 136.219464][ T26] audit: type=1326 audit(1776393811.939:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5619 comm="syz.1.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f381593db99 code=0x7ffc0000 [ 136.255012][ T4283] Bluetooth: hci0: link tx timeout [ 136.260242][ T4283] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 136.358429][ T26] audit: type=1326 audit(1776393811.939:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5619 comm="syz.1.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f381593db99 code=0x7ffc0000 [ 136.428063][ T26] audit: type=1326 audit(1776393811.939:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5619 comm="syz.1.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f381593db99 code=0x7ffc0000 [ 136.476112][ T26] audit: type=1326 audit(1776393811.939:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5619 comm="syz.1.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f381593db99 code=0x7ffc0000 [ 137.030733][ T5640] loop5: detected capacity change from 0 to 131072 [ 137.047694][ T4283] Bluetooth: hci4: command 0x0419 tx timeout [ 137.070638][ T5640] F2FS-fs (loop5): Wrong CP boundary, start(512) end(1536) blocks(0) [ 137.078900][ T5640] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 137.105362][ T5592] BTRFS error (device loop2): open_ctree failed: -22 [ 137.124170][ T5640] F2FS-fs (loop5): invalid crc value [ 137.190402][ T5640] F2FS-fs (loop5): Found nat_bits in checkpoint [ 137.237446][ T5640] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 137.244543][ T5640] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 137.274222][ T26] audit: type=1326 audit(1776393811.939:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5619 comm="syz.1.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f381593db99 code=0x7ffc0000 [ 137.562878][ T26] audit: type=1326 audit(1776393811.939:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5619 comm="syz.1.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f381593db99 code=0x7ffc0000 [ 137.736013][ T4784] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop2 scanned by udevd (4784) [ 137.806810][ T26] audit: type=1326 audit(1776393811.939:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5619 comm="syz.1.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f381593db99 code=0x7ffc0000 [ 137.895514][ T5455] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 137.986401][ T26] audit: type=1326 audit(1776393811.939:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5619 comm="syz.1.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f381593db99 code=0x7ffc0000 [ 138.034321][ T5455] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 138.074932][ T5455] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 138.134140][ T5455] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 138.232443][ T5619] delete_channel: no stack [ 138.567552][ T5455] 8021q: adding VLAN 0 to HW filter on device bond0 [ 138.696859][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 138.735942][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 138.781576][ T5455] 8021q: adding VLAN 0 to HW filter on device team0 [ 138.833852][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 138.882881][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 138.897008][ T5672] overlayfs: failed to clone upperpath [ 138.921905][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.929163][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 138.996348][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 139.075078][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 139.106605][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 139.142170][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.149412][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 139.224257][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 139.256706][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 139.300484][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 139.341671][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 139.391771][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 139.441925][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 139.484433][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 139.529672][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 139.591335][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 139.641799][ T5455] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 139.683093][ T5455] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 139.726705][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 139.734858][ T5654] loop2: detected capacity change from 0 to 32768 [ 139.746863][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 139.851783][ T5654] XFS (loop2): Mounting V5 Filesystem [ 139.905335][ T5654] XFS (loop2): Ending clean mount [ 140.544028][ T4275] XFS (loop2): Unmounting Filesystem [ 140.771526][ T4283] Bluetooth: hci0: link tx timeout [ 140.776793][ T4283] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 140.828514][ T4283] Bluetooth: hci0: link tx timeout [ 140.833721][ T4283] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 141.055905][ T1107] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 141.064012][ T1107] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 141.101366][ T5455] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 142.234361][ T5747] netlink: 104 bytes leftover after parsing attributes in process `syz.5.340'. [ 142.517221][ T5753] netlink: 4 bytes leftover after parsing attributes in process `syz.0.342'. [ 143.041051][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 143.060179][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 144.155803][ T4283] Bluetooth: hci0: link tx timeout [ 144.161041][ T4283] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 144.534295][ T5455] device veth0_vlan entered promiscuous mode [ 144.635031][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 144.659625][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 144.719480][ T5455] device veth1_vlan entered promiscuous mode [ 144.768102][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 144.788175][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 144.908066][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 144.938393][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 145.002068][ T5455] device veth0_macvtap entered promiscuous mode [ 145.039128][ T5455] device veth1_macvtap entered promiscuous mode [ 145.134631][ T5455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 145.208905][ T5455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.253978][ T5764] loop0: detected capacity change from 0 to 262144 [ 145.259909][ T5455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 145.366003][ T5764] BTRFS info (device loop0): first mount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 145.376373][ T5764] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 145.385821][ T5764] BTRFS info (device loop0): using free space tree [ 145.431403][ T5455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.508971][ T5455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 145.637864][ T5455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.708028][ T5455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 145.763437][ T5764] BTRFS info (device loop0): enabling ssd optimizations [ 145.805740][ T5455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.867986][ T5455] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 145.931448][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 145.983544][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 146.017819][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 146.063294][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 146.096818][ T4274] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 146.150771][ T5455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 146.183242][ T5813] loop5: detected capacity change from 0 to 2048 [ 146.195843][ T5455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.204302][ T4274] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 146.241149][ T5455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 146.312253][ T5455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.323320][ T5813] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 146.352634][ T5455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 146.383469][ T5455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.416035][ T5455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 146.457373][ T5455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.496134][ T5818] fido_id[5818]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 146.529208][ T5455] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 146.586085][ T5816] netlink: 28 bytes leftover after parsing attributes in process `syz.1.355'. [ 146.637631][ T5816] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.640559][ T4270] BTRFS info (device loop0): last unmount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 146.678663][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 146.694997][ T4362] EXT4-fs (loop5): unmounting filesystem. [ 146.716571][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 146.790575][ T5455] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.838310][ T5455] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.884399][ T5455] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.912259][ T5455] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.978368][ T5827] netlink: 27 bytes leftover after parsing attributes in process `syz.5.358'. [ 147.211971][ T4283] Bluetooth: hci0: link tx timeout [ 147.217216][ T4283] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 147.245293][ T5811] loop2: detected capacity change from 0 to 32768 [ 147.372221][ T5811] XFS (loop2): Mounting V5 Filesystem [ 147.451921][ T5811] XFS (loop2): Ending clean mount [ 147.464991][ T1107] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 147.513830][ T4353] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 10 /dev/loop0 scanned by udevd (4353) [ 147.536685][ T1107] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 147.587867][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 147.614922][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 147.632273][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 147.669264][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 147.754270][ T4275] XFS (loop2): Unmounting Filesystem [ 148.262295][ T5868] netlink: 'syz.5.365': attribute type 3 has an invalid length. [ 148.344256][ T26] kauditd_printk_skb: 130 callbacks suppressed [ 148.344273][ T26] audit: type=1326 audit(1776393824.159:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5866 comm="syz.6.364" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6089f9c819 code=0x0 [ 148.372218][ C0] vkms_vblank_simulate: vblank timer overrun [ 148.493441][ T5877] sctp: [Deprecated]: syz.0.367 (pid 5877) Use of struct sctp_assoc_value in delayed_ack socket option. [ 148.493441][ T5877] Use struct sctp_sack_info instead [ 148.683894][ T5886] overlayfs: failed to clone upperpath [ 149.228008][ T26] audit: type=1326 audit(1776393825.049:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5898 comm="syz.2.375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a21b9c819 code=0x7ffc0000 [ 149.366124][ T26] audit: type=1326 audit(1776393825.049:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5898 comm="syz.2.375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0a21b3db99 code=0x7ffc0000 [ 149.499492][ T26] audit: type=1326 audit(1776393825.049:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5898 comm="syz.2.375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0a21b3db99 code=0x7ffc0000 [ 149.521786][ C0] vkms_vblank_simulate: vblank timer overrun [ 149.637414][ T26] audit: type=1326 audit(1776393825.049:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5898 comm="syz.2.375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a21b9c819 code=0x7ffc0000 [ 149.659588][ C0] vkms_vblank_simulate: vblank timer overrun [ 149.780557][ T26] audit: type=1326 audit(1776393825.079:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5898 comm="syz.2.375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0a21b3db99 code=0x7ffc0000 [ 149.893696][ T26] audit: type=1326 audit(1776393825.079:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5898 comm="syz.2.375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a21b9c819 code=0x7ffc0000 [ 150.001085][ T26] audit: type=1326 audit(1776393825.079:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5898 comm="syz.2.375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0a21b3db99 code=0x7ffc0000 [ 150.023306][ C0] vkms_vblank_simulate: vblank timer overrun [ 150.245879][ T26] audit: type=1326 audit(1776393825.079:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5898 comm="syz.2.375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0a21b3db99 code=0x7ffc0000 [ 150.358073][ T5921] netlink: 28 bytes leftover after parsing attributes in process `syz.0.381'. [ 150.376241][ T26] audit: type=1326 audit(1776393825.079:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5898 comm="syz.2.375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0a21b3db99 code=0x7ffc0000 [ 150.466935][ T5921] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.837498][ T5897] loop5: detected capacity change from 0 to 32768 [ 150.910771][ T5897] XFS: attr2 mount option is deprecated. [ 151.006882][ T5898] delete_channel: no stack [ 151.072210][ T5897] XFS (loop5): Mounting V5 Filesystem [ 151.291151][ T5897] XFS (loop5): Ending clean mount [ 151.329506][ T5897] XFS (loop5): Quotacheck needed: Please wait. [ 151.394012][ T5897] XFS (loop5): Quotacheck: Done. [ 151.452230][ T5955] loop0: detected capacity change from 0 to 256 [ 151.728071][ T4362] XFS (loop5): Unmounting Filesystem [ 152.313067][ T5976] overlayfs: failed to clone upperpath [ 152.395767][ T5833] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 152.413328][ T5980] loop0: detected capacity change from 0 to 1024 [ 152.470594][ T5980] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 152.610104][ T5980] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 152.627353][ T5833] usb 7-1: config 0 has no interfaces? [ 152.635066][ T5833] usb 7-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 152.650712][ T5833] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.661464][ T5833] usb 7-1: Product: syz [ 152.665862][ T5833] usb 7-1: Manufacturer: syz [ 152.670586][ T5833] usb 7-1: SerialNumber: syz [ 152.677466][ T5833] usb 7-1: config 0 descriptor?? [ 152.774017][ T5994] sctp: [Deprecated]: syz.1.403 (pid 5994) Use of struct sctp_assoc_value in delayed_ack socket option. [ 152.774017][ T5994] Use struct sctp_sack_info instead [ 152.863319][ T4270] EXT4-fs (loop0): unmounting filesystem. [ 153.171816][ T4283] Bluetooth: hci0: link tx timeout [ 153.177170][ T4283] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.204067][ T129] usb 7-1: USB disconnect, device number 2 [ 155.412518][ T6067] loop6: detected capacity change from 0 to 4096 [ 155.662800][ T6081] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 156.064475][ T4283] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 156.073267][ T4283] Bluetooth: hci1: Injecting HCI hardware error event [ 156.083219][ T4285] Bluetooth: hci1: hardware error 0x00 [ 156.353686][ T6097] loop6: detected capacity change from 0 to 2048 [ 156.411166][ T6097] Alternate GPT is invalid, using primary GPT. [ 156.427175][ T6097] loop6: p1 p2 p3 [ 156.827233][ T5022] udevd[5022]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 156.838256][ T4784] udevd[4784]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 156.846440][ T4353] udevd[4353]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 156.858784][ T4311] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 157.053567][ T4311] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 157.091135][ T4311] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 157.103503][ T4283] Bluetooth: hci0: link tx timeout [ 157.108751][ T4283] Bluetooth: hci0: killing stalled connection 10:aa:aa:aa:aa:aa [ 157.117595][ T4283] Bluetooth: hci0: link tx timeout [ 157.122806][ T4283] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 157.146038][ T4311] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 157.182949][ T4311] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 157.192344][ T4311] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.200557][ T4311] usb 6-1: Product: syz [ 157.204937][ T4311] usb 6-1: Manufacturer: syz [ 157.209754][ T4283] Bluetooth: hci0: link tx timeout [ 157.214958][ T4283] Bluetooth: hci0: killing stalled connection 10:aa:aa:aa:aa:aa [ 157.222782][ T4283] Bluetooth: hci0: link tx timeout [ 157.228092][ T4283] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 157.236758][ T4311] usb 6-1: SerialNumber: syz [ 157.255951][ T6106] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 157.384522][ T6120] fuse: Bad value for 'fd' [ 157.476431][ T6106] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 157.504194][ T6106] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 158.139276][ T6106] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 158.156051][ T6106] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 158.204245][ T6142] netlink: 8 bytes leftover after parsing attributes in process `syz.6.449'. [ 158.216134][ T4285] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 158.265804][ T6142] netlink: 12 bytes leftover after parsing attributes in process `syz.6.449'. [ 158.325230][ T6142] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 158.334684][ T6142] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 158.343572][ T6142] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 158.352443][ T6142] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 158.390118][ T4311] cdc_ncm 6-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 158.400690][ T4311] cdc_ncm 6-1:1.0: setting tx_max = 184 [ 158.493210][ T6142] netlink: 8 bytes leftover after parsing attributes in process `syz.6.449'. [ 158.523360][ T6142] netlink: 12 bytes leftover after parsing attributes in process `syz.6.449'. [ 158.594764][ T4311] cdc_ncm 6-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.5-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 158.676099][ T4311] usb 6-1: USB disconnect, device number 5 [ 158.694569][ T4311] cdc_ncm 6-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.5-1, CDC NCM (NO ZLP) [ 159.015932][ T4283] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 159.024950][ T4283] Bluetooth: hci0: Injecting HCI hardware error event [ 159.035198][ T4284] Bluetooth: hci0: hardware error 0x00 [ 160.296387][ T6194] loop6: detected capacity change from 0 to 32768 [ 160.341738][ T6194] Dev loop6 SGI disklabel: csum bad, label corrupted [ 160.539185][ T6208] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 160.695892][ T4285] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 161.176105][ T4284] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 161.678407][ T6247] loop0: detected capacity change from 0 to 128 [ 161.745027][ T6247] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 161.785939][ T6247] hpfs: filesystem error: improperly stopped [ 161.805854][ T6247] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 161.856899][ T6247] hpfs: You really don't want any checks? You are crazy... [ 161.864185][ T6247] hpfs: Code page index out of array [ 161.925812][ T6247] hpfs: code page support is disabled [ 161.946837][ T6247] hpfs: hpfs_map_4sectors(): unaligned read [ 161.974989][ T6247] hpfs: hpfs_map_4sectors(): unaligned read [ 161.985053][ T6247] hpfs: filesystem error: unable to find root dir [ 163.120660][ T5646] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 163.182980][ T6291] netlink: 4 bytes leftover after parsing attributes in process `syz.0.493'. [ 163.223147][ T6291] device bridge_slave_1 left promiscuous mode [ 163.265015][ T6291] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.289306][ T6291] device bridge_slave_0 left promiscuous mode [ 163.303846][ T6291] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.324591][ T5646] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 163.347338][ T5646] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 163.388048][ T5646] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 163.424866][ T5646] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 163.454872][ T5646] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.480249][ T5646] usb 7-1: Product: syz [ 163.494752][ T5646] usb 7-1: Manufacturer: syz [ 163.513275][ T5646] usb 7-1: SerialNumber: syz [ 163.554535][ T6283] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 163.779191][ T6283] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 163.797413][ T6283] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 163.864905][ T6307] "syz.1.497" (6307) uses obsolete ecb(arc4) skcipher [ 164.035929][ T26] kauditd_printk_skb: 220 callbacks suppressed [ 164.035981][ T26] audit: type=1326 audit(1776393839.859:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6312 comm="syz.0.500" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb9bdd9c819 code=0x0 [ 164.394528][ T6303] loop5: detected capacity change from 0 to 32768 [ 164.470957][ T6283] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 164.490365][ T6283] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 164.511724][ T6303] XFS (loop5): Mounting V5 Filesystem [ 164.637399][ T6303] XFS (loop5): Starting recovery (logdev: internal) [ 164.660951][ T6303] XFS (loop5): Ending recovery (logdev: internal) [ 164.714295][ T5646] cdc_ncm 7-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 164.730070][ T5646] cdc_ncm 7-1:1.0: setting tx_max = 184 [ 164.955687][ T5646] cdc_ncm 7-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.6-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 165.010201][ T4362] XFS (loop5): Unmounting Filesystem [ 165.047639][ T5646] usb 7-1: USB disconnect, device number 3 [ 165.054254][ T5646] cdc_ncm 7-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.6-1, CDC NCM (NO ZLP) [ 165.465414][ T6356] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 165.548573][ T6356] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 165.620121][ T6356] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 165.710871][ T6356] device bridge_slave_0 left promiscuous mode [ 165.738541][ T6356] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.807532][ T6361] loop0: detected capacity change from 0 to 512 [ 165.841623][ T6356] device bridge_slave_1 left promiscuous mode [ 165.916950][ T6356] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.061883][ T6356] bond0: (slave bond_slave_0): Releasing backup interface [ 166.185380][ T6356] bond0: (slave bond_slave_1): Releasing backup interface [ 166.496139][ T6356] team0: Port device team_slave_0 removed [ 166.587693][ T6356] team0: Port device team_slave_1 removed [ 166.612265][ T6356] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 166.651700][ T6356] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 166.681613][ T6356] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 166.699569][ T6356] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 166.973569][ T6386] loop5: detected capacity change from 0 to 512 [ 167.035950][ T6389] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.042051][ T6386] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 167.043480][ T6389] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.074596][ T6389] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.083141][ T6389] bridge0: port 2(bridge_slave_1) entered forwarding state [ 167.093136][ T6389] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.100485][ T6389] bridge0: port 1(bridge_slave_0) entered forwarding state [ 167.160954][ T6389] team0: Port device bridge0 added [ 167.553034][ T4362] EXT4-fs (loop5): unmounting filesystem. [ 167.572906][ T6406] device vlan2 entered promiscuous mode [ 167.637346][ T6406] device bond0 entered promiscuous mode [ 167.642966][ T6406] device bond_slave_0 entered promiscuous mode [ 167.715931][ T6406] device bond_slave_1 entered promiscuous mode [ 168.171882][ T6421] netlink: 32 bytes leftover after parsing attributes in process `syz.6.527'. [ 168.243105][ T6426] netlink: 32 bytes leftover after parsing attributes in process `syz.6.527'. [ 168.330396][ T6429] netlink: 8 bytes leftover after parsing attributes in process `syz.5.529'. [ 168.343460][ T6429] netlink: 8 bytes leftover after parsing attributes in process `syz.5.529'. [ 168.352840][ T6429] netlink: 8 bytes leftover after parsing attributes in process `syz.5.529'. [ 168.658845][ T6434] loop5: detected capacity change from 0 to 512 [ 168.715514][ T6403] loop0: detected capacity change from 0 to 32768 [ 168.740148][ T6434] EXT4-fs error (device loop5): ext4_orphan_get:1405: inode #15: comm syz.5.531: iget: bad i_size value: 38620345925642 [ 168.796136][ T6434] EXT4-fs error (device loop5): ext4_orphan_get:1410: comm syz.5.531: couldn't read orphan inode 15 (err -117) [ 168.843793][ T6403] XFS (loop0): Mounting V5 Filesystem [ 168.873450][ T6434] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 169.151770][ T6403] XFS (loop0): Starting recovery (logdev: internal) [ 169.203898][ T6403] XFS (loop0): Ending recovery (logdev: internal) [ 169.494217][ T4270] XFS (loop0): Unmounting Filesystem [ 169.739106][ T4362] EXT4-fs (loop5): unmounting filesystem. [ 170.904151][ T4283] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 170.918959][ T4283] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 170.928601][ T4283] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 170.946606][ T4285] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 170.952910][ T6484] netlink: 8 bytes leftover after parsing attributes in process `syz.1.544'. [ 170.964853][ T4285] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 170.968629][ T6484] netlink: 8 bytes leftover after parsing attributes in process `syz.1.544'. [ 170.982516][ T4285] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 170.983009][ T6484] netlink: 8 bytes leftover after parsing attributes in process `syz.1.544'. [ 171.133386][ T6467] loop6: detected capacity change from 0 to 32768 [ 171.242138][ T6467] XFS (loop6): Mounting V5 Filesystem [ 171.385813][ T6467] XFS (loop6): Ending clean mount [ 171.420143][ T6467] XFS (loop6): Quotacheck needed: Please wait. [ 171.481767][ T6467] XFS (loop6): Quotacheck: Done. [ 171.734782][ T6480] chnl_net:caif_netlink_parms(): no params data found [ 171.791767][ T5455] XFS (loop6): Unmounting Filesystem [ 171.831653][ T6511] xt_hashlimit: size too large, truncated to 1048576 [ 172.015087][ T6480] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.089995][ T6480] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.126985][ T6480] device bridge_slave_0 entered promiscuous mode [ 172.150537][ T6480] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.205939][ T6480] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.234699][ T6480] device bridge_slave_1 entered promiscuous mode [ 172.352154][ T6480] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 172.392807][ T6480] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 172.502593][ T6480] team0: Port device team_slave_0 added [ 172.542011][ T6480] team0: Port device team_slave_1 added [ 172.583730][ T6480] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 172.614225][ T5646] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 172.628963][ T6480] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 172.637614][ T6500] loop0: detected capacity change from 0 to 32768 [ 172.736678][ T6500] (syz.0.536,6500,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 172.741589][ T6480] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 172.796385][ T6500] (syz.0.536,6500,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 172.803025][ T6480] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 172.855757][ T6480] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 