last executing test programs: 29.431889705s ago: executing program 1 (id=488): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = getpgrp(0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000280)='./file0\x00', 0x1c30d, &(0x7f00000001c0)=ANY=[@ANYBLOB="756e695f786c6174653d312c73686f72746e616d653d77696e39352c756e695f786c6174653d312c646f733178666c6f7070792c757466383d312c757466383d302c73686f72746e616d653d77696e6e742c73686f72746e616d653d6c6f7765722c756e695f786c6174653d312c009aaa21b5084a2ac75af86d4f32151f53248eb7ec539fff0bd244bb2559d414561138c259cecc8dccf4475a9e05a9b714d4939bee6cf0f1e7a889f8100c41c843380270c20100000000000000c5"], 0x0, 0x24b, &(0x7f0000000700)="$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") kcmp(0x0, r2, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f00000003c0)=""/55, 0xfffffffffffffc69}, {0x0}], 0x2, &(0x7f0000000440)=[{0x0}], 0x1, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000400)='memory.oom.group\x00', 0x2, 0x0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000380), 0x0, 0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000001000028170020f0ca269dbc33cd947e091ea7540000fa4d0000000000000000000000af5419ac6a182f"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000090000050000000000000000c50000000e800000850000000e00000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000002c0)='contention_end\x00', r3}, 0x10) syz_mount_image$vfat(&(0x7f0000003880), &(0x7f0000000200)='./file1\x00', 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="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", @ANYRES64=r1], 0x86, 0x2a9, &(0x7f0000000c00)="$eJzs3T9rc1UYAPDnpmmSV4dkcJKCF3RwKm1XlxRpoZhJyaAOWmwL0gShhYJ/MHZydXH0EwiCm1/CxW8guApudihcuTf3mqSmaSNN9S2/39LTc89zznNOz6V0yNMPN4anR2mcXH7xa7RaSdS68SyukuhELSpfxYzuNwEAPM+usiz+yMaWiUsiorW6tACAFVr69/+PK08JAFixd959763dXm/v7TRtxf7w64t+/pd9/nX8fPckPo5BHMdWtOM6IvvbuL2fZdmonuY68dpwdNHPI4cf/FzOv/t7RBG/He3oFF2z8Qe9ve10bCp+lOfxQrl+N4/fiXa8NGf9g97ezpz46Dfi9Ven8t+MdvzyUXwSgzgqkpjEf7mdpm9m3/75+ft5enl8MrroN4txE9naI/9oAAAAAAAAAAAAAAAAAAAAAAB4wjbL2jnNKOr35F1l/Z216/yb9Ugrndn6POP4pJroRn2gURbfVfV1ttI0zcqBk/h6vFyP+n+zawAAAAAAAAAAAAAAAAAAAPh/Of/0s9PDweD47EEaVTWA6mP9/3ae7lTPK7F4cHOyVq1sLpg51qoxScTCNPJNPNCx3NV4dlvO3/+w7IStu8esLzqfh2lUt+v0MJl/hs2oelrVJflpekwj7rlW47ZHG0UC1eW4a57G3EftpffeeLFojBaMiWTRe/HGb+OEy57k5kvUKE51bvh62ZgKv3E3brvP1SnNvin/kKjWAQAAAAAAAAAAAAAAAAAAKzX5GPCch5cLQ2tZc2VpAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCjmvz//yUaozL4HoMbcXY+f+X6Y24TAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAJ+6vAAAA//+lillR") syz_emit_ethernet(0xae, &(0x7f0000000000)=ANY=[@ANYBLOB="8bb8634189350180c2"], 0x0) open(&(0x7f0000000040)='./bus\x00', 0x14507e, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext2\x00', &(0x7f0000000240)='./file0\x00', 0x10c74c2, &(0x7f00000001c0), 0x1, 0x778, &(0x7f0000000ec0)="$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") dup(r5) r6 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000000)={0x0, r6}) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 28.13301026s ago: executing program 1 (id=492): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000000)=0x3, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) setsockopt$inet6_int(r0, 0x29, 0x38, &(0x7f0000001740)=0x6, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 27.963389964s ago: executing program 1 (id=493): syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x90, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x60, 0x2, {{}, [@TCA_NETEM_LOSS={0x4, 0xd, 0x0, 0x1, [@NETEM_LOSS_GI={0x18}, @NETEM_LOSS_GE={0x14}, @NETEM_LOSS_GE={0x11}]}]}}}]}, 0x90}}, 0x0) 27.623711972s ago: executing program 1 (id=495): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x39, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x30, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x0, 0x9, 0x200, 0x4, r0, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x40, 0x5, 0x0, 0x5}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYRES32=0x0], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) brk(0x55555ede6001) bpf$MAP_CREATE(0x0, 0x0, 0x0) r6 = getpgrp(r3) syz_pidfd_open(r6, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000250000000000207b1af8ff00000000bfa100000000000007010000f8ffffff00b70300000000000085000000710000009500"/81], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x82) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x2805011, 0x0) mount$bind(0x0, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x20000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x1001402, 0x0) 26.626919123s ago: executing program 3 (id=496): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) writev(r0, &(0x7f0000000540)=[{&(0x7f00000000c0)='u', 0x34000}, {0x0}], 0x2) 26.237380234s ago: executing program 1 (id=499): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000cc0)={0x0, 0x0, 0x0}, 0x0) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0) readv(r0, &(0x7f0000000700)=[{&(0x7f0000000300)=""/131, 0x83}], 0x1) 7.86231984s ago: executing program 2 (id=538): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x26, 0x4, 0x0, 0x0, 0x98, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x1c, 0x0, 0x0, 0x0, [0x401, 0x1000, 0x5, 0x0, 0x0, 0x0]}, @timestamp_prespec={0x44, 0x34, 0xc0, 0x3, 0x0, [{@multicast1}, {@dev, 0x659}, {@broadcast, 0x8000}, {@empty}, {@multicast2, 0xffd200}, {@private}]}, @timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x4, [{@multicast2}, {@private=0xa010101}, {@rand_addr, 0x3}, {@broadcast}]}, @noop, @noop, @lsrr={0x83, 0xb, 0x0, [@private, @rand_addr]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 7.74791695s ago: executing program 0 (id=539): unshare(0x4040600) syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000080)='./file2\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYRES16=0x0], 0x1, 0x54f9, &(0x7f000000ab40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fsync(r0) 6.541886108s ago: executing program 2 (id=541): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000040)=0x10000) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x12, r2, 0x0) read$dsp(r0, &(0x7f00000000c0)=""/108, 0x6c) 6.26877802s ago: executing program 2 (id=543): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=@acquire={0x128, 0x17, 0x1, 0x0, 0x0, {{@in6=@remote}, @in6=@private0, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@local}, {{@in=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x3}}}, 0x128}}, 0x0) 6.0218785s ago: executing program 2 (id=544): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000580)}, {&(0x7f0000000ac0)="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", 0xfffffd6b}, {&(0x7f0000000640)="74a892e6122d0e9da29a40f6060049f3ab51554d", 0x14}], 0x3, &(0x7f00000005c0)=ANY=[], 0x158}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x8) 5.847822874s ago: executing program 0 (id=545): r0 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300), 0x2000, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000340)={'pim6reg0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}}) getdents(0xffffffffffffffff, &(0x7f0000002080)=""/15, 0xf) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6e65231d64656661756c7420757365723a73797a20303053303030303030303030303030303430393300"], 0x2a, 0x0) r2 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f0000000040), &(0x7f0000000000), &(0x7f00000002c0)='s', 0x1, 0xfffffffffffffffe) keyctl$read(0xb, r2, &(0x7f0000000240)=""/112, 0x349b7f55) request_key(&(0x7f00000001c0)='blacklist\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)='user:', 0x0) ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f0000000500)) syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) add_key(&(0x7f0000000080)='cifs.idmap\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000440)="2d2288c2715efb0e7d89d1509e8f14d6037a99964e1a2b7984b022cbbadebc115c092b3f6cae31cb53808feb84c6aa4956bf58ddff5b918269f872a02d8ac77cf1547818646c3eb8555cf81644fc052358bcd78e8ec83f8bd2dbbcd966b290eb8dd96f96afacc81444e501f26f54e4531b94f1d12c8f0f70694f9d0bc4d1046e404bf2ac0520a22c515d3d7521a8ae9d4841627d8785c2594bea8450113078", 0x9f, r2) r3 = open(&(0x7f0000000140)='./bus\x00', 0x127842, 0x0) getdents(0xffffffffffffffff, &(0x7f0000000640)=""/113, 0x71) r4 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) r5 = openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x0, 0x0) getdents64(r5, &(0x7f0000000200)=""/11, 0xb) ftruncate(r4, 0x2007fff) sendfile(r3, r4, 0x0, 0x1000000201005) r6 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x195) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff6, 0x11, r6, 0x0) read(r6, &(0x7f0000000180)=""/19, 0xfffffe47) ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f0000000000)) 5.567915767s ago: executing program 2 (id=546): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000c40)='./bus\x00', 0x0, &(0x7f00000059c0)=ANY=[], 0x5, 0x1e2, &(0x7f00000006c0)="$eJxiGAWjYBSMWPDo4dcHvU4WIToMDAw8DCoM7FDxF8wINUxI6u/MLNWeaus6Z9PtpUfy+Gp3IWR2ffQJI91+kNkHHJkZSqD8/////0eWV4HSIQxMIDYLTFwTSoczMDKoQtkJDEwMMCekMjAyRELZWUjsfE4oIydVLzk/JyUtMyfVAEQYgggjEGGMbD/IwreNjAwpDAwMHFD3MSLJF1dWZSfm5KQWoTNY/8PswZAilYEv/MDuc2RisEUKP1CYRnQ0N4L4elBxA0j4gYEhAxODIZRtzMDIEAxlWzCwM+jp6SGCBMn/UiwI85mJ8f9gYAjqDgpn0JvByMDQgCzCQLI5/6HFAE1cyD7QyYYRXQSUoeEiYm93ncbU9ZRy2xkHKsuACy4GBgYMqUtclJnMBvURVjWI8omRhYFBHal8YkEU4wz6JbkF+sWVVbqZuYnpqempeUZGxmYGJgYGpkb64IIIQuIp/zjA5RMXkvmsSPLIdRcbIxtDRWJJSZFhBQNDSZEhnG8EIZFK3OBt+W/g+t82MjFoKEPMAEUi2Nvs2N3DCMFIshrMOB0/CkbBKBgFo2AUjIJRMApGwSgYBaNgFIyCUTAKRsEoGAUkAXkGRvAoKHSi6j8OYBQAVg0IAAD///m+YA0=") r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=@ipv6_getaddrlabel={0x1c}, 0x1c}}, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/tty/ldiscs\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0}, 0x10) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) preadv(r2, &(0x7f0000000700)=[{&(0x7f0000000380)=""/88, 0x58}], 0x1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="400000001400b59500000000000000000a00", @ANYRES32=r6, @ANYBLOB="14000100ff00000000000000000000000000000114000600001b34000000000000000000"], 0x40}}, 0x0) syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x0, 0x0, &(0x7f0000000000)) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="34000000110001000000000000000000fc0100000000000000000000000000000000001500"/52], 0x34}}, 0x0) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x59, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) syz_usb_control_io$hid(r8, &(0x7f00000006c0)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@global=@item_012={0x1, 0x1, 0x0, "cd"}, @local=@item_012={0x2, 0x2, 0x0, "4d04"}]}}, 0x0}, 0x0) 3.919114441s ago: executing program 4 (id=550): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x26, 0x4, 0x0, 0x0, 0x98, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x1c, 0x0, 0x0, 0x0, [0x401, 0x1000, 0x5, 0x0, 0x0, 0x0]}, @timestamp_prespec={0x44, 0x34, 0xc0, 0x3, 0x0, [{@multicast1}, {@dev, 0x659}, {@broadcast, 0x8000}, {@empty}, {@multicast2, 0xffd200}, {@private}]}, @timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x4, [{@multicast2}, {@private=0xa010101}, {@rand_addr, 0x3}, {@broadcast}]}, @noop, @noop, @lsrr={0x83, 0xb, 0x0, [@private, @rand_addr]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 3.588957518s ago: executing program 0 (id=551): rt_sigaction(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x8, &(0x7f0000000200)) 3.532178382s ago: executing program 3 (id=498): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x34, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}]}, 0x34}}, 0x0) 3.368148406s ago: executing program 3 (id=552): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=@acquire={0x128, 0x17, 0x1, 0x0, 0x0, {{@in6=@remote}, @in6=@private0, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@local}, {{@in=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x3}}}, 0x128}}, 0x0) 3.206021389s ago: executing program 0 (id=553): syz_mount_image$f2fs(&(0x7f0000000080), &(0x7f0000000000)='./bus\x00', 0x210001, &(0x7f0000000100)={[{@inline_dentry}, {@alloc_mode_def}, {@discard}, {@jqfmt_vfsold}, {@usrjquota={'usrjquota', 0x3d, '!'}}, {@lazytime}, {@norecovery}, {@disable_ext_identify}, {@inline_xattr}, {@adaptive_mode}]}, 0x1, 0x550e, &(0x7f000000ae80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xf502, 0x0) 3.19787576s ago: executing program 3 (id=554): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000580)}, {&(0x7f0000000ac0)="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", 0xfffffd6b}, {&(0x7f0000000640)="74a892e6122d0e9da29a40f6060049f3ab51554d", 0x14}], 0x3, &(0x7f00000005c0)=ANY=[], 0x158}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x8) 3.040683582s ago: executing program 4 (id=555): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x20, 0x7, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x0) 2.811383721s ago: executing program 4 (id=556): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) fchdir(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) dup3(r1, r0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000202070d300000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) dup2(r3, r2) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x400001, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4], 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0xc906, &(0x7f0000000940)={[{@nobarrier}, {@noblock_validity}, {@mblk_io_submit}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@errors_remount}, {@init_itable}, {@noauto_da_alloc}, {@resgid={'resgid', 0x3d, 0xee01}}, {@resgid={'resgid', 0x3d, 0xee00}, 0x32}]}, 0x1e, 0x4e1, &(0x7f0000000a40)="$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") r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) close(r6) r7 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x202, &(0x7f00000001c0)=0x0) syz_emit_ethernet(0x7e, &(0x7f0000001a40)={@random="0f539af21094", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "1200b0", 0x48, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "277382", 0x0, 0x2c, 0x0, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [@hopopts={0x2f, 0x1, '\x00', [@calipso={0x7, 0x8, {0x22ebffff, 0x0, 0xfc}}]}]}}}}}}}, 0x0) io_submit(r8, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030003, 0x0, 0x1, 0x0, r7, &(0x7f0000000000), 0x16000}]) 2.666128573s ago: executing program 3 (id=557): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f00000005c0)=[{}, {}, {}, {}, {0x3}]}, 0x90) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000003280)={'wlan0\x00', &(0x7f0000000500)=@ethtool_rxnfc={0x0, 0x0, 0x0, {0x0, @esp_ip4_spec={@multicast1, @multicast1}, {0x0, @local}, @ah_ip6_spec={@local, @local}, {0x0, @broadcast}}}}) 2.466121619s ago: executing program 1 (id=501): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = getpgrp(0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000280)='./file0\x00', 0x1c30d, &(0x7f00000001c0)=ANY=[@ANYBLOB="756e695f786c6174653d312c73686f72746e616d653d77696e39352c756e695f786c6174653d312c646f733178666c6f7070792c757466383d312c757466383d302c73686f72746e616d653d77696e6e742c73686f72746e616d653d6c6f7765722c756e695f786c6174653d312c009aaa21b5084a2ac75af86d4f32151f53248eb7ec539fff0bd244bb2559d414561138c259cecc8dccf4475a9e05a9b714d4939bee6cf0f1e7a889f8100c41c843380270c20100000000000000c5"], 0x0, 0x24b, &(0x7f0000000700)="$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") kcmp(0x0, r2, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f00000003c0)=""/55, 0xfffffffffffffc69}, {0x0}], 0x2, &(0x7f0000000440)=[{0x0}], 0x1, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000400)='memory.oom.group\x00', 0x2, 0x0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000380), 0x0, 0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000001000028170020f0ca269dbc33cd947e091ea7540000fa4d0000000000000000000000af5419ac6a182f"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000090000050000000000000000c50000000e800000850000000e00000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000002c0)='contention_end\x00', r3}, 0x10) syz_mount_image$vfat(&(0x7f0000003880), &(0x7f0000000200)='./file1\x00', 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="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", @ANYRES64=r1], 0x86, 0x2a9, &(0x7f0000000c00)="$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") syz_emit_ethernet(0xae, &(0x7f0000000000)=ANY=[@ANYBLOB="8bb8634189350180c2"], 0x0) open(&(0x7f0000000040)='./bus\x00', 0x14507e, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext2\x00', &(0x7f0000000240)='./file0\x00', 0x10c74c2, &(0x7f00000001c0), 0x1, 0x778, &(0x7f0000000ec0)="$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") dup(r5) r6 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000000)={0x0, r6}) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 2.391913065s ago: executing program 3 (id=558): r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) syz_usb_control_io$hid(r0, &(0x7f0000001440)={0x24, 0x0, 0x0, &(0x7f00000013c0)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0}, 0x90) syz_usb_connect$cdc_ecm(0x1, 0x63, &(0x7f0000000200)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x51, 0x1, 0x1, 0xd7, 0x10, 0x20, [{{0x9, 0x4, 0x0, 0xd2, 0x3, 0x2, 0x6, 0x0, 0x4, {{0x8, 0x24, 0x6, 0x0, 0x0, '\\7\a'}, {0x5, 0x24, 0x0, 0xffe0}, {0xd, 0x24, 0xf, 0x1, 0xdd, 0x5, 0x200, 0x24}, [@country_functional={0xa, 0x24, 0x7, 0x6, 0x3, [0x9, 0x7f]}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x200, 0x7, 0xff, 0x3f}}], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x7, 0x1, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x9, 0x8e, 0xff}}}}}]}}]}}, &(0x7f0000000980)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x300, 0x9, 0x4, 0x0, 0x8}, 0x1d, &(0x7f00000000c0)={0x5, 0xf, 0x1d, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x8, 0xb, 0xd, 0x9}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x5, 0x3, 0x3, 0x8000}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0x5, 0xf, 0x7}]}, 0x6, [{0x0, 0x0}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0xfcff}}, {0x7e, &(0x7f00000004c0)=@string={0x7e, 0x3, "c4e540cc08226e752f4342892afc0fb9117716c7b65ff1951b078c2a9af7d13ede502c97d3cf71fa5367ffa330bf60023b4305090cc26dd37a17d2b7be56c7e549a73b19c89154c3584ce6bd95bfd907b836cbca4afe7aee09591ef65fd5dcfb0f82b539be0730fbf039d8010c88e5f6582a9dd4b1d0e89c795839a7"}}, {0x2, &(0x7f0000000540)=@string={0x2}}, {0x4, &(0x7f0000000280)=@lang_id={0x4}}, {0xfe, &(0x7f0000000880)=@string={0xfe, 0x3, "0e64b839ff4094629d16a8acec93c738befea85dee684eef98324729e1efa3d192a8a385c50ee61bad11615fa3b56ae1011d408bbc93988eb8a8494583ae463ac4a105df2fd492dc0fb31138356ce1f98f5920631a510484e8dff9a52f61b3ac7982fe55abd387d3f884387d2d1ab1f8fe5801fbca84993df2104f2d922f3e07a3853c6230a320c4fbce8aa1fe3894fa5dc0fcc036826754f0015c1403c62afdc863850eca35d3050ccf6ed6d823ef1c6c5e4b7e024eea6dcf14591d09d4a52065e3009c06dbb597712bbfad9ba935add5e296eb47dc7517fbbfa91f91170940b78d68383aea30b4e835ccd6600fe2886d212f6aa1a664b218ea8684"}}]}) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000000380)={[{@test_dummy_encryption}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x84}}, {@stripe={'stripe', 0x3d, 0x7}}, {@commit={'commit', 0x3d, 0x5}}, {@orlov}, {@barrier_val={'barrier', 0x3d, 0x5}}, {@max_batch_time}, {@data_err_abort}]}, 0xd, 0x5d8, &(0x7f0000000c00)="$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") mknod(0x0, 0x1000, 0x0) fspick(0xffffffffffffff9c, 0x0, 0x0) open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) open(&(0x7f00000002c0)='./bus\x00', 0x60102, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x0, 0x0, 0x4, 0x0, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000070018110000", @ANYRES32=r3], 0x0, 0x0, 0x4c}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001500)={&(0x7f00000014c0)='fscache_acquire\x00'}, 0x10) syz_usb_control_io$hid(r0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000001480), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 2.165798634s ago: executing program 2 (id=559): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./file2\x00', 0x0, &(0x7f0000000580)={[{@noinline_xattr}, {@four_active_logs}, {@four_active_logs}, {@extent_cache}, {@noinline_data}, {@inline_dentry}, {@extent_cache}, {@jqfmt_vfsv1}, {@flush_merge}, {@noextent_cache}]}, 0x1e, 0x552d, &(0x7f000000abc0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) utimensat(r0, 0x0, &(0x7f0000000040)={{0x0, 0x2710}, {0x0, 0x3ffffffe}}, 0x0) 1.424013684s ago: executing program 4 (id=560): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = fsopen(&(0x7f0000000000)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) renameat2(r2, &(0x7f0000000140)='./file0/file0\x00', 0xffffffffffffffff, 0x0, 0x0) r3 = fsopen(&(0x7f0000000000)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) renameat2(r4, &(0x7f0000000200)='./bus\x00', r4, &(0x7f0000000280)='./file0\x00', 0x1) sendmmsg$inet(r0, &(0x7f0000006c80)=[{{&(0x7f0000000140)={0x2, 0x4e20, @loopback}, 0x10, 0x0}}], 0x1, 0x4008000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) dup3(r5, r0, 0x0) getdents(0xffffffffffffffff, &(0x7f0000000640)=""/4096, 0x1000) openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x1c9040, 0x0) 1.145311517s ago: executing program 4 (id=561): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000002100000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0x98, &(0x7f0000000000)=""/152}, 0x80) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) accept$nfc_llcp(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0xfffffda9, &(0x7f00000002c0)=0x2) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r6, r1, 0x7}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r6, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20) sendmmsg$inet6(r0, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000ac0)="b0", 0x7ffff000}], 0x11}}], 0x2, 0x0) 1.066861683s ago: executing program 0 (id=562): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x34, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}]}, 0x34}}, 0x0) 756.546459ms ago: executing program 0 (id=563): rt_sigaction(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x8, &(0x7f0000000200)) 0s ago: executing program 4 (id=564): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=@acquire={0x128, 0x17, 0x1, 0x0, 0x0, {{@in6=@remote}, @in6=@private0, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@local}, {{@in=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x3}}}, 0x128}}, 0x0) kernel console output (not intermixed with test programs): or (3550) used greatest stack depth: 19864 bytes left [ 104.065878][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 104.111000][ T3982] device veth1_vlan entered promiscuous mode [ 104.158250][ T4390] netlink: 'syz.3.204': attribute type 6 has an invalid length. [ 104.198681][ T4390] netlink: 'syz.3.204': attribute type 30 has an invalid length. [ 104.237611][ T3865] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 104.247347][ T3865] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 104.275350][ T3865] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 104.304235][ T3865] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 104.322108][ T3982] device veth0_macvtap entered promiscuous mode [ 104.341374][ T3982] device veth1_macvtap entered promiscuous mode [ 104.415200][ T3982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.493025][ T3982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.502880][ T3982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.533237][ T26] audit: type=1326 audit(1721844263.970:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4394 comm="syz.3.208" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcf5ed75f19 code=0x0 [ 104.608298][ T3982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.623641][ T3982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.653025][ T3982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.662880][ T3982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.695161][ T3982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.703928][ T3564] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 104.715251][ T3564] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 104.723255][ T3564] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 104.731849][ T3564] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 104.739888][ T3564] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 104.747741][ T3564] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 104.755585][ T3982] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.798935][ T4383] loop2: detected capacity change from 0 to 32768 [ 104.801256][ T4383] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 scanned by syz.2.200 (4383) [ 104.807107][ T4004] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 104.808472][ T4004] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 104.809079][ T4004] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 104.809650][ T4004] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 104.831789][ T4383] BTRFS info (device loop2): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 104.831903][ T4383] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 104.831955][ T4383] BTRFS info (device loop2): using free space tree [ 104.835256][ T3982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.835286][ T3982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.835301][ T3982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.835313][ T3982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.835329][ T3982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.835341][ T3982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.835358][ T3982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.835374][ T3982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.837944][ T3982] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.841220][ T3982] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.841292][ T3982] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.841332][ T3982] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.841372][ T3982] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.886320][ T4406] loop0: detected capacity change from 0 to 128 [ 104.915165][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 104.915828][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 105.724611][ T102] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.921532][ T3631] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.970551][ T102] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.985511][ T4383] BTRFS info (device loop2): enabling ssd optimizations [ 106.002323][ T3631] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.040730][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 106.193521][ T102] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.216226][ T3555] BTRFS info (device loop2): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 106.236911][ T3690] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.248563][ T3690] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.317930][ T4431] loop0: detected capacity change from 0 to 4096 [ 106.398838][ T4431] ntfs: (device loop0): ntfs_attr_find(): Inode is corrupt. Run chkdsk. [ 106.415423][ T102] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.434293][ T4431] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 106.453996][ T4431] ntfs: (device loop0): load_system_files(): Failed to load $MFTMirr. Will not be able to remount read-write. Run ntfsfix and/or chkdsk. [ 106.479723][ T4005] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 106.503652][ T4431] ntfs: (device loop0): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 106.560153][ T4431] ntfs: (device loop0): load_system_files(): Failed to load $Volume. [ 106.569093][ T4442] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 106.570230][ T4431] ntfs: (device loop0): ntfs_fill_super(): Failed to load system files. [ 106.762819][ T4398] chnl_net:caif_netlink_parms(): no params data found [ 106.793212][ T3564] Bluetooth: hci0: command tx timeout [ 107.617598][ T4455] loop3: detected capacity change from 0 to 2048 [ 107.627541][ T4431] device syzkaller0 entered promiscuous mode [ 107.683510][ T4455] EXT4-fs (loop3): unsupported inode size: 32768 [ 107.720443][ T4455] EXT4-fs (loop3): blocksize: 2048 [ 107.797799][ T4466] loop2: detected capacity change from 0 to 256 [ 107.991990][ T4455] Zero length message leads to an empty skb [ 108.099899][ T4477] loop2: detected capacity change from 0 to 128 [ 109.082758][ T3563] Bluetooth: hci0: command tx timeout [ 109.231534][ T26] audit: type=1326 audit(1721844268.670:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4487 comm="syz.3.221" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcf5ed75f19 code=0x0 [ 110.233147][ T3563] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 110.241891][ T3563] Bluetooth: hci1: Injecting HCI hardware error event [ 110.250189][ T3563] Bluetooth: hci1: hardware error 0x00 [ 110.260359][ T4493] loop3: detected capacity change from 0 to 128 [ 110.522068][ T4503] loop2: detected capacity change from 0 to 128 [ 110.614966][ T4398] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.622129][ T4398] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.683693][ T4498] loop3: detected capacity change from 0 to 8 [ 110.705265][ T4398] device bridge_slave_0 entered promiscuous mode [ 110.783285][ T4398] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.792275][ T4398] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.835735][ T4398] device bridge_slave_1 entered promiscuous mode [ 110.881967][ T4511] syz.2.224: attempt to access beyond end of device [ 110.881967][ T4511] loop2: rw=2049, sector=145, nr_sectors = 744 limit=128 [ 110.916753][ T4509] loop0: detected capacity change from 0 to 2048 [ 110.991288][ T4509] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 111.024288][ T4398] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 111.048425][ T4398] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 111.114129][ T3564] Bluetooth: hci0: command tx timeout [ 111.142111][ T9] kworker/u4:0: attempt to access beyond end of device [ 111.142111][ T9] loop2: rw=1, sector=209, nr_sectors = 16 limit=128 [ 111.358663][ T4398] team0: Port device team_slave_0 added [ 111.485879][ T4398] team0: Port device team_slave_1 added [ 111.610708][ T4530] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 111.647601][ T4398] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 111.687019][ T4398] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.822713][ T4398] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 111.880461][ T26] audit: type=1326 audit(1721844271.320:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4532 comm="syz.2.232" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8d22775f19 code=0x0 [ 112.026927][ T4398] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 112.040542][ T4398] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.072257][ T4398] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 112.444088][ T4398] device hsr_slave_0 entered promiscuous mode [ 112.451421][ T4398] device hsr_slave_1 entered promiscuous mode [ 112.465166][ T4398] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 112.487845][ T3563] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 112.496653][ T4398] Cannot create hsr debugfs directory [ 112.621345][ T4523] loop4: detected capacity change from 0 to 32768 [ 113.411309][ T3563] Bluetooth: hci0: command tx timeout [ 113.445055][ T4523] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.230 (4523) [ 113.529172][ T4548] netlink: zone id is out of range [ 113.537015][ T4548] netlink: zone id is out of range [ 113.544249][ T4548] netlink: zone id is out of range [ 113.549507][ T4548] netlink: zone id is out of range [ 113.554899][ T4548] netlink: zone id is out of range [ 113.560149][ T4548] netlink: zone id is out of range [ 113.565500][ T4548] netlink: zone id is out of range [ 113.570757][ T4548] netlink: zone id is out of range [ 113.576323][ T4548] netlink: zone id is out of range [ 113.581617][ T4548] netlink: zone id is out of range [ 113.694442][ T4523] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 113.751848][ T4550] netlink: 8 bytes leftover after parsing attributes in process `syz.0.236'. [ 113.778884][ T4523] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 113.793646][ T4550] netlink: 8 bytes leftover after parsing attributes in process `syz.0.236'. [ 113.813976][ T4523] BTRFS info (device loop4): setting nodatacow, compression disabled [ 113.822327][ T102] device hsr_slave_0 left promiscuous mode [ 113.850261][ T102] device hsr_slave_1 left promiscuous mode [ 113.919158][ T102] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 113.929002][ T4523] BTRFS info (device loop4): turning on flush-on-commit [ 114.243416][ T4523] BTRFS info (device loop4): enabling auto defrag [ 114.260213][ T4523] BTRFS info (device loop4): max_inline at 0 [ 114.293261][ T102] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 114.308560][ T4523] BTRFS info (device loop4): using free space tree [ 114.357781][ T4558] loop2: detected capacity change from 0 to 32768 [ 114.369214][ T4558] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.238 (4558) [ 114.487159][ T102] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 114.497138][ T4558] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 114.497590][ T4523] BTRFS error (device loop4): open_ctree failed [ 114.507470][ T4558] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 114.523290][ T4558] BTRFS info (device loop2): force clearing of disk cache [ 114.523973][ T102] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 114.530409][ T4558] BTRFS info (device loop2): using free space tree [ 114.531964][ T4579] loop3: detected capacity change from 0 to 128 [ 114.605628][ T102] device bridge_slave_1 left promiscuous mode [ 114.640241][ T102] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.799156][ T102] device bridge_slave_0 left promiscuous mode [ 114.841153][ T4579] syz.3.239: attempt to access beyond end of device [ 114.841153][ T4579] loop3: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 115.016140][ T102] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.100629][ T4558] BTRFS info (device loop2): enabling ssd optimizations [ 115.113301][ T4558] BTRFS info (device loop2): rebuilding free space tree [ 115.435191][ T3555] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 115.479353][ T3690] kworker/u4:10: attempt to access beyond end of device [ 115.479353][ T3690] loop3: rw=1, sector=209, nr_sectors = 16 limit=128 [ 115.529033][ T102] device veth1_macvtap left promiscuous mode [ 115.542202][ T102] device veth0_macvtap left promiscuous mode [ 115.632504][ T4613] loop4: detected capacity change from 0 to 128 [ 115.650328][ T102] device veth1_vlan left promiscuous mode [ 115.813091][ T102] device veth0_vlan left promiscuous mode [ 115.935193][ T4621] loop0: detected capacity change from 0 to 2048 [ 116.146090][ T4621] EXT4-fs (loop0): unsupported inode size: 32768 [ 116.152607][ T4621] EXT4-fs (loop0): blocksize: 2048 [ 116.606683][ T4622] loop2: detected capacity change from 0 to 2048 [ 116.686450][ T4622] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 117.112845][ T4641] loop3: detected capacity change from 0 to 128 [ 117.368513][ T4646] loop3: detected capacity change from 0 to 8 [ 117.503122][ T4615] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 117.763214][ T4615] usb 1-1: Using ep0 maxpacket: 8 [ 117.903249][ T4615] usb 1-1: unable to get BOS descriptor or descriptor too short [ 117.963201][ T4615] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 117.977045][ T4615] usb 1-1: can't read configurations, error -71 [ 117.979827][ T4645] loop2: detected capacity change from 0 to 32768 [ 118.005006][ T4645] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.250 (4645) [ 118.041124][ T4645] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 118.053615][ T102] team0 (unregistering): Port device team_slave_1 removed [ 118.072032][ T4645] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 118.082352][ T4645] BTRFS info (device loop2): setting nodatacow, compression disabled [ 118.097143][ T4645] BTRFS info (device loop2): turning on flush-on-commit [ 118.109380][ T4645] BTRFS info (device loop2): enabling auto defrag [ 118.120852][ T4645] BTRFS info (device loop2): max_inline at 0 [ 118.129059][ T4645] BTRFS info (device loop2): using free space tree [ 118.138527][ T102] team0 (unregistering): Port device team_slave_0 removed [ 118.218993][ T102] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 118.288980][ T4645] BTRFS info (device loop2): enabling ssd optimizations [ 118.326807][ T102] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 118.427785][ T3555] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 118.988552][ T4669] loop3: detected capacity change from 0 to 512 [ 119.021470][ T4669] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 119.044918][ T4669] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 119.082241][ T102] bond0 (unregistering): Released all slaves [ 119.091078][ T4669] EXT4-fs (loop3): 1 orphan inode deleted [ 119.122376][ T4669] EXT4-fs (loop3): 1 truncate cleaned up [ 119.142139][ T4669] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 119.422881][ T4678] loop2: detected capacity change from 0 to 512 [ 119.501753][ T4678] EXT4-fs: Ignoring removed oldalloc option [ 119.544083][ T4678] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 119.630149][ T4687] loop4: detected capacity change from 0 to 512 [ 119.635774][ T4678] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2810: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 119.656448][ T4678] EXT4-fs (loop2): 1 truncate cleaned up [ 119.662156][ T4678] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 119.667889][ T4690] PKCS7: Unknown OID: [4] 5.25.43183(bad) [ 119.678316][ T4690] PKCS7: Only support pkcs7_signedData type [ 119.706961][ T4687] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 119.749494][ T3552] EXT4-fs (loop3): unmounting filesystem. [ 119.801092][ T4687] EXT4-fs error (device loop4): ext4_orphan_get:1396: inode #15: comm syz.4.258: casefold flag without casefold feature [ 119.875348][ T4687] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: inode #12: comm syz.4.258: missing EA_INODE flag [ 119.905923][ T4687] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.258: error while reading EA inode 12 err=-117 [ 119.985454][ T4687] EXT4-fs (loop4): 1 orphan inode deleted [ 119.991419][ T4687] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 120.089744][ T3555] EXT4-fs (loop2): unmounting filesystem. [ 120.242076][ T3982] EXT4-fs (loop4): unmounting filesystem. [ 120.276440][ T4703] loop0: detected capacity change from 0 to 128 [ 120.373762][ T4711] loop4: detected capacity change from 0 to 128 [ 120.643264][ T4093] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 120.983232][ T4093] usb 3-1: Using ep0 maxpacket: 8 [ 121.423230][ T4093] usb 3-1: unable to get BOS descriptor or descriptor too short [ 121.523280][ T4093] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 121.531292][ T4093] usb 3-1: can't read configurations, error -71 [ 121.544845][ T4718] loop0: detected capacity change from 0 to 8 [ 121.774658][ T4398] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 121.819111][ T4398] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 121.852775][ T4398] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 121.934529][ T4398] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 122.612882][ T4735] usb usb9: usbfs: process 4735 (syz.2.269) did not claim interface 0 before use [ 122.622446][ T4735] usb usb9: selecting invalid altsetting 21783 [ 122.638778][ T14] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 123.274423][ T4398] 8021q: adding VLAN 0 to HW filter on device bond0 [ 123.353800][ T4739] loop2: detected capacity change from 0 to 512 [ 123.354327][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 123.393049][ T14] usb 4-1: Using ep0 maxpacket: 8 [ 123.398952][ T4739] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 123.399401][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 123.477802][ T4398] 8021q: adding VLAN 0 to HW filter on device team0 [ 123.498129][ T4739] EXT4-fs (loop2): 1 orphan inode deleted [ 123.513261][ T14] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 123.523293][ T4739] EXT4-fs (loop2): 1 truncate cleaned up [ 123.531197][ T4739] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 123.554745][ T14] usb 4-1: config 179 has no interface number 0 [ 123.601308][ T4743] PKCS7: Unknown OID: [4] 5.25.43183(bad) [ 123.601449][ T14] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 123.641637][ T4743] PKCS7: Only support pkcs7_signedData type [ 123.679829][ T4398] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 123.693125][ T14] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1029, setting to 1024 [ 123.715712][ T4398] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 123.739604][ T14] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 123.778099][ T14] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 123.818941][ T14] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 123.860978][ T14] usb 4-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 123.907728][ T14] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.934338][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 123.952258][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 123.959789][ T4748] loop4: detected capacity change from 0 to 512 [ 123.973493][ T4730] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 124.001828][ T14] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input12 [ 124.041475][ T3592] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.048665][ T3592] bridge0: port 1(bridge_slave_0) entered forwarding state [ 124.069984][ T4748] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 124.095786][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 124.136263][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 124.148294][ T4748] EXT4-fs error (device loop4): ext4_orphan_get:1396: inode #15: comm syz.4.273: casefold flag without casefold feature [ 124.149182][ T3592] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.168042][ T3592] bridge0: port 2(bridge_slave_1) entered forwarding state [ 124.178621][ T4748] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: inode #12: comm syz.4.273: missing EA_INODE flag [ 124.206671][ T4748] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.273: error while reading EA inode 12 err=-117 [ 124.239956][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 124.273310][ T4748] EXT4-fs (loop4): 1 orphan inode deleted [ 124.311124][ T4748] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 124.333477][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 124.403430][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 124.412392][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 124.448620][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 124.476852][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 124.496264][ T4757] loop0: detected capacity change from 0 to 128 [ 124.503693][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 124.512237][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 124.546530][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 124.563681][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 124.586729][ T4004] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 124.611169][ T4004] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 124.629624][ T4004] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 124.739982][ T14] usb 4-1: USB disconnect, device number 2 [ 124.753049][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 124.807132][ T3982] EXT4-fs (loop4): unmounting filesystem. [ 125.498861][ T3555] EXT4-fs (loop2): unmounting filesystem. [ 125.539418][ T14] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 125.620137][ T4771] loop3: detected capacity change from 0 to 128 [ 125.812135][ T4771] syz.3.277: attempt to access beyond end of device [ 125.812135][ T4771] loop3: rw=2049, sector=145, nr_sectors = 320 limit=128 [ 126.022655][ T46] kworker/u4:3: attempt to access beyond end of device [ 126.022655][ T46] loop3: rw=1, sector=209, nr_sectors = 16 limit=128 [ 126.078793][ T3869] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 126.093210][ T3869] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 126.133627][ T4398] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 126.216324][ T3869] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 126.243854][ T3869] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 126.286490][ T4398] device veth0_vlan entered promiscuous mode [ 126.347566][ T4398] device veth1_vlan entered promiscuous mode [ 126.410148][ T3866] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 126.463858][ T3866] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 126.677139][ T4791] usb usb9: usbfs: process 4791 (syz.0.280) did not claim interface 0 before use [ 126.686689][ T4791] usb usb9: selecting invalid altsetting 21783 [ 127.349522][ T3866] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 127.429632][ T3862] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 127.443573][ T3862] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 127.483101][ T3862] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 127.491247][ T3862] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 127.560818][ T4798] loop2: detected capacity change from 0 to 2048 [ 127.562931][ T3862] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 127.636118][ T4398] device veth0_macvtap entered promiscuous mode [ 127.667940][ T4398] device veth1_macvtap entered promiscuous mode [ 127.714107][ T4798] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 127.764541][ T4398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.805758][ T4398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.856407][ T4398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.904591][ T4398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.941995][ T4398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.985254][ T4398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.014377][ T4398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.038692][ T4398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.059695][ T4398] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 128.100659][ T3869] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 128.112803][ T3869] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 128.143798][ T3869] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 128.169939][ T4398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 128.190793][ T4398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.210966][ T4398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 128.231864][ T4398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.259875][ T4398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 128.280698][ T4398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.302524][ T4398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 128.308435][ T4817] loop4: detected capacity change from 0 to 4096 [ 128.343051][ T4398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.363057][ T3598] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 128.377840][ T4398] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 128.407671][ T3869] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 128.428614][ T3869] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 128.455283][ T4398] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.484908][ T4398] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.533134][ T4398] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.558480][ T4398] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.609114][ T4824] loop2: detected capacity change from 0 to 128 [ 128.633819][ T3598] usb 1-1: Using ep0 maxpacket: 8 [ 128.681132][ T4817] overlayfs: upper fs does not support tmpfile. [ 128.753372][ T3598] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 128.767295][ T3598] usb 1-1: config 179 has no interface number 0 [ 128.775976][ T4817] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 128.786920][ T3598] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 128.805391][ T3690] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.820734][ T3690] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.831485][ T4827] syz.2.289: attempt to access beyond end of device [ 128.831485][ T4827] loop2: rw=2049, sector=145, nr_sectors = 648 limit=128 [ 128.834279][ T3598] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1029, setting to 1024 [ 128.871713][ T4005] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 128.912071][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.932557][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.933637][ T3598] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 128.965328][ T3982] ntfs3: loop4: failed to convert "0080" to macturkish [ 128.972739][ T3982] ntfs3: loop4: failed to convert name for inode 1e. [ 128.981030][ T3598] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 128.992740][ T3598] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 129.023048][ T3598] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 129.032189][ T3598] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.054397][ T46] kworker/u4:3: attempt to access beyond end of device [ 129.054397][ T46] loop2: rw=1, sector=209, nr_sectors = 16 limit=128 [ 129.064604][ T4812] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 129.083372][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 129.106631][ T3598] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input13 [ 129.356771][ T4840] loop1: detected capacity change from 0 to 1024 [ 130.016946][ T4845] usb usb9: usbfs: process 4845 (syz.3.293) did not claim interface 0 before use [ 130.026371][ T4845] usb usb9: selecting invalid altsetting 21783 [ 130.572337][ T3598] usb 1-1: USB disconnect, device number 4 [ 130.578285][ C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 130.702202][ T3598] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 130.736493][ T4851] loop2: detected capacity change from 0 to 256 [ 130.765442][ T4851] exfat: Deprecated parameter 'utf8' [ 130.814942][ T4851] exfat: Deprecated parameter 'namecase' [ 130.943406][ T4851] exfat: Deprecated parameter 'utf8' [ 130.954302][ T4851] exfat: Deprecated parameter 'namecase' [ 131.070574][ T4851] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011f41, chksum : 0xe1a8932d, utbl_chksum : 0xe619d30d) [ 131.501932][ T9] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.786545][ T4869] loop0: detected capacity change from 0 to 128 [ 131.789105][ T4871] loop2: detected capacity change from 0 to 128 [ 131.815200][ T9] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.988407][ T4874] syz.2.302: attempt to access beyond end of device [ 131.988407][ T4874] loop2: rw=2049, sector=145, nr_sectors = 440 limit=128 [ 132.746032][ T9] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.775257][ T1255] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.781562][ T1255] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.884090][ T3676] kworker/u4:9: attempt to access beyond end of device [ 132.884090][ T3676] loop2: rw=1, sector=209, nr_sectors = 16 limit=128 [ 133.108480][ T9] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.235477][ T4894] netlink: 8 bytes leftover after parsing attributes in process `syz.3.308'. [ 134.377150][ T3562] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 134.388293][ T3562] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 134.401110][ T3562] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 134.411420][ T3562] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 134.433771][ T3562] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 134.441052][ T3562] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 134.532747][ T4872] loop1: detected capacity change from 0 to 32768 [ 134.572828][ T4916] loop2: detected capacity change from 0 to 256 [ 134.592204][ T4910] loop0: detected capacity change from 0 to 1024 [ 134.593833][ T4916] exfat: Deprecated parameter 'utf8' [ 134.621160][ T4916] exfat: Deprecated parameter 'namecase' [ 134.627047][ T3592] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 134.636647][ T4916] exfat: Deprecated parameter 'utf8' [ 134.642180][ T4916] exfat: Deprecated parameter 'namecase' [ 134.673376][ T4872] XFS (loop1): DAX unsupported by block device. Turning off DAX. [ 134.700424][ T4872] XFS (loop1): Mounting V5 Filesystem [ 134.706904][ T4916] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011f41, chksum : 0xe1a8932d, utbl_chksum : 0xe619d30d) [ 134.741218][ T4872] XFS (loop1): log mount failed [ 134.886861][ T3592] usb 4-1: Using ep0 maxpacket: 8 [ 135.283313][ T3592] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 135.293671][ T3592] usb 4-1: config 179 has no interface number 0 [ 135.301158][ T3592] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 135.314279][ T3592] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1029, setting to 1024 [ 135.353115][ T3592] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 135.381071][ T3592] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 135.407477][ T3592] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 135.421241][ T3592] usb 4-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 135.430603][ T3592] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.453425][ T4904] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 135.539796][ T3592] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input14 [ 135.699799][ T4939] loop1: detected capacity change from 0 to 128 [ 135.761312][ T3592] usb 4-1: USB disconnect, device number 3 [ 135.767255][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 135.812770][ T3592] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 135.846154][ T3862] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 135.851439][ T4939] syz.1.316: attempt to access beyond end of device [ 135.851439][ T4939] loop1: rw=2049, sector=145, nr_sectors = 880 limit=128 [ 135.926308][ T4938] syz.1.316: attempt to access beyond end of device [ 135.926308][ T4938] loop1: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 135.949417][ T4939] syz.1.316: attempt to access beyond end of device [ 135.949417][ T4939] loop1: rw=0, sector=209, nr_sectors = 8 limit=128 [ 135.961439][ T4906] chnl_net:caif_netlink_parms(): no params data found [ 135.964464][ T4939] syz.1.316: attempt to access beyond end of device [ 135.964464][ T4939] loop1: rw=0, sector=209, nr_sectors = 8 limit=128 [ 135.984998][ T4939] syz.1.316: attempt to access beyond end of device [ 135.984998][ T4939] loop1: rw=0, sector=209, nr_sectors = 8 limit=128 [ 135.999564][ T4939] syz.1.316: attempt to access beyond end of device [ 135.999564][ T4939] loop1: rw=0, sector=209, nr_sectors = 8 limit=128 [ 136.154982][ C0] net_ratelimit: 139 callbacks suppressed [ 136.154999][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 136.220752][ T4906] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.233354][ T3862] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 136.257707][ T4906] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.266251][ T3862] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 136.266359][ T4906] device bridge_slave_0 entered promiscuous mode [ 136.286650][ T3862] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 136.364385][ T4906] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.383635][ T4906] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.402026][ T4962] loop3: detected capacity change from 0 to 512 [ 136.409682][ T4906] device bridge_slave_1 entered promiscuous mode [ 136.473140][ T3562] Bluetooth: hci3: command tx timeout [ 136.473415][ T3862] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 136.499120][ T3862] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.519463][ T3862] usb 1-1: Product: syz [ 136.524196][ T3862] usb 1-1: Manufacturer: syz [ 136.524463][ T4962] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 136.528790][ T3862] usb 1-1: SerialNumber: syz [ 136.585442][ T3862] cdc_ncm 1-1:1.0: skipping garbage [ 136.590717][ T3862] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 136.613552][ T4962] ext4 filesystem being mounted at /64/bus supports timestamps until 2038 (0x7fffffff) [ 136.623985][ T3862] cdc_ncm 1-1:1.0: bind() failure [ 136.649829][ T4906] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 136.671784][ T4906] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 136.930245][ T3866] usb 1-1: USB disconnect, device number 5 [ 136.980794][ T4974] netlink: 8 bytes leftover after parsing attributes in process `syz.2.321'. [ 137.783277][ T3592] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 137.847654][ T4988] loop0: detected capacity change from 0 to 256 [ 137.860531][ T4906] team0: Port device team_slave_0 added [ 137.872600][ T4988] exfat: Deprecated parameter 'utf8' [ 137.890490][ T4988] exfat: Deprecated parameter 'namecase' [ 137.911516][ T4988] exfat: Deprecated parameter 'utf8' [ 137.928316][ T4988] exfat: Deprecated parameter 'namecase' [ 137.962038][ T4988] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011f41, chksum : 0xe1a8932d, utbl_chksum : 0xe619d30d) [ 138.001440][ T4906] team0: Port device team_slave_1 added [ 138.037786][ T3592] usb 4-1: Using ep0 maxpacket: 16 [ 138.088449][ T4906] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 138.140064][ T4906] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 138.183446][ T4998] loop2: detected capacity change from 0 to 1024 [ 138.185371][ T4906] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 138.203224][ T3592] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 138.215909][ T3592] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 138.262132][ T3592] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.370411][ T3592] usb 4-1: config 0 descriptor?? [ 138.383676][ T9] device hsr_slave_0 left promiscuous mode [ 138.398857][ T9] device hsr_slave_1 left promiscuous mode [ 138.461864][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 138.544170][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 138.553187][ T3562] Bluetooth: hci3: command tx timeout [ 138.588118][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 138.789679][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 138.906010][ T4962] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.920274][ T9] device bridge_slave_1 left promiscuous mode [ 138.924426][ T4962] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.935205][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.961620][ T9] device bridge_slave_0 left promiscuous mode [ 138.981117][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.005290][ T3592] hid (null): unknown global tag 0xff [ 139.010719][ T3592] hid (null): unknown global tag 0xa5 [ 139.021843][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 139.038179][ T3592] hid (null): unknown global tag 0xd [ 139.044246][ T3592] hid (null): unknown global tag 0xc [ 139.049574][ T3592] hid (null): global environment stack underflow [ 139.062860][ T3592] hid-generic 0003:0158:0100.0001: unknown main item tag 0x1 [ 139.070779][ T3592] hid-generic 0003:0158:0100.0001: unexpected long global item [ 139.079767][ T3592] hid-generic: probe of 0003:0158:0100.0001 failed with error -22 [ 139.213679][ T9] device veth1_macvtap left promiscuous mode [ 139.220840][ T9] device veth0_macvtap left promiscuous mode [ 139.256587][ T9] device veth1_vlan left promiscuous mode [ 139.262522][ T9] device veth0_vlan left promiscuous mode [ 139.303155][ T3862] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 139.486843][ T5016] usb usb9: usbfs: process 5016 (syz.2.330) did not claim interface 0 before use [ 139.496243][ T5016] usb usb9: selecting invalid altsetting 21783 [ 139.623305][ T3862] usb 1-1: Using ep0 maxpacket: 8 [ 139.743585][ T3862] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 139.761111][ T3862] usb 1-1: config 179 has no interface number 0 [ 139.830290][ T3862] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 140.023618][ T3862] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1029, setting to 1024 [ 140.035417][ T3862] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 140.048252][ T3862] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 140.060172][ T3862] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 140.074904][ T3862] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 140.094036][ T3862] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.153592][ T5008] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 140.197466][ T3862] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input15 [ 140.213966][ T14] usb 4-1: USB disconnect, device number 4 [ 140.378715][ T3552] EXT4-fs (loop3): unmounting filesystem. [ 140.480462][ T3592] usb 1-1: USB disconnect, device number 6 [ 140.674364][ T3562] Bluetooth: hci3: command tx timeout [ 141.150486][ T3592] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 141.312278][ T26] audit: type=1326 audit(1721844300.750:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5025 comm="syz.3.337" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcf5ed75f19 code=0x0 [ 141.366894][ T26] audit: type=1326 audit(1721844300.800:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5025 comm="syz.3.337" exe="/root/syz-executor" sig=31 arch=c000003e syscall=436 compat=0 ip=0x7fcf5ed75f19 code=0x0 [ 141.885622][ T9] team0 (unregistering): Port device team_slave_1 removed [ 141.976998][ T9] team0 (unregistering): Port device team_slave_0 removed [ 142.012543][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 142.044827][ T5042] loop2: detected capacity change from 0 to 1024 [ 142.114886][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 142.713228][ T3563] Bluetooth: hci3: command tx timeout [ 144.184507][ T9] bond0 (unregistering): Released all slaves [ 144.349980][ T4906] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 144.363013][ T4906] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 144.412684][ T4906] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 144.444063][ T5018] netlink: 8 bytes leftover after parsing attributes in process `syz.1.332'. [ 144.559415][ T4906] device hsr_slave_0 entered promiscuous mode [ 144.593259][ T4906] device hsr_slave_1 entered promiscuous mode [ 144.619569][ T4906] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 144.642647][ T4906] Cannot create hsr debugfs directory [ 146.041686][ T5070] loop1: detected capacity change from 0 to 8192 [ 146.080273][ T5079] loop2: detected capacity change from 0 to 512 [ 146.124138][ T5070] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 146.173043][ T5070] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 146.184300][ T5081] loop0: detected capacity change from 0 to 2048 [ 146.207433][ T5079] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 146.215380][ T5070] REISERFS (device loop1): using ordered data mode [ 146.222905][ T5070] reiserfs: using flush barriers [ 146.236405][ T5070] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 146.267256][ T5079] ext4 filesystem being mounted at /92/file0 supports timestamps until 2038 (0x7fffffff) [ 146.319247][ T5070] REISERFS (device loop1): checking transaction log (loop1) [ 146.378982][ T5081] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 146.419215][ T5081] ext4 filesystem being mounted at /85/file0 supports timestamps until 2038 (0x7fffffff) [ 146.456034][ T5094] loop3: detected capacity change from 0 to 128 [ 146.510053][ T5070] REISERFS (device loop1): Using r5 hash to sort names [ 146.543075][ T5070] REISERFS (device loop1): using 3.5.x disk format [ 146.554561][ T5070] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 146.878852][ T5081] EXT4-fs (loop0): shut down requested (2) [ 147.066957][ T4906] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 147.129818][ T3551] EXT4-fs (loop0): unmounting filesystem. [ 147.301156][ T5070] REISERFS warning (device loop1): super-6502 reiserfs_getopt: unknown mount option "ÿÿÿÿî§<< G4š¶mÿ±â½ÆuÆÌëê0º‰wÆ2ÝK×]<ýÌàÈŒ«öWgéÛ½{XA¨Î>´LqQÞ·¸ùχ [ 147.301156][ T5070] ðOÉQ±•Çý6ÿÛÐb" [ 147.303299][ T5101] netlink: 8 bytes leftover after parsing attributes in process `syz.3.355'. [ 147.685546][ T4906] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 147.758806][ T4906] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 147.911589][ T4906] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 148.824340][ T3555] EXT4-fs (loop2): unmounting filesystem. [ 148.860436][ T5112] loop3: detected capacity change from 0 to 64 [ 149.018114][ T5112] overlayfs: filesystem on './file0' not supported [ 149.114525][ T5117] loop0: detected capacity change from 0 to 64 [ 149.155691][ T4906] 8021q: adding VLAN 0 to HW filter on device bond0 [ 149.220069][ T4615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 149.245653][ T4615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 149.253594][ T5117] hfs: request for non-existent node 237 in B*Tree [ 149.267723][ T4906] 8021q: adding VLAN 0 to HW filter on device team0 [ 149.276014][ T5117] hfs: request for non-existent node 237 in B*Tree [ 149.300985][ T4615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 149.303190][ T3598] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 149.313935][ T4615] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 149.358847][ T4615] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.366091][ T4615] bridge0: port 1(bridge_slave_0) entered forwarding state [ 149.407221][ T4005] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 149.422607][ T4005] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 149.439100][ T5121] hfs: request for non-existent node 237 in B*Tree [ 149.457006][ T5121] hfs: request for non-existent node 237 in B*Tree [ 149.464558][ T4005] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 149.486894][ T5123] hfs: request for non-existent node 237 in B*Tree [ 149.495849][ T4005] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.502999][ T4005] bridge0: port 2(bridge_slave_1) entered forwarding state [ 149.520284][ T5123] hfs: request for non-existent node 237 in B*Tree [ 149.531541][ T4005] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 149.551793][ T4005] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 149.572525][ T4005] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 149.597223][ T4005] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 149.603109][ T3598] usb 3-1: Using ep0 maxpacket: 32 [ 149.633727][ T38] hfs: request for non-existent node 237 in B*Tree [ 149.652769][ T38] hfs: request for non-existent node 237 in B*Tree [ 149.691045][ T4615] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 149.705673][ T4615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 149.721676][ T4615] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 149.731802][ T4615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 149.733148][ T3598] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 149.745962][ T4615] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 149.785851][ T4615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 149.796526][ T5136] loop3: detected capacity change from 0 to 128 [ 149.805862][ T4615] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 149.825621][ T5136] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 149.855607][ T4906] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 149.901555][ T5136] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 149.963332][ T3598] usb 3-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb [ 149.988988][ T3598] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.031001][ T3598] usb 3-1: Product: syz [ 150.048764][ T3598] usb 3-1: Manufacturer: syz [ 150.060199][ T5145] loop0: detected capacity change from 0 to 128 [ 150.088819][ T3598] usb 3-1: SerialNumber: syz [ 150.123280][ T3598] usb 3-1: config 0 descriptor?? [ 150.164847][ T3598] usbtouchscreen: probe of 3-1:0.0 failed with error -12 [ 150.474994][ T3598] usb 3-1: USB disconnect, device number 5 [ 150.519899][ T5158] loop3: detected capacity change from 0 to 512 [ 150.596146][ T4005] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 150.613730][ T4005] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 150.632611][ T5158] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 150.634941][ T4906] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 150.661612][ T5158] ext4 filesystem being mounted at /74/file0 supports timestamps until 2038 (0x7fffffff) [ 150.777297][ T5161] loop1: detected capacity change from 0 to 8192 [ 150.925003][ T5161] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 150.943358][ T5169] loop0: detected capacity change from 0 to 64 [ 150.957649][ T5161] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 150.977890][ T5161] REISERFS (device loop1): using ordered data mode [ 151.011564][ T5161] reiserfs: using flush barriers [ 151.017905][ T5161] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 151.133753][ T5161] REISERFS (device loop1): checking transaction log (loop1) [ 151.166767][ T5169] overlayfs: filesystem on './file0' not supported [ 151.216977][ T5161] REISERFS (device loop1): Using r5 hash to sort names [ 151.278871][ T3552] EXT4-fs (loop3): unmounting filesystem. [ 151.283397][ T5161] REISERFS (device loop1): using 3.5.x disk format [ 151.291425][ T5161] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 151.454071][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 151.468431][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 151.560239][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 151.608300][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 151.629284][ T4906] device veth0_vlan entered promiscuous mode [ 151.646196][ T4615] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 152.178271][ T5161] REISERFS warning (device loop1): super-6502 reiserfs_getopt: unknown mount option "ÿÿÿÿî§<< G4š¶mÿ±â½ÆuÆÌëê0º‰wÆ2ÝK×]<ýÌàÈŒ«öWgéÛ½{XA¨Î>´LqQÞ·¸ùχ [ 152.178271][ T5161] ðOÉQ±•Çý6ÿÛÐb" [ 152.369182][ T4615] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 152.384480][ T4906] device veth1_vlan entered promiscuous mode [ 152.423683][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 152.431812][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 152.453820][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 152.484972][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 152.508739][ T4906] device veth0_macvtap entered promiscuous mode [ 152.554041][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 152.568368][ T4906] device veth1_macvtap entered promiscuous mode [ 152.590220][ T4906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.615816][ T4906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.643671][ T4906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.693942][ T4906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.707727][ T4906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.734851][ T4906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.744287][ T5205] loop2: detected capacity change from 0 to 64 [ 152.752936][ T4906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.779317][ T5207] loop3: detected capacity change from 0 to 512 [ 152.785931][ T4906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.811208][ T4906] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 152.813342][ T5205] overlayfs: filesystem on './file0' not supported [ 152.821094][ T4906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.840018][ T4906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.892268][ T5207] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 152.903142][ T4906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.927734][ T5207] ext4 filesystem being mounted at /78/file0 supports timestamps until 2038 (0x7fffffff) [ 152.928587][ T4906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.964929][ T4906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 153.065655][ T4906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.098479][ T4906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 153.109276][ T4906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.120856][ T4906] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 153.129415][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 153.948476][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 154.004355][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 154.085709][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 154.176759][ T4906] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.188745][ T4906] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.201830][ T4906] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.213993][ T4906] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.301802][ T5206] loop0: detected capacity change from 0 to 32768 [ 154.357272][ T5206] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.383 (5206) [ 154.719467][ T5225] usb usb9: usbfs: process 5225 (syz.2.387) did not claim interface 0 before use [ 154.728965][ T5225] usb usb9: selecting invalid altsetting 21783 [ 154.865253][ T5206] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 155.399428][ T5206] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 155.414199][ T5206] BTRFS info (device loop0): setting nodatacow, compression disabled [ 155.445699][ T5206] BTRFS info (device loop0): turning on flush-on-commit [ 155.457681][ T5206] BTRFS info (device loop0): max_inline at 0 [ 155.474071][ T3631] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.486694][ T3631] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.566719][ T5206] BTRFS info (device loop0): enabling auto defrag [ 155.632158][ T5206] BTRFS info (device loop0): max_inline at 63 [ 155.650497][ T5206] BTRFS info (device loop0): using free space tree [ 155.768022][ T4615] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 155.839470][ T4923] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.849189][ T4923] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.880531][ T5206] BTRFS error (device loop0): open_ctree failed [ 155.898230][ T4005] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 156.000154][ T3552] EXT4-fs (loop3): unmounting filesystem. [ 156.357069][ T5262] loop3: detected capacity change from 0 to 8192 [ 156.365428][ T5262] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 156.378618][ T5262] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 156.389902][ T5262] REISERFS (device loop3): using ordered data mode [ 156.409595][ T5262] reiserfs: using flush barriers [ 156.423220][ T5262] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 156.440995][ T5262] REISERFS (device loop3): checking transaction log (loop3) [ 156.460498][ T5262] REISERFS (device loop3): Using r5 hash to sort names [ 156.473348][ T5262] REISERFS (device loop3): using 3.5.x disk format [ 156.493397][ T5262] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 156.617104][ T5262] REISERFS warning (device loop3): super-6502 reiserfs_getopt: unknown mount option "ÿÿÿÿî§<< G4š¶mÿ±â½ÆuÆÌëê0º‰wÆ2ÝK×]<ýÌàÈŒ«öWgéÛ½{XA¨Î>´LqQÞ·¸ùχ [ 156.617104][ T5262] ðOÉQ±•Çý6ÿÛÐb" [ 157.165669][ T5286] loop1: detected capacity change from 0 to 2048 [ 157.230139][ T5289] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 157.536377][ T5294] loop3: detected capacity change from 0 to 512 [ 157.630928][ T5296] loop1: detected capacity change from 0 to 512 [ 157.646203][ T5294] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 157.653510][ T5284] loop2: detected capacity change from 0 to 32768 [ 157.713591][ T5294] ext4 filesystem being mounted at /82/file0 supports timestamps until 2038 (0x7fffffff) [ 157.774444][ T3552] EXT4-fs (loop3): unmounting filesystem. [ 157.800662][ T5296] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 157.838377][ T5296] ext4 filesystem being mounted at /22/file0 supports timestamps until 2038 (0x7fffffff) [ 159.299516][ T4398] EXT4-fs (loop1): unmounting filesystem. [ 159.355590][ T5327] loop4: detected capacity change from 0 to 2048 [ 159.503469][ T5335] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 159.541854][ T5337] loop0: detected capacity change from 0 to 256 [ 159.562213][ T5337] exfat: Deprecated parameter 'utf8' [ 159.597340][ T5337] exfat: Deprecated parameter 'utf8' [ 159.648867][ T5337] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 160.032848][ T5354] loop0: detected capacity change from 0 to 2048 [ 160.152106][ T4093] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 160.413208][ T4093] usb 2-1: Using ep0 maxpacket: 32 [ 160.764909][ T4093] usb 2-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=51.44 [ 160.781398][ T4093] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.801459][ T4093] usb 2-1: Product: syz [ 160.808614][ T4093] usb 2-1: Manufacturer: syz [ 160.826137][ T4093] usb 2-1: SerialNumber: syz [ 160.842911][ T4093] usb 2-1: config 0 descriptor?? [ 160.866872][ T5252] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 160.920888][ T5354] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 160.938761][ T5354] ext4 filesystem being mounted at /106/file0 supports timestamps until 2038 (0x7fffffff) [ 161.045028][ T5354] EXT4-fs (loop0): shut down requested (2) [ 161.085325][ T4093] legousbtower 2-1:0.0: interrupt endpoints not found [ 161.140944][ T5250] usb 2-1: USB disconnect, device number 2 [ 161.153077][ T5252] usb 5-1: Using ep0 maxpacket: 8 [ 161.296232][ T3551] EXT4-fs (loop0): unmounting filesystem. [ 161.305965][ T5252] usb 5-1: unable to get BOS descriptor or descriptor too short [ 162.176644][ T5252] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 162.184847][ T5252] usb 5-1: can't read configurations, error -71 [ 165.688856][ T5394] loop4: detected capacity change from 0 to 32768 [ 165.875813][ T5394] XFS (loop4): Mounting V5 Filesystem [ 166.052276][ T3866] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 166.363307][ T3866] usb 1-1: Using ep0 maxpacket: 32 [ 166.613423][ T5394] XFS (loop4): Ending clean mount [ 166.696970][ T5404] loop1: detected capacity change from 0 to 32768 [ 166.763208][ T3866] usb 1-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=51.44 [ 166.780980][ T3866] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.792657][ T3866] usb 1-1: Product: syz [ 166.799557][ T3866] usb 1-1: Manufacturer: syz [ 166.822797][ T3866] usb 1-1: SerialNumber: syz [ 166.829350][ T5422] loop2: detected capacity change from 0 to 2048 [ 166.851035][ T3866] usb 1-1: config 0 descriptor?? [ 166.860813][ T4906] XFS (loop4): Unmounting Filesystem [ 166.896873][ T3866] legousbtower 1-1:0.0: interrupt endpoints not found [ 166.973625][ T5422] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 167.017942][ T5422] ext4 filesystem being mounted at /112/file0 supports timestamps until 2038 (0x7fffffff) [ 167.139184][ T3866] usb 1-1: USB disconnect, device number 7 [ 167.355158][ T3555] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 16: comm syz-executor: path /112/file0: bad entry in directory: rec_len is smaller than minimal - offset=108, inode=646161, rec_len=0, size=4096 fake=0 [ 167.598024][ T3555] EXT4-fs (loop2): unmounting filesystem. [ 169.837864][ T5456] sched: RT throttling activated [ 170.931164][ T5451] loop4: detected capacity change from 0 to 32768 [ 171.075438][ T5476] loop3: detected capacity change from 0 to 256 [ 171.168170][ T5476] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 171.435447][ T3676] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.555931][ T3676] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.690020][ T3676] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.859957][ T3676] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.979416][ T5492] loop3: detected capacity change from 0 to 64 [ 172.052150][ T5492] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 172.111763][ T5492] MINIX-fs warning: remounting unchecked fs, running fsck is recommended [ 172.147783][ T5492] MINIX-fs warning: remounting unchecked fs, running fsck is recommended [ 173.026506][ T3562] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 173.036547][ T3562] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 173.045133][ T3562] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 173.053599][ T3562] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 173.061139][ T3562] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 173.068382][ T3564] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 173.360041][ T5501] loop2: detected capacity change from 0 to 128 [ 173.549484][ T5500] loop2: detected capacity change from 0 to 256 [ 173.691551][ T26] audit: type=1800 audit(1721844333.130:13): pid=5500 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.472" name="bus" dev="loop2" ino=1048641 res=0 errno=0 [ 173.819045][ T5517] device bond0 entered promiscuous mode [ 173.893352][ T5517] device bond_slave_0 entered promiscuous mode [ 173.928503][ T5517] device bond_slave_1 entered promiscuous mode [ 174.200717][ T5497] chnl_net:caif_netlink_parms(): no params data found [ 174.440990][ T3562] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 174.450691][ T3562] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 174.458509][ T3562] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 174.466284][ T3562] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 174.474012][ T3562] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 174.477896][ T5516] loop3: detected capacity change from 0 to 32768 [ 174.492786][ T3562] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 174.521890][ T5513] device bond0 left promiscuous mode [ 174.566593][ T5513] device bond_slave_0 left promiscuous mode [ 174.572852][ T5513] device bond_slave_1 left promiscuous mode [ 174.736699][ T5497] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.753347][ T5497] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.804464][ T5497] device bridge_slave_0 entered promiscuous mode [ 174.932296][ T5497] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.941713][ T5497] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.964146][ T5497] device bridge_slave_1 entered promiscuous mode [ 175.129042][ T5497] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 175.193259][ T3563] Bluetooth: hci2: command tx timeout [ 175.260433][ T5497] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 175.324303][ T5545] netem: change failed [ 175.853472][ T3563] Bluetooth: hci4: command 0x0406 tx timeout [ 175.911020][ T5497] team0: Port device team_slave_0 added [ 176.136138][ T5497] team0: Port device team_slave_1 added [ 176.574990][ T3563] Bluetooth: hci3: command tx timeout [ 176.871942][ T3676] device hsr_slave_0 left promiscuous mode [ 176.926589][ T3676] device hsr_slave_1 left promiscuous mode [ 177.001935][ T3676] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 177.067272][ T3676] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 177.122027][ T3676] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 177.153931][ T3676] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 177.189906][ T3676] device bridge_slave_1 left promiscuous mode [ 177.230034][ T3676] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.323128][ T3563] Bluetooth: hci2: command tx timeout [ 177.548271][ T3676] device bridge_slave_0 left promiscuous mode [ 177.593218][ T3676] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.629504][ T5574] loop2: detected capacity change from 0 to 64 [ 177.647622][ T3676] device veth1_macvtap left promiscuous mode [ 177.655182][ T3676] device veth0_macvtap left promiscuous mode [ 177.663598][ T3676] device veth1_vlan left promiscuous mode [ 177.669436][ T3676] device veth0_vlan left promiscuous mode [ 177.679679][ T5574] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 177.713866][ T5574] MINIX-fs warning: remounting unchecked fs, running fsck is recommended [ 177.744156][ T5574] MINIX-fs warning: remounting unchecked fs, running fsck is recommended [ 177.762313][ T5573] loop1: detected capacity change from 0 to 128 [ 178.009125][ T5573] loop1: detected capacity change from 0 to 256 [ 178.091262][ T26] audit: type=1800 audit(1721844337.530:14): pid=5573 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.488" name="bus" dev="loop1" ino=1048642 res=0 errno=0 [ 178.522913][ T3676] team0 (unregistering): Port device team_slave_1 removed [ 178.556139][ T3676] team0 (unregistering): Port device team_slave_0 removed [ 178.587767][ T3676] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 178.633058][ T3564] Bluetooth: hci3: command tx timeout [ 178.639740][ T3676] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 179.068371][ T3676] bond0 (unregistering): Released all slaves [ 179.183256][ T5586] netem: change failed [ 179.188447][ T5497] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 179.205132][ T5497] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.244511][ T5497] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 179.257385][ T5497] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 179.264723][ T5497] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.291040][ T5497] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 179.383085][ T3564] Bluetooth: hci2: command tx timeout [ 179.439087][ T5497] device hsr_slave_0 entered promiscuous mode [ 179.457153][ T5497] device hsr_slave_1 entered promiscuous mode [ 179.497679][ T5497] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 179.533072][ T5497] Cannot create hsr debugfs directory [ 180.371373][ T5531] chnl_net:caif_netlink_parms(): no params data found [ 180.666999][ T5611] loop2: detected capacity change from 0 to 512 [ 180.713511][ T3564] Bluetooth: hci3: command tx timeout [ 180.796330][ T5611] EXT4-fs error (device loop2): ext4_orphan_get:1396: inode #15: comm syz.2.500: casefold flag without casefold feature [ 180.815555][ T5611] EXT4-fs error (device loop2): __ext4_iget:5044: inode #12: block 2: comm syz.2.500: invalid block [ 180.887816][ T5611] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.500: error while reading EA inode 12 err=-117 [ 180.953478][ T5531] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.960603][ T5531] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.980090][ T5611] EXT4-fs (loop2): 1 orphan inode deleted [ 180.986168][ T5611] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 180.997718][ T5531] device bridge_slave_0 entered promiscuous mode [ 181.012427][ T5531] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.021276][ T3563] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 181.033418][ T3563] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 181.041154][ T3563] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 181.050028][ T3563] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 181.058686][ T3563] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 181.071717][ T3563] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 181.071776][ T5531] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.164322][ T5531] device bridge_slave_1 entered promiscuous mode [ 181.215448][ T3555] EXT4-fs (loop2): unmounting filesystem. [ 181.433148][ T3564] Bluetooth: hci2: command tx timeout [ 181.450291][ T5531] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 181.528810][ T3562] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 181.539696][ T5531] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 181.548896][ T3562] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 181.564081][ T3563] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 181.573505][ T3563] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 181.584782][ T5626] netem: change failed [ 181.589613][ T3563] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 181.603290][ T3563] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 181.743871][ T5531] team0: Port device team_slave_0 added [ 181.800159][ T5531] team0: Port device team_slave_1 added [ 181.827160][ T5632] device bond0 entered promiscuous mode [ 181.832758][ T5632] device bond_slave_0 entered promiscuous mode [ 181.853672][ T5632] device bond_slave_1 entered promiscuous mode [ 181.943372][ T5531] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 181.950367][ T5531] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 182.014161][ T5531] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 182.073156][ T5531] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 182.080127][ T5531] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 182.156179][ T5531] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 182.344446][ T5497] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 182.439222][ T5497] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 182.503841][ T5531] device hsr_slave_0 entered promiscuous mode [ 182.543478][ T5531] device hsr_slave_1 entered promiscuous mode [ 182.584416][ T5531] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 182.610350][ T5531] Cannot create hsr debugfs directory [ 182.637329][ T5497] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 182.710606][ T5629] device bond0 left promiscuous mode [ 182.733038][ T5629] device bond_slave_0 left promiscuous mode [ 182.740319][ T5629] device bond_slave_1 left promiscuous mode [ 182.781362][ T5497] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 182.794651][ T3564] Bluetooth: hci3: command tx timeout [ 182.820121][ T5619] chnl_net:caif_netlink_parms(): no params data found [ 183.016867][ T5627] chnl_net:caif_netlink_parms(): no params data found [ 183.113209][ T3562] Bluetooth: hci0: command tx timeout [ 183.257647][ T5531] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.323341][ T5619] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.332439][ T5619] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.349395][ T5619] device bridge_slave_0 entered promiscuous mode [ 183.378877][ T5662] netlink: 'syz.2.505': attribute type 10 has an invalid length. [ 183.418790][ T5662] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 183.452003][ T5497] 8021q: adding VLAN 0 to HW filter on device bond0 [ 183.482141][ T5531] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.506388][ T5619] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.513709][ T5619] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.521896][ T5619] device bridge_slave_1 entered promiscuous mode [ 183.624617][ T5531] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.659950][ T5672] loop2: detected capacity change from 0 to 512 [ 183.673147][ T3562] Bluetooth: hci1: command tx timeout [ 183.719438][ T5627] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.726823][ T5627] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.735495][ T5627] device bridge_slave_0 entered promiscuous mode [ 183.740074][ T5672] EXT4-fs (loop2): 1 orphan inode deleted [ 183.749943][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 183.758738][ T5672] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 183.769170][ T5672] ext4 filesystem being mounted at /134/file1 supports timestamps until 2038 (0x7fffffff) [ 183.773662][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 183.805554][ T5497] 8021q: adding VLAN 0 to HW filter on device team0 [ 183.829883][ T5531] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.848813][ T5627] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.858443][ T5627] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.877580][ T5627] device bridge_slave_1 entered promiscuous mode [ 183.898564][ T5619] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 184.059528][ T5252] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 184.071639][ T5252] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 184.748823][ T5252] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.756011][ T5252] bridge0: port 1(bridge_slave_0) entered forwarding state [ 184.765055][ T5252] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 184.773941][ T5252] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 184.782395][ T5252] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.789532][ T5252] bridge0: port 2(bridge_slave_1) entered forwarding state [ 184.797340][ T5252] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 184.806441][ T5252] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 184.815536][ T5252] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 184.824598][ T5252] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 184.833666][ T5252] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 184.842603][ T5252] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 184.851695][ T5252] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 184.860610][ T5252] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 184.874093][ T5619] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 184.886374][ T3555] EXT4-fs (loop2): unmounting filesystem. [ 184.905448][ T5627] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 185.011938][ T3676] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.085914][ T4005] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 185.100373][ T4005] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 185.128382][ T5627] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 185.145960][ T5619] team0: Port device team_slave_0 added [ 185.182654][ T3676] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.191311][ T5697] loop2: detected capacity change from 0 to 512 [ 185.199478][ T3562] Bluetooth: hci0: command tx timeout [ 185.209993][ T5697] EXT4-fs error (device loop2): ext4_orphan_get:1396: inode #15: comm syz.2.509: casefold flag without casefold feature [ 185.213378][ T4005] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 185.232786][ T4005] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 185.234383][ T5697] EXT4-fs error (device loop2): __ext4_iget:5044: inode #12: block 2: comm syz.2.509: invalid block [ 185.243745][ T5497] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 185.259261][ T5697] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.509: error while reading EA inode 12 err=-117 [ 185.272901][ T5697] EXT4-fs (loop2): 1 orphan inode deleted [ 185.278875][ T5697] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 185.289040][ T5619] team0: Port device team_slave_1 added [ 185.342037][ T3676] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.378409][ T3555] EXT4-fs (loop2): unmounting filesystem. [ 185.385044][ T5627] team0: Port device team_slave_0 added [ 185.400750][ T5627] team0: Port device team_slave_1 added [ 185.469741][ T3676] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.624877][ T5619] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 185.631849][ T5619] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 185.658322][ T5619] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 185.809757][ T3562] Bluetooth: hci1: command tx timeout [ 185.848425][ T5619] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 185.895136][ T5619] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 185.946720][ T5619] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 186.107905][ T5619] device hsr_slave_0 entered promiscuous mode [ 186.135593][ T5619] device hsr_slave_1 entered promiscuous mode [ 186.159366][ T5619] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 186.192035][ T5619] Cannot create hsr debugfs directory [ 186.389217][ T5531] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 186.408861][ T5531] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 186.472008][ T5531] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 186.499689][ T5531] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 186.626622][ T5627] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 186.643006][ T5627] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 186.728242][ T5627] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 186.767372][ T5627] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 186.774871][ T5627] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 186.814050][ T5627] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 186.874030][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 186.882015][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 186.919613][ T5497] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 187.197917][ T5715] netlink: 'syz.2.513': attribute type 10 has an invalid length. [ 187.274177][ T3562] Bluetooth: hci0: command tx timeout [ 187.338713][ T5715] batman_adv: batadv0: Adding interface: team0 [ 187.345267][ T5715] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 187.371020][ T5715] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 187.754117][ T5716] netlink: 'syz.2.513': attribute type 10 has an invalid length. [ 187.761864][ T5716] netlink: 2 bytes leftover after parsing attributes in process `syz.2.513'. [ 187.773381][ T5716] device team0 entered promiscuous mode [ 187.778930][ T5716] device team_slave_0 entered promiscuous mode [ 187.786076][ T5716] device team_slave_1 entered promiscuous mode [ 187.798800][ T5716] 8021q: adding VLAN 0 to HW filter on device team0 [ 187.805749][ T5716] batman_adv: batadv0: Interface activated: team0 [ 187.812218][ T5716] batman_adv: batadv0: Interface deactivated: team0 [ 187.819247][ T5716] batman_adv: batadv0: Removing interface: team0 [ 187.829435][ T5716] bridge0: port 3(team0) entered blocking state [ 187.836812][ T5716] bridge0: port 3(team0) entered disabled state [ 187.849800][ T5716] bridge0: port 3(team0) entered blocking state [ 187.857617][ T5716] bridge0: port 3(team0) entered forwarding state [ 187.866505][ T5627] device hsr_slave_0 entered promiscuous mode [ 187.874091][ T5627] device hsr_slave_1 entered promiscuous mode [ 187.880702][ T5627] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 187.888375][ T5627] Cannot create hsr debugfs directory [ 187.931143][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 187.943828][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 187.969882][ T5531] 8021q: adding VLAN 0 to HW filter on device bond0 [ 188.010480][ T3562] Bluetooth: hci1: command tx timeout [ 188.049502][ T4093] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 188.067732][ T5720] loop2: detected capacity change from 0 to 1024 [ 188.071821][ T4093] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 188.094726][ T5720] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 188.124157][ T5497] device veth0_vlan entered promiscuous mode [ 188.168189][ T5531] 8021q: adding VLAN 0 to HW filter on device team0 [ 188.184531][ T3862] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 188.192412][ T3862] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 188.204510][ T3862] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 188.211771][ T3555] EXT4-fs (loop2): unmounting filesystem. [ 188.212313][ T3862] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 188.298941][ T5619] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.366695][ T5497] device veth1_vlan entered promiscuous mode [ 188.398172][ T5251] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 188.421324][ T5251] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 188.463783][ T5251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 188.472555][ T5251] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 188.489336][ T5251] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.496495][ T5251] bridge0: port 1(bridge_slave_0) entered forwarding state [ 188.505187][ T5251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 188.516186][ T5251] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 188.525470][ T5251] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.532564][ T5251] bridge0: port 2(bridge_slave_1) entered forwarding state [ 188.631435][ T5619] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.709785][ T4005] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 188.718803][ T4005] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 188.728914][ T4005] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 188.771964][ T4093] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 188.792797][ T4093] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 188.841956][ T5619] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.864479][ T5737] netlink: 9 bytes leftover after parsing attributes in process `syz.2.517'. [ 188.875620][ T5737] device gretap0 entered promiscuous mode [ 188.919883][ T3862] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 188.928654][ T3862] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 188.938169][ T3862] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 188.947227][ T3862] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 188.955937][ T3862] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 188.964513][ T3862] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 188.973146][ T3862] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 188.981348][ T3862] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 188.989734][ T3862] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 189.068978][ T5741] netlink: 5 bytes leftover after parsing attributes in process `syz.2.517'. [ 189.078662][ T5741] 0ªX¹¦D: renamed from gretap0 [ 189.085887][ T5741] device 40ªX¹¦D left promiscuous mode [ 189.092447][ T5741] A link change request failed with some changes committed already. Interface 40ªX¹¦D may have been left with an inconsistent configuration, please check. [ 189.125943][ T5619] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.160830][ T5497] device veth0_macvtap entered promiscuous mode [ 189.207459][ T5531] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 189.225898][ T5497] device veth1_macvtap entered promiscuous mode [ 189.288455][ T5497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 189.313248][ T5497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.343052][ T5497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 189.367861][ T5497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.369456][ T3562] Bluetooth: hci0: command tx timeout [ 189.393142][ T5497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 189.413042][ T5497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.422886][ T5497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 189.435653][ T5497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.474638][ T5497] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 189.571331][ T3866] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 189.582663][ T3866] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 189.609408][ T3866] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 189.637407][ T5497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.649614][ T5497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.675685][ T5497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.713088][ T5497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.733021][ T5497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.753299][ T5760] loop2: detected capacity change from 0 to 2048 [ 189.764368][ T5497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.781495][ T5497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.795571][ T5497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.810713][ T5497] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 189.814543][ T5766] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 189.843062][ T26] audit: type=1800 audit(1721844349.280:15): pid=5760 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.520" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 189.960962][ T4005] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 189.994556][ T4005] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 190.022681][ T5497] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.041979][ T5497] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.061384][ T5497] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.079286][ T5497] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.080825][ T3562] Bluetooth: hci1: command tx timeout [ 190.189376][ T4093] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 190.198897][ T4093] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 190.274558][ T5531] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 