last executing test programs: 35.323214604s ago: executing program 1 (id=2456): r0 = syz_io_uring_setup(0x239, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) unshare(0x22020400) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_MKDIRAT={0x25, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)='./file0\x00'}) io_uring_enter(r0, 0x2def, 0x0, 0x0, 0x0, 0x0) 33.541926057s ago: executing program 1 (id=2457): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x11, @empty, 0x0, 0x0, 'sh\x00'}, 0x2c) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @dev}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x835f, 0x0, 0x4, 0x0, @multicast1, @empty}}}}}}, 0x0) 30.104591329s ago: executing program 0 (id=2465): r0 = inotify_init1(0x0) r1 = inotify_add_watch(r0, &(0x7f0000000200)='.\x00', 0x10000a0) r2 = dup(r0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) inotify_rm_watch(r2, r1) ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000040)) 29.461985069s ago: executing program 0 (id=2468): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000aaaaaaaaaa00aaaaaaaaaaaa0800450000141400e0000001"], 0x8a) 27.464911755s ago: executing program 0 (id=2473): syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) epoll_create1(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaeaaaaaa000000000000080045"], 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) sendmsg$NFC_CMD_GET_SE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, 0x0}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000003680)={{0x0, 0x0, 0x80}, "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", "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"}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000040)="660f3881ae000000c483b17e35e661c286000f08c4a2ed8c03f30f09f30fc7b5c5a40000410f01cbc4c2f9341cd50d0000000f7973d50f08", 0x38}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x0, 0x0, 0xd6e}}) ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x0, 0x0, 0x101}}) r6 = openat$vsock(0xffffffffffffff9c, 0x0, 0x10400, 0x0) r7 = syz_genetlink_get_family_id$smc(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(r6, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r7, 0x0, 0x70bd25, 0x25dfdc01}, 0x14}}, 0x800) sendmsg$SMC_PNETID_GET(r5, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r7, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000040}, 0x48894) syz_mount_image$squashfs(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f0000000680), 0x1, 0x1a1, &(0x7f0000000280)="$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") bpf$BPF_PROG_TEST_RUN(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x508d, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32, @ANYBLOB="08009e"], 0x24}}, 0x0) ioctl$VT_RESIZEX(r0, 0x4b65, &(0x7f00000002c0)) dup(0xffffffffffffffff) 26.43415609s ago: executing program 0 (id=2478): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000040)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@journal_dev={'journal_dev', 0x3d, 0x8000}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@minixdf}, {@resgid}, {@grpquota}, {@usrjquota}]}, 0x3, 0x44a, &(0x7f0000000400)="$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") chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000340)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f00000020c0)='./bus\x00', 0x0, 0x0) syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000540)='./file0\x00', 0x204018, &(0x7f0000000140)=ANY=[@ANYBLOB="6f76657272696465726f636b7065726d2c6e6f636f6d70726573732c686964652c73657373696f6e3d3078303030303030303030303030303032312c756e686964652c696f636861727365743d63703433372c6f76657272696465726f636b7065726d2c626c6f636b3d3078303030303030303030303030303430302c005fb50aab29cf1d32d24be5ab2a6506aa524c8f1cd5781842ee1c86bee627767fee958f25bb6db8e631262ed8a59d337d730b6698271aeb8c31c1902a7e236e5dd878e6c1352c0c799d8e80d7346f8d2870acebe617c694bbb925d3ab4fb01784c564c03d88c81d2f84f58e8c6ba18548f09fa6"], 0x1, 0x544, &(0x7f0000000580)="$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") ioctl$FS_IOC_SETFLAGS(r0, 0x4c02, &(0x7f0000000140)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) 25.108584717s ago: executing program 0 (id=2482): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000aaaaaaaaaa00aaaaaaaaaaaa0800450000141400e0000001"], 0x8a) 24.131560341s ago: executing program 0 (id=2487): syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) epoll_create1(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaeaaaaaa000000000000080045"], 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) sendmsg$NFC_CMD_GET_SE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, 0x0}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000003680)={{0x0, 0x0, 0x80}, "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", "cfb220c7d481332f3f1f8079dfe27e23185fd67a407358db7892789f96b7fa9b14daa48617a10d8a99b820ecbaa470ec0bb1f3cbce7f70ec70b19a4cad082229c2788f8611d7dc306d9a45761a97828c36ed87ebde5d4a3e1609c1422a8ae2f7cca428ebdb0dd38b90b9598a353b18a600bf35a369e6e3e5abb0a1c5c0c0e48e014e7ef1b7d768b3c5657f1adfbb7ff2985082b16c99eb83ec3660990dcf1106efa6b7f8a4798fec811c2c85faec0235c83b7093b3d02367421abc40a554e0b0d7fc1bcaece4222c594f8d20e368fe625ca433c75486fe5c94103cd17291349ee12b877602936688666f82ecd8f4f83d50bb1650e08b96cd25ad147c4c956c98649806a3736d072c8d97c6e3a46a7c18535df8d828b86662400d8e9cc861fa1dd5dc193892d3168396c499e07b279fb76c7e289f2fd955691363bc1de74536dc571817615c88b0d594a136966c129e424ccb7ef1c7c7461eac7ca5f03d72ea4c9c3d1156ee4cb1bb70e097357588b5c49f6716bbae1bd118104b42786f09a3b9f7cb80f383cadfd0c462096ff2bb637b7cf79764b6a4b7ffc5d87c1f063fb48e7f08ad5af534c70079f12f28e8921abbd4280801cdf6101ea494768b1274afd0eea5939843d56022a83590920fe446d52dfe699c33977d5592dbf7e0e236b8175d7faae06e0c50f7402174023ce4b996564e945c416fa823f2f9c3213ac50b20bd1fd55bb8d9fe70ee31ea2f404ae0fcbf857bebcc9196c8c622059fea2e248e4058905b69fb98be312d3193ea1d8ff653173e8c2371371b77a5bea45b3cd6fba19b6336f94ec04c8f86d24e9ca959874577d7ca0baf3c4ff30b554bc3ccc06df46d925373fbf7863e2cf684d3bc9603ab72b851ca4728294de87f2dec6f23ca9e43ed2e5cbba662d13137fc1ce0f6ae6aeb974f72f4b750825fafb67715e425f40c7da83b92d4249a0a4e96b789cceb7b07f38cb83f72dd093a345ab3cb8ae760fc14e40ea182a0d7fe1facc62a1ab0902349fd7e27bb0cd349fb5053f4734823abf020739b4b43bb11f5d69b61295068df31177959903c2ea1bb82d24eeaa93d0d4738d5d15b2a401e7ebe0d3cfbd45b2db2882cdb41408aaa718f8320fbb7f9da4f68d0eebeef175442e807e9908132731fe5e268582dcf6dffa4251ebb7121db8e412089fa9d8af9919799547a26b6b8eb44c28f1ce5f9a3021fe30841be204c1b4b3813dccae6baeef9b53fe413cbec46bb0cd95d3793cdc9bfe6cdd96ce0c4aa4a25e1cbbeeee6c9fa558b279048c7e31d07b125bac68d4e1f4253bd4dc7824cf3d722c94cf2b8f61bc8155731f072fd447082b181a13ffb8c08a1d568298c5de2d969fae2bea070a9e2688f294e76b8c200dfb993ec19778eb56ae3127c1116ccc85ef8806fdcb9ee0cb66ff03fbb0fa6c52b9b101b3830fc1650efa859163a264b4059092e5dc9a415ec09bfd1460f142fe5ef00beb6aa9032bd0de97aefc6f65e8cfeea761b3d8174caf528b6627682ff4d4450cb0f34251fc000ed01dd538ef13260984f44703b89dfb511bfb538d0b1c8aded964e1bcc5ca57437468b14a31ec0000a17e4d24369c40500449c37e7dccedba3eceb59d827dace246b5c48afb6a5988e64c560b3dc76c32d831f51cdbc5cfc4364ac8b25372b87c92bacfedc6bc8feb44098dbebc89cda03c59e4c58a31372bd574704b9e788834b9f83c6703f6709efad97c4ce499ea580dae1de282a019247cb3dce5c1906322e6d3ca5157ea6428bc42416936fac194efe136089c07faf7adf1e923003f1dc63fcbc634b389a4f351a6acee785e23c6bb04ca2f265be1e634362b87c6f9fd369bbe62a1db6b286c7ffde6370bb4d6e9e0cc3ec451e1a99d134726c9075e71319d3a683e91e4b900061c0e6d086481069cd32f4cde7816f8e3a0ac6428a7488f31f06ee0da10df3ed0c150d29085879d064f914407f60018bb588735663647bfeda930407d69abef3f72fd461c2b85b00988b412a180fd267fc646a86d297e7e40912607157b6fa873df6442579b1523d8117f0c06c87adf75843b8bff30a5bfb4fe1e9846b7fdd58774641baf9cc9c4e38e53ed24a9d9e9dbc7657aa9b220a8545852b0409f5c0812e953823e841967bf55059acc7a4600818134359e72cfae0d04a0738ac8acca133d6395a455b22cdd6f901d4cdea1cf17415f7d7895a4b65f80d2f7c5c60a0dc04b40c9ae5ffc922e074a82afd704673e1766d19db9f60eab0238fb4a3169a08aded607847e5d752d4e24c4914b95bac3892bcfc2076f16a7f07583f0d418b9dec03afdb2e93335a392e1b1ef2910eb2a4b6a63fe61641f3c02bef73cd7e4a77a6f30ae821598c3160511603541bea89022b54f321c2a55cdeeb19335d78a821ab6ca0f36588a9a79a41e2123905a491d658c2a1caeee998c995bb0f816c92c5dc2b862183f80b9f9786c9c5524723c944d11f6894c7f008ab8194f577e22c03631d2a33205f508ea49653e7600639242dbaba704f700ac227f32dc575c559a0a1f4fe0cf6c22fbf7e1ca2ab4b1e4724e8379021e3c9a7c1509c6a413bd7d9c98938e440762eda2546d636597defa86c1ad31126a1182d365f858927d140fb0a97f80adcc5f4ed5efe11ac503453917a263f1d64692348d30f382e85e464ef7616067a42df5de1a1b622fabefe2ca4ceffa4801f7a02fdef40644cd1d079590d900727628d54b44db7ac700d8d664f7eea12837fcf347360d8e43a354fe51b4c49e8fcda3c322b738ed2b800b5cc06e22c72af2a67ee7bc8ae894e841f2cf2b0a7e381caf944bf4e91ded63b6f82f7474e4f81e986fff7e5339b8e9f60103a1af81833e120f0c88893ecabac044a4a2867cda4fdcb084459a00507aa9e5a8e761a72df3322a1ae8cd918b4994c23bdb1e459b4f21651bd7fa067a00e2a2877bf6b29f289ed8018e0a78f8f4ed0b27cedd1c5e37f6381b320ab72da404f3d70d60152f6fa6738932387b83250cb3148141edb52f109bfd4bda8054959db01f4c550609a63c08cf01ecd110cfc6f0055638c0dde039d2ac2daafe59e561f9f08a8830c3f661e4325de63e98f4a4216ec3b83fd200201ed3f647147611424286ffc6c4a8aca64a6874743242d4feeaa9153de06e51c512d9cab7ae712c6424069f3e5db4ddebe9b48b5f6caa741162edf97674d2368e03a387f798151a4b9b9fa9e3a5838a343133158364a9fe3bb4b9a3c464c0c54a4c64ca774ad200925ac6bf59508c10a8574afde9b821741af43ec64cedc13aa220b39772195283506dfe899dd6a7b37eb21f154056a2df3564ef2bb918a928651de88c3613b84e7960bddd7b46b1304deb30f57b6fe5a3b4788629e91bcc2456a72fabb16b47da71624d2e9081de748b3387f52da4bb094782326dcfde0827e2d674e41bb375247d349cade9c704e5431785009b0e53f1b45c70b237c9432e07e4c7a8464ed11608a3d2184338dd9e6f6ef4b3d751e979667b6a3eead7a978071a912b3de21a85a5849c57933cf53cd74a610f3e60f699766fbc7e0bb8a891a429c77bb6f3b6f9f8eb0b1bd9588ef2ce98fdf0a0838e4b0bed807d8b673093c717feec8d697e32542274887d039db7a2daed5d52c8e9767443229f8003c5d67e907376ea2f393484fa70deee159cb56f8d097b8fe2736e95f540137e20725f0940a8d049068ead4c46bb3771a671bb00de88931e03445a55868de0c220db05cbda9f996d5fe7c1070efe5e718fed4d4cb4ecacad3d6b643bc0ffe9a71b720ba7b5adbbdefe29106ef6a6ffe4547f5d02bec312147df0abe80efb2d5e598fc7c8b268e58b59e0d75728e9a18126f013c963ddc92d251405f857fe3a5cbacf443be7772975b7bf4f6d7ed6f80dfcc47a88c6d19120942adb5385be6ef3c0d7e396bcac5affc8f9276d6cd1a0b069aed72a98cde8ea7aabe6cc091b19efcfaf9368dfeb3087a05a42e3b893dae5ffeb72e6ac06e995a2a75ea0b5f7876247bb4c38cf3f0153f1f7473b522f1c440b632270e2b1d654d3a5ae16cb788482760d34ca79c8951b29c628e21029715683a3e6f8f77c5d89ecdae37e0190f79c4c1dbc9d0160e359cd6c94d6662ed53bb01a83374ff593c823acc59241b11f020902069fc0054a9b26cb320bef4fb1f8cc5bd8ae76eb029afab731b9876bc4e8708a8315512823cff1f9375d284ce66e53d4efad6c76d17bb532fc938b8f80c13ce86b5ba3e540164bc5a5d47cd321c241d8740f453ef95bd3878d578561ad6ce20877ffbd44062dce8df1d048d8d5e4045be647886108cbb1f0b26a8b74b66858afedb830a161bb02bde4c46a688a0ea3a7018ce24666aab0f422ede2f78ea29f77e28d87c744cba0285ce33d0d9ac45774829699de6d725a9b6db6e7d03ad4ec9d075c386e68ca0bcd9e9911d741ed0168cbddb87a7918a964d206629da4e887277b0ef7d3f9c7082f3f15f29a0dfb39f3b0877a5ec3ac4343e0d808f5aee8f1869923aab6dfc3016821c013109f34aece6183994b853d0e9561375c02cdd26b1b55194757341929a8038864cedd6b5a3b8b51ade44637044c4ebddb190f173969a0ca4cf5d42153763a0b91da0110ae7a25204850927d81b00176d4568a3d444d8029bd010df784e3f673fe855601ec4f1b26b2df58841e6a65f0db66373f63cc14a8b07dfc52ac9957eb542d05ed687c79519609de96df18b63cb294b534ddf7d2e8f41bcc1e5a006191c4db057b6709f0a96f18e7e8f67b8be2a19c015b9c4b0b3f42e4de366b71f8da8888809473c3c7a02a1158e375f29997a43bc7118ca4d1abb8f8f21972fc589aaa3d73a4d40a1e1705e169ac6e56cff50d89fc45b6863c8fc67bb2b5939a7f33072539ba4c24077be5711ba368bf7efd4897931531d388eb5c2e56bef337777150dd59518652145c9594e110e41d2615196c6b197916c88cc2814e13a3a922b4ecb044bf31cc90e0bfe0ce07de29188bbcb0ec1a12b509f52582fbb948c3cbe0c6964f46991cec0704bfac08aec6ad8ddfc36dc68c7f547c5ee6af4a8d55c79e3dc1c49b045379811f81e9a185a92cd37ae4ee32c5d3c82d36d6202a6c84fd231fe467071d42072827fd77afa5d757e6f37247f783ef09bdfd7536b666e84bc4bb878005b7829293a04ba090272dec844f4ef0e934617c08518bdc6b915ac6f3f03e4a6ab88e21c3f21f93b31d95ea3b9228e0031cb69795de5abd19c4cb4a0cf2984e53ca391cc66e33ee0d510151670331fa264753704fea5e4b1760f74890c49a74a47e0da13155c5470013d53dea0f05b5e088f1511c209f5be940232318af2757951d399e32eb862d915784713baa8ba93645caf04ba78fa3cf600ff92b9c5be58ad87438a340bac00a5ea9fb17e39478ba61fe36335e48d8c5a0b25f024cbd2ec7f217d0f260951da396dc13a2a74cd90df4b52db686e3b34d27cfa4cebd7bf59cbcfaf4007dc943a1da6e0bd1799a21ab449d7bb42935e50c839c5b567c59742436af15bc8d46095520dcd9273ae2b6f3c1cc2b4311ac9e5d297f0940b1552c5955adb302022022bb7457978998b56328629b7725dfbe3dedb37f37af0697a4471d1d6ff6bec633a38540adeba903f3eaaec5785fbb3c6a598f49dbd9ff93c67dea1ef39a614331b119fa8efccc8bac01595fb95a2a57eec9fc6c6fe82782aa89ea971866fd9a3bca4010182092ab6d1e2b49b964be9e3bb13bd6b77850e435f55a5d46e5bcb3330c7edefd31c33f61275e51600"}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000040)="660f3881ae000000c483b17e35e661c286000f08c4a2ed8c03f30f09f30fc7b5c5a40000410f01cbc4c2f9341cd50d0000000f7973d50f08", 0x38}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x0, 0x0, 0xd6e}}) ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x0, 0x0, 0x101}}) r6 = openat$vsock(0xffffffffffffff9c, 0x0, 0x10400, 0x0) r7 = syz_genetlink_get_family_id$smc(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(r6, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r7, 0x0, 0x70bd25, 0x25dfdc01}, 0x14}}, 0x800) sendmsg$SMC_PNETID_GET(r5, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r7, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000040}, 0x48894) syz_mount_image$squashfs(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f0000000680), 0x1, 0x1a1, &(0x7f0000000280)="$eJzs0L9rE2EYwPHv894laYQqUXGoYAMWzgvVJOePwSk4RciBg4tD0JCeTfGiJpfBlBZcpCDV/gs61VEFnUQUnIuD4KDn0k2aoThIBnnlktN/ou8Hki/PA8cdTyfqRTngz/5amxoTFof5jGAD8zLdKaV10rfp/DPt1jRcSefNtC/SzkXDJGHQL14uUvi/SP2a7KLh6p1WGAb96BUnFCOhhnzdX2u35JaPrtFVSz6FBqUnWE167lPm7FmO38RCO5tcVfTEacCR8qB7vxwNV8+udFvLwXJw1/POX6pcqFQueuXbK2FQeYO4j0XxjHVcn5xP3l0n0+TRjn2IRUHcjootKY3INtnasc6cXhyh3D00wgdnRO673Smq62OdR2utqXNMeI7ls9Agr7CZvKiOXFOvpWp/sX9nFDM5rHPte+HSxg0l4+x2TfZmpLpLxqnilfLTW5F0I2Yhph6zHbP7g3l5l5zo313th8n/y3Q6ySnI8qA1GPSrWfgkjo+X/Aowy1E+oibfVYD36TNp+CYYhmEYhmEYhmEYB8bfAAAA//+v9WT/") bpf$BPF_PROG_TEST_RUN(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x508d, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32, @ANYBLOB="08009e"], 0x24}}, 0x0) ioctl$VT_RESIZEX(r0, 0x4b65, &(0x7f00000002c0)) dup(0xffffffffffffffff) 5.886185117s ago: executing program 3 (id=2555): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r1, 0x5609, &(0x7f0000000380)={0x0, 0x0, 0xfffe}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'dummy0\x00'}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001f80)=ANY=[@ANYBLOB="1c0000005a0000f624bd3000fcdbdf25000800010002000000000000"], 0x1c}}, 0x16) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_mcast\x00') rename(&(0x7f0000002040)='./file0\x00', 0x0) read$char_usb(r4, &(0x7f0000000040)=""/4122, 0x101a) socket(0x10, 0x803, 0x0) r5 = memfd_create(&(0x7f0000000d00)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x05\x00\x00\x00\x00\x00\x00\x00_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xf0y\xd6\xb0\xf2\x9f\xa7\xcf\xad\x86\\\xec\xec\xd6\x9d\bT\xcd\xa2\xea', 0xe) fcntl$dupfd(r5, 0x0, r5) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2660004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 5.305111243s ago: executing program 2 (id=2557): syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e05040f20"], 0x8) 4.724402396s ago: executing program 2 (id=2559): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f00000008c0)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@orlov}, {@abort}, {@nombcache}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000140)='.\x00', 0x1a4a438, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) 4.52407093s ago: executing program 4 (id=2560): r0 = syz_open_dev$video4linux(&(0x7f00000000c0), 0xfff, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r0, 0xc040564a, &(0x7f0000000080)={0x0, 0x0, 0x100f}) 4.468758747s ago: executing program 3 (id=2561): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x250, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x220, 0x2, [@TCA_CHOKE_MAX_P, @TCA_CHOKE_STAB={0x5b, 0x2, "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"}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x250}}, 0x0) 4.140041726s ago: executing program 4 (id=2562): sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x5}, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') ioctl$HIDIOCSUSAGES(r0, 0x501c4814, &(0x7f0000000a80)={{0x3, 0x200, 0x7, 0x0, 0x1, 0x1}, 0x244, [0x80, 0x3e2d, 0x7, 0x38, 0x10, 0x0, 0xfffffe01, 0x2, 0x0, 0x8, 0x7ff, 0x87c, 0x7fffffff, 0x100, 0x8f, 0x7fff, 0x9f, 0xf0000000, 0x81, 0xa033, 0x7fffffff, 0x4, 0x3, 0x3, 0x0, 0x8, 0x8, 0x10000, 0xff, 0x1f, 0x7, 0x401, 0x2, 0x0, 0x5, 0x0, 0x384, 0x2, 0x2, 0xfffffffb, 0x188, 0x3000, 0x1000, 0x8, 0xa8, 0x4af8, 0x5a800, 0x0, 0x4, 0x400, 0x957c0422, 0x3c, 0x0, 0x80000001, 0x9e, 0x2, 0x7fffffff, 0xce, 0x8, 0x5, 0xa52, 0x3, 0x1, 0x4, 0x0, 0x2, 0x9, 0x9, 0x2, 0x2aba, 0x4, 0x7, 0x0, 0xc269, 0xfffff800, 0x80000000, 0x400, 0x717, 0x7fff, 0x8ac3, 0x8, 0x7ff, 0x0, 0x41f3, 0x0, 0x7fff, 0x9, 0x400, 0x8, 0x4, 0x2, 0x7f, 0x1, 0xfffffffc, 0x3, 0x57, 0x7fff, 0xeb, 0x2, 0x8, 0x1ff, 0xe400, 0x40, 0x2, 0x8, 0x2, 0x4, 0x3, 0x5, 0x0, 0x1, 0x5, 0x5, 0x575, 0x7fff, 0x5628566d, 0x8, 0x1ff, 0x7, 0x45be, 0x7cf, 0x0, 0x9, 0x6, 0x0, 0x8, 0x0, 0x2c, 0x7, 0xfffff8bc, 0x3b, 0x100, 0x8, 0x8000, 0x10001, 0x2, 0x2, 0x7, 0x4, 0x8, 0xbb, 0x0, 0xffffff7f, 0x81, 0x9, 0xfffffffc, 0x7fff, 0x800, 0x0, 0x6, 0x8, 0x5, 0x4, 0x0, 0x9f, 0x6, 0x20000000, 0xc401, 0x4, 0x4f9, 0xc7, 0x7f, 0x8000, 0xffff, 0x2, 0x3ff, 0x6, 0x1, 0xfff, 0xfffffff7, 0x9, 0x101, 0x808, 0x800, 0x14, 0x9, 0x1, 0x7f, 0x9, 0x6fe, 0x5, 0x0, 0x5, 0x1, 0x10001, 0x100, 0x8000, 0xffffffff, 0x2, 0x6c9c, 0x3, 0x3f, 0x1, 0xea9, 0x52e087f8, 0x89, 0x9, 0xcd2, 0x9, 0x10000, 0x1000, 0x2, 0x5, 0x7, 0x9, 0x2, 0x1, 0x0, 0xfffffffe, 0x6, 0x60, 0x4, 0x4, 0x2, 0x7, 0x6, 0x2, 0xffff, 0x0, 0x5, 0x8, 0x0, 0x0, 0x8, 0x1, 0x12, 0x0, 0x5, 0x8001, 0x7f, 0x7, 0x3, 0x7fff, 0x80000000, 0x1, 0xfff, 0x9, 0x5, 0x1, 0x2, 0x2040, 0x2, 0x7, 0x2, 0x7, 0x1f, 0x5f5, 0x0, 0xb2e8, 0x7, 0x4, 0x7, 0x401, 0x9ac, 0x0, 0xfff, 0x4, 0x7, 0x6, 0x6, 0x6, 0x8, 0x1, 0x40, 0x4, 0x1000, 0x2, 0xff, 0x40, 0x2, 0x10000, 0x59a2, 0x7, 0x80, 0x8001, 0x6, 0x80, 0xffffff81, 0x3, 0x7, 0x941, 0x0, 0x5, 0xffffffff, 0xfff, 0x39, 0x8, 0x200, 0x80000000, 0x4, 0x0, 0xffffff81, 0x1, 0xaeb1, 0x7fffffff, 0x2, 0x3ff, 0x5, 0x1, 0x8, 0x4, 0x7fff, 0x0, 0x9, 0xffc00000, 0x2, 0x8, 0x200, 0x2, 0x0, 0x84a, 0x0, 0x800, 0x2, 0x6, 0x4, 0x9, 0x2, 0x7, 0x80000001, 0x9, 0x800, 0x3, 0x3ff, 0x3f, 0x0, 0x3, 0x76e, 0xffffffff, 0x6, 0x0, 0x3, 0x0, 0x36, 0x2, 0x12b9, 0x80000001, 0x6, 0x7, 0x81, 0x1, 0x0, 0x0, 0x0, 0x2, 0x3, 0x7, 0x0, 0x0, 0x8001, 0x10000, 0x7, 0x80, 0x3ff, 0x2d2, 0xa9, 0x7, 0x60f, 0x1d, 0x2661, 0x0, 0x3, 0xfff, 0xe5, 0x3, 0x401, 0x4e9d, 0xffffff04, 0x8, 0x8000, 0x5, 0x1, 0x1, 0x1, 0x81ab, 0xfffffffe, 0xd3, 0x0, 0x0, 0x6, 0x7, 0x8, 0x0, 0x9, 0x7f, 0x6, 0x7fffffff, 0x200, 0x3, 0x7, 0x4, 0x0, 0x3, 0x7, 0x196c, 0x3, 0x1, 0x0, 0x8887, 0x4, 0x6, 0x9, 0x8, 0xffff, 0x7fff, 0x6, 0x0, 0x0, 0x7, 0x6, 0x0, 0x6, 0x7fff, 0x16, 0xdce, 0x3, 0x0, 0x40, 0x0, 0x80, 0xfff, 0x8001, 0x2, 0x3562, 0x9, 0x100, 0xa13, 0x800, 0x0, 0x80, 0x2, 0xff, 0x2, 0x0, 0x80000001, 0x0, 0x40, 0x7, 0x80000001, 0x7, 0x1, 0x7f, 0x2f9, 0x0, 0x400, 0x7, 0x0, 0x1f, 0x0, 0xfffffffe, 0x3, 0x80000000, 0xac, 0x3f, 0xffff, 0x3, 0x200, 0x0, 0x7, 0x3, 0xfff, 0x5, 0x800, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7, 0x3ff, 0x0, 0x9, 0x0, 0x0, 0x0, 0xdd, 0xfffffffc, 0xdb, 0x1, 0x8, 0x1f, 0x5, 0xffff, 0x7fffffff, 0x80000000, 0x85c9, 0x9eb, 0x7fff, 0x0, 0x80000000, 0x0, 0x9, 0x6, 0x7, 0xfffff000, 0x9e88, 0xffffffff, 0xe2e, 0xef, 0x9, 0x1fff, 0x14, 0x6, 0x9, 0xa2e5, 0x9, 0x3, 0x400, 0x200, 0x5, 0xff, 0x5, 0x40, 0x7, 0x3f1ff158, 0x0, 0x1, 0xffff, 0x81, 0x2, 0xfffffffe, 0x0, 0x1, 0xfff, 0x0, 0xfffff000, 0x3f, 0x1, 0x87be, 0x0, 0x0, 0x1f, 0x5, 0xff, 0x1, 0x4, 0x8001, 0x9, 0xffff, 0xfffffff9, 0x80000001, 0x7, 0x1, 0x7f, 0x7, 0xd0c, 0x63160000, 0x9fac, 0x518a, 0x200, 0x0, 0x0, 0x3, 0x2, 0x7e0000, 0x1f, 0x1000, 0x6, 0x0, 0xffff0001, 0x4, 0x13877e53, 0x401, 0x3ff, 0x4, 0x4, 0xffff, 0x4b8, 0x5, 0x8, 0x5, 0x5, 0x0, 0x6, 0x0, 0x8000, 0x8000, 0x400, 0x100, 0x5, 0x85, 0xfffffff7, 0x80000000, 0xfff, 0x8, 0x0, 0x1, 0x10001, 0x0, 0x8f, 0x10000, 0x8, 0x400, 0x8000, 0x7, 0x4, 0x80000001, 0x1, 0x3, 0x7, 0xfffffffb, 0x3, 0x5, 0x1, 0x0, 0x1, 0x101, 0x6, 0x42, 0x0, 0x70e, 0x1e4b, 0x0, 0x0, 0x8001, 0x8, 0xffff, 0x0, 0x3, 0xd8f, 0x2, 0xffff, 0x7fff, 0x1, 0x20c1e61b, 0x7, 0x925, 0x1, 0x5, 0x8, 0x5, 0x8, 0x9, 0xce7, 0x6, 0x7, 0x40, 0x7fff, 0x1, 0x9, 0x4, 0x200, 0x3, 0x7, 0x20, 0x10001, 0x20d, 0x101, 0xfffff001, 0x6, 0x6, 0xfffffc01, 0x10001, 0x7, 0x1f, 0xfff, 0x0, 0x453, 0x3f, 0x7, 0x1, 0x1, 0x0, 0xffff, 0x1ff, 0x401, 0x1000, 0x1, 0x1c99, 0x8, 0xb92c, 0xff, 0xd98, 0xe7, 0x10000, 0xb7, 0x0, 0xc3da, 0x1000, 0x7, 0x40, 0x3f, 0x2, 0x5, 0x4, 0xffc0000, 0x8001, 0x20, 0x0, 0x6, 0x8000, 0x9, 0x4895, 0x0, 0x0, 0x8001, 0xed3a, 0x3, 0xffffffff, 0x0, 0x7, 0x1, 0x7, 0x7fff, 0xff, 0xffff, 0xd7bccc9, 0x2, 0x7fffffff, 0x2d, 0x6, 0x0, 0x7ff, 0x3, 0xffffffff, 0x2, 0x6, 0x2, 0x3ff, 0x4, 0xfffffff7, 0x0, 0xfffffffd, 0x6, 0x6, 0xa, 0x0, 0xe78b, 0x2, 0x8, 0x2, 0x100000, 0x8001, 0xffffffff, 0x46cc3989, 0x800, 0x7, 0x1, 0x7, 0xffffcc60, 0x80000001, 0xffffff00, 0x3, 0x5, 0x6, 0x0, 0x0, 0x100, 0x99f5, 0x3, 0x7fffffff, 0x1, 0x9, 0xfffffe82, 0x1, 0x0, 0xfffffff9, 0x2, 0x4, 0x1000, 0xffffff86, 0x80, 0x3, 0x6, 0x0, 0xfffffffe, 0x1f, 0x2, 0xb86, 0x0, 0x4, 0x7fff, 0x20, 0x2, 0x7fffffff, 0x8, 0x9, 0x0, 0x0, 0x0, 0x13, 0x7fffffff, 0x800, 0xffffffff, 0x0, 0x8, 0x0, 0x4, 0xc60, 0x0, 0x5b1d, 0x9, 0x0, 0x6c63, 0x4, 0x4, 0x0, 0x7, 0x1000, 0x200, 0x7, 0x617, 0x7f, 0x7, 0x7fffffff, 0x0, 0xdeb, 0x9, 0x86cb, 0x9ef6, 0x0, 0xfffffffa, 0x9, 0x4, 0x3, 0xe1c, 0x2, 0x0, 0x8000, 0x1, 0x7, 0x1, 0x80000001, 0x4, 0xffffffff, 0x78, 0x7, 0x0, 0x80000000, 0xffffffff, 0x8, 0x91, 0x1000, 0x7, 0x8bcf, 0x20, 0x6, 0x1, 0x1f, 0x0, 0x9, 0x4, 0x9, 0x4db, 0x2, 0x4, 0x1, 0x0, 0x10000, 0x2c0, 0x9, 0x20, 0x0, 0xe0c, 0x8001, 0x0, 0x7, 0xfff, 0x20, 0x3, 0x4, 0x3f, 0x1f, 0x3, 0xd8e, 0x3, 0x40, 0x0, 0x0, 0x80, 0x0, 0x3, 0x2, 0x7fffffff, 0x3ff, 0xfff, 0x3, 0x81, 0x5, 0x8, 0x9, 0x20, 0x2, 0xfffffffc, 0xfdf, 0x3, 0x1b, 0x2c58, 0x6, 0x1, 0xdc6, 0x0, 0x0, 0x83b, 0x0, 0x20, 0x7fffffff, 0x1, 0x8, 0x0, 0x5269, 0x7, 0x2, 0x1000, 0x7, 0x1, 0x8, 0x4, 0x3, 0x1, 0x2, 0x3ff, 0x20, 0x1ff, 0x400, 0x3, 0x1, 0xbb, 0x1f, 0x7fffffff, 0x4, 0x8, 0x5, 0x5, 0x40, 0x4, 0x7fffffff, 0x7, 0x1f, 0x3ee, 0x10002000, 0x3, 0x1, 0xb, 0x81, 0x4, 0x5, 0x7fff, 0x5c, 0x0, 0x6, 0xfffff58e, 0x3, 0x2, 0x3f, 0x100, 0xdad, 0x7, 0xb14, 0x1000, 0x53, 0x9, 0x1ff, 0xfffffbff, 0x0, 0x9, 0xfffffff8, 0x7, 0x800, 0x48a8, 0x7, 0x80000000, 0x7, 0x6, 0x5, 0x800, 0x3, 0x400, 0x3fe30496, 0x8, 0x6, 0x0, 0x40, 0x7, 0x1ff, 0x7f, 0x0, 0x3f12, 0xfffffff9, 0x0, 0x3d02, 0x7, 0x3, 0x1, 0x10000, 0x4, 0x6, 0x3, 0x8001, 0x7, 0xffffffff, 0x0, 0x80000001, 0x0, 0x800, 0x5, 0x6, 0x2, 0x7, 0x7, 0x1ff, 0x1, 0x0, 0xec5, 0x6, 0x9, 0x3, 0x7, 0x100, 0x6, 0x190, 0x10001, 0x1f, 0x400, 0x9169fb1, 0x0, 0x9, 0x7, 0x0, 0xeee, 0x9, 0x2, 0x6, 0x999]}) r1 = open(&(0x7f0000000a40)='./bus\x00', 0x141a42, 0x0) sendfile(r1, r0, 0x0, 0x100801700) 3.860579338s ago: executing program 3 (id=2563): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSTI(r1, 0x5409, 0x0) 3.495828182s ago: executing program 4 (id=2564): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r0, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) 3.331263663s ago: executing program 3 (id=2565): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x24, r1, 0x60b, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x24}}, 0x0) 2.913558562s ago: executing program 2 (id=2566): openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 2.631009272s ago: executing program 3 (id=2567): syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000580)='./file0\x00', 0x0, &(0x7f0000001900)=ANY=[], 0x1, 0x232, &(0x7f00000006c0)="$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") syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000dbdc79089911aa682bc5000000010902120001000000000904000000ffffff"], 0x0) 2.248568917s ago: executing program 4 (id=2568): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000340)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x60}}, 0x0) 1.996167159s ago: executing program 1 (id=2458): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008000, &(0x7f0000000240)={[{@debug}, {@orlov}, {@nomblk_io_submit}, {@block_validity}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}, {@init_itable_val}, {@usrquota}, {@usrquota}]}, 0x1, 0x5ba, &(0x7f0000001bc0)="$eJzs3c1vVFUbAPDnTD8olPdtIUbFhTQxBhKlpQUMMS5gTxr8iBs3VloIUqChNVo0sSS4MTFujDFx5UL8L5TIlpWuXLhxZUiIGpYmjrkzc0tb7rS0THsr9/dLht57zlzOczt9eu6cnnMngMoayv6pReyLiJkUMZAWFuu6o1U51Hzevb8+OpM9UtTrr/+RIrXK8uen1tf+1sF9EfHTjyn2dj3Y7uz81QsT09NTV1r7I3MXZ0Zm568eOn9x4tzUualLYy+NHT929Njx0cMdO9dT1999f+DT8be+/frvNPrdr+MpTsTuVt3S8+iUoRhqfk92LC/Pvq/HO91YSbpa57P0JU7dJQbEuuSvX09EPBUD0RX3X7yB+OTVUoMDNlU9RdSBikryHyoqvw7I39uvfB9cK+WqBNgKd082BwAezP/u5thg9DXGBnbdS7F0WCdFRCdG5rI2bt8av3721vj12KRxOKDYwrWIeLoo/1MjNwcbo/hZ/teW5X92XXC69TUrf22D7Q+t2Jf/sHWa+d+3ofx/e0n+v7PB9uU/AAAAAAAAdM7NkxHxYtHf/2uL83+iYP5Pf0Sc6ED7a//9r3anA80ABe6ejHilcP5vLZ/9O9jV2vpfYz5ATzp7fnrqcET8PyIORs+ObH90lTYOfbb3q3Z1+fy//JG1f7s1F7AVx53uFetnJyfmJh71vIGIu9cinimc/5sW+/9U0P9nvw9mHrKNvc/fON2ubu38BzZL/ZuIA4X9f1p8Tlr9/hwjjeuBkfyq4EHPfvj59+3al/9Qnqz/37V6/g+mpffrmV1/G0fmu+vt6jZ6/d+b3mjccqa3VfbBxNzcldGI3nSqKytdVj62/pjhcZTnQ54vWf4ffG718b+i6/+dEbGw4v9Ofy5fU5x78p/+39rFo/+H8mT5P7mu/n/9G2M3Bn9o1/7D9f9HG339wVaJ8T9o+jJP097l5QXp2F1UtdXxAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDjoBYRuyPVhhe3a7Xh4Yj+iHgidtWmL8/OvXD28nuXJrO6xuf/1/JP+h1o7qf88/8Hl+yPrdg/EhF7IuKLrp2N/eEzl6cnyz55AAAAAAAAAAAAAAAAAAAA2Cb626z/z/zeVXZ0wKbrLjsAoDQF+f9zGXEAW0//D9Ul/6G65D9Ul/yH6pL/UF3yH6pL/kN1yX8AAAAAAHis7Nl/85cUEQsv72w8Mr2tup5SIwM2W63sAIDSuMUPVJepP1Bd3uMDaY36vrYHrXXkambOPMLBAAAAAAAAAAAAAFA5B/ZZ/w9VZf0/VJf1/1Bd+fr//SXHAWw97/GBWGMlf+H6/zWPAgAAAAAAAAAAAAA6aXb+6oWJ6empKzbe3B5hbOVGvV7/OPsp2C7x/Mc38qnw2yWeR9oo9/cSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABw378BAAD//2QiJqY=") syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x4008a, &(0x7f00000001c0)={[{@dioread_nolock}, {@usrjquota, 0x22}, {@errors_continue}, {@noload}, {@data_err_ignore}, {@grpjquota, 0x22}, {@errors_continue}, {@jqfmt_vfsold}, {@usrjquota}]}, 0xfe, 0x44e, &(0x7f0000000900)="$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") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x61, &(0x7f00000001c0)=ANY=[], 0x1, 0x0, &(0x7f0000000000)) 1.863921494s ago: executing program 4 (id=2569): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket(0x10, 0x3, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r1, 0x5609, &(0x7f0000000380)={0x0, 0x0, 0xfffe}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'dummy0\x00'}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001f80)=ANY=[@ANYBLOB="1c0000005a0000f624bd3000fcdbdf25000800010002000000000000"], 0x1c}}, 0x16) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_mcast\x00') rename(&(0x7f0000002040)='./file0\x00', 0x0) read$char_usb(r4, &(0x7f0000000040)=""/4122, 0x101a) socket(0x10, 0x803, 0x0) r5 = memfd_create(&(0x7f0000000d00)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x05\x00\x00\x00\x00\x00\x00\x00_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xf0y\xd6\xb0\xf2\x9f\xa7\xcf\xad\x86\\\xec\xec\xd6\x9d\bT\xcd\xa2\xea', 0xe) fcntl$dupfd(r5, 0x0, r5) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2660004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.393555549s ago: executing program 2 (id=2570): r0 = syz_open_dev$video4linux(&(0x7f00000000c0), 0xfff, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r0, 0xc040564a, &(0x7f0000000080)={0x0, 0x0, 0x100f}) 1.027277864s ago: executing program 1 (id=2571): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)={0x2, 0xf, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @loopback}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @private}, @in=@empty}}]}, 0x80}}, 0x0) 897.104571ms ago: executing program 2 (id=2572): sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x5}, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') ioctl$HIDIOCSUSAGES(r0, 0x501c4814, &(0x7f0000000a80)={{0x3, 0x200, 0x7, 0x0, 0x1, 0x1}, 0x244, [0x80, 0x3e2d, 0x7, 0x38, 0x10, 0x0, 0xfffffe01, 0x2, 0x0, 0x8, 0x7ff, 0x87c, 0x7fffffff, 0x100, 0x8f, 0x7fff, 0x9f, 0xf0000000, 0x81, 0xa033, 0x7fffffff, 0x4, 0x3, 0x3, 0x0, 0x8, 0x8, 0x10000, 0xff, 0x1f, 0x7, 0x401, 0x2, 0x0, 0x5, 0x0, 0x384, 0x2, 0x2, 0xfffffffb, 0x188, 0x3000, 0x1000, 0x8, 0xa8, 0x4af8, 0x5a800, 0x0, 0x4, 0x400, 0x957c0422, 0x3c, 0x0, 0x80000001, 0x9e, 0x2, 0x7fffffff, 0xce, 0x8, 0x5, 0xa52, 0x3, 0x1, 0x4, 0x0, 0x2, 0x9, 0x9, 0x2, 0x2aba, 0x4, 0x7, 0x0, 0xc269, 0xfffff800, 0x80000000, 0x400, 0x717, 0x7fff, 0x8ac3, 0x8, 0x7ff, 0x0, 0x41f3, 0x0, 0x7fff, 0x9, 0x400, 0x8, 0x4, 0x2, 0x7f, 0x1, 0xfffffffc, 0x3, 0x57, 0x7fff, 0xeb, 0x2, 0x8, 0x1ff, 0xe400, 0x40, 0x2, 0x8, 0x2, 0x4, 0x3, 0x5, 0x0, 0x1, 0x5, 0x5, 0x575, 0x7fff, 0x5628566d, 0x8, 0x1ff, 0x7, 0x45be, 0x7cf, 0x0, 0x9, 0x6, 0x0, 0x8, 0x0, 0x2c, 0x7, 0xfffff8bc, 0x3b, 0x100, 0x8, 0x8000, 0x10001, 0x2, 0x2, 0x7, 0x4, 0x8, 0xbb, 0x0, 0xffffff7f, 0x81, 0x9, 0xfffffffc, 0x7fff, 0x800, 0x0, 0x6, 0x8, 0x5, 0x4, 0x0, 0x9f, 0x6, 0x20000000, 0xc401, 0x4, 0x4f9, 0xc7, 0x7f, 0x8000, 0xffff, 0x2, 0x3ff, 0x6, 0x1, 0xfff, 0xfffffff7, 0x9, 0x101, 0x808, 0x800, 0x14, 0x9, 0x1, 0x7f, 0x9, 0x6fe, 0x5, 0x0, 0x5, 0x1, 0x10001, 0x100, 0x8000, 0xffffffff, 0x2, 0x6c9c, 0x3, 0x3f, 0x1, 0xea9, 0x52e087f8, 0x89, 0x9, 0xcd2, 0x9, 0x10000, 0x1000, 0x2, 0x5, 0x7, 0x9, 0x2, 0x1, 0x0, 0xfffffffe, 0x6, 0x60, 0x4, 0x4, 0x2, 0x7, 0x6, 0x2, 0xffff, 0x0, 0x5, 0x8, 0x0, 0x0, 0x8, 0x1, 0x12, 0x0, 0x5, 0x8001, 0x7f, 0x7, 0x3, 0x7fff, 0x80000000, 0x1, 0xfff, 0x9, 0x5, 0x1, 0x2, 0x2040, 0x2, 0x7, 0x2, 0x7, 0x1f, 0x5f5, 0x0, 0xb2e8, 0x7, 0x4, 0x7, 0x401, 0x9ac, 0x0, 0xfff, 0x4, 0x7, 0x6, 0x6, 0x6, 0x8, 0x1, 0x40, 0x4, 0x1000, 0x2, 0xff, 0x40, 0x2, 0x10000, 0x59a2, 0x7, 0x80, 0x8001, 0x6, 0x80, 0xffffff81, 0x3, 0x7, 0x941, 0x0, 0x5, 0xffffffff, 0xfff, 0x39, 0x8, 0x200, 0x80000000, 0x4, 0x0, 0xffffff81, 0x1, 0xaeb1, 0x7fffffff, 0x2, 0x3ff, 0x5, 0x1, 0x8, 0x4, 0x7fff, 0x0, 0x9, 0xffc00000, 0x2, 0x8, 0x200, 0x2, 0x0, 0x84a, 0x0, 0x800, 0x2, 0x6, 0x4, 0x9, 0x2, 0x7, 0x80000001, 0x9, 0x800, 0x3, 0x3ff, 0x3f, 0x0, 0x3, 0x76e, 0xffffffff, 0x6, 0x0, 0x3, 0x0, 0x36, 0x2, 0x12b9, 0x80000001, 0x6, 0x7, 0x81, 0x1, 0x0, 0x0, 0x0, 0x2, 0x3, 0x7, 0x0, 0x0, 0x8001, 0x10000, 0x7, 0x80, 0x3ff, 0x2d2, 0xa9, 0x7, 0x60f, 0x1d, 0x2661, 0x0, 0x3, 0xfff, 0xe5, 0x3, 0x401, 0x4e9d, 0xffffff04, 0x8, 0x8000, 0x5, 0x1, 0x1, 0x1, 0x81ab, 0xfffffffe, 0xd3, 0x0, 0x0, 0x6, 0x7, 0x8, 0x0, 0x9, 0x7f, 0x6, 0x7fffffff, 0x200, 0x3, 0x7, 0x4, 0x0, 0x3, 0x7, 0x196c, 0x3, 0x1, 0x0, 0x8887, 0x4, 0x6, 0x9, 0x8, 0xffff, 0x7fff, 0x6, 0x0, 0x0, 0x7, 0x6, 0x0, 0x6, 0x7fff, 0x16, 0xdce, 0x3, 0x0, 0x40, 0x0, 0x80, 0xfff, 0x8001, 0x2, 0x3562, 0x9, 0x100, 0xa13, 0x800, 0x0, 0x80, 0x2, 0xff, 0x2, 0x0, 0x80000001, 0x0, 0x40, 0x7, 0x80000001, 0x7, 0x1, 0x7f, 0x2f9, 0x0, 0x400, 0x7, 0x0, 0x1f, 0x0, 0xfffffffe, 0x3, 0x80000000, 0xac, 0x3f, 0xffff, 0x3, 0x200, 0x0, 0x7, 0x3, 0xfff, 0x5, 0x800, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7, 0x3ff, 0x0, 0x9, 0x0, 0x0, 0x0, 0xdd, 0xfffffffc, 0xdb, 0x1, 0x8, 0x1f, 0x5, 0xffff, 0x7fffffff, 0x80000000, 0x85c9, 0x9eb, 0x7fff, 0x0, 0x80000000, 0x0, 0x9, 0x6, 0x7, 0xfffff000, 0x9e88, 0xffffffff, 0xe2e, 0xef, 0x9, 0x1fff, 0x14, 0x6, 0x9, 0xa2e5, 0x9, 0x3, 0x400, 0x200, 0x5, 0xff, 0x5, 0x40, 0x7, 0x3f1ff158, 0x0, 0x1, 0xffff, 0x81, 0x2, 0xfffffffe, 0x0, 0x1, 0xfff, 0x0, 0xfffff000, 0x3f, 0x1, 0x87be, 0x0, 0x0, 0x1f, 0x5, 0xff, 0x1, 0x4, 0x8001, 0x9, 0xffff, 0xfffffff9, 0x80000001, 0x7, 0x1, 0x7f, 0x7, 0xd0c, 0x63160000, 0x9fac, 0x518a, 0x200, 0x0, 0x0, 0x3, 0x2, 0x7e0000, 0x1f, 0x1000, 0x6, 0x0, 0xffff0001, 0x4, 0x13877e53, 0x401, 0x3ff, 0x4, 0x4, 0xffff, 0x4b8, 0x5, 0x8, 0x5, 0x5, 0x0, 0x6, 0x0, 0x8000, 0x8000, 0x400, 0x100, 0x5, 0x85, 0xfffffff7, 0x80000000, 0xfff, 0x8, 0x0, 0x1, 0x10001, 0x0, 0x8f, 0x10000, 0x8, 0x400, 0x8000, 0x7, 0x4, 0x80000001, 0x1, 0x3, 0x7, 0xfffffffb, 0x3, 0x5, 0x1, 0x0, 0x1, 0x101, 0x6, 0x42, 0x0, 0x70e, 0x1e4b, 0x0, 0x0, 0x8001, 0x8, 0xffff, 0x0, 0x3, 0xd8f, 0x2, 0xffff, 0x7fff, 0x1, 0x20c1e61b, 0x7, 0x925, 0x1, 0x5, 0x8, 0x5, 0x8, 0x9, 0xce7, 0x6, 0x7, 0x40, 0x7fff, 0x1, 0x9, 0x4, 0x200, 0x3, 0x7, 0x20, 0x10001, 0x20d, 0x101, 0xfffff001, 0x6, 0x6, 0xfffffc01, 0x10001, 0x7, 0x1f, 0xfff, 0x0, 0x453, 0x3f, 0x7, 0x1, 0x1, 0x0, 0xffff, 0x1ff, 0x401, 0x1000, 0x1, 0x1c99, 0x8, 0xb92c, 0xff, 0xd98, 0xe7, 0x10000, 0xb7, 0x0, 0xc3da, 0x1000, 0x7, 0x40, 0x3f, 0x2, 0x5, 0x4, 0xffc0000, 0x8001, 0x20, 0x0, 0x6, 0x8000, 0x9, 0x4895, 0x0, 0x0, 0x8001, 0xed3a, 0x3, 0xffffffff, 0x0, 0x7, 0x1, 0x7, 0x7fff, 0xff, 0xffff, 0xd7bccc9, 0x2, 0x7fffffff, 0x2d, 0x6, 0x0, 0x7ff, 0x3, 0xffffffff, 0x2, 0x6, 0x2, 0x3ff, 0x4, 0xfffffff7, 0x0, 0xfffffffd, 0x6, 0x6, 0xa, 0x0, 0xe78b, 0x2, 0x8, 0x2, 0x100000, 0x8001, 0xffffffff, 0x46cc3989, 0x800, 0x7, 0x1, 0x7, 0xffffcc60, 0x80000001, 0xffffff00, 0x3, 0x5, 0x6, 0x0, 0x0, 0x100, 0x99f5, 0x3, 0x7fffffff, 0x1, 0x9, 0xfffffe82, 0x1, 0x0, 0xfffffff9, 0x2, 0x4, 0x1000, 0xffffff86, 0x80, 0x3, 0x6, 0x0, 0xfffffffe, 0x1f, 0x2, 0xb86, 0x0, 0x4, 0x7fff, 0x20, 0x2, 0x7fffffff, 0x8, 0x9, 0x0, 0x0, 0x0, 0x13, 0x7fffffff, 0x800, 0xffffffff, 0x0, 0x8, 0x0, 0x4, 0xc60, 0x0, 0x5b1d, 0x9, 0x0, 0x6c63, 0x4, 0x4, 0x0, 0x7, 0x1000, 0x200, 0x7, 0x617, 0x7f, 0x7, 0x7fffffff, 0x0, 0xdeb, 0x9, 0x86cb, 0x9ef6, 0x0, 0xfffffffa, 0x9, 0x4, 0x3, 0xe1c, 0x2, 0x0, 0x8000, 0x1, 0x7, 0x1, 0x80000001, 0x4, 0xffffffff, 0x78, 0x7, 0x0, 0x80000000, 0xffffffff, 0x8, 0x91, 0x1000, 0x7, 0x8bcf, 0x20, 0x6, 0x1, 0x1f, 0x0, 0x9, 0x4, 0x9, 0x4db, 0x2, 0x4, 0x1, 0x0, 0x10000, 0x2c0, 0x9, 0x20, 0x0, 0xe0c, 0x8001, 0x0, 0x7, 0xfff, 0x20, 0x3, 0x4, 0x3f, 0x1f, 0x3, 0xd8e, 0x3, 0x40, 0x0, 0x0, 0x80, 0x0, 0x3, 0x2, 0x7fffffff, 0x3ff, 0xfff, 0x3, 0x81, 0x5, 0x8, 0x9, 0x20, 0x2, 0xfffffffc, 0xfdf, 0x3, 0x1b, 0x2c58, 0x6, 0x1, 0xdc6, 0x0, 0x0, 0x83b, 0x0, 0x20, 0x7fffffff, 0x1, 0x8, 0x0, 0x5269, 0x7, 0x2, 0x1000, 0x7, 0x1, 0x8, 0x4, 0x3, 0x1, 0x2, 0x3ff, 0x20, 0x1ff, 0x400, 0x3, 0x1, 0xbb, 0x1f, 0x7fffffff, 0x4, 0x8, 0x5, 0x5, 0x40, 0x4, 0x7fffffff, 0x7, 0x1f, 0x3ee, 0x10002000, 0x3, 0x1, 0xb, 0x81, 0x4, 0x5, 0x7fff, 0x5c, 0x0, 0x6, 0xfffff58e, 0x3, 0x2, 0x3f, 0x100, 0xdad, 0x7, 0xb14, 0x1000, 0x53, 0x9, 0x1ff, 0xfffffbff, 0x0, 0x9, 0xfffffff8, 0x7, 0x800, 0x48a8, 0x7, 0x80000000, 0x7, 0x6, 0x5, 0x800, 0x3, 0x400, 0x3fe30496, 0x8, 0x6, 0x0, 0x40, 0x7, 0x1ff, 0x7f, 0x0, 0x3f12, 0xfffffff9, 0x0, 0x3d02, 0x7, 0x3, 0x1, 0x10000, 0x4, 0x6, 0x3, 0x8001, 0x7, 0xffffffff, 0x0, 0x80000001, 0x0, 0x800, 0x5, 0x6, 0x2, 0x7, 0x7, 0x1ff, 0x1, 0x0, 0xec5, 0x6, 0x9, 0x3, 0x7, 0x100, 0x6, 0x190, 0x10001, 0x1f, 0x400, 0x9169fb1, 0x0, 0x9, 0x7, 0x0, 0xeee, 0x9, 0x2, 0x6, 0x999]}) r1 = open(&(0x7f0000000a40)='./bus\x00', 0x141a42, 0x0) sendfile(r1, r0, 0x0, 0x100801700) 553.665245ms ago: executing program 1 (id=2573): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSTI(r1, 0x5409, 0x0) 504.809945ms ago: executing program 3 (id=2574): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f00000008c0)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@orlov}, {@abort}, {@nombcache}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000140)='.