last executing test programs: 6.852281489s ago: executing program 0 (id=224): socket(0x1e, 0x4, 0x0) socket(0x1e, 0x4, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000005c0), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000f00000008000300", @ANYRES32=r2, @ANYBLOB="0800330001"], 0x24}}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a483137140000", 0x17}], 0x1}, 0x48000) 6.77379706s ago: executing program 1 (id=225): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) setgroups(0x0, 0x0) r3 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900, 0x3}) ioctl$VIDIOC_QUERYMENU(r3, 0xc008561c, &(0x7f0000000000)={0x980900, 0x3, @name="51da06bc7338e17dfebb1580e15b95473b09f0d1fb8aa1e9959ef9dc00"}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'ip6_vti0\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) openat2(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', &(0x7f0000000280)={0x591002, 0x1, 0xc}, 0x18) open(&(0x7f0000000040)='./file0\x00', 0x551083, 0x28) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x4d) mmap$snddsp(&(0x7f0000733000/0x3000)=nil, 0x3000, 0x6, 0x10, 0xffffffffffffffff, 0x5000) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=@gettaction={0x24, 0x32, 0x20, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x100}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0xf2}]}, 0x24}}, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000080)={0x0, 0xfb, 0x15, 0x3, 0x80, "6a8469122ec424964661653950f5cd4b"}, 0x15, 0x2) 6.433810872s ago: executing program 0 (id=227): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x1, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2a060}, [@IFLA_IFNAME={0x14, 0x3, 'syz_tun\x00'}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x3c}}, 0x8000) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x70bd2d, 0x25dfdbfb, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x4) 5.581172829s ago: executing program 0 (id=228): socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x80000c, &(0x7f0000002440)=ANY=[@ANYBLOB="666f7263652c6e6c733d6575632d6a702c626172726965722c747970653d883b7f382c756d61736b3d30303030303030303030303030303030303030303030362c666f7263652c626172726965722c747970653d49d388242c6769643d", @ANYRESHEX=0x0, @ANYBLOB="2c005dc15e246d930a23b5f4093707c10226afb28f3e2838bb917886a27afece1cbcf9ae2d32c2c3f5bf4bb6fcd73d5c59e4638f863f2887a03f9aa6fceaeb5840cbeb145a56ad674e7f2f8c49eaf5b1c65eb6d762300b8c5c2ff69671e6b209000000"], 0x2, 0x6e2, &(0x7f0000000c80)="$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") setxattr(0x0, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x124) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) setxattr$security_capability(&(0x7f00000002c0)='./file2\x00', &(0x7f0000000300), 0x0, 0x0, 0x1) 5.571430979s ago: executing program 1 (id=229): ioctl$IMADDTIMER(0xffffffffffffffff, 0x80044940, &(0x7f0000000080)=0x14) r0 = dup(0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x40}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xe0004000}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 5.204882311s ago: executing program 0 (id=231): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c) listen(r1, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000200)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x21, 0x28, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x2, 0x0, 0xe7}}}}}}, 0x0) 4.92897973s ago: executing program 0 (id=232): rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000000)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 4.500216434s ago: executing program 3 (id=235): socket(0x1e, 0x4, 0x0) socket(0x1e, 0x4, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000005c0), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000f00000008000300", @ANYRES32=r2, @ANYBLOB="0800330001"], 0x24}}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a483137140000", 0x17}], 0x1}, 0x48000) 4.297793071s ago: executing program 2 (id=236): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2f", 0xf) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x80001009, 0x0, 0x0, 'queue0\x00', 0xfffffffc}) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x3) close(0xffffffffffffffff) write$sndseq(r1, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0x408c5333, &(0x7f0000000500)={0x0, 0xe, 0x1, 'queue0\x00'}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000001}, 0x2c004090) 4.291914181s ago: executing program 3 (id=237): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) setgroups(0x0, 0x0) r3 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900, 0x3}) ioctl$VIDIOC_QUERYMENU(r3, 0xc008561c, &(0x7f0000000000)={0x980900, 0x3, @name="51da06bc7338e17dfebb1580e15b95473b09f0d1fb8aa1e9959ef9dc00"}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'ip6_vti0\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) openat2(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', &(0x7f0000000280)={0x591002, 0x1, 0xc}, 0x18) open(&(0x7f0000000040)='./file0\x00', 0x551083, 0x28) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x4d) mmap$snddsp(&(0x7f0000733000/0x3000)=nil, 0x3000, 0x6, 0x10, 0xffffffffffffffff, 0x5000) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=@gettaction={0x24, 0x32, 0x20, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x100}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0xf2}]}, 0x24}}, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000080)={0x0, 0xfb, 0x15, 0x3, 0x80, "6a8469122ec424964661653950f5cd4b"}, 0x15, 0x2) 3.866928325s ago: executing program 2 (id=238): write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000005c0)={{0x80a0000, 0xeeef0000, 0xa, 0x9, 0x3, 0x7, 0x6d, 0x1, 0x0, 0x6, 0xa7, 0xfe}, {0x2000, 0x60000, 0x10, 0x9, 0x6, 0x4, 0x5, 0x3, 0x6d, 0xe8, 0x0, 0x6}, {0x1000, 0x50000, 0x8, 0x7, 0xff, 0x7, 0x8, 0xfd, 0x8, 0x8, 0xfe, 0x7}, {0x8000000, 0xeeee8000, 0x0, 0x3a, 0x7, 0x4, 0x8, 0xb9, 0x32, 0x3, 0x9, 0x9c}, {0x4, 0xf000, 0x0, 0x4, 0x9, 0x27, 0x2, 0xfc, 0x2, 0x9, 0x5, 0x6}, {0x30000, 0x4, 0xc, 0x5, 0x56, 0x34, 0x9, 0x0, 0x9, 0x2, 0x2, 0x4a}, {0x2d000, 0xdddd1000, 0x0, 0x6, 0x5, 0x81, 0x90, 0xe4, 0x1, 0xf, 0x9, 0x1}, {0x1000, 0xeeef0000, 0x3, 0x5, 0x6, 0x4, 0x4, 0x3, 0x5, 0x7, 0x4, 0xa}, {0xffffffff, 0x8}, {0x40000, 0xa}, 0x40000000, 0x0, 0xdddd1000, 0x241, 0xd, 0x0, 0x54000, [0x6, 0x935, 0x7, 0x9]}) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000001c0)={"fe5790e7a0da19ad98708d92e29a7e82e40798ae8d70cd4d4ca03ea114f532fc3175a5af8bc17ca41c324087a4235bf0db29025f9781be02aad5a5a6a7dd5699632c9cb68fafbf1c1a83c4a516cbffaa25a3d5f2ece0457c4b9b4b3276febfbb353958efa9a8956a1d5bad8267796cde344b6116c36a8500bc1a897acfc40bef6f58a5b2f4e84657cf4c93a5947b016f03ebd11d77b333c0827f168dda2309aa806097c7eaf7e7d23aa309df737e2126cbf011be37ac329b15ba3cb90f069d4f8353a43efa32b64dabd12e2e9952f04614c0b48a37096fdc907f5a53e1469680d27462b8a748c774657b138cf634f157add935bb426fc3c66d9b9ecc45b3b13756145c68f1198876353e12eabc7ef7baa35c8827056f5db369569b0d8729a2ca00a3c8b16e6b3af50d5577b3e92058c65f45d0af8fa3403682b7b67ddc0ac1aeb23a3076bbcf82cb82ef947d69db426521cb68b162612aed50635b58b741f7e2756301f0275e8c3b2342782b3d0e9a28bf50f9acb97bfbbccd0a05bbf8872d416a621d8b0cbe7a7dfd24cdadfb3d27ff6c4323e41a3936761371d769eafa1a6bb993de11d262820503c68cb25faa086fc62c9dbcd19e872303ac1dec681192fc3eba114e434737db8994b38d3ab2103a24d102ae5f700a00a2c2c79d86aa4513adfc648cb7826afc8148da355a4a9e5fdd91d66654dee5d4610d523db2df52567a1f66ae8e910f57b39e8d475ed866969a9394efda78dc4c698c17813f99c48145674bf680fe3496ae5c5be611ef4f70a3a12ed3c08e5f185de3dc2787bc45330efd8c556da0c201f92fc9f7653bd74b3675a24263aa88a6fc7f269446e69441bdb1b3098c7b0fc35edef53ef335c3dce90e118f61f4acd8dc61e48c206f0acc9e64ff846e361f18ef0e91a9df5478086a6cc2b50ccac12452a3ca748b52d78b2c09f9b393da5551fad817ed35eaa53f0e8f85caf217dfcea04ef803b11e653da81f1b47656608a47fb02f8565d5efc648a0d0d4b8c848f4f5120f835246a17f93c983f696a5c8da4d35675b18881949ff7e19dc40ea42ed7b98d6b45963f51ebf7558c05d3cb01f776becc5bbd3051d468bdd9d5ac02c2412f0589c4dfc28eaea3ed18e2190c6871d98bab1d330e0d941faf282ffefdbc51609af3d2da76f22e4065ad51b8703c594706fd25b7813f30d43b8cec53067309d97fb0eab17722d5f92dd945cec21bde40e69e2123ea1389e45d9b879e92f7819f9ec7d679500c37fb1bf7ffb9beab92d5315cdad78366a126e148f27ae6ca1cfa58c6eb4a1032a439ae37d858e964413e6203450ceb7f85795ba5b15bdc8a6b55531ce2f2ccc1ba21080ad287f530211187936114c47258da2ccd4c26122d5ae846c270c92165a29662bdc9332464618c2c00ac179460ec2b7ad9e30cd1cdb4b259f525533f3d3"}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.104061629s ago: executing program 3 (id=239): r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000140)={0x18, 0x2, {0xfffe, @loopback}}, 0x1e) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0001, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000340)=0x1) ioctl$PPPIOCGDEBUG(0xffffffffffffffff, 0x80047441, 0x0) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000040)=0x50402e) 2.912127935s ago: executing program 3 (id=240): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff0}, {0xe, 0xffff}}}, 0x24}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) socket$inet_sctp(0x2, 0x1, 0x84) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2.822863018s ago: executing program 1 (id=241): openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt\x00', 0x0, 0x0) pipe2(0x0, 0x80800) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x7c1c, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000003c0)={0xa, 0x4e24, 0x9, @mcast2, 0x80}, 0x1c) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x30, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x20}, [@NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x58}}, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0xac800000}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) 