last executing test programs: 6m26.361264121s ago: executing program 0 (id=1): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='netlink_extack\x00', r1}, 0x10) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f00000002c0)={0x8400001e}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00011100ffffffffffffff81000000000000000000000014", @ANYRES8=0x0, @ANYRES32=r2], 0x30}}, 0x0) 6m25.072383527s ago: executing program 4 (id=5): mkdir(&(0x7f0000000200)='./file1\x00', 0x0) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x1, 0x0, 0x0, 0x80d0}, 0x8005) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180)) 6m24.946898238s ago: executing program 0 (id=10): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89100a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) unshare(0x2c020400) mount$bind(&(0x7f0000000280)='./file0\x00', &(0x7f0000000480)='./file0/../file0\x00', 0x0, 0x21adc51, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x89901) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x484, &(0x7f0000000480), 0x1, 0xb95, &(0x7f00000017c0)="$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") 6m23.024267326s ago: executing program 4 (id=13): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4c, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x4e1e2563543d84f9}, @TCA_TBF_PBURST={0x8, 0x7, 0x1fc0}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x0, 0xffff, 0xffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x81}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xcb59372f370e8465}]}}]}, 0x78}}, 0x4000080) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r0, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) 6m22.592711944s ago: executing program 0 (id=15): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x0, 0x2}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) bind$tipc(r0, 0x0, 0x0) 6m22.012908571s ago: executing program 0 (id=17): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff001000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENT(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="58000000000000009fed2788c5532994414b47034801d524faf416638217", @ANYRES32], 0x58) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000002340), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) chdir(&(0x7f0000000100)='./file0\x00') read$FUSE(r0, &(0x7f0000000300)={0x2020}, 0x2020) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x107842, 0x0) 6m18.823323303s ago: executing program 32 (id=17): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff001000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENT(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="58000000000000009fed2788c5532994414b47034801d524faf416638217", @ANYRES32], 0x58) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000002340), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) chdir(&(0x7f0000000100)='./file0\x00') read$FUSE(r0, &(0x7f0000000300)={0x2020}, 0x2020) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x107842, 0x0) 6m7.047655368s ago: executing program 33 (id=13): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4c, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x4e1e2563543d84f9}, @TCA_TBF_PBURST={0x8, 0x7, 0x1fc0}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x0, 0xffff, 0xffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x81}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xcb59372f370e8465}]}}]}, 0x78}}, 0x4000080) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r0, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) 5m37.309155275s ago: executing program 3 (id=97): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000002700)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd2b, 0x25dfdbfb, {0x60, 0x0, 0x0, 0x0, {0x0, 0x5}, {0xffff, 0xffff}, {0xffff, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x2400b091}, 0x3000c81c) chdir(&(0x7f00000003c0)='./bus\x00') creat(&(0x7f0000000400)='./bus\x00', 0x0) lsetxattr$security_ima(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000000), &(0x7f0000000140)=ANY=[@ANYBLOB="04"], 0x2, 0x0) open$dir(&(0x7f0000000040)='./bus\x00', 0x100000, 0x4) 5m35.551543264s ago: executing program 3 (id=99): r0 = creat(&(0x7f0000000340)='./file0\x00', 0x14) close(r0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r1, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x8, @mcast1}, 0x1c) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000000c0), 0x8, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}}) 5m33.478668167s ago: executing program 3 (id=101): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001240)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=@newtfilter={0x60, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_matchall={{0xd}, {0x1c, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x1, 0x1}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xd, 0x3}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xd, 0xe}}]}}, @TCA_RATE={0x6, 0x5, {0x4, 0x1}}, @TCA_CHAIN={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x84}, 0x0) 5m32.246917994s ago: executing program 3 (id=104): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000280)='./file0\x00', &(0x7f0000000480)='./file0/../file0\x00', 0x0, 0x21adc51, 0x0) unshare(0x22020600) open_tree(0xffffffffffffff9c, &(0x7f0000001800)='./file0/../file0/file0\x00', 0x89901) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) 5m30.830044055s ago: executing program 3 (id=108): syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000200)='./file0\x00', 0xa00010, &(0x7f0000000840)=ANY=[@ANYBLOB='nodecompose,decompose,nobarrier,gid=', @ANYRESHEX=0xee01, @ANYBLOB="2c6e6c733d69736f383835392d310000000072726965722c00bcd0f0b5c4e2957974ff5d7ea3c3dcee087e4983684e8a4c4e4e87b134e30ce77162b12885b964b3506ff3eae0f3599447b17861d19be78079e5dd7bdc7f1eb36e31ac14de48349767164f5f6431bbdeaef96a4f2bce64b5cfa76ce3a2c4302374bc5535d7e2eb8dfb2e5d58a37b7e37836597c21f51bcdf6df4cad825cfd9ef5ee9e89e04b15cd3cea9e152d67b9a7eedc5dfe6d85a3ce7c342da8cc969b552197cb8bcc4a1009f38f4a85b7c742101ba5bc03115feca2b994c699812"], 0x6, 0x635, &(0x7f0000000c80)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x3, &(0x7f0000000340)=ANY=[@ANYRESOCT, @ANYRES8=0x0, @ANYRESDEC=0x0, @ANYBLOB="9663aa4387588c188554394a9397c00a0bf3545f7f52a5900f32e18a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="0e0001000200"], 0x8) write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) 5m29.500395071s ago: executing program 3 (id=110): syz_usb_connect(0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000080)={0x1}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e13010002000001"], 0x16) 5m25.294513209s ago: executing program 34 (id=110): syz_usb_connect(0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000080)={0x1}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e13010002000001"], 0x16) 3m19.947983977s ago: executing program 2 (id=358): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000008380)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}}, 0x0, 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f0000002200)={0x50, 0x2, 0x0, {0x7, 0x27}}, 0x50) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r1) epoll_create(0x1) socket$nl_generic(0x10, 0x3, 0x10) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0}, 0x0, &(0x7f0000000680)={0x7ff, 0x0, 0x0, 0x2}, 0x0, 0x0) 3m18.306703007s ago: executing program 2 (id=363): r0 = socket(0x2, 0x3, 0x5) setsockopt(r0, 0xff, 0x1, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, 0x0, 0x8) setsockopt$inet6_int(r1, 0x29, 0xb, 0x0, 0x0) sendmsg$kcm(r0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'rr\x00', 0x1b, 0x88, 0x4000069}, 0x2c) 3m16.360995988s ago: executing program 2 (id=368): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0x58, &(0x7f0000000140)}, 0x10) r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000200)=0x1, 0x12) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000080), 0x12) 3m15.52758731s ago: executing program 2 (id=371): r0 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000640)='./bus\x00', 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="009f587a31d53b5cb6077bd11087bb6e13aac56feecaaae0b009cee43814e80646ff2772abedb27f35c706ba7c624afb75f473956061ae41834d27270063fa18a3515f9ac6cd6f15a042b1edcd60bdeb55446beed1014aa13d43d399fb4f716b8a24502a8e3e697642b172841c89aecefe0cfb3c32d7c28955601f41fb90d51951d91a35a5abeb4ffceef5cf6e190ec9eb6f91a0d06882039b54dd4485b823414e06691b0244ca11ac0baeaeec1a96861d358464329c64b77e6ff2e2d8a6bb29268be3e7c46750210270d79e1054add6c2ef3f0373", @ANYRESHEX, @ANYRES16], 0x1, 0x128d, &(0x7f0000002300)="$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") open(&(0x7f0000000140)='./bus\x00', 0x143142, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000180)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x2, 0x0, 0x0, 0x801c, 0x8, "ef359f413bb90152f7d6d1ce5d29c3ee5e5ca9000f7c41499dc2aac63a01000000000000004faa2ad9c084a003ea000000000000b600", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b900000000fffffffff2060000000000000200", [0x2000000000000000]}) r2 = creat(&(0x7f0000000300)='./bus\x00', 0x14) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) fcntl$setstatus(r3, 0x4, 0x46c00) dup3(r3, r2, 0x0) io_setup(0x6, &(0x7f0000000240)=0x0) io_submit(r4, 0x3f0a, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x8, 0x0, 0x0, r2, &(0x7f0000000000), 0x200a00}]) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r0, 0xc0a85322, &(0x7f00000000c0)) socket$packet(0x11, 0x2, 0x300) 3m11.570800604s ago: executing program 2 (id=379): ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f00000000c0)={0x1, 0x0, 0x6, 0x0}) r0 = openat$vsock(0xffffff9c, &(0x7f00000001c0), 0x40101, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x104}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000100)={0x1ff, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_genetlink_get_family_id$wireguard(&(0x7f0000000200), r0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0xfffffffffffffffe]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3m10.3133516s ago: executing program 2 (id=382): r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x1, 0x7}, {}, {0x7}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x24040080}, 0x800) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x30, 0x2c, 0xd27, 0x8030bd29, 0x2, {0x0, 0x0, 0x0, r8, {0xfff1, 0xa}, {}, {0x9}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3m6.319196468s ago: executing program 35 (id=382): r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x1, 0x7}, {}, {0x7}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x24040080}, 0x800) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x30, 0x2c, 0xd27, 0x8030bd29, 0x2, {0x0, 0x0, 0x0, r8, {0xfff1, 0xa}, {}, {0x9}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 7.192597417s ago: executing program 8 (id=1039): r0 = socket(0x18, 0x0, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x2, @local, 'geneve1\x00'}}, 0x1e) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)={0x8102, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x40040) 6.37816362s ago: executing program 8 (id=1043): bind$tipc(0xffffffffffffffff, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002800), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000140)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001500)=ANY=[], 0x1c}}, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x009'], 0x28}, 0x4000840) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000240)={@my=0x1}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000004b80)={0x28, 0x0, 0x0, @my=0x1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, &(0x7f0000001680)=""/4097}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 5.517685115s ago: executing program 7 (id=1046): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X86_BUS_LOCK_EXIT(r1, 0x4068aea3, &(0x7f0000000100)={0xc1, 0x0, 0x3}) 5.228889331s ago: executing program 1 (id=1048): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f00000000c0)=0x5b) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x50, 0x0, &(0x7f0000000240)=[@enter_looper, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x2, 0x0, &(0x7f0000000040)='xn'}) 5.016856353s ago: executing program 5 (id=1049): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000006040)={0x58, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x2c, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8}]}, {0x4}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd79f}]}]}]}, 0x58}}, 0x0) 4.79797872s ago: executing program 6 (id=1050): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) 4.738735861s ago: executing program 7 (id=1051): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r0}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) close(r2) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x15, 0x8, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='ext4_writepages_result\x00', r3}, 0x10) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r4}, 0x8) close(r5) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) 4.653567522s ago: executing program 8 (id=1052): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x14, r1, 0xf01, 0x0, 0x0, {0x5}}, 0x14}}, 0x0) 4.407603393s ago: executing program 1 (id=1053): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000005580)=""/4084, 0xff4}, {&(0x7f00000016c0)=""/4098, 0x1002}, {&(0x7f0000003540)=""/4102, 0x1006}, {&(0x7f00000002c0)=""/147, 0x93}, {&(0x7f0000001300)=""/213, 0xd5}, {&(0x7f0000000380)=""/137, 0x89}], 0x6}, 0x0) 4.272901s ago: executing program 5 (id=1054): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a00000000000000000000000000000900010073797a30000000002c000000030a00000000000000000000000000000900010073797a30000000000900030073797a30000000006c000000060a000000000000000000000000000008000b4000000000440004802c0001800a0001006c696d69740000001c0002800c00014000005300000000000c0002400000000000000000140001800b0001006c6f6f6b75700000040002800900010073797a30"], 0xe0}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x4b0}}, 0x0) 3.862037481s ago: executing program 6 (id=1055): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT2(r1, 0x4038ae7a, &(0x7f0000000240)={[{0x2}, {0x6, 0xfffc, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc}]}) 3.813718886s ago: executing program 7 (id=1056): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000101c1b021b00000000000109022400010000400009040000010300400009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000005c0)={0x14, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220500000007e05b3eec51e16ba4b126a7a4cd7c84692ab8e9b31587f788d6dcd9ff003000120002faff"], 0x0}, 0x0) 3.78037462s ago: executing program 8 (id=1057): r0 = syz_open_procfs(0x0, &(0x7f000001b140)='maps\x00') read$FUSE(r0, &(0x7f0000019080)={0x2020}, 0x2020) pread64(r0, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) 3.417368094s ago: executing program 5 (id=1058): r0 = socket$inet6(0xa, 0x1, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@mcast2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}, 0x20) 3.417230222s ago: executing program 1 (id=1059): syz_mount_image$minix(&(0x7f00000003c0), &(0x7f0000000040)='./bus\x00', 0x280085e, &(0x7f0000000100)=ANY=[], 0xa, 0x229, &(0x7f00000005c0)="$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") r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='\x00', 0x9801) statx(r0, 0x0, 0x1000, 0x0, &(0x7f0000000340)) 3.180676638s ago: executing program 6 (id=1060): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000002000001000000000000000b40"], 0x38}}, 0x0) 3.028907182s ago: executing program 8 (id=1061): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040411215500000000000010902240001000000000904de00010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000440)={0x18, &(0x7f0000000180)=ANY=[@ANYBLOB="000aa9"], 0x0, 0x0, 0x0, 0x0}, 0x0) 2.653690545s ago: executing program 5 (id=1062): bind$tipc(0xffffffffffffffff, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002800), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000140)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001500)=ANY=[], 0x1c}}, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x009'], 0x28}, 0x4000840) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000240)={@my=0x1}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000004b80)={0x28, 0x0, 0x0, @my=0x1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, &(0x7f0000001680)=""/4097}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 2.628910158s ago: executing program 1 (id=1063): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x108, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1f, 0x14, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3ff}}, @printk={@llx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb0}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2002, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 2.424387528s ago: executing program 7 (id=1064): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="030300000000fcffffff0c0000000800030036be"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 2.340595453s ago: executing program 6 (id=1065): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r0, 0xc0105500, &(0x7f0000000040)={0x40, 0x1, 0x2, 0x0, 0x0, 0xd71, 0x0}) 1.817562619s ago: executing program 1 (id=1066): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r0}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) close(r2) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000c80)=@ringbuf={{}, {{}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r3, 0x0, 0x0}, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='ext4_writepages_result\x00', r4}, 0x10) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r5}, 0x8) close(r6) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r3, 0x0, 0x0}, 0x10) 1.737258847s ago: executing program 5 (id=1067): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x8, [{0x0, 0x2, 0x20}]}, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}, @restrict={0x0, 0x0, 0x0, 0x4}]}}, 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000640), 0x8) name_to_handle_at(r0, &(0x7f0000004740)='\x00', 0x0, 0x0, 0x1000) 1.666405111s ago: executing program 7 (id=1068): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xa, &(0x7f0000000f40)=0xfffffffd, 0x4) recvfrom(r0, 0x0, 0x0, 0x3, 0x0, 0x0) 1.537974192s ago: executing program 6 (id=1069): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x258a, 0x36, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x8, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x14, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x8, {[@main=@item_4={0x3, 0x0, 0x9, "0963fbdb"}, @global=@item_012={0x0, 0x1, 0x6}, @global=@item_012={0x1, 0x1, 0x0, 'V'}]}}, 0x0}, 0x0) 852.439998ms ago: executing program 5 (id=1070): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x81008e, &(0x7f0000003f80)=ANY=[@ANYBLOB="726f6469722c7379735f696d6d757461626c652c6572726f72733d636f6e74696e75652c756e695f786c6174653d312c73686f72746e616d653d77696e6e742c756e695f786c6174653d302c636865636b3d7374726963742c636f6465706167653d3935302c696f636861727365743d63703836302c696f636861727365743d63703433372c73686f72746e616d653d77696e6e742c696f636861727365743d63703933322c6e6f6e756d7461696c3d302c6e66732c726f6469722c757466383d312c73686f72746e616d653d6d697865642c757466383d302c00e23bb66df271dc392ed708", @ANYRES16], 0x4, 0x2ba, &(0x7f00000001c0)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000740)=""/192, 0x113) 709.12684ms ago: executing program 1 (id=1071): socket$nl_route(0x10, 0x3, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x80000) syz_mount_image$minix(&(0x7f0000000100), &(0x7f00000066c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1810002, &(0x7f0000000680)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="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", @ANYBLOB="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", @ANYRESOCT, @ANYRES16=0x0, @ANYRESDEC, @ANYRES64=0x0, @ANYRES32, @ANYBLOB="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", @ANYRESOCT], 0x1, 0x1cd, &(0x7f0000002180)="$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") socket$nl_xfrm(0x10, 0x3, 0x6) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000) socket$nl_generic(0x10, 0x3, 0x10) socket$xdp(0x2c, 0x3, 0x0) socket(0x2a, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) socket$rxrpc(0x21, 0x2, 0xa) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, 0x0, &(0x7f0000000200)=r2}, 0x20) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f0000000040)}) 571.183489ms ago: executing program 7 (id=1072): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000001000000000000000000000000b7080000000000007b8a"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x11}}) 209.760292ms ago: executing program 8 (id=1073): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xa, 0x4, 0x6, 0xff, 0x42, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000080), 0x619, r0}, 0x38) 0s ago: executing program 6 (id=1074): ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000080)={0x5, @raw_data="af12020976d1f7f243ba6c7895fb0b0a5e30778b25aa7ea00776f81ac0504987f42141300f4f079b68ca6a3f6587eead683a88f2a765fd2cf7e0d6a62858d648c181d880cae9e30c281b73f873d8631131b7c20547bf7469a03c5771194f2e8635786eb0f49f1f1223a309159ca76b0bd6f602505d22b18d850af7ab19d7230f8c87b0f8cfb30e5ea99be96df56ccb21a74c2998cca0689d069c76f564c0408ac6d677e675baffffffff78d999006bd94454a317300f78b46acccdbf3a6ef4c4b2aa4a513e0b7043"}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8924, &(0x7f00000000c0)={'wlan0\x00', 0x1}) kernel console output (not intermixed with test programs): 93.849166][ T5952] bond_slave_0: entered promiscuous mode [ 293.856439][ T5952] bond_slave_1: entered promiscuous mode [ 293.866862][ T5952] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 293.996364][ T5952] bond0: left promiscuous mode [ 294.001545][ T5952] bond_slave_0: left promiscuous mode [ 294.009900][ T5952] bond_slave_1: left promiscuous mode [ 294.123348][ T3679] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 294.131510][ T3679] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 294.285425][ T3869] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 294.293525][ T3869] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 294.365900][ T3679] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 294.374419][ T3679] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 294.462392][ T5958] loop3: detected capacity change from 0 to 512 [ 294.549552][ T5958] ======================================================= [ 294.549552][ T5958] WARNING: The mand mount option has been deprecated and [ 294.549552][ T5958] and is ignored by this kernel. Remove the mand [ 294.549552][ T5958] option from the mount to silence this warning. [ 294.549552][ T5958] ======================================================= [ 294.764970][ T5958] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 294.983580][ T5958] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 295.092378][ T5958] EXT4-fs (loop3): Remounting filesystem read-only [ 295.166905][ T5958] EXT4-fs (loop3): 1 truncate cleaned up [ 295.175074][ T5958] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 295.271588][ T4281] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 295.279861][ T4281] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 295.496773][ T10] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 295.637670][ T4222] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 295.646286][ T4222] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 295.677496][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 295.716148][ T5770] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.767051][ T10] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 295.782166][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.792849][ T10] usb 2-1: Product: syz [ 295.797413][ T10] usb 2-1: Manufacturer: syz [ 295.802278][ T10] usb 2-1: SerialNumber: syz [ 295.873430][ T5966] netlink: 'syz.0.1': attribute type 6 has an invalid length. [ 295.919857][ T10] usb 2-1: config 0 descriptor?? [ 295.986563][ T10] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 296.854778][ T5973] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9'. [ 297.890040][ T10] gspca_stk1135: reg_w 0x200 err -71 [ 297.896846][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 297.903429][ T10] gspca_stk1135: Sensor write failed [ 297.909665][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 297.917011][ T10] gspca_stk1135: Sensor write failed [ 297.930786][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 297.939914][ T10] gspca_stk1135: Sensor read failed [ 297.945622][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 297.952164][ T10] gspca_stk1135: Sensor read failed [ 297.957711][ T10] gspca_stk1135: Detected sensor type unknown (0x0) [ 297.964746][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 297.971286][ T10] gspca_stk1135: Sensor read failed [ 297.979605][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 297.986348][ T10] gspca_stk1135: Sensor read failed [ 297.991922][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 297.998576][ T10] gspca_stk1135: Sensor write failed [ 298.004154][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 298.011451][ T10] gspca_stk1135: Sensor write failed [ 298.017304][ T10] stk1135 2-1:0.0: probe with driver stk1135 failed with error -71 [ 298.212410][ T5978] loop0: detected capacity change from 0 to 4096 [ 298.279372][ T29] audit: type=1804 audit(1737628884.419:2): pid=5982 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.11" name="/newroot/3/file0" dev="tmpfs" ino=33 res=1 errno=0 [ 298.507112][ T5978] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 298.634909][ T10] usb 2-1: USB disconnect, device number 2 [ 298.893154][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.519135][ T4097] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.698092][ T4097] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.888648][ T4097] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.191695][ T4097] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.823610][ T4097] bridge_slave_1: left allmulticast mode [ 300.829879][ T4097] bridge_slave_1: left promiscuous mode [ 300.837022][ T4097] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.907994][ T4097] bridge_slave_0: left allmulticast mode [ 300.914037][ T4097] bridge_slave_0: left promiscuous mode [ 300.921108][ T4097] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.781302][ T4097] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 301.831370][ T4097] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 301.863326][ T4097] bond0 (unregistering): Released all slaves [ 302.501189][ T4097] hsr_slave_0: left promiscuous mode [ 302.519585][ T4097] hsr_slave_1: left promiscuous mode [ 302.527916][ T4097] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 302.540467][ T4097] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 302.577825][ T4097] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 302.585716][ T4097] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 302.640087][ T4097] veth1_macvtap: left promiscuous mode [ 302.646001][ T4097] veth0_macvtap: left promiscuous mode [ 302.651962][ T4097] veth1_vlan: left promiscuous mode [ 302.657876][ T4097] veth0_vlan: left promiscuous mode [ 303.321076][ T6015] loop3: detected capacity change from 0 to 256 [ 303.831320][ T4097] team0 (unregistering): Port device team_slave_1 removed [ 303.958311][ T4097] team0 (unregistering): Port device team_slave_0 removed [ 304.251231][ T5773] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 304.261015][ T5773] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 304.277525][ T5773] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 304.291644][ T5773] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 304.305479][ T5773] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 304.387900][ T5773] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 305.955358][ T6018] chnl_net:caif_netlink_parms(): no params data found [ 306.569111][ T5773] Bluetooth: hci2: command tx timeout [ 307.319541][ T6039] sctp: failed to load transform for md5: -2 [ 308.038843][ T6018] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.046863][ T6018] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.054983][ T6018] bridge_slave_0: entered allmulticast mode [ 308.072102][ T6018] bridge_slave_0: entered promiscuous mode [ 308.119559][ T6057] loop1: detected capacity change from 0 to 8 [ 308.207633][ T6057] SQUASHFS error: zstd decompression error: 10 [ 308.213405][ T6018] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.214067][ T6057] SQUASHFS error: zstd decompression failed, data probably corrupt [ 308.221896][ T6018] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.229647][ T6057] SQUASHFS error: Failed to read block 0x4ea: -5 [ 308.237434][ T6018] bridge_slave_1: entered allmulticast mode [ 308.243461][ T6057] SQUASHFS error: Unable to read metadata cache entry [4e8] [ 308.259494][ T6018] bridge_slave_1: entered promiscuous mode [ 308.262906][ T6057] SQUASHFS error: Unable to read inode 0x0 [ 308.334637][ T6061] loop2: detected capacity change from 0 to 64 [ 308.645641][ T5773] Bluetooth: hci2: command tx timeout [ 308.756143][ T6018] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 308.906194][ T6018] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 309.342190][ T6018] team0: Port device team_slave_0 added [ 309.463698][ T6018] team0: Port device team_slave_1 added [ 309.868093][ T6018] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 309.875640][ T6018] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 309.902182][ T6018] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 309.983524][ T6018] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 309.991357][ T6018] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 310.022384][ T6018] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 310.423498][ T6018] hsr_slave_0: entered promiscuous mode [ 310.434104][ T6018] hsr_slave_1: entered promiscuous mode [ 310.443383][ T6018] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 310.451370][ T6018] Cannot create hsr debugfs directory [ 310.735771][ T5773] Bluetooth: hci2: command tx timeout [ 311.930924][ T6018] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 312.059715][ T6018] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 312.161796][ T6018] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 312.202309][ T6099] loop3: detected capacity change from 0 to 64 [ 312.284537][ T6018] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 312.804791][ T5773] Bluetooth: hci2: command tx timeout [ 314.297250][ T6018] 8021q: adding VLAN 0 to HW filter on device bond0 [ 314.707365][ T6018] 8021q: adding VLAN 0 to HW filter on device team0 [ 314.910390][ T3869] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.918282][ T3869] bridge0: port 1(bridge_slave_0) entered forwarding state [ 315.090898][ T3869] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.098769][ T3869] bridge0: port 2(bridge_slave_1) entered forwarding state [ 316.911303][ T52] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 316.949630][ T52] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 316.988403][ T52] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 317.046624][ T52] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 317.060933][ T52] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 317.087435][ T52] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 318.662501][ T6018] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 319.206214][ T52] Bluetooth: hci5: command tx timeout [ 319.716719][ T6159] netlink: 24 bytes leftover after parsing attributes in process `syz.1.53'. [ 319.739871][ T6131] chnl_net:caif_netlink_parms(): no params data found [ 319.926038][ T6159] netlink: 4 bytes leftover after parsing attributes in process `syz.1.53'. [ 319.996184][ T6159] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.184142][ T6159] bridge_slave_1 (unregistering): left allmulticast mode [ 320.191926][ T6159] bridge_slave_1 (unregistering): left promiscuous mode [ 320.200913][ T6159] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.805043][ T3050] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.951763][ T3050] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.190049][ T3050] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.294457][ T52] Bluetooth: hci5: command tx timeout [ 321.379309][ T3050] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.037953][ T3050] bridge_slave_1: left allmulticast mode [ 322.044092][ T3050] bridge_slave_1: left promiscuous mode [ 322.051357][ T3050] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.149216][ T6178] process 'syz.2.58' launched './file1' with NULL argv: empty string added [ 322.235458][ T3050] bridge_slave_0: left allmulticast mode [ 322.241393][ T3050] bridge_slave_0: left promiscuous mode [ 322.248743][ T3050] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.314045][ T6193] loop3: detected capacity change from 0 to 256 [ 323.392162][ T52] Bluetooth: hci5: command tx timeout [ 323.467047][ T3050] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 323.560259][ T6195] loop2: detected capacity change from 0 to 256 [ 323.589866][ T3050] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 323.617581][ T6195] exfat: Deprecated parameter 'utf8' [ 323.623499][ T6195] exfat: Deprecated parameter 'namecase' [ 323.635196][ T6195] exfat: Deprecated parameter 'utf8' [ 323.660610][ T3050] bond0 (unregistering): Released all slaves [ 323.755925][ T6131] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.763883][ T6131] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.773456][ T6131] bridge_slave_0: entered allmulticast mode [ 323.783184][ T6131] bridge_slave_0: entered promiscuous mode [ 323.970578][ T6131] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.978684][ T6131] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.986983][ T6131] bridge_slave_1: entered allmulticast mode [ 323.996780][ T6131] bridge_slave_1: entered promiscuous mode [ 324.012623][ T6195] exFAT-fs (loop2): failed to load upcase table (idx : 0x00012153, chksum : 0xc348802e, utbl_chksum : 0xe619d30d) [ 324.234942][ T29] audit: type=1804 audit(1737628910.359:3): pid=6195 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.60" name="/newroot/18/file1/bus" dev="loop2" ino=1048600 res=1 errno=0 [ 324.510321][ T6131] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 324.542626][ T6018] veth0_vlan: entered promiscuous mode [ 324.787383][ T6131] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 324.830888][ T6018] veth1_vlan: entered promiscuous mode [ 324.934112][ T6199] syz.1.62[6199] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 324.963600][ T6199] syz.1.62[6199] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 325.026453][ T6199] syz.1.62[6199] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 325.299061][ T6131] team0: Port device team_slave_0 added [ 325.358337][ T6211] netlink: 24 bytes leftover after parsing attributes in process `syz.2.64'. [ 325.437108][ T6131] team0: Port device team_slave_1 added [ 325.447936][ T52] Bluetooth: hci5: command tx timeout [ 325.542782][ T3050] hsr_slave_0: left promiscuous mode [ 325.595639][ T3050] hsr_slave_1: left promiscuous mode [ 325.603802][ T3050] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 325.611971][ T3050] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 325.727845][ T3050] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 325.736224][ T3050] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 325.865422][ T3050] veth1_macvtap: left promiscuous mode [ 325.871241][ T3050] veth0_macvtap: left promiscuous mode [ 325.880301][ T3050] veth1_vlan: left promiscuous mode [ 325.886060][ T3050] veth0_vlan: left promiscuous mode [ 326.913321][ T29] audit: type=1326 audit(1737628913.039:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6218 comm="syz.3.67" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff4579 code=0x7ffc0000 [ 327.034622][ T29] audit: type=1326 audit(1737628913.129:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6218 comm="syz.3.67" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7ff4579 code=0x7ffc0000 [ 327.057353][ T29] audit: type=1326 audit(1737628913.129:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6218 comm="syz.3.67" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff4579 code=0x7ffc0000 [ 327.079561][ T29] audit: type=1326 audit(1737628913.139:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6218 comm="syz.3.67" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7ff4579 code=0x7ffc0000 [ 327.102348][ T29] audit: type=1326 audit(1737628913.139:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6218 comm="syz.3.67" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff4579 code=0x7ffc0000 [ 327.128184][ T29] audit: type=1326 audit(1737628913.159:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6218 comm="syz.3.67" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7ff4579 code=0x7ffc0000 [ 327.157648][ T29] audit: type=1326 audit(1737628913.159:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6218 comm="syz.3.67" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff4579 code=0x7ffc0000 [ 327.180193][ T29] audit: type=1326 audit(1737628913.219:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6218 comm="syz.3.67" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff4579 code=0x7ffc0000 [ 327.202479][ T29] audit: type=1326 audit(1737628913.229:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6218 comm="syz.3.67" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7ff4579 code=0x7ffc0000 [ 327.603426][ T3050] team0 (unregistering): Port device team_slave_1 removed [ 327.728344][ T3050] team0 (unregistering): Port device team_slave_0 removed [ 328.172651][ T6131] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 328.180262][ T6131] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 328.206977][ T6131] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 328.446073][ T6131] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 328.453303][ T6131] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 328.480607][ T6131] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 328.512265][ T6018] veth0_macvtap: entered promiscuous mode [ 328.596972][ T6018] veth1_macvtap: entered promiscuous mode [ 328.833380][ T6018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 328.844601][ T6018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.858539][ T6018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 328.872267][ T6018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.883209][ T6018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 328.894341][ T6018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.910136][ T6018] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 329.215451][ T6131] hsr_slave_0: entered promiscuous mode [ 329.226309][ T6131] hsr_slave_1: entered promiscuous mode [ 329.235552][ T6131] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 329.243512][ T6131] Cannot create hsr debugfs directory [ 329.291073][ T6018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 329.302430][ T6018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.312724][ T6018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 329.323572][ T6018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.333761][ T6018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 329.344772][ T6018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.363473][ T6018] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 329.751993][ T6018] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.761610][ T6018] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.773415][ T6018] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.783443][ T6018] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.389157][ T6131] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 331.506917][ T6131] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 331.571367][ T6251] netlink: 4 bytes leftover after parsing attributes in process `syz.1.73'. [ 331.651451][ T6131] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 331.769997][ T6131] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 333.276041][ T6131] 8021q: adding VLAN 0 to HW filter on device bond0 [ 333.476623][ T6131] 8021q: adding VLAN 0 to HW filter on device team0 [ 333.652270][ T4281] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.660168][ T4281] bridge0: port 1(bridge_slave_0) entered forwarding state [ 333.768439][ T4281] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.776335][ T4281] bridge0: port 2(bridge_slave_1) entered forwarding state [ 336.650865][ T6131] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 339.318564][ T3596] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 339.327466][ T3596] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 339.743389][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 339.751740][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 340.438590][ T6131] veth0_vlan: entered promiscuous mode [ 340.619209][ T6131] veth1_vlan: entered promiscuous mode [ 341.123276][ T6131] veth0_macvtap: entered promiscuous mode [ 341.283757][ T6131] veth1_macvtap: entered promiscuous mode [ 341.572888][ T6131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 341.586597][ T6131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 341.597521][ T6131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 341.608450][ T6131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 341.618759][ T6131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 341.629612][ T6131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 341.639954][ T6131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 341.654594][ T6131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 341.671793][ T6131] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 341.936824][ T6131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 341.947863][ T6131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 341.961944][ T6131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 341.974055][ T6131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 341.984424][ T6131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 341.995294][ T6131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.007189][ T6131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 342.018392][ T6131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.035278][ T6131] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 342.111897][ T6348] loop1: detected capacity change from 0 to 1024 [ 342.443626][ T6131] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.453658][ T6131] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.462911][ T6131] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.475946][ T6131] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.603553][ T6348] loop1: detected capacity change from 0 to 512 [ 343.155490][ T6357] Process accounting resumed [ 344.127100][ T6348] EXT4-fs (loop1): Test dummy encryption mode enabled [ 344.198186][ T6348] EXT4-fs (loop1): can't mount with journal_checksum, fs mounted w/o journal [ 344.397700][ T25] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 344.645675][ T25] usb 6-1: Using ep0 maxpacket: 32 [ 344.681357][ T25] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 344.692848][ T25] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 344.896803][ T25] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 344.906406][ T25] usb 6-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 344.915403][ T25] usb 6-1: Product: syz [ 344.919816][ T25] usb 6-1: Manufacturer: syz [ 345.025130][ T44] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 345.139416][ T25] hub 6-1:4.0: USB hub found [ 345.159000][ T6376] evm: overlay not supported [ 345.210940][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 345.211042][ T29] audit: type=1804 audit(1737628931.349:17): pid=6376 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.97" name="/newroot/36/bus/bus" dev="overlay" ino=216 res=1 errno=0 [ 345.225059][ T44] usb 2-1: Using ep0 maxpacket: 32 [ 345.415331][ T25] hub 6-1:4.0: 2 ports detected [ 345.590681][ T44] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 61, changing to 9 [ 345.602379][ T44] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 25964, setting to 1024 [ 345.614274][ T44] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 345.623624][ T44] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.868564][ T44] usb 2-1: config 0 descriptor?? [ 346.636143][ T44] usb 2-1: can't set config #0, error -71 [ 346.696842][ T44] usb 2-1: USB disconnect, device number 3 [ 346.715904][ T5955] udevd[5955]: setting mode of /dev/bus/usb/002/003 to 020664 failed: No such file or directory [ 346.743519][ T25] hub 6-1:4.0: activate --> -90 [ 346.818674][ T5955] udevd[5955]: setting owner of /dev/bus/usb/002/003 to uid=0, gid=0 failed: No such file or directory [ 347.167602][ T25] usb 6-1-port2: cannot warm reset (err = -71) [ 347.184092][ T44] usb 6-1: USB disconnect, device number 2 [ 347.224839][ T25] usb 6-1-port2: cannot warm reset (err = -71) [ 347.231292][ T25] usb 6-1-port2: Cannot enable. Maybe the USB cable is bad? [ 348.571054][ T6402] netlink: 4 bytes leftover after parsing attributes in process `syz.3.101'. [ 348.596170][ T6402] netlink: 12 bytes leftover after parsing attributes in process `syz.3.101'. [ 350.291452][ T6424] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 351.353698][ T6431] vlan2: entered promiscuous mode [ 352.031949][ T5832] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 352.082630][ T60] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.252945][ T5832] usb 6-1: Using ep0 maxpacket: 32 [ 352.324429][ T60] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.390929][ T5832] usb 6-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 352.405378][ T5832] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.413670][ T5832] usb 6-1: Product: syz [ 352.421922][ T5832] usb 6-1: Manufacturer: syz [ 352.427028][ T5832] usb 6-1: SerialNumber: syz [ 352.457452][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 352.464354][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 352.525941][ T5832] usb 6-1: config 0 descriptor?? [ 352.560156][ T5832] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 352.581810][ T60] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.852084][ T60] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.464500][ T4281] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 353.472799][ T4281] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 353.907916][ T60] bridge_slave_1: left allmulticast mode [ 353.913860][ T60] bridge_slave_1: left promiscuous mode [ 353.921147][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.036485][ T60] bridge_slave_0: left allmulticast mode [ 354.050495][ T60] bridge_slave_0: left promiscuous mode [ 354.057908][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.437101][ T5832] gspca_ov534_9: reg_r err -71 [ 354.586077][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 354.595121][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 354.824517][ T5832] gspca_ov534_9: Unknown sensor 0000 [ 354.824907][ T5832] ov534_9 6-1:0.0: probe with driver ov534_9 failed with error -22 [ 354.996408][ T5832] usb 6-1: USB disconnect, device number 3 [ 355.625811][ T60] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 355.697212][ T60] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 355.730293][ T60] bond0 (unregistering): Released all slaves [ 356.618731][ T60] hsr_slave_0: left promiscuous mode [ 356.646942][ T60] hsr_slave_1: left promiscuous mode [ 356.655442][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 356.663227][ T60] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 356.755213][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 356.763096][ T60] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 356.891283][ T60] veth1_macvtap: left promiscuous mode [ 356.897213][ T60] veth0_macvtap: left promiscuous mode [ 356.903171][ T60] veth1_vlan: left promiscuous mode [ 356.914377][ T60] veth0_vlan: left promiscuous mode [ 356.997757][ T25] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 357.228722][ T25] usb 7-1: Using ep0 maxpacket: 16 [ 357.296869][ T25] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 357.411255][ T25] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 357.424100][ T25] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.434496][ T25] usb 7-1: Product: syz [ 357.439160][ T25] usb 7-1: Manufacturer: syz [ 357.444748][ T25] usb 7-1: SerialNumber: syz [ 357.663794][ T25] usb 7-1: config 0 descriptor?? [ 357.767720][ T25] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 357.778753][ T25] em28xx 7-1:0.0: DVB interface 0 found: bulk [ 358.116461][ T5773] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 358.128275][ T5773] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 358.156295][ T5773] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 358.177998][ T5773] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 358.190284][ T5773] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 358.202134][ T5773] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 358.376211][ T25] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 358.959927][ T60] team0 (unregistering): Port device team_slave_1 removed [ 359.089959][ T60] team0 (unregistering): Port device team_slave_0 removed [ 359.520099][ T25] em28xx 7-1:0.0: write to i2c device at 0xa0 failed with unknown error (status=1) [ 359.530280][ T25] em28xx 7-1:0.0: failed to read eeprom (err=-5) [ 359.537272][ T25] em28xx 7-1:0.0: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5] [ 359.746024][ T25] em28xx 7-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 359.754384][ T25] em28xx 7-1:0.0: dvb set to bulk mode. [ 359.779693][ T5104] em28xx 7-1:0.0: Binding DVB extension [ 359.815121][ T25] usb 7-1: USB disconnect, device number 2 [ 359.822631][ T25] em28xx 7-1:0.0: Disconnecting em28xx [ 360.380124][ T5104] em28xx 7-1:0.0: Registering input extension [ 360.405469][ T5773] Bluetooth: hci0: command tx timeout [ 360.411932][ T25] em28xx 7-1:0.0: Closing input extension [ 360.598749][ T25] em28xx 7-1:0.0: Freeing device [ 361.706768][ T6459] chnl_net:caif_netlink_parms(): no params data found [ 362.488141][ T5773] Bluetooth: hci0: command tx timeout [ 363.425373][ T6498] netlink: 4 bytes leftover after parsing attributes in process `syz.6.121'. [ 364.118230][ T6459] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.126426][ T6459] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.134582][ T6459] bridge_slave_0: entered allmulticast mode [ 364.144127][ T6459] bridge_slave_0: entered promiscuous mode [ 364.208545][ T6459] bridge0: port 2(bridge_slave_1) entered blocking state [ 364.216563][ T6459] bridge0: port 2(bridge_slave_1) entered disabled state [ 364.225140][ T6459] bridge_slave_1: entered allmulticast mode [ 364.233807][ T6459] bridge_slave_1: entered promiscuous mode [ 364.574718][ T5773] Bluetooth: hci0: command tx timeout [ 364.896863][ T6459] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 364.896993][ T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!! [ 365.027928][ T6459] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 365.447878][ T6459] team0: Port device team_slave_0 added [ 365.706636][ T6459] team0: Port device team_slave_1 added [ 366.310322][ T6459] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 366.317744][ T6459] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 366.347632][ T6459] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 366.652013][ T6459] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 366.659392][ T6459] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 366.680156][ T5773] Bluetooth: hci0: command tx timeout [ 366.686613][ T6459] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 367.026718][ T6533] loop5: detected capacity change from 0 to 512 [ 367.212113][ T6533] EXT4-fs error (device loop5): ext4_orphan_get:1389: inode #15: comm syz.5.129: casefold flag without casefold feature [ 367.324736][ T6533] EXT4-fs error (device loop5): ext4_orphan_get:1394: comm syz.5.129: couldn't read orphan inode 15 (err -117) [ 367.371619][ T6459] hsr_slave_0: entered promiscuous mode [ 367.383071][ T6459] hsr_slave_1: entered promiscuous mode [ 367.392529][ T6459] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 367.400556][ T6459] Cannot create hsr debugfs directory [ 367.476708][ T6533] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 368.213041][ T6018] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 368.938318][ T6548] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 369.506142][ T6459] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 369.636728][ T6459] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 369.748577][ T6459] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 369.876355][ T6459] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 370.130696][ T6555] loop5: detected capacity change from 0 to 512 [ 370.285075][ T6555] EXT4-fs error (device loop5): ext4_orphan_get:1389: inode #15: comm syz.5.136: casefold flag without casefold feature [ 370.394734][ T6555] EXT4-fs error (device loop5): ext4_orphan_get:1394: comm syz.5.136: couldn't read orphan inode 15 (err -117) [ 370.486933][ T6555] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 371.388700][ T6018] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 371.593536][ T6459] 8021q: adding VLAN 0 to HW filter on device bond0 [ 371.823254][ T6459] 8021q: adding VLAN 0 to HW filter on device team0 [ 372.021096][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.028958][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 372.135657][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 372.143503][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 374.123059][ T6589] loop2: detected capacity change from 0 to 256 [ 374.311713][ T6589] exfat: Deprecated parameter 'utf8' [ 374.322988][ T6589] exfat: Deprecated parameter 'namecase' [ 374.331712][ T6589] exfat: Deprecated parameter 'utf8' [ 375.145143][ T6589] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 375.161695][ T6596] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 375.501350][ T6459] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 376.210915][ T25] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 376.246745][ T5832] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 376.283341][ T5769] exFAT-fs (loop2): start_clu is invalid cluster(0x0) [ 376.411227][ T25] usb 6-1: Using ep0 maxpacket: 8 [ 376.456685][ T5832] usb 7-1: Using ep0 maxpacket: 8 [ 376.521357][ T25] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee [ 376.531138][ T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.540063][ T25] usb 6-1: Product: syz [ 376.544604][ T25] usb 6-1: Manufacturer: syz [ 376.549518][ T25] usb 6-1: SerialNumber: syz [ 376.645966][ T5832] usb 7-1: New USB device found, idVendor=046d, idProduct=08b1, bcdDevice=6d.2a [ 376.655643][ T5832] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.730488][ T5832] usb 7-1: config 0 descriptor?? [ 376.738030][ T25] usb 6-1: config 0 descriptor?? [ 376.825056][ T5832] pwc: Logitech QuickCam Notebook Pro USB webcam detected. [ 376.832536][ T5832] pwc: Warning: more than 1 configuration available. [ 377.065942][ T25] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 378.018879][ T25] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 378.116549][ T25] usb 6-1: USB disconnect, device number 4 [ 378.156418][ T5832] pwc: Failed to set LED on/off time (-71) [ 378.216905][ T5832] pwc: send_video_command error -71 [ 378.222576][ T5832] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 378.231119][ T5832] Philips webcam 7-1:0.0: probe with driver Philips webcam failed with error -71 [ 378.382298][ T5832] usb 7-1: USB disconnect, device number 3 [ 379.495398][ T6459] veth0_vlan: entered promiscuous mode [ 379.673924][ T6459] veth1_vlan: entered promiscuous mode [ 380.068421][ T6459] veth0_macvtap: entered promiscuous mode [ 380.096214][ T6459] veth1_macvtap: entered promiscuous mode [ 380.226078][ T6459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 380.237306][ T6459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.247850][ T6459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 380.264889][ T6459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.277121][ T6459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 380.291943][ T6459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.305115][ T6459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 380.316064][ T6459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.331789][ T6459] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 380.599718][ T6459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 380.610674][ T6459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.621221][ T6459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 380.632078][ T6459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.642330][ T6459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 380.653266][ T6459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.669145][ T6459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 380.681875][ T6459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.697769][ T6459] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 380.755413][ T25] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 380.905161][ T10] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 380.929636][ T6459] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.939044][ T6459] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.948667][ T6459] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.957883][ T6459] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.995205][ T25] usb 7-1: Using ep0 maxpacket: 8 [ 381.067183][ T25] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 381.087501][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 381.155660][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 381.200160][ T25] usb 7-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 381.210866][ T25] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.219462][ T25] usb 7-1: Product: syz [ 381.223876][ T25] usb 7-1: Manufacturer: syz [ 381.228858][ T25] usb 7-1: SerialNumber: syz [ 381.246992][ T10] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 381.256674][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.265205][ T10] usb 2-1: Product: syz [ 381.269630][ T10] usb 2-1: Manufacturer: syz [ 381.274717][ T10] usb 2-1: SerialNumber: syz [ 381.448488][ T25] usb 7-1: config 0 descriptor?? [ 381.493599][ T10] usb 2-1: config 0 descriptor?? [ 381.544928][ T25] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 381.579165][ T10] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 381.595564][ T10] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 381.808840][ T5104] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 382.075222][ T5104] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 382.086880][ T5104] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 382.099898][ T5104] usb 6-1: New USB device found, idVendor=5543, idProduct=0003, bcdDevice= 0.00 [ 382.110524][ T5104] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.254078][ T5104] usb 6-1: config 0 descriptor?? [ 382.447030][ T10] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 382.545134][ T5104] usbhid 6-1:0.0: can't add hid device: -71 [ 382.552372][ T5104] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 382.687454][ T5104] usb 6-1: USB disconnect, device number 5 [ 383.140458][ T10] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 383.150590][ T10] em28xx 2-1:0.0: board has no eeprom [ 383.536627][ T10] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 383.545008][ T10] em28xx 2-1:0.0: dvb set to bulk mode. [ 383.552627][ T5832] em28xx 2-1:0.0: Binding DVB extension [ 383.745253][ T25] gspca_zc3xx: reg_r err -71 [ 383.747756][ T10] usb 2-1: USB disconnect, device number 4 [ 383.757626][ T10] em28xx 2-1:0.0: Disconnecting em28xx [ 384.118622][ T5832] em28xx 2-1:0.0: Registering input extension [ 384.183438][ T10] em28xx 2-1:0.0: Closing input extension [ 384.239417][ T10] em28xx 2-1:0.0: Freeing device [ 384.365204][ T25] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 384.371963][ T25] gspca_zc3xx 7-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 384.578359][ T25] usb 7-1: USB disconnect, device number 4 [ 385.613908][ T6658] loop5: detected capacity change from 0 to 256 [ 385.697211][ T6658] exfat: Deprecated parameter 'utf8' [ 385.703018][ T6658] exfat: Deprecated parameter 'namecase' [ 385.709532][ T6658] exfat: Deprecated parameter 'utf8' [ 385.946406][ T6658] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 386.731784][ T6018] exFAT-fs (loop5): start_clu is invalid cluster(0x0) [ 386.975653][ T6666] block nbd1: NBD_DISCONNECT [ 386.981110][ T6666] block nbd1: Disconnected due to user request. [ 386.989121][ T6666] block nbd1: shutting down sockets [ 388.994673][ T25] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 389.254582][ T25] usb 2-1: Using ep0 maxpacket: 8 [ 389.418477][ T25] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee [ 389.428216][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 389.436755][ T25] usb 2-1: Product: syz [ 389.441169][ T25] usb 2-1: Manufacturer: syz [ 389.446542][ T25] usb 2-1: SerialNumber: syz [ 389.557067][ T6699] syz.2.163(6699): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 389.582919][ T25] usb 2-1: config 0 descriptor?? [ 389.865006][ T25] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 389.984731][ T6699] xt_cluster: you have exceeded the maximum number of cluster nodes (4294967293 > 32) [ 390.329767][ T5773] Bluetooth: hci1: command 0x0406 tx timeout [ 390.346865][ T5777] Bluetooth: hci4: command 0x0406 tx timeout [ 390.786343][ T25] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 390.868624][ T25] usb 2-1: USB disconnect, device number 5 [ 391.252492][ T3050] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 391.260816][ T3050] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 391.566369][ T6712] bridge: RTM_NEWNEIGH with invalid ether address [ 391.669982][ T3679] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 391.680114][ T3679] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 393.587216][ T6732] binder: 6728:6732 ioctl c0306201 20000680 returned -14 [ 394.292607][ T6739] netlink: 8 bytes leftover after parsing attributes in process `syz.2.170'. [ 395.874582][ T25] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 396.054816][ T25] usb 8-1: Using ep0 maxpacket: 8 [ 396.141820][ T25] usb 8-1: New USB device found, idVendor=0bc3, idProduct=0001, bcdDevice=11.85 [ 396.152369][ T25] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.161575][ T25] usb 8-1: Product: syz [ 396.166127][ T25] usb 8-1: Manufacturer: syz [ 396.170967][ T25] usb 8-1: SerialNumber: syz [ 396.338118][ T25] usb 8-1: config 0 descriptor?? [ 396.399809][ T25] ipw 8-1:0.0: IPWireless converter converter detected [ 396.584940][ T25] usb 8-1: USB disconnect, device number 2 [ 396.593756][ T25] ipw 8-1:0.0: device disconnected [ 398.241492][ T6780] team0: Device gtp0 is of different type [ 398.436714][ T6783] Zero length message leads to an empty skb [ 399.487125][ T6790] loop7: detected capacity change from 0 to 1024 [ 399.695819][ T6790] hfsplus: failed to load catalog file [ 400.142468][ T6795] loop7: detected capacity change from 0 to 512 [ 400.267286][ T6795] EXT4-fs (loop7): blocks per group (95) and clusters per group (32768) inconsistent [ 403.856642][ T6827] netlink: 4 bytes leftover after parsing attributes in process `syz.2.193'. [ 406.756478][ T6852] syz.7.200[6852] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 406.757031][ T6852] syz.7.200[6852] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 406.833433][ T6857] syzkaller0: entered promiscuous mode [ 406.850944][ T6857] syzkaller0: entered allmulticast mode [ 406.919631][ T6852] syz.7.200[6852] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 407.837449][ T6863] loop1: detected capacity change from 0 to 512 [ 408.155886][ T6863] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 408.256626][ T6863] EXT4-fs (loop1): orphan cleanup on readonly fs [ 408.344036][ T6863] Quota error (device loop1): find_block_dqentry: Quota for id 0 referenced but not present [ 408.355428][ T6863] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 408.365314][ T6863] EXT4-fs error (device loop1): ext4_acquire_dquot:6938: comm syz.1.202: Failed to acquire dquot type 1 [ 408.509486][ T6863] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.202: bg 0: block 40: padding at end of block bitmap is not set [ 408.654864][ T6863] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 408.725239][ T6863] EXT4-fs (loop1): 1 truncate cleaned up [ 408.748321][ T6863] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 409.056010][ T6863] kvm: pic: non byte read [ 409.061735][ T6863] kvm: pic: non byte read [ 409.821943][ T5781] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 411.928589][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 413.868912][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 413.875962][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 414.369028][ T6918] loop7: detected capacity change from 0 to 164 [ 414.619400][ T6920] netlink: 4 bytes leftover after parsing attributes in process `syz.1.212'. [ 414.867779][ T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!! [ 417.205745][ T6942] netlink: 8 bytes leftover after parsing attributes in process `syz.7.215'. [ 417.215528][ T6942] netlink: 8 bytes leftover after parsing attributes in process `syz.7.215'. [ 417.230154][ T6942] netlink: 8 bytes leftover after parsing attributes in process `syz.7.215'. [ 417.407067][ T6946] veth1_macvtap: left promiscuous mode [ 417.412863][ T6946] macsec0: entered promiscuous mode [ 418.533121][ T6959] netlink: 36 bytes leftover after parsing attributes in process `syz.2.221'. [ 418.542441][ T6959] netlink: 16 bytes leftover after parsing attributes in process `syz.2.221'. [ 418.557329][ T6959] netlink: 36 bytes leftover after parsing attributes in process `syz.2.221'. [ 418.568246][ T6959] netlink: 36 bytes leftover after parsing attributes in process `syz.2.221'. [ 420.207187][ T6972] fuse: Bad value for 'fd' [ 420.785414][ T6976] loop2: detected capacity change from 0 to 764 [ 421.005923][ T6976] Symlink component flag not implemented [ 421.105342][ T6976] Symlink component flag not implemented (101) [ 421.559923][ T5832] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 421.804721][ T5832] usb 7-1: Using ep0 maxpacket: 8 [ 421.880207][ T5832] usb 7-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 421.889911][ T5832] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.988968][ T5832] usb 7-1: config 0 descriptor?? [ 423.676525][ T6999] warning: `syz.1.231' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 424.995796][ T5832] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 425.011304][ T5832] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 425.024751][ T5832] asix 7-1:0.0: probe with driver asix failed with error -71 [ 425.241668][ T5832] usb 7-1: USB disconnect, device number 5 [ 426.670881][ T7017] loop7: detected capacity change from 0 to 2048 [ 427.112121][ T7017] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 427.531393][ T7017] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 427.584625][ T7017] EXT4-fs (loop7): Remounting filesystem read-only [ 428.685854][ T7017] syz.7.236 (7017) used greatest stack depth: 4544 bytes left [ 428.742271][ T6459] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 429.429343][ T7040] loop1: detected capacity change from 0 to 1024 [ 429.457824][ T7040] EXT4-fs: quotafile must be on filesystem root [ 429.635719][ T7050] syzkaller0: entered promiscuous mode [ 429.635836][ T7050] syzkaller0: entered allmulticast mode [ 431.286121][ T5777] Bluetooth: hci2: command 0x0406 tx timeout [ 432.085357][ T7068] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 433.266555][ T7075] netlink: 8 bytes leftover after parsing attributes in process `syz.6.248'. [ 433.276006][ T7075] netlink: 8 bytes leftover after parsing attributes in process `syz.6.248'. [ 433.286109][ T7075] netlink: 8 bytes leftover after parsing attributes in process `syz.6.248'. [ 434.297161][ T7082] netlink: 4 bytes leftover after parsing attributes in process `syz.5.252'. [ 434.578193][ T7084] loop2: detected capacity change from 0 to 1024 [ 434.917831][ T7084] hfsplus: failed to load catalog file [ 435.233896][ T7084] 9pnet_fd: p9_fd_create_tcp (7084): problem connecting socket to 127.0.0.1 [ 435.621865][ T7084] loop2: detected capacity change from 0 to 512 [ 435.702335][ T7084] EXT4-fs (loop2): blocks per group (95) and clusters per group (32768) inconsistent [ 437.356890][ T7109] team0: Device gtp0 is of different type [ 438.796394][ T7125] syzkaller0: entered promiscuous mode [ 438.802202][ T7125] syzkaller0: entered allmulticast mode [ 438.969739][ T7115] loop6: detected capacity change from 0 to 1024 [ 438.979804][ T7115] EXT4-fs: quotafile must be on filesystem root [ 439.017755][ T7128] netlink: 8 bytes leftover after parsing attributes in process `syz.5.263'. [ 439.769303][ T7138] loop2: detected capacity change from 0 to 512 [ 439.950455][ T7138] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 440.043880][ T7138] EXT4-fs (loop2): orphan cleanup on readonly fs [ 440.110009][ T7138] Quota error (device loop2): find_block_dqentry: Quota for id 0 referenced but not present [ 440.121382][ T7138] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 440.131361][ T7138] EXT4-fs error (device loop2): ext4_acquire_dquot:6938: comm syz.2.266: Failed to acquire dquot type 1 [ 440.320448][ T7138] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.266: bg 0: block 40: padding at end of block bitmap is not set [ 440.367799][ T7138] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 440.456883][ T7138] EXT4-fs (loop2): 1 truncate cleaned up [ 440.470522][ T7138] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 440.689944][ T7138] kvm: pic: non byte read [ 440.700244][ T7138] kvm: pic: non byte read [ 440.725700][ T7138] kvm: pic: non byte read [ 441.351742][ T5769] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 441.356911][ T7147] netlink: 4 bytes leftover after parsing attributes in process `syz.1.268'. [ 441.525946][ T5777] Bluetooth: hci5: command 0x0406 tx timeout [ 441.734897][ T5832] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 441.996069][ T5832] usb 6-1: Using ep0 maxpacket: 8 [ 442.175328][ T5832] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 442.362269][ T5832] usb 6-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 442.372063][ T5832] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.380623][ T5832] usb 6-1: Product: syz [ 442.385198][ T5832] usb 6-1: Manufacturer: syz [ 442.390071][ T5832] usb 6-1: SerialNumber: syz [ 442.587980][ T5832] usb 6-1: config 0 descriptor?? [ 442.676664][ T5832] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 443.463686][ T7165] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 444.932115][ T7176] team0: Device gtp0 is of different type [ 445.039139][ T5832] gspca_zc3xx: reg_r err -71 [ 445.654412][ T5832] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 445.661193][ T5832] gspca_zc3xx 6-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 445.750987][ T5832] usb 6-1: USB disconnect, device number 6 [ 446.680303][ T7192] netlink: 24 bytes leftover after parsing attributes in process `syz.2.276'. [ 446.978021][ T7192] netlink: 4 bytes leftover after parsing attributes in process `syz.2.276'. [ 447.798770][ T7198] netlink: 8 bytes leftover after parsing attributes in process `syz.7.278'. [ 449.256427][ T7212] netlink: 8 bytes leftover after parsing attributes in process `syz.1.294'. [ 449.738636][ T7225] netlink: 4 bytes leftover after parsing attributes in process `syz.7.282'. [ 450.978905][ T7237] loop1: detected capacity change from 0 to 128 [ 451.343285][ T7242] syz.1.285: attempt to access beyond end of device [ 451.343285][ T7242] loop1: rw=2049, sector=145, nr_sectors = 168 limit=128 [ 451.688831][ T7242] syz.1.285: attempt to access beyond end of device [ 451.688831][ T7242] loop1: rw=524288, sector=145, nr_sectors = 168 limit=128 [ 451.705449][ T7242] syz.1.285: attempt to access beyond end of device [ 451.705449][ T7242] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 451.815034][ T7242] syz.1.285: attempt to access beyond end of device [ 451.815034][ T7242] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 451.925480][ T7242] syz.1.285: attempt to access beyond end of device [ 451.925480][ T7242] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 452.085524][ T7242] syz.1.285: attempt to access beyond end of device [ 452.085524][ T7242] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 452.178412][ T7242] syz.1.285: attempt to access beyond end of device [ 452.178412][ T7242] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 452.255194][ T7242] syz.1.285: attempt to access beyond end of device [ 452.255194][ T7242] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 452.321663][ T7242] syz.1.285: attempt to access beyond end of device [ 452.321663][ T7242] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 453.350697][ T7261] netlink: 'syz.5.301': attribute type 10 has an invalid length. [ 453.382729][ T5104] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 453.491396][ T7261] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 453.517477][ T7261] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 453.635512][ T5104] usb 3-1: Using ep0 maxpacket: 8 [ 453.685615][ T5104] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 453.753824][ T5104] usb 3-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 453.764097][ T5104] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.772565][ T5104] usb 3-1: Product: syz [ 453.781376][ T5104] usb 3-1: Manufacturer: syz [ 453.787814][ T5104] usb 3-1: SerialNumber: syz [ 453.870132][ T5104] usb 3-1: config 0 descriptor?? [ 453.934907][ T5104] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 456.065154][ T5104] gspca_zc3xx: reg_r err -71 [ 456.664440][ T5104] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 456.671249][ T5104] gspca_zc3xx 3-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 456.761999][ T5104] usb 3-1: USB disconnect, device number 2 [ 457.897510][ T7295] mmap: syz.1.303 (7295) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 458.016784][ T5832] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 458.264750][ T5832] usb 6-1: Using ep0 maxpacket: 8 [ 458.358358][ T5832] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 458.368367][ T5832] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.376872][ T5832] usb 6-1: Product: syz [ 458.381292][ T5832] usb 6-1: Manufacturer: syz [ 458.389484][ T5832] usb 6-1: SerialNumber: syz [ 458.430561][ T5832] usb 6-1: config 0 descriptor?? [ 458.819758][ T5832] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 460.476553][ T5832] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 460.559420][ T5832] usb 6-1: USB disconnect, device number 7 [ 461.508759][ T7321] netlink: 'syz.2.308': attribute type 10 has an invalid length. [ 461.605004][ T7321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 461.629406][ T7321] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 463.014691][ T7337] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 465.065020][ T7356] netlink: 72 bytes leftover after parsing attributes in process `syz.2.319'. [ 465.077614][ T7354] netlink: 24 bytes leftover after parsing attributes in process `syz.6.317'. [ 465.607339][ T5777] Bluetooth: hci4: SCO packet for unknown connection handle 3529 [ 466.713592][ T7371] loop2: detected capacity change from 0 to 1024 [ 466.930687][ T5832] hid-generic 0000:0003:0000.0001: unknown main item tag 0x0 [ 466.938845][ T5832] hid-generic 0000:0003:0000.0001: unknown main item tag 0x0 [ 467.108153][ T7371] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 467.121324][ T7371] ext4 filesystem being mounted at /78/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 467.229033][ T5832] hid-generic 0000:0003:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz1 [ 467.986468][ T7392] netlink: 'syz.6.323': attribute type 10 has an invalid length. [ 468.207286][ T7392] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 468.237983][ T7392] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 468.369110][ T5769] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 468.558255][ T7397] bridge0: entered promiscuous mode [ 468.571812][ T7397] bridge0: port 2(macsec1) entered blocking state [ 468.580389][ T7397] bridge0: port 2(macsec1) entered disabled state [ 468.588141][ T7397] macsec1: entered allmulticast mode [ 468.593687][ T7397] bridge0: entered allmulticast mode [ 468.695698][ T7397] macsec1: left allmulticast mode [ 468.701149][ T7397] bridge0: left allmulticast mode [ 468.826631][ T7397] bridge0: left promiscuous mode [ 469.278333][ T7402] loop7: detected capacity change from 0 to 16384 [ 469.480765][ T7402] I/O error, dev loop7, sector 768 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 0 [ 469.655250][ T7402] I/O error, dev loop7, sector 1024 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 0 [ 469.666121][ T7402] I/O error, dev loop7, sector 768 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 469.678839][ T7402] Buffer I/O error on dev loop7, logical block 96, async page read [ 469.869851][ T7401] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 96 prio class 0 [ 469.880132][ T7401] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 469.889040][ T7401] Buffer I/O error on dev loop7, logical block 1, lost async page write [ 469.897863][ T7401] Buffer I/O error on dev loop7, logical block 2, lost async page write [ 469.906773][ T7401] Buffer I/O error on dev loop7, logical block 3, lost async page write [ 469.915947][ T7401] Buffer I/O error on dev loop7, logical block 4, lost async page write [ 469.924907][ T7401] Buffer I/O error on dev loop7, logical block 5, lost async page write [ 469.933530][ T7401] Buffer I/O error on dev loop7, logical block 6, lost async page write [ 469.942353][ T7401] Buffer I/O error on dev loop7, logical block 7, lost async page write [ 469.951276][ T7401] Buffer I/O error on dev loop7, logical block 8, lost async page write [ 471.456338][ T7426] netlink: 24 bytes leftover after parsing attributes in process `syz.2.334'. [ 474.916569][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 475.773305][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 475.780629][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 477.125167][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 477.135239][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 478.941164][ T7478] netlink: 24 bytes leftover after parsing attributes in process `syz.5.348'. [ 480.636349][ T7497] loop1: detected capacity change from 0 to 1024 [ 482.046105][ T7510] netlink: 8 bytes leftover after parsing attributes in process `syz.7.359'. [ 482.056385][ T7510] netlink: 4 bytes leftover after parsing attributes in process `syz.7.359'. [ 482.065601][ T7510] netlink: 'syz.7.359': attribute type 1 has an invalid length. [ 482.073477][ T7510] netlink: 10 bytes leftover after parsing attributes in process `syz.7.359'. [ 482.260906][ T5773] block nbd0: Receive control failed (result -107) [ 482.491307][ T5777] Bluetooth: hci0: command 0x0406 tx timeout [ 482.654998][ T0] NOHZ tick-stop error: local softirq work is pending, handler #2c2!!! [ 483.746193][ T7531] ipvlan2: entered promiscuous mode [ 483.836646][ T7533] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 483.838369][ T5832] IPVS: starting estimator thread 0... [ 483.934735][ T7535] IPVS: using max 240 ests per chain, 12000 per kthread [ 484.782105][ T7541] syzkaller1: entered promiscuous mode [ 484.789130][ T7541] syzkaller1: entered allmulticast mode [ 484.805645][ T7545] loop6: detected capacity change from 0 to 128 [ 484.829706][ T7541] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40 [ 484.890588][ T7545] zonefs: Bad value for 'errors' [ 485.846196][ T7551] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 486.084544][ T7556] kvm: pic: non byte read [ 486.617866][ T7566] loop5: detected capacity change from 0 to 164 [ 486.817488][ T7566] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 488.429143][ T7568] loop2: detected capacity change from 0 to 8192 [ 490.187603][ T7585] loop6: detected capacity change from 0 to 2048 [ 490.287697][ T5104] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 490.372077][ T5769] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 490.381296][ T5769] FAT-fs (loop2): Filesystem has been set read-only [ 490.458309][ T5769] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 490.474519][ T5104] usb 2-1: Using ep0 maxpacket: 32 [ 490.490072][ T5104] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 490.498694][ T5104] usb 2-1: config 0 has no interface number 0 [ 490.505135][ T5104] usb 2-1: config 0 interface 12 has no altsetting 0 [ 490.523798][ T5104] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 490.533564][ T5104] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.545535][ T5104] usb 2-1: Product: syz [ 490.549969][ T5104] usb 2-1: Manufacturer: syz [ 490.557938][ T5104] usb 2-1: SerialNumber: syz [ 490.605709][ T5104] usb 2-1: config 0 descriptor?? [ 490.662891][ T7585] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 491.086928][ T60] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.391101][ T60] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.604937][ T60] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.957451][ T60] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.660948][ T6131] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 492.777915][ T60] bridge_slave_1: left allmulticast mode [ 492.784055][ T60] bridge_slave_1: left promiscuous mode [ 492.796525][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 492.822584][ T60] bridge_slave_0: left allmulticast mode [ 492.830494][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 493.926282][ T5104] f81534 2-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 493.935017][ T5104] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 493.942583][ T5104] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 493.950943][ T5104] f81534 2-1:0.12: probe with driver f81534 failed with error -71 [ 494.128863][ T5104] usb 2-1: USB disconnect, device number 6 [ 494.315596][ T60] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 494.349211][ T60] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 494.448711][ T60] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 494.527578][ T60] bond0 (unregistering): Released all slaves [ 495.552565][ T60] hsr_slave_0: left promiscuous mode [ 495.579927][ T60] hsr_slave_1: left promiscuous mode [ 495.588009][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 495.596337][ T60] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 495.626640][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 495.634666][ T60] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 495.721388][ T60] veth0_macvtap: left promiscuous mode [ 495.727784][ T60] veth1_vlan: left promiscuous mode [ 495.733413][ T60] veth0_vlan: left promiscuous mode [ 496.632421][ T5777] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 496.642393][ T5777] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 496.653019][ T5777] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 496.667421][ T5777] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 496.679189][ T5777] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 496.693217][ T5777] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 497.607018][ T60] team0 (unregistering): Port device team_slave_1 removed [ 497.683423][ T60] team0 (unregistering): Port device team_slave_0 removed [ 498.814940][ T5777] Bluetooth: hci1: command tx timeout [ 498.870649][ T7644] loop1: detected capacity change from 0 to 64 [ 500.897388][ T5777] Bluetooth: hci1: command tx timeout [ 501.195322][ T60] IPVS: stop unused estimator thread 0... [ 501.314009][ T7652] vlan2: entered promiscuous mode [ 501.319580][ T7652] team0: entered promiscuous mode [ 501.325109][ T7652] team_slave_0: entered promiscuous mode [ 501.332107][ T7652] team_slave_1: entered promiscuous mode [ 501.348013][ T7652] team0: Device vlan2 is already an upper device of the team interface [ 501.359029][ T7652] team0: left promiscuous mode [ 501.364058][ T7652] team_slave_0: left promiscuous mode [ 501.371105][ T7652] team_slave_1: left promiscuous mode [ 502.377769][ T5832] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 502.402329][ T7663] bridge0: port 2(vlan2) entered blocking state [ 502.409512][ T7663] bridge0: port 2(vlan2) entered disabled state [ 502.418894][ T7663] vlan2: entered allmulticast mode [ 502.424474][ T7663] team0: entered allmulticast mode [ 502.429919][ T7663] team_slave_0: entered allmulticast mode [ 502.436385][ T7663] team_slave_1: entered allmulticast mode [ 502.449378][ T7663] vlan2: entered promiscuous mode [ 502.454913][ T7663] team0: entered promiscuous mode [ 502.460194][ T7663] team_slave_0: entered promiscuous mode [ 502.467574][ T7663] team_slave_1: entered promiscuous mode [ 502.479070][ T7663] bridge0: port 2(vlan2) entered blocking state [ 502.486236][ T7663] bridge0: port 2(vlan2) entered forwarding state [ 502.577254][ T5832] usb 7-1: Using ep0 maxpacket: 32 [ 502.635600][ T5832] usb 7-1: config 0 has an invalid interface number: 12 but max is 0 [ 502.644449][ T5832] usb 7-1: config 0 has no interface number 0 [ 502.650834][ T5832] usb 7-1: config 0 interface 12 has no altsetting 0 [ 502.732839][ T5832] usb 7-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 502.742851][ T5832] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.751416][ T5832] usb 7-1: Product: syz [ 502.755972][ T5832] usb 7-1: Manufacturer: syz [ 502.760830][ T5832] usb 7-1: SerialNumber: syz [ 502.893692][ T5832] usb 7-1: config 0 descriptor?? [ 502.973117][ T7667] overlayfs: metacopy with no lower data found - abort lookup (/bus) [ 502.982925][ T5777] Bluetooth: hci1: command tx timeout [ 503.014523][ T7628] chnl_net:caif_netlink_parms(): no params data found [ 504.396626][ T7679] binder: 7678:7679 ioctl c0306201 0 returned -14 [ 505.044636][ T5777] Bluetooth: hci1: command tx timeout [ 505.119773][ T7628] bridge0: port 1(bridge_slave_0) entered blocking state [ 505.129002][ T7628] bridge0: port 1(bridge_slave_0) entered disabled state [ 505.138975][ T7628] bridge_slave_0: entered allmulticast mode [ 505.150919][ T7628] bridge_slave_0: entered promiscuous mode [ 505.279469][ T7628] bridge0: port 2(bridge_slave_1) entered blocking state [ 505.290837][ T7628] bridge0: port 2(bridge_slave_1) entered disabled state [ 505.299091][ T7628] bridge_slave_1: entered allmulticast mode [ 505.308809][ T7628] bridge_slave_1: entered promiscuous mode [ 505.734924][ T7628] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 505.820281][ T7628] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 505.998138][ T5832] f81534 7-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 506.018099][ T5832] f81534 7-1:0.12: f81534_find_config_idx: read failed: -71 [ 506.029824][ T5832] f81534 7-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 506.038867][ T5832] f81534 7-1:0.12: probe with driver f81534 failed with error -71 [ 506.246090][ T5832] usb 7-1: USB disconnect, device number 6 [ 506.418664][ T7628] team0: Port device team_slave_0 added [ 506.485199][ T7628] team0: Port device team_slave_1 added [ 506.965678][ T7699] kvm: pic: single mode not supported [ 506.966157][ T7699] kvm: pic: non byte read [ 507.043553][ T7628] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 507.053148][ T7628] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 507.080493][ T7628] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 507.179547][ T7628] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 507.187278][ T7628] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 507.213930][ T7628] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 507.262138][ T7711] block nbd5: NBD_DISCONNECT [ 507.267660][ T7711] block nbd5: Disconnected due to user request. [ 507.274535][ T7711] block nbd5: shutting down sockets [ 507.609021][ T7628] hsr_slave_0: entered promiscuous mode [ 507.619801][ T7628] hsr_slave_1: entered promiscuous mode [ 507.629325][ T7628] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 507.639234][ T7628] Cannot create hsr debugfs directory [ 508.443055][ T7721] syz.1.411 uses obsolete (PF_INET,SOCK_PACKET) [ 508.681296][ T7723] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 508.691854][ T7723] batadv_slave_0: entered promiscuous mode [ 508.769871][ T6436] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 509.042459][ T6436] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 509.053078][ T6436] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 509.201175][ T6436] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 509.210730][ T6436] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.219193][ T6436] usb 6-1: Product: syz [ 509.223616][ T6436] usb 6-1: Manufacturer: syz [ 509.228616][ T6436] usb 6-1: SerialNumber: syz [ 509.725398][ T6436] usb 6-1: 0:2 : does not exist [ 509.774780][ T6436] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 510.006061][ T6436] usb 6-1: USB disconnect, device number 8 [ 510.251287][ T7628] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 510.426423][ T7628] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 510.498549][ T7628] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 510.614007][ T7628] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 510.632031][ T5997] udevd[5997]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 510.759067][ T7740] macsec1: entered promiscuous mode [ 510.766052][ T7740] macsec1: entered allmulticast mode [ 513.478538][ T7628] 8021q: adding VLAN 0 to HW filter on device bond0 [ 513.919008][ T7628] 8021q: adding VLAN 0 to HW filter on device team0 [ 514.171452][ T3596] bridge0: port 1(bridge_slave_0) entered blocking state [ 514.179445][ T3596] bridge0: port 1(bridge_slave_0) entered forwarding state [ 514.384407][ T3596] bridge0: port 2(bridge_slave_1) entered blocking state [ 514.392287][ T3596] bridge0: port 2(bridge_slave_1) entered forwarding state [ 515.023237][ T7770] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 515.073055][ T7770] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 515.362532][ T7772] loop7: detected capacity change from 0 to 1024 [ 515.486628][ T7772] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 515.526123][ T10] libceph: connect (1)[c::]:6789 error -101 [ 515.532563][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 515.682610][ T7776] ceph: No mds server is up or the cluster is laggy [ 515.704658][ T7772] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 515.781648][ T7772] EXT4-fs (loop7): orphan cleanup on readonly fs [ 515.828796][ T10] libceph: connect (1)[c::]:6789 error -101 [ 515.837641][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 515.866099][ T7772] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5838: Corrupt filesystem [ 515.976589][ T7772] EXT4-fs (loop7): Remounting filesystem read-only [ 516.044067][ T7772] Quota error (device loop7): write_blk: dquota write failed [ 516.052180][ T7772] Quota error (device loop7): write_blk: dquota write failed [ 516.060444][ T7772] Quota error (device loop7): qtree_write_dquot: Error -28 occurred while creating quota [ 516.070961][ T7772] Quota error (device loop7): v2_write_file_info: Can't write info structure [ 516.080598][ T7772] EXT4-fs (loop7): 1 orphan inode deleted [ 516.188916][ T7772] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 516.687676][ T7772] syz.7.420 (7772) used greatest stack depth: 4384 bytes left [ 516.806350][ T6459] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 517.169482][ T5104] IPVS: starting estimator thread 0... [ 517.281187][ T7798] IPVS: using max 192 ests per chain, 9600 per kthread [ 518.015295][ T10] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 518.136292][ T7628] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 518.306330][ T7802] batman_adv: batadv0: Adding interface: vxlan0 [ 518.312875][ T7802] batman_adv: batadv0: The MTU of interface vxlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 518.338576][ C1] vkms_vblank_simulate: vblank timer overrun [ 518.347113][ T7802] batman_adv: batadv0: Not using interface vxlan0 (retrying later): interface not active [ 518.712728][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 518.722899][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 518.733996][ T10] usb 7-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=fc.43 [ 518.743593][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 518.865577][ T10] usb 7-1: config 0 descriptor?? [ 519.113201][ T10] ath6kl: Failed to submit usb control message: -71 [ 519.120476][ T10] ath6kl: unable to send the bmi data to the device: -71 [ 519.128493][ T10] ath6kl: Unable to send get target info: -71 [ 519.186150][ T10] ath6kl: Failed to init ath6kl core: -71 [ 519.196246][ T10] ath6kl_usb 7-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 519.305001][ T10] usb 7-1: USB disconnect, device number 7 [ 519.992370][ T5104] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 520.026210][ T7811] loop5: detected capacity change from 0 to 4096 [ 520.074794][ T7811] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512). [ 520.200627][ T5104] usb 2-1: Using ep0 maxpacket: 16 [ 520.276869][ T5104] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 520.289123][ T5104] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 520.355129][ T5104] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 520.364774][ T5104] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 520.373119][ T5104] usb 2-1: Product: syz [ 520.378002][ T5104] usb 2-1: Manufacturer: syz [ 520.382867][ T5104] usb 2-1: SerialNumber: syz [ 520.478567][ T7811] ntfs3(loop5): Failed to initialize $Extend/$Reparse. [ 520.514776][ T5104] usb 2-1: config 0 descriptor?? [ 520.547481][ T5104] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 520.557697][ T5104] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 521.163240][ T5104] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 521.200212][ T5104] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 521.847511][ T5104] em28xx 2-1:0.0: Unknown AC97 audio processor detected! [ 521.880796][ T5104] em28xx 2-1:0.0: couldn't setup AC97 register 2 [ 521.896381][ T5104] em28xx 2-1:0.0: couldn't setup AC97 register 4 [ 521.914816][ T5104] em28xx 2-1:0.0: couldn't setup AC97 register 6 [ 521.939953][ T5104] em28xx 2-1:0.0: couldn't setup AC97 register 54 [ 521.977452][ T5104] em28xx 2-1:0.0: couldn't setup AC97 register 56 [ 522.026437][ T6018] ntfs3(loop5): ino=1a, ntfs_sync_fs failed, -22. [ 522.047564][ T7628] veth0_vlan: entered promiscuous mode [ 522.239127][ T7628] veth1_vlan: entered promiscuous mode [ 522.453916][ T5104] em28xx 2-1:0.0: couldn't setup AC97 register 2 [ 522.460872][ T5104] em28xx 2-1:0.0: couldn't setup AC97 register 4 [ 522.467705][ T5104] em28xx 2-1:0.0: couldn't setup AC97 register 6 [ 522.474521][ T5104] em28xx 2-1:0.0: couldn't setup AC97 register 54 [ 522.481213][ T5104] em28xx 2-1:0.0: couldn't setup AC97 register 56 [ 522.595932][ T5104] usb 2-1: USB disconnect, device number 7 [ 522.776111][ T7628] veth0_macvtap: entered promiscuous mode [ 522.928718][ T7628] veth1_macvtap: entered promiscuous mode [ 523.125056][ T25] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 523.190238][ T7628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 523.201501][ T7628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 523.215271][ T7628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 523.227574][ T7628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 523.237973][ T7628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 523.248835][ T7628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 523.264434][ T7628] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 523.387323][ T25] usb 6-1: Using ep0 maxpacket: 16 [ 523.388591][ T7628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 523.403979][ T7628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 523.417096][ T7628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 523.428474][ T7628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 523.438736][ T7628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 523.449805][ T7628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 523.460076][ T7628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 523.470989][ T7628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 523.486853][ T7628] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 523.567333][ T25] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 523.579373][ T25] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 523.706968][ T25] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 523.717914][ T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 523.726889][ T25] usb 6-1: Product: syz [ 523.731398][ T25] usb 6-1: Manufacturer: syz [ 523.736507][ T25] usb 6-1: SerialNumber: syz [ 523.858728][ T7628] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.868200][ T7628] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.877351][ T25] usb 6-1: config 0 descriptor?? [ 523.882636][ T7628] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.891899][ T7628] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.893141][ T25] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 523.910561][ T25] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 524.525330][ T25] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 524.537162][ T25] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 525.168406][ T25] em28xx 6-1:0.0: Unknown AC97 audio processor detected! [ 525.214878][ T25] em28xx 6-1:0.0: couldn't setup AC97 register 2 [ 525.266704][ T25] em28xx 6-1:0.0: couldn't setup AC97 register 4 [ 525.291840][ T25] em28xx 6-1:0.0: couldn't setup AC97 register 6 [ 525.322171][ T25] em28xx 6-1:0.0: couldn't setup AC97 register 54 [ 525.358383][ T25] em28xx 6-1:0.0: couldn't setup AC97 register 56 [ 526.003308][ T25] em28xx 6-1:0.0: couldn't setup AC97 register 20 [ 526.058340][ T7863] netlink: 4 bytes leftover after parsing attributes in process `syz.6.438'. [ 526.106233][ T7863] bond_slave_0: entered promiscuous mode [ 526.112428][ T7863] bond_slave_1: entered promiscuous mode [ 526.118693][ T7863] batadv0: entered promiscuous mode [ 526.124881][ T7863] macvtap1: entered promiscuous mode [ 526.130451][ T7863] bond0: entered promiscuous mode [ 526.140358][ T7863] macvtap1: entered allmulticast mode [ 526.146168][ T7863] bond0: entered allmulticast mode [ 526.151537][ T7863] bond_slave_0: entered allmulticast mode [ 526.157969][ T7863] bond_slave_1: entered allmulticast mode [ 526.164022][ T7863] batadv0: entered allmulticast mode [ 526.180814][ T7863] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 526.250155][ T25] em28xx 6-1:0.0: couldn't setup AC97 register 16 [ 526.288397][ T25] em28xx 6-1:0.0: couldn't setup AC97 register 12 [ 526.310808][ T25] em28xx 6-1:0.0: couldn't setup AC97 register 14 [ 526.378841][ T25] em28xx 6-1:0.0: couldn't setup AC97 register 18 [ 526.392710][ T25] em28xx 6-1:0.0: couldn't setup AC97 register 22 [ 526.401029][ T7868] bond0: left allmulticast mode [ 526.406393][ T7868] bond_slave_0: left allmulticast mode [ 526.412208][ T7868] bond_slave_1: left allmulticast mode [ 526.418141][ T7868] batadv0: left allmulticast mode [ 526.423498][ T7868] bond0: left promiscuous mode [ 526.433103][ T7868] bond_slave_0: left promiscuous mode [ 526.438927][ T7868] bond_slave_1: left promiscuous mode [ 526.444749][ T7868] batadv0: left promiscuous mode [ 526.457639][ T25] em28xx 6-1:0.0: couldn't setup AC97 register 24 [ 526.506176][ T25] em28xx 6-1:0.0: Binding audio extension [ 526.512275][ T25] em28xx 6-1:0.0: em28xx-audio.c: Copyright (C) 2006 Markus Rechberger [ 526.521809][ T25] em28xx 6-1:0.0: em28xx-audio.c: Copyright (C) 2007-2016 Mauro Carvalho Chehab [ 526.536819][ T25] em28xx 6-1:0.0: alt 0 doesn't exist on interface 7 [ 526.718576][ T25] usb 6-1: USB disconnect, device number 9 [ 526.726223][ T25] em28xx 6-1:0.0: Disconnecting em28xx [ 526.731981][ T25] em28xx 6-1:0.0: Closing audio extension [ 526.817462][ T25] em28xx 6-1:0.0: Freeing device [ 527.941740][ T7880] loop5: detected capacity change from 0 to 1024 [ 528.076957][ T7880] EXT4-fs (loop5): orphan cleanup on readonly fs [ 528.263023][ T7880] EXT4-fs (loop5): 1 truncate cleaned up [ 528.298642][ T7880] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 528.846169][ T7893] fuse: Bad value for 'fd' [ 529.054065][ T6018] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 530.378079][ T7905] loop5: detected capacity change from 0 to 2048 [ 530.627597][ T7905] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 531.237510][ T6018] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 532.218191][ T7926] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 532.225807][ T7926] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 532.324860][ T7926] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 532.331074][ T7926] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 532.547704][ T7926] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 532.553911][ T7926] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 532.628698][ T7930] loop5: detected capacity change from 0 to 2048 [ 532.689466][ T7926] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 532.696263][ T7926] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 532.842640][ T7926] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 532.849270][ T7926] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 533.017393][ T7930] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 533.285415][ T29] audit: type=1800 audit(1737629119.389:18): pid=7926 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.452" name="file0" dev="loop5" ino=13 res=0 errno=0 [ 533.514599][ T4097] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 533.522784][ T4097] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 533.961979][ T4281] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 533.970616][ T4281] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 534.154314][ T6018] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 534.305536][ T25] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 534.534570][ T25] usb 2-1: Using ep0 maxpacket: 16 [ 534.698637][ T25] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 534.708408][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 534.716969][ T25] usb 2-1: Product: syz [ 534.721405][ T25] usb 2-1: Manufacturer: syz [ 534.726366][ T25] usb 2-1: SerialNumber: syz [ 534.864998][ T25] r8152-cfgselector 2-1: Unknown version 0x0000 [ 534.871691][ T25] r8152-cfgselector 2-1: config 0 descriptor?? [ 535.134545][ T5832] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 535.372489][ T5832] usb 6-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 535.382201][ T5832] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 535.428128][ T7957] loop8: detected capacity change from 0 to 1024 [ 535.466607][ T7957] EXT4-fs: Ignoring removed i_version option [ 535.473388][ T7957] EXT4-fs: Ignoring removed bh option [ 535.512482][ T5832] usb 6-1: config 0 descriptor?? [ 535.568414][ T5832] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 535.741536][ T25] r8152-cfgselector 2-1: USB disconnect, device number 8 [ 535.919125][ T7957] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 536.364891][ T5832] gspca_sunplus: reg_w_riv err -71 [ 536.370597][ T5832] sunplus 6-1:0.0: probe with driver sunplus failed with error -71 [ 536.477217][ T5832] usb 6-1: USB disconnect, device number 10 [ 536.761929][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 536.769509][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 537.133197][ T7628] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 537.603385][ T7973] loop1: detected capacity change from 0 to 128 [ 538.078752][ T5832] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 538.455841][ T5832] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 538.473966][ T5832] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 538.485407][ T5832] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 538.495025][ T5832] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 539.565287][ T7976] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 539.683773][ T5832] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 540.110016][ T7983] netlink: 'syz.8.463': attribute type 10 has an invalid length. [ 540.118863][ T7983] bridge0: port 2(bridge_slave_1) entered disabled state [ 540.129121][ T7983] bridge0: port 1(bridge_slave_0) entered disabled state [ 540.162066][ T7986] netlink: 4 bytes leftover after parsing attributes in process `syz.8.463'. [ 540.193336][ T7983] bridge0: port 2(bridge_slave_1) entered blocking state [ 540.201393][ T7983] bridge0: port 2(bridge_slave_1) entered forwarding state [ 540.210547][ T7983] bridge0: port 1(bridge_slave_0) entered blocking state [ 540.218546][ T7983] bridge0: port 1(bridge_slave_0) entered forwarding state [ 540.243669][ T7983] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 540.282790][ T7986] bridge_slave_1: left allmulticast mode [ 540.289749][ T7986] bridge_slave_1: left promiscuous mode [ 540.296736][ T7986] bridge0: port 2(bridge_slave_1) entered disabled state [ 540.421599][ T7986] bridge_slave_0: left allmulticast mode [ 540.430694][ T7986] bridge_slave_0: left promiscuous mode [ 540.440032][ T7986] bridge0: port 1(bridge_slave_0) entered disabled state [ 540.482749][ T7986] bond0: (slave bridge0): Releasing backup interface [ 540.900679][ T7985] 9pnet_fd: Insufficient options for proto=fd [ 543.650924][ T5832] usb 6-1: USB disconnect, device number 11 [ 544.295881][ T25] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 544.476080][ T8006] netlink: 12 bytes leftover after parsing attributes in process `syz.5.470'. [ 544.515321][ T25] usb 2-1: Using ep0 maxpacket: 8 [ 544.543706][ T25] usb 2-1: config index 0 descriptor too short (expected 6427, got 27) [ 544.552481][ T25] usb 2-1: config 0 has an invalid interface number: 21 but max is 0 [ 544.560923][ T25] usb 2-1: config 0 has no interface number 0 [ 544.567265][ T25] usb 2-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 544.579515][ T25] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 544.591227][ T25] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 544.606554][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 544.626595][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 544.709149][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 544.873786][ T25] usb 2-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 544.884370][ T25] usb 2-1: New USB device strings: Mfr=31, Product=1, SerialNumber=0 [ 544.892755][ T25] usb 2-1: Product: syz [ 544.897385][ T25] usb 2-1: Manufacturer: syz [ 544.989736][ T25] usb 2-1: config 0 descriptor?? [ 544.998974][ T8000] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 545.778681][ T25] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.21/input/input8 [ 546.355481][ T5832] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 546.442509][ T10] usb 2-1: USB disconnect, device number 9 [ 546.442649][ C1] keyspan_remote 2-1:0.21: keyspan_irq_recv - usb_submit_urb failed with result: -19 [ 546.656324][ T5832] usb 6-1: Using ep0 maxpacket: 16 [ 546.691709][ T8020] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 546.701390][ T5832] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 546.783915][ T5832] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 546.794623][ T5832] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 546.802924][ T5832] usb 6-1: Product: syz [ 546.807714][ T5832] usb 6-1: Manufacturer: syz [ 546.812644][ T5832] usb 6-1: SerialNumber: syz [ 546.907573][ T5832] usb 6-1: config 0 descriptor?? [ 546.983349][ T5832] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 546.993238][ T5832] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 547.279620][ T5832] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 547.425657][ T5832] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 547.463425][ T5832] em28xx 6-1:0.0: board has no eeprom [ 547.604814][ T5832] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 547.613038][ T5832] em28xx 6-1:0.0: dvb set to bulk mode. [ 547.623499][ T10] em28xx 6-1:0.0: Binding DVB extension [ 547.678879][ T5832] usb 6-1: USB disconnect, device number 12 [ 547.687253][ T5832] em28xx 6-1:0.0: Disconnecting em28xx [ 548.315041][ T10] em28xx 6-1:0.0: Registering input extension [ 548.405185][ T5832] em28xx 6-1:0.0: Closing input extension [ 548.539797][ T5832] em28xx 6-1:0.0: Freeing device [ 548.970946][ T8044] loop6: detected capacity change from 0 to 64 [ 549.663595][ T8051] 9pnet_virtio: no channels available for device syz [ 549.857060][ T5832] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 550.113519][ T5832] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 550.125567][ T5832] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 550.138122][ T5832] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 550.293137][ T5832] usb 2-1: config 0 descriptor?? [ 550.352846][ T5832] pwc: Askey VC010 type 2 USB webcam detected. [ 550.780863][ T5832] pwc: recv_control_msg error -32 req 02 val 2b00 [ 550.813101][ T5832] pwc: recv_control_msg error -32 req 02 val 2700 [ 550.837683][ T8062] binder: 8060:8062 ioctl c0306201 20000680 returned -14 [ 550.876009][ T5832] pwc: recv_control_msg error -32 req 02 val 2c00 [ 550.904822][ T5832] pwc: recv_control_msg error -32 req 04 val 1000 [ 550.944435][ T5832] pwc: recv_control_msg error -32 req 04 val 1300 [ 550.978720][ T5832] pwc: recv_control_msg error -32 req 04 val 1400 [ 551.036768][ T5832] pwc: recv_control_msg error -32 req 02 val 2000 [ 551.071994][ T5832] pwc: recv_control_msg error -32 req 02 val 2100 [ 551.119806][ T5832] pwc: recv_control_msg error -32 req 04 val 1500 [ 551.156473][ T5832] pwc: recv_control_msg error -32 req 02 val 2500 [ 551.225514][ T5832] pwc: recv_control_msg error -32 req 02 val 2400 [ 551.285486][ T5832] pwc: recv_control_msg error -32 req 02 val 2600 [ 551.315831][ T5832] pwc: recv_control_msg error -32 req 02 val 2900 [ 551.551429][ T5832] pwc: recv_control_msg error -71 req 04 val 1100 [ 551.601540][ T5832] pwc: recv_control_msg error -71 req 04 val 1200 [ 551.640048][ T5832] pwc: Registered as video103. [ 551.648992][ T5832] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input10 [ 551.784980][ T5832] usb 2-1: USB disconnect, device number 10 [ 551.870504][ T8070] loop6: detected capacity change from 0 to 1024 [ 552.072510][ T8070] EXT4-fs (loop6): orphan cleanup on readonly fs [ 552.349900][ T8070] EXT4-fs (loop6): 1 truncate cleaned up [ 552.476985][ T8070] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 554.338329][ T6131] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 554.815241][ T5832] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 555.020206][ T5832] usb 9-1: unable to get BOS descriptor or descriptor too short [ 555.064422][ T5832] usb 9-1: not running at top speed; connect to a high speed hub [ 555.125452][ T5832] usb 9-1: config 3 has an invalid interface number: 3 but max is 1 [ 555.133977][ T5832] usb 9-1: config 3 has an invalid interface number: 66 but max is 1 [ 555.142584][ T5832] usb 9-1: config 3 has no interface number 0 [ 555.149440][ T5832] usb 9-1: config 3 has no interface number 1 [ 555.159087][ T5832] usb 9-1: config 3 interface 66 altsetting 12 endpoint 0x1 has an invalid bInterval 0, changing to 10 [ 555.171464][ T5832] usb 9-1: config 3 interface 66 altsetting 12 endpoint 0x1 has invalid wMaxPacketSize 0 [ 555.181786][ T5832] usb 9-1: config 3 interface 3 has no altsetting 0 [ 555.188775][ T5832] usb 9-1: config 3 interface 66 has no altsetting 0 [ 555.500471][ T5832] usb 9-1: New USB device found, idVendor=0c45, idProduct=8003, bcdDevice=b8.82 [ 555.510222][ T5832] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 555.518826][ T5832] usb 9-1: Product: syz [ 555.523251][ T5832] usb 9-1: Manufacturer: syz [ 555.528844][ T5832] usb 9-1: SerialNumber: syz [ 555.928608][ T5832] hub 9-1:3.3: bad descriptor, ignoring hub [ 555.935261][ T5832] hub 9-1:3.3: probe with driver hub failed with error -5 [ 555.998915][ T8108] loop1: detected capacity change from 0 to 128 [ 556.055675][ T8108] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 556.078571][ T5832] hub 9-1:3.66: bad descriptor, ignoring hub [ 556.085155][ T5832] hub 9-1:3.66: probe with driver hub failed with error -5 [ 556.155557][ T8108] FAT-fs (loop1): bogus number of FAT sectors [ 556.162172][ T8108] FAT-fs (loop1): Can't find a valid FAT filesystem [ 556.246228][ T5832] usb 9-1: USB disconnect, device number 2 [ 557.297099][ T8121] loop1: detected capacity change from 0 to 128 [ 559.521624][ T8144] loop8: detected capacity change from 0 to 4096 [ 559.694693][ T8144] UDF-fs: warning (device loop8): udf_load_vrs: No anchor found [ 559.702821][ T8144] UDF-fs: Scanning with blocksize 512 failed [ 559.812776][ T8144] UDF-fs: error (device loop8): udf_process_sequence: Primary Volume Descriptor not found! [ 559.816365][ T8151] Trying to write to read-only block-device nullb0 [ 559.958913][ T8144] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 560.051237][ T8144] UDF-fs: error (device loop8): udf_read_inode: (ino 1408) failed !bh [ 560.061482][ T8144] UDF-fs: error (device loop8): udf_fill_super: Error in udf_iget, block=96, partition=0 [ 562.514468][ T25] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 562.725176][ T25] usb 7-1: Using ep0 maxpacket: 16 [ 562.804595][ T25] usb 7-1: config 0 has an invalid interface number: 126 but max is 0 [ 562.813314][ T25] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 562.823997][ T25] usb 7-1: config 0 has no interface number 0 [ 562.832654][ T25] usb 7-1: config 0 interface 126 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 562.845487][ T25] usb 7-1: config 0 interface 126 altsetting 0 endpoint 0x87 has invalid maxpacket 34328, setting to 1024 [ 562.857607][ T25] usb 7-1: config 0 interface 126 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 562.869000][ T25] usb 7-1: config 0 interface 126 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 562.880525][ T25] usb 7-1: config 0 interface 126 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 562.894375][ T25] usb 7-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 562.903729][ T25] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 562.975170][ T25] usb 7-1: config 0 descriptor?? [ 562.992317][ T8183] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 563.123845][ T25] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 563.817367][ T25] usb 7-1: USB disconnect, device number 8 [ 564.173972][ T5999] udevd[5999]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.126/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 565.949178][ T8214] loop1: detected capacity change from 0 to 2048 [ 566.236706][ T8214] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 566.327353][ T29] audit: type=1800 audit(1737629152.459:19): pid=8214 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.532" name="file0" dev="loop1" ino=13 res=0 errno=0 [ 566.999229][ T8236] loop5: detected capacity change from 0 to 128 [ 567.048791][ T8236] gfs2: gfs2 mount does not exist [ 567.301555][ T8239] loop6: detected capacity change from 0 to 128 [ 567.358483][ T5781] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 567.379926][ T8239] zonefs (loop6) ERROR: Not a zoned block device [ 568.440586][ T8251] loop5: detected capacity change from 0 to 64 [ 570.130035][ T8271] loop8: detected capacity change from 0 to 64 [ 570.977382][ T8278] loop6: detected capacity change from 0 to 128 [ 571.044731][ T8278] EXT4-fs (loop6): #clusters per group too big: 52480 [ 572.265167][ T8292] loop6: detected capacity change from 0 to 64 [ 572.448746][ T8286] loop1: detected capacity change from 0 to 4096 [ 573.506001][ T8305] loop6: detected capacity change from 0 to 512 [ 573.598146][ T8303] loop8: detected capacity change from 0 to 2048 [ 573.629482][ T8305] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 573.734444][ T8305] EXT4-fs (loop6): Errors on filesystem, clearing orphan list. [ 573.830160][ T8305] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 574.479574][ T6131] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 575.435638][ T29] audit: type=1326 audit(1737629161.559:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8320 comm="syz.5.570" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fa1579 code=0x0 [ 576.308899][ T8334] loop6: detected capacity change from 0 to 512 [ 576.380955][ T8334] EXT4-fs: Ignoring removed bh option [ 576.465313][ T8334] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 576.635238][ T8334] EXT4-fs error (device loop6): __ext4_iget:4984: inode #15: block 1803188595: comm syz.6.573: invalid block [ 576.771549][ T8334] EXT4-fs error (device loop6): ext4_orphan_get:1394: comm syz.6.573: couldn't read orphan inode 15 (err -117) [ 576.888230][ T8334] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 577.482180][ T6131] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 577.872437][ T8354] loop1: detected capacity change from 0 to 1024 [ 578.179129][ T8354] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 578.335022][ T8354] EXT4-fs error (device loop1): __ext4_remount:6749: comm syz.1.578: Abort forced by user [ 578.363878][ T8354] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 578.725649][ T8365] loop5: detected capacity change from 0 to 2048 [ 578.851913][ T5781] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 578.887487][ T8365] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 578.897074][ T8365] UDF-fs: Scanning with blocksize 512 failed [ 579.148278][ T8365] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 579.313723][ T8358] loop8: detected capacity change from 0 to 4096 [ 579.439940][ T8358] ntfs3(loop8): Different NTFS sector size (2048) and media sector size (512). [ 581.224562][ T8378] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 585.715560][ T8447] netlink: 8 bytes leftover after parsing attributes in process `syz.6.609'. [ 590.104859][ T8477] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 590.304584][ T8477] usb 9-1: Using ep0 maxpacket: 16 [ 590.367371][ T8477] usb 9-1: config 0 has an invalid interface number: 223 but max is 0 [ 590.379962][ T8477] usb 9-1: config 0 has no interface number 0 [ 590.387284][ T8477] usb 9-1: config 0 interface 223 altsetting 1 endpoint 0x9 has an invalid bInterval 0, changing to 7 [ 590.398745][ T8477] usb 9-1: config 0 interface 223 altsetting 1 endpoint 0x9 has invalid wMaxPacketSize 0 [ 590.409228][ T8477] usb 9-1: config 0 interface 223 has no altsetting 0 [ 590.636425][ T8477] usb 9-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 590.648137][ T8477] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 590.656786][ T8477] usb 9-1: Product: syz [ 590.661419][ T8477] usb 9-1: Manufacturer: syz [ 590.666503][ T8477] usb 9-1: SerialNumber: syz [ 590.778051][ T8477] usb 9-1: config 0 descriptor?? [ 591.288861][ T5104] usb 9-1: USB disconnect, device number 3 [ 592.606042][ T8532] netlink: 20 bytes leftover after parsing attributes in process `syz.1.638'. [ 595.296435][ T29] audit: type=1326 audit(1737629181.419:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8566 comm="syz.1.653" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fcf579 code=0x7ffc0000 [ 595.415954][ T29] audit: type=1326 audit(1737629181.489:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8566 comm="syz.1.653" exe="/root/syz-executor" sig=0 arch=40000003 syscall=93 compat=1 ip=0xf7fcf579 code=0x7ffc0000 [ 595.439206][ T29] audit: type=1326 audit(1737629181.489:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8566 comm="syz.1.653" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fcf579 code=0x7ffc0000 [ 595.606521][ T8572] loop8: detected capacity change from 0 to 2048 [ 595.876090][ T8572] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 596.944039][ T7628] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 598.246404][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 598.253477][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 600.814751][ T8477] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 601.099366][ T8477] usb 9-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 601.109102][ T8477] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 601.117783][ T8477] usb 9-1: Product: syz [ 601.122243][ T8477] usb 9-1: Manufacturer: syz [ 601.127890][ T8477] usb 9-1: SerialNumber: syz [ 601.203003][ T8477] usb 9-1: config 0 descriptor?? [ 601.477305][ T8477] hso 9-1:0.0: Can't find BULK IN endpoint [ 601.486179][ T8477] usb-storage 9-1:0.0: USB Mass Storage device detected [ 601.739852][ T8477] usb 9-1: USB disconnect, device number 4 [ 603.086529][ T8673] netlink: 20 bytes leftover after parsing attributes in process `syz.8.691'. [ 603.096354][ T8673] IPv6: NLM_F_REPLACE set, but no existing node found! [ 605.073280][ T8693] netlink: 4 bytes leftover after parsing attributes in process `syz.1.701'. [ 606.782135][ T8712] netlink: 4 bytes leftover after parsing attributes in process `syz.7.710'. [ 607.550262][ T8722] loop8: detected capacity change from 0 to 164 [ 609.150415][ T5104] usb 9-1: new full-speed USB device number 5 using dummy_hcd [ 609.417561][ T5104] usb 9-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 609.429977][ T5104] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 609.508397][ T5104] usb 9-1: config 0 descriptor?? [ 609.596322][ T5104] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 609.863717][ T8744] netlink: 'syz.6.726': attribute type 9 has an invalid length. [ 610.001005][ T5104] gp8psk: usb in 137 operation failed. [ 610.006959][ T5104] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 610.017941][ T5104] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 610.154626][ T5104] usb 9-1: USB disconnect, device number 5 [ 613.835653][ T8788] netlink: 'syz.7.747': attribute type 21 has an invalid length. [ 613.843686][ T8788] netlink: 128 bytes leftover after parsing attributes in process `syz.7.747'. [ 613.853412][ T8788] netlink: 'syz.7.747': attribute type 6 has an invalid length. [ 613.861491][ T8788] netlink: 3 bytes leftover after parsing attributes in process `syz.7.747'. [ 618.783393][ T8849] netlink: 4 bytes leftover after parsing attributes in process `syz.1.773'. [ 618.835536][ T8853] netlink: 72 bytes leftover after parsing attributes in process `syz.6.776'. [ 618.893027][ T8856] capability: warning: `syz.8.777' uses deprecated v2 capabilities in a way that may be insecure [ 618.977504][ T8857] netlink: 'syz.7.775': attribute type 9 has an invalid length. [ 618.985952][ T8857] netlink: 'syz.7.775': attribute type 7 has an invalid length. [ 618.993976][ T8857] netlink: 'syz.7.775': attribute type 8 has an invalid length. [ 619.988179][ T8867] netdevsim netdevsim8 netdevsim0: entered promiscuous mode [ 620.151420][ T8867] netlink: 44 bytes leftover after parsing attributes in process `syz.8.781'. [ 620.161371][ T8867] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 620.975795][ T8878] netlink: 12 bytes leftover after parsing attributes in process `syz.5.784'. [ 620.985846][ T8878] netlink: 8 bytes leftover after parsing attributes in process `syz.5.784'. [ 623.055518][ T29] audit: type=1326 audit(1737629209.159:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8903 comm="syz.5.796" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fa1579 code=0x0 [ 623.466795][ T8912] netlink: 20 bytes leftover after parsing attributes in process `syz.6.799'. [ 626.675778][ T8952] loop8: detected capacity change from 0 to 128 [ 626.806468][ T8952] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 626.855440][ T8952] ext4 filesystem being mounted at /63/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 627.499592][ T7628] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 628.403392][ T5825] usb 9-1: new full-speed USB device number 6 using dummy_hcd [ 628.643622][ T5825] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 628.655015][ T5825] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 628.754992][ T5825] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 628.764615][ T5825] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 628.772901][ T5825] usb 9-1: Product: syz [ 628.780251][ T5825] usb 9-1: Manufacturer: syz [ 628.785795][ T5825] usb 9-1: SerialNumber: syz [ 629.121827][ T5825] usb 9-1: 0:2 : does not exist [ 629.213316][ T5825] usb 9-1: 5:0: failed to get current value for ch 0 (-22) [ 629.354670][ T5825] usb 9-1: USB disconnect, device number 6 [ 629.657940][ T5997] udevd[5997]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 630.032996][ T8996] netlink: 16 bytes leftover after parsing attributes in process `syz.7.833'. [ 630.848944][ T9003] tipc: Started in network mode [ 630.856106][ T9003] tipc: Node identity ac1414bb, cluster identity 4711 [ 630.866088][ T9003] tipc: Enabled bearer , priority 10 [ 631.984510][ T1545] tipc: Node number set to 2886997179 [ 633.161197][ T9042] netlink: 4 bytes leftover after parsing attributes in process `syz.1.848'. [ 633.835123][ T1545] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 634.046704][ T1545] usb 9-1: Using ep0 maxpacket: 8 [ 634.116579][ T1545] usb 9-1: config 0 interface 0 altsetting 112 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 634.128131][ T1545] usb 9-1: config 0 interface 0 altsetting 112 endpoint 0x81 has invalid wMaxPacketSize 0 [ 634.138745][ T1545] usb 9-1: config 0 interface 0 has no altsetting 0 [ 634.145875][ T1545] usb 9-1: New USB device found, idVendor=0458, idProduct=0153, bcdDevice=11.00 [ 634.155450][ T1545] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 634.343258][ T1545] usb 9-1: config 0 descriptor?? [ 634.875361][ T1545] kye 0003:0458:0153.0002: bogus close delimiter [ 634.882037][ T1545] kye 0003:0458:0153.0002: item 0 2 2 10 parsing failed [ 634.980631][ T1545] kye 0003:0458:0153.0002: parse failed [ 634.989054][ T1545] kye 0003:0458:0153.0002: probe with driver kye failed with error -22 [ 635.165071][ T1545] usb 9-1: USB disconnect, device number 7 [ 637.116440][ T9096] hub 6-0:1.0: USB hub found [ 637.178882][ T9096] hub 6-0:1.0: 1 port detected [ 640.371993][ T9145] netlink: 32 bytes leftover after parsing attributes in process `syz.1.875'. [ 640.381551][ T9145] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 640.511572][ T9148] netlink: 20 bytes leftover after parsing attributes in process `syz.5.876'. [ 643.267659][ T9190] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 644.314521][ T1545] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 644.537951][ T1545] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 644.552556][ T1545] usb 9-1: New USB device found, idVendor=0853, idProduct=0148, bcdDevice= 0.00 [ 644.563035][ T1545] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 644.607712][ T1545] usb 9-1: config 0 descriptor?? [ 645.095011][ T1545] topre 0003:0853:0148.0003: unbalanced delimiter at end of report description [ 645.143490][ T1545] topre 0003:0853:0148.0003: probe with driver topre failed with error -22 [ 645.275694][ T1545] usb 9-1: USB disconnect, device number 8 [ 650.954916][ T9292] loop8: detected capacity change from 0 to 1024 [ 651.680430][ T34] hfsplus: b-tree write err: -5, ino 4 [ 652.932626][ T9318] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 652.939624][ T9318] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 653.022862][ T9318] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 653.029874][ T9318] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 653.083778][ T9318] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 653.090905][ T9318] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 653.146946][ T9318] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 653.153830][ T9318] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 653.195426][ T9318] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 653.202526][ T9318] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 653.231649][ T9320] loop8: detected capacity change from 0 to 256 [ 654.234001][ T9328] capability: warning: `syz.5.943' uses 32-bit capabilities (legacy support in use) [ 655.445855][ T9342] netlink: 47 bytes leftover after parsing attributes in process `syz.6.947'. [ 657.947848][ T9318] net_ratelimit: 1782 callbacks suppressed [ 657.947935][ T9318] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 657.961046][ T9318] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 658.045441][ T9318] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 658.052333][ T9318] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 658.155094][ T9318] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 658.161976][ T9318] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 658.253247][ T9318] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 658.260346][ T9318] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 658.334739][ T9318] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 658.341623][ T9318] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 658.614627][ T1545] IPVS: starting estimator thread 0... [ 658.704725][ T9375] IPVS: using max 192 ests per chain, 9600 per kthread [ 659.424323][ T9384] loop8: detected capacity change from 0 to 512 [ 659.577371][ T9384] EXT4-fs (loop8): orphan cleanup on readonly fs [ 659.646500][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 659.653353][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 659.725190][ T9384] EXT4-fs error (device loop8): ext4_get_branch:178: inode #11: block 4294967295: comm syz.8.963: invalid block [ 659.945774][ T9384] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.963: invalid indirect mapped block 4294967295 (level 1) [ 660.155055][ T9384] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.963: invalid indirect mapped block 4294967295 (level 1) [ 660.306311][ T9384] EXT4-fs (loop8): 2 truncates cleaned up [ 660.314549][ T9384] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 660.790522][ T7628] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 661.449477][ T9409] netlink: 120 bytes leftover after parsing attributes in process `syz.5.972'. [ 662.135341][ T9416] netlink: 8 bytes leftover after parsing attributes in process `syz.7.975'. [ 663.327535][ T9434] netlink: 24 bytes leftover after parsing attributes in process `syz.8.982'. [ 668.145758][ T9499] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1008'. [ 669.437633][ T9508] loop8: detected capacity change from 0 to 4096 [ 669.526156][ T9508] ntfs3(loop8): Different NTFS sector size (4096) and media sector size (512). [ 670.068330][ T9508] ntfs3(loop8): Failed to initialize $Extend/$Reparse. [ 670.231958][ T9508] ntfs3(loop8): ino=1b, "file0" failed to parse mft record [ 670.239821][ T9508] ntfs3(loop8): Mark volume as dirty due to NTFS errors [ 670.304612][ T9508] ntfs3(loop8): ino=1b, "file0" attr_set_size [ 670.344904][ T9530] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1018'. [ 670.696684][ T7628] ntfs3(loop8): ino=1a, ntfs_sync_fs failed, -22. [ 671.485512][ T9541] tipc: Started in network mode [ 671.490752][ T9541] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 671.500966][ T9541] tipc: Enabling of bearer rejected, failed to enable media [ 679.105350][ T5832] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 679.312636][ T5832] usb 9-1: config 0 has an invalid interface number: 222 but max is 0 [ 679.321756][ T5832] usb 9-1: config 0 has no interface number 0 [ 679.328426][ T5832] usb 9-1: config 0 interface 222 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 679.340041][ T5832] usb 9-1: config 0 interface 222 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 679.350565][ T5832] usb 9-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 679.360075][ T5832] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 679.527263][ T5832] usb 9-1: config 0 descriptor?? [ 680.013773][ T5832] holtek 0003:1241:5015.0004: unknown main item tag 0x0 [ 680.021609][ T5832] holtek 0003:1241:5015.0004: unknown main item tag 0x0 [ 680.031490][ T5832] holtek 0003:1241:5015.0004: unknown main item tag 0x0 [ 680.039012][ T5832] holtek 0003:1241:5015.0004: unknown main item tag 0x0 [ 680.046592][ T5832] holtek 0003:1241:5015.0004: unknown main item tag 0x0 [ 680.239294][ T5832] holtek 0003:1241:5015.0004: hidraw0: USB HID v0.00 Device [HID 1241:5015] on usb-dummy_hcd.8-1/input222 [ 680.252982][ T5832] holtek 0003:1241:5015.0004: no inputs found [ 680.447919][ T5832] usb 9-1: USB disconnect, device number 9 [ 681.464917][ T9669] ===================================================== [ 681.472382][ T9669] BUG: KMSAN: uninit-value in nsim_get_ringparam+0xa8/0xe0 [ 681.480435][ T9669] nsim_get_ringparam+0xa8/0xe0 [ 681.485701][ T9669] ethtool_set_ringparam+0x268/0x570 [ 681.491230][ T9669] dev_ethtool+0x126d/0x2a40 [ 681.496296][ T9669] dev_ioctl+0xb0e/0x1280 [ 681.500835][ T9669] compat_sock_ioctl+0xeea/0x1360 [ 681.506721][ T9669] __se_compat_sys_ioctl+0x80f/0x1020 [ 681.515127][ T9669] __ia32_compat_sys_ioctl+0x93/0xe0 [ 681.520691][ T9669] ia32_sys_call+0x2226/0x4180 [ 681.526517][ T9669] __do_fast_syscall_32+0xb0/0x110 [ 681.531867][ T9669] do_fast_syscall_32+0x38/0x80 [ 681.537389][ T9669] do_SYSENTER_32+0x1f/0x30 [ 681.542108][ T9669] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 681.548834][ T9669] [ 681.551285][ T9669] Local variable kernel_ringparam created at: [ 681.557749][ T9669] ethtool_set_ringparam+0x96/0x570 [ 681.563182][ T9669] dev_ethtool+0x126d/0x2a40 [ 681.568395][ T9669] [ 681.570876][ T9669] CPU: 1 UID: 0 PID: 9669 Comm: syz.7.1072 Not tainted 6.13.0-syzkaller-04788-g7004a2e46d16 #0 [ 681.582494][ T9669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 681.592919][ T9669] ===================================================== [ 681.600119][ T9669] Disabling lock debugging due to kernel taint [ 681.606621][ T9669] Kernel panic - not syncing: kmsan.panic set ... [ 681.613298][ T9669] CPU: 1 UID: 0 PID: 9669 Comm: syz.7.1072 Tainted: G B 6.13.0-syzkaller-04788-g7004a2e46d16 #0 [ 681.625375][ T9669] Tainted: [B]=BAD_PAGE [ 681.629685][ T9669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 681.639937][ T9669] Call Trace: [ 681.643381][ T9669] [ 681.646514][ T9669] dump_stack_lvl+0x216/0x2d0 [ 681.651464][ T9669] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 681.657523][ T9669] dump_stack+0x1e/0x24 [ 681.661928][ T9669] panic+0x4e2/0xcf0 [ 681.666097][ T9669] ? kmsan_get_metadata+0xf1/0x1c0 [ 681.671466][ T9669] kmsan_report+0x2c7/0x2d0 [ 681.676198][ T9669] ? __msan_warning+0x95/0x120 [ 681.681137][ T9669] ? nsim_get_ringparam+0xa8/0xe0 [ 681.686356][ T9669] ? ethtool_set_ringparam+0x268/0x570 [ 681.692120][ T9669] ? dev_ethtool+0x126d/0x2a40 [ 681.697108][ T9669] ? dev_ioctl+0xb0e/0x1280 [ 681.701787][ T9669] ? compat_sock_ioctl+0xeea/0x1360 [ 681.707212][ T9669] ? __se_compat_sys_ioctl+0x80f/0x1020 [ 681.713094][ T9669] ? __ia32_compat_sys_ioctl+0x93/0xe0 [ 681.718802][ T9669] ? ia32_sys_call+0x2226/0x4180 [ 681.723952][ T9669] ? __do_fast_syscall_32+0xb0/0x110 [ 681.729468][ T9669] ? do_fast_syscall_32+0x38/0x80 [ 681.734696][ T9669] ? do_SYSENTER_32+0x1f/0x30 [ 681.739625][ T9669] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 681.746358][ T9669] ? __do_fast_syscall_32+0xb0/0x110 [ 681.751838][ T9669] ? do_fast_syscall_32+0x38/0x80 [ 681.757056][ T9669] ? do_SYSENTER_32+0x1f/0x30 [ 681.761928][ T9669] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 681.768665][ T9669] ? kmsan_get_metadata+0x13e/0x1c0 [ 681.774075][ T9669] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 681.780689][ T9669] ? kmsan_get_metadata+0x13e/0x1c0 [ 681.786091][ T9669] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 681.792118][ T9669] ? kmsan_get_metadata+0x13e/0x1c0 [ 681.797524][ T9669] ? kmsan_internal_memmove_metadata+0x91/0x230 [ 681.804040][ T9669] ? kmsan_get_metadata+0x13e/0x1c0 [ 681.809492][ T9669] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 681.815523][ T9669] __msan_warning+0x95/0x120 [ 681.820311][ T9669] nsim_get_ringparam+0xa8/0xe0 [ 681.825371][ T9669] ? __pfx_nsim_set_ringparam+0x10/0x10 [ 681.831116][ T9669] ? __pfx_nsim_get_ringparam+0x10/0x10 [ 681.836859][ T9669] ethtool_set_ringparam+0x268/0x570 [ 681.842351][ T9669] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 681.848400][ T9669] dev_ethtool+0x126d/0x2a40 [ 681.853267][ T9669] dev_ioctl+0xb0e/0x1280 [ 681.857799][ T9669] compat_sock_ioctl+0xeea/0x1360 [ 681.863081][ T9669] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 681.868768][ T9669] __se_compat_sys_ioctl+0x80f/0x1020 [ 681.874410][ T9669] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 681.881025][ T9669] ? kmsan_get_metadata+0x13e/0x1c0 [ 681.886458][ T9669] __ia32_compat_sys_ioctl+0x93/0xe0 [ 681.892006][ T9669] ia32_sys_call+0x2226/0x4180 [ 681.897056][ T9669] __do_fast_syscall_32+0xb0/0x110 [ 681.902374][ T9669] ? switch_fpu_return+0x17/0x20 [ 681.907510][ T9669] do_fast_syscall_32+0x38/0x80 [ 681.912658][ T9669] do_SYSENTER_32+0x1f/0x30 [ 681.917359][ T9669] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 681.923938][ T9669] RIP: 0023:0xf7f34579 [ 681.928173][ T9669] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 681.948009][ T9669] RSP: 002b:00000000f505655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 681.956640][ T9669] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000008946 [ 681.964778][ T9669] RDX: 0000000020000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 681.972903][ T9669] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 681.981027][ T9669] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 681.989150][ T9669] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 681.997284][ T9669] [ 682.000875][ T9669] Kernel Offset: disabled [ 682.005291][ T9669] Rebooting in 86400 seconds..