172.885195][ T5646] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 172.905069][ T6500] JBD2: Ignoring recovery information on journal [ 172.909196][ T5646] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 172.942226][ T6480] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 172.969615][ T4284] Bluetooth: hci4: link tx timeout [ 172.975191][ T4284] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 173.015771][ T4284] Bluetooth: hci0: command 0x0409 tx timeout [ 173.032002][ T6500] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 173.034653][ T5646] usb 7-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 173.145763][ T5646] usb 7-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 173.153862][ T5646] usb 7-1: Manufacturer: syz [ 173.230818][ T5646] usb 7-1: config 0 descriptor?? [ 173.254238][ T6480] device hsr_slave_0 entered promiscuous mode [ 173.287019][ T6480] device hsr_slave_1 entered promiscuous mode [ 173.303895][ T6480] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 173.355711][ T6480] Cannot create hsr debugfs directory [ 173.600455][ T4270] ocfs2: Unmounting device (7,0) on (node local) [ 173.873006][ T6480] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.029466][ T6480] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.129177][ T6480] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.232775][ T6480] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.295012][ T5646] uclogic 0003:256C:006D.0008: v1 frame probing failed: -71 [ 174.305041][ T5646] uclogic 0003:256C:006D.0008: failed probing parameters: -71 [ 174.325294][ T5646] uclogic: probe of 0003:256C:006D.0008 failed with error -71 [ 174.366133][ T5646] usb 7-1: USB disconnect, device number 4 [ 174.563573][ T6480] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 174.575011][ T6480] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 174.590873][ T6480] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 174.604005][ T6480] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 174.764655][ T6480] 8021q: adding VLAN 0 to HW filter on device bond0 [ 174.780871][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 174.811162][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 174.848715][ T6480] 8021q: adding VLAN 0 to HW filter on device team0 [ 174.875448][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 174.897893][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 174.928758][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.936059][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.002357][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 175.015844][ T4284] Bluetooth: hci4: command 0x0406 tx timeout [ 175.042439][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 175.087233][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 175.095866][ T4284] Bluetooth: hci0: command 0x041b tx timeout [ 175.136192][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.143370][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.232243][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 175.277543][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 175.297760][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 175.349319][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 175.418268][ T6562] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 175.445518][ T6562] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 175.494640][ T6562] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 175.564511][ T6562] bond0: (slave bond_slave_0): Releasing backup interface [ 175.637007][ T6562] bond0: (slave bond_slave_1): Releasing backup interface [ 175.645127][ T26] audit: type=1326 audit(1776393851.459:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6566 comm="syz.6.556" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6089f9c819 code=0x0 [ 175.866251][ T6562] team0: Port device team_slave_0 removed [ 175.956437][ T6562] team0: Port device team_slave_1 removed [ 175.966377][ T6562] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 175.996307][ T6562] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 176.022271][ T6562] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 176.055395][ T6562] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 176.172516][ T6562] bond1: (slave gretap1): Releasing active interface [ 176.239508][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 176.263788][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 176.310719][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 176.360110][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 176.405493][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 176.446682][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 176.466327][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 176.530665][ T6480] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 176.927856][ T4284] Bluetooth: hci4: link tx timeout [ 176.933059][ T4284] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 176.964415][ T4284] Bluetooth: hci4: link tx timeout [ 176.970622][ T4284] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 177.052203][ T6594] loop6: detected capacity change from 0 to 128 [ 177.099999][ T6594] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 177.127026][ T6596] netlink: 4 bytes leftover after parsing attributes in process `syz.1.563'. [ 177.130534][ T6594] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 177.175936][ T4284] Bluetooth: hci0: command 0x040f tx timeout [ 177.319817][ T4284] Bluetooth: hci4: link tx timeout [ 177.325027][ T4284] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 177.598684][ T6608] netlink: 'syz.2.566': attribute type 1 has an invalid length. [ 177.609693][ T6606] loop0: detected capacity change from 0 to 128 [ 177.650941][ T6606] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 177.753351][ T6608] 8021q: adding VLAN 0 to HW filter on device bond1 [ 177.822891][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 177.833209][ T6606] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 177.842507][ T4284] Bluetooth: hci4: link tx timeout [ 177.843446][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 177.847771][ T4284] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 177.908259][ T6610] bond1: (slave gretap1): making interface the new active one [ 177.920665][ T6610] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 177.974177][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 178.001087][ T6480] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 178.377876][ T4284] Bluetooth: hci4: link tx timeout [ 178.383230][ T4284] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 178.415488][ T6639] netlink: 'syz.1.572': attribute type 1 has an invalid length. [ 178.473789][ T6645] netlink: 8 bytes leftover after parsing attributes in process `syz.0.577'. [ 178.495865][ T6639] netlink: 126288 bytes leftover after parsing attributes in process `syz.1.572'. [ 178.506528][ T4284] Bluetooth: hci4: link tx timeout [ 178.513699][ T4284] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 178.535599][ T6639] netlink: 4 bytes leftover after parsing attributes in process `syz.1.572'. [ 178.537581][ T4284] Bluetooth: hci4: link tx timeout [ 178.550014][ T4284] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 178.633067][ T6652] tmpfs: Bad value for 'nr_blocks' [ 179.255766][ T4284] Bluetooth: hci0: command 0x0419 tx timeout [ 179.332637][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 179.363160][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 179.374869][ T6674] overlayfs: failed to clone upperpath [ 179.416017][ T4285] Bluetooth: hci4: link tx timeout [ 179.421207][ T4285] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 179.426025][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 179.468865][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 179.502649][ T6661] loop6: detected capacity change from 0 to 32768 [ 179.507659][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 179.572351][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 179.607836][ T6661] JBD2: Ignoring recovery information on journal [ 179.647162][ T6480] device veth0_vlan entered promiscuous mode [ 179.755145][ T6480] device veth1_vlan entered promiscuous mode [ 179.783172][ T6661] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 179.828800][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 179.846962][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 179.878917][ T6686] netlink: 'syz.2.594': attribute type 1 has an invalid length. [ 179.905540][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 179.917071][ T6686] netlink: 126288 bytes leftover after parsing attributes in process `syz.2.594'. [ 179.937423][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 179.953090][ T6686] netlink: 4 bytes leftover after parsing attributes in process `syz.2.594'. [ 179.963909][ T6661] (syz.6.583,6661,1):ocfs2_rename:1687 ERROR: status = -39 [ 179.988928][ T6480] device veth0_macvtap entered promiscuous mode [ 180.031662][ T6480] device veth1_macvtap entered promiscuous mode [ 180.122370][ T6480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.124270][ T5455] ocfs2: Unmounting device (7,6) on (node local) [ 180.163358][ T6480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.196013][ T6480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.234879][ T6480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.265785][ T6480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.316065][ T6480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.370605][ T6480] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 180.409557][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 180.428959][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 180.473026][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 180.502282][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 180.547402][ T6480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.581329][ T6480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.624584][ T6480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.651313][ T6480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.684550][ T6480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.696665][ T6480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.711315][ T6480] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 180.730778][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 180.740676][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 180.743439][ T6683] loop0: detected capacity change from 0 to 40427 [ 180.759862][ T6480] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.777072][ T6480] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.808419][ T6683] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 180.810040][ T6480] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.825532][ T6480] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.843447][ T6683] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 180.884960][ T6683] F2FS-fs (loop0): invalid crc value [ 180.961654][ T6683] F2FS-fs (loop0): Found nat_bits in checkpoint [ 181.108547][ T4381] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.124784][ T4381] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 181.167300][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 181.175460][ T6683] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 181.200333][ T6683] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 181.246423][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.262007][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 181.285411][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 181.364390][ T6704] loop6: detected capacity change from 0 to 1024 [ 181.420428][ T26] audit: type=1804 audit(1776393857.239:381): pid=6683 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.593" name="/newroot/115/bus/bus" dev="loop0" ino=10 res=1 errno=0 [ 181.504109][ T6704] EXT4-fs: Ignoring removed bh option [ 181.618177][ T6704] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 181.644047][ T6704] EXT4-fs warning (device loop6): ext4_expand_extra_isize_ea:2800: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 181.786331][ T6717] netlink: 'syz.1.603': attribute type 29 has an invalid length. [ 181.830925][ T6717] netlink: 'syz.1.603': attribute type 29 has an invalid length. [ 182.064739][ T5455] EXT4-fs (loop6): unmounting filesystem. [ 182.376580][ T5256] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 182.620305][ T5256] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 182.642172][ T5256] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 182.670557][ T5256] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 182.710539][ T5256] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.751133][ T5256] usb 6-1: Product: syz [ 182.755388][ T5256] usb 6-1: Manufacturer: syz [ 182.781528][ T5256] usb 6-1: SerialNumber: syz [ 182.806325][ T5256] cdc_mbim 6-1:1.0: skipping garbage [ 183.015426][ T6726] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 183.395136][ T6740] loop6: detected capacity change from 0 to 32768 [ 183.510775][ T6740] XFS (loop6): Mounting V5 Filesystem [ 183.592779][ T6749] loop0: detected capacity change from 0 to 32768 [ 183.647693][ T6749] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 183.648115][ T6740] XFS (loop6): Ending clean mount [ 183.670412][ T6726] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 183.696724][ T5256] cdc_mbim 6-1:1.0: setting tx_max = 184 [ 183.708320][ T6749] JBD2: Ignoring recovery information on journal [ 183.719003][ T5256] cdc_mbim 6-1:1.0: cdc-wdm0: USB WDM device [ 183.804042][ T5256] cdc_mbim 6-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.5-1, CDC MBIM, 42:34:49:a0:ad:d9 [ 183.842230][ T6749] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 183.948892][ C1] cdc_mbim 6-1:1.0: nonzero urb status received: -71 [ 183.955857][ C1] cdc_mbim 6-1:1.0: wdm_int_callback - 0 bytes [ 183.963988][ C1] cdc_mbim 6-1:1.0: nonzero urb status received: -71 [ 183.970730][ C1] cdc_mbim 6-1:1.0: wdm_int_callback - 0 bytes [ 183.978651][ C1] cdc_mbim 6-1:1.0: nonzero urb status received: -71 [ 183.985368][ C1] cdc_mbim 6-1:1.0: wdm_int_callback - 0 bytes [ 184.035789][ T5646] usb 6-1: USB disconnect, device number 6 [ 184.042361][ T5646] cdc_mbim 6-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.5-1, CDC MBIM [ 184.069591][ T5455] XFS (loop6): Unmounting Filesystem [ 184.374224][ T4270] ocfs2: Unmounting device (7,0) on (node local) [ 185.328685][ T26] audit: type=1326 audit(1776393861.149:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6800 comm="syz.1.626" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f381599c819 code=0x0 [ 185.832694][ T6812] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 185.864881][ T6812] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 186.216248][ T6795] loop0: detected capacity change from 0 to 32768 [ 186.254087][ T6795] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.623 (6795) [ 186.341807][ T6795] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 186.379573][ T6795] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 186.409913][ T6795] BTRFS info (device loop0): setting nodatacow, compression disabled [ 186.445811][ T6795] BTRFS info (device loop0): enabling auto defrag [ 186.472768][ T6795] BTRFS info (device loop0): max_inline at 0 [ 186.478585][ T6824] tls_set_device_offload: netdev not found [ 186.482858][ T6795] BTRFS info (device loop0): using free space tree [ 187.845908][ T26] audit: type=1326 audit(1776393863.669:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6879 comm="syz.5.641" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4ddf99c819 code=0x0 [ 188.329002][ T6897] netlink: 12 bytes leftover after parsing attributes in process `syz.2.647'. [ 188.479607][ T4270] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 189.235769][ T6913] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 189.304015][ T4285] Bluetooth: hci4: link tx timeout [ 189.309861][ T4285] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 189.318314][ T4285] Bluetooth: hci4: link tx timeout [ 189.323469][ T4285] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 189.439130][ T6913] usb 6-1: config 0 has no interfaces? [ 189.444736][ T6913] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 189.478864][ T6913] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.514537][ T6913] usb 6-1: config 0 descriptor?? [ 189.703464][ T6939] loop0: detected capacity change from 0 to 1024 [ 189.727016][ T6939] EXT4-fs: Ignoring removed bh option [ 189.767912][ T6911] vxcan0: tx drop: invalid sa for name 0x0000000000000001 [ 189.798802][ T6913] usb 6-1: USB disconnect, device number 7 [ 189.864761][ T6939] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 190.193330][ T4270] EXT4-fs (loop0): unmounting filesystem. [ 190.438912][ T6931] loop6: detected capacity change from 0 to 32768 [ 190.486076][ T6931] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop6 scanned by syz.6.659 (6931) [ 190.549974][ T6931] BTRFS info (device loop6): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 190.582102][ T6931] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm [ 190.638628][ T6931] BTRFS info (device loop6): setting nodatacow, compression disabled [ 190.686232][ T6931] BTRFS info (device loop6): force clearing of disk cache [ 190.746199][ T6931] BTRFS info (device loop6): turning on sync discard [ 190.753027][ T6931] BTRFS info (device loop6): turning off barriers [ 190.805970][ T6931] BTRFS info (device loop6): use no compression [ 190.843210][ T6931] BTRFS info (device loop6): disabling free space tree [ 190.872662][ T6931] BTRFS info (device loop6): enabling ssd optimizations [ 190.905160][ T6931] BTRFS info (device loop6): using spread ssd allocation scheme [ 190.954221][ T6931] BTRFS info (device loop6): not using ssd optimizations [ 190.977364][ T6931] BTRFS info (device loop6): not using spread ssd allocation scheme [ 191.210708][ T6982] sctp: [Deprecated]: syz.5.670 (pid 6982) Use of int in max_burst socket option deprecated. [ 191.210708][ T6982] Use struct sctp_assoc_value instead [ 191.357852][ T6931] BTRFS info (device loop6): rebuilding free space tree [ 191.415797][ T4285] Bluetooth: hci3: command 0x0406 tx timeout [ 191.435946][ T6931] BTRFS info (device loop6): disabling free space tree [ 191.495848][ T6931] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 191.564324][ T6931] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 191.586929][ T7000] netlink: 8 bytes leftover after parsing attributes in process `syz.2.673'. [ 191.691106][ T7000] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.695282][ T6931] BTRFS info (device loop6): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 