last executing test programs: 8.979086275s ago: executing program 4 (id=115): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) chdir(0x0) open(0x0, 0x0, 0x60) syz_mount_image$hfs(&(0x7f0000002c80), &(0x7f0000000080)='./file1\x00', 0x4490, &(0x7f0000002cc0)=ANY=[], 0xfd, 0x278, &(0x7f0000000780)="$eJzs3c9qE1EUx/HfnaRttKVO/4ggrqoFV9LWjbgpSN/AjStRmwjFUEErqKvqWnwA976CD+DSlbgW3LnyAbKL3DM3ZpJmMnFoOkn6/UBC0rln5tzMnd57ppQIwLl1b+/X59u//cNJFVUk3ZUiSTWpKumyrtReHR4dHDUb9WE7qliEfzglke5Em/3DxqBQH2cRQezfVbWU/hnGo/ZTx2XngPLZ1T9AJC2Eq9O21848s/E474PetdTSay2XnQcAoFxh/o/CPL8U1u9RJG2Gab93/p/yCbRVdgJj9jVne2r+tyqr7fz5vWSbuvWelXB+e9SpEovkMq9kZPUsMF1eVWm5RBeeHjQbt/afN+uR3ms3mOs2W7fnejJ0O9LZvju5640BtekQxfu+aH2Y833YSeefarJ2ukfM57657+6hi/VJ9X/rv2rb+dNkZyruO1NJ/lvZe7RezstaZfRyxQ5yNRwhGNrLijIqEnVG1Ip6bxDEeXla1GpfVNK77ZyotYFROzlR6/1R3dGcHTlu7qN74Db0R1+0l1r/R/7T3tQoV6ZvYy3DyBjan6q1jG0+CVfd8bWBLaOiPUIBH/REd7T88s3bZ4+bzcaLmX3hr8QJSGOiXnQGwaTkM7Mv/IdcytE7807x/ZT2mwlnqHvS/zOQv83MCr/uckn9l6pXtmyx5p/i3nX6Qjq2nbfz1B63M2qDVXu+mF3B9XB262Exu4Ibtea6flO6McoRE3HIc/LsFglye/qhR9z/BwAAAAAAAAAAAAAAAAAAmDan9y8HNWVtKruPAAAAAAAAAAAAAAAAAAAAAABMu4n7/t/7St7x/b/A2P0NAAD//1Bodro=") socket$xdp(0x2c, 0x3, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x0, 0x1000}, 0x20) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) mq_open(&(0x7f00000019c0)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000001980)=0x24100, 0x4) sched_setscheduler(0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x22}, @printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$xdp(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x0) write$FUSE_WRITE(r3, &(0x7f00000000c0)={0x18}, 0xfffffdef) ftruncate(0xffffffffffffffff, 0x2007ffb) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010700000000000000002000000008000300", @ANYRES32=r6], 0x1c}}, 0x0) 7.786768979s ago: executing program 0 (id=120): symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') openat2$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0/file0/..\x00', &(0x7f0000000080)={0x0, 0x0, 0x10}, 0x18) 7.73520377s ago: executing program 4 (id=121): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000000)={0x2, &(0x7f0000001380)=[{0x24}, {0x6}]}) 6.700071694s ago: executing program 0 (id=126): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xa, 0x13, &(0x7f0000000140)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x8}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 6.487046999s ago: executing program 0 (id=128): syz_mount_image$btrfs(&(0x7f00000051c0), &(0x7f0000005200)='./file0\x00', 0x0, &(0x7f0000005240), 0x1, 0x51b8, &(0x7f0000005280)="$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") symlink(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000000)='./bus\x00') 5.911322058s ago: executing program 4 (id=129): r0 = openat$uinput(0xffffff9c, 0x0, 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x1) r1 = io_uring_setup(0x1de0, &(0x7f0000000440)) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0x1b, 0x20000002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) r4 = syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') preadv(r4, &(0x7f0000000740)=[{&(0x7f0000000300)=""/49, 0x31}], 0x1, 0xbc, 0x0) 4.039160546s ago: executing program 4 (id=135): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r1}, 0x10) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) 3.759054662s ago: executing program 3 (id=139): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r1}, 0x10) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) 3.595545727s ago: executing program 4 (id=140): syz_usb_connect(0x0, 0x10e, &(0x7f0000000380)=ANY=[@ANYBLOB="120100006a249f08ec1888323a3f010203010902fc0001870000000904e600030e01000006240600011005240008000d240f01000000000000a0"], 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) 3.593482292s ago: executing program 0 (id=141): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000f2fc850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000083c0)) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_GETMOUSEREPORTING(r4, 0x5412, 0x0) 3.442673955s ago: executing program 3 (id=142): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0xd, 0x4, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r1}, &(0x7f0000000440), &(0x7f0000000480)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x4, &(0x7f00000000c0)={r1, &(0x7f00000005c0), 0x20000000}, 0x20) 3.250044834s ago: executing program 3 (id=144): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @mcast2, 0x400}, 0x1c) 2.98697476s ago: executing program 3 (id=146): bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000180)={0x20ffffff}, 0x10) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000040000900010073797a3000000000080005400000001f740000000c0a01080000000000000000010000000900020073797a32000000004800038044000080080003400000000238000b80340001800a0001006c696d6974000000240002800c00014000000000000000010c00024000000000efffffff08000340000005f50900010073797a30000000001400000010000100"/245], 0xf8}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff36, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec0000000109021200"], 0x0) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000080)) ioctl$SNDCTL_DSP_GETBLKSIZE(0xffffffffffffffff, 0xc0045004, 0x0) r4 = dup(r3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000040)) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f0000000340)) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, 0x0, 0x20000040) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2.234595228s ago: executing program 1 (id=149): r0 = syz_open_dev$sndctrl(&(0x7f0000000bc0), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, 0x0) syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000040)='./file1\x00', 0x2000400, &(0x7f0000000000)=ANY=[@ANYRES64=0x0], 0x30, 0x30c, &(0x7f00000001c0)="$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") prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xffffffffffffffca, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000380)='./file1\x00', 0x0, 0x0, 0x0) chdir(0x0) r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(0xffffffffffffffff, 0x9362, 0x0) ioctl$AUTOFS_IOC_EXPIRE(r2, 0x810c9365, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000100)='./bus\x00', 0x2000000, &(0x7f0000000180), 0x1, 0x520, &(0x7f0000000900)="$eJzs3d1rLGcZAPBnNtmer+iu2otaaHuwlZyiZzdpbBu8aCuIdwWl3h9Dsgkhm2zIbupJKJqD9woi2tteeSMI3grS/0BRCnovKkrRUwV7oY7M7OTkZLub5JD9oMnvB2/mnZmdeZ53kn3n85wJ4NK6GRGvRcRURDwfEZVieqkocdAt2ec+uP/WclaSSNM3/p5EUkzLPpYUJXOjWOxqd5D7d3o8bntvf2Op2WzsFOP1zuZ2vb23f3t9c2mtsdbYWliYf2nx5cUXF+eG0s6sXa989S8//sFPv/bKr7747T/e+dut72T5zhTzD9sxbN1tUs62xQPTEbEzimATMFW0pzzpRAAAOJPsGP/TEfG5/Pi/ElP50dzZJCPNDAAAABiW9NWZ+E8SkQIAAAAXVil/BjYp1YpnAWaiVKrVus/wPh7XS81Wu/OF1dbu1kr3WdlqlEur683GXPFMbTXKSTY+n9ePxl94MJ4cPHy94UeVa/n82nKruTK5yx4AAABwqdzoOf//V6V7/n+Ce2NLDgAAABie6lE1rUwyEQAAAGBkqh+Z8s5E8gAAAABG56Pn/wAAAMAF8vXXX89Kmr//uhqx8ube7kbrzdsrjfZGbXN3ubbc2tmurbVaa830SsTmaetrtlrbX4qt3bv1TqPdqbf39u9stna3OnfWj70CGwAAABijTz3z7h+SiDj48rW8ZB7LfkwNWMCzAnBhlB7lw38eXR7A+A3azQMX3/SkEwAmptwdJJPOA5ic0zqAgQ/v/Gb4uQAAAKMx+9n+9/+nj64NABfUI93/By4U9//h8nL/Hy6vsiMAuPRGf/8/TU9dFwAAMFIzeUlKteJe4EyUPky7ohrlZHW92ZiLiE9GxO8r5SvZ+Hy+ZOIfDQAAAAAAAAAAAAAAAAAAAAAAAADAGaVpEikAAABwoUWU/poU7/+arTw303t94LHkw0o+zN8O8MZP7i51Ojvz2fR/FNMjOm8X0194lCsP3jwOAAAAo3J4nn54Hg8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAw/TB/beWD8vxOaWRxn3/KxFR7Rd/Oq7mw6tRjojr/0xi+nChZyKSiJgaQvyDexHxRL/4SZZWVIssjsUvtsq1PIuRx38qTdPv9ot/49zR4XJ7N+t/Xuv3/SvFzXzY//s/XZTzGtz/lR70f1N94mc9zyfOsP4rEfHkez+vD54b8eR0//7nMH4yIP6z/VbZZ6N865v7+4PyS9+JmD3a/3z/eISjWr2zuV1v7+3fXt9cWmusNbYWFuZfWnx58cXFufrqerNR/Owb44dP/fJ/g+K/fy/iet/9X7f/faj9S73tfy6rlAet+ch/37t7/zN5rZL2rCKPf+vZ/r//J47HP7Zps7+Jzxf7gWz+7GH9oFt/2NM/++3TJ7V/ZUD7T/v93+pZ16D98fPf+N6fTtxAAMBYtff2N5aazcbOyCtvp2k6plj5gci42nXuyuMfn1Tbe7/4Xbfyau+smye0Ir0y7j82lXNXenuKX4+/cwIAAIbq6KB/0pkAAAAAAAAAAAAAAAAAAADA5TWO/06sN+bBZJoKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHCi/wcAAP//rgHbtw==") getpid() ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc10c5541, &(0x7f0000000c00)) 1.684856665s ago: executing program 4 (id=152): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup(r1, &(0x7f0000000380)='syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_subtree(r2, &(0x7f00000005c0), 0x2, 0x0) preadv(r3, &(0x7f0000000080)=[{&(0x7f0000000100)=""/21, 0x15}], 0x1, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f0000018000/0x2000)=nil, 0x2000, 0x0) r4 = open(&(0x7f0000002000)='./bus\x00', 0x14b142, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r4, 0xffffffffffffffff, 0x2c, 0x0, @void}, 0x10) ioctl$USBDEVFS_GET_SPEED(r4, 0x551f) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_usb_connect$cdc_ncm(0x0, 0xa8, &(0x7f0000000140)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x96, 0x2, 0x1, 0x73, 0x20, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, "ada4"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x886, 0x1, 0x100, 0x9}, {0x6, 0x24, 0x1a, 0x9, 0x36}, [@call_mgmt={0x5, 0x24, 0x1, 0x3, 0x3d}, @mbim={0xc, 0x24, 0x1b, 0xb, 0x5a, 0x62, 0x50, 0x44b}, @country_functional={0x12, 0x24, 0x7, 0x7, 0x401, [0x7, 0x400, 0x0, 0x9, 0x7, 0xfffe]}, @mdlm={0x15, 0x24, 0x12, 0x7fff}]}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x9, 0x0, 0x5}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0xf9, 0x4, 0xf6}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x3, 0x6, 0x9}}}}}}}]}}, &(0x7f0000000600)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x200, 0xf, 0x5, 0x67, 0xff, 0x84}, 0x17, &(0x7f0000000240)={0x5, 0xf, 0x17, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x10, 0x8, 0xf, 0x9b9f}, @wireless={0xb, 0x10, 0x1, 0x2, 0x82, 0x1, 0x3d, 0x9, 0xec}]}, 0x5, [{0x101, &(0x7f00000003c0)=@string={0x101, 0x3, "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"}}, {0x75, &(0x7f0000000280)=@string={0x75, 0x3, "7942ca2b797b5b44dbb80944421215b4182e604e02da6fb59a3b6ddd16b706bfb67a27135ed00251da9e242e2c51c642ef4af22d17552ed3f09380b84020175da8d12f72b1305d53825dd8514d619e7b19cc3cd4b64b245cba6a69748540f64eaf0bf40c7546a33e9de29103458839eafc6894"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x443}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x240a}}, {0xa0, &(0x7f0000000500)=@string={0xa0, 0x3, "408c51f8b4ccd717a01dbb4c4d0795b3107b03ffaab8631a6ce3cdb757c1a9df37aaf703e9b7678c99bae355ff8c04b95cbb021e1aaebe2bc3050cd6317fd4a97f973d4739ba40ba736716b432609f7058a1bf640992b964421addffc80325642fbfe79482ab89da4d360fdb3418a40b158d6a8332b76e7619ec49b08f72655f0e69cff5abdbc10601eab104570f75a408f6676336f92449c9bc0e38d07b"}}]}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e20, @private=0xa010100}, 0x10) writev(r5, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) recvmmsg(r5, &(0x7f0000003e40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10064, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 1.281768391s ago: executing program 2 (id=154): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0xd, 0x4, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r1}, &(0x7f0000000440), &(0x7f0000000480)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x4, &(0x7f00000000c0)={r1, &(0x7f00000005c0), 0x20000000}, 0x20) 1.218722455s ago: executing program 1 (id=155): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0xa08800, &(0x7f0000000140)=ANY=[], 0x1, 0x680, &(0x7f0000000440)="$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") r0 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r0, @ANYBLOB="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"], 0x21c}}, 0x0) 1.03577609s ago: executing program 2 (id=156): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0xc008aec1, &(0x7f00000000c0)=ANY=[@ANYBLOB="82"]) 803.025372ms ago: executing program 0 (id=157): syz_usb_connect$printer(0x6, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000000000000900000000ff0300000000000008000100ac"], 0x24}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000003680)={{0x0, 0x0, 0xffffffffffffff40}, "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", "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"}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000020000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f00000001c0)="240066b8010000000f01c1660f3880310f01cfbaf80c66b8b81acb8f66efbafc0cecbaf80c66b8bcb4ea8866efbafc0cedba430066ed66b8579e00000f23d00f21f866352000000f0f23f8643e660f6db79a5f6766c7442400993f19006766c7442402000001006766c744240600000000670f011c24", 0x76}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 795.40152ms ago: executing program 1 (id=158): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000003c0)=0x70, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000a80)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000004c0)='k', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000001200)=[{&(0x7f0000000640)="56a2f8fac12fe62412557d0b93fc068856edc93245b17f26836f3a849ac0bc787d12f69f827ada300c49140da769dbceb28e7084b0ce5189570095c98f76d297fe789cbf1cd1153469e8b01ab14fedbe62ed06bbcb6f37694d", 0x59}, {&(0x7f0000000440)="47c976258ac1cc5aa7", 0x9}, {&(0x7f0000000a00)="aad2e2bbaf5ae83c57d3f7f5ee64ef8c17530d7b98ec66a3bb829c5b623257b0ce12c550771a5873740bf2e4572005b614cf6e2f8d000000000000", 0x3b}], 0x3}}], 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0x1801, 0x4) sendto$inet(r0, &(0x7f0000000700)="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", 0xfe6a, 0x40040, 0x0, 0xfffffffffffffe93) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000000c0)=ANY=[]) 743.49306ms ago: executing program 2 (id=159): open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f00000003c0), 0x24, 0x0) listxattr(&(0x7f0000001e80)='./file0\x00', 0x0, 0x2) 645.491145ms ago: executing program 1 (id=160): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000005c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000680)={{0x7}}) 645.043542ms ago: executing program 3 (id=161): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x22, 0x4, 0x0, 0x0, 0x88, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @loopback, {[@end, @cipso={0x86, 0x4d, 0x0, [{0x0, 0x5, "2bc3a5"}, {0x0, 0xd, "070d4f3bfd7a77d39be1e8"}, {0x0, 0xc, "e70ea897bfc96dc512e1"}, {0x0, 0xa, "cb08398953df9ab1"}, {0x0, 0x7, "727a9c4c63"}, {0x0, 0x9, "363ca4208ac6fc"}, {0x0, 0xd, "bee699e538c0c858406990"}, {0x0, 0x2}]}, @end, @cipso={0x86, 0x22, 0x0, [{0x0, 0x9, "dba63368422227"}, {0x0, 0x4, "c143"}, {0x0, 0x9, "f95460bf1fa6ed"}, {0x0, 0x6, "4bff9de1"}]}]}}}}}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4140aecd, &(0x7f0000000040)=ANY=[]) 567.136963ms ago: executing program 2 (id=162): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e0, &(0x7f0000000000)="98") 566.801158ms ago: executing program 1 (id=163): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000000600)={[{@test_dummy_encryption}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x84}}, {@nomblk_io_submit}, {@commit={'commit', 0x3d, 0x5}}, {@nomblk_io_submit}, {@barrier_val={'barrier', 0x3d, 0x5}}, {@max_batch_time}, {@nojournal_checksum}, {@resgid={'resgid', 0x3d, 0xee01}}, {@noacl}, {@errors_continue}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) syz_open_procfs(0x0, 0x0) fallocate(r0, 0x40, 0x0, 0x1001f0) 475.646408ms ago: executing program 2 (id=164): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000140)={0x2, 0x0, {0x0, 0x0, 0x0, 0x18, 0x0, 0x60, 0x0, 0x123}}) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x759, &(0x7f0000001000)={[{@prjquota}, {@nogrpid}, {@discard}, {@errors_remount}, {@init_itable, 0x0}, {@orlov}, {@jqfmt_vfsv1}, {@nolazytime}, {@nobh}, {@jqfmt_vfsv1}, {@noauto_da_alloc}, {@mblk_io_submit}, {@usrjquota_path={'usrjquota', 0x3d, './file0/../file0/../file0'}}], [], 0x2c}, 0xfe, 0x50a, &(0x7f00000005c0)="$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") openat$ptmx(0xffffffffffffff9c, 0x0, 0x161281, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xa}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x101}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x802) write$evdev(r2, &(0x7f0000000000), 0x100000008) ioctl$EVIOCSABS20(r2, 0x401845e0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x1) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000380)='\x00', 0x89901) fchdir(0xffffffffffffffff) close(r3) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000001200)='vfat\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x5, &(0x7f0000000000)=0x6, 0x4) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="020a000307000000000000000000000005001a00ff020000000000000000000000000001ac1414bb00000000000000000000000000e379b481af7df6b47179ee"], 0x38}}, 0x0) 310.451106ms ago: executing program 3 (id=165): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200800, &(0x7f0000000940)={[{@nodiscard}, {}, {@auto_da_alloc_val}, {@nomblk_io_submit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@acl}, {@debug}]}, 0x5, 0x57a, &(0x7f0000000a00)="$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") listxattr(&(0x7f0000001e80)='./file0\x00', 0x0, 0x2) 75.07693ms ago: executing program 0 (id=166): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x2c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x1b, &(0x7f0000001800)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000017000000180100002020690000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000700)={r1, r3, 0x25, 0x0, @val=@perf_event}, 0x40) syz_emit_ethernet(0x36, &(0x7f0000000280)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 14.420383ms ago: executing program 1 (id=167): bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES8], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x16, 0x0, 0xffffffffffffffff, 0xffffffffffffffc9}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xf9, 0x0, &(0x7f0000000100)="feff03076844268cb89e14f04305fee0ffff00febabec44277fb86dd1402e000030c62079f4b4d2f87e5feca6aab055013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff400000000", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket(0x10, 0x803, 0x0) fsopen(0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x9801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @loopback}]}}}]}, 0x38}}, 0x0) sendmmsg$inet(r0, &(0x7f0000005ac0)=[{{&(0x7f0000000180)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000400)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @local, @local}}}], 0x20}}], 0x1, 0x0) 0s ago: executing program 2 (id=168): r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r0, 0xfffffffa, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.232' (ED25519) to the list of known hosts. [ 52.049721][ T5082] cgroup: Unknown subsys name 'net' [ 52.217898][ T5082] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 53.599834][ T5082] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 55.604804][ T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 55.614272][ T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 55.630728][ T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 55.639079][ T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 55.647106][ T54] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 55.654523][ T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 55.695318][ T5098] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 55.703925][ T5098] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 55.712048][ T5098] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 55.720792][ T5098] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 55.729000][ T5098] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 55.736648][ T5098] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 55.911984][ T5094] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 55.920804][ T5094] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 55.928378][ T5094] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 55.937475][ T5094] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 55.951490][ T5094] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 55.955208][ T5104] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 55.958829][ T5094] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 55.970898][ T5104] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 55.980673][ T5104] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 55.989368][ T5104] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 55.997759][ T5104] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 56.006828][ T5104] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 56.081292][ T5098] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 56.089724][ T5098] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 56.098993][ T5098] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 56.107642][ T5098] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 56.116176][ T5098] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 56.123803][ T5098] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 56.320405][ T5091] chnl_net:caif_netlink_parms(): no params data found [ 56.377503][ T5096] chnl_net:caif_netlink_parms(): no params data found [ 56.477723][ T5091] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.485269][ T5091] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.494541][ T5091] bridge_slave_0: entered allmulticast mode [ 56.501486][ T5091] bridge_slave_0: entered promiscuous mode [ 56.549385][ T5091] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.556589][ T5091] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.564853][ T5091] bridge_slave_1: entered allmulticast mode [ 56.573083][ T5091] bridge_slave_1: entered promiscuous mode [ 56.589291][ T5096] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.596576][ T5096] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.604249][ T5096] bridge_slave_0: entered allmulticast mode [ 56.611455][ T5096] bridge_slave_0: entered promiscuous mode [ 56.662662][ T5096] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.669824][ T5096] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.677173][ T5096] bridge_slave_1: entered allmulticast mode [ 56.685168][ T5096] bridge_slave_1: entered promiscuous mode [ 56.722467][ T5091] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.777677][ T5091] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.823353][ T5096] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.843342][ T5091] team0: Port device team_slave_0 added [ 56.863687][ T5091] team0: Port device team_slave_1 added [ 56.889958][ T5096] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.938429][ T5100] chnl_net:caif_netlink_parms(): no params data found [ 56.956580][ T5096] team0: Port device team_slave_0 added [ 56.963658][ T5091] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.971346][ T5091] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.997319][ T5091] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.009013][ T5101] chnl_net:caif_netlink_parms(): no params data found [ 57.020614][ T5091] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.027575][ T5091] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.054049][ T5091] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.070606][ T5108] chnl_net:caif_netlink_parms(): no params data found [ 57.089358][ T5096] team0: Port device team_slave_1 added [ 57.160676][ T5096] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.167633][ T5096] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.194712][ T5096] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.242842][ T5096] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.249814][ T5096] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.276718][ T5096] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.361694][ T5108] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.368896][ T5108] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.379092][ T5108] bridge_slave_0: entered allmulticast mode [ 57.385952][ T5108] bridge_slave_0: entered promiscuous mode [ 57.426126][ T5091] hsr_slave_0: entered promiscuous mode [ 57.438553][ T5091] hsr_slave_1: entered promiscuous mode [ 57.447191][ T5108] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.454893][ T5108] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.462186][ T5108] bridge_slave_1: entered allmulticast mode [ 57.468982][ T5108] bridge_slave_1: entered promiscuous mode [ 57.492902][ T5100] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.500020][ T5100] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.507333][ T5100] bridge_slave_0: entered allmulticast mode [ 57.515320][ T5100] bridge_slave_0: entered promiscuous mode [ 57.522916][ T5101] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.530051][ T5101] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.537604][ T5101] bridge_slave_0: entered allmulticast mode [ 57.544934][ T5101] bridge_slave_0: entered promiscuous mode [ 57.577279][ T5096] hsr_slave_0: entered promiscuous mode [ 57.583765][ T5096] hsr_slave_1: entered promiscuous mode [ 57.590070][ T5096] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.598346][ T5096] Cannot create hsr debugfs directory [ 57.613758][ T5100] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.621009][ T5100] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.628158][ T5100] bridge_slave_1: entered allmulticast mode [ 57.635547][ T5100] bridge_slave_1: entered promiscuous mode [ 57.642390][ T5101] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.649505][ T5101] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.659754][ T5101] bridge_slave_1: entered allmulticast mode [ 57.667151][ T5101] bridge_slave_1: entered promiscuous mode [ 57.704644][ T5108] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.751200][ T5098] Bluetooth: hci0: command tx timeout [ 57.765569][ T5108] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.786572][ T5101] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.798740][ T5101] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.836048][ T5098] Bluetooth: hci1: command tx timeout [ 57.845154][ T5100] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.857659][ T5100] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.929931][ T5108] team0: Port device team_slave_0 added [ 57.949796][ T5101] team0: Port device team_slave_0 added [ 57.976503][ T5108] team0: Port device team_slave_1 added [ 57.992163][ T5100] team0: Port device team_slave_0 added [ 57.999693][ T5101] team0: Port device team_slave_1 added [ 58.007474][ T5098] Bluetooth: hci2: command tx timeout [ 58.041985][ T5100] team0: Port device team_slave_1 added [ 58.048404][ T5108] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.055554][ T5108] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.070690][ T5098] Bluetooth: hci3: command tx timeout [ 58.087275][ T5108] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.129724][ T5108] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.136946][ T5108] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.151314][ T5098] Bluetooth: hci4: command tx timeout [ 58.169139][ T5108] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.181296][ T5101] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.188255][ T5101] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.214645][ T5101] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.227444][ T5101] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.234586][ T5101] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.260572][ T5101] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.298937][ T5100] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.305981][ T5100] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.332253][ T5100] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.365320][ T5100] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.372658][ T5100] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.399304][ T5100] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.492159][ T5100] hsr_slave_0: entered promiscuous mode [ 58.498674][ T5100] hsr_slave_1: entered promiscuous mode [ 58.505444][ T5100] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.513438][ T5100] Cannot create hsr debugfs directory [ 58.547019][ T5101] hsr_slave_0: entered promiscuous mode [ 58.553306][ T5101] hsr_slave_1: entered promiscuous mode [ 58.559309][ T5101] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.567220][ T5101] Cannot create hsr debugfs directory [ 58.596831][ T5108] hsr_slave_0: entered promiscuous mode [ 58.603139][ T5108] hsr_slave_1: entered promiscuous mode [ 58.609163][ T5108] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.616811][ T5108] Cannot create hsr debugfs directory [ 58.770771][ T5096] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 58.782434][ T5096] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 58.824957][ T5096] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 58.836107][ T5096] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 58.987849][ T5091] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 59.016216][ T5091] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 59.035587][ T5091] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 59.053190][ T5091] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 59.111981][ T5100] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 59.137621][ T5100] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 59.148859][ T5100] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 59.181466][ T5100] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 59.219534][ T5108] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 59.248957][ T5108] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 59.272981][ T5108] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 59.284735][ T5108] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 59.404439][ T5096] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.418318][ T5101] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 59.432328][ T5101] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 59.448368][ T5101] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 59.458204][ T5101] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 59.518550][ T5096] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.538686][ T5091] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.577714][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.585099][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.627442][ T5091] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.642331][ T5138] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.649516][ T5138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.682140][ T5143] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.689227][ T5143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.702738][ T5143] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.709841][ T5143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.749181][ T5100] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.817002][ T5091] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 59.831418][ T5098] Bluetooth: hci0: command tx timeout [ 59.857585][ T5108] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.873939][ T5100] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.894534][ T5142] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.901738][ T5142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.910631][ T5098] Bluetooth: hci1: command tx timeout [ 59.917255][ T5096] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 60.016639][ T5138] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.023830][ T5138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.077735][ T5098] Bluetooth: hci2: command tx timeout [ 60.097347][ T5108] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.135427][ T5101] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.152366][ T5098] Bluetooth: hci3: command tx timeout [ 60.187424][ T5100] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 60.232790][ T5098] Bluetooth: hci4: command tx timeout [ 60.233317][ T5143] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.245368][ T5143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.264483][ T5143] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.271693][ T5143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.327666][ T5091] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.403718][ T5096] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.420053][ T5101] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.462305][ T5142] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.469441][ T5142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.489222][ T5108] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 60.515062][ T5100] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.553915][ T5142] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.561148][ T5142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.603021][ T5091] veth0_vlan: entered promiscuous mode [ 60.644154][ T5091] veth1_vlan: entered promiscuous mode [ 60.709431][ T5096] veth0_vlan: entered promiscuous mode [ 60.809209][ T5100] veth0_vlan: entered promiscuous mode [ 60.829947][ T5096] veth1_vlan: entered promiscuous mode [ 60.847464][ T5108] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.913650][ T5100] veth1_vlan: entered promiscuous mode [ 60.926635][ T5091] veth0_macvtap: entered promiscuous mode [ 60.964990][ T5091] veth1_macvtap: entered promiscuous mode [ 61.007119][ T5096] veth0_macvtap: entered promiscuous mode [ 61.059214][ T5091] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.088352][ T5100] veth0_macvtap: entered promiscuous mode [ 61.108467][ T5096] veth1_macvtap: entered promiscuous mode [ 61.133370][ T5091] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.154906][ T5100] veth1_macvtap: entered promiscuous mode [ 61.169951][ T5091] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.180010][ T5091] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.189334][ T5091] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.198816][ T5091] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.217610][ T5101] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.248958][ T5100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.261799][ T5100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.276582][ T5100] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.287674][ T5100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.298522][ T5100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.312459][ T5100] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.365420][ T5100] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.375368][ T5100] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.384602][ T5100] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.394382][ T5100] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.443090][ T5096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.454479][ T5096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.465726][ T5096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.476341][ T5096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.488876][ T5096] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.502743][ T5096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.513790][ T5096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.524116][ T5096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.535399][ T5096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.547393][ T5096] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.586836][ T2442] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.600403][ T2442] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.613232][ T5096] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.628210][ T5096] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.637226][ T5096] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.646842][ T5096] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.694108][ T5108] veth0_vlan: entered promiscuous mode [ 61.727405][ T5101] veth0_vlan: entered promiscuous mode [ 61.756672][ T5108] veth1_vlan: entered promiscuous mode [ 61.767761][ T2830] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.778505][ T2830] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.808235][ T5101] veth1_vlan: entered promiscuous mode [ 61.883260][ T2422] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.904835][ T2422] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.914480][ T5098] Bluetooth: hci0: command tx timeout [ 61.926774][ T2872] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.955575][ T2872] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.970048][ T5108] veth0_macvtap: entered promiscuous mode [ 61.990736][ T5098] Bluetooth: hci1: command tx timeout [ 62.024003][ T5101] veth0_macvtap: entered promiscuous mode [ 62.044694][ T5108] veth1_macvtap: entered promiscuous mode [ 62.067572][ T2872] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.071252][ T5101] veth1_macvtap: entered promiscuous mode [ 62.087421][ T2872] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.089215][ T5108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.107658][ T5108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.118110][ T5108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.129983][ T5108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.140024][ T5108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.150544][ T5098] Bluetooth: hci2: command tx timeout [ 62.157212][ T5108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.170704][ T5108] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.189821][ T5108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.203293][ T5108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.215708][ T5108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.226275][ T5108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.231840][ T5098] Bluetooth: hci3: command tx timeout [ 62.236808][ T5108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.252559][ T5108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.267170][ T5108] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.296186][ T5108] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.306809][ T5108] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.311956][ T5098] Bluetooth: hci4: command tx timeout [ 62.316645][ T5108] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.331116][ T5108] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.418817][ T2830] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.450542][ T2830] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.478109][ T5101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.478131][ T5101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.478142][ T5101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.478155][ T5101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.478166][ T5101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.478178][ T5101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.478188][ T5101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.478200][ T5101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.500640][ T5101] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.501915][ T5174] netlink: 'syz.1.6': attribute type 12 has an invalid length. [ 62.549692][ T5101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.549717][ T5101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.549727][ T5101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.549740][ T5101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.549751][ T5101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.549763][ T5101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.549774][ T5101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.549787][ T5101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.558470][ T5101] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.778528][ T5101] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.778566][ T5101] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.778593][ T5101] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.778620][ T5101] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.788050][ T2422] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.788096][ T2422] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.884102][ T5178] loop2: detected capacity change from 0 to 4096 [ 62.921203][ T2872] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.921228][ T2872] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.935644][ T5178] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 62.935816][ T5178] NILFS (loop2): mounting unchecked fs [ 62.935878][ T5178] NILFS (loop2): recovery required for readonly filesystem [ 62.935893][ T5178] NILFS (loop2): write access will be enabled during recovery [ 62.964155][ T5099] udevd[5099]: incorrect nilfs2 checksum on /dev/loop2 [ 62.989790][ T5178] NILFS (loop2): invalid segment: Checksum error in super root [ 63.074498][ T5178] NILFS (loop2): error -22 while loading super root [ 63.281600][ T5187] loop0: detected capacity change from 0 to 128 [ 63.281995][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.327228][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.330415][ T5187] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 63.378930][ T5187] qnx6: wrong signature (magic) in superblock #1. [ 63.410205][ T5187] qnx6: unable to read the first superblock [ 63.449545][ T5192] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 63.458590][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.488639][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.506675][ T5191] loop2: detected capacity change from 0 to 2048 [ 63.666348][ T5191] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.903258][ T5205] netlink: 44 bytes leftover after parsing attributes in process `syz.4.10'. [ 63.918645][ T5100] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.991203][ T5098] Bluetooth: hci0: command tx timeout [ 64.148375][ T5098] Bluetooth: hci1: command tx timeout [ 64.188847][ T5209] loop2: detected capacity change from 0 to 256 [ 64.230788][ T5098] Bluetooth: hci2: command tx timeout [ 64.333491][ T5209] exfat: Unknown parameter '»‘zÂ|dÒùyx²LTrwˆž0 Æâœí\Ø[È ó¬]V:üÞxïþ.TTÏ¿õ€a%ÜQ³CuTÌ7Švs²þ³j*­IÌéª{]ï·òî*ù5JtÐsĪÈ~²ò0½fÛ®Gãûï”ï:Q㣤}ï`eÍL«ÛòyŸg1ô i/!ñ' [ 64.363392][ T5098] Bluetooth: hci3: command tx timeout [ 64.391071][ T5098] Bluetooth: hci4: command tx timeout [ 65.164042][ T5213] loop0: detected capacity change from 0 to 128 [ 65.187628][ T5219] loop3: detected capacity change from 0 to 2048 [ 65.207152][ T5213] FAT-fs (loop0): Unrecognized mount option "shoröDame=win95" or missing value [ 65.223482][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 65.225849][ T5219] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 65.254728][ T5219] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 65.440521][ T5138] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 65.456111][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 65.466354][ T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 36 [ 65.499185][ T9] usb 3-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 65.558155][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.587197][ T9] usb 3-1: Product: syz [ 65.609887][ T9] usb 3-1: Manufacturer: syz [ 65.620016][ T9] usb 3-1: SerialNumber: syz [ 65.628751][ T5226] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 65.645221][ T2422] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6 [ 65.690197][ T9] usb 3-1: config 0 descriptor?? [ 65.698386][ T5209] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 65.729445][ T9] hub 3-1:0.0: bad descriptor, ignoring hub [ 65.844056][ T9] hub 3-1:0.0: probe with driver hub failed with error -5 [ 66.114074][ T5209] kernel read not supported for file /eth0 (pid: 5209 comm: syz.2.11) [ 66.299445][ T29] audit: type=1800 audit(1720065084.850:2): pid=5209 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.11" name="eth0" dev="mqueue" ino=7388 res=0 errno=0 [ 66.330438][ T5138] usb 2-1: Using ep0 maxpacket: 32 [ 66.379943][ T5138] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 66.387385][ T9] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input5 [ 66.452996][ T5138] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 66.507031][ T5138] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 66.566443][ T5138] usb 2-1: Product: syz [ 66.584840][ T5138] usb 2-1: Manufacturer: syz [ 66.609146][ T5138] usb 2-1: SerialNumber: syz [ 66.654216][ T5138] usb 2-1: config 0 descriptor?? [ 66.701115][ T5217] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 66.809190][ T5239] loop3: detected capacity change from 0 to 64 [ 66.935496][ T5239] hfs: request for non-existent node 293 in B*Tree [ 66.988764][ T5239] hfs: request for non-existent node 293 in B*Tree [ 67.037826][ T5239] hfs: get root inode failed [ 67.110035][ T5138] usb 2-1: USB disconnect, device number 2 [ 67.325504][ T5251] loop3: detected capacity change from 0 to 256 [ 67.566709][ T5209] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 67.610713][ T5209] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 67.665548][ T5251] syz.3.17: attempt to access beyond end of device [ 67.665548][ T5251] loop3: rw=2049, sector=984, nr_sectors = 224 limit=256 [ 67.860389][ T5138] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 68.080396][ T5138] usb 2-1: Using ep0 maxpacket: 32 [ 68.115364][ T5138] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 68.166676][ T5138] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 68.195631][ T5138] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 68.223202][ T5138] usb 2-1: Product: syz [ 68.241043][ T5138] usb 2-1: Manufacturer: syz [ 68.268711][ T5138] usb 2-1: SerialNumber: syz [ 68.313782][ T5209] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 68.325761][ T5138] usb 2-1: config 0 descriptor?? [ 68.342384][ T5209] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 68.351855][ T5217] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 68.404506][ T5209] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 68.445193][ T5209] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 68.503533][ T926] usb 2-1: USB disconnect, device number 3 [ 68.527639][ T5209] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 68.568568][ T5209] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 68.698758][ T5209] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 68.739940][ T5209] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 68.782418][ T5265] FAULT_INJECTION: forcing a failure. [ 68.782418][ T5265] name failslab, interval 1, probability 0, space 0, times 1 [ 68.856921][ T5265] CPU: 1 UID: 0 PID: 5265 Comm: syz.1.19 Not tainted 6.10.0-rc6-next-20240703-syzkaller #0 [ 68.866963][ T5265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 68.877074][ T5265] Call Trace: [ 68.880387][ T5265] [ 68.883328][ T5265] dump_stack_lvl+0x241/0x360 [ 68.888048][ T5265] ? __pfx_dump_stack_lvl+0x10/0x10 [ 68.893292][ T5265] ? __pfx__printk+0x10/0x10 [ 68.897910][ T5265] ? __pfx___might_resched+0x10/0x10 [ 68.903224][ T5265] should_fail_ex+0x3b0/0x4e0 [ 68.907929][ T5265] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 68.914189][ T5265] should_failslab+0x9/0x20 [ 68.918711][ T5265] __kmalloc_noprof+0xd8/0x400 [ 68.923503][ T5265] genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 68.929595][ T5265] genl_rcv_msg+0x802/0xec0 [ 68.934118][ T5265] ? mark_lock+0x9a/0x360 [ 68.938476][ T5265] ? __pfx_genl_rcv_msg+0x10/0x10 [ 68.943547][ T5265] ? __pfx_lock_acquire+0x10/0x10 [ 68.948585][ T5265] ? __pfx_nl802154_pre_doit+0x10/0x10 [ 68.954068][ T5265] ? __pfx_nl802154_del_llsec_seclevel+0x10/0x10 [ 68.960423][ T5265] ? __pfx_nl802154_post_doit+0x10/0x10 [ 68.965995][ T5265] ? __pfx___might_resched+0x10/0x10 [ 68.971309][ T5265] netlink_rcv_skb+0x1e3/0x430 [ 68.976102][ T5265] ? __pfx_genl_rcv_msg+0x10/0x10 [ 68.981149][ T5265] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 68.986489][ T5265] genl_rcv+0x28/0x40 [ 68.990489][ T5265] netlink_unicast+0x7f0/0x990 [ 68.995282][ T5265] ? __pfx_netlink_unicast+0x10/0x10 [ 69.000588][ T5265] ? __virt_addr_valid+0x183/0x530 [ 69.005725][ T5265] ? __check_object_size+0x49c/0x900 [ 69.011029][ T5265] ? bpf_lsm_netlink_send+0x9/0x10 [ 69.016177][ T5265] netlink_sendmsg+0x8e4/0xcb0 [ 69.020973][ T5265] ? __pfx_netlink_sendmsg+0x10/0x10 [ 69.026284][ T5265] ? __import_iovec+0x536/0x820 [ 69.031152][ T5265] ? aa_sock_msg_perm+0x91/0x160 [ 69.036109][ T5265] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 69.041415][ T5265] ? security_socket_sendmsg+0x87/0xb0 [ 69.046896][ T5265] ? __pfx_netlink_sendmsg+0x10/0x10 [ 69.052195][ T5265] __sock_sendmsg+0x221/0x270 [ 69.056988][ T5265] ____sys_sendmsg+0x525/0x7d0 [ 69.061782][ T5265] ? __pfx_____sys_sendmsg+0x10/0x10 [ 69.067110][ T5265] __sys_sendmsg+0x2b0/0x3a0 [ 69.071722][ T5265] ? __pfx___sys_sendmsg+0x10/0x10 [ 69.076858][ T5265] ? vfs_write+0x7c4/0xc90 [ 69.081336][ T5265] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 69.087685][ T5265] ? do_syscall_64+0x100/0x230 [ 69.092470][ T5265] ? do_syscall_64+0xb6/0x230 [ 69.097164][ T5265] do_syscall_64+0xf3/0x230 [ 69.101680][ T5265] ? clear_bhb_loop+0x35/0x90 [ 69.106378][ T5265] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.112295][ T5265] RIP: 0033:0x7f2b5f375bd9 [ 69.116730][ T5265] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 69.136366][ T5265] RSP: 002b:00007f2b60115048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 69.144815][ T5265] RAX: ffffffffffffffda RBX: 00007f2b5f503f60 RCX: 00007f2b5f375bd9 [ 69.152811][ T5265] RDX: 0000000000000000 RSI: 0000000020001b40 RDI: 0000000000000005 [ 69.160804][ T5265] RBP: 00007f2b601150a0 R08: 0000000000000000 R09: 0000000000000000 [ 69.168793][ T5265] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 69.176782][ T5265] R13: 000000000000000b R14: 00007f2b5f503f60 R15: 00007ffc5e7f7918 [ 69.184796][ T5265] [ 69.329237][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 69.825661][ T5274] netlink: 12 bytes leftover after parsing attributes in process `syz.1.20'. [ 69.871784][ T5275] netlink: 12 bytes leftover after parsing attributes in process `syz.1.20'. [ 69.913280][ T5275] netlink: 12 bytes leftover after parsing attributes in process `syz.1.20'. [ 69.936258][ T5276] netlink: 12 bytes leftover after parsing attributes in process `syz.1.20'. [ 69.985426][ T5276] netlink: 12 bytes leftover after parsing attributes in process `syz.1.20'. [ 70.028907][ T46] usb 3-1: USB disconnect, device number 2 [ 70.029016][ C0] usbtouchscreen 3-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 70.045014][ T5276] netlink: 12 bytes leftover after parsing attributes in process `syz.1.20'. [ 70.054853][ T5276] netlink: 12 bytes leftover after parsing attributes in process `syz.1.20'. [ 70.070012][ T5276] netlink: 12 bytes leftover after parsing attributes in process `syz.1.20'. [ 70.110919][ T5276] netlink: 12 bytes leftover after parsing attributes in process `syz.1.20'. [ 70.119969][ T5276] netlink: 12 bytes leftover after parsing attributes in process `syz.1.20'. [ 70.231189][ T5281] FAULT_INJECTION: forcing a failure. [ 70.231189][ T5281] name failslab, interval 1, probability 0, space 0, times 0 [ 70.277098][ T5281] CPU: 0 UID: 0 PID: 5281 Comm: syz.2.21 Not tainted 6.10.0-rc6-next-20240703-syzkaller #0 [ 70.287134][ T5281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 70.297210][ T5281] Call Trace: [ 70.300513][ T5281] [ 70.303453][ T5281] dump_stack_lvl+0x241/0x360 [ 70.308163][ T5281] ? __pfx_dump_stack_lvl+0x10/0x10 [ 70.313396][ T5281] ? __pfx__printk+0x10/0x10 [ 70.318015][ T5281] ? __pfx___might_resched+0x10/0x10 [ 70.323327][ T5281] should_fail_ex+0x3b0/0x4e0 [ 70.328026][ T5281] ? getname_flags+0xb7/0x540 [ 70.332720][ T5281] should_failslab+0x9/0x20 [ 70.337252][ T5281] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 70.342654][ T5281] getname_flags+0xb7/0x540 [ 70.347173][ T5281] ? _copy_from_user+0xa6/0xe0 [ 70.351959][ T5281] user_path_at+0x24/0x60 [ 70.356310][ T5281] __se_sys_mount+0x297/0x3c0 [ 70.361009][ T5281] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 70.367012][ T5281] ? __pfx___se_sys_mount+0x10/0x10 [ 70.372230][ T5281] ? do_syscall_64+0x100/0x230 [ 70.377012][ T5281] ? __x64_sys_mount+0x20/0xc0 [ 70.381796][ T5281] do_syscall_64+0xf3/0x230 [ 70.386320][ T5281] ? clear_bhb_loop+0x35/0x90 [ 70.391019][ T5281] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.393719][ T5288] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 70.396912][ T5281] RIP: 0033:0x7efd47175bd9 [ 70.418158][ T5281] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 70.437787][ T5281] RSP: 002b:00007efd47f1f048 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 70.446233][ T5281] RAX: ffffffffffffffda RBX: 00007efd47303f60 RCX: 00007efd47175bd9 [ 70.454226][ T5281] RDX: 0000000020000240 RSI: 0000000020000100 RDI: 0000000020000080 [ 70.462217][ T5281] RBP: 00007efd47f1f0a0 R08: 0000000000000000 R09: 0000000000000000 [ 70.470211][ T5281] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 70.478195][ T5281] R13: 000000000000000b R14: 00007efd47303f60 R15: 00007ffe650f3a48 [ 70.486180][ T5281] [ 70.601326][ C1] IPv4: Oversized IP packet from 127.0.0.1 [ 70.710442][ T46] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 70.772885][ T5299] capability: warning: `syz.2.26' uses deprecated v2 capabilities in a way that may be insecure [ 70.848189][ T5301] loop0: detected capacity change from 0 to 128 [ 70.886267][ T5301] FAT-fs (loop0): Unrecognized mount option "shoröDame=win95" or missing value [ 70.920579][ T46] usb 4-1: Using ep0 maxpacket: 32 [ 70.946672][ T46] usb 4-1: config index 0 descriptor too short (expected 26, got 18) [ 70.975888][ T46] usb 4-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 70.981360][ T5293] kvm: emulating exchange as write [ 71.020448][ T46] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.051576][ T46] usb 4-1: config 0 descriptor?? [ 71.100040][ T46] as10x_usb: device has been detected [ 71.132510][ T46] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 71.725909][ T46] usb 4-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 71.769064][ T1246] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.792851][ T1246] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.001470][ T46] as10x_usb: error during firmware upload part1 [ 72.034919][ T46] Registered device nBox DVB-T Dongle [ 72.183944][ T5098] block nbd0: Receive control failed (result -32) [ 72.264438][ T5318] block nbd0: shutting down sockets [ 72.291431][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 72.302934][ T5327] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 72.403840][ T5327] 9pnet_fd: Insufficient options for proto=fd [ 72.561536][ T5327] input: syz0 as /devices/virtual/input/input6 [ 72.780760][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 72.783692][ T5325] loop2: detected capacity change from 0 to 1024 [ 72.859357][ T5325] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 72.902049][ T5325] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (25054!=20869) [ 72.944376][ T5344] loop1: detected capacity change from 0 to 256 [ 72.981233][ T5344] exfat: Unknown parameter '»‘zÂ|dÒùyx²LTrwˆž0 Æâœí\Ø[È ó¬]V:üÞxïþ.TTÏ¿õ€a%ÜQ³CuTÌ7Švs²þ³j*­IÌéª{]ï·òî*ù5JtÐsĪÈ~²ò0½fÛ®Gãûï”ï:Q㣤}ï`eÍL«ÛòyŸg1ô i/!ñ' [ 73.000762][ T46] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 73.025531][ T5325] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 73.039681][ T5325] EXT4-fs (loop2): filesystem has both journal inode and journal device! [ 73.240569][ T46] usb 1-1: Using ep0 maxpacket: 8 [ 73.248060][ T46] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 73.295024][ T46] usb 1-1: config 0 has no interface number 0 [ 73.329310][ T46] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 73.346008][ T46] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 73.356523][ T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 73.360393][ T46] usb 1-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 73.367386][ T5325] loop2: detected capacity change from 0 to 128 [ 73.379520][ T46] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.382956][ T5325] FAT-fs (loop2): Unrecognized mount option "/dev/dri/card#" or missing value [ 73.415475][ T46] usb 1-1: config 0 descriptor?? [ 73.436154][ T46] hso 1-1:0.1: Failed to find BULK IN ep [ 73.650428][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 73.659387][ T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 36 [ 73.685441][ T9] usb 2-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 73.717849][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.775339][ T9] usb 2-1: Product: syz [ 73.790056][ T9] usb 2-1: Manufacturer: syz [ 73.808027][ T9] usb 2-1: SerialNumber: syz [ 73.849540][ T9] usb 2-1: config 0 descriptor?? [ 73.883649][ T5344] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 73.911494][ T9] hub 2-1:0.0: bad descriptor, ignoring hub [ 73.957738][ T9] hub 2-1:0.0: probe with driver hub failed with error -5 [ 74.036481][ T9] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input7 [ 74.416883][ T46] usb 4-1: USB disconnect, device number 2 [ 74.585619][ T46] Unregistered device nBox DVB-T Dongle [ 74.596824][ T46] as10x_usb: device has been disconnected [ 75.147119][ T5344] kernel read not supported for file /eth0 (pid: 5344 comm: syz.1.32) [ 75.225839][ T29] audit: type=1800 audit(1720065093.780:3): pid=5344 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.32" name="eth0" dev="mqueue" ino=7674 res=0 errno=0 [ 75.397256][ T9] usb 1-1: USB disconnect, device number 2 [ 75.777137][ T5372] loop3: detected capacity change from 0 to 1024 [ 75.796529][ C0] IPv4: Oversized IP packet from 127.0.0.1 [ 76.225635][ T5383] __nla_validate_parse: 11 callbacks suppressed [ 76.225655][ T5383] netlink: 18 bytes leftover after parsing attributes in process `syz.4.37'. [ 76.552149][ T46] usb 2-1: USB disconnect, device number 4 [ 76.552209][ C0] usbtouchscreen 2-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 77.134069][ T8] cfg80211: failed to load regulatory.db [ 77.232098][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 77.330729][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 77.339398][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 77.349908][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 77.783070][ T5098] block nbd0: Receive control failed (result -32) [ 77.790784][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 77.799472][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 77.821514][ T5409] block nbd0: shutting down sockets [ 77.847693][ T5412] loop2: detected capacity change from 0 to 1024 [ 77.854970][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 77.882856][ T5412] hfsplus: invalid gid specified [ 77.887976][ T5412] hfsplus: unable to parse mount options [ 78.279346][ T5422] loop0: detected capacity change from 0 to 2048 [ 78.397929][ T5427] loop4: detected capacity change from 0 to 4096 [ 78.502769][ T5432] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 78.516496][ T5429] ======================================================= [ 78.516496][ T5429] WARNING: The mand mount option has been deprecated and [ 78.516496][ T5429] and is ignored by this kernel. Remove the mand [ 78.516496][ T5429] option from the mount to silence this warning. [ 78.516496][ T5429] ======================================================= [ 78.551381][ C0] vkms_vblank_simulate: vblank timer overrun [ 78.688793][ T5437] loop0: detected capacity change from 0 to 64 [ 78.749028][ T5437] hfs: request for non-existent node 293 in B*Tree [ 78.767243][ T5437] hfs: request for non-existent node 293 in B*Tree [ 78.818260][ T5437] hfs: get root inode failed [ 79.086367][ T5441] loop0: detected capacity change from 0 to 256 [ 79.174704][ T5426] loop1: detected capacity change from 0 to 32768 [ 79.231819][ T5426] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.45 (5426) [ 79.316588][ T5444] netlink: 32 bytes leftover after parsing attributes in process `syz.4.48'. [ 79.419052][ T5426] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 79.501440][ T5426] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 79.590684][ T5426] BTRFS info (device loop1): using free-space-tree [ 79.953905][ T5426] BTRFS info (device loop1): checking UUID tree [ 79.974489][ T5463] loop4: detected capacity change from 0 to 256 [ 80.218195][ T5441] syz.0.47: attempt to access beyond end of device [ 80.218195][ T5441] loop0: rw=2049, sector=984, nr_sectors = 224 limit=256 [ 80.709730][ T5091] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 80.911873][ T5470] loop4: detected capacity change from 0 to 1024 [ 80.972040][ T5470] hfsplus: invalid gid specified [ 81.006531][ T5470] hfsplus: unable to parse mount options [ 81.456426][ T2830] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.511539][ T2830] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.638037][ T2830] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.808011][ T2830] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.188393][ T2830] bridge_slave_1: left allmulticast mode [ 83.235686][ T2830] bridge_slave_1: left promiscuous mode [ 83.303740][ T5104] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 83.317783][ T5104] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 83.328339][ T5104] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 83.399154][ T5104] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 83.412521][ T5104] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 83.423442][ T5104] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 83.582532][ T2830] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.638924][ T5098] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 83.643090][ T5098] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 83.645187][ T5098] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 83.664704][ T5098] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 83.674283][ T5098] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 83.679028][ T5098] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 83.822456][ T2830] bridge_slave_0: left allmulticast mode [ 83.822509][ T2830] bridge_slave_0: left promiscuous mode [ 83.823569][ T2830] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.060833][ T5140] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 84.093897][ T5504] 9pnet_virtio: no channels available for device syz [ 84.272744][ T5140] usb 5-1: Using ep0 maxpacket: 8 [ 84.281786][ T5140] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 84.309858][ T5140] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.342490][ T5140] usb 5-1: config 0 descriptor?? [ 84.364626][ T5493] loop1: detected capacity change from 0 to 32768 [ 84.439733][ T5493] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 84.607031][ T5493] XFS (loop1): Ending clean mount [ 84.647597][ T5493] XFS (loop1): Quotacheck needed: Please wait. [ 84.762871][ T5493] XFS (loop1): Quotacheck: Done. [ 84.768474][ T2830] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 84.831229][ T2830] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 84.875981][ T2830] bond0 (unregistering): Released all slaves [ 84.927503][ T5091] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 85.042191][ T5516] loop0: detected capacity change from 0 to 1024 [ 85.516783][ T5140] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 85.571382][ T5140] asix 5-1:0.0: probe with driver asix failed with error -71 [ 85.616495][ T5140] usb 5-1: USB disconnect, device number 2 [ 85.754574][ T5104] Bluetooth: hci3: command tx timeout [ 86.154936][ T2830] hsr_slave_0: left promiscuous mode [ 86.185218][ T2830] hsr_slave_1: left promiscuous mode [ 86.247783][ T2830] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 86.270895][ T2830] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 86.296644][ T2830] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 86.324563][ T2830] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 86.378597][ T5542] loop1: detected capacity change from 0 to 1024 [ 86.392327][ T2830] veth1_macvtap: left promiscuous mode [ 86.405577][ T2830] veth0_macvtap: left promiscuous mode [ 86.549559][ T5542] hfsplus: invalid gid specified [ 86.561183][ T2830] veth1_vlan: left promiscuous mode [ 86.570593][ T5542] hfsplus: unable to parse mount options [ 87.291123][ T5104] block nbd2: Receive control failed (result -32) [ 87.306257][ T2830] veth0_vlan: left promiscuous mode [ 87.397030][ T5543] block nbd2: shutting down sockets [ 87.743106][ T5561] loop1: detected capacity change from 0 to 64 [ 87.794815][ T5561] hfs: request for non-existent node 293 in B*Tree [ 87.807141][ T5561] hfs: request for non-existent node 293 in B*Tree [ 87.836356][ T5104] Bluetooth: hci3: command tx timeout [ 87.848026][ T5561] hfs: get root inode failed [ 87.998494][ T5563] loop1: detected capacity change from 0 to 256 [ 88.610207][ T5563] syz.1.69: attempt to access beyond end of device [ 88.610207][ T5563] loop1: rw=2049, sector=984, nr_sectors = 224 limit=256 [ 89.618308][ T5573] loop2: detected capacity change from 0 to 256 [ 89.628089][ T5573] exfat: Unknown parameter '»‘zÂ|dÒùyx²LTrwˆž0 Æâœí\Ø[È ó¬]V:üÞxïþ.TTÏ¿õ€a%ÜQ³CuTÌ7Švs²þ³j*­IÌéª{]ï·òî*ù5JtÐsĪÈ~²ò0½fÛ®Gãûï”ï:Q㣤}ï`eÍL«ÛòyŸg1ô i/!ñ' [ 89.831225][ T2830] team0 (unregistering): Port device team_slave_1 removed [ 89.894260][ T2830] team0 (unregistering): Port device team_slave_0 removed [ 89.911699][ T5104] Bluetooth: hci3: command tx timeout [ 89.930550][ T46] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 90.121602][ T46] usb 3-1: Using ep0 maxpacket: 32 [ 90.143116][ T46] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 36 [ 90.167540][ T46] usb 3-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 90.182391][ T46] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.193563][ T46] usb 3-1: Product: syz [ 90.204026][ T46] usb 3-1: Manufacturer: syz [ 90.208722][ T46] usb 3-1: SerialNumber: syz [ 90.225229][ T46] usb 3-1: config 0 descriptor?? [ 90.248223][ T5573] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 90.263912][ T46] hub 3-1:0.0: bad descriptor, ignoring hub [ 90.270043][ T46] hub 3-1:0.0: probe with driver hub failed with error -5 [ 90.282801][ T46] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input8 [ 90.625162][ T5496] chnl_net:caif_netlink_parms(): no params data found [ 90.747928][ T5571] dvmrp0: entered allmulticast mode [ 90.768701][ T5573] kernel read not supported for file /eth0 (pid: 5573 comm: syz.2.73) [ 90.779822][ T29] audit: type=1800 audit(1720065109.340:4): pid=5573 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.73" name="eth0" dev="mqueue" ino=7388 res=0 errno=0 [ 91.023887][ T5496] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.032537][ T5496] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.042023][ T5496] bridge_slave_0: entered allmulticast mode [ 91.050658][ T5496] bridge_slave_0: entered promiscuous mode [ 91.064668][ T5496] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.073670][ T5496] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.081173][ T5496] bridge_slave_1: entered allmulticast mode [ 91.089383][ T5496] bridge_slave_1: entered promiscuous mode [ 91.223311][ T5583] loop4: detected capacity change from 0 to 128 [ 91.393890][ T5496] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.443590][ T5496] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.832611][ T5496] team0: Port device team_slave_0 added [ 91.854523][ T5586] loop1: detected capacity change from 0 to 128 [ 91.877336][ T5496] team0: Port device team_slave_1 added [ 91.911393][ T5586] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 91.943895][ T5586] qnx6: wrong signature (magic) in superblock #1. [ 91.974868][ T5586] qnx6: unable to read the first superblock [ 91.991405][ T5104] Bluetooth: hci3: command tx timeout [ 92.126243][ T5496] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.170613][ T5496] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.280390][ T5496] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.313380][ T5496] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.330663][ T5496] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.363358][ T5496] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.632112][ T5608] loop1: detected capacity change from 0 to 512 [ 92.643224][ T5496] hsr_slave_0: entered promiscuous mode [ 92.670209][ T5496] hsr_slave_1: entered promiscuous mode [ 92.685799][ T5496] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 92.700258][ T5608] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 92.717758][ T5608] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 92.740446][ T5496] Cannot create hsr debugfs directory [ 92.818855][ T5608] EXT4-fs (loop1): 1 truncate cleaned up [ 92.888430][ T5608] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 93.104247][ T2830] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.293841][ T2830] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.408265][ T5573] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 93.438079][ T5573] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 93.456124][ T2830] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.522936][ T5098] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 93.539480][ T5098] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 93.548381][ T5098] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 93.557752][ T5098] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 93.582018][ T5098] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 93.590161][ T5098] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 93.612465][ T5104] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 93.620674][ T5104] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 93.629127][ T5104] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 93.639142][ T5104] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 93.649498][ T5104] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 93.657880][ T5104] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 93.671086][ T5138] usb 3-1: USB disconnect, device number 3 [ 93.671132][ C1] usbtouchscreen 3-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 93.988969][ T29] audit: type=1800 audit(1720065112.540:5): pid=5624 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.80" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 93.998644][ T2830] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.085761][ T5640] loop4: detected capacity change from 0 to 64 [ 95.137390][ T5640] hfs: request for non-existent node 293 in B*Tree [ 95.190787][ T5640] hfs: request for non-existent node 293 in B*Tree [ 95.209922][ T5640] hfs: get root inode failed [ 95.252080][ T4881] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 95.368492][ T2830] bridge_slave_1: left allmulticast mode [ 95.393517][ T5643] loop4: detected capacity change from 0 to 256 [ 95.403791][ T2830] bridge_slave_1: left promiscuous mode [ 95.415516][ T2830] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.440997][ T2830] bridge_slave_0: left allmulticast mode [ 95.447162][ T2830] bridge_slave_0: left promiscuous mode [ 95.456691][ T2830] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.490457][ T4881] usb 3-1: Using ep0 maxpacket: 32 [ 95.506972][ T4881] usb 3-1: config index 0 descriptor too short (expected 26, got 18) [ 95.549119][ T4881] usb 3-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 95.561620][ T4881] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.578114][ T4881] usb 3-1: config 0 descriptor?? [ 95.606207][ T4881] as10x_usb: device has been detected [ 95.621033][ T4881] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 95.694986][ T4881] usb 3-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 95.723358][ T4881] as10x_usb: error during firmware upload part1 [ 95.737855][ T4881] Registered device nBox DVB-T Dongle [ 95.750681][ T5098] Bluetooth: hci1: command tx timeout [ 95.949580][ T5643] syz.4.85: attempt to access beyond end of device [ 95.949580][ T5643] loop4: rw=2049, sector=984, nr_sectors = 224 limit=256 [ 96.389017][ T2830] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 96.405729][ T2830] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 96.419742][ T2830] bond0 (unregistering): Released all slaves [ 96.645005][ T5496] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 96.674364][ T5091] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.674994][ T5496] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 96.711026][ T5496] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 96.797856][ T5091] syz-executor (5091) used greatest stack depth: 18416 bytes left [ 96.839500][ T5496] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 97.028002][ T2830] hsr_slave_0: left promiscuous mode [ 97.036468][ T2830] hsr_slave_1: left promiscuous mode [ 97.044101][ T2830] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 97.053398][ T2830] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 97.065153][ T2830] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 97.075048][ T2830] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 97.106868][ T2830] veth1_macvtap: left promiscuous mode [ 97.112683][ T2830] veth0_macvtap: left promiscuous mode [ 97.119009][ T2830] veth1_vlan: left promiscuous mode [ 97.124899][ T2830] veth0_vlan: left promiscuous mode [ 97.778641][ T5104] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 97.795235][ T5104] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 97.805498][ T5104] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 97.816221][ T5104] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 97.830563][ T5104] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 97.838045][ T5104] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 97.840545][ T5094] Bluetooth: hci1: command tx timeout [ 97.947686][ T2830] team0 (unregistering): Port device team_slave_1 removed [ 97.953924][ T5138] usb 3-1: USB disconnect, device number 4 [ 98.023930][ T5138] Unregistered device nBox DVB-T Dongle [ 98.039437][ T5138] as10x_usb: device has been disconnected [ 98.107739][ T2830] team0 (unregistering): Port device team_slave_0 removed [ 98.303199][ T5663] loop2: detected capacity change from 0 to 128 [ 98.315722][ T5663] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 98.343434][ T5663] qnx6: wrong signature (magic) in superblock #1. [ 98.349900][ T5663] qnx6: unable to read the first superblock [ 98.431373][ T5665] loop4: detected capacity change from 0 to 256 [ 98.449608][ T5665] exfat: Unknown parameter '»‘zÂ|dÒùyx²LTrwˆž0 Æâœí\Ø[È ó¬]V:üÞxïþ.TTÏ¿õ€a%ÜQ³CuTÌ7Švs²þ³j*­IÌéª{]ï·òî*ù5JtÐsĪÈ~²ò0½fÛ®Gãûï”ï:Q㣤}ï`eÍL«ÛòyŸg1ô i/!ñ' [ 98.770616][ T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 98.774323][ T5605] chnl_net:caif_netlink_parms(): no params data found [ 98.970680][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 98.985846][ T9] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 36 [ 99.020970][ T9] usb 5-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 99.030055][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.095271][ T9] usb 5-1: Product: syz [ 99.099478][ T9] usb 5-1: Manufacturer: syz [ 99.112838][ T9] usb 5-1: SerialNumber: syz [ 99.135905][ T9] usb 5-1: config 0 descriptor?? [ 99.151954][ T5665] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 99.164487][ T9] hub 5-1:0.0: bad descriptor, ignoring hub [ 99.195146][ T9] hub 5-1:0.0: probe with driver hub failed with error -5 [ 99.217756][ T5605] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.222208][ T9] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input9 [ 99.230484][ T5605] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.256930][ T5605] bridge_slave_0: entered allmulticast mode [ 99.271747][ T5605] bridge_slave_0: entered promiscuous mode [ 99.315730][ T5605] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.349996][ T5605] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.370545][ T5605] bridge_slave_1: entered allmulticast mode [ 99.393018][ T5605] bridge_slave_1: entered promiscuous mode [ 99.613646][ T5605] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.644795][ T5605] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.770223][ T5665] kernel read not supported for file /eth0 (pid: 5665 comm: syz.4.90) [ 99.790277][ T29] audit: type=1800 audit(1720065118.340:6): pid=5665 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.90" name="eth0" dev="mqueue" ino=9464 res=0 errno=0 [ 99.830128][ T5496] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.859735][ T5605] team0: Port device team_slave_0 added [ 99.910729][ T5098] Bluetooth: hci0: command tx timeout [ 99.917132][ T5104] Bluetooth: hci1: command tx timeout [ 99.928856][ T5658] chnl_net:caif_netlink_parms(): no params data found [ 99.969007][ T5605] team0: Port device team_slave_1 added [ 100.044255][ T5496] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.098139][ T5605] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.111658][ T5605] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.146359][ T5605] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.268108][ T5605] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.298947][ T5605] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.333996][ T5605] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.460151][ T5703] loop2: detected capacity change from 0 to 1024 [ 100.599071][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.607228][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.706372][ T5703] netlink: 8 bytes leftover after parsing attributes in process `syz.2.94'. [ 100.759951][ T5141] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.767143][ T5141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.863249][ T5705] netlink: 8 bytes leftover after parsing attributes in process `syz.2.94'. [ 100.874179][ T5707] netlink: 8 bytes leftover after parsing attributes in process `syz.2.94'. [ 100.923985][ T5605] hsr_slave_0: entered promiscuous mode [ 100.938450][ T5605] hsr_slave_1: entered promiscuous mode [ 100.949335][ T5605] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 100.965552][ T5605] Cannot create hsr debugfs directory [ 100.974717][ T5658] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.981999][ T5658] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.995651][ T5658] bridge_slave_0: entered allmulticast mode [ 101.012381][ T5658] bridge_slave_0: entered promiscuous mode [ 101.031239][ T5705] netlink: 8 bytes leftover after parsing attributes in process `syz.2.94'. [ 101.097674][ T5658] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.105205][ T5658] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.118319][ T5658] bridge_slave_1: entered allmulticast mode [ 101.140885][ T5658] bridge_slave_1: entered promiscuous mode [ 101.337005][ T5658] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.359127][ T5658] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.508190][ T5658] team0: Port device team_slave_0 added [ 101.519955][ T5658] team0: Port device team_slave_1 added [ 101.669180][ T5658] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.685147][ T5658] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.727606][ T5658] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.748151][ T5665] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 101.748209][ T5665] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 101.775107][ T5665] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 101.775135][ T5665] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 101.787036][ T5658] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.787055][ T5658] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.787079][ T5658] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.901338][ T4881] usb 5-1: USB disconnect, device number 3 [ 101.904943][ C0] usbtouchscreen 5-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 102.110750][ T5138] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 102.187684][ T5658] hsr_slave_0: entered promiscuous mode [ 102.197539][ T5658] hsr_slave_1: entered promiscuous mode [ 102.206836][ T5658] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 102.216656][ T5658] Cannot create hsr debugfs directory [ 102.300714][ T5138] usb 3-1: Using ep0 maxpacket: 8 [ 102.302963][ T5734] loop4: detected capacity change from 0 to 64 [ 102.323196][ T5138] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 102.324428][ T5734] hfs: request for non-existent node 293 in B*Tree [ 102.348889][ T5734] hfs: request for non-existent node 293 in B*Tree [ 102.351085][ T5138] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.364083][ T5734] hfs: get root inode failed [ 102.383691][ T5138] usb 3-1: config 0 descriptor?? [ 102.546221][ T5736] loop4: detected capacity change from 0 to 256 [ 102.712237][ T5496] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.853142][ T5736] syz.4.97: attempt to access beyond end of device [ 102.853142][ T5736] loop4: rw=2049, sector=984, nr_sectors = 224 limit=256 [ 103.066508][ T5496] veth0_vlan: entered promiscuous mode [ 103.191050][ T5496] veth1_vlan: entered promiscuous mode [ 103.250121][ T5605] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 103.362057][ T5658] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.406959][ T5605] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 103.428273][ T5138] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 103.443387][ T5605] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 103.459060][ T5138] asix 3-1:0.0: probe with driver asix failed with error -71 [ 103.475294][ T5605] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 103.486595][ T5138] usb 3-1: USB disconnect, device number 5 [ 103.596975][ T5658] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.665676][ T5496] veth0_macvtap: entered promiscuous mode [ 103.723042][ T5658] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.749977][ T5496] veth1_macvtap: entered promiscuous mode [ 103.848547][ T5658] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.877859][ T5496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.904748][ T5496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.929723][ T5496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.949337][ T5496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.966550][ T5496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.986725][ T5496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.005876][ T5496] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.056550][ T5496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.080988][ T5496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.097596][ T5496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.110245][ T5496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.124466][ T5496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.147203][ T5496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.172694][ T5496] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.221185][ T5496] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.261634][ T5496] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.276412][ T5496] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.287398][ T5496] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.070189][ T2830] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.079876][ T5658] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 105.104089][ T2830] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.194208][ T5658] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 105.245525][ T5605] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.280940][ T5658] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 105.321083][ T5658] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 105.397279][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.399148][ T5605] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.421090][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.446048][ T5140] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.453224][ T5140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.525107][ T5220] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.532311][ T5220] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.825779][ T5605] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 105.959689][ T5658] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.053388][ T5658] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.122772][ T5220] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.130032][ T5220] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.188671][ T4881] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.195912][ T4881] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.441800][ T5801] netlink: 56 bytes leftover after parsing attributes in process `syz.3.104'. [ 106.516641][ T5801] netlink: 56 bytes leftover after parsing attributes in process `syz.3.104'. [ 106.534924][ T5605] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.556285][ T5805] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 106.652470][ T5801] netlink: 8 bytes leftover after parsing attributes in process `syz.3.104'. [ 106.664750][ T5804] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 106.826431][ T5801] geneve1: entered promiscuous mode [ 106.908882][ T5658] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.959277][ T5781] loop4: detected capacity change from 0 to 32768 [ 107.011195][ T5781] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.100 (5781) [ 107.052794][ T5605] veth0_vlan: entered promiscuous mode [ 107.109219][ T5781] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 107.116982][ T5605] veth1_vlan: entered promiscuous mode [ 107.137300][ T5821] loop3: detected capacity change from 0 to 2048 [ 107.145754][ T5781] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 107.200884][ T5781] BTRFS info (device loop4): using free-space-tree [ 107.201569][ T5821] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.261124][ T5658] veth0_vlan: entered promiscuous mode [ 107.283549][ T5605] veth0_macvtap: entered promiscuous mode [ 107.296952][ T5605] veth1_macvtap: entered promiscuous mode [ 107.339038][ T5658] veth1_vlan: entered promiscuous mode [ 107.369963][ T5605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.392203][ T4881] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 107.403301][ T5605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.416587][ T5605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.455804][ T5605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.476019][ T5605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.496765][ T5605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.514019][ T5605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.540439][ T5605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.569614][ T5605] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.580582][ T4881] usb 3-1: Using ep0 maxpacket: 32 [ 107.588046][ T4881] usb 3-1: config index 0 descriptor too short (expected 26, got 18) [ 107.601140][ T4881] usb 3-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 107.610230][ T4881] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.625145][ T5496] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.634819][ T5781] btrfs: Unknown parameter 'undelete' [ 107.652405][ T4881] usb 3-1: config 0 descriptor?? [ 107.665362][ T5605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.692967][ T4881] as10x_usb: device has been detected [ 107.699091][ T4881] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 107.730973][ T5605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.790036][ T5605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.844320][ T5605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.852890][ T4881] usb 3-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 107.854417][ T5605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.873862][ T5605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.883757][ T5605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.894251][ T5605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.905987][ T5605] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.298112][ T5605] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.453988][ T4881] as10x_usb: error during firmware upload part1 [ 108.470808][ T4881] Registered device nBox DVB-T Dongle [ 108.498008][ T5605] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.539632][ T5605] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.566305][ T5605] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.589941][ T5861] loop3: detected capacity change from 0 to 64 [ 108.666496][ T5861] hfs: request for non-existent node 293 in B*Tree [ 108.693360][ T5108] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 108.713428][ T5861] hfs: request for non-existent node 293 in B*Tree [ 108.728010][ T5861] hfs: get root inode failed [ 108.943207][ T5865] loop3: detected capacity change from 0 to 256 [ 108.967450][ T5658] veth0_macvtap: entered promiscuous mode [ 109.037224][ T5658] veth1_macvtap: entered promiscuous mode [ 109.234754][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.269149][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.297745][ T5658] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.403214][ T5658] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.434439][ T5658] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.488746][ T5658] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.517152][ T5658] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.571645][ T5658] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.588562][ T5877] loop4: detected capacity change from 0 to 764 [ 109.617754][ T5658] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.716792][ T5658] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.788025][ T5877] loop4: detected capacity change from 0 to 1024 [ 109.796023][ T5658] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.829758][ T5658] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.843314][ T5658] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.942013][ T5865] syz.3.108: attempt to access beyond end of device [ 109.942013][ T5865] loop3: rw=2049, sector=984, nr_sectors = 224 limit=256 [ 109.980851][ T5658] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.002961][ T5658] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.015662][ T5658] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.026416][ T5658] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.043783][ T5877] hfsplus: xattr searching failed [ 110.049340][ T5658] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.062647][ T5658] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.091680][ T5658] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.121836][ T5658] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.146984][ T5658] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.147207][ T926] usb 3-1: USB disconnect, device number 6 [ 110.175797][ T5658] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.247470][ T5658] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.280810][ T926] Unregistered device nBox DVB-T Dongle [ 110.284736][ T2422] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.285227][ T926] as10x_usb: device has been disconnected [ 110.313456][ T2422] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.359868][ T5658] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.389452][ T5658] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.399790][ T5658] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.436573][ T5886] loop2: detected capacity change from 0 to 8 [ 110.465789][ T5886] SQUASHFS error: Failed to read block 0x3920001ea: -5 [ 110.480242][ T5886] unable to read xattr id index table [ 110.499107][ T5658] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.782232][ T12] hfsplus: b-tree write err: -5, ino 3 [ 111.337327][ T2830] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.381542][ T2830] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.494769][ T5905] loop0: detected capacity change from 0 to 64 [ 111.517130][ T5906] loop4: detected capacity change from 0 to 64 [ 111.556650][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.573160][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.840084][ T5906] Core dump to core aborted: cannot preserve file permissions [ 111.947184][ T5910] 9pnet_fd: Insufficient options for proto=fd [ 112.641016][ T5912] loop1: detected capacity change from 0 to 64 [ 114.771140][ T5947] loop3: detected capacity change from 0 to 64 [ 114.787971][ T5947] hfs: request for non-existent node 293 in B*Tree [ 114.814331][ T5947] hfs: request for non-existent node 293 in B*Tree [ 114.873516][ T5947] hfs: get root inode failed [ 115.129475][ T5952] loop3: detected capacity change from 0 to 512 [ 115.191710][ T5952] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 115.231354][ T5936] loop0: detected capacity change from 0 to 32768 [ 115.245070][ T5936] BTRFS: device fsid 92aec1fe-fee8-4e05-92dc-790b47b871d9 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.128 (5936) [ 116.097017][ T5936] BTRFS info (device loop0): first mount of filesystem 92aec1fe-fee8-4e05-92dc-790b47b871d9 [ 116.168510][ T5952] EXT4-fs error (device loop3): ext4_orphan_get:1394: inode #15: comm syz.3.131: iget: bad i_size value: -67835469387268086 [ 116.169032][ T5960] netlink: 8 bytes leftover after parsing attributes in process `syz.1.134'. [ 116.190604][ T5936] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 116.207682][ T5952] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz.3.131: couldn't read orphan inode 15 (err -117) [ 116.227181][ T5936] BTRFS info (device loop0): using free-space-tree [ 116.244684][ T5952] EXT4-fs (loop3): mounted filesystem f7ff0000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.265014][ T5952] ext2 filesystem being mounted at /10/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 116.582973][ T5496] EXT4-fs (loop3): unmounting filesystem f7ff0000-0000-0000-0000-000000000000. [ 116.625655][ T5940] loop2: detected capacity change from 0 to 32768 [ 116.636676][ T5940] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.127 (5940) [ 116.672125][ T5940] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 116.690502][ T5940] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 116.699468][ T5940] BTRFS info (device loop2): using free-space-tree [ 116.862276][ T5605] BTRFS info (device loop0): last unmount of filesystem 92aec1fe-fee8-4e05-92dc-790b47b871d9 [ 117.089567][ T5983] loop1: detected capacity change from 0 to 8192 [ 117.090539][ T4881] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 117.143259][ T5100] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 117.356238][ T4881] usb 5-1: Using ep0 maxpacket: 8 [ 117.385068][ T4881] usb 5-1: config 135 has an invalid interface number: 230 but max is 0 [ 117.414425][ T4881] usb 5-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 117.460777][ T4881] usb 5-1: config 135 has no interface number 0 [ 117.467133][ T4881] usb 5-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 117.708831][ T4881] usb 5-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 117.720689][ T4881] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.729743][ T4881] usb 5-1: Product: syz [ 117.734120][ T4881] usb 5-1: Manufacturer: syz [ 117.738749][ T4881] usb 5-1: SerialNumber: syz [ 117.779253][ T29] audit: type=1326 audit(1720065136.330:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6019 comm="syz.1.147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd22b575bd9 code=0x7ffc0000 [ 117.793858][ T6021] netlink: 4 bytes leftover after parsing attributes in process `syz.2.143'. [ 117.864286][ T29] audit: type=1326 audit(1720065136.330:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6019 comm="syz.1.147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd22b575bd9 code=0x7ffc0000 [ 117.864333][ T29] audit: type=1326 audit(1720065136.330:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6019 comm="syz.1.147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fd22b575bd9 code=0x7ffc0000 [ 117.864369][ T29] audit: type=1326 audit(1720065136.330:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6019 comm="syz.1.147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd22b575bd9 code=0x7ffc0000 [ 117.864403][ T29] audit: type=1326 audit(1720065136.330:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6019 comm="syz.1.147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fd22b575bd9 code=0x7ffc0000 [ 117.864441][ T29] audit: type=1326 audit(1720065136.340:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6019 comm="syz.1.147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd22b575bd9 code=0x7ffc0000 [ 117.864474][ T29] audit: type=1326 audit(1720065136.340:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6019 comm="syz.1.147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd22b575bd9 code=0x7ffc0000 [ 117.864508][ T29] audit: type=1326 audit(1720065136.340:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6022 comm="syz.1.147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd22b5a7bc5 code=0x7ffc0000 [ 117.864543][ T29] audit: type=1326 audit(1720065136.340:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6019 comm="syz.1.147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7fd22b575bd9 code=0x7ffc0000 [ 117.903942][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 117.938102][ T29] audit: type=1326 audit(1720065136.490:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6022 comm="syz.1.147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7fd22b575bd9 code=0x7ffc0000 [ 117.998759][ T4881] usb 5-1: USB disconnect, device number 4 [ 118.158270][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 118.223874][ T6028] loop1: detected capacity change from 0 to 64 [ 118.238566][ T9] usb 4-1: config 0 has no interfaces? [ 118.254796][ T9] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 118.282338][ T6028] hfs: request for non-existent node 293 in B*Tree [ 118.296519][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.297645][ T6028] hfs: request for non-existent node 293 in B*Tree [ 118.297718][ T6028] hfs: get root inode failed [ 118.319812][ T9] usb 4-1: config 0 descriptor?? [ 118.368583][ T6030] tipc: Started in network mode [ 118.376618][ T6030] tipc: Node identity ac1414aa, cluster identity 4711 [ 118.388192][ T6030] tipc: New replicast peer: 100.1.1.1 [ 118.397835][ T6030] tipc: Enabled bearer , priority 10 [ 118.490676][ T6033] loop1: detected capacity change from 0 to 512 [ 118.558806][ T6033] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 118.672859][ T6033] EXT4-fs error (device loop1): ext4_orphan_get:1394: inode #15: comm syz.1.149: iget: bad i_size value: -67835469387268086 [ 118.700521][ T6033] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz.1.149: couldn't read orphan inode 15 (err -117) [ 118.717056][ T6033] EXT4-fs (loop1): mounted filesystem f7ff0000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.729450][ T6033] ext2 filesystem being mounted at /10/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 118.864910][ T6012] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1073938440 (2147876880 ns) > initial count (33554432 ns). Using initial count to start timer. [ 119.163776][ T5138] usb 4-1: USB disconnect, device number 3 [ 119.189015][ T5658] EXT4-fs (loop1): unmounting filesystem f7ff0000-0000-0000-0000-000000000000. [ 119.395878][ T6046] loop1: detected capacity change from 0 to 1024 [ 119.438562][ T6046] hfsplus: invalid btree flag [ 119.445190][ T6046] hfsplus: failed to load catalog file [ 119.487605][ T6046] netlink: 204 bytes leftover after parsing attributes in process `syz.1.155'. [ 119.513962][ T5138] tipc: Node number set to 2886997162 [ 119.780433][ T926] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 119.839881][ T6064] loop1: detected capacity change from 0 to 1024 [ 119.971259][ T6064] EXT4-fs: Ignoring removed nomblk_io_submit option [ 119.973166][ T6071] loop2: detected capacity change from 0 to 512 [ 119.978596][ T6064] EXT4-fs: Ignoring removed nomblk_io_submit option [ 119.984580][ T926] usb 5-1: Using ep0 maxpacket: 16 [ 119.999630][ T6064] EXT4-fs (loop1): Test dummy encryption mode enabled [ 120.011086][ T6071] EXT4-fs (loop2): bad s_min_extra_isize: 65535 [ 120.024983][ T926] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1023 [ 120.042822][ T6064] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.062800][ T926] usb 5-1: string descriptor 0 read error: -22 [ 120.083541][ T926] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 120.092853][ T926] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.160262][ T6076] loop3: detected capacity change from 0 to 1024 [ 120.231609][ T6076] EXT4-fs: Ignoring removed nomblk_io_submit option [ 120.237681][ T6064] fscrypt: AES-256-XTS using implementation "xts-aes-aesni-avx" [ 120.288020][ T6076] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a043c018, mo2=0002] [ 120.308062][ T6076] System zones: 0-1, 3-12 [ 120.323652][ T6076] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.381122][ T5658] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.401953][ T6086] Oops: stack segment: 0000 [#1] PREEMPT SMP KASAN PTI [ 120.401980][ T6086] CPU: 1 UID: 0 PID: 6086 Comm: syz.0.166 Not tainted 6.10.0-rc6-next-20240703-syzkaller #0 [ 120.402002][ T6086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 120.402012][ T6086] RIP: 0010:bpf_xdp_redirect+0x59/0x1a0 [ 120.402050][ T6086] Code: 81 c3 00 18 00 00 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 b5 18 90 f8 48 8b 1b 4c 8d 63 38 4c 89 e5 48 c1 ed 03 <42> 0f b6 44 2d 00 84 c0 0f 85 d0 00 00 00 45 8b 34 24 44 89 f6 83 [ 120.402066][ T6086] RSP: 0018:ffffc9000d1ff960 EFLAGS: 00010202 [ 120.402083][ T6086] RAX: 1ffff110035666c0 RBX: 0000000000000000 RCX: 0000000000040000 [ 120.402096][ T6086] RDX: ffffc900034c1000 RSI: 00000000000005f5 RDI: 00000000000005f6 [ 120.402109][ T6086] RBP: 0000000000000007 R08: ffffffff8faf7a6f R09: 1ffffffff1f5ef4d [ 120.402122][ T6086] R10: dffffc0000000000 R11: fffffbfff1f5ef4e R12: 0000000000000038 [ 120.402133][ T6086] R13: dffffc0000000000 R14: ffffc90009e7c048 R15: 0000000000000000 [ 120.402146][ T6086] FS: 00007f71fcf2e6c0(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 [ 120.402160][ T6086] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 120.402172][ T6086] CR2: 00007efd472cfd38 CR3: 000000006d264000 CR4: 00000000003506f0 [ 120.402187][ T6086] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 120.402197][ T6086] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 120.402209][ T6086] Call Trace: [ 120.402215][ T6086] [ 120.402222][ T6086] ? __die_body+0x88/0xe0 [ 120.402249][ T6086] ? die+0xcf/0x110 [ 120.402273][ T6086] ? do_trap+0x15a/0x3a0 [ 120.402297][ T6086] ? do_error_trap+0x1dc/0x2c0 [ 120.402320][ T6086] ? __pfx_do_error_trap+0x10/0x10 [ 120.402342][ T6086] ? rcu_is_watching+0x15/0xb0 [ 120.402367][ T6086] ? exc_stack_segment+0x38/0x50 [ 120.402387][ T6086] ? asm_exc_stack_segment+0x26/0x30 [ 120.402412][ T6086] ? bpf_xdp_redirect+0x59/0x1a0 [ 120.402437][ T6086] bpf_prog_667628423f708291+0x51/0x80 [ 120.402459][ T6086] tun_get_user+0x3321/0x4560 [ 120.402479][ T6086] ? tun_get_user+0x84c/0x4560 [ 120.402503][ T6086] ? __pfx_tun_get_user+0x10/0x10 [ 120.402525][ T6086] ? tun_get+0x1e/0x2f0 [ 120.402548][ T6086] ? tun_get+0x1e/0x2f0 [ 120.402563][ T6086] ? tun_get+0x27d/0x2f0 [ 120.402580][ T6086] tun_chr_write_iter+0x113/0x1f0 [ 120.402599][ T6086] vfs_write+0xa72/0xc90 [ 120.402617][ T6086] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 120.402635][ T6086] ? __pfx_vfs_write+0x10/0x10 [ 120.402648][ T6086] ? do_futex+0x392/0x560 [ 120.402681][ T6086] ksys_write+0x1a0/0x2c0 [ 120.402699][ T6086] ? __pfx_ksys_write+0x10/0x10 [ 120.402717][ T6086] ? do_syscall_64+0x100/0x230 [ 120.402734][ T6086] ? do_syscall_64+0xb6/0x230 [ 120.402750][ T6086] do_syscall_64+0xf3/0x230 [ 120.402765][ T6086] ? clear_bhb_loop+0x35/0x90 [ 120.402786][ T6086] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.402804][ T6086] RIP: 0033:0x7f71fc17475f [ 120.402819][ T6086] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 29 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 7c 8c 02 00 48 [ 120.402833][ T6086] RSP: 002b:00007f71fcf2e010 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 120.402851][ T6086] RAX: ffffffffffffffda RBX: 00007f71fc303f60 RCX: 00007f71fc17475f [ 120.402865][ T6086] RDX: 0000000000000036 RSI: 0000000020000280 RDI: 00000000000000c8 [ 120.402877][ T6086] RBP: 00007f71fc1e4a98 R08: 0000000000000000 R09: 0000000000000000 [ 120.402888][ T6086] R10: 0000000000000036 R11: 0000000000000293 R12: 0000000000000000 [ 120.402899][ T6086] R13: 000000000000000b R14: 00007f71fc303f60 R15: 00007ffc6bfe63f8 [ 120.402919][ T6086] [ 120.402925][ T6086] Modules linked in: [ 120.402938][ T6086] ---[ end trace 0000000000000000 ]--- [ 120.510358][ T926] cdc_ncm 5-1:1.0: bind() failure [ 120.516800][ T6086] RIP: 0010:bpf_xdp_redirect+0x59/0x1a0 [ 120.538661][ T926] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 120.540674][ T6086] Code: 81 c3 00 18 00 00 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 b5 18 90 f8 48 8b 1b 4c 8d 63 38 4c 89 e5 48 c1 ed 03 <42> 0f b6 44 2d 00 84 c0 0f 85 d0 00 00 00 45 8b 34 24 44 89 f6 83 [ 120.540693][ T6086] RSP: 0018:ffffc9000d1ff960 EFLAGS: 00010202 [ 120.540713][ T6086] RAX: 1ffff110035666c0 RBX: 0000000000000000 RCX: 0000000000040000 [ 120.540726][ T6086] RDX: ffffc900034c1000 RSI: 00000000000005f5 RDI: 00000000000005f6 [ 120.540739][ T6086] RBP: 0000000000000007 R08: ffffffff8faf7a6f R09: 1ffffffff1f5ef4d [ 120.540753][ T6086] R10: dffffc0000000000 R11: fffffbfff1f5ef4e R12: 0000000000000038 [ 120.540766][ T6086] R13: dffffc0000000000 R14: ffffc90009e7c048 R15: 0000000000000000 [ 120.540780][ T6086] FS: 00007f71fcf2e6c0(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 [ 120.540797][ T6086] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 120.540811][ T6086] CR2: 00007efd472cfd38 CR3: 000000006d264000 CR4: 00000000003506f0 [ 120.540828][ T6086] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 120.540840][ T6086] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 120.540854][ T6086] Kernel panic - not syncing: Fatal exception in interrupt [ 120.541063][ T6086] Kernel Offset: disabled