190.635052][ T5619] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 190.784766][ T5619] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 191.092468][ T5619] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 191.143807][ T5619] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 191.374885][ T5789] netlink: 9 bytes leftover after parsing attributes in process `syz.2.525'. [ 191.407711][ T5789] device 40ªX¹¦D entered promiscuous mode [ 191.566513][ T5785] netlink: 5 bytes leftover after parsing attributes in process `syz.2.525'. [ 191.583659][ T5785] 1ªX¹¦D: renamed from 40ªX¹¦D [ 191.591455][ T5785] device 41ªX¹¦D left promiscuous mode [ 191.609502][ T5785] A link change request failed with some changes committed already. Interface 41ªX¹¦D may have been left with an inconsistent configuration, please check. [ 191.844175][ T3658] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.852227][ T3658] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.954791][ T5251] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 191.962790][ T5251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 191.980720][ T5251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 191.985488][ T5809] loop2: detected capacity change from 0 to 4096 [ 192.214381][ T3658] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.224034][ T3658] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.239730][ T5251] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 192.255192][ T5251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 192.270749][ T5251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 192.313866][ T5531] device veth0_vlan entered promiscuous mode [ 192.324666][ T5251] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 192.335391][ T5251] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 192.349909][ T5531] device veth1_vlan entered promiscuous mode [ 192.399853][ T5817] trusted_key: encrypted_key: keyword 'ne#default' not recognized [ 192.471995][ T5619] 8021q: adding VLAN 0 to HW filter on device bond0 [ 192.605659][ T4004] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 192.616913][ T4004] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 192.631229][ T4004] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 192.647988][ T4004] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 192.663707][ T4004] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 192.677991][ T4004] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 192.701528][ T5619] 8021q: adding VLAN 0 to HW filter on device team0 [ 192.727606][ T5531] device veth0_macvtap entered promiscuous mode [ 192.892131][ T4004] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 192.901396][ T4004] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 192.912389][ T4004] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 192.921204][ T4004] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.928350][ T4004] bridge0: port 1(bridge_slave_0) entered forwarding state [ 192.936308][ T4004] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 192.945072][ T4004] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 192.954164][ T4004] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.961275][ T4004] bridge0: port 2(bridge_slave_1) entered forwarding state [ 192.969273][ T4004] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 192.978385][ T4004] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 192.986977][ T4004] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 192.996463][ T4004] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 193.006205][ T4004] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 193.015686][ T4004] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 193.034948][ T5251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 193.045776][ T5251] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 193.081279][ T5531] device veth1_macvtap entered promiscuous mode [ 193.107519][ T5627] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 193.475838][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 193.489653][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 194.163266][ T1255] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.169577][ T1255] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.391941][ T5619] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 194.429721][ T5627] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 194.469546][ T5531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.522563][ T5531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.573027][ T5531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.613017][ T5531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.641078][ T5531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.671229][ T5848] loop2: detected capacity change from 0 to 16 [ 194.675302][ T5531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.698194][ T5531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.723041][ T5531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.751102][ T5531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.776220][ T5848] erofs: (device loop2): mounted with root inode @ nid 36. [ 194.778679][ T5531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.832449][ T5531] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 194.984916][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 194.995850][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 195.004925][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 195.013658][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 195.042551][ T3676] device hsr_slave_0 left promiscuous mode [ 195.195552][ T5857] erofs: (device loop2): z_erofs_read_folio: failed to read, err [-117] [ 195.209654][ T5857] netlink: 12 bytes leftover after parsing attributes in process `syz.2.534'. [ 195.503159][ T3593] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 195.742914][ T3676] device hsr_slave_1 left promiscuous mode [ 195.773225][ T3676] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 195.780675][ T3676] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 195.803809][ T3676] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 195.811260][ T3676] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 195.820399][ T3676] device bridge_slave_1 left promiscuous mode [ 195.826934][ T3676] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.836665][ T3676] device bridge_slave_0 left promiscuous mode [ 195.842878][ T3676] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.859386][ T3676] device hsr_slave_0 left promiscuous mode [ 195.865419][ T3593] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 195.876537][ T3593] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 195.886405][ T3593] usb 3-1: New USB device found, idVendor=056a, idProduct=0059, bcdDevice= 0.00 [ 195.888628][ T3676] device hsr_slave_1 left promiscuous mode [ 195.895620][ T3593] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.903100][ T3593] usb 3-1: config 0 descriptor?? [ 195.912986][ T3597] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 195.932781][ T3676] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 195.941130][ T3676] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 195.957973][ T3676] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 195.970271][ T3676] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 195.980948][ T3676] device bridge_slave_1 left promiscuous mode [ 195.987589][ T3676] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.000034][ T3676] device bridge_slave_0 left promiscuous mode [ 196.006748][ T3676] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.021206][ T3676] device hsr_slave_0 left promiscuous mode [ 196.028447][ T3676] device hsr_slave_1 left promiscuous mode [ 196.035419][ T3676] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 196.042854][ T3676] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 196.050991][ T3676] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 196.058725][ T3676] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 196.066653][ T3676] device bridge_slave_1 left promiscuous mode [ 196.072870][ T3676] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.083637][ T3676] device bridge_slave_0 left promiscuous mode [ 196.089834][ T3676] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.139520][ T3676] device veth1_macvtap left promiscuous mode [ 196.145650][ T3676] device veth0_macvtap left promiscuous mode [ 196.151694][ T3676] device veth1_vlan left promiscuous mode [ 196.159908][ T3676] device veth0_vlan left promiscuous mode [ 196.167839][ T3676] device veth1_macvtap left promiscuous mode [ 196.174144][ T3676] device veth0_macvtap left promiscuous mode [ 196.180183][ T3676] device veth1_vlan left promiscuous mode [ 196.186087][ T3676] device veth0_vlan left promiscuous mode [ 196.195657][ T3676] device veth1_macvtap left promiscuous mode [ 196.201669][ T3676] device veth0_macvtap left promiscuous mode [ 196.208946][ T3676] device veth1_vlan left promiscuous mode [ 196.214877][ T3676] device veth0_vlan left promiscuous mode [ 196.293235][ T3597] usb 1-1: config 0 has an invalid interface number: 199 but max is 1 [ 196.310357][ T3597] usb 1-1: config 0 has no interface number 1 [ 196.319233][ T3597] usb 1-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 196.338708][ T3597] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 196.408117][ T3593] wacom 0003:056A:0059.0002: hidraw0: USB HID v0.00 Device [HID 056a:0059] on usb-dummy_hcd.2-1/input0 [ 196.423807][ T3597] usb 1-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00 [ 196.444643][ T3597] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 196.452683][ T3597] usb 1-1: SerialNumber: syz [ 196.467930][ T3597] usb 1-1: config 0 descriptor?? [ 196.515066][ T3597] usb 1-1: Found UVC 0.00 device (0002:0000) [ 196.521971][ T3597] usb 1-1: No valid video chain found. [ 196.731784][ T3597] usb 1-1: USB disconnect, device number 8 [ 196.861251][ T3676] team0 (unregistering): Port device team_slave_1 removed [ 196.892171][ T3676] team0 (unregistering): Port device team_slave_0 removed [ 196.920181][ T3676] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 196.956168][ T3676] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 197.256218][ T3676] bond0 (unregistering): Released all slaves [ 197.589900][ T3676] team0 (unregistering): Port device team_slave_1 removed [ 197.626084][ T3676] team0 (unregistering): Port device team_slave_0 removed [ 197.661396][ T3676] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 197.697584][ T3676] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 197.999433][ T3676] bond0 (unregistering): Released all slaves [ 198.331276][ T3676] team0 (unregistering): Port device team_slave_1 removed [ 198.366713][ T3676] team0 (unregistering): Port device team_slave_0 removed [ 198.398536][ T3676] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 198.430335][ T3676] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 198.741092][ T3676] bond0 (unregistering): Released all slaves [ 198.797782][ T5627] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 198.809838][ T5531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 198.825871][ T5531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.841976][ T5531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 198.860682][ T5531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.872713][ T5531] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 198.908049][ T5856] netlink: 40 bytes leftover after parsing attributes in process `syz.2.534'. [ 198.917646][ T5249] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 198.933672][ T5249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 199.004353][ T5627] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 199.011324][ T3866] usb 3-1: USB disconnect, device number 6 [ 199.039720][ T5531] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.064647][ T5531] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.091183][ T5531] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.107455][ T5531] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.343735][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 199.351990][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 199.400908][ T5249] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 199.419487][ T5249] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 199.463348][ T5619] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 199.473639][ T5249] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 199.515077][ T5871] kvm: emulating exchange as write [ 199.523738][ T5627] 8021q: adding VLAN 0 to HW filter on device bond0 [ 199.536291][ T102] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 199.560198][ T102] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 199.579257][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 199.614850][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 199.631618][ T5627] 8021q: adding VLAN 0 to HW filter on device team0 [ 199.675146][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 199.683346][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 199.692183][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 199.754719][ T3869] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 199.774343][ T3869] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 199.782870][ T3869] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.790025][ T3869] bridge0: port 1(bridge_slave_0) entered forwarding state [ 199.836305][ T3869] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 199.873815][ T3869] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 199.882285][ T3869] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.889439][ T3869] bridge0: port 2(bridge_slave_1) entered forwarding state [ 199.904081][ T5883] loop4: detected capacity change from 0 to 256 [ 199.948793][ T3866] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 199.963598][ T3866] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 200.002920][ T3866] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 200.024323][ T3866] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 200.036749][ T5883] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 200.044256][ T3866] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 200.085353][ T5619] device veth0_vlan entered promiscuous mode [ 200.144463][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 200.168239][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 200.177518][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 200.205552][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 200.234076][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 200.256344][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 200.278644][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 200.341266][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 200.361388][ T5870] loop0: detected capacity change from 0 to 40427 [ 200.368913][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 200.390877][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 200.414734][ T5619] device veth1_vlan entered promiscuous mode [ 200.462221][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 200.478094][ T5627] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 200.563811][ T5249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 200.573870][ T5249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 200.620417][ T5619] device veth0_macvtap entered promiscuous mode [ 200.658653][ T5870] F2FS-fs (loop0): Found nat_bits in checkpoint [ 200.670332][ T5619] device veth1_macvtap entered promiscuous mode [ 200.714605][ T5619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 200.743056][ T5619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.759603][ T5619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 200.770363][ T5619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.790627][ T5619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 200.810667][ T5619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.831282][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 200.854204][ T5903] netlink: 52 bytes leftover after parsing attributes in process `syz.4.542'. [ 200.873499][ T5870] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 200.890415][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 200.899652][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 200.923907][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 200.954559][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 200.986490][ T5619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 201.023187][ T5619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.053196][ T5619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 201.080476][ T5619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.111058][ T5619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 201.124714][ T5619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.154381][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 201.162096][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 201.172041][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 201.216330][ T5619] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.232402][ T5619] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.274038][ T5619] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.282777][ T5619] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.407480][ T5918] loop2: detected capacity change from 0 to 16 [ 201.462282][ T5920] loop4: detected capacity change from 0 to 1024 [ 201.478977][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 201.489657][ T5918] erofs: (device loop2): mounted with root inode @ nid 36. [ 201.503324][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 201.517967][ T5627] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 201.622438][ T5920] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 201.648643][ T5928] trusted_key: encrypted_key: keyword 'ne#default' not recognized [ 201.835389][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 201.844662][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 201.875868][ T5531] EXT4-fs (loop4): unmounting filesystem. [ 201.957584][ T5932] netlink: 40 bytes leftover after parsing attributes in process `syz.2.546'. [ 201.972343][ T5932] erofs: (device loop2): z_erofs_read_folio: failed to read, err [-117] [ 201.987580][ T5932] netlink: 12 bytes leftover after parsing attributes in process `syz.2.546'. [ 202.293161][ T3598] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 202.388076][ T3869] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 202.417492][ T3869] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 202.464274][ T5627] device veth0_vlan entered promiscuous mode [ 202.503878][ T3866] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 202.512052][ T3866] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 202.540360][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.575219][ T5627] device veth1_vlan entered promiscuous mode [ 202.593258][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.675563][ T4004] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 202.713345][ T3598] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 202.731912][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.746110][ T3598] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 202.778773][ T3598] usb 3-1: New USB device found, idVendor=056a, idProduct=0059, bcdDevice= 0.00 [ 202.786725][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.813801][ T3598] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.815405][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 202.855890][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 202.868104][ T3598] usb 3-1: config 0 descriptor?? [ 202.897368][ T5627] device veth0_macvtap entered promiscuous mode [ 202.924333][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 202.932213][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 202.956836][ T5627] device veth1_macvtap entered promiscuous mode [ 203.025930][ T5627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.063022][ T5627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.093321][ T5627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.132992][ T5627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.159578][ T5627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.203375][ T5627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.234371][ T5627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.255066][ T5627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.284696][ T5627] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 203.307091][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 203.343882][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 203.379413][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 203.398561][ T3598] wacom 0003:056A:0059.0003: hidraw0: USB HID v0.00 Device [HID 056a:0059] on usb-dummy_hcd.2-1/input0 [ 203.411797][ T5627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.469868][ T5627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.500329][ T5627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.538869][ T5627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.581113][ T5627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.612408][ T5627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.646200][ T5627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.677633][ T5627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.727569][ T5627] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 203.768369][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 203.780859][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 203.810038][ T5627] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.840859][ T5627] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.868475][ T5627] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.900256][ T5627] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.089466][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.123076][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.180426][ T4005] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 204.203608][ T3658] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.254983][ T3658] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.297251][ T5980] loop4: detected capacity change from 0 to 512 [ 204.297568][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 204.414892][ T5980] EXT4-fs: Ignoring removed mblk_io_submit option [ 204.523174][ T5980] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 204.599436][ T5988] syz.3.558[5988] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 204.599545][ T5988] syz.3.558[5988] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 204.677714][ T3597] usb 3-1: USB disconnect, device number 7 [ 204.827722][ T5980] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 56 vs 41 free clusters [ 204.912738][ T5980] EXT4-fs (loop4): Remounting filesystem read-only [ 204.920035][ T5980] Quota error (device loop4): write_blk: dquota write failed [ 204.928296][ T5980] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 204.940367][ T5980] EXT4-fs error (device loop4): ext4_acquire_dquot:6777: comm syz.4.556: Failed to acquire dquot type 0 [ 204.953167][ T3593] usb 4-1: new low-speed USB device number 5 using dummy_hcd [ 204.962333][ T5980] EXT4-fs (loop4): 1 orphan inode deleted [ 204.968141][ T5980] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 204.989709][ T5980] EXT4-fs (loop4): unmounting filesystem. [ 204.997830][ T5990] loop1: detected capacity change from 0 to 128 [ 205.097214][ T3673] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 205.120119][ T5968] loop0: detected capacity change from 0 to 40427 [ 205.128703][ T5980] syz.4.556 (5980) used greatest stack depth: 19104 bytes left [ 205.224349][ T3544] I/O error, dev loop0, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 205.370289][ T5990] loop1: detected capacity change from 0 to 256 [ 205.413108][ T3593] usb 4-1: config 1 interface 0 altsetting 210 endpoint 0x81 has invalid maxpacket 512, setting to 8 [ 205.454163][ T3593] usb 4-1: config 1 interface 0 altsetting 210 endpoint 0x82 is Bulk; changing to Interrupt [ 205.507693][ T3593] usb 4-1: config 1 interface 0 altsetting 210 endpoint 0x3 is Bulk; changing to Interrupt [ 205.539948][ T26] audit: type=1800 audit(1721844364.980:16): pid=5990 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.501" name="bus" dev="loop1" ino=1048656 res=0 errno=0 [ 205.559117][ T3593] usb 4-1: config 1 interface 0 has no altsetting 0 [ 205.823288][ T3593] usb 4-1: string descriptor 0 read error: -22 [ 205.833791][ T3593] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 205.873165][ T3593] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.914009][ T5988] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 205.925745][ T5988] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 205.963349][ T5988] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 206.051422][ T3593] cdc_ether: probe of 4-1:1.0 failed with error -22 [ 206.069538][ T5996] loop2: detected capacity change from 0 to 40427 [ 206.098762][ T5996] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504) [ 206.153201][ T5996] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 206.823722][ T5996] F2FS-fs (loop2): invalid crc value [ 206.943699][ C1] ------------[ cut here ]------------ [ 206.949551][ C1] WARNING: CPU: 1 PID: 0 at net/ipv4/af_inet.c:154 inet_sock_destruct+0x6e7/0x7f0 [ 206.958861][ C1] Modules linked in: [ 206.962769][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted 6.1.100-syzkaller #0 [ 206.970534][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 206.980721][ C1] RIP: 0010:inet_sock_destruct+0x6e7/0x7f0 [ 206.986590][ C1] Code: ff ff e8 5c 4f 6e f8 0f 0b e9 21 fe ff ff e8 50 4f 6e f8 0f 0b 41 80 3c 2c 00 0f 85 4c fe ff ff e9 4f fe ff ff e8 39 4f 6e f8 <0f> 0b e9 bb fe ff ff 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 0e fc ff [ 206.989792][ T5988] loop3: detected capacity change from 0 to 1024 [ 207.006349][ C1] RSP: 0018:ffffc900001e0b30 EFLAGS: 00010246 [ 207.006387][ C1] RAX: ffffffff891c4b47 RBX: 0000000000000100 RCX: ffff888012739dc0 [ 207.006401][ C1] RDX: 0000000000000101 RSI: 0000000000000100 RDI: 0000000000000000 [ 207.006413][ C1] RBP: ffff88801eeacc80 R08: ffffffff891c49fc R09: ffffed1003dd59df [ 207.006426][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff11003dd5995 [ 207.006437][ C1] R13: ffff88801eead168 R14: ffff88801eeacca8 R15: ffff88801eeacc92 [ 207.006449][ C1] FS: 0000000000000000(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 207.006464][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 207.006479][ C1] CR2: 0000001b337e6ff8 CR3: 000000005a475000 CR4: 00000000003526e0 [ 207.082360][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 207.090412][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 207.098408][ C1] Call Trace: [ 207.101676][ C1] [ 207.104546][ C1] ? __warn+0x15a/0x520 [ 207.108714][ C1] ? inet_sock_destruct+0x6e7/0x7f0 [ 207.113963][ C1] ? report_bug+0x2af/0x500 [ 207.118475][ C1] ? inet_sock_destruct+0x6e7/0x7f0 [ 207.123713][ C1] ? handle_bug+0x3d/0x70 [ 207.128046][ C1] ? exc_invalid_op+0x16/0x40 [ 207.132709][ C1] ? asm_exc_invalid_op+0x16/0x20 [ 207.137774][ C1] ? inet_sock_destruct+0x59c/0x7f0 [ 207.143021][ C1] ? inet_sock_destruct+0x6e7/0x7f0 [ 207.148228][ C1] ? inet_sock_destruct+0x6e7/0x7f0 [ 207.153457][ C1] ? ipv6_mod_enabled+0x20/0x20 [ 207.158319][ C1] ? sk_destruct+0xd0/0xd0 [ 207.162732][ C1] __sk_destruct+0x50/0x5f0 [ 207.167267][ C1] ? sk_destruct+0xd0/0xd0 [ 207.171689][ C1] rcu_core+0xad5/0x1810 [ 207.175970][ C1] ? rcu_core+0xa6b/0x1810 [ 207.180397][ C1] ? rcu_cpu_kthread_park+0x90/0x90 [ 207.185624][ C1] ? memset+0x1f/0x40 [ 207.189612][ C1] ? __run_timers+0x814/0x890 [ 207.194327][ C1] ? detach_timer+0x380/0x380 [ 207.199013][ C1] handle_softirqs+0x2ee/0xa40 [ 207.203846][ C1] ? __irq_exit_rcu+0x157/0x240 [ 207.208706][ C1] ? do_softirq+0x240/0x240 [ 207.213231][ C1] ? hrtimer_interrupt+0x76b/0x980 [ 207.218347][ C1] ? irqtime_account_irq+0xd0/0x1e0 [ 207.223588][ C1] __irq_exit_rcu+0x157/0x240 [ 207.228274][ C1] ? irq_exit_rcu+0x20/0x20 [ 207.232770][ C1] irq_exit_rcu+0x5/0x20 [ 207.237042][ C1] sysvec_apic_timer_interrupt+0x91/0xb0 [ 207.242689][ C1] [ 207.245643][ C1] [ 207.248576][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 207.254585][ C1] RIP: 0010:acpi_idle_do_entry+0x10f/0x340 [ 207.260413][ C1] Code: 0b f5 f6 48 83 e3 08 0f 85 0b 01 00 00 4c 8d 74 24 20 e8 f4 c9 fb f6 0f 1f 44 00 00 e8 4a 07 f5 f6 0f 00 2d 63 d5 b1 00 fb f4 <4c> 89 f3 48 c1 eb 03 42 80 3c 3b 00 74 08 4c 89 f7 e8 3b 8f 4c f7 [ 207.280071][ C1] RSP: 0018:ffffc90000177b80 EFLAGS: 000002d3 [ 207.286179][ C1] RAX: ffffffff8a959336 RBX: 0000000000000000 RCX: ffff888012739dc0 [ 207.294181][ C1] RDX: 0000000000000000 RSI: ffffffff8aec0240 RDI: ffffffff8b3d48a0 [ 207.302243][ C1] RBP: ffffc90000177c10 R08: ffffffff8a959318 R09: ffffed10024e73b9 [ 207.310242][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff9200002ef70 [ 207.318237][ C1] R13: ffff88801437f004 R14: ffffc90000177ba0 R15: dffffc0000000000 [ 207.326330][ C1] ? acpi_idle_do_entry+0xe8/0x340 [ 207.331450][ C1] ? acpi_idle_do_entry+0x106/0x340 [ 207.336685][ C1] ? acpi_idle_enter_bm+0x5e0/0x5e0 [ 207.341892][ C1] ? __sched_clock_gtod_offset+0xe0/0xe0 [ 207.347560][ C1] acpi_idle_enter+0x352/0x4f0 [ 207.352331][ C1] cpuidle_enter_state+0x516/0xf80 [ 207.357485][ C1] ? cpuidle_enter_s2idle+0x6b0/0x6b0 [ 207.362872][ C1] ? menu_enable_device+0x380/0x380 [ 207.368106][ C1] cpuidle_enter+0x59/0x90 [ 207.372539][ C1] do_idle+0x3ce/0x680 [ 207.376636][ C1] ? print_irqtrace_events+0x210/0x210 [ 207.382116][ C1] ? idle_inject_timer_fn+0x60/0x60 [ 207.387341][ C1] ? lockdep_hardirqs_on+0x94/0x130 [ 207.392550][ C1] ? asm_sysvec_error_interrupt+0x10/0x20 [ 207.398311][ C1] ? schedule_idle+0x57/0x90 [ 207.402904][ C1] cpu_startup_entry+0x3d/0x60 [ 207.407711][ C1] start_secondary+0xe4/0xf0 [ 207.412287][ C1] secondary_startup_64_no_verify+0xcf/0xdb [ 207.418219][ C1] [ 207.421241][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 207.428584][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted 6.1.100-syzkaller #0 [ 207.436286][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 207.446334][ C1] Call Trace: [ 207.449597][ C1] [ 207.452506][ C1] dump_stack_lvl+0x1e3/0x2cb [ 207.457169][ C1] ? nf_tcp_handle_invalid+0x642/0x642 [ 207.462621][ C1] ? panic+0x764/0x764 [ 207.466672][ C1] ? vscnprintf+0x59/0x80 [ 207.470985][ C1] panic+0x318/0x764 [ 207.474861][ C1] ? __warn+0x169/0x520 [ 207.479001][ C1] ? memcpy_page_flushcache+0xfc/0xfc [ 207.484355][ C1] ? secondary_startup_64_no_verify+0xcf/0xdb [ 207.490408][ C1] __warn+0x348/0x520 [ 207.494370][ C1] ? inet_sock_destruct+0x6e7/0x7f0 [ 207.499647][ C1] report_bug+0x2af/0x500 [ 207.503960][ C1] ? inet_sock_destruct+0x6e7/0x7f0 [ 207.509148][ C1] handle_bug+0x3d/0x70 [ 207.513284][ C1] exc_invalid_op+0x16/0x40 [ 207.517774][ C1] asm_exc_invalid_op+0x16/0x20 [ 207.522619][ C1] RIP: 0010:inet_sock_destruct+0x6e7/0x7f0 [ 207.528421][ C1] Code: ff ff e8 5c 4f 6e f8 0f 0b e9 21 fe ff ff e8 50 4f 6e f8 0f 0b 41 80 3c 2c 00 0f 85 4c fe ff ff e9 4f fe ff ff e8 39 4f 6e f8 <0f> 0b e9 bb fe ff ff 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 0e fc ff [ 207.548016][ C1] RSP: 0018:ffffc900001e0b30 EFLAGS: 00010246 [ 207.554074][ C1] RAX: ffffffff891c4b47 RBX: 0000000000000100 RCX: ffff888012739dc0 [ 207.562030][ C1] RDX: 0000000000000101 RSI: 0000000000000100 RDI: 0000000000000000 [ 207.569988][ C1] RBP: ffff88801eeacc80 R08: ffffffff891c49fc R09: ffffed1003dd59df [ 207.577954][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff11003dd5995 [ 207.585908][ C1] R13: ffff88801eead168 R14: ffff88801eeacca8 R15: ffff88801eeacc92 [ 207.593869][ C1] ? inet_sock_destruct+0x59c/0x7f0 [ 207.599059][ C1] ? inet_sock_destruct+0x6e7/0x7f0 [ 207.604247][ C1] ? ipv6_mod_enabled+0x20/0x20 [ 207.609081][ C1] ? sk_destruct+0xd0/0xd0 [ 207.613478][ C1] __sk_destruct+0x50/0x5f0 [ 207.617966][ C1] ? sk_destruct+0xd0/0xd0 [ 207.622361][ C1] rcu_core+0xad5/0x1810 [ 207.626595][ C1] ? rcu_core+0xa6b/0x1810 [ 207.631002][ C1] ? rcu_cpu_kthread_park+0x90/0x90 [ 207.636231][ C1] ? memset+0x1f/0x40 [ 207.640196][ C1] ? __run_timers+0x814/0x890 [ 207.644860][ C1] ? detach_timer+0x380/0x380 [ 207.649524][ C1] handle_softirqs+0x2ee/0xa40 [ 207.654295][ C1] ? __irq_exit_rcu+0x157/0x240 [ 207.659144][ C1] ? do_softirq+0x240/0x240 [ 207.663724][ C1] ? hrtimer_interrupt+0x76b/0x980 [ 207.668822][ C1] ? irqtime_account_irq+0xd0/0x1e0 [ 207.674017][ C1] __irq_exit_rcu+0x157/0x240 [ 207.678690][ C1] ? irq_exit_rcu+0x20/0x20 [ 207.683181][ C1] irq_exit_rcu+0x5/0x20 [ 207.687405][ C1] sysvec_apic_timer_interrupt+0x91/0xb0 [ 207.693026][ C1] [ 207.695942][ C1] [ 207.698872][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 207.704868][ C1] RIP: 0010:acpi_idle_do_entry+0x10f/0x340 [ 207.710672][ C1] Code: 0b f5 f6 48 83 e3 08 0f 85 0b 01 00 00 4c 8d 74 24 20 e8 f4 c9 fb f6 0f 1f 44 00 00 e8 4a 07 f5 f6 0f 00 2d 63 d5 b1 00 fb f4 <4c> 89 f3 48 c1 eb 03 42 80 3c 3b 00 74 08 4c 89 f7 e8 3b 8f 4c f7 [ 207.730272][ C1] RSP: 0018:ffffc90000177b80 EFLAGS: 000002d3 [ 207.736328][ C1] RAX: ffffffff8a959336 RBX: 0000000000000000 RCX: ffff888012739dc0 [ 207.744281][ C1] RDX: 0000000000000000 RSI: ffffffff8aec0240 RDI: ffffffff8b3d48a0 [ 207.752250][ C1] RBP: ffffc90000177c10 R08: ffffffff8a959318 R09: ffffed10024e73b9 [ 207.760212][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff9200002ef70 [ 207.768186][ C1] R13: ffff88801437f004 R14: ffffc90000177ba0 R15: dffffc0000000000 [ 207.776156][ C1] ? acpi_idle_do_entry+0xe8/0x340 [ 207.781264][ C1] ? acpi_idle_do_entry+0x106/0x340 [ 207.786457][ C1] ? acpi_idle_enter_bm+0x5e0/0x5e0 [ 207.791643][ C1] ? __sched_clock_gtod_offset+0xe0/0xe0 [ 207.797262][ C1] acpi_idle_enter+0x352/0x4f0 [ 207.802099][ C1] cpuidle_enter_state+0x516/0xf80 [ 207.807287][ C1] ? cpuidle_enter_s2idle+0x6b0/0x6b0 [ 207.812642][ C1] ? menu_enable_device+0x380/0x380 [ 207.817827][ C1] cpuidle_enter+0x59/0x90 [ 207.822225][ C1] do_idle+0x3ce/0x680 [ 207.826456][ C1] ? print_irqtrace_events+0x210/0x210 [ 207.831997][ C1] ? idle_inject_timer_fn+0x60/0x60 [ 207.837195][ C1] ? lockdep_hardirqs_on+0x94/0x130 [ 207.842387][ C1] ? asm_sysvec_error_interrupt+0x10/0x20 [ 207.848100][ C1] ? schedule_idle+0x57/0x90 [ 207.852672][ C1] cpu_startup_entry+0x3d/0x60 [ 207.857422][ C1] start_secondary+0xe4/0xf0 [ 207.862003][ C1] secondary_startup_64_no_verify+0xcf/0xdb [ 207.862981][ T5988] fscrypt: Error allocating hmac(sha512): -2 [ 207.873877][ C1] [ 207.877146][ C1] Kernel Offset: disabled [ 207.881485][ C1] Rebooting in 86400 seconds..