192.027545][ T5455] BTRFS info (device loop6): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 193.224896][ T7040] device batadv_slave_1 entered promiscuous mode [ 193.282509][ T7039] device batadv_slave_1 left promiscuous mode [ 193.590153][ T7047] loop5: detected capacity change from 0 to 1024 [ 193.608141][ T7047] EXT4-fs: Ignoring removed bh option [ 193.682619][ T7047] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 194.221779][ T6480] EXT4-fs (loop5): unmounting filesystem. [ 194.461793][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.468206][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.881633][ T7086] loop6: detected capacity change from 0 to 64 [ 195.842029][ T4285] Bluetooth: hci4: link tx timeout [ 195.848757][ T4285] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 196.644669][ T7027] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 196.858683][ T7027] usb 1-1: config 1 interface 0 has no altsetting 0 [ 196.927998][ T7027] usb 1-1: string descriptor 0 read error: -22 [ 196.934347][ T7027] usb 1-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.40 [ 196.969732][ T7027] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.905006][ T4285] Bluetooth: hci4: link tx timeout [ 197.910341][ T4285] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 198.407853][ T7027] samsung 0003:0419:0001.0009: unknown main item tag 0x6 [ 198.810251][ T7027] samsung 0003:0419:0001.0009: item 0 0 0 8 parsing failed [ 198.818249][ T7027] samsung 0003:0419:0001.0009: parse failed [ 198.824790][ T7027] samsung: probe of 0003:0419:0001.0009 failed with error -22 [ 198.834450][ T7027] usb 1-1: USB disconnect, device number 5 [ 199.321815][ T7177] input: syz0 as /devices/virtual/input/input9 [ 199.384381][ T26] audit: type=1326 audit(1776393875.189:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7178 comm="syz.2.725" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0a21b9c819 code=0x0 [ 200.224108][ T7191] fuse: Bad value for 'fd' [ 200.236969][ T7189] loop0: detected capacity change from 0 to 4096 [ 200.258379][ T7189] EXT4-fs: inline encryption not supported [ 200.608248][ T7189] EXT4-fs (loop0): Test dummy encryption mode enabled [ 200.626445][ T7189] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 200.634761][ T7189] System zones: 0-5 [ 200.664558][ T7189] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 200.907761][ T7189] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 201.002840][ T4270] EXT4-fs (loop0): unmounting filesystem. [ 201.259817][ T7212] 9pnet: p9_errstr2errno: server reported unknown error õ1 g;-‡~ [ 201.526063][ T4285] block nbd0: Receive control failed (result -32) [ 201.548813][ T7215] block nbd0: shutting down sockets [ 201.636661][ T4285] Bluetooth: hci4: link tx timeout [ 201.641861][ T4285] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 201.723484][ T7219] netlink: 'syz.1.738': attribute type 14 has an invalid length. [ 201.731966][ T7219] netlink: 4 bytes leftover after parsing attributes in process `syz.1.738'. [ 201.748985][ T7219] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 201.758141][ T7219] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 201.767061][ T7219] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 201.775836][ T7219] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 201.804290][ T7219] netlink: 'syz.1.738': attribute type 14 has an invalid length. [ 201.818302][ T4285] Bluetooth: hci4: link tx timeout [ 201.823520][ T4285] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 201.825942][ T7219] netlink: 4 bytes leftover after parsing attributes in process `syz.1.738'. [ 201.904167][ T7224] loop5: detected capacity change from 0 to 128 [ 201.961935][ T7229] loop6: detected capacity change from 0 to 1024 [ 201.999798][ T7229] EXT4-fs: Ignoring removed bh option [ 202.031357][ T7224] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 202.049540][ T7224] ext4 filesystem being mounted at /28/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 202.196346][ T7224] EXT4-fs error (device loop5): dx_make_map:1328: inode #2: block 18: comm syz.5.740: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 202.228861][ T7238] netlink: 'syz.1.745': attribute type 1 has an invalid length. [ 202.245665][ T7224] EXT4-fs error (device loop5) in do_split:2095: Corrupt filesystem [ 202.255369][ T7229] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 202.280075][ T7229] ext4 filesystem being mounted at /71/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 202.326905][ T7240] EXT4-fs error (device loop5): dx_make_map:1328: inode #2: block 18: comm syz.5.740: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 202.349685][ T7238] 8021q: adding VLAN 0 to HW filter on device bond1 [ 202.372658][ T7241] bond1: (slave geneve2): making interface the new active one [ 202.378429][ T7240] EXT4-fs error (device loop5) in do_split:2095: Corrupt filesystem [ 202.383608][ T7241] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 202.406787][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 202.427096][ T7245] EXT4-fs error (device loop6): ext4_free_blocks:6220: comm syz.6.742: Freeing blocks not in datazone - block = 0, count = 16 [ 202.506079][ T7245] EXT4-fs (loop6): Remounting filesystem read-only [ 202.535068][ T6480] EXT4-fs (loop5): unmounting filesystem. [ 202.675870][ T5455] EXT4-fs (loop6): unmounting filesystem. [ 202.843441][ T6913] kernel write not supported for file [eventfd] (pid: 6913 comm: kworker/0:15) [ 203.343190][ T7281] netlink: 'syz.0.760': attribute type 3 has an invalid length. [ 203.600522][ T4285] Bluetooth: hci4: link tx timeout [ 203.605929][ T4285] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 203.683469][ T7294] loop6: detected capacity change from 0 to 2048 [ 203.781822][ T7296] netlink: 8 bytes leftover after parsing attributes in process `syz.5.766'. [ 203.890446][ T7296] 8021q: adding VLAN 0 to HW filter on device bond1 [ 203.932880][ T7298] netlink: 'syz.1.765': attribute type 3 has an invalid length. [ 203.941276][ T7298] netlink: 'syz.1.765': attribute type 8 has an invalid length. [ 203.960463][ T7298] netlink: 'syz.1.765': attribute type 4 has an invalid length. [ 203.982793][ T7298] netlink: 'syz.1.765': attribute type 7 has an invalid length. [ 204.013850][ T7298] netlink: 199012 bytes leftover after parsing attributes in process `syz.1.765'. [ 204.053592][ T7300] bond1: (slave veth3): Enslaving as an active interface with an up link [ 204.104249][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 204.368723][ T7318] fuse: Bad value for 'fd' [ 204.497289][ T7320] Falling back ldisc for ttynull. [ 204.661648][ T7327] [ 204.664045][ T7327] ===================================================== [ 204.671075][ T7327] WARNING: HARDIRQ-safe -> HARDIRQ-unsafe lock order detected [ 204.678558][ T7327] syzkaller #0 Not tainted [ 204.683007][ T7327] ----------------------------------------------------- [ 204.689973][ T7327] syz.5.775/7327 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 204.697560][ T7327] ffff888052f25168 (&new->fa_lock){...-}-{2:2}, at: kill_fasync+0x18e/0x4b0 [ 204.706321][ T7327] [ 204.706321][ T7327] and this task is already holding: [ 204.713807][ T7327] ffff888146f07230 (&dev->event_lock#2){-...}-{2:2}, at: input_inject_event+0xa7/0x310 [ 204.723539][ T7327] which would create a new lock dependency: [ 204.729458][ T7327] (&dev->event_lock#2){-...}-{2:2} -> (&new->fa_lock){...-}-{2:2} [ 204.737624][ T7327] [ 204.737624][ T7327] but this new dependency connects a HARDIRQ-irq-safe lock: [ 204.747190][ T7327] (&dev->event_lock#2){-...}-{2:2} [ 204.747232][ T7327] [ 204.747232][ T7327] ... which became HARDIRQ-irq-safe at: [ 204.760191][ T7327] lock_acquire+0x1bb/0x4a0 [ 204.764835][ T7327] _raw_spin_lock_irqsave+0xb0/0x100 [ 204.770255][ T7327] input_event+0x76/0xb0 [ 204.774620][ T7327] psmouse_report_standard_packet+0x4f/0x200 [ 204.780730][ T7327] psmouse_process_byte+0x42b/0x620 [ 204.786057][ T7327] psmouse_handle_byte+0x43/0x490 [ 204.791202][ T7327] psmouse_interrupt+0x699/0x1130 [ 204.796442][ T7327] serio_interrupt+0x87/0x130 [ 204.801251][ T7327] i8042_interrupt+0x365/0x710 [ 204.806144][ T7327] __handle_irq_event_percpu+0x293/0xa50 [ 204.811995][ T7327] handle_irq_event+0x87/0x1e0 [ 204.816877][ T7327] handle_edge_irq+0x243/0xb20 [ 204.821776][ T7327] __common_interrupt+0xd7/0x1e0 [ 204.826848][ T7327] common_interrupt+0xb0/0xd0 [ 204.831649][ T7327] asm_common_interrupt+0x22/0x40 [ 204.836807][ T7327] __sanitizer_cov_trace_pc+0x32/0x60 [ 204.842311][ T7327] __radix_tree_preload+0x4a/0x880 [ 204.847556][ T7327] idr_preload+0x19/0x210 [ 204.852014][ T7327] __kernfs_new_node+0x106/0x810 [ 204.857075][ T7327] kernfs_new_node+0x148/0x250 [ 204.861973][ T7327] kernfs_create_link+0xa3/0x200 [ 204.867042][ T7327] sysfs_do_create_link_sd+0x83/0x110 [ 204.872546][ T7327] module_add_driver+0x132/0x290 [ 204.877623][ T7327] bus_add_driver+0x372/0x5a0 [ 204.882432][ T7327] driver_register+0x32d/0x430 [ 204.887323][ T7327] usb_register_driver+0x202/0x3d0 [ 204.892554][ T7327] do_one_initcall+0x26a/0x840 [ 204.897439][ T7327] do_initcall_level+0x137/0x1e4 [ 204.902502][ T7327] do_initcalls+0x4b/0x8a [ 204.906963][ T7327] kernel_init_freeable+0x415/0x5be [ 204.912300][ T7327] kernel_init+0x19/0x1b0 [ 204.916766][ T7327] ret_from_fork+0x1f/0x30 [ 204.921347][ T7327] [ 204.921347][ T7327] to a HARDIRQ-irq-unsafe lock: [ 204.928397][ T7327] (tasklist_lock){.