1.742100643s ago: executing program 2 (id=242): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000540)={'pcl818\x00', [0xcff, 0x3, 0x1, 0x0, 0xa, 0x7, 0xc, 0x7, 0x5, 0x800, 0x6b5b, 0x2, 0x3d, 0x403, 0x7, 0x1, 0x1, 0x0, 0x7, 0x40400003, 0x8c, 0x1007fff, 0x200006, 0xd, 0x8004, 0x8, 0x2, 0x8, 0x8, 0x1]}) 1.688433205s ago: executing program 1 (id=243): socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00', 0x0}) bind$packet(r2, &(0x7f0000000180)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) sendmsg$netlink(r2, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)=ANY=[@ANYBLOB='u'], 0xdd12}], 0x1, 0x0, 0x0, 0x8887}, 0x4048820) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$inet6(0xa, 0x3, 0xff) syz_open_dev$sndctrl(0x0, 0x2, 0xe8e80) r5 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(r5, 0x2, 0x0, &(0x7f00000002c0)="1b98", 0x2) r6 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_DV_TIMINGS(r6, 0xc0845657, &(0x7f0000000900)={0x0, @reserved}) connect$inet6(r4, &(0x7f0000000480)={0xa, 0xfffe, 0x3, @mcast1, 0x5}, 0x1c) syz_open_dev$vivid(0x0, 0x0, 0x2) r7 = socket(0x2b, 0x1, 0x1) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000180)={@loopback, 0x8000000, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x8000000, 0x0, 0xff, 0x0, 0x4}, 0x20) 1.52290648s ago: executing program 2 (id=244): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mprotect(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1) r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 1.502905211s ago: executing program 3 (id=245): socket(0x1e, 0x4, 0x0) socket(0x1e, 0x4, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000005c0), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000f00000008000300", @ANYRES32=r2, @ANYBLOB="0800330001"], 0x24}}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d0003", 0x23}], 0x1}, 0x48000) 1.478923392s ago: executing program 0 (id=246): syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000020000402505a3a440000000010109023b000101010000090400001202eb0000052406000005240000000d240f010000000000001e00000905820200020000000905e682"], 0x0) 1.307498917s ago: executing program 2 (id=247): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setgroups(0x0, 0x0) r3 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900, 0x3}) ioctl$VIDIOC_QUERYMENU(r3, 0xc008561c, &(0x7f0000000000)={0x980900, 0x3, @name="51da06bc7338e17dfebb1580e15b95473b09f0d1fb8aa1e9959ef9dc00"}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'ip6_vti0\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) openat2(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', &(0x7f0000000280)={0x591002, 0x1, 0xc}, 0x18) open(&(0x7f0000000040)='./file0\x00', 0x551083, 0x28) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x4d) mmap$snddsp(&(0x7f0000733000/0x3000)=nil, 0x3000, 0x6, 0x10, 0xffffffffffffffff, 0x5000) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=@gettaction={0x24, 0x32, 0x20, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x100}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0xf2}]}, 0x24}}, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000080)={0x0, 0xfb, 0x15, 0x3, 0x80, "6a8469122ec424964661653950f5cd4b"}, 0x15, 0x2) 1.298257607s ago: executing program 3 (id=248): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_FLUSH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="09012a8ad600fddbdf2518000000"], 0x14}}, 0x200000d4) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000080)=0x1000000, 0x4) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r4, 0x1000000}, 0x10) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000600)=0x800000, 0x4) r5 = syz_usb_connect(0x2, 0x24, &(0x7f00000012c0)=ANY=[@ANYBLOB="12010000c6700610f71400058544010203010902120001000000000904"], 0x0) syz_usb_control_io(r5, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r8 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x0) socketpair(0x1, 0x1, 0x0, 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) syz_usb_control_io(r8, &(0x7f0000000400)={0x2c, &(0x7f0000000200)={0x20, 0x6, 0x29, {0x29, 0x2, "f1bd9db8a2dc0f0ad0c8874c6a5dbd12046bf37385fb55d92825f60179fed3893f79b6570572cf"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010025bd7000000000000200000008000300", @ANYRES32=r9, @ANYBLOB="0c009900000000005200000008009f000600000008002600b4090000"], 0x38}, 0x1, 0x0, 0x0, 0x4c854}, 0x4040000) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x1c, 0x0, 0x300, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x0) 254.068671ms ago: executing program 2 (id=249): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x1018ed8, &(0x7f00000005c0)={[{@sysvgroups}, {@bsdgroups}, {@mblk_io_submit}, {@jqfmt_vfsv0}, {@discard}, {@usrjquota}, {@grpquota}, {@quota}]}, 0x6, 0x659, &(0x7f00000013c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xa1) quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000005bc0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000140)={0x0, 0x2, 0x6, 0x7e9, 0x2000000000, 0x2000000000002, 0x3, 0x100000000003, 0x7ffd}) 188.232193ms ago: executing program 1 (id=250): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x48840}, 0x0) 0s ago: executing program 1 (id=251): r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000001580)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x84}, @in=@local, 0x0, 0x0, 0x4e22, 0x0, 0x2, 0x0, 0x20, 0x11}, {0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x10, 0x9}, {}, 0x1, 0x0, 0x1}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4d2, 0x33}, 0x0, @in=@private=0xa010100, 0x3506, 0x0, 0x2, 0xb7, 0x2, 0xfffffff9, 0x4}}, 0xe8) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x1c) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.78' (ED25519) to the list of known hosts. [ 71.278646][ T5758] cgroup: Unknown subsys name 'net' [ 71.421809][ T5758] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 71.722148][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.729024][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 73.114665][ T5758] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 74.685625][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 74.694255][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 74.703193][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 74.711248][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 74.719564][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 74.728998][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 74.737495][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 74.742867][ T5782] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 74.746191][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 74.761286][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 74.765932][ T5782] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 74.777326][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 74.779694][ T5783] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 74.785206][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 74.792605][ T5782] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 74.799314][ T51] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 74.813567][ T5782] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 74.813684][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 74.830540][ T5782] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 74.832715][ T5779] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 74.844936][ T5776] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 74.845679][ T5779] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 74.862830][ T5779] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 74.870945][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 75.376041][ T5770] chnl_net:caif_netlink_parms(): no params data found [ 75.403430][ T5773] chnl_net:caif_netlink_parms(): no params data found [ 75.422535][ T5771] chnl_net:caif_netlink_parms(): no params data found [ 75.432558][ T5772] chnl_net:caif_netlink_parms(): no params data found [ 75.624129][ T5771] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.631664][ T5771] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.642676][ T5771] bridge_slave_0: entered allmulticast mode [ 75.650292][ T5771] bridge_slave_0: entered promiscuous mode [ 75.661877][ T5771] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.669407][ T5771] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.677196][ T5771] bridge_slave_1: entered allmulticast mode [ 75.684255][ T5771] bridge_slave_1: entered promiscuous mode [ 75.739316][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.746880][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.754168][ T5773] bridge_slave_0: entered allmulticast mode [ 75.762251][ T5773] bridge_slave_0: entered promiscuous mode [ 75.770535][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.778518][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.786248][ T5773] bridge_slave_1: entered allmulticast mode [ 75.793380][ T5773] bridge_slave_1: entered promiscuous mode [ 75.819748][ T5772] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.827268][ T5772] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.837571][ T5772] bridge_slave_0: entered allmulticast mode [ 75.844648][ T5772] bridge_slave_0: entered promiscuous mode [ 75.863447][ T5772] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.871144][ T5772] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.879058][ T5772] bridge_slave_1: entered allmulticast mode [ 75.887213][ T5772] bridge_slave_1: entered promiscuous mode [ 75.897239][ T5771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.910098][ T5771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.920338][ T5770] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.928444][ T5770] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.936173][ T5770] bridge_slave_0: entered allmulticast mode [ 75.943769][ T5770] bridge_slave_0: entered promiscuous mode [ 75.955027][ T5770] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.963324][ T5770] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.973422][ T5770] bridge_slave_1: entered allmulticast mode [ 75.982104][ T5770] bridge_slave_1: entered promiscuous mode [ 76.033241][ T5773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.056558][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.090274][ T5772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.111788][ T5771] team0: Port device team_slave_0 added [ 76.121437][ T5770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.132967][ T5772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.145296][ T5771] team0: Port device team_slave_1 added [ 76.164888][ T5770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.198032][ T5773] team0: Port device team_slave_0 added [ 76.218432][ T5773] team0: Port device team_slave_1 added [ 76.264863][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.272212][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.300381][ T5771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.325659][ T5772] team0: Port device team_slave_0 added [ 76.332899][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.340356][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.367536][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.383304][ T5770] team0: Port device team_slave_0 added [ 76.401116][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.408890][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.437159][ T5771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.451576][ T5772] team0: Port device team_slave_1 added [ 76.470907][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.478405][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.504611][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.527170][ T5770] team0: Port device team_slave_1 added [ 76.571893][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.578958][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.605317][ T5772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.618700][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.625932][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.652382][ T5772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.687885][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.695538][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.722474][ T5770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.768174][ T5771] hsr_slave_0: entered promiscuous mode [ 76.775230][ T5771] hsr_slave_1: entered promiscuous mode [ 76.788225][ T5773] hsr_slave_0: entered promiscuous mode [ 76.796129][ T5773] hsr_slave_1: entered promiscuous mode [ 76.802875][ T5773] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.810998][ T5773] Cannot create hsr debugfs directory [ 76.818266][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.828328][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.856923][ T5770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.907222][ T5772] hsr_slave_0: entered promiscuous mode [ 76.914032][ T5772] hsr_slave_1: entered promiscuous mode [ 76.921010][ T5776] Bluetooth: hci1: command tx timeout [ 76.921026][ T5774] Bluetooth: hci2: command tx timeout [ 76.926997][ T5779] Bluetooth: hci3: command tx timeout [ 76.934626][ T5774] Bluetooth: hci0: command tx timeout [ 76.948464][ T5772] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.957031][ T5772] Cannot create hsr debugfs directory [ 77.063886][ T5770] hsr_slave_0: entered promiscuous mode [ 77.071387][ T5770] hsr_slave_1: entered promiscuous mode [ 77.078337][ T5770] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.086486][ T5770] Cannot create hsr debugfs directory [ 77.459300][ T5771] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 77.472011][ T5771] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 77.495036][ T5771] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 77.505906][ T5771] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 77.562932][ T5772] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 77.582563][ T5772] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 77.598600][ T5772] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 77.615715][ T5772] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 77.710603][ T5773] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 77.730307][ T5773] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 77.741825][ T5773] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 77.773622][ T5773] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 77.858388][ T5770] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 77.878860][ T5770] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 77.889425][ T5770] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 77.902303][ T5770] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 77.949059][ T5771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.007980][ T5771] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.053125][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.061290][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.095645][ T3484] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.103058][ T3484] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.129291][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.167469][ T5772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.218908][ T5772] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.234181][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.287287][ T3484] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.294552][ T3484] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.307778][ T3484] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.315962][ T3484] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.327397][ T3484] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.334716][ T3484] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.388560][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.395780][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.443511][ T5770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.534378][ T5770] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.583069][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.590227][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.615514][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.622767][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.678777][ T5771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.879368][ T5771] veth0_vlan: entered promiscuous mode [ 78.936600][ T5771] veth1_vlan: entered promiscuous mode [ 79.000472][ T5774] Bluetooth: hci3: command tx timeout [ 79.000534][ T5779] Bluetooth: hci0: command tx timeout [ 79.007794][ T5774] Bluetooth: hci1: command tx timeout [ 79.014101][ T5776] Bluetooth: hci2: command tx timeout [ 79.053138][ T5771] veth0_macvtap: entered promiscuous mode [ 79.088686][ T5771] veth1_macvtap: entered promiscuous mode [ 79.145294][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.180078][ T5772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.202106][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.242993][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.267852][ T5771] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.279264][ T5771] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.289055][ T5771] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.299529][ T5771] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.329168][ T5770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.434402][ T5772] veth0_vlan: entered promiscuous mode [ 79.468017][ T5773] veth0_vlan: entered promiscuous mode [ 79.517913][ T5772] veth1_vlan: entered promiscuous mode [ 79.529102][ T5770] veth0_vlan: entered promiscuous mode [ 79.585510][ T1078] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.590307][ T5770] veth1_vlan: entered promiscuous mode [ 79.593672][ T1078] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.617639][ T5773] veth1_vlan: entered promiscuous mode [ 79.690820][ T3484] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.705212][ T3484] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.720012][ T5772] veth0_macvtap: entered promiscuous mode [ 79.741652][ T5770] veth0_macvtap: entered promiscuous mode [ 79.749888][ T5772] veth1_macvtap: entered promiscuous mode [ 79.783737][ T5770] veth1_macvtap: entered promiscuous mode [ 79.827288][ T5773] veth0_macvtap: entered promiscuous mode [ 79.840413][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.861725][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.875629][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.888875][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.900682][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.918069][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.929125][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.941292][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.951449][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.962844][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.977063][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.989228][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.000906][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.011580][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.023216][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.036437][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.076965][ T5772] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.099463][ T5772] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.109219][ T5830] syz.1.2[5830]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 80.119923][ T5772] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.132673][ T5772] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.137153][ T5830] loop1: detected capacity change from 0 to 256 [ 80.146458][ T5773] veth1_macvtap: entered promiscuous mode [ 80.174242][ T5770] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.190234][ T5770] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.201110][ T5830] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 80.219664][ T5770] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.245172][ T5770] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.293066][ T28] audit: type=1800 audit(1774979806.588:2): pid=5830 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2" name="file1" dev="loop1" ino=1048583 res=0 errno=0 [ 80.426345][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.443681][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.455391][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.466475][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.477833][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.489371][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.501911][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.536105][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.554623][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.565374][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.581428][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.592455][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.604779][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.617456][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.678983][ T5773] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.689414][ T5773] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.702494][ T5773] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.713561][ T5773] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.729058][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.749248][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.785521][ T5776] Bluetooth: hci2: command tx timeout [ 82.785951][ T5779] Bluetooth: hci0: command tx timeout [ 82.790956][ T5776] Bluetooth: hci1: command tx timeout [ 82.802086][ T5774] Bluetooth: hci3: command tx timeout [ 82.982026][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.015143][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.113970][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.140309][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.287797][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.310855][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.453869][ T1078] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.492647][ T1078] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.632901][ T1078] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.703438][ T1078] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.950265][ T5851] ======================================================= [ 83.950265][ T5851] WARNING: The mand mount option has been deprecated and [ 83.950265][ T5851] and is ignored by this kernel. Remove the mand [ 83.950265][ T5851] option from the mount to silence this warning. [ 83.950265][ T5851] ======================================================= [ 84.835481][ T5779] Bluetooth: hci0: command tx timeout [ 84.841071][ T5779] Bluetooth: hci2: command tx timeout [ 84.847327][ T5779] Bluetooth: hci3: command tx timeout [ 84.852953][ T5779] Bluetooth: hci1: command tx timeout [ 85.072119][ T5856] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 85.100476][ T5852] loop2: detected capacity change from 0 to 4096 [ 85.135137][ T5852] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [ 85.912092][ T5865] loop1: detected capacity change from 0 to 32768 [ 86.666847][ T5865] JBD2: Ignoring recovery information on journal [ 86.749471][ T5865] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 87.004905][ T5777] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 87.073422][ T5865] syz.1.6 (5865) used greatest stack depth: 20528 bytes left [ 87.093400][ T27] cfg80211: failed to load regulatory.db [ 87.207737][ T5771] ocfs2: Unmounting device (7,1) on (node local) [ 87.246820][ T5777] usb 3-1: Using ep0 maxpacket: 16 [ 87.263853][ T5777] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.304176][ T5777] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 87.338313][ T5777] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 87.354101][ T5777] usb 3-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 87.368114][ T5777] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.409489][ T5777] usb 3-1: config 0 descriptor?? [ 87.635029][ T5890] loop6: detected capacity change from 0 to 7 [ 87.655132][ T5890] Dev loop6: unable to read RDB block 7 [ 87.661203][ T5890] loop6: unable to read partition table [ 87.668348][ T5890] loop6: partition table beyond EOD, truncated [ 87.675450][ T5890] loop_reread_partitions: partition scan of loop6 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 88.453001][ T5777] shield 0003:0955:7214.0001: unknown main item tag 0x0 [ 88.464526][ T5777] shield 0003:0955:7214.0001: unknown main item tag 0x0 [ 88.474604][ T5777] shield 0003:0955:7214.0001: unknown main item tag 0x0 [ 88.481960][ T5777] shield 0003:0955:7214.0001: unknown main item tag 0x0 [ 88.492139][ T5777] shield 0003:0955:7214.0001: unknown main item tag 0x0 [ 88.562422][ T5777] input: HID 0955:7214 Haptics as /devices/virtual/input/input5 [ 88.722853][ T5777] shield 0003:0955:7214.0001: Registered Thunderstrike controller [ 88.771769][ T5777] shield 0003:0955:7214.0001: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.2-1/input0 [ 88.906919][ T1189] shield 0003:0955:7214.0001: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 88.939670][ T5777] usb 3-1: USB disconnect, device number 2 [ 88.959404][ T1189] shield 0003:0955:7214.0001: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 88.991686][ T1189] shield 0003:0955:7214.0001: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 89.048778][ T1189] shield 0003:0955:7214.0001: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 89.329250][ T5913] loop0: detected capacity change from 0 to 16 [ 89.343985][ T5913] erofs: (device loop0): mounted with root inode @ nid 36. [ 89.358820][ T5913] syz.0.19: attempt to access beyond end of device [ 89.358820][ T5913] loop0: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 89.450755][ T5913] syz.0.19: attempt to access beyond end of device [ 89.450755][ T5913] loop0: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 89.468577][ T5913] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 89.508114][ T28] audit: type=1800 audit(1774979815.788:3): pid=5913 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.19" name="file2" dev="loop0" ino=89 res=0 errno=0 [ 89.815314][ T5913] syz.0.19 (5913) used greatest stack depth: 20144 bytes left [ 90.251515][ T5918] loop3: detected capacity change from 0 to 128 [ 90.260490][ T5919] autofs4:pid:5919:autofs_fill_super: called with bogus options [ 90.308920][ T5919] process 'syz.2.23' launched './file2' with NULL argv: empty string added [ 90.349214][ T5918] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 90.403214][ T5918] hpfs: filesystem error: improperly stopped [ 90.450291][ T5922] loop6: detected capacity change from 0 to 7 [ 90.477596][ T5922] Dev loop6: unable to read RDB block 7 [ 90.483530][ T5922] loop6: unable to read partition table [ 90.490696][ T5922] loop6: partition table beyond EOD, truncated [ 90.497298][ T5922] loop_reread_partitions: partition scan of loop6 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 90.550238][ T5918] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 90.651500][ T5918] hpfs: You really don't want any checks? You are crazy... [ 90.803202][ T5918] hpfs: hpfs_map_sector(): read error [ 90.943075][ T5918] hpfs: code page support is disabled [ 91.094791][ T5918] hpfs: hpfs_map_4sectors(): unaligned read [ 91.222601][ T5918] hpfs: hpfs_map_4sectors(): unaligned read [ 91.265576][ T5918] hpfs: filesystem error: unable to find root dir [ 91.585348][ T5935] hpfs: hpfs_map_4sectors(): unaligned read [ 91.595431][ T5935] hpfs: hpfs_map_4sectors(): unaligned read [ 91.601980][ T5935] hpfs: filesystem error: invalid bitmap block pointer 00000000 -> 7b3184b5 at aib [ 92.196290][ T23] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 92.424625][ T23] usb 2-1: Using ep0 maxpacket: 16 [ 92.429135][ T5944] syz.3.31 uses obsolete (PF_INET,SOCK_PACKET) [ 92.439709][ T23] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 92.464074][ T23] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 92.486345][ T23] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 92.504018][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.523556][ T23] usb 2-1: Product: syz [ 92.528933][ T23] usb 2-1: Manufacturer: syz [ 92.539760][ T23] usb 2-1: SerialNumber: syz [ 92.846363][ T5952] loop2: detected capacity change from 0 to 16 [ 93.819719][ T5948] sched: RT throttling activated [ 93.834636][ T23] usb 2-1: 0:2 : does not exist [ 93.840098][ T23] usb 2-1: unit 6 not found! [ 94.222996][ T5952] erofs: (device loop2): mounted with root inode @ nid 36. [ 94.242831][ T5951] syz.2.33: attempt to access beyond end of device [ 94.242831][ T5951] loop2: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 94.290558][ T5951] syz.2.33: attempt to access beyond end of device [ 94.290558][ T5951] loop2: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 94.304868][ T5951] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 94.316344][ T28] audit: type=1800 audit(1774979820.618:4): pid=5951 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.33" name="file2" dev="loop2" ino=89 res=0 errno=0 [ 94.527509][ T23] usb 2-1: USB disconnect, device number 2 [ 94.747083][ T5958] loop6: detected capacity change from 0 to 7 [ 94.766934][ T5958] Dev loop6: unable to read RDB block 7 [ 94.772809][ T5958] loop6: unable to read partition table [ 94.779996][ T5958] loop6: partition table beyond EOD, truncated [ 94.786442][ T5958] loop_reread_partitions: partition scan of loop6 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 95.246166][ T5957] loop1: detected capacity change from 0 to 32768 [ 95.273596][ T5900] udevd[5900]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 95.485059][ T5957] JBD2: Ignoring recovery information on journal [ 95.602063][ T5957] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 95.881019][ T5771] ocfs2: Unmounting device (7,1) on (node local) [ 96.766976][ T5986] loop1: detected capacity change from 0 to 16 [ 97.192469][ T5986] erofs: (device loop1): mounted with root inode @ nid 36. [ 97.316710][ T5986] syz.1.44: attempt to access beyond end of device [ 97.316710][ T5986] loop1: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 97.338919][ T5989] loop0: detected capacity change from 0 to 128 [ 97.436935][ T5989] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 97.458061][ T5986] syz.1.44: attempt to access beyond end of device [ 97.458061][ T5986] loop1: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 97.472327][ T5989] hpfs: filesystem error: improperly stopped [ 97.472384][ T5989] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 97.472400][ T5989] hpfs: You really don't want any checks? You are crazy... [ 97.473655][ T5989] hpfs: hpfs_map_sector(): read error [ 97.539195][ T5991] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 97.573369][ T5989] hpfs: code page support is disabled [ 97.588302][ T5986] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 97.642595][ T5989] hpfs: hpfs_map_4sectors(): unaligned read [ 97.649294][ T28] audit: type=1800 audit(1774979823.938:5): pid=5986 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.44" name="file2" dev="loop1" ino=89 res=0 errno=0 [ 97.675047][ T5989] hpfs: hpfs_map_4sectors(): unaligned read [ 97.701414][ T5989] hpfs: filesystem error: unable to find root dir [ 97.834005][ T5986] syz.1.44 (5986) used greatest stack depth: 19792 bytes left [ 98.123011][ T5998] hpfs: hpfs_map_4sectors(): unaligned read [ 98.132477][ T5998] hpfs: filesystem error: invalid bitmap block pointer 00000000 -> 7b3184b5 at aib [ 98.588061][ T5999] loop6: detected capacity change from 0 to 7 [ 98.599705][ T5900] Dev loop6: unable to read RDB block 7 [ 98.691216][ T5900] loop6: unable to read partition table [ 98.751730][ T5900] loop6: partition table beyond EOD, truncated [ 98.866772][ T5999] Dev loop6: unable to read RDB block 7 [ 98.872612][ T5999] loop6: unable to read partition table [ 98.879330][ T5999] loop6: partition table beyond EOD, truncated [ 98.885757][ T5999] loop_reread_partitions: partition scan of loop6 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 99.219144][ T6005] loop2: detected capacity change from 0 to 1024 [ 100.427938][ T37] hfsplus: b-tree write err: -5, ino 3 [ 100.585936][ T6017] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 100.832925][ T6021] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 101.395829][ T23] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 101.464723][ T5812] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 101.498479][ T6034] loop6: detected capacity change from 0 to 7 [ 101.513800][ T6033] loop3: detected capacity change from 0 to 128 [ 101.523323][ T6034] Dev loop6: unable to read RDB block 7 [ 101.529635][ T6034] loop6: unable to read partition table [ 101.537486][ T6034] loop6: partition table beyond EOD, truncated [ 101.545076][ T6034] loop_reread_partitions: partition scan of loop6 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 101.604662][ T23] usb 1-1: Using ep0 maxpacket: 16 [ 101.636938][ T6033] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 101.683594][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.782469][ T6033] hpfs: filesystem error: improperly stopped [ 101.847272][ T23] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 101.847673][ T5812] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.874282][ T23] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 101.911759][ T6033] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 101.989581][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.020281][ T6033] hpfs: You really don't want any checks? You are crazy... [ 102.153402][ T6033] hpfs: hpfs_map_sector(): read error [ 102.161127][ T5812] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 102.208887][ T23] usb 1-1: config 0 descriptor?? [ 102.245517][ T6033] hpfs: code page support is disabled [ 102.304891][ T5812] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.306532][ T6033] hpfs: hpfs_map_4sectors(): unaligned read [ 102.319610][ T6033] hpfs: hpfs_map_4sectors(): unaligned read [ 102.326163][ T6033] hpfs: filesystem error: unable to find root dir [ 102.399650][ T5812] usb 2-1: config 0 descriptor?? [ 102.721976][ T6039] hpfs: hpfs_map_4sectors(): unaligned read [ 102.729497][ T6039] hpfs: filesystem error: invalid bitmap block pointer 00000000 -> 7b3184b5 at aib [ 102.753379][ T23] usbhid 1-1:0.0: can't add hid device: -71 [ 102.777974][ T23] usbhid: probe of 1-1:0.0 failed with error -71 [ 103.077398][ T23] usb 1-1: USB disconnect, device number 2 [ 103.084191][ T5812] keytouch 0003:0926:3333.0002: fixing up Keytouch IEC report descriptor [ 103.150151][ T5812] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0002/input/input6 [ 103.193075][ T6042] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.226579][ T6042] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.354623][ T5812] keytouch 0003:0926:3333.0002: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 103.655624][ T5812] usb 2-1: USB disconnect, device number 3 [ 104.756827][ T6046] fido_id[6046]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 104.830388][ T6054] loop3: detected capacity change from 0 to 16 [ 104.872835][ T6054] erofs: (device loop3): mounted with root inode @ nid 36. [ 104.936644][ T6054] syz.3.62: attempt to access beyond end of device [ 104.936644][ T6054] loop3: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 104.978503][ T6054] syz.3.62: attempt to access beyond end of device [ 104.978503][ T6054] loop3: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 105.007300][ T6054] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 105.029750][ T28] audit: type=1800 audit(1774979831.328:6): pid=6054 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.62" name="file2" dev="loop3" ino=89 res=0 errno=0 [ 105.324263][ T6063] loop6: detected capacity change from 0 to 7 [ 105.354576][ T6063] Dev loop6: unable to read RDB block 7 [ 105.360675][ T6063] loop6: unable to read partition table [ 105.367618][ T6063] loop6: partition table beyond EOD, truncated [ 105.393258][ T6063] loop_reread_partitions: partition scan of loop6 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 106.243630][ T6068] loop0: detected capacity change from 0 to 128 [ 106.335830][ T6068] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 106.389838][ T6068] hpfs: filesystem error: improperly stopped [ 106.416902][ T6068] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 106.448767][ T6068] hpfs: You really don't want any checks? You are crazy... [ 106.475104][ T6068] hpfs: hpfs_map_sector(): read error [ 106.484815][ T6068] hpfs: code page support is disabled [ 106.490505][ T6068] hpfs: hpfs_map_4sectors(): unaligned read [ 106.512877][ T6068] hpfs: hpfs_map_4sectors(): unaligned read [ 106.530218][ T6068] hpfs: filesystem error: unable to find root dir [ 106.926710][ T6075] hpfs: hpfs_map_4sectors(): unaligned read [ 106.935652][ T6075] hpfs: filesystem error: invalid bitmap block pointer 00000000 -> 7b3184b5 at aib [ 108.051852][ T6085] netlink: 'syz.2.64': attribute type 51 has an invalid length. [ 108.560892][ T6091] loop2: detected capacity change from 0 to 1024 [ 109.741757][ T6098] VFS: Mount too revealing [ 110.066139][ T6106] loop3: detected capacity change from 0 to 128 [ 110.096507][ T6106] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 110.164637][ T6106] hpfs: filesystem error: improperly stopped [ 110.170810][ T6106] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 110.233336][ T6106] hpfs: You really don't want any checks? You are crazy... [ 110.258906][ T6106] hpfs: hpfs_map_sector(): read error [ 110.278195][ T6106] hpfs: code page support is disabled [ 110.283897][ T6106] hpfs: hpfs_map_4sectors(): unaligned read [ 110.294184][ T6110] netlink: 'syz.2.83': attribute type 51 has an invalid length. [ 110.310459][ T6106] hpfs: hpfs_map_4sectors(): unaligned read [ 110.324664][ T6106] hpfs: filesystem error: unable to find root dir [ 110.605378][ T6114] netlink: 12 bytes leftover after parsing attributes in process `syz.1.85'. [ 110.696728][ T6119] hpfs: hpfs_map_4sectors(): unaligned read [ 110.712145][ T6119] hpfs: hpfs_map_4sectors(): unaligned read [ 110.866242][ T6120] loop0: detected capacity change from 0 to 64 [ 111.403366][ T6125] team0: Port device syz_tun added [ 112.874728][ T5844] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 113.064629][ T5844] usb 4-1: Using ep0 maxpacket: 16 [ 113.135914][ T5844] usb 4-1: config 0 has no interfaces? [ 113.148108][ T5844] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 113.157535][ T5844] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 113.229163][ T6126] team0: Port device syz_tun removed [ 113.234675][ T5844] usb 4-1: Manufacturer: syz [ 113.257679][ T6126] bridge_slave_0: left allmulticast mode [ 113.264227][ T5844] usb 4-1: config 0 descriptor?? [ 113.306084][ T6126] bridge_slave_0: left promiscuous mode [ 113.353021][ T6126] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.448317][ T6126] bridge_slave_1: left allmulticast mode [ 113.454239][ T6126] bridge_slave_1: left promiscuous mode [ 113.534751][ T6126] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.670076][ T6126] bond0: (slave bond_slave_0): Releasing backup interface [ 113.766538][ T6143] netlink: 'syz.0.94': attribute type 51 has an invalid length. [ 113.801548][ T6126] bond0: (slave bond_slave_1): Releasing backup interface [ 113.803492][ T6143] Zero length message leads to an empty skb [ 114.094829][ T6126] team0: Port device team_slave_0 removed [ 114.275533][ T6126] team0: Port device team_slave_1 removed [ 114.367198][ T6126] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 114.480973][ T6126] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 114.598340][ T6126] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 114.640285][ T6126] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 115.180155][ T6158] loop2: detected capacity change from 0 to 128 [ 115.235286][ T6158] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 115.304606][ T6158] hpfs: filesystem error: improperly stopped [ 115.329063][ T6158] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 115.403768][ T6158] hpfs: You really don't want any checks? You are crazy... [ 115.454558][ T6158] hpfs: hpfs_map_sector(): read error [ 115.484568][ T6158] hpfs: code page support is disabled [ 115.490274][ T6158] hpfs: hpfs_map_4sectors(): unaligned read [ 115.516018][ T6158] hpfs: hpfs_map_4sectors(): unaligned read [ 115.522080][ T6158] hpfs: filesystem error: unable to find root dir [ 115.836911][ T6166] hpfs: hpfs_map_4sectors(): unaligned read [ 115.848207][ T6166] hpfs: hpfs_map_4sectors(): unaligned read [ 116.247021][ T5812] usb 4-1: USB disconnect, device number 2 [ 116.399589][ T6168] loop2: detected capacity change from 0 to 256 [ 118.351229][ T6180] kvm: vcpu 2: requested 128 ns lapic timer period limited to 200000 ns [ 118.402485][ T6180] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 118.573722][ T6185] netlink: 'syz.0.103': attribute type 51 has an invalid length. [ 119.174629][ T1189] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 119.442161][ T1189] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 119.491762][ T1189] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 119.522196][ T1189] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.570408][ T1189] usb 4-1: config 0 descriptor?? [ 120.650548][ T1189] keytouch 0003:0926:3333.0003: fixing up Keytouch IEC report descriptor [ 121.074994][ T5812] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 121.166296][ T6206] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.201750][ C1] raw-gadget.1 gadget.0: ignoring, device is not running [ 121.404316][ T5812] usb 1-1: device descriptor read/64, error -32 [ 121.493830][ T1189] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0003/input/input7 [ 121.546919][ T6206] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.695859][ T1189] keytouch 0003:0926:3333.0003: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 121.785378][ T6207] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 121.808090][ T5812] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 122.072354][ T5812] usb 1-1: Using ep0 maxpacket: 16 [ 122.094184][ T5844] usb 4-1: USB disconnect, device number 3 [ 122.115188][ T5812] usb 1-1: config 0 has no interfaces? [ 122.143402][ T5812] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 122.171792][ T5812] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 122.196959][ T5812] usb 1-1: Manufacturer: syz [ 122.247050][ T5812] usb 1-1: config 0 descriptor?? [ 123.315152][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 123.821229][ T6212] fido_id[6212]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 124.568781][ T1189] usb 1-1: USB disconnect, device number 4 [ 124.741484][ T6218] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 124.944359][ T6223] bridge_slave_0: left allmulticast mode [ 124.974798][ T6223] bridge_slave_0: left promiscuous mode [ 125.018065][ T6223] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.082597][ T6223] bridge_slave_1: left allmulticast mode [ 125.106307][ T6223] bridge_slave_1: left promiscuous mode [ 125.134955][ T6223] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.163022][ T6223] bond0: (slave bond_slave_0): Releasing backup interface [ 125.215255][ T6223] bond0: (slave bond_slave_1): Releasing backup interface [ 125.387516][ T6223] team0: Port device team_slave_0 removed [ 125.425370][ T6223] team0: Port device team_slave_1 removed [ 125.437532][ T6223] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 125.457845][ T6223] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 125.489304][ T6223] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 125.505940][ T6223] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 125.667202][ T6225] netlink: 'syz.1.113': attribute type 51 has an invalid length. [ 126.002404][ T6229] netlink: 33 bytes leftover after parsing attributes in process `syz.1.117'. [ 126.052697][ T6231] netlink: 20 bytes leftover after parsing attributes in process `syz.0.118'. [ 128.920710][ T6253] loop0: detected capacity change from 0 to 16 [ 130.261047][ T6253] erofs: (device loop0): mounted with root inode @ nid 36. [ 130.280650][ T6252] syz.0.122: attempt to access beyond end of device [ 130.280650][ T6252] loop0: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 130.315804][ T6252] syz.0.122: attempt to access beyond end of device [ 130.315804][ T6252] loop0: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 130.330022][ T6252] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 130.341510][ T28] audit: type=1800 audit(1774979856.648:7): pid=6252 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.122" name="file2" dev="loop0" ino=89 res=0 errno=0 [ 131.633438][ T6273] netlink: 'syz.3.125': attribute type 51 has an invalid length. [ 133.161532][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.170167][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.454935][ T6305] loop2: detected capacity change from 0 to 16 [ 134.680151][ T6305] erofs: (device loop2): mounted with root inode @ nid 36. [ 134.699362][ T6304] syz.2.133: attempt to access beyond end of device [ 134.699362][ T6304] loop2: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 134.714788][ T6304] syz.2.133: attempt to access beyond end of device [ 134.714788][ T6304] loop2: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 134.729474][ T6304] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 134.731267][ T6307] netlink: 'syz.3.135': attribute type 51 has an invalid length. [ 134.745452][ T28] audit: type=1800 audit(1774979861.048:8): pid=6304 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.133" name="file2" dev="loop2" ino=89 res=0 errno=0 [ 135.307398][ T6310] loop0: detected capacity change from 0 to 32768 [ 135.415690][ T6310] JBD2: Ignoring recovery information on journal [ 135.465990][ T6310] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 135.741645][ T5770] ocfs2: Unmounting device (7,0) on (node local) [ 136.765238][ T6345] netlink: 'syz.1.144': attribute type 51 has an invalid length. [ 137.709388][ T6357] loop0: detected capacity change from 0 to 16 [ 137.718762][ T6357] erofs: (device loop0): mounted with root inode @ nid 36. [ 137.869534][ T6356] syz.0.146: attempt to access beyond end of device [ 137.869534][ T6356] loop0: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 137.894103][ T6356] syz.0.146: attempt to access beyond end of device [ 137.894103][ T6356] loop0: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 137.908287][ T6356] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 137.922673][ T28] audit: type=1800 audit(1774979864.218:9): pid=6356 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.146" name="file2" dev="loop0" ino=89 res=0 errno=0 [ 139.815595][ T6388] netlink: 'syz.3.156': attribute type 51 has an invalid length. [ 141.136151][ T6402] loop3: detected capacity change from 0 to 16 [ 141.270719][ T6402] erofs: (device loop3): mounted with root inode @ nid 36. [ 141.288867][ T6400] syz.3.159: attempt to access beyond end of device [ 141.288867][ T6400] loop3: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 141.307506][ T6400] syz.3.159: attempt to access beyond end of device [ 141.307506][ T6400] loop3: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 141.323429][ T6400] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 141.338023][ T28] audit: type=1800 audit(1774979867.638:10): pid=6400 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.159" name="file2" dev="loop3" ino=89 res=0 errno=0 [ 142.273747][ T6418] bridge_slave_0: left allmulticast mode [ 142.279597][ T6418] bridge_slave_0: left promiscuous mode [ 142.286245][ T6418] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.305610][ T6418] bridge_slave_1: left allmulticast mode [ 142.311449][ T6418] bridge_slave_1: left promiscuous mode [ 142.317528][ T6418] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.346044][ T6418] bond0: (slave bond_slave_0): Releasing backup interface [ 142.389181][ T6418] bond0: (slave bond_slave_1): Releasing backup interface [ 142.452620][ T6418] team0: Port device team_slave_0 removed [ 142.527017][ T6418] team0: Port device team_slave_1 removed [ 142.535730][ T6418] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 142.546691][ T6418] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 143.415230][ T6418] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 143.565813][ T6418] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 144.142736][ T6425] netlink: 'syz.2.167': attribute type 51 has an invalid length. [ 144.215747][ T3514] Bluetooth: hci4: Frame reassembly failed (-84) [ 145.074033][ T6457] loop3: detected capacity change from 0 to 16 [ 145.115406][ T6457] erofs: (device loop3): mounted with root inode @ nid 36. [ 145.189720][ T6457] syz.3.171: attempt to access beyond end of device [ 145.189720][ T6457] loop3: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 145.224097][ T6457] syz.3.171: attempt to access beyond end of device [ 145.224097][ T6457] loop3: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 145.257610][ T6457] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 145.295478][ T28] audit: type=1800 audit(1774979871.598:11): pid=6457 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.171" name="file2" dev="loop3" ino=89 res=0 errno=0 [ 145.386835][ T6463] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 145.983271][ T6479] netlink: 'syz.2.175': attribute type 10 has an invalid length. [ 146.059300][ T6479] team0: Port device netdevsim0 added [ 146.274728][ T5779] Bluetooth: hci4: command 0x1003 tx timeout [ 146.282865][ T5774] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 146.345116][ T6485] loop2: detected capacity change from 0 to 1024 [ 146.804864][ T59] hfsplus: b-tree write err: -5, ino 25 [ 146.810897][ T59] hfsplus: b-tree write err: -5, ino 4 [ 146.824798][ T59] hfsplus: b-tree write err: -5, ino 2 [ 146.830531][ T59] hfsplus: b-tree write err: -5, ino 20 [ 147.554386][ T6494] netlink: 'syz.1.179': attribute type 51 has an invalid length. [ 149.098122][ T5844] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 149.654752][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 149.806546][ T5844] usb 4-1: device descriptor read/64, error -32 [ 150.198418][ T5844] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 150.223934][ T6530] loop1: detected capacity change from 0 to 512 [ 150.329817][ T6530] EXT4-fs error (device loop1): ext4_iget_extra_inode:4732: inode #15: comm syz.1.185: corrupted in-inode xattr: e_value out of bounds [ 150.376880][ T6530] EXT4-fs error (device loop1): ext4_orphan_get:1403: comm syz.1.185: couldn't read orphan inode 15 (err -117) [ 150.417086][ T5844] usb 4-1: Using ep0 maxpacket: 16 [ 150.545994][ T5844] usb 4-1: config 0 has no interfaces? [ 150.620670][ T6530] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.704245][ T5844] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 150.776095][ T5844] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 150.814580][ T5844] usb 4-1: Manufacturer: syz [ 150.839440][ T5844] usb 4-1: config 0 descriptor?? [ 150.867890][ T5771] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.207148][ T6538] loop1: detected capacity change from 0 to 4096 [ 151.304607][ T9] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 151.366497][ T6542] loop2: detected capacity change from 0 to 16 [ 151.435070][ T6542] erofs: (device loop2): mounted with root inode @ nid 36. [ 151.472341][ T5844] usb 4-1: USB disconnect, device number 5 [ 151.492270][ T6542] syz.2.190: attempt to access beyond end of device [ 151.492270][ T6542] loop2: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 151.532311][ T9] usb 1-1: config 0 has an invalid interface number: 237 but max is 0 [ 151.556443][ T6538] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 151.570695][ T9] usb 1-1: config 0 has no interface number 0 [ 151.594118][ T9] usb 1-1: config 0 interface 237 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 151.618778][ T6542] syz.2.190: attempt to access beyond end of device [ 151.618778][ T6542] loop2: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 151.625210][ T9] usb 1-1: config 0 interface 237 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 151.662219][ T9] usb 1-1: config 0 interface 237 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 151.688574][ T9] usb 1-1: New USB device found, idVendor=045e, idProduct=84bd, bcdDevice=89.be [ 151.703487][ T9] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=3 [ 151.753036][ T9] usb 1-1: Product: syz [ 151.773652][ T9] usb 1-1: Manufacturer: syz [ 151.793755][ T6538] ntfs3: loop1: ino=0, "file1" failed to extend initialized size to 100003. [ 151.811357][ T9] usb 1-1: SerialNumber: syz [ 151.828725][ T9] usb 1-1: config 0 descriptor?? [ 151.856170][ T6542] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 151.868568][ T28] audit: type=1800 audit(1774979878.178:12): pid=6542 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.190" name="file2" dev="loop2" ino=89 res=0 errno=0 [ 151.885545][ T9] xpad 1-1:0.237: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 151.910656][ T9] xpad: probe of 1-1:0.237 failed with error -5 [ 152.783070][ T9] usb 1-1: USB disconnect, device number 5 [ 153.794373][ T6556] loop3: detected capacity change from 0 to 32768 [ 153.876343][ T6556] JBD2: Ignoring recovery information on journal [ 154.031551][ T6556] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 155.297693][ T23] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 155.463458][ T5773] ocfs2: Unmounting device (7,3) on (node local) [ 155.514579][ T23] usb 1-1: Using ep0 maxpacket: 16 [ 155.575711][ T6593] netlink: 'syz.1.205': attribute type 51 has an invalid length. [ 155.592150][ T23] usb 1-1: config 0 has no interfaces? [ 155.633523][ T3514] Bluetooth: hci4: Frame reassembly failed (-84) [ 155.654953][ T23] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 155.690212][ T23] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 155.811653][ T23] usb 1-1: Manufacturer: syz [ 155.881182][ T23] usb 1-1: config 0 descriptor?? [ 155.897399][ T6601] loop3: detected capacity change from 0 to 1024 [ 155.941879][ T6600] loop1: detected capacity change from 0 to 16 [ 156.590228][ T6600] erofs: (device loop1): mounted with root inode @ nid 36. [ 156.633695][ T6600] syz.1.206: attempt to access beyond end of device [ 156.633695][ T6600] loop1: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 156.692674][ T6600] syz.1.206: attempt to access beyond end of device [ 156.692674][ T6600] loop1: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 156.722203][ T6600] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 156.769011][ T28] audit: type=1800 audit(1774979883.068:13): pid=6600 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.206" name="file2" dev="loop1" ino=89 res=0 errno=0 [ 156.827064][ T3484] hfsplus: b-tree write err: -5, ino 25 [ 156.838137][ T3484] hfsplus: b-tree write err: -5, ino 4 [ 156.875577][ T3484] hfsplus: b-tree write err: -5, ino 2 [ 156.899947][ T3484] hfsplus: b-tree write err: -5, ino 22 [ 157.640548][ T5774] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 158.697553][ T6620] netlink: 'syz.1.214': attribute type 51 has an invalid length. [ 159.755320][ T6630] loop2: detected capacity change from 0 to 1024 [ 160.510330][ T5043] hfsplus: b-tree write err: -5, ino 25 [ 160.550645][ T5043] hfsplus: b-tree write err: -5, ino 4 [ 160.574858][ T5043] hfsplus: b-tree write err: -5, ino 2 [ 160.618688][ T23] usb 1-1: USB disconnect, device number 6 [ 160.626323][ T5043] hfsplus: b-tree write err: -5, ino 22 [ 161.903740][ T6647] loop2: detected capacity change from 0 to 16 [ 161.967098][ T6647] erofs: (device loop2): mounted with root inode @ nid 36. [ 162.046923][ T6647] syz.2.219: attempt to access beyond end of device [ 162.046923][ T6647] loop2: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 162.186371][ T6647] syz.2.219: attempt to access beyond end of device [ 162.186371][ T6647] loop2: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 162.237015][ T6654] netlink: 'syz.0.224': attribute type 51 has an invalid length. [ 162.243606][ T6647] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 162.432357][ T28] audit: type=1800 audit(1774979888.618:14): pid=6647 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.219" name="file2" dev="loop2" ino=89 res=0 errno=0 [ 163.554499][ T6670] loop0: detected capacity change from 0 to 1024 [ 163.716730][ T1094] hfsplus: b-tree write err: -5, ino 25 [ 163.741455][ T1094] hfsplus: b-tree write err: -5, ino 4 [ 163.759261][ T1094] hfsplus: b-tree write err: -5, ino 2 [ 163.777755][ T1094] hfsplus: b-tree write err: -5, ino 22 [ 164.481203][ T6682] sp0: Synchronizing with TNC [ 164.549236][ T6684] netlink: 'syz.3.235': attribute type 51 has an invalid length. [ 165.731263][ T6693] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2400480786 (153630770304 ns) > initial count (137169231808 ns). Using initial count to start timer. [ 165.904756][ T6693] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 167.261462][ T6704] comedi comedi3: pcl818: I/O port conflict (0xcff,16) [ 167.486858][ T28] audit: type=1326 audit(1774979893.788:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6709 comm="syz.2.244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7285f9c819 