\x00', 0x1a4a438, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) 341.245851ms ago: executing program 4 (id=2575): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x804810, &(0x7f0000000180)={[{@quota}, {@dioread_lock}]}, 0x26, 0x754, &(0x7f00000002c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0185879, &(0x7f0000000080)={@desc={0xf4240, 0x0, @desc4}}) 118.736139ms ago: executing program 2 (id=2576): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r0, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) 0s ago: executing program 1 (id=2577): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000540)=ANY=[@ANYBLOB="1201000074020440fd07010099480102030109021b0001000000000904000001c5b3e30009050b"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): [ 974.862214][T11629] bridge0: port 1(bridge_slave_0) entered disabled state [ 974.870285][T11629] bridge_slave_0: entered allmulticast mode [ 974.881724][T11629] bridge_slave_0: entered promiscuous mode [ 975.042500][T11629] bridge0: port 2(bridge_slave_1) entered blocking state [ 975.050786][T11629] bridge0: port 2(bridge_slave_1) entered disabled state [ 975.058855][T11629] bridge_slave_1: entered allmulticast mode [ 975.071510][T11629] bridge_slave_1: entered promiscuous mode [ 975.094408][ T5236] kernel write not supported for file /nvram (pid: 5236 comm: kworker/1:4) [ 975.600439][T11629] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 975.806434][T11629] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 975.816819][T10787] Bluetooth: hci0: command tx timeout [ 976.193209][T11629] team0: Port device team_slave_0 added [ 976.311764][T11629] team0: Port device team_slave_1 added [ 976.412641][ T8] usb 2-1: USB disconnect, device number 10 [ 976.648035][T11629] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 976.655269][T11629] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 976.683101][T11629] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 976.715260][T11629] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 976.725225][T11629] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 976.751908][T11629] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 977.048355][T11629] hsr_slave_0: entered promiscuous mode [ 977.082166][T11629] hsr_slave_1: entered promiscuous mode [ 977.096626][T11629] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 977.104848][T11629] Cannot create hsr debugfs directory [ 977.839670][ T5186] Bluetooth: hci0: command tx timeout [ 978.178052][ T8] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 978.209327][T11629] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 978.235349][T11629] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 978.273463][ T7863] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 978.273532][T11629] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 978.281520][ T5236] kernel write not supported for file /nvram (pid: 5236 comm: kworker/1:4) [ 978.335248][T11629] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 978.412828][ T8] usb 5-1: Using ep0 maxpacket: 8 [ 978.434711][ T8] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 978.444094][ T8] usb 5-1: config 0 interface 0 altsetting 129 endpoint 0x1 has invalid wMaxPacketSize 0 [ 978.454470][ T8] usb 5-1: config 0 interface 0 has no altsetting 1 [ 978.515099][ T8] usb 5-1: New USB device found, idVendor=05c6, idProduct=9225, bcdDevice=1c.b6 [ 978.526051][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 978.535589][ T8] usb 5-1: Product: syz [ 978.540149][ T8] usb 5-1: Manufacturer: syz [ 978.545021][ T8] usb 5-1: SerialNumber: syz [ 978.577684][ T7863] usb 3-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 978.587290][ T7863] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 978.609808][ T8] usb 5-1: config 0 descriptor?? [ 978.644103][ T8] qmi_wwan 5-1:0.0: probe with driver qmi_wwan failed with error -22 [ 978.668878][ T7863] usb 3-1: config 0 descriptor?? [ 978.894325][ T5231] usb 5-1: USB disconnect, device number 14 [ 979.081215][ T7863] usb 3-1: USB disconnect, device number 18 [ 979.197565][T10787] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 979.357961][T11722] loop3: detected capacity change from 0 to 128 [ 979.696578][T11629] 8021q: adding VLAN 0 to HW filter on device bond0 [ 980.206535][T11629] 8021q: adding VLAN 0 to HW filter on device team0 [ 980.454892][ T5236] bridge0: port 1(bridge_slave_0) entered blocking state [ 980.462969][ T5236] bridge0: port 1(bridge_slave_0) entered forwarding state [ 980.687687][ T5236] bridge0: port 2(bridge_slave_1) entered blocking state [ 980.695502][ T5236] bridge0: port 2(bridge_slave_1) entered forwarding state [ 982.968800][ T44] kernel write not supported for file /nvram (pid: 44 comm: kworker/1:1) [ 982.999521][T10787] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 983.014163][T10787] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 983.030228][T10787] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 983.068388][T10787] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 983.082274][T10787] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 983.093892][T10787] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 983.666335][T11629] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 984.038045][ T5236] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 984.380848][ T5236] usb 2-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 984.390438][ T5236] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 984.445263][T11629] veth0_vlan: entered promiscuous mode [ 984.470486][ T5236] usb 2-1: config 0 descriptor?? [ 984.608882][T11629] veth1_vlan: entered promiscuous mode [ 984.816695][ T7863] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 984.905766][ T5236] usb 2-1: USB disconnect, device number 11 [ 985.026497][T11744] chnl_net:caif_netlink_parms(): no params data found [ 985.058486][ T7863] usb 3-1: Using ep0 maxpacket: 8 [ 985.093264][ T7863] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 985.102899][ T7863] usb 3-1: config 0 interface 0 altsetting 129 endpoint 0x1 has invalid wMaxPacketSize 0 [ 985.116061][ T7863] usb 3-1: config 0 interface 0 has no altsetting 1 [ 985.205953][ T7863] usb 3-1: New USB device found, idVendor=05c6, idProduct=9225, bcdDevice=1c.b6 [ 985.219453][ T7863] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 985.229125][ T7863] usb 3-1: Product: syz [ 985.233575][ T7863] usb 3-1: Manufacturer: syz [ 985.238904][ T5186] Bluetooth: hci1: command tx timeout [ 985.238942][ T7863] usb 3-1: SerialNumber: syz [ 985.294669][ T7863] usb 3-1: config 0 descriptor?? [ 985.324963][ T7863] qmi_wwan 3-1:0.0: probe with driver qmi_wwan failed with error -22 [ 985.352621][ T4536] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 985.399915][T11629] veth0_macvtap: entered promiscuous mode [ 985.429468][T11629] veth1_macvtap: entered promiscuous mode [ 985.486856][ T4536] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 985.598775][ T4536] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 985.622915][ T5231] usb 3-1: USB disconnect, device number 19 [ 985.823713][ T4536] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 985.919718][T11629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 985.930619][T11629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 985.944252][T11629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 985.956406][T11629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 985.966709][T11629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 985.977552][T11629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 985.988217][T11629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 986.000034][T11629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 986.016829][T11629] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 986.115353][T11629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 986.127420][T11629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 986.141275][T11629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 986.153099][T11629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 986.169077][T11629] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 986.436343][T11629] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 986.449500][T11629] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 986.461135][T11629] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 986.470540][T11629] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 986.724481][T11744] bridge0: port 1(bridge_slave_0) entered blocking state [ 986.732664][T11744] bridge0: port 1(bridge_slave_0) entered disabled state [ 986.741633][T11744] bridge_slave_0: entered allmulticast mode [ 986.753195][T11744] bridge_slave_0: entered promiscuous mode [ 986.776681][ T4536] bridge_slave_1: left allmulticast mode [ 986.784256][ T4536] bridge_slave_1: left promiscuous mode [ 986.791320][ T4536] bridge0: port 2(bridge_slave_1) entered disabled state [ 986.848378][ T4536] bridge_slave_0: left allmulticast mode [ 986.856198][ T4536] bridge_slave_0: left promiscuous mode [ 986.863304][ T4536] bridge0: port 1(bridge_slave_0) entered disabled state [ 986.985513][ T5186] Bluetooth: hci3: command 0x1003 tx timeout [ 986.992918][T10787] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 987.308053][T10787] Bluetooth: hci1: command tx timeout [ 987.548147][ T4536] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 987.616654][ T4536] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 987.665304][ T4536] bond0 (unregistering): Released all slaves [ 987.726624][T11744] bridge0: port 2(bridge_slave_1) entered blocking state [ 987.735965][T11744] bridge0: port 2(bridge_slave_1) entered disabled state [ 987.744025][T11744] bridge_slave_1: entered allmulticast mode [ 987.753878][T11744] bridge_slave_1: entered promiscuous mode [ 988.488746][T11744] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 988.651287][T11744] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 988.996753][ T4536] hsr_slave_0: left promiscuous mode [ 989.032408][ T4536] hsr_slave_1: left promiscuous mode [ 989.061871][ T4536] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 989.070032][ T4536] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 989.115957][ T4536] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 989.124079][ T4536] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 989.186492][ T4536] veth1_macvtap: left promiscuous mode [ 989.194895][ T4536] veth0_macvtap: left promiscuous mode [ 989.201237][ T4536] veth1_vlan: left promiscuous mode [ 989.206845][ T4536] veth0_vlan: left promiscuous mode [ 989.429330][T10787] Bluetooth: hci1: command tx timeout [ 990.064986][T11797] loop4: detected capacity change from 0 to 1024 [ 990.285539][T11797] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 990.401558][ T4536] team0 (unregistering): Port device team_slave_1 removed [ 990.456503][ T4536] team0 (unregistering): Port device team_slave_0 removed [ 990.848128][T11790] netlink: 'syz.1.2100': attribute type 8 has an invalid length. [ 990.866930][T11744] team0: Port device team_slave_0 added [ 990.996980][T11744] team0: Port device team_slave_1 added [ 991.209996][T11744] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 991.217482][T11744] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 991.244165][T11744] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 991.326109][T11744] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 991.334165][T11744] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 991.361936][T11744] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 991.455324][T10787] Bluetooth: hci1: command tx timeout [ 991.819410][T11744] hsr_slave_0: entered promiscuous mode [ 991.869192][T11744] hsr_slave_1: entered promiscuous mode [ 991.901268][T11744] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 991.909743][T11744] Cannot create hsr debugfs directory [ 991.934682][ T8696] Bluetooth: hci3: Frame reassembly failed (-84) [ 991.938036][T10263] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 991.961830][ T8696] Bluetooth: hci3: Frame reassembly failed (-84) [ 992.038520][ T5236] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 992.250060][ T5236] usb 2-1: Using ep0 maxpacket: 8 [ 992.318225][ T5236] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 992.327824][ T5236] usb 2-1: config 0 interface 0 altsetting 129 endpoint 0x1 has invalid wMaxPacketSize 0 [ 992.338414][ T5236] usb 2-1: config 0 interface 0 has no altsetting 1 [ 992.358606][T11812] ptrace attach of "./syz-executor exec"[10263] was attempted by ""[11812] [ 992.430295][ T5236] usb 2-1: New USB device found, idVendor=05c6, idProduct=9225, bcdDevice=1c.b6 [ 992.440787][ T5236] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 992.449335][ T5236] usb 2-1: Product: syz [ 992.453782][ T5236] usb 2-1: Manufacturer: syz [ 992.458835][ T5236] usb 2-1: SerialNumber: syz [ 992.493336][ T5236] usb 2-1: config 0 descriptor?? [ 992.507762][ T5236] qmi_wwan 2-1:0.0: probe with driver qmi_wwan failed with error -22 [ 992.784592][ T5236] usb 2-1: USB disconnect, device number 12 [ 992.885473][T11815] loop4: detected capacity change from 0 to 1024 [ 992.928857][T11815] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2106'. [ 993.281449][T11744] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 993.342980][T11744] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 993.441744][T11744] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 993.502900][T11744] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 993.997527][ T5186] Bluetooth: hci3: command 0x1003 tx timeout [ 993.999015][T10787] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 994.397627][T11744] 8021q: adding VLAN 0 to HW filter on device bond0 [ 994.514562][T11744] 8021q: adding VLAN 0 to HW filter on device team0 [ 994.623253][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 994.631315][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 994.771143][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 994.779098][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 995.451247][ T8696] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 995.460621][ T8696] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 995.794529][ T4536] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 995.802824][ T4536] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 996.272775][T11850] loop2: detected capacity change from 0 to 1024 [ 996.499611][T11853] loop1: detected capacity change from 0 to 1024 [ 996.508726][T11850] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 996.552570][T11860] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2042'. [ 996.692119][T11853] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2115'. [ 996.899340][T11744] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 996.995586][T10635] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 997.230916][T10635] usb 5-1: Using ep0 maxpacket: 8 [ 997.329038][T10635] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 997.338640][T10635] usb 5-1: config 0 interface 0 altsetting 129 endpoint 0x1 has invalid wMaxPacketSize 0 [ 997.349544][T10635] usb 5-1: config 0 interface 0 has no altsetting 1 [ 997.415342][T10635] usb 5-1: New USB device found, idVendor=05c6, idProduct=9225, bcdDevice=1c.b6 [ 997.425359][T10635] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 997.434096][T10635] usb 5-1: Product: syz [ 997.438732][T10635] usb 5-1: Manufacturer: syz [ 997.443623][T10635] usb 5-1: SerialNumber: syz [ 997.490133][T10635] usb 5-1: config 0 descriptor?? [ 997.522197][T10635] qmi_wwan 5-1:0.0: probe with driver qmi_wwan failed with error -22 [ 997.554218][T11744] veth0_vlan: entered promiscuous mode [ 997.631846][T11744] veth1_vlan: entered promiscuous mode [ 997.736309][ T87] Bluetooth: hci3: Frame reassembly failed (-84) [ 997.905270][ T44] usb 5-1: USB disconnect, device number 15 [ 998.003419][T11744] veth0_macvtap: entered promiscuous mode [ 998.083863][T11744] veth1_macvtap: entered promiscuous mode [ 998.174424][T11744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 998.186717][T11744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 998.197147][T11744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 998.208282][T11744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 998.218480][T11744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 998.230497][T11744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 998.241476][T11744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 998.252287][T11744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 998.268567][T11744] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 998.376497][ T9730] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 998.470794][T11744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 998.483252][T11744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 998.494598][T11744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 998.505631][T11744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 998.521467][T11744] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 998.640613][T11744] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 998.651158][T11744] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 998.660404][T11744] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 998.669675][T11744] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 999.035682][T11882] loop4: detected capacity change from 0 to 512 [ 999.154904][T11882] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.2124: casefold flag without casefold feature [ 999.219435][T11882] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.2124: couldn't read orphan inode 15 (err -117) [ 999.272721][T11882] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 999.286058][T11882] ext4 filesystem being mounted at /112/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 999.760360][T10787] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 999.761475][ T5186] Bluetooth: hci3: command 0x1003 tx timeout [ 999.840206][T10263] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 999.879277][T11888] netlink: 'syz.2.2125': attribute type 4 has an invalid length. [ 1000.024062][T11888] netlink: 'syz.2.2125': attribute type 17 has an invalid length. [ 1000.293667][T11894] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2127'. [ 1000.616640][T11897] loop0: detected capacity change from 0 to 1024 [ 1000.847272][T11897] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2128'. [ 1001.509467][T11910] loop2: detected capacity change from 0 to 1024 [ 1001.660260][T11910] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1001.786092][T11916] loop0: detected capacity change from 0 to 1024 [ 1001.930887][T11916] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1002.000121][T11916] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1002.396586][T11930] loop1: detected capacity change from 0 to 512 [ 1002.482471][T11930] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.2136: casefold flag without casefold feature [ 1002.497905][T11930] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.2136: couldn't read orphan inode 15 (err -117) [ 1002.546897][T11629] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1002.571538][T11930] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1002.585037][T11930] ext4 filesystem being mounted at /60/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1002.940412][T10605] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1003.142248][T11937] loop4: detected capacity change from 0 to 256 [ 1003.184775][T11937] exfat: Deprecated parameter 'namecase' [ 1003.300425][T11937] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x6ff59669, utbl_chksum : 0xe619d30d) [ 1003.534879][ T9730] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1003.865464][ T3300] Bluetooth: hci3: Frame reassembly failed (-84) [ 1004.151055][T11947] loop1: detected capacity change from 0 to 1024 [ 1004.311352][T11947] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2142'. [ 1004.432890][ T87] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1004.627919][ T87] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1004.726619][ T3300] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1004.735972][ T3300] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1004.792480][ T87] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1004.992421][ T87] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1005.034619][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1005.044575][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1005.268223][ T87] bridge_slave_1: left allmulticast mode [ 1005.274193][ T87] bridge_slave_1: left promiscuous mode [ 1005.281170][ T87] bridge0: port 2(bridge_slave_1) entered disabled state [ 1005.338199][ T87] bridge_slave_0: left allmulticast mode [ 1005.344157][ T87] bridge_slave_0: left promiscuous mode [ 1005.353468][ T87] bridge0: port 1(bridge_slave_0) entered disabled state [ 1005.917520][T10787] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1005.925951][ T87] bridge0 (unregistering): left allmulticast mode [ 1006.147811][ T87] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1006.230107][ T87] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1006.271536][ T87] bond0 (unregistering): Released all slaves [ 1006.468416][T11960] loop2: detected capacity change from 0 to 512 [ 1006.673874][T11960] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.2148: casefold flag without casefold feature [ 1006.778559][T11960] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.2148: couldn't read orphan inode 15 (err -117) [ 1006.836979][T11960] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1006.852505][T11960] ext4 filesystem being mounted at /167/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1006.967689][T10787] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1006.979409][T10787] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1006.992377][T10787] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1007.008888][ T87] hsr_slave_0: left promiscuous mode [ 1007.024764][ T87] hsr_slave_1: left promiscuous mode [ 1007.054106][T10787] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1007.071174][ T87] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1007.071408][T10787] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1007.079294][ T87] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1007.096102][T10787] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1007.167475][ T87] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1007.175263][ T87] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1007.207820][ T87] veth1_macvtap: left promiscuous mode [ 1007.213766][ T87] veth0_macvtap: left promiscuous mode [ 1007.220470][ T87] veth1_vlan: left promiscuous mode [ 1007.226108][ T87] veth0_vlan: left promiscuous mode [ 1007.524025][T11970] loop3: detected capacity change from 0 to 1024 [ 1007.557289][ T9730] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1007.680731][T11974] loop1: detected capacity change from 0 to 256 [ 1007.704616][T11974] exfat: Deprecated parameter 'namecase' [ 1007.739924][ T87] pim6reg (unregistering): left allmulticast mode [ 1007.789420][T11970] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1007.907620][T11974] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x6ff59669, utbl_chksum : 0xe619d30d) [ 1008.326686][ T87] team0 (unregistering): Port device team_slave_1 removed [ 1008.349331][T11981] loop0: detected capacity change from 0 to 256 [ 1008.369601][ T87] team0 (unregistering): Port device team_slave_0 removed [ 1008.685893][T11981] FAT-fs (loop0): Directory bread(block 64) failed [ 1008.694188][T11981] FAT-fs (loop0): Directory bread(block 65) failed [ 1008.701952][T11981] FAT-fs (loop0): Directory bread(block 66) failed [ 1008.708919][T11981] FAT-fs (loop0): Directory bread(block 67) failed [ 1008.715894][T11981] FAT-fs (loop0): Directory bread(block 68) failed [ 1008.722840][T11981] FAT-fs (loop0): Directory bread(block 69) failed [ 1008.730080][T11981] FAT-fs (loop0): Directory bread(block 70) failed [ 1008.736896][T11981] FAT-fs (loop0): Directory bread(block 71) failed [ 1008.744043][T11981] FAT-fs (loop0): Directory bread(block 72) failed [ 1008.751055][T11981] FAT-fs (loop0): Directory bread(block 73) failed [ 1009.197341][T10787] Bluetooth: hci2: command tx timeout [ 1010.596605][T11987] loop2: detected capacity change from 0 to 256 [ 1011.297487][T10787] Bluetooth: hci2: command tx timeout [ 1011.367609][T11744] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1012.306503][T11971] chnl_net:caif_netlink_parms(): no params data found [ 1012.833478][ T87] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1013.005111][ T87] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1013.143179][ T87] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1013.266546][ T87] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1013.363070][T10787] Bluetooth: hci2: command tx timeout [ 1013.509611][T11971] bridge0: port 1(bridge_slave_0) entered blocking state [ 1013.517788][T11971] bridge0: port 1(bridge_slave_0) entered disabled state [ 1013.525859][T11971] bridge_slave_0: entered allmulticast mode [ 1013.535617][T11971] bridge_slave_0: entered promiscuous mode [ 1013.610180][ T4536] Bluetooth: hci3: Frame reassembly failed (-84) [ 1013.740996][T11971] bridge0: port 2(bridge_slave_1) entered blocking state [ 1013.748951][T11971] bridge0: port 2(bridge_slave_1) entered disabled state [ 1013.756956][T11971] bridge_slave_1: entered allmulticast mode [ 1013.766687][T11971] bridge_slave_1: entered promiscuous mode [ 1013.814762][ T87] bridge_slave_1: left allmulticast mode [ 1013.821043][ T87] bridge_slave_1: left promiscuous mode [ 1013.828132][ T87] bridge0: port 2(bridge_slave_1) entered disabled state [ 1013.851265][ T87] bridge_slave_0: left allmulticast mode [ 1013.857433][ T87] bridge_slave_0: left promiscuous mode [ 1013.864366][ T87] bridge0: port 1(bridge_slave_0) entered disabled state [ 1013.899013][T12001] loop3: detected capacity change from 0 to 512 [ 1014.098470][ T5186] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1014.109187][ T5186] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1014.146279][T12001] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.2162: casefold flag without casefold feature [ 1014.188572][ T5186] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1014.207626][ T5186] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1014.219169][T12001] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.2162: couldn't read orphan inode 15 (err -117) [ 1014.235488][ T5186] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1014.376486][T12001] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1014.390039][T12001] ext4 filesystem being mounted at /2/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1014.404964][ T5186] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1014.574976][T11744] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1014.655424][ T87] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1014.694100][ T87] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1014.722753][ T87] bond0 (unregistering): Released all slaves [ 1014.929225][T12011] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2165'. [ 1014.956006][T11971] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1015.113340][T11971] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1015.437710][ T5186] Bluetooth: hci2: command tx timeout [ 1015.508800][T11971] team0: Port device team_slave_0 added [ 1015.551400][T11971] team0: Port device team_slave_1 added [ 1015.615051][T10787] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1015.789086][ T87] hsr_slave_0: left promiscuous mode [ 1015.799112][ T87] hsr_slave_1: left promiscuous mode [ 1015.856164][ T87] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1015.864344][ T87] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1015.912809][ T87] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1015.920944][ T87] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1016.028066][ T87] veth1_macvtap: left promiscuous mode [ 1016.034023][ T87] veth0_macvtap: left promiscuous mode [ 1016.041879][ T87] veth1_vlan: left promiscuous mode [ 1016.047675][ T87] veth0_vlan: left promiscuous mode [ 1016.489429][T10787] Bluetooth: hci4: command tx timeout [ 1017.218040][T12025] loop2: detected capacity change from 0 to 256 [ 1018.286188][ T87] team0 (unregistering): Port device team_slave_1 removed [ 1018.419883][ T87] team0 (unregistering): Port device team_slave_0 removed [ 1018.790481][T10787] Bluetooth: hci4: command tx timeout [ 1019.187598][T11971] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1019.194830][T11971] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1019.222830][T11971] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1019.331760][T11971] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1019.340490][T11971] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1019.369161][T11971] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1019.863448][T11971] hsr_slave_0: entered promiscuous mode [ 1019.903147][T11971] hsr_slave_1: entered promiscuous mode [ 1019.957683][T11971] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1019.965650][T11971] Cannot create hsr debugfs directory [ 1020.519019][T12003] chnl_net:caif_netlink_parms(): no params data found [ 1020.808417][T10787] Bluetooth: hci4: command tx timeout [ 1022.239615][T12063] loop2: detected capacity change from 0 to 256 [ 1022.947535][T10787] Bluetooth: hci4: command tx timeout [ 1023.436762][T11971] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1023.803975][T12003] bridge0: port 1(bridge_slave_0) entered blocking state [ 1023.812123][T12003] bridge0: port 1(bridge_slave_0) entered disabled state [ 1023.824741][T12003] bridge_slave_0: entered allmulticast mode [ 1023.834554][T12003] bridge_slave_0: entered promiscuous mode [ 1023.860187][T11971] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1023.993072][T11971] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1024.091119][T12003] bridge0: port 2(bridge_slave_1) entered blocking state [ 1024.099225][T12003] bridge0: port 2(bridge_slave_1) entered disabled state [ 1024.107561][T12003] bridge_slave_1: entered allmulticast mode [ 1024.117420][T12003] bridge_slave_1: entered promiscuous mode [ 1024.179413][T11971] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1024.565762][T12003] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1024.662735][T12003] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1025.034673][T12003] team0: Port device team_slave_0 added [ 1025.089625][T12003] team0: Port device team_slave_1 added [ 1025.385241][T12003] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1025.392919][T12003] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1025.419571][T12003] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1025.501150][T12003] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1025.509091][T12003] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1025.535742][T12003] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1025.811360][T12087] binder: 12086:12087 ioctl c018620c 20000500 returned -22 [ 1025.972641][T11971] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1026.018328][T12003] hsr_slave_0: entered promiscuous mode [ 1026.039008][T12003] hsr_slave_1: entered promiscuous mode [ 1026.064700][T12003] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1026.074322][T12003] Cannot create hsr debugfs directory [ 1026.328558][T11971] 8021q: adding VLAN 0 to HW filter on device team0 [ 1028.784165][ T1240] ieee802154 phy0 wpan0: encryption failed: -22 [ 1028.791068][ T1240] ieee802154 phy1 wpan1: encryption failed: -22 [ 1029.000886][T10734] bridge0: port 1(bridge_slave_0) entered blocking state [ 1029.009510][T10734] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1029.024312][T10734] bridge0: port 2(bridge_slave_1) entered blocking state [ 1029.031938][T10734] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1029.572187][T12104] netlink: 'syz.3.2200': attribute type 10 has an invalid length. [ 1029.580779][T12104] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2200'. [ 1029.590347][T12104] team0: entered promiscuous mode [ 1029.595822][T12104] team_slave_0: entered promiscuous mode [ 1029.609900][T12104] team_slave_1: entered promiscuous mode [ 1029.623284][T12104] bridge0: port 3(team0) entered blocking state [ 1029.636624][T12104] bridge0: port 3(team0) entered disabled state [ 1029.645210][T12104] team0: entered allmulticast mode [ 1029.650957][T12104] team_slave_0: entered allmulticast mode [ 1029.666450][T12104] team_slave_1: entered allmulticast mode [ 1029.696933][T12104] bridge0: port 3(team0) entered blocking state [ 1029.705222][T12104] bridge0: port 3(team0) entered forwarding state [ 1033.102092][T12003] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1033.218881][T12003] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1033.308237][T12003] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1033.410487][T12003] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1033.963660][T11971] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1034.119307][T12127] loop3: detected capacity change from 0 to 1024 [ 1034.417662][T12132] loop0: detected capacity change from 0 to 256 [ 1034.670488][T12003] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1034.843497][T12003] 8021q: adding VLAN 0 to HW filter on device team0 [ 1034.916564][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 1034.924511][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1035.039174][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 1035.047219][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1035.959972][T12147] loop3: detected capacity change from 0 to 1024 [ 1036.184277][T12147] hfsplus: bad catalog entry type [ 1036.468782][ T8696] hfsplus: b-tree write err: -5, ino 4 [ 1036.911032][T11971] veth0_vlan: entered promiscuous mode [ 1037.104644][T11971] veth1_vlan: entered promiscuous mode [ 1037.274923][T12003] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1037.296705][ T8] usb 4-1: new low-speed USB device number 15 using dummy_hcd [ 1037.445929][T12165] loop0: detected capacity change from 0 to 256 [ 1037.531563][T11971] veth0_macvtap: entered promiscuous mode [ 1037.560829][ T8] usb 4-1: config index 0 descriptor too short (expected 1307, got 27) [ 1037.569996][ T8] usb 4-1: config 0 has an invalid interface number: 0 but max is -1 [ 1037.578568][ T8] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1037.579261][T11971] veth1_macvtap: entered promiscuous mode [ 1037.587790][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 1037.741107][ T8] usb 4-1: string descriptor 0 read error: -22 [ 1037.750618][ T8] usb 4-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 1037.760633][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1037.813113][T11971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1037.821058][ T8] usb 4-1: config 0 descriptor?? [ 1037.825012][T11971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1037.832964][T12161] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1037.839305][T11971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1037.863261][T11971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1037.874587][T11971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1037.880857][ T8] hub 4-1:0.0: bad descriptor, ignoring hub [ 1037.885363][T11971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1037.891453][ T8] hub 4-1:0.0: probe with driver hub failed with error -5 [ 1037.907961][T11971] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1037.918231][ T8] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input29 [ 1038.135923][ T8] usb 4-1: USB disconnect, device number 15 [ 1038.135917][ C1] usb_acecad 4-1:0.0: can't resubmit intr, dummy_hcd.3-1/input0, status -19 [ 1038.213942][T11971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1038.225108][T11971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1038.235389][T11971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1038.252719][T11971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1038.282538][T11971] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1038.370817][T12003] veth0_vlan: entered promiscuous mode [ 1038.420128][T11971] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1038.431542][T11971] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1038.440963][T11971] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1038.450281][T11971] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1038.562624][T12003] veth1_vlan: entered promiscuous mode [ 1038.866504][T12003] veth0_macvtap: entered promiscuous mode [ 1038.981526][T12003] veth1_macvtap: entered promiscuous mode [ 1039.270852][T12003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1039.282307][T12003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1039.296067][T12003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1039.307969][T12003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1039.318305][T12003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1039.329152][T12003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1039.339433][T12003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1039.350431][T12003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1039.368830][T12003] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1039.441562][T12003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1039.452478][T12003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1039.462705][T12003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1039.473647][T12003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1039.483904][T12003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1039.498433][T12003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1039.515874][T12003] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1039.683138][T12181] loop2: detected capacity change from 0 to 1024 [ 1039.785805][T12003] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1039.809624][T12003] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1039.819321][T12003] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1039.828630][T12003] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1039.869827][T12181] hfsplus: bad catalog entry type [ 1040.148751][ T3300] hfsplus: b-tree write err: -5, ino 4 [ 1040.225184][T12187] loop3: detected capacity change from 0 to 256 [ 1041.877468][ T7863] usb 1-1: new low-speed USB device number 25 using dummy_hcd [ 1042.117854][ T7863] usb 1-1: config index 0 descriptor too short (expected 1307, got 27) [ 1042.126485][ T7863] usb 1-1: config 0 has an invalid interface number: 0 but max is -1 [ 1042.134998][ T7863] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1042.144486][ T7863] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 1042.269497][ T7863] usb 1-1: string descriptor 0 read error: -22 [ 1042.276628][ T7863] usb 1-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 1042.287224][ T7863] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1042.335070][ T7863] usb 1-1: config 0 descriptor?? [ 1042.343883][T12207] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1042.389338][ T7863] hub 1-1:0.0: bad descriptor, ignoring hub [ 1042.395586][ T7863] hub 1-1:0.0: probe with driver hub failed with error -5 [ 1042.412314][ T7863] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input30 [ 1042.748068][ C1] usb_acecad 1-1:0.0: can't resubmit intr, dummy_hcd.0-1/input0, status -1 [ 1042.791809][ T7863] usb 1-1: USB disconnect, device number 25 [ 1042.881197][T12226] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2242'. [ 1042.907284][T12226] vxlan0: entered allmulticast mode [ 1043.028841][T12226] trusted_key: encrypted_key: master key parameter 'g9*pms-H8' is invalid [ 1043.636760][T12236] loop3: detected capacity change from 0 to 8 [ 1045.216098][ T4477] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1045.225437][ T4477] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1045.384833][ T4477] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1045.394125][ T4477] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1045.986827][T12267] netlink: 'syz.2.2254': attribute type 1 has an invalid length. [ 1045.996069][T12267] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2254'. [ 1046.180189][ T5238] usb 1-1: new low-speed USB device number 26 using dummy_hcd [ 1046.397278][ T5238] usb 1-1: config index 0 descriptor too short (expected 1307, got 27) [ 1046.406028][ T5238] usb 1-1: config 0 has an invalid interface number: 0 but max is -1 [ 1046.414662][ T5238] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1046.424175][ T5238] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 1046.526686][ T5238] usb 1-1: string descriptor 0 read error: -22 [ 1046.533940][ T5238] usb 1-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 1046.543633][ T5238] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1046.564491][ T5238] usb 1-1: config 0 descriptor?? [ 1046.573584][T12263] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1046.621387][T12274] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2256'. [ 1046.648566][T12274] vxlan0: entered allmulticast mode [ 1046.661326][ T5238] hub 1-1:0.0: bad descriptor, ignoring hub [ 1046.667743][ T5238] hub 1-1:0.0: probe with driver hub failed with error -5 [ 1046.684178][ T5238] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input31 [ 1046.729206][T12274] trusted_key: encrypted_key: master key parameter 'g9*pms-H8' is invalid [ 1046.842868][ C0] usb_acecad 1-1:0.0: can't resubmit intr, dummy_hcd.0-1/input0, status -1 [ 1047.023194][ C1] usb_acecad 1-1:0.0: can't resubmit intr, dummy_hcd.0-1/input0, status -1 [ 1047.048974][ T5231] usb 1-1: USB disconnect, device number 26 [ 1047.132993][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1047.142332][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1047.262407][ T8696] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1047.273891][ T8696] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1047.449711][T12283] netlink: 'syz.3.2260': attribute type 1 has an invalid length. [ 1047.458447][T12283] netlink: 67 bytes leftover after parsing attributes in process `syz.3.2260'. [ 1049.438095][T12299] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 1049.999501][T12287] loop2: detected capacity change from 0 to 32768 [ 1050.163194][ T29] audit: type=1800 audit(1722047073.350:440): pid=12287 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2262" name="file2" dev="loop2" ino=5 res=0 errno=0 [ 1050.337642][ T29] audit: type=1804 audit(1722047073.440:441): pid=12287 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2262" name="/newroot/206/file2/file2" dev="loop2" ino=5 res=1 errno=0 [ 1050.516043][T12309] netlink: 'syz.0.2271': attribute type 1 has an invalid length. [ 1050.524895][T12309] netlink: 67 bytes leftover after parsing attributes in process `syz.0.2271'. [ 1051.021512][T12313] loop4: detected capacity change from 0 to 1024 [ 1051.053841][T12313] EXT4-fs (loop4): VFS: Can't find ext4 filesystem [ 1051.488408][ T7863] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 1051.738038][T12325] netlink: 'syz.3.2280': attribute type 10 has an invalid length. [ 1051.739136][ T7863] usb 1-1: Using ep0 maxpacket: 8 [ 1051.813167][ T7863] usb 1-1: New USB device found, idVendor=2040, idProduct=7300, bcdDevice=db.79 [ 1051.822851][ T7863] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1051.831279][ T7863] usb 1-1: Product: syz [ 1051.835730][ T7863] usb 1-1: Manufacturer: syz [ 1051.840743][ T7863] usb 1-1: SerialNumber: syz [ 1051.886616][ T7863] usb 1-1: config 0 descriptor?? [ 1051.927426][ T7863] pvrusb2: Hardware description: WinTV HVR-1900 Model 73xxx [ 1052.237555][ T2021] usb 1-1: Direct firmware load for v4l-pvrusb2-73xxx-01.fw failed with error -2 [ 1052.247239][ T2021] usb 1-1: Falling back to sysfs fallback for: v4l-pvrusb2-73xxx-01.fw [ 1052.268199][ T7863] usb 1-1: USB disconnect, device number 27 [ 1052.830735][T12337] netlink: 844 bytes leftover after parsing attributes in process `syz.1.2285'. [ 1052.916914][ T5231] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 1053.156072][ T5231] usb 5-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 1053.166774][ T5231] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1053.223193][ T5231] usb 5-1: config 0 descriptor?? [ 1053.265972][ T5231] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 1053.394804][T12347] netlink: 'syz.3.2288': attribute type 1 has an invalid length. [ 1053.403825][T12347] netlink: 67 bytes leftover after parsing attributes in process `syz.3.2288'. [ 1053.487773][T12346] loop2: detected capacity change from 0 to 1024 [ 1053.505843][T12346] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 1053.772220][T12334] loop4: detected capacity change from 0 to 256 [ 1053.815703][T12351] netlink: 'syz.0.2291': attribute type 10 has an invalid length. [ 1054.049338][ T5231] gspca_sunplus: reg_w_riv err -110 [ 1054.055177][ T5231] sunplus 5-1:0.0: probe with driver sunplus failed with error -110 [ 1054.867822][T12365] loop3: detected capacity change from 0 to 128 [ 1056.193951][T12374] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2300'. [ 1056.220542][T12374] vxlan0: entered allmulticast mode [ 1056.275659][ T5231] usb 5-1: USB disconnect, device number 16 [ 1056.453700][T12376] trusted_key: encrypted_key: master key parameter 'g9*pms-H8' is invalid [ 1056.459987][T12356] loop2: detected capacity change from 0 to 32768 [ 1056.491804][T12356] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.2293 (12356) [ 1056.525852][T12356] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1056.536725][T12356] BTRFS info (device loop2): using sha256 (sha256-generic) checksum algorithm [ 1056.548557][T12356] BTRFS info (device loop2): using free-space-tree [ 1056.864620][T12393] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2302'. [ 1056.996291][T12393] gretap0: entered promiscuous mode [ 1057.008059][T12393] macsec1: entered promiscuous mode [ 1057.115807][T12393] gretap0: left promiscuous mode [ 1057.344610][ T9730] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1058.206146][T12409] loop4: detected capacity change from 0 to 128 [ 1059.296660][T12425] netlink: 'syz.2.2305': attribute type 10 has an invalid length. [ 1059.397795][ T5236] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 1059.452242][T12427] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2317'. [ 1059.671285][ T5236] usb 4-1: Using ep0 maxpacket: 8 [ 1059.707994][T12423] gretap0: entered promiscuous mode [ 1059.713630][T12423] macsec1: entered promiscuous mode [ 1059.815488][ T5236] usb 4-1: New USB device found, idVendor=07ab, idProduct=fc01, bcdDevice=74.50 [ 1059.825178][ T5236] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1059.833592][ T5236] usb 4-1: Product: syz [ 1059.838362][ T5236] usb 4-1: Manufacturer: syz [ 1059.843238][ T5236] usb 4-1: SerialNumber: syz [ 1059.963276][ T5236] usb 4-1: config 0 descriptor?? [ 1060.033036][ T5236] ums-freecom 4-1:0.0: USB Mass Storage device detected [ 1060.048228][T12423] gretap0: left promiscuous mode [ 1060.266041][T12433] trusted_key: encrypted_key: master key parameter 'g9*pms-H8' is invalid [ 1060.421030][T12431] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2318'. [ 1060.519397][ T5236] usb 4-1: USB disconnect, device number 16 [ 1061.168043][T12420] loop1: detected capacity change from 0 to 32768 [ 1061.184597][T12420] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.2315 (12420) [ 1061.216541][T12420] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1061.227492][T12420] BTRFS info (device loop1): using sha256 (sha256-generic) checksum algorithm [ 1061.239159][T12420] BTRFS info (device loop1): using free-space-tree [ 1062.180730][T12003] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1063.008436][T12472] netlink: 'syz.2.2329': attribute type 10 has an invalid length. [ 1063.368969][ T25] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 1063.509529][T12480] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2333'. [ 1063.579419][ T25] usb 5-1: Using ep0 maxpacket: 8 [ 1063.642361][ T25] usb 5-1: New USB device found, idVendor=07ab, idProduct=fc01, bcdDevice=74.50 [ 1063.651978][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1063.664542][ T25] usb 5-1: Product: syz [ 1063.670305][ T25] usb 5-1: Manufacturer: syz [ 1063.677664][ T25] usb 5-1: SerialNumber: syz [ 1063.740164][ T25] usb 5-1: config 0 descriptor?? [ 1063.801382][ T25] ums-freecom 5-1:0.0: USB Mass Storage device detected [ 1064.177388][ T25] usb 5-1: USB disconnect, device number 17 [ 1064.501181][T12488] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2336'. [ 1065.730359][T12482] loop3: detected capacity change from 0 to 32768 [ 1065.746905][T12482] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.2334 (12482) [ 1065.787390][T12482] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1065.798359][T12482] BTRFS info (device loop3): using sha256 (sha256-generic) checksum algorithm [ 1065.815620][T12482] BTRFS info (device loop3): using free-space-tree [ 1066.839458][T11744] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1067.674671][T12529] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2348'. [ 1068.595122][T12535] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2345'. [ 1068.595266][T12535] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2345'. [ 1070.999273][T12548] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2357'. [ 1071.103109][T12548] gretap0: entered promiscuous mode [ 1071.108882][T12548] macsec1: entered promiscuous mode [ 1071.209598][T12548] gretap0: left promiscuous mode [ 1071.476470][T12543] loop3: detected capacity change from 0 to 32768 [ 1071.528706][T12543] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.2355 (12543) [ 1071.569396][T12543] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1071.580204][T12543] BTRFS info (device loop3): using sha256 (sha256-generic) checksum algorithm [ 1071.592576][T12543] BTRFS info (device loop3): using free-space-tree [ 1072.472630][T11744] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1072.522916][T12570] loop2: detected capacity change from 0 to 256 [ 1072.586844][T12570] MINIX-fs: mounting file system with errors, running fsck is recommended [ 1072.739557][T12571] 9pnet_fd: p9_fd_create_unix (12571): problem connecting socket: ./file0: -30 [ 1073.041961][ T5186] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1073.062999][ T5186] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1073.078189][ T5186] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1073.113349][ T5186] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1073.148598][ T5186] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1073.163308][ T5186] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1074.578112][T12572] chnl_net:caif_netlink_parms(): no params data found [ 1074.633513][T12583] loop3: detected capacity change from 0 to 512 [ 1075.292434][ T5186] Bluetooth: hci3: command tx timeout [ 1075.516632][ T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1075.704115][ T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1075.915019][ T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1076.242863][ T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1076.342193][T12572] bridge0: port 1(bridge_slave_0) entered blocking state [ 1076.358476][T12572] bridge0: port 1(bridge_slave_0) entered disabled state [ 1076.366561][T12572] bridge_slave_0: entered allmulticast mode [ 1076.376394][T12572] bridge_slave_0: entered promiscuous mode [ 1076.465346][T10787] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1076.480227][T10787] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1076.494552][T12572] bridge0: port 2(bridge_slave_1) entered blocking state [ 1076.502754][T12572] bridge0: port 2(bridge_slave_1) entered disabled state [ 1076.510913][T12572] bridge_slave_1: entered allmulticast mode [ 1076.520614][T12572] bridge_slave_1: entered promiscuous mode [ 1076.531826][T10787] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1076.599940][T10787] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1076.703302][T10787] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1076.714247][T10787] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1076.787912][ T13] bridge_slave_1: left allmulticast mode [ 1076.793869][ T13] bridge_slave_1: left promiscuous mode [ 1076.801376][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1076.909543][ T13] bridge_slave_0: left allmulticast mode [ 1076.915525][ T13] bridge_slave_0: left promiscuous mode [ 1076.922650][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1077.367888][T10787] Bluetooth: hci3: command tx timeout [ 1077.550269][T12604] loop2: detected capacity change from 0 to 256 [ 1077.610866][T12604] MINIX-fs: mounting file system with errors, running fsck is recommended [ 1077.669317][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1077.714681][T12604] 9pnet_fd: p9_fd_create_unix (12604): problem connecting socket: ./file0: -30 [ 1077.759252][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1077.834667][ T13] bond0 (unregistering): Released all slaves [ 1077.932465][T12572] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1078.436201][T12572] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1078.475609][T12613] loop3: detected capacity change from 0 to 512 [ 1078.797408][T10787] Bluetooth: hci4: command tx timeout [ 1078.849496][T12572] team0: Port device team_slave_0 added [ 1078.967261][ T13] hsr_slave_0: left promiscuous mode [ 1079.023589][ T13] hsr_slave_1: left promiscuous mode [ 1079.039364][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1079.047969][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1079.090626][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1079.098832][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1079.163837][ T13] veth1_macvtap: left promiscuous mode [ 1079.172111][ T13] veth0_macvtap: left promiscuous mode [ 1079.178230][ T13] veth1_vlan: left promiscuous mode [ 1079.183858][ T13] veth0_vlan: left promiscuous mode [ 1079.504140][T10787] Bluetooth: hci3: command tx timeout [ 1079.679053][ T5186] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1079.709506][ T5186] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1079.723838][ T5186] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1079.891125][ T5182] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1079.903452][ T5182] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1079.913425][ T5182] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1080.430867][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1080.499247][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1080.576103][T12620] loop3: detected capacity change from 0 to 4096 [ 1080.878087][ T5182] Bluetooth: hci4: command tx timeout [ 1081.031502][T12572] team0: Port device team_slave_1 added [ 1081.380266][T12572] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1081.388749][T12572] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1081.415231][T12572] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1081.527624][ T5182] Bluetooth: hci3: command tx timeout [ 1081.748688][T12572] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1081.756029][T12572] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1081.786921][T12572] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1081.998566][ T5182] Bluetooth: hci0: command tx timeout [ 1082.367524][T12572] hsr_slave_0: entered promiscuous mode [ 1082.403592][T12572] hsr_slave_1: entered promiscuous mode [ 1082.425360][T12572] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1082.433441][T12572] Cannot create hsr debugfs directory [ 1082.746836][T12636] loop3: detected capacity change from 0 to 256 [ 1082.814560][T12636] MINIX-fs: mounting file system with errors, running fsck is recommended [ 1082.987324][ T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1083.025386][ T5182] Bluetooth: hci4: command tx timeout [ 1083.182947][T12640] 9pnet_fd: p9_fd_create_unix (12640): problem connecting socket: ./file0: -30 [ 1083.188330][T12599] chnl_net:caif_netlink_parms(): no params data found [ 1083.338453][ T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1083.611795][ T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1083.903528][ T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1084.077582][ T5182] Bluetooth: hci0: command tx timeout [ 1084.563293][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1084.606171][T12622] chnl_net:caif_netlink_parms(): no params data found [ 1084.805326][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1085.026022][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1085.043456][ T5182] Bluetooth: hci4: command tx timeout [ 1085.190693][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1085.317787][T12572] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1085.384732][T12572] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1085.562286][T12599] bridge0: port 1(bridge_slave_0) entered blocking state [ 1085.575322][T12599] bridge0: port 1(bridge_slave_0) entered disabled state [ 1085.584906][T12599] bridge_slave_0: entered allmulticast mode [ 1085.595252][T12599] bridge_slave_0: entered promiscuous mode [ 1085.627830][T12572] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1085.700316][T12599] bridge0: port 2(bridge_slave_1) entered blocking state [ 1085.712332][T12599] bridge0: port 2(bridge_slave_1) entered disabled state [ 1085.720574][T12599] bridge_slave_1: entered allmulticast mode [ 1085.730406][T12599] bridge_slave_1: entered promiscuous mode [ 1085.740133][T12572] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1085.828344][T12655] loop2: detected capacity change from 0 to 4096 [ 1085.994729][T12662] loop3: detected capacity change from 0 to 2048 [ 1086.133412][T12662] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1086.158309][ T5182] Bluetooth: hci0: command tx timeout [ 1086.230547][ T13] bridge_slave_1: left allmulticast mode [ 1086.236573][ T13] bridge_slave_1: left promiscuous mode [ 1086.245117][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1086.304900][ T13] bridge_slave_0: left allmulticast mode [ 1086.312558][ T13] bridge_slave_0: left promiscuous mode [ 1086.319632][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1086.390458][ T13] bridge_slave_1: left allmulticast mode [ 1086.398001][ T13] bridge_slave_1: left promiscuous mode [ 1086.404758][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1086.446372][ T13] bridge_slave_0: left allmulticast mode [ 1086.452930][ T13] bridge_slave_0: left promiscuous mode [ 1086.459875][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1086.689345][T12665] loop3: detected capacity change from 0 to 256 [ 1086.752559][T12665] MINIX-fs: mounting file system with errors, running fsck is recommended [ 1086.819706][T12665] 9pnet_fd: p9_fd_create_unix (12665): problem connecting socket: ./file0: -30 [ 1087.472950][T12669] netlink: 172 bytes leftover after parsing attributes in process `syz.2.2392'. [ 1087.483066][T12669] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2392'. [ 1087.724810][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1087.756886][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1087.790123][ T13] bond0 (unregistering): Released all slaves [ 1087.817908][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1087.846814][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1087.877573][ T13] bond0 (unregistering): Released all slaves [ 1087.914085][T12599] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1088.073330][T12599] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1088.254191][ T5182] Bluetooth: hci0: command tx timeout [ 1088.556371][T12599] team0: Port device team_slave_0 added [ 1088.726453][T12678] loop2: detected capacity change from 0 to 512 [ 1088.774681][T12622] bridge0: port 1(bridge_slave_0) entered blocking state [ 1088.782602][T12622] bridge0: port 1(bridge_slave_0) entered disabled state [ 1088.790636][T12622] bridge_slave_0: entered allmulticast mode [ 1088.800252][T12622] bridge_slave_0: entered promiscuous mode [ 1088.808756][T12678] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1088.851570][T12599] team0: Port device team_slave_1 added [ 1088.882193][T12678] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 1088.887585][T12622] bridge0: port 2(bridge_slave_1) entered blocking state [ 1088.898527][T12622] bridge0: port 2(bridge_slave_1) entered disabled state [ 1088.906477][T12622] bridge_slave_1: entered allmulticast mode [ 1088.916082][T12622] bridge_slave_1: entered promiscuous mode [ 1088.917664][T12678] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.2397: invalid indirect mapped block 2683928664 (level 1) [ 1088.988104][T12678] EXT4-fs (loop2): Remounting filesystem read-only [ 1089.004281][T12678] EXT4-fs (loop2): 1 truncate cleaned up [ 1089.012428][T12678] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1089.121556][T12678] overlayfs: failed to get redirect (-5) [ 1089.135301][T12678] overlayfs: failed to get redirect (-5) [ 1089.172911][T12678] overlayfs: failed to get redirect (-5) [ 1089.188708][T12678] overlayfs: failed to get redirect (-5) [ 1089.208250][T12678] overlayfs: failed to get redirect (-5) [ 1089.220467][T12681] loop3: detected capacity change from 0 to 2048 [ 1089.235013][T12678] overlayfs: failed to get redirect (-5) [ 1089.242973][T12678] overlayfs: failed to get redirect (-5) [ 1089.247375][T12681] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1089.250734][T12678] overlayfs: failed to get redirect (-5) [ 1089.424506][T12622] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1089.492913][ T1240] ieee802154 phy0 wpan0: encryption failed: -22 [ 1089.500443][ T1240] ieee802154 phy1 wpan1: encryption failed: -22 [ 1089.530263][T12599] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1089.537685][T12599] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1089.565292][T12599] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1089.582428][ T9730] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1089.593706][T12599] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1089.601153][T12599] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1089.627749][T12599] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1089.674826][T12622] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1090.020925][T12622] team0: Port device team_slave_0 added [ 1090.322287][T12622] team0: Port device team_slave_1 added [ 1090.347357][T12599] hsr_slave_0: entered promiscuous mode [ 1090.383141][T12599] hsr_slave_1: entered promiscuous mode [ 1090.412521][T12599] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1090.420694][T12599] Cannot create hsr debugfs directory [ 1090.604979][ T13] hsr_slave_0: left promiscuous mode [ 1090.626669][ T13] hsr_slave_1: left promiscuous mode [ 1090.652438][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1090.661004][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1090.689698][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1090.697748][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1090.743379][T12691] netlink: 172 bytes leftover after parsing attributes in process `syz.3.2401'. [ 1090.753530][T12691] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2401'. [ 1090.771284][ T13] hsr_slave_0: left promiscuous mode [ 1090.795240][ T13] hsr_slave_1: left promiscuous mode [ 1090.813520][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1090.822447][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1090.835046][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1090.843574][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1090.873449][ T13] veth1_macvtap: left promiscuous mode [ 1090.879938][ T13] veth0_macvtap: left promiscuous mode [ 1090.886139][ T13] veth1_vlan: left promiscuous mode [ 1090.893126][ T13] veth0_vlan: left promiscuous mode [ 1090.907751][ T13] veth1_macvtap: left promiscuous mode [ 1090.913716][ T13] veth0_macvtap: left promiscuous mode [ 1090.919958][ T13] veth1_vlan: left promiscuous mode [ 1090.925597][ T13] veth0_vlan: left promiscuous mode [ 1092.449328][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1092.486111][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1092.627556][T12703] loop3: detected capacity change from 0 to 2048 [ 1092.676514][T12703] UDF-fs: error (device loop3): udf_read_inode: (ino 1312) failed !bh [ 1092.685493][T12703] UDF-fs: Scanning with blocksize 512 failed [ 1092.722471][T12703] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 1092.730954][T12703] UDF-fs: Scanning with blocksize 1024 failed [ 1092.783001][T12703] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 1092.793341][T12703] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 1092.801560][T12703] UDF-fs: Scanning with blocksize 2048 failed [ 1092.832944][T12703] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 1092.861322][T12703] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 1092.871686][T12703] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 1092.879853][T12703] UDF-fs: Scanning with blocksize 4096 failed [ 1092.886155][T12703] UDF-fs: warning (device loop3): udf_fill_super: No partition found (1) [ 1093.222459][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1093.281766][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1093.812254][T12622] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1093.819689][T12622] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1093.848205][T12622] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1093.885422][T12707] loop3: detected capacity change from 0 to 512 [ 1093.896869][T12707] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 1094.111177][T12622] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1094.119520][T12622] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1094.146034][T12622] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1094.267210][T12572] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1094.291627][T12710] netlink: 172 bytes leftover after parsing attributes in process `syz.2.2409'. [ 1094.301893][T12710] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2409'. [ 1094.570540][T12622] hsr_slave_0: entered promiscuous mode [ 1094.603882][T12622] hsr_slave_1: entered promiscuous mode [ 1094.630037][T12622] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1094.638164][T12622] Cannot create hsr debugfs directory [ 1094.849707][T12572] 8021q: adding VLAN 0 to HW filter on device team0 [ 1095.184204][ T7864] bridge0: port 1(bridge_slave_0) entered blocking state [ 1095.192218][ T7864] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1095.365145][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 1095.373176][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1095.860571][T12722] loop2: detected capacity change from 0 to 2048 [ 1095.936721][T12722] UDF-fs: error (device loop2): udf_read_inode: (ino 1312) failed !bh [ 1095.945729][T12722] UDF-fs: Scanning with blocksize 512 failed [ 1096.077575][T12722] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 1096.085635][T12722] UDF-fs: Scanning with blocksize 1024 failed [ 1096.156850][T12722] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 1096.170063][T12722] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 1096.178428][T12722] UDF-fs: Scanning with blocksize 2048 failed [ 1096.287435][T12722] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 1096.341813][T12722] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 1096.354168][T12722] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 1096.368920][T12722] UDF-fs: Scanning with blocksize 4096 failed [ 1096.375243][T12722] UDF-fs: warning (device loop2): udf_fill_super: No partition found (1) [ 1096.418879][T12599] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1096.487311][T12599] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1096.583544][T12599] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1096.680074][T12599] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1097.122640][T12622] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1097.219911][T12733] loop2: detected capacity change from 0 to 512 [ 1097.219954][T12622] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1097.282118][T12733] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 1097.314632][T12622] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1097.358758][T12622] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1097.496135][T12736] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2418'. [ 1098.234844][T12572] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1098.248750][ T44] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 1098.327430][T12599] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1098.522560][ T44] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1098.535174][ T44] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1098.545342][ T44] usb 4-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 1098.554740][ T44] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1098.608213][T12599] 8021q: adding VLAN 0 to HW filter on device team0 [ 1098.625321][ T44] usb 4-1: config 0 descriptor?? [ 1098.805665][T10724] bridge0: port 1(bridge_slave_0) entered blocking state [ 1098.814390][T10724] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1098.995158][ T5231] bridge0: port 2(bridge_slave_1) entered blocking state [ 1099.003264][ T5231] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1099.156259][ T44] hid-led 0003:1D34:000A.0014: unknown main item tag 0x0 [ 1099.232432][T12572] veth0_vlan: entered promiscuous mode [ 1099.273715][T12622] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1099.434895][ T44] hid-led 0003:1D34:000A.0014: hidraw0: USB HID v0.00 Device [HID 1d34:000a] on usb-dummy_hcd.3-1/input0 [ 1099.453834][ T44] hid-led 0003:1D34:000A.0014: Dream Cheeky Webmail Notifier initialized [ 1099.479727][T12572] veth1_vlan: entered promiscuous mode [ 1099.770773][T12622] 8021q: adding VLAN 0 to HW filter on device team0 [ 1099.958048][ T5231] bridge0: port 1(bridge_slave_0) entered blocking state [ 1099.965993][ T5231] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1100.079695][ T5231] bridge0: port 2(bridge_slave_1) entered blocking state [ 1100.087452][ T5231] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1100.251366][T12572] veth0_macvtap: entered promiscuous mode [ 1100.374301][T12572] veth1_macvtap: entered promiscuous mode [ 1100.698474][T12572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1100.713400][T12572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1100.729096][T12572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1100.740244][T12572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1100.754535][T12572] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1101.020688][T12572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1101.032373][T12572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1101.046745][T12572] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1101.204924][T12572] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1101.214217][T12572] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1101.223763][T12572] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1101.233095][T12572] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1101.366452][ T5236] usb 4-1: USB disconnect, device number 17 [ 1102.455728][T12599] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1103.093731][T12622] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1103.176127][T12599] veth0_vlan: entered promiscuous mode [ 1103.260410][T12599] veth1_vlan: entered promiscuous mode [ 1103.503151][T12768] loop2: detected capacity change from 0 to 512 [ 1103.590574][T12768] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 1103.629317][T12599] veth0_macvtap: entered promiscuous mode [ 1103.684991][T12599] veth1_macvtap: entered promiscuous mode [ 1103.836549][T12599] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1103.847454][T12599] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1103.857819][T12599] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1103.868609][T12599] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1103.878822][T12599] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1103.889605][T12599] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1103.907172][T12599] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1104.011925][T12599] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1104.022773][T12599] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1104.033011][T12599] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1104.043811][T12599] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1104.059835][T12599] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1104.252258][T12599] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1104.263725][T12599] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1104.272982][T12599] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1104.273327][ T5239] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 1104.282125][T12599] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1104.600100][ T5239] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1104.614717][ T5239] usb 4-1: New USB device found, idVendor=eb1a, idProduct=2883, bcdDevice=8b.30 [ 1104.625238][ T5239] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1104.683547][ T5239] usb 4-1: config 0 descriptor?? [ 1104.739214][ T5239] em28xx 4-1:0.0: audio device (eb1a:2883): interface 0, class 1 [ 1104.948046][T10734] usb 4-1: USB disconnect, device number 18 [ 1105.830176][T12622] veth0_vlan: entered promiscuous mode [ 1105.995937][T12622] veth1_vlan: entered promiscuous mode [ 1106.393221][T12622] veth0_macvtap: entered promiscuous mode [ 1106.484456][T12622] veth1_macvtap: entered promiscuous mode [ 1106.843788][T12622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1106.855417][T12622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1106.865912][T12622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1106.877655][T10787] Bluetooth: hci1: command 0x0406 tx timeout [ 1106.884144][T12622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1106.894895][T12622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1106.905742][T12622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1106.916025][T12622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1106.926847][T12622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1106.943036][T12622] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1107.098488][T12803] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2432'. [ 1107.140836][T12622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1107.151912][T12622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1107.162178][T12622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1107.174406][T12622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1107.185142][T12622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1107.195985][T12622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1107.212021][T12622] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1107.629727][T12622] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1107.639143][T12622] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1107.648435][T12622] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1107.657930][T12622] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1109.310194][ T44] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 1109.541085][ T44] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1109.554876][ T44] usb 4-1: New USB device found, idVendor=eb1a, idProduct=2883, bcdDevice=8b.30 [ 1109.556792][ T87] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1109.564234][ T44] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1109.572389][ T87] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1109.684143][ T44] usb 4-1: config 0 descriptor?? [ 1109.689632][ T87] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1109.698105][ T87] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1109.723017][ T44] em28xx 4-1:0.0: audio device (eb1a:2883): interface 0, class 1 [ 1110.026002][ T44] usb 4-1: USB disconnect, device number 19 [ 1110.412069][T12844] loop1: detected capacity change from 0 to 512 [ 1112.439399][ T4477] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1112.447633][ T4477] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1112.758786][ T87] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1112.766941][ T87] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1112.874054][T12873] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2449'. [ 1113.075154][T12875] loop1: detected capacity change from 0 to 512 [ 1113.156311][T12875] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1113.302623][T12875] EXT4-fs (loop1): 1 orphan inode deleted [ 1113.309077][T12875] EXT4-fs (loop1): 1 truncate cleaned up [ 1113.319606][T12875] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1113.428752][T12882] loop2: detected capacity change from 0 to 512 [ 1113.504041][T12875] Trying to write to read-only block-device loop1 [ 1114.746402][T12572] EXT4-fs error (device loop1): __ext4_iget:4985: inode #11: block 524051: comm syz-executor: invalid block [ 1114.764106][T12572] EXT4-fs (loop1): Remounting filesystem read-only [ 1115.062219][ T2021] pvrusb2: request_firmware fatal error with code=-110 [ 1115.070716][ T2021] pvrusb2: Failure uploading firmware1 [ 1115.076413][ T2021] pvrusb2: Device initialization was not successful. [ 1115.084700][ T2021] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1115.095196][ T2021] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1115.179913][ T7863] pvrusb2: Device being rendered inoperable [ 1116.273109][T12572] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1116.659954][ T1102] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1116.956581][ T1102] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1117.191588][ T1102] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1117.347617][ T1102] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1117.462503][ T4477] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1117.471445][ T4477] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1117.673695][ T4536] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1117.682011][ T4536] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1117.763078][ T1102] bridge_slave_1: left allmulticast mode [ 1117.769147][ T1102] bridge_slave_1: left promiscuous mode [ 1117.776025][ T1102] bridge0: port 2(bridge_slave_1) entered disabled state [ 1117.832408][ T1102] bridge_slave_0: left allmulticast mode [ 1117.838485][ T1102] bridge_slave_0: left promiscuous mode [ 1117.845275][ T1102] bridge0: port 1(bridge_slave_0) entered disabled state [ 1118.582595][ T1102] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1118.651742][T12910] loop3: detected capacity change from 0 to 256 [ 1118.680017][ T1102] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1118.738126][ T1102] bond0 (unregistering): Released all slaves [ 1119.149385][T12910] FAT-fs (loop3): Directory bread(block 64) failed [ 1119.161001][T12910] FAT-fs (loop3): Directory bread(block 65) failed [ 1119.169725][T12910] FAT-fs (loop3): Directory bread(block 66) failed [ 1119.176593][T12910] FAT-fs (loop3): Directory bread(block 67) failed [ 1119.187696][T12910] FAT-fs (loop3): Directory bread(block 68) failed [ 1119.194541][T12910] FAT-fs (loop3): Directory bread(block 69) failed [ 1119.201749][T12910] FAT-fs (loop3): Directory bread(block 70) failed [ 1119.208758][T12910] FAT-fs (loop3): Directory bread(block 71) failed [ 1119.215760][T12910] FAT-fs (loop3): Directory bread(block 72) failed [ 1119.222846][T12910] FAT-fs (loop3): Directory bread(block 73) failed [ 1119.290707][T12909] loop4: detected capacity change from 0 to 8 [ 1119.545612][T10787] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1119.557779][T12914] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2462'. [ 1119.575043][T10787] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1119.614543][T10787] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1119.649317][T10787] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1119.682662][T10787] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1119.702915][T10787] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1120.136170][T12920] loop4: detected capacity change from 0 to 256 [ 1120.148643][ T1102] hsr_slave_0: left promiscuous mode [ 1120.195513][ T1102] hsr_slave_1: left promiscuous mode [ 1120.243913][ T1102] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1120.260151][ T1102] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1120.300027][ T1102] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1120.308071][ T1102] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1120.360138][ T1102] veth1_macvtap: left promiscuous mode [ 1120.365985][ T1102] veth0_macvtap: left promiscuous mode [ 1120.372199][ T1102] veth1_vlan: left promiscuous mode [ 1120.378183][ T1102] veth0_vlan: left promiscuous mode [ 1120.887488][ T29] audit: type=1800 audit(1722047144.050:442): pid=12928 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2464" name="file0" dev="loop4" ino=1048831 res=0 errno=0 [ 1121.399664][T12936] loop3: detected capacity change from 0 to 512 [ 1121.794519][ T1102] team0 (unregistering): Port device team_slave_1 removed [ 1121.837558][T10787] Bluetooth: hci2: command tx timeout [ 1121.946613][ T1102] team0 (unregistering): Port device team_slave_0 removed [ 1123.211964][T12946] loop0: detected capacity change from 0 to 8 [ 1123.313495][T12953] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2474'. [ 1123.445026][T12958] loop2: detected capacity change from 0 to 256 [ 1123.628747][T12915] chnl_net:caif_netlink_parms(): no params data found [ 1123.830851][T12962] loop0: detected capacity change from 0 to 512 [ 1123.918561][T10787] Bluetooth: hci2: command tx timeout [ 1123.925313][T12958] FAT-fs (loop2): Directory bread(block 64) failed [ 1123.933781][T12958] FAT-fs (loop2): Directory bread(block 65) failed [ 1123.941084][T12958] FAT-fs (loop2): Directory bread(block 66) failed [ 1123.948384][T12958] FAT-fs (loop2): Directory bread(block 67) failed [ 1123.955398][T12958] FAT-fs (loop2): Directory bread(block 68) failed [ 1123.962429][T12958] FAT-fs (loop2): Directory bread(block 69) failed [ 1123.974019][T12958] FAT-fs (loop2): Directory bread(block 70) failed [ 1123.982445][T12958] FAT-fs (loop2): Directory bread(block 71) failed [ 1123.989666][T12958] FAT-fs (loop2): Directory bread(block 72) failed [ 1123.996527][T12958] FAT-fs (loop2): Directory bread(block 73) failed [ 1124.054182][T12962] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.2478: corrupted in-inode xattr: invalid ea_ino [ 1124.098272][T12962] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.2478: couldn't read orphan inode 15 (err -117) [ 1124.114074][T12962] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1124.241388][T12962] loop0: detected capacity change from 512 to 0 [ 1124.260587][T12969] syz.0.2478: attempt to access beyond end of device [ 1124.260587][T12969] loop0: rw=524288, sector=10, nr_sectors = 2 limit=0 [ 1124.277288][T12969] syz.0.2478: attempt to access beyond end of device [ 1124.277288][T12969] loop0: rw=524288, sector=12, nr_sectors = 2 limit=0 [ 1124.292177][T12969] syz.0.2478: attempt to access beyond end of device [ 1124.292177][T12969] loop0: rw=524288, sector=16, nr_sectors = 2 limit=0 [ 1124.306127][T12969] syz.0.2478: attempt to access beyond end of device [ 1124.306127][T12969] loop0: rw=524288, sector=18, nr_sectors = 2 limit=0 [ 1124.320072][T12969] syz.0.2478: attempt to access beyond end of device [ 1124.320072][T12969] loop0: rw=524288, sector=20, nr_sectors = 2 limit=0 [ 1124.333960][T12969] syz.0.2478: attempt to access beyond end of device [ 1124.333960][T12969] loop0: rw=524288, sector=22, nr_sectors = 2 limit=0 [ 1124.349130][T12969] syz.0.2478: attempt to access beyond end of device [ 1124.349130][T12969] loop0: rw=524288, sector=24, nr_sectors = 2 limit=0 [ 1124.363229][T12969] syz.0.2478: attempt to access beyond end of device [ 1124.363229][T12969] loop0: rw=524288, sector=26, nr_sectors = 2 limit=0 [ 1124.379389][T12969] syz.0.2478: attempt to access beyond end of device [ 1124.379389][T12969] loop0: rw=12288, sector=14, nr_sectors = 2 limit=0 [ 1124.393721][T12969] EXT4-fs error (device loop0): ext4_get_inode_loc:4574: inode #12: block 7: comm syz.0.2478: unable to read itable block [ 1124.407577][T12969] syz.0.2478: attempt to access beyond end of device [ 1124.407577][T12969] loop0: rw=145409, sector=2, nr_sectors = 2 limit=0 [ 1124.421505][T12969] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 1124.430200][T12969] EXT4-fs (loop0): I/O error while writing superblock [ 1124.437626][T12969] EXT4-fs error (device loop0): ext4_read_inode_bitmap:203: comm syz.0.2478: Cannot read inode bitmap - block_group = 0, inode_bitmap = 4 [ 1124.452370][T12969] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 1124.461047][T12969] EXT4-fs (loop0): I/O error while writing superblock [ 1124.932531][T12599] EXT4-fs warning (device loop0): htree_dirblock_to_tree:1083: inode #2: lblock 0: comm syz-executor: error -5 reading directory block [ 1125.121269][ T4477] EXT4-fs error (device loop0): __ext4_get_inode_loc_noinmem:4559: inode #12: block 7: comm kworker/u8:26: unable to read itable block [ 1125.135833][ T4477] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 1125.146298][ T4477] EXT4-fs (loop0): I/O error while writing superblock [ 1125.203051][T12599] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1125.336244][T12599] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 1125.340461][T12915] bridge0: port 1(bridge_slave_0) entered blocking state [ 1125.346034][T12599] EXT4-fs (loop0): I/O error while writing superblock [ 1125.354037][T12915] bridge0: port 1(bridge_slave_0) entered disabled state [ 1125.368715][T12915] bridge_slave_0: entered allmulticast mode [ 1125.379204][T12915] bridge_slave_0: entered promiscuous mode [ 1125.487798][T10724] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 1125.653732][T12915] bridge0: port 2(bridge_slave_1) entered blocking state [ 1125.661828][T12915] bridge0: port 2(bridge_slave_1) entered disabled state [ 1125.670137][T12915] bridge_slave_1: entered allmulticast mode [ 1125.679811][T12915] bridge_slave_1: entered promiscuous mode [ 1125.745536][T10724] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1125.758008][T10724] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1125.768631][T10724] usb 5-1: New USB device found, idVendor=056a, idProduct=0028, bcdDevice= 0.00 [ 1125.780881][T10724] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1125.879821][T10724] usb 5-1: config 0 descriptor?? [ 1125.997977][T12915] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1125.998165][T10787] Bluetooth: hci2: command tx timeout [ 1126.124203][ T1102] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1126.198231][T12915] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1126.261198][ T1102] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1126.455928][T12974] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1126.550072][T10724] usbhid 5-1:0.0: can't add hid device: -71 [ 1126.556874][T10724] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1126.599275][T10724] usb 5-1: USB disconnect, device number 18 [ 1126.637400][ T1102] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1126.688783][T12915] team0: Port device team_slave_0 added [ 1126.715167][T12915] team0: Port device team_slave_1 added [ 1126.832745][ T1102] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1126.959658][T12915] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1126.966899][T12915] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1126.993587][T12915] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1127.017493][T12915] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1127.024720][T12915] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1127.055752][T12915] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1127.275617][ T1102] bridge_slave_1: left allmulticast mode [ 1127.281731][ T1102] bridge_slave_1: left promiscuous mode [ 1127.288761][ T1102] bridge0: port 2(bridge_slave_1) entered disabled state [ 1127.303387][ T1102] bridge_slave_0: left allmulticast mode [ 1127.309990][ T1102] bridge_slave_0: left promiscuous mode [ 1127.316745][ T1102] bridge0: port 1(bridge_slave_0) entered disabled state [ 1128.096395][T10787] Bluetooth: hci2: command tx timeout [ 1128.109251][ T1102] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1128.236575][ T1102] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1128.293391][ T1102] bond0 (unregistering): Released all slaves [ 1128.420186][T12999] loop4: detected capacity change from 0 to 256 [ 1128.486552][T12992] loop2: detected capacity change from 0 to 1764 [ 1128.608367][T12992] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 1128.618901][T12992] ISOFS: unable to read i-node block [ 1128.621394][ T5182] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1128.624348][T12992] isofs_fill_super: get root inode failed [ 1128.664839][ T5182] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1128.700485][ T5182] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1128.728948][T12915] hsr_slave_0: entered promiscuous mode [ 1128.744941][ T5182] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1128.758002][ T5182] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1128.765005][T12999] FAT-fs (loop4): Directory bread(block 64) failed [ 1128.772303][T12999] FAT-fs (loop4): Directory bread(block 65) failed [ 1128.786349][T12999] FAT-fs (loop4): Directory bread(block 66) failed [ 1128.794459][T12999] FAT-fs (loop4): Directory bread(block 67) failed [ 1128.801627][T12999] FAT-fs (loop4): Directory bread(block 68) failed [ 1128.808713][T12999] FAT-fs (loop4): Directory bread(block 69) failed [ 1128.815722][T12999] FAT-fs (loop4): Directory bread(block 70) failed [ 1128.819810][T12992] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4091629214 (65466067424 ns) > initial count (185248 ns). Using initial count to start timer. [ 1128.822619][T12999] FAT-fs (loop4): Directory bread(block 71) failed [ 1128.847175][T12999] FAT-fs (loop4): Directory bread(block 72) failed [ 1128.850093][T12915] hsr_slave_1: entered promiscuous mode [ 1128.853897][T12999] FAT-fs (loop4): Directory bread(block 73) failed [ 1128.872909][ T5182] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1128.919642][T12915] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1128.927738][T12915] Cannot create hsr debugfs directory [ 1129.034123][T13004] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2494'. [ 1129.649475][ T1102] hsr_slave_0: left promiscuous mode [ 1129.704660][ T1102] hsr_slave_1: left promiscuous mode [ 1129.734797][ T1102] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1129.743222][ T1102] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1129.821009][ T1102] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1129.830292][ T1102] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1129.897830][ T1102] veth1_macvtap: left promiscuous mode [ 1129.903673][ T1102] veth0_macvtap: left promiscuous mode [ 1129.913964][ T1102] veth1_vlan: left promiscuous mode [ 1129.919959][ T1102] veth0_vlan: left promiscuous mode [ 1130.506390][T13012] loop2: detected capacity change from 0 to 2048 [ 1130.641638][T13012] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1130.978217][T10787] Bluetooth: hci3: command tx timeout [ 1131.091944][ T1102] team0 (unregistering): Port device team_slave_1 removed [ 1131.165406][ T1102] team0 (unregistering): Port device team_slave_0 removed [ 1131.236575][ T9730] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1131.731230][T13026] loop3: detected capacity change from 0 to 1764 [ 1131.767281][T10724] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 1131.767465][T13026] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 1131.785596][T13026] ISOFS: unable to read i-node block [ 1131.791585][T13026] isofs_fill_super: get root inode failed [ 1132.038956][T13026] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4091629214 (65466067424 ns) > initial count (185248 ns). Using initial count to start timer. [ 1132.118197][T10724] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1132.151910][T10724] usb 5-1: New USB device found, idVendor=0499, idProduct=103e, bcdDevice=4e.18 [ 1132.164459][T10724] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1132.174564][T10724] usb 5-1: Product: syz [ 1132.179202][T10724] usb 5-1: Manufacturer: syz [ 1132.184086][T10724] usb 5-1: SerialNumber: syz [ 1132.255438][T10724] usb 5-1: config 0 descriptor?? [ 1132.597520][T10724] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1132.685972][T10724] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 1132.760010][T10724] usb 5-1: USB disconnect, device number 19 [ 1133.018199][T13000] chnl_net:caif_netlink_parms(): no params data found [ 1133.038679][T10787] Bluetooth: hci3: command tx timeout [ 1133.353857][T12915] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1133.468325][T12915] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1133.521736][T12915] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1133.606622][T12915] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1134.743384][T13000] bridge0: port 1(bridge_slave_0) entered blocking state [ 1134.752196][T13000] bridge0: port 1(bridge_slave_0) entered disabled state [ 1134.760262][T13000] bridge_slave_0: entered allmulticast mode [ 1134.769868][T13000] bridge_slave_0: entered promiscuous mode [ 1134.890158][T13000] bridge0: port 2(bridge_slave_1) entered blocking state [ 1134.898381][T13000] bridge0: port 2(bridge_slave_1) entered disabled state [ 1134.906303][T13000] bridge_slave_1: entered allmulticast mode [ 1134.915966][T13000] bridge_slave_1: entered promiscuous mode [ 1135.118908][T10787] Bluetooth: hci3: command tx timeout [ 1135.235809][T13000] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1135.331528][T12915] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1135.354735][T13000] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1135.411786][ T5238] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1135.604222][T13000] team0: Port device team_slave_0 added [ 1135.670456][T13069] loop2: detected capacity change from 0 to 256 [ 1135.691586][T13000] team0: Port device team_slave_1 added [ 1135.714844][ T5238] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1135.745688][T12915] 8021q: adding VLAN 0 to HW filter on device team0 [ 1135.765128][T13069] FAT-fs (loop2): IO charset defaH$?)o8H` .w;6e\0`Q/;Yz׏oT{2DCPyc not found [ 1135.807822][ T5238] usb 4-1: New USB device found, idVendor=0499, idProduct=103e, bcdDevice=4e.18 [ 1135.817767][ T5238] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1135.826118][ T5238] usb 4-1: Product: syz [ 1135.830713][ T5238] usb 4-1: Manufacturer: syz [ 1135.835608][ T5238] usb 4-1: SerialNumber: syz [ 1135.879796][ T5238] usb 4-1: config 0 descriptor?? [ 1135.933027][T13000] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1135.940838][T13000] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1135.968549][T13000] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1136.023415][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 1136.031795][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1136.130463][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 1136.138786][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1136.157721][T13000] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1136.164939][T13000] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1136.191519][T13000] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1136.225074][ T5238] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1136.371181][ T5238] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 1136.457992][ T5238] usb 4-1: USB disconnect, device number 20 [ 1136.755589][T13000] hsr_slave_0: entered promiscuous mode [ 1136.785653][T13000] hsr_slave_1: entered promiscuous mode [ 1136.826305][T13000] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1136.836822][T13000] Cannot create hsr debugfs directory [ 1137.197602][T10787] Bluetooth: hci3: command tx timeout [ 1137.528529][T10787] Bluetooth: hci1: unexpected event for opcode 0x200f [ 1137.831729][T13085] loop2: detected capacity change from 0 to 128 [ 1137.875536][T13085] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 1137.910735][T13085] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 77: 0xf5 != 0xd8 [ 1137.922142][T13085] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 1137.932681][T13085] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 77: 0xf5 != 0xd8 [ 1137.943315][T13085] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 1137.953833][T13085] UDF-fs: Scanning with blocksize 512 failed [ 1138.022928][T13085] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 1138.049066][T13085] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 1138.059227][T13085] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 1138.067407][T13085] UDF-fs: Scanning with blocksize 1024 failed [ 1138.147951][T13085] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 1138.185913][T13085] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 1138.196270][T13085] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 1138.205732][T13085] UDF-fs: Scanning with blocksize 2048 failed [ 1138.289217][T13085] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 1138.355298][T13085] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 1138.365377][T13085] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 1138.366929][T13000] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1138.373454][T13085] UDF-fs: Scanning with blocksize 4096 failed [ 1138.386658][T13085] UDF-fs: warning (device loop2): udf_fill_super: No partition found (1) [ 1138.430433][T13000] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1138.460428][T13092] loop3: detected capacity change from 0 to 256 [ 1138.468540][T13000] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1138.531175][T13000] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1138.565684][T13092] FAT-fs (loop3): IO charset defaH$?)o8H` .w;6e\0`Q/;Yz׏oT{2DCPyc not found [ 1138.948738][T12915] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1139.540705][T12915] veth0_vlan: entered promiscuous mode [ 1139.670426][T12915] veth1_vlan: entered promiscuous mode [ 1139.801405][T10787] Bluetooth: hci1: unexpected event for opcode 0x200f [ 1139.956453][T12915] veth0_macvtap: entered promiscuous mode [ 1139.999495][T13000] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1140.045483][T12915] veth1_macvtap: entered promiscuous mode [ 1140.144798][T12915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1140.157557][T12915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1140.167778][T12915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1140.178666][T12915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1140.188940][T12915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1140.199732][T12915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1140.215692][T12915] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1140.341230][T13000] 8021q: adding VLAN 0 to HW filter on device team0 [ 1140.406250][ T7864] bridge0: port 1(bridge_slave_0) entered blocking state [ 1140.414220][ T7864] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1140.442213][T12915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1140.455587][T12915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1140.466301][T12915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1140.477302][T12915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1140.492931][T12915] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1140.540182][T12915] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1140.549433][T12915] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1140.560069][T12915] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1140.570192][T12915] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1140.647337][ T5238] bridge0: port 2(bridge_slave_1) entered blocking state [ 1140.655160][ T5238] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1141.239646][T13117] loop2: detected capacity change from 0 to 256 [ 1141.274766][T13117] FAT-fs (loop2): IO charset defaH$?)o8H` .w;6e\0`Q/;Yz׏oT{2DCPyc not found [ 1142.623924][T10787] Bluetooth: hci1: unexpected event for opcode 0x200f [ 1142.925276][T13000] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1143.566186][T13000] veth0_vlan: entered promiscuous mode [ 1143.646946][T13000] veth1_vlan: entered promiscuous mode [ 1143.701958][T13151] loop3: detected capacity change from 0 to 256 [ 1143.750045][T13151] FAT-fs (loop3): IO charset defaH$?)o8H` .w;6e\0`Q/;Yz׏oT{2DCPyc not found [ 1143.976868][T13000] veth0_macvtap: entered promiscuous mode [ 1144.067331][T13000] veth1_macvtap: entered promiscuous mode [ 1144.266944][T13000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1144.278297][T13000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1144.288510][T13000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1144.299454][T13000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1144.312491][T13000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1144.324621][T13000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1144.334867][T13000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1144.349327][T13000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1144.366664][T13000] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1144.628430][T13000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1144.640507][T13000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1144.650793][T13000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1144.665417][T13000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1144.678323][T13000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1144.690511][T13000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1144.706523][T13000] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1144.890966][T13000] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1144.900628][T13000] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1144.909944][T13000] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1144.919192][T13000] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1145.666247][T13171] loop2: detected capacity change from 0 to 512 [ 1145.715796][T13171] EXT4-fs: Ignoring removed orlov option [ 1145.765680][T13171] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1145.884531][T13178] netlink: 540 bytes leftover after parsing attributes in process `syz.3.2561'. [ 1145.897446][T13171] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1146.014707][T13171] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2559: bg 0: block 248: padding at end of block bitmap is not set [ 1146.091346][T13171] Quota error (device loop2): write_blk: dquota write failed [ 1146.100680][T13171] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 1146.111334][T13171] EXT4-fs error (device loop2): ext4_acquire_dquot:6848: comm syz.2.2559: Failed to acquire dquot type 1 [ 1146.174061][T13171] EXT4-fs (loop2): 1 truncate cleaned up [ 1146.255211][T13171] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1146.430458][T13171] EXT4-fs: Ignoring removed orlov option [ 1146.436848][T13171] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1146.458167][T13171] EXT4-fs error (device loop2): __ext4_remount:6491: comm syz.2.2559: Abort forced by user [ 1146.502981][T13171] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 1146.577842][T13171] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 1146.589122][T13171] ext4 filesystem being remounted at /302/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1146.772836][T13190] ------------[ cut here ]------------ [ 1146.778871][T13190] refcount_t: decrement hit 0; leaking memory. [ 1146.787625][T13190] WARNING: CPU: 1 PID: 13190 at lib/refcount.c:31 refcount_warn_saturate+0x1e7/0x370 [ 1146.798006][T13190] Modules linked in: [ 1146.808202][T13190] CPU: 1 UID: 0 PID: 13190 Comm: syz.4.2564 Not tainted 6.10.0-syzkaller-12708-g2f8c4f506285 #0 [ 1146.820668][T13190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 1146.831245][T13190] RIP: 0010:refcount_warn_saturate+0x1e7/0x370 [ 1146.837955][T13190] Code: d4 91 e8 6c bc 31 fc c6 00 00 c6 05 49 8d bd 0b 01 90 49 c7 86 80 0c 00 00 00 00 00 00 48 c7 c7 18 5d f1 90 e8 5a 17 43 fb 90 <0f> 0b 90 90 eb ab 8b 3a e8 fc c8 31 fc f6 c3 01 0f 85 e0 fe ff ff [ 1146.858229][T13190] RSP: 0018:ffff888045f0fb08 EFLAGS: 00010293 [ 1146.864665][T13190] RAX: ffffffff815a3fb1 RBX: 0000000000000000 RCX: ffff8880330ca0c0 [ 1146.873424][T13190] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 1146.881995][T13190] RBP: ffff888045f0fb20 R08: ffffffff815a3f8f R09: 0000000000000000 [ 1146.890455][T13190] R10: ffff88804570f778 R11: 0000000000000004 R12: 0000000000000000 [ 1146.898908][T13190] R13: ffff8880330cac00 R14: ffff8880330cac00 R15: 0000000000000004 [ 1146.910864][T13190] FS: 000055558c2ae500(0000) GS:ffff88813fd00000(0000) knlGS:0000000000000000 [ 1146.921332][T13190] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1146.928378][T13190] CR2: 00007f3c5d4d2838 CR3: 000000002d06c000 CR4: 00000000003506f0 [ 1146.936665][T13190] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1146.945209][T13190] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1146.953632][T13190] Call Trace: [ 1146.957297][T13190] [ 1146.960472][T13190] ? show_trace_log_lvl+0x3b1/0x500 [ 1146.966049][T13190] ? ref_tracker_free+0xd93/0xec0 [ 1146.971696][T13190] ? show_regs+0x148/0x160 [ 1146.976462][T13190] ? __warn+0x2c2/0x770 [ 1146.981181][T13190] ? refcount_warn_saturate+0x1e7/0x370 [ 1146.987248][T13190] ? report_bug+0x929/0xbd0 [ 1146.992141][T13190] ? refcount_warn_saturate+0x1e7/0x370 [ 1146.998432][T13190] ? handle_bug+0x47/0x70 [ 1147.003095][T13190] ? exc_invalid_op+0x1f/0x50 [ 1147.011622][T13190] ? asm_exc_invalid_op+0x1f/0x30 [ 1147.018315][T13190] ? __warn_printk+0x43f/0x470 [ 1147.023442][T13190] ? __warn_printk+0x461/0x470 [ 1147.028813][T13190] ? refcount_warn_saturate+0x1e7/0x370 [ 1147.034721][T13190] ? refcount_warn_saturate+0x1e6/0x370 [ 1147.043188][T13190] ref_tracker_free+0xd93/0xec0 [ 1147.048587][T13190] ? kmsan_get_metadata+0x13e/0x1c0 [ 1147.054179][T13190] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 1147.061118][T13190] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 1147.067787][T13190] ? kmsan_get_metadata+0x13e/0x1c0 [ 1147.073365][T13190] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1147.079775][T13190] ax25_release+0x889/0x10c0 [ 1147.084850][T13190] ? __pfx_ax25_release+0x10/0x10 [ 1147.090499][T13190] sock_close+0xd6/0x2d0 [ 1147.095117][T13190] ? __pfx_sock_close+0x10/0x10 [ 1147.100494][T13190] __fput+0x344/0x1160 [ 1147.104895][T13190] ? kmsan_get_metadata+0xf0/0x1c0 [ 1147.113969][T13190] ? __pfx_____fput+0x10/0x10 [ 1147.120137][T13190] ____fput+0x1e/0x30 [ 1147.124440][T13190] task_work_run+0x268/0x310 [ 1147.129591][T13190] syscall_exit_to_user_mode+0xce/0x170 [ 1147.142964][T13190] do_syscall_64+0xda/0x1e0 [ 1147.148159][T13190] ? clear_bhb_loop+0x25/0x80 [ 1147.153167][T13190] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1147.159626][T13190] RIP: 0033:0x7f6cec577299 [ 1147.164359][T13190] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1147.184547][T13190] RSP: 002b:00007ffddb353cd8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1147.193543][T13190] RAX: 0000000000000000 RBX: 0000000000117f44 RCX: 00007f6cec577299 [ 1147.202054][T13190] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1147.210605][T13190] RBP: 00007ffddb353db0 R08: 0000000000000001 R09: 00007ffddb353fbf [ 1147.222557][T13190] R10: 00007f6cec400000 R11: 0000000000000246 R12: 0000000000000032 [ 1147.232103][T13190] R13: 00007ffddb353dd0 R14: 00007ffddb353df0 R15: ffffffffffffffff [ 1147.240643][T13190] [ 1147.243899][T13190] ---[ end trace 0000000000000000 ]--- [ 1147.282229][ T9730] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1147.601522][ T8696] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1147.610378][ T8696] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1147.629397][T13201] loop3: detected capacity change from 0 to 128 [ 1147.688168][ T8696] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1147.696293][ T8696] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1148.158490][ T5238] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 1148.377467][ T5238] usb 4-1: Using ep0 maxpacket: 8 [ 1148.410872][T13207] loop1: detected capacity change from 0 to 1024 [ 1148.424423][ T5238] usb 4-1: New USB device found, idVendor=1199, idProduct=68aa, bcdDevice=c5.2b [ 1148.434145][ T5238] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1148.460873][T13207] EXT4-fs: Ignoring removed orlov option [ 1148.466866][T13207] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1148.478729][ T5238] usb 4-1: config 0 descriptor?? [ 1148.503557][ T5238] sierra 4-1:0.0: Sierra USB modem converter detected [ 1148.718405][T13207] loop1: detected capacity change from 0 to 512 [ 1148.732486][ T5238] usb 4-1: Sierra USB modem converter now attached to ttyUSB0 [ 1148.784026][ T5238] usb 4-1: USB disconnect, device number 21 [ 1148.814761][ T5238] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 1148.825098][ T5238] sierra 4-1:0.0: device disconnected [ 1149.906423][T13224] loop3: detected capacity change from 0 to 512 [ 1149.960776][T13224] EXT4-fs: Ignoring removed orlov option [ 1150.000841][T13224] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1150.098940][T13224] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1150.159065][T13224] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2574: bg 0: block 248: padding at end of block bitmap is not set [ 1150.245313][T13226] loop4: detected capacity change from 0 to 2048 [ 1150.258777][T13224] Quota error (device loop3): write_blk: dquota write failed [ 1150.266877][T13224] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 1150.279762][T13224] EXT4-fs error (device loop3): ext4_acquire_dquot:6848: comm syz.3.2574: Failed to acquire dquot type 1 [ 1150.305854][T13228] ===================================================== [ 1150.313434][T13228] BUG: KMSAN: uninit-value in ax25_release+0x748/0x10c0 [ 1150.320908][T13228] ax25_release+0x748/0x10c0 [ 1150.325754][T13228] sock_close+0xd6/0x2d0 [ 1150.331038][T13228] __fput+0x344/0x1160 [ 1150.335307][T13228] ____fput+0x1e/0x30 [ 1150.339640][T13228] task_work_run+0x268/0x310 [ 1150.344437][T13228] syscall_exit_to_user_mode+0xce/0x170 [ 1150.351539][T13228] do_syscall_64+0xda/0x1e0 [ 1150.356420][T13228] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1150.363426][T13228] [ 1150.365886][T13228] Uninit was created at: [ 1150.370600][T13228] __kmalloc_node_track_caller_noprof+0x6c7/0xf90 [ 1150.377496][T13228] kmemdup_noprof+0x48/0xc0 [ 1150.382244][T13228] neigh_parms_alloc+0x8e/0x960 [ 1150.388664][T13228] ipv6_add_dev+0x482/0x1c20 [ 1150.393522][T13228] addrconf_notify+0x7c9/0x1c40 [ 1150.399821][T13228] raw_notifier_call_chain+0xe8/0x440 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1150.405465][T13228] call_netdevice_notifiers_info+0x1be/0x2b0 [ 1150.412404][T13228] register_netdevice+0x2107/0x22d0 [ 1150.418018][T13228] cfg80211_register_netdevice+0x1b3/0x400 [ 1150.424208][T13228] ieee80211_if_add+0x1b81/0x2340 [ 1150.429693][T13228] ieee80211_register_hw+0x58ac/0x5c90 [ 1150.436422][T13228] mac80211_hwsim_new_radio+0x42bd/0x69e0 [ 1150.442537][T13228] hwsim_new_radio_nl+0x1707/0x3000 [ 1150.448177][T13228] genl_rcv_msg+0x1214/0x12c0 [ 1150.453103][T13228] netlink_rcv_skb+0x375/0x650 [ 1150.458213][T13228] genl_rcv+0x40/0x60 [ 1150.462429][T13228] netlink_unicast+0xf52/0x1260 [ 1150.464268][T13224] EXT4-fs (loop3): 1 truncate cleaned up [ 1150.467608][T13228] netlink_sendmsg+0x10da/0x11e0 [ 1150.478608][T13228] __sock_sendmsg+0x30f/0x380 [ 1150.483522][T13228] __sys_sendto+0x685/0x830 [ 1150.489604][T13228] __x64_sys_sendto+0x125/0x1d0 [ 1150.494666][T13228] x64_sys_call+0x3799/0x3c10 [ 1150.500153][T13228] do_syscall_64+0xcd/0x1e0 [ 1150.504931][T13228] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1150.511375][T13228] [ 1150.513839][T13228] CPU: 0 UID: 0 PID: 13228 Comm: syz.2.2576 Tainted: G W 6.10.0-syzkaller-12708-g2f8c4f506285 #0 [ 1150.528687][T13228] Tainted: [W]=WARN [ 1150.532633][T13228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 1150.543064][T13228] ===================================================== [ 1150.550258][T13228] Disabling lock debugging due to kernel taint [ 1150.556572][T13228] Kernel panic - not syncing: kmsan.panic set ... [ 1150.563160][T13228] CPU: 0 UID: 0 PID: 13228 Comm: syz.2.2576 Tainted: G B W 6.10.0-syzkaller-12708-g2f8c4f506285 #0 [ 1150.575354][T13228] Tainted: [B]=BAD_PAGE, [W]=WARN [ 1150.580525][T13228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 1150.590766][T13228] Call Trace: [ 1150.594187][T13228] [ 1150.597261][T13228] dump_stack_lvl+0x216/0x2d0 [ 1150.602318][T13228] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1150.608417][T13228] dump_stack+0x1e/0x30 [ 1150.612836][T13228] panic+0x4e2/0xcd0 [ 1150.616990][T13228] ? kmsan_get_metadata+0xf1/0x1c0 [ 1150.622391][T13228] kmsan_report+0x2c7/0x2d0 [ 1150.627162][T13228] ? kmsan_get_metadata+0x13e/0x1c0 [ 1150.632650][T13228] ? filter_irq_stacks+0x60/0x1a0 [ 1150.637898][T13228] ? __msan_warning+0x95/0x120 [ 1150.642903][T13228] ? ax25_release+0x748/0x10c0 [ 1150.647915][T13228] ? sock_close+0xd6/0x2d0 [ 1150.652564][T13228] ? __fput+0x344/0x1160 [ 1150.656998][T13228] ? ____fput+0x1e/0x30 [ 1150.661351][T13228] ? task_work_run+0x268/0x310 [ 1150.666342][T13228] ? syscall_exit_to_user_mode+0xce/0x170 [ 1150.672341][T13228] ? do_syscall_64+0xda/0x1e0 [ 1150.677290][T13228] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1150.683649][T13228] ? kmsan_get_metadata+0x13e/0x1c0 [ 1150.689116][T13228] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 1150.695712][T13228] ? kmsan_get_metadata+0x13e/0x1c0 [ 1150.701180][T13228] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1150.707287][T13228] ? kmsan_get_metadata+0x13e/0x1c0 [ 1150.712752][T13228] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 1150.719355][T13228] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 1150.725695][T13228] ? kmsan_get_metadata+0x13e/0x1c0 [ 1150.731160][T13228] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1150.737244][T13228] __msan_warning+0x95/0x120 [ 1150.742082][T13228] ax25_release+0x748/0x10c0 [ 1150.746942][T13228] ? __pfx_ax25_release+0x10/0x10 [ 1150.752221][T13228] sock_close+0xd6/0x2d0 [ 1150.756721][T13228] ? __pfx_sock_close+0x10/0x10 [ 1150.761809][T13228] __fput+0x344/0x1160 [ 1150.766082][T13228] ? kmsan_get_metadata+0xf0/0x1c0 [ 1150.771494][T13228] ? __pfx_____fput+0x10/0x10 [ 1150.776379][T13228] ____fput+0x1e/0x30 [ 1150.780560][T13228] task_work_run+0x268/0x310 [ 1150.785397][T13228] syscall_exit_to_user_mode+0xce/0x170 [ 1150.791228][T13228] do_syscall_64+0xda/0x1e0 [ 1150.796528][T13228] ? clear_bhb_loop+0x25/0x80 [ 1150.801418][T13228] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1150.807596][T13228] RIP: 0033:0x7f0474577299 [ 1150.812285][T13228] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1150.832338][T13228] RSP: 002b:00007ffc0b468048 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1150.841005][T13228] RAX: 0000000000000000 RBX: 0000000000118c99 RCX: 00007f0474577299 [ 1150.849184][T13228] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1150.857356][T13228] RBP: 00007ffc0b468120 R08: 0000000000000001 R09: 00007ffc0b46832f [ 1150.865535][T13228] R10: 00007f0474400000 R11: 0000000000000246 R12: 0000000000000032 [ 1150.873716][T13228] R13: 00007ffc0b468140 R14: 00007ffc0b468160 R15: ffffffffffffffff [ 1150.881930][T13228] [ 1150.885349][T13228] Kernel Offset: disabled [ 1150.889763][T13228] Rebooting in 86400 seconds..