+.+}-{2:2} [ 204.928433][ T7327] [ 204.928433][ T7327] ... which became HARDIRQ-irq-unsafe at: [ 204.941135][ T7327] ... [ 204.941147][ T7327] lock_acquire+0x1bb/0x4a0 [ 204.948385][ T7327] _raw_read_lock+0x32/0x40 [ 204.953016][ T7327] do_wait+0x2b6/0xb60 [ 204.957281][ T7327] kernel_wait+0xd3/0x1c0 [ 204.961751][ T7327] call_usermodehelper_exec_work+0xb5/0x220 [ 204.967792][ T7327] process_one_work+0x8a2/0x1160 [ 204.972947][ T7327] worker_thread+0xaa2/0x1270 [ 204.977745][ T7327] kthread+0x29d/0x330 [ 204.981946][ T7327] ret_from_fork+0x1f/0x30 [ 204.986498][ T7327] [ 204.986498][ T7327] other info that might help us debug this: [ 204.986498][ T7327] [ 204.996928][ T7327] Chain exists of: [ 204.996928][ T7327] &dev->event_lock#2 --> &new->fa_lock --> tasklist_lock [ 204.996928][ T7327] [ 205.009949][ T7327] Possible interrupt unsafe locking scenario: [ 205.009949][ T7327] [ 205.018390][ T7327] CPU0 CPU1 [ 205.023780][ T7327] ---- ---- [ 205.029175][ T7327] lock(tasklist_lock); [ 205.033426][ T7327] local_irq_disable(); [ 205.040269][ T7327] lock(&dev->event_lock#2); [ 205.047473][ T7327] lock(&new->fa_lock); [ 205.054238][ T7327] [ 205.057692][ T7327] lock(&dev->event_lock#2); [ 205.062550][ T7327] [ 205.062550][ T7327] *** DEADLOCK *** [ 205.062550][ T7327] [ 205.070702][ T7327] 6 locks held by syz.5.775/7327: [ 205.075755][ T7327] #0: ffff888029db9110 (&evdev->mutex){+.+.}-{3:3}, at: evdev_write+0x17c/0x490 [ 205.084948][ T7327] #1: ffff888146f07230 (&dev->event_lock#2){-...}-{2:2}, at: input_inject_event+0xa7/0x310 [ 205.095107][ T7327] #2: ffffffff8cb2d5a0 (rcu_read_lock){....}-{1:2}, at: input_inject_event+0xb8/0x310 [ 205.104834][ T7327] #3: ffffffff8cb2d5a0 (rcu_read_lock){....}-{1:2}, at: input_pass_values+0xa3/0x12f0 [ 205.114568][ T7327] #4: ffffffff8cb2d5a0 (rcu_read_lock){....}-{1:2}, at: mousedev_notify_readers+0x2c/0xc00 [ 205.124910][ T7327] #5: ffffffff8cb2d5a0 (rcu_read_lock){....}-{1:2}, at: kill_fasync+0x4f/0x4b0 [ 205.134036][ T7327] [ 205.134036][ T7327] the dependencies between HARDIRQ-irq-safe lock and the holding lock: [ 205.144911][ T7327] -> (&dev->event_lock#2){-...}-{2:2} { [ 205.150547][ T7327] IN-HARDIRQ-W at: [ 205.154652][ T7327] lock_acquire+0x1bb/0x4a0 [ 205.160858][ T7327] _raw_spin_lock_irqsave+0xb0/0x100 [ 205.167870][ T7327] input_event+0x76/0xb0 [ 205.173981][ T7327] psmouse_report_standard_packet+0x4f/0x200 [ 205.181657][ T7327] psmouse_process_byte+0x42b/0x620 [ 205.188550][ T7327] psmouse_handle_byte+0x43/0x490 [ 205.195356][ T7327] psmouse_interrupt+0x699/0x1130 [ 205.202221][ T7327] serio_interrupt+0x87/0x130 [ 205.208609][ T7327] i8042_interrupt+0x365/0x710 [ 205.215604][ T7327] __handle_irq_event_percpu+0x293/0xa50 [ 205.222932][ T7327] handle_irq_event+0x87/0x1e0 [ 205.229473][ T7327] handle_edge_irq+0x243/0xb20 [ 205.235929][ T7327] __common_interrupt+0xd7/0x1e0 [ 205.242593][ T7327] common_interrupt+0xb0/0xd0 [ 205.248959][ T7327] asm_common_interrupt+0x22/0x40 [ 205.255768][ T7327] __sanitizer_cov_trace_pc+0x32/0x60 [ 205.262836][ T7327] __radix_tree_preload+0x4a/0x880 [ 205.269743][ T7327] idr_preload+0x19/0x210 [ 205.275871][ T7327] __kernfs_new_node+0x106/0x810 [ 205.282510][ T7327] kernfs_new_node+0x148/0x250 [ 205.288962][ T7327] kernfs_create_link+0xa3/0x200 [ 205.295586][ T7327] sysfs_do_create_link_sd+0x83/0x110 [ 205.302656][ T7327] module_add_driver+0x132/0x290 [ 205.309291][ T7327] bus_add_driver+0x372/0x5a0 [ 205.315660][ T7327] driver_register+0x32d/0x430 [ 205.322116][ T7327] usb_register_driver+0x202/0x3d0 [ 205.329004][ T7327] do_one_initcall+0x26a/0x840 [ 205.335460][ T7327] do_initcall_level+0x137/0x1e4 [ 205.342099][ T7327] do_initcalls+0x4b/0x8a [ 205.348119][ T7327] kernel_init_freeable+0x415/0x5be [ 205.355182][ T7327] kernel_init+0x19/0x1b0 [ 205.361237][ T7327] ret_from_fork+0x1f/0x30 [ 205.367354][ T7327] INITIAL USE at: [ 205.371284][ T7327] lock_acquire+0x1bb/0x4a0 [ 205.377395][ T7327] _raw_spin_lock_irqsave+0xb0/0x100 [ 205.384283][ T7327] input_inject_event+0xa7/0x310 [ 205.390824][ T7327] led_trigger_event+0x12f/0x210 [ 205.397364][ T7327] kbd_led_trigger_activate+0xb9/0x100 [ 205.404437][ T7327] led_trigger_set+0x50c/0x910 [ 205.410813][ T7327] led_trigger_set_default+0x19c/0x1e0 [ 205.417958][ T7327] led_classdev_register_ext+0x625/0x860 [ 205.425201][ T7327] input_leds_connect+0x4e7/0x6b0 [ 205.431855][ T7327] input_register_device+0xdfd/0x1310 [ 205.438838][ T7327] atkbd_connect+0x6f8/0x9a0 [ 205.445028][ T7327] serio_driver_probe+0x76/0x90 [ 205.451491][ T7327] really_probe+0x2aa/0xc70 [ 205.457608][ T7327] __driver_probe_device+0x18c/0x330 [ 205.464503][ T7327] driver_probe_device+0x4f/0x420 [ 205.471136][ T7327] __driver_attach+0x44a/0x6e0 [ 205.477942][ T7327] bus_for_each_dev+0x182/0x1f0 [ 205.484399][ T7327] serio_handle_event+0x29c/0x840 [ 205.491039][ T7327] process_one_work+0x8a2/0x1160 [ 205.497580][ T7327] worker_thread+0xaa2/0x1270 [ 205.503863][ T7327] kthread+0x29d/0x330 [ 205.509535][ T7327] ret_from_fork+0x1f/0x30 [ 205.515557][ T7327] } [ 205.518085][ T7327] ... key at: [] input_allocate_device.__key.5+0x0/0x20 [ 205.527180][ T7327] [ 205.527180][ T7327] the dependencies between the lock to be acquired [ 205.527194][ T7327] and HARDIRQ-irq-unsafe lock: [ 205.540794][ T7327] -> (tasklist_lock){.+.+}-{2:2} { [ 205.546237][ T7327] HARDIRQ-ON-R at: [ 205.550431][ T7327] lock_acquire+0x1bb/0x4a0 [ 205.557014][ T7327] _raw_read_lock+0x32/0x40 [ 205.563560][ T7327] do_wait+0x2b6/0xb60 [ 205.569870][ T7327] kernel_wait+0xd3/0x1c0 [ 205.576337][ T7327] call_usermodehelper_exec_work+0xb5/0x220 [ 205.584279][ T7327] process_one_work+0x8a2/0x1160 [ 205.591263][ T7327] worker_thread+0xaa2/0x1270 [ 205.598077][ T7327] kthread+0x29d/0x330 [ 205.604178][ T7327] ret_from_fork+0x1f/0x30 [ 205.610647][ T7327] SOFTIRQ-ON-R at: [ 205.614838][ T7327] lock_acquire+0x1bb/0x4a0 [ 205.621386][ T7327] _raw_read_lock+0x32/0x40 [ 205.627931][ T7327] do_wait+0x2b6/0xb60 [ 205.634045][ T7327] kernel_wait+0xd3/0x1c0 [ 205.640417][ T7327] call_usermodehelper_exec_work+0xb5/0x220 [ 205.648388][ T7327] process_one_work+0x8a2/0x1160 [ 205.655371][ T7327] worker_thread+0xaa2/0x1270 [ 205.662043][ T7327] kthread+0x29d/0x330 [ 205.668124][ T7327] ret_from_fork+0x1f/0x30 [ 205.674658][ T7327] INITIAL USE at: [ 205.678732][ T7327] lock_acquire+0x1bb/0x4a0 [ 205.685238][ T7327] _raw_write_lock_irq+0xab/0xf0 [ 205.692103][ T7327] copy_process+0x2557/0x4030 [ 205.698687][ T7327] kernel_clone+0x24b/0x900 [ 205.705100][ T7327] user_mode_thread+0x10d/0x180 [ 205.711855][ T7327] rest_init+0x23/0x300 [ 205.717939][ T7327] start_kernel+0x0/0x53c [ 205.724399][ T7327] start_kernel+0x493/0x53c [ 205.730844][ T7327] secondary_startup_64_no_verify+0xcf/0xdb [ 205.738662][ T7327] INITIAL READ USE at: [ 205.743168][ T7327] lock_acquire+0x1bb/0x4a0 [ 205.750076][ T7327] _raw_read_lock+0x32/0x40 [ 205.756986][ T7327] do_wait+0x2b6/0xb60 [ 205.763432][ T7327] kernel_wait+0xd3/0x1c0 [ 205.770166][ T7327] call_usermodehelper_exec_work+0xb5/0x220 [ 205.778442][ T7327] process_one_work+0x8a2/0x1160 [ 205.785926][ T7327] worker_thread+0xaa2/0x1270 [ 205.792971][ T7327] kthread+0x29d/0x330 [ 205.799581][ T7327] ret_from_fork+0x1f/0x30 [ 205.806370][ T7327] } [ 205.809049][ T7327] ... key at: [] tasklist_lock+0x18/0x40 [ 205.817053][ T7327] ... acquired at: [ 205.821128][ T7327] _raw_read_lock+0x32/0x40 [ 205.825803][ T7327] send_sigurg+0xec/0x3c0 [ 205.830314][ T7327] sk_send_sigurg+0x6b/0xc0 [ 205.835021][ T7327] queue_oob+0x3ed/0x4f0 [ 205.839451][ T7327] unix_stream_sendmsg+0x8cf/0xa70 [ 205.844827][ T7327] ____sys_sendmsg+0x5be/0x970 [ 205.849797][ T7327] ___sys_sendmsg+0x2a2/0x360 [ 205.854674][ T7327] __sys_sendmmsg+0x2c3/0x510 [ 205.859533][ T7327] __x64_sys_sendmmsg+0x9c/0xb0 [ 205.864567][ T7327] do_syscall_64+0x4c/0xa0 [ 205.869278][ T7327] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 205.875364][ T7327] [ 205.877688][ T7327] -> (&f->f_owner.lock){...-}-{2:2} { [ 205.883162][ T7327] IN-SOFTIRQ-R at: [ 205.887223][ T7327] lock_acquire+0x1bb/0x4a0 [ 205.893557][ T7327] _raw_read_lock_irqsave+0xb8/0x100 [ 205.900665][ T7327] send_sigurg+0x25/0x3c0 [ 205.906827][ T7327] sk_send_sigurg+0x6b/0xc0 [ 205.913240][ T7327] tcp_check_urg+0x200/0x750 [ 205.919658][ T7327] tcp_urg+0x160/0x400 [ 205.925552][ T7327] tcp_rcv_established+0xdef/0x1d50 [ 205.932661][ T7327] tcp_v4_do_rcv+0x48d/0xb00 [ 205.939072][ T7327] tcp_v4_rcv+0x27f0/0x2ea0 [ 205.945398][ T7327] ip_protocol_deliver_rcu+0x3ad/0x780 [ 205.952681][ T7327] ip_local_deliver_finish+0x2c7/0x510 [ 205.959962][ T7327] NF_HOOK+0x329/0x3b0 [ 205.965863][ T7327] NF_HOOK+0x329/0x3b0 [ 205.971776][ T7327] __netif_receive_skb+0xcc/0x290 [ 205.978636][ T7327] process_backlog+0x38d/0x6f0 [ 205.985223][ T7327] __napi_poll+0xc0/0x460 [ 205.991378][ T7327] net_rx_action+0x5dd/0xb20 [ 205.997876][ T7327] handle_softirqs+0x2a1/0x930 [ 206.004477][ T7327] do_softirq+0x142/0x210 [ 206.010626][ T7327] __local_bh_enable_ip+0x180/0x1c0 [ 206.017661][ T7327] sk_stream_wait_memory+0x6df/0xee0 [ 206.024806][ T7327] tcp_sendmsg_locked+0x14c1/0x3a90 [ 206.031837][ T7327] tcp_sendmsg+0x2b/0x40 [ 206.037909][ T7327] __sys_sendto+0x497/0x650 [ 206.044282][ T7327] __x64_sys_sendto+0xda/0xf0 [ 206.050799][ T7327] do_syscall_64+0x4c/0xa0 [ 206.057220][ T7327] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 206.064978][ T7327] INITIAL USE at: [ 206.069005][ T7327] lock_acquire+0x1bb/0x4a0 [ 206.075296][ T7327] _raw_write_lock_irq+0xab/0xf0 [ 206.082003][ T7327] __f_setown+0x37/0x330 [ 206.087993][ T7327] fcntl_dirnotify+0x6de/0x8f0 [ 206.094529][ T7327] do_fcntl+0x5ed/0x1270 [ 206.100535][ T7327] __se_sys_fcntl+0xc9/0x190 [ 206.106975][ T7327] do_syscall_64+0x4c/0xa0 [ 206.113238][ T7327] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 206.120893][ T7327] INITIAL READ USE at: [ 206.125309][ T7327] lock_acquire+0x1bb/0x4a0 [ 206.131997][ T7327] _raw_read_lock_irqsave+0xb8/0x100 [ 206.139458][ T7327] send_sigurg+0x25/0x3c0 [ 206.146047][ T7327] sk_send_sigurg+0x6b/0xc0 [ 206.153103][ T7327] tcp_check_urg+0x200/0x750 [ 206.160042][ T7327] tcp_urg+0x160/0x400 [ 206.166380][ T7327] tcp_rcv_established+0xdef/0x1d50 [ 206.173809][ T7327] tcp_v4_do_rcv+0x48d/0xb00 [ 206.180590][ T7327] __release_sock+0x1e1/0x450 [ 206.187452][ T7327] release_sock+0x5b/0x1b0 [ 206.194065][ T7327] tcp_sendmsg+0x35/0x40 [ 206.200480][ T7327] __sys_sendto+0x497/0x650 [ 206.207164][ T7327] __x64_sys_sendto+0xda/0xf0 [ 206.214024][ T7327] do_syscall_64+0x4c/0xa0 [ 206.220625][ T7327] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 206.228705][ T7327] } [ 206.231289][ T7327] ... key at: [] __alloc_file.