code=0x7ffc0000 [ 167.533132][ T6712] netlink: 'syz.3.245': attribute type 51 has an invalid length. [ 167.573523][ T28] audit: type=1326 audit(1774979893.808:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6709 comm="syz.2.244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7285f9c819 code=0x7ffc0000 [ 167.623836][ T28] audit: type=1326 audit(1774979893.818:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6709 comm="syz.2.244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f7285f9c819 code=0x7ffc0000 [ 167.687134][ T28] audit: type=1326 audit(1774979893.818:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6709 comm="syz.2.244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7285f9c819 code=0x7ffc0000 [ 167.720004][ T28] audit: type=1326 audit(1774979893.828:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6709 comm="syz.2.244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f7285f9c819 code=0x7ffc0000 [ 167.843279][ T28] audit: type=1326 audit(1774979893.828:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6709 comm="syz.2.244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7285f9c819 code=0x7ffc0000 [ 167.866414][ T28] audit: type=1326 audit(1774979893.828:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6709 comm="syz.2.244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7285f9c819 code=0x7ffc0000 [ 167.889918][ T28] audit: type=1326 audit(1774979893.828:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6709 comm="syz.2.244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f7285f9c819 code=0x7ffc0000 [ 167.913486][ T28] audit: type=1326 audit(1774979893.828:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6709 comm="syz.2.244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7285f9c819 code=0x7ffc0000 [ 168.349803][ T28] audit: type=1326 audit(1774979893.828:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6709 comm="syz.2.244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7285f9c819 code=0x7ffc0000 [ 168.802352][ T6722] loop2: detected capacity change from 0 to 1024 [ 168.854043][ T6722] EXT4-fs: Ignoring removed mblk_io_submit option [ 168.881252][ T6722] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 168.905328][ T6722] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 168.978659][ T6722] EXT4-fs error (device loop2): ext4_ext_check_inode:530: inode #11: comm syz.2.249: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 169.044509][ T5831] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 169.048961][ T6722] EXT4-fs error (device loop2): ext4_orphan_get:1403: comm syz.2.249: couldn't read orphan inode 11 (err -117) [ 169.102868][ T6722] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.236917][ T6722] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:478: comm syz.2.249: Invalid block bitmap block 0 in block_group 0 [ 169.296353][ T6722] BUG: unable to handle page fault for address: ffffffffffffff93 [ 169.297527][ T5831] usb 4-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85 [ 169.304314][ T6722] #PF: supervisor read access in kernel mode [ 169.319656][ T6722] #PF: error_code(0x0000) - not-present page [ 169.325769][ T6722] PGD cf35067 P4D cf35067 PUD cf37067 PMD 0 [ 169.331840][ T6722] Oops: 0000 [#1] PREEMPT SMP KASAN [ 169.337087][ T6722] CPU: 1 PID: 6722 Comm: syz.2.249 Not tainted syzkaller #0 [ 169.344456][ T5831] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.344477][ T6722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 169.362584][ T6722] RIP: 0010:ext4_ext_map_blocks+0x2d00/0x6800 [ 169.362667][ T5831] usb 4-1: Product: syz [ 169.368770][ T6722] Code: 8b 7c 24 10 4d 85 ff 0f 84 bd 00 00 00 e8 78 dc 58 ff 49 8d 7f 08 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0 0f 85 3d 1e 00 00 <41> 0f b7 47 08 c1 e0 04 48 8d 04 40 48 89 44 24 10 4d 89 fc 49 8d [ 169.368788][ T6722] RSP: 0018:ffffc9000c8171a0 EFLAGS: 00010246 [ 169.393362][ T5831] usb 4-1: Manufacturer: syz [ 169.398928][ T6722] RAX: 0000000000000000 RBX: 0000000000000021 RCX: 0000000000080000 [ 169.398944][ T6722] RDX: ffffc9000d4ca000 RSI: 000000000002a91b RDI: ffffffffffffff93 [ 169.398956][ T6722] RBP: ffffc9000c817450 R08: ffffffff911c3657 R09: 1ffffffff22386ca [ 169.398969][ T6722] R10: dffffc0000000000 R11: fffffbfff22386cb R12: 0000000000000001 [ 169.413955][ T5831] usb 4-1: SerialNumber: syz [ 169.420122][ T6722] R13: 1ffff92001902e60 R14: dffffc0000000000 R15: ffffffffffffff8b [ 169.420143][ T6722] FS: 00007f7286d896c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 169.420159][ T6722] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 169.420173][ T6722] CR2: ffffffffffffff93 CR3: 000000007a99d000 CR4: 00000000003506e0 [ 169.440652][ T5831] usb 4-1: config 0 descriptor?? [ 169.441154][ T6722] Call Trace: [ 169.472885][ T5831] usb 4-1: selecting invalid altsetting 1 [ 169.473168][ T6722] [ 169.484448][ T5831] technisat-usb2: could not set alternate setting to 0 [ 169.487216][ T6722] ? __might_sleep+0xe0/0xe0 [ 169.501886][ T6722] ? ext4_ext_release+0x10/0x10 [ 169.506876][ T6722] ? __lock_acquire+0x7d40/0x7d40 [ 169.512026][ T6722] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 169.518043][ T6722] ? lockdep_hardirqs_on+0x98/0x150 [ 169.523294][ T6722] ? ext4_es_lookup_extent+0x60e/0xa00 [ 169.528885][ T6722] ext4_map_blocks+0x9e2/0x1b80 [ 169.533778][ T6722] ? kasan_set_track+0x5f/0x70 [ 169.538617][ T6722] ? kasan_set_track+0x4e/0x70 [ 169.543417][ T6722] ? ext4_acquire_dquot+0x2e3/0x4b0 [ 169.548667][ T6722] ? do_mkdirat+0x1dc/0x450 [ 169.553304][ T6722] ? ext4_issue_zeroout+0x250/0x250 [ 169.558549][ T6722] ext4_getblk+0x1d0/0x6f0 [ 169.563004][ T6722] ? ext4_get_block_unwritten+0x100/0x100 [ 169.568870][ T6722] ? kasan_quarantine_put+0xd8/0x220 [ 169.574190][ T6722] ? lockdep_hardirqs_on+0x98/0x150 [ 169.579428][ T6722] ext4_bread+0x2a/0x170 [ 169.583710][ T6722] ext4_quota_write+0x23a/0x580 [ 169.588633][ T6722] ? ext4_quota_read+0x380/0x380 [ 169.593706][ T6722] ? make_kuid+0x680/0x680 [ 169.598160][ T6722] write_blk+0x115/0x220 [ 169.602575][ T6722] ? ext4_quota_read+0x380/0x380 [ 169.607545][ T6722] do_insert_tree+0xad2/0x10a0 [ 169.612453][ T6722] qtree_write_dquot+0x4a1/0x5d0 [ 169.617432][ T6722] ? qtree_entry_unused+0xe0/0xe0 [ 169.622651][ T6722] ? down_write+0x16e/0x200 [ 169.627216][ T6722] ? rcu_is_watching+0x15/0xb0 [ 169.632023][ T6722] v2_write_dquot+0x10c/0x1a0 [ 169.636743][ T6722] dquot_acquire+0x320/0x610 [ 169.641395][ T6722] ext4_acquire_dquot+0x2e3/0x4b0 [ 169.646460][ T6722] dqget+0x77c/0xeb0 [ 169.650426][ T6722] __dquot_initialize+0x3c7/0xcd0 [ 169.655582][ T6722] ? dquot_initialize+0x20/0x20 [ 169.660480][ T6722] ? end_current_label_crit_section+0x149/0x170 [ 169.666859][ T6722] ext4_mkdir+0x1a9/0xce0 [ 169.671287][ T6722] ? make_vfsuid+0x51/0xb0 [ 169.676016][ T6722] ? generic_permission+0x1f3/0x590 [ 169.680398][ T5831] technisat-usb2: firmware version: 0.0 [ 169.681329][ T6722] ? ext4_symlink+0x980/0x980 [ 169.691931][ T6722] ? inode_permission+0xf3/0x480 [ 169.694485][ T5831] dvb-usb: found a 'Technisat SkyStar USB HD (DVB-S/S2)' in warm state. [ 169.696887][ T6722] ? bpf_lsm_inode_mkdir+0x9/0x10 [ 169.710527][ T6722] ? security_inode_mkdir+0xb7/0x100 [ 169.715872][ T6722] vfs_mkdir+0x296/0x440 [ 169.720150][ T6722] do_mkdirat+0x1dc/0x450 [ 169.724688][ T6722] ? vfs_mkdir+0x440/0x440 [ 169.729241][ T6722] __x64_sys_mkdirat+0x89/0xa0 [ 169.734043][ T6722] do_syscall_64+0x55/0xa0 [ 169.738510][ T6722] ? clear_bhb_loop+0x40/0x90 [ 169.743305][ T6722] ? clear_bhb_loop+0x40/0x90 [ 169.748108][ T6722] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 169.754214][ T6722] RIP: 0033:0x7f7285f9c819 [ 169.758680][ T6722] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 169.778713][ T6722] RSP: 002b:00007f7286d89028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 169.787273][ T6722] RAX: ffffffffffffffda RBX: 00007f7286215fa0 RCX: 00007f7285f9c819 [ 169.795634][ T6722] RDX: 00000000000000a1 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 169.803831][ T6722] RBP: 00007f7286032c91 R08: 0000000000000000 R09: 0000000000000000 [ 169.812004][ T6722] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 169.820356][ T6722] R13: 00007f7286216038 R14: 00007f7286215fa0 R15: 00007ffca862b7d8 [ 169.828477][ T6722] [ 169.831529][ T6722] Modules linked in: [ 169.835831][ T6722] CR2: ffffffffffffff93 [ 169.840106][ T6722] ---[ end trace 0000000000000000 ]--- [ 169.845765][ T6722] RIP: 0010:ext4_ext_map_blocks+0x2d00/0x6800 [ 169.851891][ T6722] Code: 8b 7c 24 10 4d 85 ff 0f 84 bd 00 00 00 e8 78 dc 58 ff 49 8d 7f 08 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0 0f 85 3d 1e 00 00 <41> 0f b7 47 08 c1 e0 04 48 8d 04 40 48 89 44 24 10 4d 89 fc 49 8d [ 169.871894][ T6722] RSP: 0018:ffffc9000c8171a0 EFLAGS: 00010246 [ 169.878004][ T6722] RAX: 0000000000000000 RBX: 0000000000000021 RCX: 0000000000080000 [ 169.886013][ T6722] RDX: ffffc9000d4ca000 RSI: 000000000002a91b RDI: ffffffffffffff93 [ 169.894028][ T6722] RBP: ffffc9000c817450 R08: ffffffff911c3657 R09: 1ffffffff22386ca [ 169.902302][ T6722] R10: dffffc0000000000 R11: fffffbfff22386cb R12: 0000000000000001 [ 169.910811][ T6722] R13: 1ffff92001902e60 R14: dffffc0000000000 R15: ffffffffffffff8b [ 169.914537][ T6716] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.919007][ T6722] FS: 00007f7286d896c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 169.919031][ T6722] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 169.919043][ T6722] CR2: ffffffffffffff93 CR3: 000000007a99d000 CR4: 00000000003506e0 [ 169.919064][ T6722] Kernel panic - not syncing: Fatal exception [ 169.919549][ T6722] Kernel Offset: disabled