__key+0x0/0x10 [ 206.239459][ T7327] ... acquired at: [ 206.243355][ T7327] _raw_read_lock_irqsave+0xb8/0x100 [ 206.248822][ T7327] send_sigio+0x2f/0x360 [ 206.253259][ T7327] kill_fasync+0x224/0x4b0 [ 206.257954][ T7327] sock_wake_async+0x128/0x150 [ 206.263075][ T7327] sk_wake_async+0x184/0x280 [ 206.267931][ T7327] tcp_rcv_state_process+0x26b3/0x4310 [ 206.273667][ T7327] tcp_v4_do_rcv+0x739/0xb00 [ 206.278435][ T7327] __release_sock+0x1e1/0x450 [ 206.283293][ T7327] release_sock+0x5b/0x1b0 [ 206.288003][ T7327] __inet_stream_connect+0x833/0xe10 [ 206.293462][ T7327] tcp_sendmsg_fastopen+0x38f/0x600 [ 206.298832][ T7327] tcp_sendmsg_locked+0x3616/0x3a90 [ 206.304202][ T7327] tcp_sendmsg+0x2b/0x40 [ 206.308619][ T7327] __sys_sendto+0x497/0x650 [ 206.313304][ T7327] __x64_sys_sendto+0xda/0xf0 [ 206.318248][ T7327] do_syscall_64+0x4c/0xa0 [ 206.322916][ T7327] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 206.328982][ T7327] [ 206.331305][ T7327] -> (&new->fa_lock){...-}-{2:2} { [ 206.336428][ T7327] IN-SOFTIRQ-R at: [ 206.340408][ T7327] lock_acquire+0x1bb/0x4a0 [ 206.346738][ T7327] _raw_read_lock_irqsave+0xb8/0x100 [ 206.353762][ T7327] kill_fasync+0x18e/0x4b0 [ 206.359829][ T7327] sock_wake_async+0x128/0x150 [ 206.366259][ T7327] sk_wake_async+0x184/0x280 [ 206.372535][ T7327] sock_def_readable+0x1a7/0x280 [ 206.379146][ T7327] tcp_data_queue+0x21af/0x5990 [ 206.385660][ T7327] tcp_rcv_established+0xdfa/0x1d50 [ 206.392618][ T7327] tcp_v4_do_rcv+0x48d/0xb00 [ 206.398870][ T7327] tcp_v4_rcv+0x27f0/0x2ea0 [ 206.405125][ T7327] ip_protocol_deliver_rcu+0x3ad/0x780 [ 206.412319][ T7327] ip_local_deliver_finish+0x2c7/0x510 [ 206.419428][ T7327] NF_HOOK+0x329/0x3b0 [ 206.425248][ T7327] NF_HOOK+0x329/0x3b0 [ 206.430968][ T7327] __netif_receive_skb+0xcc/0x290 [ 206.437654][ T7327] process_backlog+0x38d/0x6f0 [ 206.444089][ T7327] __napi_poll+0xc0/0x460 [ 206.450076][ T7327] net_rx_action+0x5dd/0xb20 [ 206.456765][ T7327] handle_softirqs+0x2a1/0x930 [ 206.463174][ T7327] run_ksoftirqd+0xa4/0x100 [ 206.469333][ T7327] smpboot_thread_fn+0x64a/0xa40 [ 206.475922][ T7327] kthread+0x29d/0x330 [ 206.481663][ T7327] ret_from_fork+0x1f/0x30 [ 206.487735][ T7327] INITIAL USE at: [ 206.491628][ T7327] lock_acquire+0x1bb/0x4a0 [ 206.497697][ T7327] _raw_write_lock_irq+0xab/0xf0 [ 206.504198][ T7327] fasync_remove_entry+0xf0/0x1c0 [ 206.510782][ T7327] sock_fasync+0x84/0xf0 [ 206.516598][ T7327] __fput+0x7a7/0x920 [ 206.522271][ T7327] task_work_run+0x1d0/0x260 [ 206.528443][ T7327] get_signal+0x11a6/0x1350 [ 206.534513][ T7327] arch_do_signal_or_restart+0xc4/0x1350 [ 206.541712][ T7327] exit_to_user_mode_loop+0x70/0x110 [ 206.548568][ T7327] exit_to_user_mode_prepare+0xee/0x180 [ 206.555682][ T7327] syscall_exit_to_user_mode+0x16/0x40 [ 206.562719][ T7327] do_syscall_64+0x58/0xa0 [ 206.568723][ T7327] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 206.576190][ T7327] INITIAL READ USE at: [ 206.580610][ T7327] lock_acquire+0x1bb/0x4a0 [ 206.587112][ T7327] _raw_read_lock_irqsave+0xb8/0x100 [ 206.594391][ T7327] kill_fasync+0x18e/0x4b0 [ 206.600810][ T7327] sock_wake_async+0x128/0x150 [ 206.607571][ T7327] sk_wake_async+0x184/0x280 [ 206.614160][ T7327] tcp_rcv_state_process+0x26b3/0x4310 [ 206.621625][ T7327] tcp_v4_do_rcv+0x739/0xb00 [ 206.628235][ T7327] __release_sock+0x1e1/0x450 [ 206.634926][ T7327] release_sock+0x5b/0x1b0 [ 206.641358][ T7327] __inet_stream_connect+0x833/0xe10 [ 206.648725][ T7327] tcp_sendmsg_fastopen+0x38f/0x600 [ 206.655919][ T7327] tcp_sendmsg_locked+0x3616/0x3a90 [ 206.663110][ T7327] tcp_sendmsg+0x2b/0x40 [ 206.669349][ T7327] __sys_sendto+0x497/0x650 [ 206.675860][ T7327] __x64_sys_sendto+0xda/0xf0 [ 206.682564][ T7327] do_syscall_64+0x4c/0xa0 [ 206.688986][ T7327] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 206.697044][ T7327] } [ 206.699548][ T7327] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 206.708314][ T7327] ... acquired at: [ 206.712118][ T7327] _raw_read_lock_irqsave+0xb8/0x100 [ 206.717679][ T7327] kill_fasync+0x18e/0x4b0 [ 206.722298][ T7327] mousedev_notify_readers+0x6eb/0xc00 [ 206.727934][ T7327] mousedev_event+0x568/0x11f0 [ 206.732874][ T7327] input_pass_values+0x9c7/0x12f0 [ 206.738110][ T7327] input_event_dispose+0x346/0x6c0 [ 206.743393][ T7327] input_inject_event+0x1f5/0x310 [ 206.748597][ T7327] evdev_write+0x35b/0x490 [ 206.753199][ T7327] vfs_write+0x2e6/0xa30 [ 206.757705][ T7327] ksys_write+0x14c/0x250 [ 206.762224][ T7327] do_syscall_64+0x4c/0xa0 [ 206.766839][ T7327] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 206.772937][ T7327] [ 206.775278][ T7327] [ 206.775278][ T7327] stack backtrace: [ 206.781165][ T7327] CPU: 0 PID: 7327 Comm: syz.5.775 Not tainted syzkaller #0 [ 206.788444][ T7327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 206.798503][ T7327] Call Trace: [ 206.801794][ T7327] [ 206.804723][ T7327] dump_stack_lvl+0x188/0x24e [ 206.809405][ T7327] ? load_image+0x400/0x400 [ 206.813923][ T7327] ? show_regs_print_info+0x12/0x12 [ 206.819160][ T7327] ? load_image+0x400/0x400 [ 206.823793][ T7327] ? print_shortest_lock_dependencies+0xf0/0x160 [ 206.830226][ T7327] __lock_acquire+0x66c8/0x7d10 [ 206.835097][ T7327] ? verify_lock_unused+0x140/0x140 [ 206.840307][ T7327] ? verify_lock_unused+0x140/0x140 [ 206.845638][ T7327] lock_acquire+0x1bb/0x4a0 [ 206.850251][ T7327] ? kill_fasync+0x18e/0x4b0 [ 206.854845][ T7327] ? read_lock_is_recursive+0x10/0x10 [ 206.860228][ T7327] _raw_read_lock_irqsave+0xb8/0x100 [ 206.865514][ T7327] ? kill_fasync+0x18e/0x4b0 [ 206.870213][ T7327] ? _raw_read_lock+0x40/0x40 [ 206.874900][ T7327] kill_fasync+0x18e/0x4b0 [ 206.879339][ T7327] ? kill_fasync+0x4f/0x4b0 [ 206.883850][ T7327] mousedev_notify_readers+0x6eb/0xc00 [ 206.889337][ T7327] ? mousedev_notify_readers+0x2c/0xc00 [ 206.894912][ T7327] mousedev_event+0x568/0x11f0 [ 206.899722][ T7327] ? mousedev_packet+0x9f0/0x9f0 [ 206.904696][ T7327] input_pass_values+0x9c7/0x12f0 [ 206.909746][ T7327] ? input_pass_values+0xa3/0x12f0 [ 206.915027][ T7327] input_event_dispose+0x346/0x6c0 [ 206.920147][ T7327] input_inject_event+0x1f5/0x310 [ 206.925189][ T7327] ? input_inject_event+0xb8/0x310 [ 206.930421][ T7327] evdev_write+0x35b/0x490 [ 206.934961][ T7327] ? evdev_read+0xb90/0xb90 [ 206.939478][ T7327] ? end_current_label_crit_section+0x14b/0x170 [ 206.945726][ T7327] ? common_file_perm+0x171/0x1c0 [ 206.950752][ T7327] ? fsnotify_perm+0x5a/0x550 [ 206.955432][ T7327] ? security_file_permission+0x75/0xa0 [ 206.961067][ T7327] ? evdev_read+0xb90/0xb90 [ 206.965589][ T7327] vfs_write+0x2e6/0xa30 [ 206.969863][ T7327] ? file_end_write+0x250/0x250 [ 206.974719][ T7327] ? __fget_files+0x28/0x4b0 [ 206.979401][ T7327] ? __fget_files+0x28/0x4b0 [ 206.983996][ T7327] ? __fget_files+0x43d/0x4b0 [ 206.988681][ T7327] ? __fdget_pos+0x1d4/0x360 [ 206.993314][ T7327] ? ksys_write+0x71/0x250 [ 206.997762][ T7327] ksys_write+0x14c/0x250 [ 207.002128][ T7327] ? __ia32_sys_read+0x80/0x80 [ 207.007039][ T7327] ? lockdep_hardirqs_on+0x94/0x140 [ 207.012342][ T7327] do_syscall_64+0x4c/0xa0 [ 207.016836][ T7327] ? clear_bhb_loop+0x60/0xb0 [ 207.021552][ T7327] ? clear_bhb_loop+0x60/0xb0 [ 207.026268][ T7327] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 207.032205][ T7327] RIP: 0033:0x7f4ddf99c819 [ 207.036629][ T7327] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 207.056542][ T7327] RSP: 002b:00007f4de0813028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 207.065196][ T7327] RAX: ffffffffffffffda RBX: 00007f4ddfc15fa0 RCX: 00007f4ddf99c819 [ 207.073203][ T7327] RDX: 0000000000000918 RSI: 0000200000000040 RDI: 0000000000000003 [ 207.081375][ T7327] RBP: 00007f4ddfa32c91 R08: 0000000000000000 R09: 0000000000000000 [ 207.089388][ T7327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 207.097382][ T7327] R13: 00007f4ddfc16038 R14: 00007f4ddfc15fa0 R15: 00007ffdb0b87ec8 [ 207.105385][ T7327] [ 207.119800][ T4285] Bluetooth: hci4: link tx timeout [ 207.125316][ T4285] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 213.765421][ T4285] Bluetooth: hci4: link tx timeout [ 213.770730][ T4285] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa