last executing test programs: 11.558397902s ago: executing program 3 (id=1534): r0 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8) mkdir(&(0x7f00000000c0)='./control\x00', 0x0) close(r0) r1 = syz_io_uring_setup(0xf3d, &(0x7f0000000480), &(0x7f0000000080)=0x0, &(0x7f0000000540)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r1, 0x2, 0x0, 0x0, 0x0, 0x0) r3 = epoll_create(0x6) mount$9p_fd(0x0, &(0x7f0000000040)='./control\x00', &(0x7f0000000100), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}}) 10.019468537s ago: executing program 3 (id=1541): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f000000df00)={0x28, 0x2c, 0x1, 0x0, 0x0, "", [@nested={0x18, 0x0, 0x0, 0x1, [@typed={0x14, 0x0, 0x0, 0x0, @ipv6=@empty}]}]}, 0x28}], 0x1}, 0x0) 9.437434854s ago: executing program 4 (id=1543): r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) read$FUSE(r0, &(0x7f0000000040)={0x2020}, 0x2020) writev(r0, &(0x7f0000002100)=[{&(0x7f00000020c0)='\\', 0x1}], 0x1) 9.308754558s ago: executing program 3 (id=1544): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x10) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001040)={0xf, {"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", 0x1000}}, 0x1006) ioctl$VT_GETSTATE(r1, 0x4b40, 0x0) 8.776916555s ago: executing program 4 (id=1545): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) 7.72921054s ago: executing program 4 (id=1549): syz_mount_image$hfsplus(&(0x7f0000007340), &(0x7f00000002c0)='./file0\x00', 0x400044, &(0x7f0000001fc0)=ANY=[@ANYBLOB="63726561746f723d87bdd32b2c747970653d831a408e2c756d61736b3d30303030303030303030303030303030303030303030332c6e6f626172726965722c747970653d3beed5462c747970653da645475b2c6e6c733d63703737352c006fd1a99a36bd7e8535a30dd856ccbc512249c157423f451f603cb1a43efda03321281c75b196ee5a4bc81182ce160e8d90c02c6f1404ba927be552f7f97ef27fad1c9a5ade4f7fd71002c3d6d59a59ec266f6e02b89594c24372bba56e9a2688daf5f0daf1c4c97480d93eac6c347b4500c1b43e7e68a357cf24836bcb9fc612798de3aae977b0af282b6e5cd74b108a75d949232334c6bccce535e0ee2b9b54dce7485756bfba7e5f0c9f1ccec6d10bbb7987e4a0297107be465197676cf92a23252f73d31aebcc12d3be33ee39f30e9c2d763cbf8ead4283f050ec5370c841ebec1d23045b436a7a692907e15b5adb30a0768c0000000000"], 0x3, 0x638, &(0x7f0000001980)="$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") fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) socket$kcm(0x29, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='net/kcm\x00') r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c000000000000000000000014", @ANYRES8=0x0, @ANYRES32=r0], 0x30}}, 0x0) 7.326502678s ago: executing program 3 (id=1551): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = dup2(r0, r1) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010000100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}, {&(0x7f0000001100)=ANY=[], 0x3b0}], 0x2}, 0x0) sendmmsg$inet(r2, &(0x7f0000000dc0)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000a00)="316f825a3d29f96a2093a917017b4cd30000000000000035ed313e19d6dd", 0x1e}, {&(0x7f0000000b40)="0036d551863e1902129da79f5986e05288f50e5398660c1a29b0f45c0cc36902e0251c8d34197b357b32b161f9ad72d55a0eab976aae24ed805271b43f0ce2fea5e764494873e0d82a172b3bb54f59b458fd50afd450446b2ac8f2fb4dad61bd500a119b54c74a12e4569e47b69a95f92c6380af2bd003fa56f06a23bbd1c76d7756ff4fcaff0c23374ec7c4aadbb8b985f14893a91d752bebf5f53d5b7a21a20f4f079d2d8e79be174ef9355b70719c712c5d15d2e7505a8696b50738ece15ee5", 0xc1}, {&(0x7f0000000700)="f5e022a4d2ed0cf5f8b2e9857cb9af98da7aa60f7a1582aadeaef336f9139f6768452f868624c7e6ce0948f33f1a63e0fcf0f2df283b3ca3f1f4de26a8b575ccb465985e48f65b9a7fcc93c0a5be8b16774f7c7ca9848a182d6ee7c0f2b9c0e7030ed93ee34214c25c951279b18c8e5bfbc52152be37f5e2b783e2149be25180430ac63ee1bbe01fbb6125e65839ae5b02d542a97d1bfb1ca420b5405baaaf5ec6ad96af2814dbbea5a064f2ab6fc0904c07f02cbfadfb96866d962e6e21d3a0a0276a36e01b6edafd6c8461de7afec966f9c023ffe15c3c1caec8ff3ef3", 0xde}, {&(0x7f0000000440)="fff5c0293353db83a683db60266a3867d03f740f4f0a7bafe7be9b2bac0bf1b2019dbde5f640c897ac57789fb8490642b47a96f0d03ec69d1f6e90e86be7fb3ef9e76969438283b0ab8d31b707ddd3b453f5ed67232e172945aecaf6dd89d72d7a429ef6d0dcc5f0d9cc", 0x6a}], 0x4}}], 0x1, 0x0) 6.994762923s ago: executing program 0 (id=1553): syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0xb, &(0x7f0000000000)=ANY=[], 0x0) ioctl$BTRFS_IOC_ADD_DEV(r1, 0xc0085508, &(0x7f00000000c0)={{r1}, "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"}) 6.858214894s ago: executing program 2 (id=1554): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={r3}, 0x8) 6.819984171s ago: executing program 4 (id=1555): r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) read$FUSE(r0, &(0x7f0000000040)={0x2020}, 0x2020) writev(r0, &(0x7f0000002100)=[{&(0x7f00000020c0)='\\', 0x1}], 0x1) 6.344402753s ago: executing program 2 (id=1556): r0 = openat$rdma_cm(0xffffff9c, &(0x7f0000000600), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000640)={0x0, 0x18, 0xfa00, {0x0, 0xffffffffffffffff, 0x2}}, 0x20) 6.21767766s ago: executing program 4 (id=1557): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "a05c7b5d00008023e9c5bcf5ff7700"}) r1 = syz_open_pts(r0, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000240)={0x8300, 0x7}, 0x10, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(0xffffffffffffffff, 0x40bc5311, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x80000c, &(0x7f00000000c0)=ANY=[@ANYBLOB="6e6f626172726965722c706172743d3078303030303430303030303030313030302c0078882966cd1e271f4b898d19cebbe90256f43061d4fa36087abc01bda5257b3e267df350582278a2e437f84560d1a236a0d9219f219bbff844867524290cee05df24b209bb9683bb51ea7a35d355a81c05b48c0f8dbd04e9017f485a7beb91a4fdfaee07aa29932cdd3502008d0e1ca1c2955969669ba017b1b5cb215ea2d6eb15f9c574d2fc3c57771ded3be5c3d51bd24898355feee34fca4825e9ec"], 0x2, 0x6e7, &(0x7f0000000440)="$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") r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) ioctl$TIOCL_PASTESEL(r4, 0x541c, &(0x7f00000010c0)) write$UHID_INPUT(r5, &(0x7f0000000040)={0xc, {"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", 0x1000}}, 0x1006) ftruncate(r4, 0x4) sendmsg(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="845a7434e73a23cdc6c2ea95446f942300df1bab17ef733da9acce8ef262c01c33", 0x21}, {&(0x7f0000000640)="06a3de85a08725620c46d833a38f302952b0ede4c130b3db268ce1a8acfc21281504cf9a7b6ab15c68d6544f1141c35c0cc949c90ad45de9b0c3e841d6437fb1cf6414d8c118741fc8f5d5e8cd91bc133af0abe8c10806a75023c74c468770bad04938b56d2ec25530a18f5b3428649b35f52fe7cff48cc25a7d05b33ff266473bf3d5461fc09e5f98f2afaaeb4ef054b66d137ec4196969347418ace463a6e465d27700182bc0d7988034d7134f4321bb0219f21a2c42ac25eb7923a50e207daf4b49a2a32ab2d91067103374095e589642b4a34588caed737ba0ac12991fb2d48c5cc09679d4b572c0f0b0784da21ea7d84f2ec5a2555d003e4a6393fe1a34d13be67db18fde50e083276b12f4466151ce505a30599d48582583c99e5158cd42b4b2aa14fb10ed6936cf5c1b223df0c6f2bad1d1d65e20bc9491dfb7b7a947a3cf48aa2c5d48fc58b0818bf3b94373129f3d3fcdbe2bd9af614ee016addb674ea6a4caeaa1e7d27637550feee52a79566949f83d3357cc94133d7f05d49d392bf9db80502452cdc3275738b687e3b30ebe2bd0fecd782befe9442b9da28102680fad4c4b5faadbe183bd80ea17ace8be854a3363d369025ab3943d8af412af42aeeb642f61686b148ce0fd16ff211a65eba1adbf88df2ca296c9eb5e47fa0dbb0b045df30e612af9833d238e73e83fe8bdd39e72040214f1ad6cc8e15cb7858ffecd8451708e2e11fee7e0e4a929b08cbb90dbff95c547bb8ac5acc587292e9b749b171d1aefe2b7ec4984a8b9fc6fbcb6f25b57e289035029520279478c87fb34d934506dbcadbc8ba84ec7e8c7e2cdc1c2a1aa215fcffacfcbc8e598f14a16f124ddc7f32138208794f27047d72e183c8b66fb9d7c0d5e57e0020b0f0e3f7d2604c463ef90bfa3e9624fc0c930a90375c2e555ae0e0291ac682d7b3539b2182296ece872ed4120c4d111bc5ab5bcf214f76e545106faffa9cf04075ad27d31f63bb862252899a3e90ec865ef8f47a47195ba59bc24c3e8193f20f07d475c0d3a32c16d5ee7781f5140b53a4f9bb07acf8ac9775c78959f1130218735574e1160bdecc932db9b9426858017247e7387a9f1e7b0941cb41a8b228dee0426d8fbd55e3406b16fd5afcbbe39b524dfbf705017e19fe708625d58995c1ec76bd1fb197689d42c97fcc441dacb501b6534604b639ed7a6cbbcec06ee3b4de11c981eb43f743088713f53223adebc2cfa4319674b5537653b795ea4503243c81419e2cae69f610c8be6442db3fb254900d43238f7d59bc10f4d5334c91a066a10d4794c1fef439eaa66b312385ce7bfa94b52556264ab144c9da26fa5e7bf98c2046397dee10f3b247d3255b8bee932d428e67aef79ebb9f1bcace169149c0328ba4180f2e5dfac89e8eb4052f5a7d431551a380a318fe689d762637cde57bc5103c0271bd52821385a185c921a39341d16d45c9421bf3335354e28630f7429d3c022730e204919ff3140fb88398d0f1f8bc49d831dbce6de126c78b71d81af329acb75ae0af0011101e59a7b27d00707548fcfb7e98dd64089a93109bb2808a0f4322dd0b50f66d5ddbbd3e6d3e47692a854ae8f3f0af6d02dca18ce0066e65a96b7b47e696f2647f366a828f9ec3f38d0cfd5253e81eb0fdb0f96302c42b1d1fb090b6d4843576fccd8fc839002cd4ddd963cedc910a26ea5357fdb1df5d90ac03c76332958cd4c6d243761152e96c6da40eefeda7f8c4883d41257c4cdf871514eea3f52697c7994a60f302addccad2b3004654793edaf1a94546ecd2be0874978b125f3a37d27aa9c347539380d794417b7966f272f1c3803e8619a750bb14f0d0f14f646e7ccd91f5df0c9fe03707832b72d67dc6ddde84a801b79b6d46c2dc6f75ef07ba45efe63ac2df26c1c60ad69553e25676896b01315bc035d285519b44dbb801b6871d4b02eb120e0a67b289e231581492c1bf068dd60d5d80b4f8d7eb2e296f179cc80f98952842545a5cbe6ce961e507889a54bff0446c1571133e9465ef96a19e7d31cea628048a7e532476da944ef0f145bd2c737d0721e666b92d5b01e5282e1c1c7705e9849ef1c232788cb6a8f9346aa11756aa5de42b0a9a5278e5fe60a728cb0880d7c0ecdcda38946c0da1379c9cdc96f293794eda027774ff3a8e63e54622dccb0558dd42bd99fdb15d107f01ac919411b35d1fb11dcdbf699a6ab4bad4e8dbca64acc493497c9fc8900b038a479ba89718dcd27beb2f8249c0d136555c8289c76c24de72a8666d128eed7047bc162e08b85aebe2020d5852b6747a0c2af0da530f5377a3e2975486e7ab3519ec0fc143e254ab3669d9bac445e9a485d5cebf117ede5f897132b01d09f7ccf8c38f9b1a6d33457e0714095d9861f627a6e3fc727d44ec8aca003a12febd0aaa3910425a58a88e99c185f1722b8abc5eccf2fb99a1c4704c7bb1a2214bb1522b0acda9670c47ea385d3d8a6f13b90d687ad52396e56e51613807eca650f4bf6e58223e0b5502edfc9d6aef78f04318345a1c94c002b04e1ca37636518044b54e389e109eaa52f97946850d2046d9e535d3e007b574acc97d551cbd9d11932f3ce8261e48173433e9a8382084ff27c29cd4a89ebb34e5a7a53eeb65e6c30fac280ea1c976aa1a3d531a2378bc4cc6bffae18f5d81ac392280238d86bf4529763d8c6976e40a501e9c94b398a3eb462802abd1deddd3d29bb2c9855c91420cb7730a7dc066bcec251255e0a8af24b43dbcef0e527a313f095044ac77ebb41eeb5138d84fbcb84fca3e260edbe224b53427e53bfb646863104113b3b74996be4c6b555ad908f73279692466dfcb80534e1a2aa352d1a950a246f6ca26ec441b4197bd3ad578030aef64afdc6dcc4cf2932c9026c8661fef713111044583c7e1346de1869001d724a6b4d5c0c14846b872d16abfa3fa134944bbabcf01b3d9301e5fe6eb46a20358d7c407a785939b723a5807f0a6f618f4110e124ca43e2626b45f796bab222483bfba1cb3ea907526f4e25adb7cdedf776ceaed17d4d5ccbbd85c8c859110debbea404de2f72129f9e44b265823db90cee35819348c28aeeec06fae5468e7aab65e86d24bdf2d628862140594452c9b9b5ecd88b2f3378ca50bf9c30d070ac52d110b6d9d0f2e602e2b1642033b5f103ff3bcd57a95b39d59cf2027b67fedc913998a2ade77fd233b44122a147c57d756bbfa9be483e9c34d5c11a9b5bdb014eedeb96af017cf4e4a42e88bb9bd42ccef95a974d9ef5c7957accc3ce281211e9e7942c71286610e74400150dd1041d65771226677f21cf998d37d9f1426a0420d81a1e9262e157ce6a889351a823c1054ca0fdbf45de6984ad0928a460c0bf8f6f0ae7901b594714e6b0e7c0e3badd27290632053057ad52a753d806b6a2721c8e0a37fea482bafb1f1ac4c943b15bd98394f6d0b7008b44936cc6144a03b1fc4a89b9039c97b40718ba5183d0fadcd425b8d623832a22d1eb070c5cf1aff46c8ee78f1017f400e3c9ffd79208ea343f7ad4498e45c4447d66ba77fc8f745bf2ecc88706e1e7109b56c7af2068453c054c6630f776fba09eabe5e9ffa7b29340c7911db4483b89df10a3b100c2ffeef1e3f1365d2ebdbee399b7bc0db666582971dbba840cc0411bd8f92083856e9842edf8cf67e6c1d2f5adf956c39d617745fb0a5894643727047b30e20e1e5c000e444786c10027230be8e65c40a828536ffc979ec39b0aae93b6770b942bc1beb7a3811b2be958d85b5ac4c850c1002d289377633f1ab5c2357fbeffd34658d6076749c7271ae116bbe01e89783464e7e956c40f6f29f1b8aeea14ecd183ab93f20d2cae83477efa204d0f500b35f34218cfc78315cd8a7c912010b5c429dfa66a3b3db90d5d74c0bd6992c831a316d6f3e37fb278015764e2c21920fa3a498049286d5cd0c96cd6fda251acf6aee3f0a1eeba8beee94c2427c0eb3f2e52716b482c9f1c4de8c005da9eacd482706f51c00299cb064f15bfa095fed8f0c3a76957643f3364e04596dd0ddb7487816100d2db8fa5b7e7b9f58737d09b9d881bd6e304a5c8a0d2006bfdc596cb3de91fabedf9dbf6883df50bc83a70a1f715d5f64dc993e53cb9639f28607a4633a63daaa54ccff24492f93f1c5c70d29a54de66a53ab9dee261ea4f4f6c58af413d4a78ae2286db290972af8144736f319cf56a338a5383554d937566b812b94c91433b02fdf4bdcadc8e93e0d034d033c5131b6c1f02cdb46c7bdc24e4f9176c669cfb357572", 0xbde}, {&(0x7f0000002380)}], 0x3}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) dup3(r1, 0xffffffffffffffff, 0x0) 5.764997059s ago: executing program 0 (id=1559): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) 5.38804881s ago: executing program 2 (id=1560): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIN_LINKS={0x8, 0x12, 0xffffffff}]}}}]}, 0x3c}}, 0x0) 5.007590737s ago: executing program 0 (id=1561): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x10) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001040)={0xf, {"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", 0x1000}}, 0x1006) ioctl$VT_GETSTATE(r1, 0x4b40, 0x0) 4.316822988s ago: executing program 1 (id=1563): r0 = syz_open_dev$media(&(0x7f0000001a80), 0x0, 0x0) r1 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000100)={0x80000000, 0x0, &(0x7f0000000080)=[{{}, {0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000300)={r2, 0x0, 0x0}) 3.656604388s ago: executing program 1 (id=1564): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) shmget$private(0x0, 0x0, 0x0, &(0x7f0000ffe000/0x1000)=nil) 3.555105798s ago: executing program 0 (id=1565): syz_mount_image$hfsplus(&(0x7f0000007340), &(0x7f00000002c0)='./file0\x00', 0x400044, &(0x7f0000001fc0)=ANY=[@ANYBLOB="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"], 0x3, 0x638, &(0x7f0000001980)="$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") fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) socket$kcm(0x29, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='net/kcm\x00') r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c000000000000000000000014", @ANYRES8=0x0, @ANYRES32=r0], 0x30}}, 0x0) 2.778172723s ago: executing program 1 (id=1566): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x101000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, &(0x7f0000000b80)={0x3, 0x3ff, 0x0, 0x0}) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000a80)=0x80000001) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x39a8000000000) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x29, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(r0, 0x5423, 0x0) r2 = dup(r1) write$cgroup_subtree(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="00667265657a7772202bd1930931450131e268756765746c7cc03b30925ecb995d5b3ae462202d687567650100010062202b646576"], 0x2d) 2.318470606s ago: executing program 2 (id=1567): keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz 000040'], 0x2a, 0x0) r0 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$update(0x2, r0, 0x0, 0x0) 2.138303079s ago: executing program 0 (id=1568): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r0, 0x0, 0x15, &(0x7f0000000040)=0x3, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote={0xac, 0x3}, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) 2.075946326s ago: executing program 3 (id=1569): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r2 = socket(0xa, 0x2, 0x3a) r3 = fcntl$dupfd(r2, 0x0, r2) write$P9_RGETATTR(r3, &(0x7f00000003c0)={0xa0}, 0xa0) 1.994518965s ago: executing program 1 (id=1570): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xfe00, 0x0, 0x71, 0x10, 0xbe}}, &(0x7f0000000480)='GPL\x00'}, 0x90) 1.583721251s ago: executing program 2 (id=1571): r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$CAPI_INSTALLED(r0, 0x80024322) 1.525046278s ago: executing program 0 (id=1572): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904000001a7a00f00090582020002"], 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, 0x0) 1.272422177s ago: executing program 3 (id=1573): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, &(0x7f0000000040)='\x00') madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000a9f850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='netlink_extack\x00', r2}, 0xb3) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@getnexthop={0x18, 0x76, 0xb0d, 0x0, 0x0, {0x3, 0x0, 0x0, 0x2}}, 0x18}}, 0x0) r4 = eventfd(0x0) r5 = eventfd(0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000240)={r4, 0x0, 0x2, r5}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x81, 0x0}, 0x8) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x3aac1373788c1231, 0x16, &(0x7f00000003c0)=ANY=[@ANYBLOB="1818000006000020000000000002000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000008520000002000000fe12ff0f080000008f600400f0ffffff4306f0fff0ffffff18180000", @ANYRES32, @ANYBLOB="00000000000000008500000051000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x8, 0x21, &(0x7f0000000200)=""/33, 0x41100, 0x11, '\x00', 0x0, 0x13, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x5, 0x0, 0x8, 0x4}, 0x10, r6, 0xffffffffffffffff, 0x2, 0x0, &(0x7f00000002c0)=[{0x1, 0x1, 0xb, 0x7}, {0x2, 0x4, 0x2, 0x2}], 0x10, 0x1}, 0x90) r8 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg(r8, &(0x7f0000009700)=[{{&(0x7f0000000380)=@un=@file={0x0, './file0\x00'}, 0x80, 0x0, 0x0, &(0x7f0000000a00)=[{0x10, 0x1}], 0x10}}], 0x1, 0x0) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb01001800000000000000c4000000c4000000030000000e00000000000009000000000b00000009000004010100000300000005000000010000800c00000001000000020000000500000000000000000000000200000002000000090002000d00000004000000000000000800000002000000000000000600000005000000008000000300000000000000030000000600000004000000ff0f000002000000000000010000000015002501010000000000000203000000000000000000000300000000020000000400000001000000000000000000000200000000009300"], &(0x7f0000000700)=""/4096, 0xdf, 0x1000, 0x0, 0xa73}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0x20000000000000a9, &(0x7f0000000340)=ANY=[@ANYRES64=0x0], 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x4, r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, r7, 0x0, 0x0, 0x0, 0x0}, 0x90) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r10}, 0x10) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000001c0)={r4, 0x100000, 0x2, r5}) statfs(&(0x7f0000001880)='./file0\x00', &(0x7f00000018c0)=""/235) pselect6(0x40, &(0x7f0000001700)={0x9, 0xffffffffffff2231, 0x10001, 0x8, 0x200, 0xffffffffffffffff, 0x7fffffffffffffff, 0xffffffff00000000}, &(0x7f0000001740)={0x8, 0x6, 0x7fffffff, 0x0, 0xffffffffffffffff, 0xb8, 0x1000, 0x3f}, &(0x7f0000001780)={0x4d, 0x9a2, 0xffffffff, 0x80000000, 0x1, 0x208, 0x8, 0x8}, &(0x7f00000017c0), &(0x7f0000001840)={&(0x7f0000001800)={[0x323]}, 0x8}) 1.127501177s ago: executing program 1 (id=1574): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x3, 0x4, 0x4, 0x8, 0x1014}, 0x48) 899.135782ms ago: executing program 2 (id=1575): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x10) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001040)={0xf, {"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", 0x1000}}, 0x1006) ioctl$VT_GETSTATE(r1, 0x4b40, 0x0) 7.611535ms ago: executing program 4 (id=1576): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'veth0_to_bond\x00', &(0x7f0000000000)=@ethtool_gstrings={0x4b, 0x14}}) 0s ago: executing program 1 (id=1577): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000001000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008180000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000088500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001840000000000000000000000000000018200000", @ANYRES32=r1, @ANYBLOB="000000000000000000000000fcffff"], 0x0}, 0x90) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x89f1, &(0x7f0000000900)={'ip6gre0\x00', @random="0600002000"}) kernel console output (not intermixed with test programs): 737][ T7063] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 392.133640][ T7063] EXT4-fs (loop4): can't mount with commit=3, fs mounted w/o journal [ 392.727499][ T6878] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 392.799017][ T7074] loop3: detected capacity change from 0 to 256 [ 393.219730][ T6878] veth0_vlan: entered promiscuous mode [ 393.281319][ T3520] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 393.289851][ T3520] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 393.418307][ T6878] veth1_vlan: entered promiscuous mode [ 393.490745][ T1094] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 393.498987][ T1094] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 393.740569][ T6878] veth0_macvtap: entered promiscuous mode [ 393.809528][ T6878] veth1_macvtap: entered promiscuous mode [ 393.971152][ T6878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 393.982423][ T6878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.992743][ T6878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 394.014395][ T6878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.024665][ T6878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 394.035596][ T6878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.048203][ T6878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 394.059180][ T6878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.074913][ T6878] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 394.134466][ T6878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 394.145687][ T6878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.156189][ T6878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 394.167083][ T6878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.177355][ T6878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 394.188246][ T6878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.204715][ T6878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 394.217321][ T6878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.232904][ T6878] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 394.321112][ T6878] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.331483][ T6878] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.340692][ T6878] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.349872][ T6878] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.403394][ T7086] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 396.103080][ T7106] loop0: detected capacity change from 0 to 256 [ 396.720966][ T7111] loop3: detected capacity change from 0 to 2048 [ 396.784036][ T7117] kAFS: No cell specified [ 396.847636][ T7111] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 397.127786][ T7111] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: none. [ 397.412068][ T6407] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 398.096639][ T7132] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 398.159581][ T7141] netlink: 16 bytes leftover after parsing attributes in process `syz.2.711'. [ 398.643110][ T7144] loop3: detected capacity change from 0 to 512 [ 398.680197][ T7148] loop4: detected capacity change from 0 to 256 [ 398.694732][ T7144] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 398.735134][ T7144] EXT4-fs (loop3): can't mount with commit=3, fs mounted w/o journal [ 399.203767][ T7156] kAFS: No cell specified [ 399.660047][ T7160] loop4: detected capacity change from 0 to 2048 [ 399.811771][ T1094] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 399.820498][ T1094] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 399.869964][ T7160] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 400.067565][ T7160] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: none. [ 400.155266][ T1094] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 400.187760][ T1094] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 400.313889][ T6459] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 402.475972][ T7185] loop2: detected capacity change from 0 to 256 [ 403.077342][ T7187] kAFS: No cell specified [ 403.388006][ T1223] ieee802154 phy0 wpan0: encryption failed: -22 [ 403.396151][ T1223] ieee802154 phy1 wpan1: encryption failed: -22 [ 403.640180][ T7191] loop3: detected capacity change from 0 to 2048 [ 404.276949][ T7191] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 404.531552][ T7191] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: none. [ 404.895918][ T6407] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 405.344803][ T7216] loop2: detected capacity change from 0 to 1024 [ 405.441896][ T7218] loop0: detected capacity change from 0 to 512 [ 405.455832][ T7218] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 405.500486][ T7218] EXT4-fs (loop0): can't mount with commit=3, fs mounted w/o journal [ 405.524589][ T7222] kAFS: No cell specified [ 406.311815][ T7232] 8021q: VLANs not supported on ipvlan1 [ 406.534423][ T7236] loop4: detected capacity change from 0 to 64 [ 406.776719][ T7234] loop1: detected capacity change from 0 to 2048 [ 406.914740][ T7234] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 407.248305][ T7234] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: none. [ 407.343147][ T5127] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 407.527235][ T7253] loop4: detected capacity change from 0 to 1024 [ 407.536120][ T6878] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 407.591114][ T5127] usb 3-1: New USB device found, idVendor=04dd, idProduct=8007, bcdDevice=6b.3f [ 407.602053][ T5127] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.696938][ T5127] usb 3-1: config 0 descriptor?? [ 407.733310][ T5127] usb 3-1: unsupported MDLM descriptors [ 407.940302][ T5127] usb 3-1: USB disconnect, device number 12 [ 408.999210][ T7269] 8021q: VLANs not supported on ipvlan1 [ 409.041952][ T5077] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 409.059451][ T5077] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 409.069794][ T5077] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 409.088082][ T7272] loop4: detected capacity change from 0 to 64 [ 409.089034][ T5077] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 409.138561][ T5077] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 409.152054][ T5077] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 410.443443][ T7284] loop2: detected capacity change from 0 to 1024 [ 410.499409][ T34] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.613547][ T34] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.741386][ T7287] netlink: 88 bytes leftover after parsing attributes in process `syz.4.766'. [ 410.783863][ T34] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.863621][ T7271] chnl_net:caif_netlink_parms(): no params data found [ 411.077777][ T34] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.207163][ T5077] Bluetooth: hci1: command tx timeout [ 411.534032][ T1045] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 411.563871][ T34] bridge_slave_1: left allmulticast mode [ 411.569787][ T34] bridge_slave_1: left promiscuous mode [ 411.576538][ T34] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.624532][ T34] bridge_slave_0: left allmulticast mode [ 411.630436][ T34] bridge_slave_0: left promiscuous mode [ 411.637188][ T34] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.758184][ T1045] usb 5-1: New USB device found, idVendor=04dd, idProduct=8007, bcdDevice=6b.3f [ 411.767812][ T1045] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.839859][ T1045] usb 5-1: config 0 descriptor?? [ 411.890269][ T1045] usb 5-1: unsupported MDLM descriptors [ 411.977049][ T7300] loop2: detected capacity change from 0 to 64 [ 412.254962][ T10] usb 5-1: USB disconnect, device number 5 [ 412.265019][ T34] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 412.322267][ T34] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 412.372319][ T34] bond0 (unregistering): Released all slaves [ 412.478737][ T7298] 8021q: VLANs not supported on ipvlan1 [ 413.087985][ T34] hsr_slave_0: left promiscuous mode [ 413.130818][ T34] hsr_slave_1: left promiscuous mode [ 413.161235][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 413.171491][ T34] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 413.215614][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 413.223585][ T34] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 413.276012][ T34] veth1_macvtap: left promiscuous mode [ 413.281890][ T34] veth0_macvtap: left promiscuous mode [ 413.288175][ T34] veth1_vlan: left promiscuous mode [ 413.294357][ T34] veth0_vlan: left promiscuous mode [ 413.307006][ T5077] Bluetooth: hci1: command tx timeout [ 414.303434][ T7315] loop1: detected capacity change from 0 to 1024 [ 414.342801][ T34] team0 (unregistering): Port device team_slave_1 removed [ 414.406308][ T34] team0 (unregistering): Port device team_slave_0 removed [ 414.963790][ T2961] hfsplus: b-tree write err: -5, ino 4 [ 415.008578][ T7271] bridge0: port 1(bridge_slave_0) entered blocking state [ 415.016421][ T7271] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.024724][ T7271] bridge_slave_0: entered allmulticast mode [ 415.034087][ T7271] bridge_slave_0: entered promiscuous mode [ 415.097232][ T7271] bridge0: port 2(bridge_slave_1) entered blocking state [ 415.105188][ T7271] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.113398][ T7271] bridge_slave_1: entered allmulticast mode [ 415.122661][ T7271] bridge_slave_1: entered promiscuous mode [ 415.366199][ T5077] Bluetooth: hci1: command tx timeout [ 415.451142][ T7271] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 415.504821][ T7271] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 415.658891][ T7325] loop4: detected capacity change from 0 to 64 [ 415.852343][ T7323] netlink: 'syz.1.781': attribute type 10 has an invalid length. [ 415.873185][ T29] audit: type=1804 audit(1721662906.143:9): pid=7325 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.782" name="/newroot/67/file2/bus" dev="loop4" ino=3 res=1 errno=0 [ 415.998868][ T29] audit: type=1804 audit(1721662906.293:10): pid=7329 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.782" name="/newroot/67/file2/bus" dev="loop4" ino=3 res=1 errno=0 [ 416.025297][ T29] audit: type=1800 audit(1721662906.293:11): pid=7325 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.782" name="bus" dev="loop4" ino=3 res=0 errno=0 [ 416.128480][ T7323] team0: Port device netdevsim3 added [ 416.164445][ T7271] team0: Port device team_slave_0 added [ 416.254135][ T7271] team0: Port device team_slave_1 added [ 416.367812][ T1045] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 416.511291][ T5076] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 416.526690][ T7271] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 416.534064][ T7271] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 416.561159][ T7271] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 416.591378][ T5076] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 416.601843][ T5076] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 416.631342][ T5076] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 416.645569][ T5076] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 416.655625][ T1045] usb 3-1: New USB device found, idVendor=04dd, idProduct=8007, bcdDevice=6b.3f [ 416.665204][ T1045] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.676390][ T5076] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 416.740100][ T7271] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 416.747473][ T7271] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 416.754761][ T1045] usb 3-1: config 0 descriptor?? [ 416.773896][ T7271] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 416.847758][ T1045] usb 3-1: unsupported MDLM descriptors [ 416.982725][ T7271] hsr_slave_0: entered promiscuous mode [ 417.014619][ T7271] hsr_slave_1: entered promiscuous mode [ 417.044032][ T7271] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 417.052020][ T7271] Cannot create hsr debugfs directory [ 417.267777][ T1045] usb 3-1: USB disconnect, device number 13 [ 417.451851][ T5076] Bluetooth: hci1: command tx timeout [ 417.653341][ T5120] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 417.883008][ T5120] usb 5-1: Using ep0 maxpacket: 8 [ 417.946770][ T5120] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 417.960544][ T5120] usb 5-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 417.971409][ T5120] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.024797][ T5120] usb 5-1: config 0 descriptor?? [ 418.073362][ T5120] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 418.638701][ T3340] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.711183][ T5120] gspca_vc032x: reg_r err -71 [ 418.716846][ T5120] vc032x 5-1:0.0: probe with driver vc032x failed with error -71 [ 418.742256][ T5120] usb 5-1: USB disconnect, device number 6 [ 418.764626][ T7353] loop1: detected capacity change from 0 to 512 [ 418.790636][ T7353] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 418.800853][ T7353] EXT4-fs (loop1): can't mount with commit=3, fs mounted w/o journal [ 418.804769][ T3340] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.874835][ T7331] chnl_net:caif_netlink_parms(): no params data found [ 418.902331][ T5076] Bluetooth: hci3: command tx timeout [ 419.006496][ T3340] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.211999][ T3340] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.215871][ T7355] loop2: detected capacity change from 0 to 64 [ 419.321689][ T29] audit: type=1804 audit(1721662909.653:12): pid=7355 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.794" name="/newroot/31/file2/bus" dev="loop2" ino=3 res=1 errno=0 [ 419.565580][ T7271] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 419.631905][ T3340] bridge_slave_1: left allmulticast mode [ 419.638443][ T3340] bridge_slave_1: left promiscuous mode [ 419.645220][ T3340] bridge0: port 2(bridge_slave_1) entered disabled state [ 419.713511][ T3340] bridge_slave_0: left allmulticast mode [ 419.718570][ T29] audit: type=1804 audit(1721662910.023:13): pid=7358 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.794" name="/newroot/31/file2/bus" dev="loop2" ino=3 res=1 errno=0 [ 419.719325][ T3340] bridge_slave_0: left promiscuous mode [ 419.747244][ T3340] bridge0: port 1(bridge_slave_0) entered disabled state [ 419.788069][ T29] audit: type=1800 audit(1721662910.133:14): pid=7355 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.794" name="bus" dev="loop2" ino=3 res=0 errno=0 [ 420.344308][ T3340] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 420.394802][ T3340] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 420.422316][ T3340] bond0 (unregistering): Released all slaves [ 420.456562][ T7271] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 420.528345][ T7360] netlink: 'syz.4.795': attribute type 10 has an invalid length. [ 420.589308][ T7360] team0: Port device netdevsim3 added [ 420.646643][ T7271] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 420.754692][ T7271] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 420.962927][ T5076] Bluetooth: hci3: command tx timeout [ 421.061641][ T7370] loop4: detected capacity change from 0 to 8 [ 421.501810][ T3340] hsr_slave_0: left promiscuous mode [ 421.519377][ T3340] hsr_slave_1: left promiscuous mode [ 421.529193][ T3340] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 421.537295][ T3340] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 421.571018][ T3340] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 421.579259][ T3340] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 421.592873][ T1556] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 421.613739][ T3340] veth1_macvtap: left promiscuous mode [ 421.619505][ T3340] veth0_macvtap: left promiscuous mode [ 421.625593][ T3340] veth1_vlan: left promiscuous mode [ 421.631145][ T3340] veth0_vlan: left promiscuous mode [ 421.856883][ T1556] usb 3-1: New USB device found, idVendor=04dd, idProduct=8007, bcdDevice=6b.3f [ 421.866420][ T1556] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.961673][ T1556] usb 3-1: config 0 descriptor?? [ 421.983982][ T1556] usb 3-1: unsupported MDLM descriptors [ 422.243537][ T25] usb 3-1: USB disconnect, device number 14 [ 422.517987][ T3340] team0 (unregistering): Port device team_slave_1 removed [ 422.565218][ T0] NOHZ tick-stop error: local softirq work is pending, handler #2c2!!! [ 422.577997][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 422.608439][ T3340] team0 (unregistering): Port device team_slave_0 removed [ 422.940591][ T7331] bridge0: port 1(bridge_slave_0) entered blocking state [ 422.941144][ T7331] bridge0: port 1(bridge_slave_0) entered disabled state [ 422.941743][ T7331] bridge_slave_0: entered allmulticast mode [ 422.944985][ T7331] bridge_slave_0: entered promiscuous mode [ 423.058696][ T5076] Bluetooth: hci3: command tx timeout [ 423.135317][ T7331] bridge0: port 2(bridge_slave_1) entered blocking state [ 423.135939][ T7331] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.136555][ T7331] bridge_slave_1: entered allmulticast mode [ 423.139461][ T7331] bridge_slave_1: entered promiscuous mode [ 423.322737][ T7331] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 423.459915][ T7331] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 423.631537][ T7331] team0: Port device team_slave_0 added [ 423.723565][ T7331] team0: Port device team_slave_1 added [ 423.875723][ T10] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 423.949782][ T7331] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 423.957090][ T7331] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 423.984556][ T7331] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 424.061823][ T7386] loop4: detected capacity change from 0 to 64 [ 424.078340][ T7331] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 424.085778][ T7331] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 424.116128][ T7331] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 424.163676][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 424.176718][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 424.187282][ T10] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 424.196779][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.251881][ T10] usb 3-1: config 0 descriptor?? [ 424.288050][ T10] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 424.354967][ T29] audit: type=1804 audit(1721662914.623:15): pid=7386 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.804" name="/newroot/75/file2/bus" dev="loop4" ino=3 res=1 errno=0 [ 424.515020][ T29] audit: type=1804 audit(1721662914.803:16): pid=7388 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.804" name="/newroot/75/file2/bus" dev="loop4" ino=3 res=1 errno=0 [ 424.586484][ T7331] hsr_slave_0: entered promiscuous mode [ 424.597113][ T29] audit: type=1800 audit(1721662914.903:17): pid=7386 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.804" name="bus" dev="loop4" ino=3 res=0 errno=0 [ 424.635411][ T7331] hsr_slave_1: entered promiscuous mode [ 424.658508][ T7331] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 424.666667][ T7331] Cannot create hsr debugfs directory [ 424.804500][ T7271] 8021q: adding VLAN 0 to HW filter on device bond0 [ 424.967332][ T10] gspca_vc032x: reg_r err -71 [ 424.973625][ T10] vc032x 3-1:0.0: probe with driver vc032x failed with error -71 [ 425.008314][ T10] usb 3-1: USB disconnect, device number 15 [ 425.141747][ T5076] Bluetooth: hci3: command tx timeout [ 425.159128][ T7271] 8021q: adding VLAN 0 to HW filter on device team0 [ 425.269582][ T5120] bridge0: port 1(bridge_slave_0) entered blocking state [ 425.277535][ T5120] bridge0: port 1(bridge_slave_0) entered forwarding state [ 425.371268][ T5120] bridge0: port 2(bridge_slave_1) entered blocking state [ 425.379207][ T5120] bridge0: port 2(bridge_slave_1) entered forwarding state [ 425.902361][ T7393] netlink: 'syz.4.806': attribute type 10 has an invalid length. [ 426.112052][ T7397] loop2: detected capacity change from 0 to 8 [ 426.481466][ T7331] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 426.554556][ T7331] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 426.676070][ T7331] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 426.759364][ T7331] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 427.548689][ T7414] loop4: detected capacity change from 0 to 64 [ 427.730026][ T7271] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 427.834528][ T29] audit: type=1804 audit(1721662918.043:18): pid=7414 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.813" name="/newroot/80/file2/bus" dev="loop4" ino=3 res=1 errno=0 [ 427.858579][ T7331] 8021q: adding VLAN 0 to HW filter on device bond0 [ 427.933551][ T29] audit: type=1804 audit(1721662918.223:19): pid=7416 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.813" name="/newroot/80/file2/bus" dev="loop4" ino=3 res=1 errno=0 [ 427.955528][ T29] audit: type=1800 audit(1721662918.273:20): pid=7414 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.813" name="bus" dev="loop4" ino=3 res=0 errno=0 [ 428.155145][ T7331] 8021q: adding VLAN 0 to HW filter on device team0 [ 428.236227][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 428.243896][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 428.372564][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 428.380260][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 428.438239][ T7271] veth0_vlan: entered promiscuous mode [ 428.578269][ T7271] veth1_vlan: entered promiscuous mode [ 428.905737][ T7421] tls_set_device_offload: netdev not found [ 429.025644][ T7271] veth0_macvtap: entered promiscuous mode [ 429.180955][ T7271] veth1_macvtap: entered promiscuous mode [ 429.395966][ T7271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 429.406839][ T7271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.417144][ T7271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 429.432088][ T7271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.443471][ T7271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 429.455133][ T7271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.470560][ T7271] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 429.739390][ T5077] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 429.772358][ T5077] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 429.784384][ T5077] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 429.853981][ T5077] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 429.895967][ T5077] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 429.898269][ T7271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 429.916659][ T7271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.929175][ T7271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 429.943196][ T7271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.954282][ T7271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 429.965095][ T7271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.980283][ T7271] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 429.993899][ T5077] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 430.170001][ T7438] loop2: detected capacity change from 0 to 8 [ 430.178031][ T7271] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.187403][ T7271] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.196693][ T7271] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.205820][ T7271] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.170302][ T7331] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 431.706242][ T2854] team0: Port device netdevsim3 removed [ 431.719066][ T2854] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.841738][ T2854] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.020697][ T2854] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.093722][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 432.193337][ T7428] chnl_net:caif_netlink_parms(): no params data found [ 432.205590][ T5077] Bluetooth: hci2: command tx timeout [ 432.340724][ T2854] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.767090][ T2854] bridge_slave_1: left allmulticast mode [ 432.767207][ T2854] bridge_slave_1: left promiscuous mode [ 432.768109][ T2854] bridge0: port 2(bridge_slave_1) entered disabled state [ 432.813138][ T2854] bridge_slave_0: left allmulticast mode [ 432.813250][ T2854] bridge_slave_0: left promiscuous mode [ 432.814142][ T2854] bridge0: port 1(bridge_slave_0) entered disabled state [ 433.270347][ T7469] tls_set_device_offload: netdev not found [ 433.518373][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 433.564547][ T2854] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 433.657920][ T2854] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 433.718218][ T2854] bond0 (unregistering): Released all slaves [ 433.858734][ T7475] loop2: detected capacity change from 0 to 8 [ 433.935312][ T7331] veth0_vlan: entered promiscuous mode [ 434.245868][ T5077] Bluetooth: hci2: command tx timeout [ 434.416358][ T7331] veth1_vlan: entered promiscuous mode [ 434.585009][ T2854] hsr_slave_0: left promiscuous mode [ 434.605738][ T2854] hsr_slave_1: left promiscuous mode [ 434.618282][ T2854] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 434.626884][ T2854] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 434.658557][ T2854] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 434.666712][ T2854] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 434.692192][ T2854] veth1_macvtap: left promiscuous mode [ 434.698977][ T2854] veth0_macvtap: left promiscuous mode [ 434.705230][ T2854] veth1_vlan: left promiscuous mode [ 434.710959][ T2854] veth0_vlan: left promiscuous mode [ 435.568712][ T2854] team0 (unregistering): Port device team_slave_1 removed [ 435.616955][ T2854] team0 (unregistering): Port device team_slave_0 removed [ 436.100151][ T7485] netlink: 'syz.4.827': attribute type 10 has an invalid length. [ 436.326339][ T7428] bridge0: port 1(bridge_slave_0) entered blocking state [ 436.328844][ T5077] Bluetooth: hci2: command tx timeout [ 436.334145][ T7428] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.334767][ T7428] bridge_slave_0: entered allmulticast mode [ 436.356627][ T7428] bridge_slave_0: entered promiscuous mode [ 436.383796][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 436.403459][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 436.513563][ T7428] bridge0: port 2(bridge_slave_1) entered blocking state [ 436.521298][ T7428] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.529541][ T7428] bridge_slave_1: entered allmulticast mode [ 436.537573][ T7428] bridge_slave_1: entered promiscuous mode [ 436.682393][ T7331] veth0_macvtap: entered promiscuous mode [ 436.879545][ T7505] tls_set_device_offload: netdev not found [ 436.970707][ T7428] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 437.006855][ T7331] veth1_macvtap: entered promiscuous mode [ 437.025963][ T7428] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 437.303306][ T7428] team0: Port device team_slave_0 added [ 437.326466][ T7428] team0: Port device team_slave_1 added [ 437.499219][ T7428] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 437.499313][ T7428] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 437.499457][ T7428] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 437.539120][ T7428] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 437.539200][ T7428] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 437.539337][ T7428] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 437.550190][ T7331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 437.550288][ T7331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.550353][ T7331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 437.550436][ T7331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.550501][ T7331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 437.550584][ T7331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.555651][ T7331] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 437.640964][ T7331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 437.799132][ T7331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.799221][ T7331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 437.799309][ T7331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.799385][ T7331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 437.799468][ T7331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.804263][ T7331] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 438.048696][ T7331] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.048921][ T7331] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.049125][ T7331] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.049348][ T7331] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.093649][ T7428] hsr_slave_0: entered promiscuous mode [ 438.118171][ T7428] hsr_slave_1: entered promiscuous mode [ 438.425390][ T5077] Bluetooth: hci2: command tx timeout [ 439.490337][ T7533] netlink: 'syz.4.841': attribute type 10 has an invalid length. [ 439.508439][ T7428] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 439.600680][ T7428] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 439.668223][ T1094] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 439.676481][ T1094] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 439.692462][ T7428] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 439.798934][ T7428] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 439.967169][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 439.977799][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 440.027673][ T7538] tls_set_device_offload: netdev not found [ 440.622867][ T7548] xt_NFQUEUE: number of total queues is 0 [ 441.006433][ T7428] 8021q: adding VLAN 0 to HW filter on device bond0 [ 441.151799][ T5130] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 441.160795][ T5130] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 441.231812][ T7428] 8021q: adding VLAN 0 to HW filter on device team0 [ 441.270363][ T5130] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz0] on syz1 [ 441.288436][ T5077] Bluetooth: hci4: command 0x0406 tx timeout [ 441.395325][ T6385] bridge0: port 1(bridge_slave_0) entered blocking state [ 441.403142][ T6385] bridge0: port 1(bridge_slave_0) entered forwarding state [ 441.493829][ T5120] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 441.514982][ T6385] bridge0: port 2(bridge_slave_1) entered blocking state [ 441.522878][ T6385] bridge0: port 2(bridge_slave_1) entered forwarding state [ 441.587506][ T7561] warning: `syz.4.850' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 441.725402][ T5120] usb 3-1: New USB device found, idVendor=157e, idProduct=300e, bcdDevice=ec.5f [ 441.736258][ T5120] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.825223][ T5120] usb 3-1: config 0 descriptor?? [ 442.065327][ T5120] usb 3-1: USB disconnect, device number 16 [ 442.504865][ T7572] tls_set_device_offload: netdev not found [ 443.177668][ T7581] dccp_invalid_packet: P.Data Offset(4) too small [ 443.202664][ T7428] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 443.446477][ T7586] xt_NFQUEUE: number of total queues is 0 [ 443.715299][ T7428] veth0_vlan: entered promiscuous mode [ 443.801301][ T7428] veth1_vlan: entered promiscuous mode [ 444.001052][ T1094] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 444.010019][ T1094] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 444.083483][ T2961] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 444.091571][ T2961] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 444.193144][ T7592] loop3: detected capacity change from 0 to 512 [ 444.246507][ T7592] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 444.278451][ T7428] veth0_macvtap: entered promiscuous mode [ 444.333725][ T7592] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 444.342950][ T7592] System zones: 1-12 [ 444.362036][ T7428] veth1_macvtap: entered promiscuous mode [ 444.454801][ T7592] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2862: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 444.495902][ T7428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 444.506746][ T7428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 444.516996][ T7428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 444.527800][ T7428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 444.533326][ T7592] EXT4-fs (loop3): 1 truncate cleaned up [ 444.540175][ T7428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 444.545250][ T7592] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 444.554594][ T7428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 444.577237][ T7428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 444.593546][ T7428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 444.612279][ T7428] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 444.729930][ T7428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 444.741040][ T7428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 444.751273][ T7428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 444.762153][ T7428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 444.772784][ T7428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 444.783563][ T7428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 444.799223][ T7428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 444.815690][ T7428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 444.831650][ T7428] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 444.936532][ T7428] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.946183][ T7428] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.955599][ T7428] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.966110][ T7428] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.004881][ T7592] loop3: detected capacity change from 512 to 64 [ 445.236896][ T5124] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 445.245289][ T5124] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 445.333746][ T5124] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz0] on syz1 [ 445.362150][ T7271] EXT4-fs warning (device loop3): ext4_empty_dir:3115: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 445.413942][ T7271] EXT4-fs warning (device loop3): ext4_empty_dir:3115: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 445.471390][ T7271] EXT4-fs warning (device loop3): ext4_empty_dir:3115: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 445.535299][ T1556] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 445.558064][ T7271] EXT4-fs warning (device loop3): ext4_empty_dir:3115: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 445.593810][ T7271] EXT4-fs warning (device loop3): ext4_empty_dir:3115: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 445.626439][ T7271] EXT4-fs warning (device loop3): ext4_empty_dir:3115: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 445.671894][ T7271] EXT4-fs warning (device loop3): ext4_empty_dir:3115: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 445.721552][ T7271] EXT4-fs warning (device loop3): ext4_empty_dir:3115: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 445.763533][ T1556] usb 5-1: New USB device found, idVendor=157e, idProduct=300e, bcdDevice=ec.5f [ 445.773133][ T1556] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.795280][ T7271] EXT4-fs warning (device loop3): ext4_empty_dir:3115: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 445.831101][ T1556] usb 5-1: config 0 descriptor?? [ 445.860784][ T7271] EXT4-fs warning (device loop3): ext4_empty_dir:3115: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 446.125520][ T1556] usb 5-1: USB disconnect, device number 7 [ 446.646749][ T7619] syz.0.867[7619] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 446.647340][ T7619] syz.0.867[7619] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 447.097543][ T7271] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 447.229914][ T3340] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.401711][ T3340] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.560136][ T3340] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.714418][ T3340] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.983450][ T3340] bridge_slave_1: left allmulticast mode [ 447.989381][ T3340] bridge_slave_1: left promiscuous mode [ 447.996756][ T3340] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.040501][ T3340] bridge_slave_0: left allmulticast mode [ 448.048959][ T3340] bridge_slave_0: left promiscuous mode [ 448.056364][ T3340] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.544720][ C1] eth0: bad gso: type: 1, size: 1408 [ 448.685469][ T3340] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 448.749399][ T7637] loop0: detected capacity change from 0 to 512 [ 448.762089][ T3340] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 448.817900][ T7637] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 448.818574][ T3340] bond0 (unregistering): Released all slaves [ 448.856599][ T7637] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 448.936033][ T5076] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 448.945230][ T5076] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 448.965030][ T5076] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 449.009688][ T5076] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 449.012919][ T7637] System zones: 1-12 [ 449.025111][ T5076] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 449.037514][ T5076] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 449.105344][ T7637] EXT4-fs (loop0): 1 truncate cleaned up [ 449.113105][ T7637] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 449.525143][ T7637] loop0: detected capacity change from 512 to 64 [ 449.795883][ T7331] EXT4-fs warning (device loop0): ext4_empty_dir:3115: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 449.824975][ T7331] EXT4-fs warning (device loop0): ext4_empty_dir:3115: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 449.851465][ T7654] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 449.866084][ T7331] EXT4-fs warning (device loop0): ext4_empty_dir:3115: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 449.878262][ T7654] CIFS mount error: No usable UNC path provided in device string! [ 449.878262][ T7654] [ 449.902721][ T7654] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 449.957824][ T7331] EXT4-fs warning (device loop0): ext4_empty_dir:3115: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 449.992010][ T3340] hsr_slave_0: left promiscuous mode [ 450.005529][ T7331] EXT4-fs warning (device loop0): ext4_empty_dir:3115: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 450.037956][ T3340] hsr_slave_1: left promiscuous mode [ 450.074460][ T3340] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 450.082377][ T3340] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 450.116719][ T7331] EXT4-fs warning (device loop0): ext4_empty_dir:3115: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 450.137048][ T3340] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 450.145471][ T3340] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 450.161829][ T7331] EXT4-fs warning (device loop0): ext4_empty_dir:3115: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 450.179462][ T7331] EXT4-fs warning (device loop0): ext4_empty_dir:3115: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 450.210151][ T7331] EXT4-fs warning (device loop0): ext4_empty_dir:3115: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 450.216798][ T3340] veth1_macvtap: left promiscuous mode [ 450.232150][ T3340] veth0_macvtap: left promiscuous mode [ 450.237678][ T7331] EXT4-fs warning (device loop0): ext4_empty_dir:3115: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 450.253341][ T3340] veth1_vlan: left promiscuous mode [ 450.258947][ T3340] veth0_vlan: left promiscuous mode [ 450.370206][ T7659] loop2: detected capacity change from 0 to 256 [ 450.393251][ T7659] exFAT-fs (loop2): bogus fat length [ 450.398782][ T7659] exFAT-fs (loop2): failed to read boot sector [ 450.405445][ T7659] exFAT-fs (loop2): failed to recognize exfat type [ 450.648752][ C1] eth0: bad gso: type: 1, size: 1408 [ 451.163668][ T5076] Bluetooth: hci0: command tx timeout [ 451.219249][ T3340] team0 (unregistering): Port device team_slave_1 removed [ 451.292915][ T3340] team0 (unregistering): Port device team_slave_0 removed [ 452.033971][ T7331] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 452.448410][ T3340] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.578837][ T7640] chnl_net:caif_netlink_parms(): no params data found [ 452.685077][ T3340] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.753077][ T1094] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 452.761044][ T1094] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 452.861492][ T3340] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.959915][ T3340] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.009806][ T80] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 453.019282][ T80] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 453.213285][ T5076] Bluetooth: hci0: command tx timeout [ 453.248910][ T3340] bridge_slave_1: left allmulticast mode [ 453.255392][ T3340] bridge_slave_1: left promiscuous mode [ 453.261960][ T3340] bridge0: port 2(bridge_slave_1) entered disabled state [ 453.324465][ T3340] bridge_slave_0: left allmulticast mode [ 453.330387][ T3340] bridge_slave_0: left promiscuous mode [ 453.337243][ T3340] bridge0: port 1(bridge_slave_0) entered disabled state [ 453.821991][ T7681] loop4: detected capacity change from 0 to 256 [ 453.832874][ T7682] CIFS mount error: No usable UNC path provided in device string! [ 453.832874][ T7682] [ 453.843400][ T7682] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 453.878824][ T7681] exFAT-fs (loop4): bogus fat length [ 453.884673][ T7681] exFAT-fs (loop4): failed to read boot sector [ 453.891066][ T7681] exFAT-fs (loop4): failed to recognize exfat type [ 454.021500][ T3340] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 454.104376][ T3340] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 454.121686][ T5077] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 454.138506][ T5077] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 454.155422][ T3340] bond0 (unregistering): Released all slaves [ 454.186704][ T5077] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 454.199717][ T5077] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 454.241662][ T5077] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 454.275800][ T5077] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 454.648301][ T7640] bridge0: port 1(bridge_slave_0) entered blocking state [ 454.659352][ T7640] bridge0: port 1(bridge_slave_0) entered disabled state [ 454.667586][ T7640] bridge_slave_0: entered allmulticast mode [ 454.676806][ T7640] bridge_slave_0: entered promiscuous mode [ 454.733697][ T7640] bridge0: port 2(bridge_slave_1) entered blocking state [ 454.741623][ T7640] bridge0: port 2(bridge_slave_1) entered disabled state [ 454.749660][ T7640] bridge_slave_1: entered allmulticast mode [ 454.758960][ T7640] bridge_slave_1: entered promiscuous mode [ 455.171388][ T3340] hsr_slave_0: left promiscuous mode [ 455.234395][ T3340] hsr_slave_1: left promiscuous mode [ 455.266299][ T3340] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 455.274634][ T3340] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 455.291909][ T5077] Bluetooth: hci0: command tx timeout [ 455.325625][ T3340] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 455.337814][ T3340] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 455.355875][ T3340] veth1_macvtap: left promiscuous mode [ 455.361658][ T3340] veth0_macvtap: left promiscuous mode [ 455.368179][ T3340] veth1_vlan: left promiscuous mode [ 455.373840][ T3340] veth0_vlan: left promiscuous mode [ 456.248751][ T3340] team0 (unregistering): Port device team_slave_1 removed [ 456.286571][ T3340] team0 (unregistering): Port device team_slave_0 removed [ 456.335559][ T5077] Bluetooth: hci1: command tx timeout [ 456.704402][ T7640] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 456.738090][ T6385] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 456.804423][ T7640] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 457.002685][ T6385] usb 3-1: Using ep0 maxpacket: 32 [ 457.017783][ T6385] usb 3-1: config 0 has no interfaces? [ 457.037735][ T6385] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 457.047312][ T6385] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 457.056204][ T6385] usb 3-1: Product: syz [ 457.060631][ T6385] usb 3-1: Manufacturer: syz [ 457.075762][ T6385] usb 3-1: config 0 descriptor?? [ 457.106503][ T7640] team0: Port device team_slave_0 added [ 457.136357][ T7640] team0: Port device team_slave_1 added [ 457.311997][ T6385] usb 3-1: USB disconnect, device number 17 [ 457.383248][ T5077] Bluetooth: hci0: command tx timeout [ 457.424953][ T7640] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 457.432153][ T7640] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 457.459234][ T7640] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 457.506639][ T7640] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 457.513982][ T7640] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 457.540660][ T7640] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 457.791306][ T7640] hsr_slave_0: entered promiscuous mode [ 457.815984][ T7640] hsr_slave_1: entered promiscuous mode [ 457.842853][ T7640] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 457.850662][ T7640] Cannot create hsr debugfs directory [ 457.893481][ T7683] chnl_net:caif_netlink_parms(): no params data found [ 458.407171][ T5077] Bluetooth: hci1: command tx timeout [ 459.252305][ T7683] bridge0: port 1(bridge_slave_0) entered blocking state [ 459.260172][ T7683] bridge0: port 1(bridge_slave_0) entered disabled state [ 459.268209][ T7683] bridge_slave_0: entered allmulticast mode [ 459.277453][ T7683] bridge_slave_0: entered promiscuous mode [ 459.365438][ T7683] bridge0: port 2(bridge_slave_1) entered blocking state [ 459.373307][ T7683] bridge0: port 2(bridge_slave_1) entered disabled state [ 459.382055][ T7683] bridge_slave_1: entered allmulticast mode [ 459.391548][ T7683] bridge_slave_1: entered promiscuous mode [ 459.498051][ T7640] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 459.522435][ T7640] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 459.699941][ T7640] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 459.763603][ T7683] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 459.785649][ T7640] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 459.841590][ T7683] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 460.080903][ T7683] team0: Port device team_slave_0 added [ 460.114980][ T7683] team0: Port device team_slave_1 added [ 460.167946][ T5130] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 460.286669][ T7683] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 460.294062][ T7683] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 460.327653][ T7683] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 460.371947][ T7683] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 460.379428][ T7683] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 460.406002][ T7683] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 460.413770][ T5130] usb 2-1: Using ep0 maxpacket: 32 [ 460.446994][ T5130] usb 2-1: config 0 has no interfaces? [ 460.483847][ T5077] Bluetooth: hci1: command tx timeout [ 460.550562][ T5130] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 460.561807][ T5130] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 460.573783][ T5130] usb 2-1: Product: syz [ 460.578192][ T5130] usb 2-1: Manufacturer: syz [ 460.611960][ T5130] usb 2-1: config 0 descriptor?? [ 460.727465][ T7683] hsr_slave_0: entered promiscuous mode [ 460.749597][ T7683] hsr_slave_1: entered promiscuous mode [ 460.777395][ T7683] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 460.785418][ T7683] Cannot create hsr debugfs directory [ 460.968024][ T4751] usb 2-1: USB disconnect, device number 7 [ 461.634147][ T7640] 8021q: adding VLAN 0 to HW filter on device bond0 [ 461.896410][ T7640] 8021q: adding VLAN 0 to HW filter on device team0 [ 462.037517][ T1556] bridge0: port 1(bridge_slave_0) entered blocking state [ 462.045370][ T1556] bridge0: port 1(bridge_slave_0) entered forwarding state [ 462.060870][ T1556] bridge0: port 2(bridge_slave_1) entered blocking state [ 462.068617][ T1556] bridge0: port 2(bridge_slave_1) entered forwarding state [ 462.229017][ T7683] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 462.263124][ T7683] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 462.292058][ T7683] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 462.367523][ T7683] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 462.546557][ T7640] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 462.575167][ T5077] Bluetooth: hci1: command tx timeout [ 463.636374][ T7800] input: syz0 as /devices/virtual/input/input12 [ 463.712166][ T7683] 8021q: adding VLAN 0 to HW filter on device bond0 [ 463.884149][ T7683] 8021q: adding VLAN 0 to HW filter on device team0 [ 463.947419][ T6385] bridge0: port 1(bridge_slave_0) entered blocking state [ 463.955276][ T6385] bridge0: port 1(bridge_slave_0) entered forwarding state [ 464.048033][ T6385] bridge0: port 2(bridge_slave_1) entered blocking state [ 464.055854][ T6385] bridge0: port 2(bridge_slave_1) entered forwarding state [ 464.204007][ T7640] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 464.298893][ T6385] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 464.563072][ T6385] usb 2-1: Using ep0 maxpacket: 32 [ 464.602221][ T6385] usb 2-1: config 0 has no interfaces? [ 464.639007][ T6385] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 464.650860][ T6385] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 464.660524][ T5076] Bluetooth: hci1: command tx timeout [ 464.669996][ T6385] usb 2-1: Product: syz [ 464.674553][ T6385] usb 2-1: Manufacturer: syz [ 464.795262][ T6385] usb 2-1: config 0 descriptor?? [ 464.827874][ T1223] ieee802154 phy0 wpan0: encryption failed: -22 [ 464.835123][ T1223] ieee802154 phy1 wpan1: encryption failed: -22 [ 464.907761][ T7640] veth0_vlan: entered promiscuous mode [ 464.970195][ T7640] veth1_vlan: entered promiscuous mode [ 465.084189][ T5120] usb 2-1: USB disconnect, device number 8 [ 465.187431][ T7640] veth0_macvtap: entered promiscuous mode [ 465.225733][ T7640] veth1_macvtap: entered promiscuous mode [ 465.373862][ T7640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 465.384775][ T7640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 465.396156][ T7640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 465.411420][ T7640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 465.424436][ T7640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 465.435270][ T7640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 465.456399][ T7640] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 465.564613][ T7640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 465.577517][ T7640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 465.588342][ T7640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 465.599362][ T7640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 465.609727][ T7640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 465.620546][ T7640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 465.635744][ T7640] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 465.828067][ T7823] vlan2: entered promiscuous mode [ 465.833523][ T7823] veth0_virt_wifi: entered promiscuous mode [ 465.945133][ T7823] veth0_virt_wifi: left promiscuous mode [ 466.072820][ T7640] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.081917][ T7640] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.095529][ T7640] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.105845][ T7640] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.277529][ T7683] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 466.415679][ T7829] input: syz0 as /devices/virtual/input/input13 [ 466.809692][ T7683] veth0_vlan: entered promiscuous mode [ 466.971879][ T7683] veth1_vlan: entered promiscuous mode [ 466.984892][ T5076] Bluetooth: hci1: command tx timeout [ 467.242038][ T7683] veth0_macvtap: entered promiscuous mode [ 467.299297][ T7683] veth1_macvtap: entered promiscuous mode [ 467.419426][ T7683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 467.431784][ T7683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 467.443304][ T7683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 467.454563][ T7683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 467.466992][ T7683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 467.477986][ T7683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 467.489178][ T7683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 467.500834][ T7683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 467.519398][ T7683] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 467.710419][ T7683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 467.728495][ T7683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 467.741745][ T7683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 467.752640][ T7683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 467.763061][ T7683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 467.773842][ T7683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 467.784359][ T7683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 467.795213][ T7683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 467.810640][ T7683] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 467.859299][ T7683] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.868732][ T7683] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.878091][ T7683] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.887315][ T7683] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.334731][ T6385] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 468.573951][ T6385] usb 2-1: Using ep0 maxpacket: 32 [ 468.626186][ T6385] usb 2-1: config 0 has no interfaces? [ 468.675609][ T6385] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 468.685135][ T6385] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 468.694564][ T6385] usb 2-1: Product: syz [ 468.698980][ T6385] usb 2-1: Manufacturer: syz [ 468.749718][ T6385] usb 2-1: config 0 descriptor?? [ 468.824304][ T7864] vlan2: entered promiscuous mode [ 468.829707][ T7864] veth0_virt_wifi: entered promiscuous mode [ 468.855820][ T7864] veth0_virt_wifi: left promiscuous mode [ 468.992225][ T6385] usb 2-1: USB disconnect, device number 9 [ 469.170009][ T7868] input: syz0 as /devices/virtual/input/input14 [ 469.838331][ T7876] loop4: detected capacity change from 0 to 1024 [ 470.050022][ T29] audit: type=1326 audit(1721662960.343:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7880 comm="syz.1.964" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73cd579 code=0x0 [ 470.072164][ T7876] hfsplus: trying to free free bnode 0(1) [ 470.088601][ T5076] Bluetooth: hci1: command tx timeout [ 470.172368][ T7876] hfsplus: catalog searching failed [ 470.414051][ T3865] hfsplus: b-tree write err: -5, ino 4 [ 470.637054][ T7893] loop2: detected capacity change from 0 to 64 [ 471.262338][ T7907] netlink: 8 bytes leftover after parsing attributes in process `syz.1.969'. [ 471.696910][ T6763] Trying to free block not in datazone [ 471.707354][ T3865] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 471.718248][ T3865] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 471.740800][ T7912] input: syz0 as /devices/virtual/input/input15 [ 471.809457][ T2854] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 471.821290][ T2854] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 472.383436][ T7918] mkiss: ax0: crc mode is auto. [ 472.977748][ T7932] netlink: 8 bytes leftover after parsing attributes in process `syz.3.978'. [ 472.990224][ T7927] loop1: detected capacity change from 0 to 1024 [ 473.043192][ T1094] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 473.053736][ T1094] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 473.136337][ T5076] Bluetooth: hci1: command tx timeout [ 473.143059][ T29] audit: type=1326 audit(1721662963.383:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7929 comm="syz.4.977" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf744d579 code=0x0 [ 473.189682][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 473.199356][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 473.303502][ T7927] hfsplus: trying to free free bnode 0(1) [ 473.373538][ T7927] hfsplus: catalog searching failed [ 473.608463][ T34] hfsplus: b-tree write err: -5, ino 4 [ 473.750429][ T7942] loop0: detected capacity change from 0 to 512 [ 473.791427][ T7942] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 473.846119][ T7942] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 473.903890][ T7942] System zones: 1-12 [ 474.024226][ T7942] EXT4-fs (loop0): 1 truncate cleaned up [ 474.031800][ T7942] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 474.283189][ T7942] loop0: detected capacity change from 512 to 64 [ 474.402118][ T7956] mkiss: ax0: crc mode is auto. [ 474.513875][ T7683] EXT4-fs warning (device loop0): ext4_empty_dir:3115: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 474.560685][ T7683] EXT4-fs warning (device loop0): ext4_empty_dir:3115: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 474.601871][ T7683] EXT4-fs warning (device loop0): ext4_empty_dir:3115: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 474.634785][ T7683] EXT4-fs warning (device loop0): ext4_empty_dir:3115: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 474.662448][ T7683] EXT4-fs warning (device loop0): ext4_empty_dir:3115: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 474.701682][ T7683] EXT4-fs warning (device loop0): ext4_empty_dir:3115: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 474.751717][ T7683] EXT4-fs warning (device loop0): ext4_empty_dir:3115: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 474.805882][ T7683] EXT4-fs warning (device loop0): ext4_empty_dir:3115: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 474.861671][ T7683] EXT4-fs warning (device loop0): ext4_empty_dir:3115: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 474.885752][ T7683] EXT4-fs warning (device loop0): ext4_empty_dir:3115: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 474.986526][ T7962] netlink: 8 bytes leftover after parsing attributes in process `syz.4.989'. [ 475.373450][ T7966] loop2: detected capacity change from 0 to 1024 [ 475.546139][ T7966] hfsplus: trying to free free bnode 0(1) [ 475.611920][ T7966] hfsplus: catalog searching failed [ 475.678848][ T7970] 9pnet_fd: Insufficient options for proto=fd [ 475.805057][ T3340] hfsplus: b-tree write err: -5, ino 4 [ 476.242949][ T29] audit: type=1326 audit(1721662966.563:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7975 comm="syz.1.996" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73cd579 code=0x0 [ 476.307850][ T7683] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 476.339074][ T80] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.542083][ T80] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.768078][ T80] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.895745][ T80] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.341727][ T80] bridge_slave_1: left allmulticast mode [ 477.353924][ T80] bridge_slave_1: left promiscuous mode [ 477.360539][ T80] bridge0: port 2(bridge_slave_1) entered disabled state [ 477.390224][ T80] bridge_slave_0: left allmulticast mode [ 477.396598][ T80] bridge_slave_0: left promiscuous mode [ 477.403349][ T80] bridge0: port 1(bridge_slave_0) entered disabled state [ 478.106205][ T80] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 478.190512][ T80] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 478.255690][ T80] bond0 (unregistering): Released all slaves [ 478.341504][ T7994] loop4: detected capacity change from 0 to 1024 [ 478.376657][ T7993] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1002'. [ 478.533334][ T7994] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 478.551764][ T5077] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 478.566133][ T5077] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 478.583863][ T5077] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 478.622129][ T5077] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 478.639415][ T51] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 478.653836][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 478.951300][ T8006] 9pnet_fd: Insufficient options for proto=fd [ 479.170339][ T6459] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 479.519431][ T29] audit: type=1326 audit(1721662969.793:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8010 comm="syz.3.1010" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f47579 code=0x0 [ 479.540934][ C1] vkms_vblank_simulate: vblank timer overrun [ 479.552758][ T80] hsr_slave_0: left promiscuous mode [ 479.568412][ T80] hsr_slave_1: left promiscuous mode [ 479.590050][ T80] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 479.597974][ T80] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 479.647007][ T80] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 479.655131][ T80] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 479.730121][ T80] veth1_macvtap: left promiscuous mode [ 479.736083][ T80] veth0_macvtap: left promiscuous mode [ 479.742141][ T80] veth1_vlan: left promiscuous mode [ 479.747869][ T80] veth0_vlan: left promiscuous mode [ 479.779384][ T8017] loop4: detected capacity change from 0 to 1024 [ 479.897620][ T8017] hfsplus: bad catalog entry type [ 480.189032][ T3340] hfsplus: b-tree write err: -5, ino 4 [ 480.730485][ T5076] Bluetooth: hci1: command tx timeout [ 480.745595][ T80] team0 (unregistering): Port device team_slave_1 removed [ 480.794141][ T80] team0 (unregistering): Port device team_slave_0 removed [ 481.448178][ T8030] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1016'. [ 481.457764][ T8030] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1016'. [ 481.570968][ T8033] loop4: detected capacity change from 0 to 164 [ 481.674144][ T8033] isofs: isofs_export_get_parent(): child directory not normalized! [ 481.963427][ T7998] chnl_net:caif_netlink_parms(): no params data found [ 482.247730][ T5076] Bluetooth: hci5: command 0x0406 tx timeout [ 482.473770][ T5124] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 482.794523][ T5124] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 482.805920][ T5124] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 482.806475][ T51] Bluetooth: hci1: command tx timeout [ 482.816073][ T5124] usb 5-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 482.816236][ T5124] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.902860][ T5124] usb 5-1: config 0 descriptor?? [ 483.164038][ T7998] bridge0: port 1(bridge_slave_0) entered blocking state [ 483.172106][ T7998] bridge0: port 1(bridge_slave_0) entered disabled state [ 483.180484][ T7998] bridge_slave_0: entered allmulticast mode [ 483.200831][ T7998] bridge_slave_0: entered promiscuous mode [ 483.302026][ T7998] bridge0: port 2(bridge_slave_1) entered blocking state [ 483.310052][ T7998] bridge0: port 2(bridge_slave_1) entered disabled state [ 483.318084][ T7998] bridge_slave_1: entered allmulticast mode [ 483.328482][ T7998] bridge_slave_1: entered promiscuous mode [ 483.528525][ T5124] dragonrise 0003:0079:0011.000B: unknown main item tag 0x0 [ 483.536495][ T5124] dragonrise 0003:0079:0011.000B: unknown main item tag 0x0 [ 483.544272][ T5124] dragonrise 0003:0079:0011.000B: item fetching failed at offset 10/11 [ 483.601108][ T5124] dragonrise 0003:0079:0011.000B: parse failed [ 483.607482][ T7998] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 483.617526][ T5124] dragonrise 0003:0079:0011.000B: probe with driver dragonrise failed with error -22 [ 483.638314][ T7998] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 483.657939][ T29] audit: type=1326 audit(1721662973.933:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8059 comm="syz.2.1027" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf746d579 code=0x0 [ 483.755239][ T1045] usb 5-1: USB disconnect, device number 8 [ 483.832819][ T7998] team0: Port device team_slave_0 added [ 483.887151][ T7998] team0: Port device team_slave_1 added [ 484.065830][ T7998] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 484.073583][ T7998] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 484.100262][ T7998] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 484.135184][ T7998] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 484.143165][ T7998] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 484.169763][ T7998] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 484.245618][ T8067] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1029'. [ 484.255617][ T8067] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1029'. [ 484.451999][ T7998] hsr_slave_0: entered promiscuous mode [ 484.500515][ T7998] hsr_slave_1: entered promiscuous mode [ 484.523483][ T7998] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 484.531301][ T7998] Cannot create hsr debugfs directory [ 484.887803][ T51] Bluetooth: hci1: command tx timeout [ 485.806646][ T8091] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1040'. [ 485.816460][ T8091] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1040'. [ 486.207057][ T7998] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 486.283407][ T7998] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 486.322713][ T29] audit: type=1326 audit(1721662976.603:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8096 comm="syz.3.1042" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f47579 code=0x0 [ 486.344003][ T7998] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 486.398162][ T7998] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 486.965242][ T51] Bluetooth: hci1: command tx timeout [ 487.146388][ T8110] loop4: detected capacity change from 0 to 164 [ 487.294591][ T8110] isofs: isofs_export_get_parent(): child directory not normalized! [ 487.470925][ T7998] 8021q: adding VLAN 0 to HW filter on device bond0 [ 487.637736][ T7998] 8021q: adding VLAN 0 to HW filter on device team0 [ 487.679178][ T8114] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1049'. [ 487.745378][ T1556] bridge0: port 1(bridge_slave_0) entered blocking state [ 487.753247][ T1556] bridge0: port 1(bridge_slave_0) entered forwarding state [ 487.865538][ T1556] bridge0: port 2(bridge_slave_1) entered blocking state [ 487.873337][ T1556] bridge0: port 2(bridge_slave_1) entered forwarding state [ 488.423122][ T8125] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1052'. [ 488.432700][ T8125] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1052'. [ 489.546789][ T7998] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 490.083481][ T7998] veth0_vlan: entered promiscuous mode [ 490.101423][ T8156] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1064'. [ 490.217810][ T7998] veth1_vlan: entered promiscuous mode [ 490.540639][ T7998] veth0_macvtap: entered promiscuous mode [ 490.607367][ T7998] veth1_macvtap: entered promiscuous mode [ 490.771701][ T7998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 490.782717][ T7998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 490.792933][ T7998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 490.803727][ T7998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 490.814261][ T7998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 490.825089][ T7998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 490.835239][ T7998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 490.846076][ T7998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 490.861341][ T7998] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 491.035352][ T7998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 491.048226][ T7998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 491.058933][ T7998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 491.075275][ T7998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 491.087220][ T7998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 491.098123][ T7998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 491.108284][ T7998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 491.119359][ T7998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 491.135096][ T7998] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 491.334658][ T7998] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.344131][ T7998] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.353365][ T7998] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.362400][ T7998] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.603813][ T8173] loop1: detected capacity change from 0 to 256 [ 491.826630][ T8173] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x1cbb3694, utbl_chksum : 0xe619d30d) [ 492.625684][ T8189] loop1: detected capacity change from 0 to 512 [ 492.716164][ T8189] EXT4-fs (loop1): orphan cleanup on readonly fs [ 492.723490][ T8189] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 492.824877][ T8189] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 492.917401][ T8189] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #13: comm syz.1.1075: attempt to clear invalid blocks 2 len 1 [ 493.071320][ T8189] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.1075: invalid indirect mapped block 1819239214 (level 0) [ 493.125038][ T8189] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.1075: invalid indirect mapped block 1819239214 (level 1) [ 493.145245][ T8189] EXT4-fs (loop1): 1 truncate cleaned up [ 493.153312][ T8189] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 493.273894][ T8189] EXT4-fs error (device loop1): ext4_lookup:1808: inode #2: comm syz.1.1075: 'file1' linked to parent dir [ 493.605621][ T7428] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 494.432357][ T8224] loop4: detected capacity change from 0 to 256 [ 494.612079][ T8224] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x1cbb3694, utbl_chksum : 0xe619d30d) [ 495.969999][ T8250] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1094'. [ 496.636805][ T2854] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 496.645110][ T2854] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 496.707472][ T5127] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 496.741064][ T2854] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 496.749721][ T2854] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 496.899536][ T5127] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 496.914492][ T5127] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 496.925825][ T5127] usb 4-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 496.935468][ T5127] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.995109][ T5127] usb 4-1: config 0 descriptor?? [ 497.160641][ T8263] loop1: detected capacity change from 0 to 256 [ 497.409011][ T8263] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x1cbb3694, utbl_chksum : 0xe619d30d) [ 497.490882][ T8268] mkiss: ax0: crc mode is auto. [ 497.510749][ T5127] kye 0003:0458:5011.000C: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 497.619579][ T5127] kye 0003:0458:5011.000C: hidraw0: USB HID v0.00 Device [HID 0458:5011] on usb-dummy_hcd.3-1/input0 [ 497.636756][ T5127] kye 0003:0458:5011.000C: tablet-enabling feature report not found [ 497.646492][ T5127] kye 0003:0458:5011.000C: tablet enabling failed [ 497.722858][ T5127] usb 4-1: USB disconnect, device number 4 [ 498.478065][ T8280] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1105'. [ 498.927585][ T8293] loop4: detected capacity change from 0 to 16 [ 499.314347][ T8299] mkiss: ax0: crc mode is auto. [ 499.663180][ T8306] Bluetooth: MGMT ver 1.23 [ 500.393349][ T1045] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 500.675464][ T1045] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 500.686827][ T1045] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 500.700228][ T1045] usb 1-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 500.710746][ T1045] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 500.771944][ T1045] usb 1-1: config 0 descriptor?? [ 501.244000][ T1045] kye 0003:0458:5011.000D: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 501.343822][ T1045] kye 0003:0458:5011.000D: hidraw0: USB HID v0.00 Device [HID 0458:5011] on usb-dummy_hcd.0-1/input0 [ 501.355433][ T1045] kye 0003:0458:5011.000D: tablet-enabling feature report not found [ 501.365211][ T1045] kye 0003:0458:5011.000D: tablet enabling failed [ 501.488378][ T1045] usb 1-1: USB disconnect, device number 10 [ 503.643947][ T5076] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 503.653827][ T5076] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 503.699505][ T5076] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 503.730160][ T5076] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 503.753851][ T5076] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 503.775473][ T5076] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 503.965549][ T8373] loop2: detected capacity change from 0 to 256 [ 504.595975][ T8365] chnl_net:caif_netlink_parms(): no params data found [ 505.461245][ T3865] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.698236][ T3865] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.845716][ T51] Bluetooth: hci3: command tx timeout [ 505.899687][ T3865] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.259947][ T3865] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.332956][ T8365] bridge0: port 1(bridge_slave_0) entered blocking state [ 506.340724][ T8365] bridge0: port 1(bridge_slave_0) entered disabled state [ 506.348891][ T8365] bridge_slave_0: entered allmulticast mode [ 506.358106][ T8365] bridge_slave_0: entered promiscuous mode [ 506.445946][ T8365] bridge0: port 2(bridge_slave_1) entered blocking state [ 506.453866][ T8365] bridge0: port 2(bridge_slave_1) entered disabled state [ 506.461706][ T8365] bridge_slave_1: entered allmulticast mode [ 506.471063][ T8365] bridge_slave_1: entered promiscuous mode [ 506.473166][ T8410] loop2: detected capacity change from 0 to 256 [ 506.763970][ T8365] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 506.808145][ T3865] bridge_slave_1: left allmulticast mode [ 506.814845][ T3865] bridge_slave_1: left promiscuous mode [ 506.821793][ T3865] bridge0: port 2(bridge_slave_1) entered disabled state [ 506.911020][ T3865] bridge_slave_0: left allmulticast mode [ 506.917774][ T3865] bridge_slave_0: left promiscuous mode [ 506.924464][ T3865] bridge0: port 1(bridge_slave_0) entered disabled state [ 507.685311][ T3865] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 507.825491][ T3865] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 507.886366][ T3865] bond0 (unregistering): Released all slaves [ 507.907152][ T8434] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1169'. [ 507.937440][ T8365] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 507.947787][ T51] Bluetooth: hci3: command tx timeout [ 508.159344][ T8365] team0: Port device team_slave_0 added [ 508.195784][ T8365] team0: Port device team_slave_1 added [ 508.514097][ T8365] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 508.521281][ T8365] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 508.547775][ T8365] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 508.559861][ T8442] loop0: detected capacity change from 0 to 256 [ 508.717652][ T8365] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 508.720720][ T8446] loop4: detected capacity change from 0 to 256 [ 508.727065][ T8365] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 508.759901][ T8365] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 508.855323][ T3865] hsr_slave_0: left promiscuous mode [ 508.883611][ T3865] hsr_slave_1: left promiscuous mode [ 508.912336][ T3865] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 508.920496][ T3865] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 508.965706][ T3865] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 508.975026][ T3865] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 509.068345][ T3865] veth1_macvtap: left promiscuous mode [ 509.075994][ T3865] veth0_macvtap: left promiscuous mode [ 509.082025][ T3865] veth1_vlan: left promiscuous mode [ 509.087790][ T3865] veth0_vlan: left promiscuous mode [ 510.003850][ T51] Bluetooth: hci3: command tx timeout [ 510.084851][ T3865] team0 (unregistering): Port device team_slave_1 removed [ 510.135138][ T3865] team0 (unregistering): Port device team_slave_0 removed [ 510.159804][ T8463] loop3: detected capacity change from 0 to 256 [ 510.654145][ T5127] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 510.919629][ T8469] loop3: detected capacity change from 0 to 256 [ 510.927318][ T8365] hsr_slave_0: entered promiscuous mode [ 510.946711][ T5127] usb 5-1: Using ep0 maxpacket: 32 [ 511.024217][ T5127] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 511.048357][ T8365] hsr_slave_1: entered promiscuous mode [ 511.055694][ T8472] loop0: detected capacity change from 0 to 256 [ 511.119010][ T5127] usb 5-1: New USB device found, idVendor=0421, idProduct=0223, bcdDevice=b1.bd [ 511.128625][ T5127] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.137235][ T5127] usb 5-1: Product: syz [ 511.143336][ T5127] usb 5-1: Manufacturer: syz [ 511.148199][ T5127] usb 5-1: SerialNumber: syz [ 511.190416][ T5127] usb 5-1: config 0 descriptor?? [ 511.215393][ T5127] usb 5-1: bad CDC descriptors [ 511.221880][ T5127] cdc_acm 5-1:0.0: Zero length descriptor references [ 511.229819][ T5127] cdc_acm 5-1:0.0: probe with driver cdc_acm failed with error -22 [ 511.497978][ T4751] usb 5-1: USB disconnect, device number 9 [ 512.083555][ T51] Bluetooth: hci3: command tx timeout [ 512.239344][ T8487] loop2: detected capacity change from 0 to 512 [ 512.287043][ T8487] EXT4-fs: Ignoring removed bh option [ 512.292912][ T8487] EXT4-fs: Ignoring removed mblk_io_submit option [ 512.597096][ T8494] loop4: detected capacity change from 0 to 256 [ 512.627180][ T8365] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 512.694716][ T8365] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 512.751984][ T8365] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 512.824617][ T8487] EXT4-fs (loop2): Test dummy encryption mode enabled [ 512.855759][ T8365] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 512.933312][ T8487] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 513.000836][ T8499] loop3: detected capacity change from 0 to 256 [ 513.026232][ T8487] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #13: comm syz.2.1194: attempt to clear invalid blocks 2 len 1 [ 513.064174][ T8487] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 513.083044][ T8487] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.1194: invalid indirect mapped block 1819239214 (level 0) [ 513.128177][ T8487] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.1194: invalid indirect mapped block 1819239214 (level 1) [ 513.217448][ T8487] EXT4-fs (loop2): 1 truncate cleaned up [ 513.225255][ T8487] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 513.614055][ T8486] fscrypt (loop2): Missing crypto API support for AES-256-CBC-CTS (API name: "cts(cbc(aes))") [ 513.974154][ T6763] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 514.084692][ T8365] 8021q: adding VLAN 0 to HW filter on device bond0 [ 514.298528][ T8365] 8021q: adding VLAN 0 to HW filter on device team0 [ 514.394373][ T6385] bridge0: port 1(bridge_slave_0) entered blocking state [ 514.402038][ T6385] bridge0: port 1(bridge_slave_0) entered forwarding state [ 514.501409][ T6385] bridge0: port 2(bridge_slave_1) entered blocking state [ 514.509250][ T6385] bridge0: port 2(bridge_slave_1) entered forwarding state [ 514.512865][ T8523] tipc: Can't bind to reserved service type 0 [ 515.071424][ T8534] loop4: detected capacity change from 0 to 256 [ 515.686823][ T8545] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1213'. [ 516.406358][ T8365] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 516.594646][ T8552] vxcan1: tx address claim with dlc 18 [ 516.849510][ T8365] veth0_vlan: entered promiscuous mode [ 516.942172][ T8365] veth1_vlan: entered promiscuous mode [ 517.037458][ T8556] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1219'. [ 517.234843][ T8365] veth0_macvtap: entered promiscuous mode [ 517.324767][ T8365] veth1_macvtap: entered promiscuous mode [ 517.474772][ T8365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 517.486682][ T8365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 517.503216][ T8365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 517.515727][ T8365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 517.527020][ T8365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 517.537947][ T8365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 517.548098][ T8365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 517.558871][ T8365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 517.574132][ T8365] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 517.640656][ T8365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 517.653622][ T8365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 517.663453][ T8564] loop0: detected capacity change from 0 to 256 [ 517.670316][ T8365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 517.681156][ T8365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 517.691325][ T8365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 517.708333][ T8365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 517.720260][ T8365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 517.731088][ T8365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 517.746377][ T8365] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 517.806709][ T8365] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.816016][ T8365] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.825320][ T8365] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.834428][ T8365] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.678535][ T8581] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1227'. [ 518.693999][ T8582] vxcan1: tx address claim with dlc 18 [ 519.154072][ T8588] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1231'. [ 520.593888][ T8613] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1240'. [ 520.683571][ T8599] loop0: detected capacity change from 0 to 4096 [ 520.752833][ T8599] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 521.012749][ T8620] vxcan1: tx address claim with dlc 18 [ 521.202300][ T8599] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 522.574834][ T8638] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1246'. [ 522.610876][ T3340] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 522.619173][ T3340] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 522.741728][ T3340] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 522.750005][ T3340] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 523.490944][ T8649] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1251'. [ 524.356073][ T8666] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1259'. [ 524.443759][ T8670] IPv6: Can't replace route, no match found [ 524.809531][ T8658] loop4: detected capacity change from 0 to 4096 [ 524.857278][ T8658] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 525.140869][ T8679] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1265'. [ 525.163603][ T8658] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 525.928425][ T8693] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 526.218980][ T8697] loop1: detected capacity change from 0 to 1024 [ 526.302869][ T1223] ieee802154 phy0 wpan0: encryption failed: -22 [ 526.309550][ T1223] ieee802154 phy1 wpan1: encryption failed: -22 [ 526.405233][ T8699] IPv6: Can't replace route, no match found [ 526.424876][ T8697] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 526.746660][ T8365] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 527.031148][ T8710] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1278'. [ 527.914309][ T8712] loop4: detected capacity change from 0 to 4096 [ 527.950859][ T8712] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 528.001878][ T8726] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 528.251484][ T8712] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 528.530418][ T8730] IPv6: Can't replace route, no match found [ 528.709314][ C1] eth0: bad gso: type: 1, size: 1408 [ 529.204729][ T8741] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1291'. [ 529.420731][ T8744] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1293'. [ 529.963096][ T8755] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 530.551381][ T8761] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1299'. [ 530.603229][ T8765] IPv6: Can't replace route, no match found [ 530.691275][ T8758] loop0: detected capacity change from 0 to 4096 [ 530.763277][ T8758] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 530.950102][ T8758] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 531.121183][ T8771] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 531.128804][ T8771] IPv6: NLM_F_CREATE should be set when creating new route [ 531.662192][ T8777] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1307'. [ 531.678475][ T8779] loop4: detected capacity change from 0 to 64 [ 531.759986][ T8782] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1308'. [ 532.296327][ T8787] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 532.920605][ T8797] loop0: detected capacity change from 0 to 128 [ 532.957124][ T8797] FAT-fs (loop0): Directory bread(block 11554) failed [ 532.964774][ T8797] FAT-fs (loop0): Directory bread(block 11555) failed [ 532.971837][ T8797] FAT-fs (loop0): Directory bread(block 11556) failed [ 532.979214][ T8797] FAT-fs (loop0): Directory bread(block 11557) failed [ 532.986432][ T8797] FAT-fs (loop0): Directory bread(block 11558) failed [ 532.993661][ T8797] FAT-fs (loop0): Directory bread(block 11559) failed [ 533.000703][ T8797] FAT-fs (loop0): Directory bread(block 11560) failed [ 533.007895][ T8797] FAT-fs (loop0): Directory bread(block 11561) failed [ 533.015609][ T8797] FAT-fs (loop0): Directory bread(block 11562) failed [ 533.022736][ T8797] FAT-fs (loop0): Directory bread(block 11563) failed [ 533.133545][ T8799] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 533.845096][ T8810] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1322'. [ 534.249518][ T8818] loop0: detected capacity change from 0 to 16 [ 534.293598][ T8818] erofs: (device loop0): check_layout_compatibility: unidentified incompatible feature 9000000, please upgrade kernel [ 534.735897][ T8827] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 534.743451][ T8827] IPv6: NLM_F_CREATE should be set when creating new route [ 536.107626][ T6385] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 536.247723][ T8863] loop0: detected capacity change from 0 to 16 [ 536.284776][ T8863] erofs: (device loop0): check_layout_compatibility: unidentified incompatible feature 9000000, please upgrade kernel [ 536.308448][ T8865] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 536.366590][ T6385] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 536.378111][ T6385] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 536.388460][ T6385] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 536.397896][ T6385] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 536.459226][ T8851] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 536.997055][ T6385] usb 5-1: USB disconnect, device number 10 [ 537.688947][ T8882] geneve2: entered promiscuous mode [ 537.694646][ T8882] geneve2: entered allmulticast mode [ 538.217488][ T8895] loop3: detected capacity change from 0 to 16 [ 538.247300][ T8895] erofs: (device loop3): check_layout_compatibility: unidentified incompatible feature 9000000, please upgrade kernel [ 539.193975][ T5127] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 539.435164][ T5127] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 539.446775][ T5127] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 539.457497][ T5127] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 539.467231][ T5127] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 539.536690][ T8908] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 539.722390][ T8922] loop3: detected capacity change from 0 to 16 [ 539.760463][ T8922] erofs: (device loop3): check_layout_compatibility: unidentified incompatible feature 9000000, please upgrade kernel [ 540.158813][ T6385] usb 3-1: USB disconnect, device number 18 [ 542.035075][ T8975] netlink: 'syz.1.1390': attribute type 5 has an invalid length. [ 542.572996][ T5127] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 542.807034][ T5127] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 542.818730][ T5127] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 542.830089][ T5127] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 542.839703][ T5127] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 542.891937][ T8979] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 543.004405][ T8991] sp0: Synchronizing with TNC [ 543.064186][ T8990] [U] è [ 543.515031][ T5127] usb 3-1: USB disconnect, device number 19 [ 543.985943][ T9007] loop0: detected capacity change from 0 to 2048 [ 544.137023][ T9012] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 544.438054][ T9019] netlink: 'syz.1.1413': attribute type 5 has an invalid length. [ 544.700733][ T9023] sp0: Synchronizing with TNC [ 544.750761][ T9022] [U] è [ 545.872773][ T1045] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 546.065516][ T9039] loop2: detected capacity change from 0 to 2048 [ 546.122135][ T1045] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 546.133855][ T1045] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 546.144204][ T1045] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 546.153698][ T1045] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 546.180339][ T9037] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 546.230736][ T9048] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 546.791522][ T9053] sp0: Synchronizing with TNC [ 546.872429][ T9051] [U] è [ 546.967120][ T44] usb 4-1: USB disconnect, device number 5 [ 547.247063][ T9058] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1431'. [ 547.846907][ T9058] loop2: detected capacity change from 0 to 2048 [ 548.002363][ T9064] netlink: 'syz.1.1435': attribute type 5 has an invalid length. [ 549.300439][ T9080] loop0: detected capacity change from 0 to 2048 [ 549.368767][ T9084] sp0: Synchronizing with TNC [ 549.398281][ T9082] [U] è [ 549.476100][ T9085] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 550.517209][ T4751] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 550.722331][ T9099] loop2: detected capacity change from 0 to 512 [ 550.790384][ T9101] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1449'. [ 550.828655][ T4751] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 550.843342][ T4751] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 550.853670][ T4751] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 550.866295][ T4751] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 550.901928][ T9099] EXT4-fs: Ignoring removed bh option [ 550.908482][ T9099] EXT4-fs: Ignoring removed i_version option [ 550.950970][ T9092] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 551.010383][ T9099] EXT4-fs (loop2): bad geometry: block count 2304 exceeds size of device (256 blocks) [ 551.297664][ T9101] loop0: detected capacity change from 0 to 2048 [ 551.777867][ T4751] usb 5-1: USB disconnect, device number 11 [ 551.910739][ T9099] loop2: detected capacity change from 0 to 2048 [ 551.940951][ T9099] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 551.954739][ T9099] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 551.969522][ T9099] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 1)! [ 551.983343][ T9099] EXT4-fs (loop2): group descriptors corrupted! [ 552.027540][ T9108] netlink: 'syz.1.1455': attribute type 5 has an invalid length. [ 552.698588][ T9111] input: syz1 as /devices/virtual/input/input16 [ 552.870093][ T9116] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1458'. [ 552.912398][ T9116] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1458'. [ 553.632415][ T9119] loop4: detected capacity change from 0 to 2048 [ 553.797495][ T9128] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 554.179671][ T44] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 554.419487][ T44] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 554.433884][ T44] usb 1-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 554.446572][ T44] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 554.500693][ T44] usb 1-1: config 0 descriptor?? [ 554.547372][ T44] usb 1-1: bad CDC descriptors [ 554.560150][ T9135] loop1: detected capacity change from 0 to 512 [ 554.630415][ T9135] EXT4-fs: Ignoring removed bh option [ 554.640175][ T9135] EXT4-fs: Ignoring removed i_version option [ 554.686144][ T9135] EXT4-fs (loop1): bad geometry: block count 2304 exceeds size of device (256 blocks) [ 554.787184][ T4751] usb 1-1: USB disconnect, device number 11 [ 554.860807][ T9137] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1467'. [ 554.906697][ T9124] loop2: detected capacity change from 0 to 4096 [ 554.931039][ T9124] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512). [ 555.157755][ T9124] ntfs3: loop2: Failed to initialize $Extend/$ObjId. [ 555.181334][ T9135] loop1: detected capacity change from 0 to 2048 [ 555.229864][ T9135] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 555.243832][ T9135] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 555.258543][ T9135] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 1)! [ 555.272424][ T9135] EXT4-fs (loop1): group descriptors corrupted! [ 555.359838][ T9139] loop3: detected capacity change from 0 to 2048 [ 555.407451][ T9139] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 555.420814][ T9139] NILFS (loop3): mounting unchecked fs [ 555.449506][ T9137] loop4: detected capacity change from 0 to 2048 [ 555.506438][ T9139] NILFS (loop3): recovery cancelled because norecovery option was specified for a read/write mount [ 556.195466][ T9143] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1472'. [ 556.250982][ T9143] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1472'. [ 556.441182][ T9147] loop2: detected capacity change from 0 to 64 [ 557.110761][ T9150] input: syz1 as /devices/virtual/input/input17 [ 557.767826][ T4751] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 557.896487][ T9160] loop2: detected capacity change from 0 to 2048 [ 557.958846][ T9168] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 557.987157][ T5124] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 558.042459][ T4751] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 558.060553][ T4751] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 558.075555][ T4751] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 558.092311][ T4751] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 558.108479][ T4751] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 558.136563][ T4751] usb 2-1: config 0 descriptor?? [ 558.147809][ T9157] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 558.302616][ C0] hrtimer: interrupt took 156295 ns [ 558.332426][ T5124] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 558.353697][ T5124] usb 1-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 558.367902][ T5124] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 558.451607][ T5124] usb 1-1: config 0 descriptor?? [ 558.508011][ T5124] usb 1-1: bad CDC descriptors [ 558.612927][ T9170] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1483'. [ 558.751230][ T4751] plantronics 0003:047F:FFFF.000E: No inputs registered, leaving [ 558.786139][ T44] usb 1-1: USB disconnect, device number 12 [ 558.847279][ T4751] plantronics 0003:047F:FFFF.000E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 559.078716][ T9170] loop3: detected capacity change from 0 to 2048 [ 559.379751][ T9166] loop4: detected capacity change from 0 to 4096 [ 559.422143][ T9166] ntfs3: loop4: Different NTFS sector size (2048) and media sector size (512). [ 559.727892][ T9166] ntfs3: loop4: Failed to initialize $Extend/$ObjId. [ 559.830536][ T9172] loop2: detected capacity change from 0 to 2048 [ 559.913033][ T9172] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 559.928285][ T9172] NILFS (loop2): mounting unchecked fs [ 560.030003][ T9172] NILFS (loop2): recovery cancelled because norecovery option was specified for a read/write mount [ 560.260354][ T9177] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1486'. [ 560.308410][ T9177] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1486'. [ 560.730650][ T9179] loop0: detected capacity change from 0 to 64 [ 561.020401][ T5124] usb 2-1: USB disconnect, device number 10 [ 561.548705][ T9189] 9pnet: p9_errstr2errno: server reported unknown error [ 561.861316][ T9190] input: syz1 as /devices/virtual/input/input18 [ 562.286501][ T5124] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 562.549655][ T5124] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 562.563556][ T5124] usb 3-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 562.576866][ T5124] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 562.621884][ T9198] loop4: detected capacity change from 0 to 2048 [ 562.648129][ T5124] usb 3-1: config 0 descriptor?? [ 562.689161][ T5124] usb 3-1: bad CDC descriptors [ 562.761626][ T9203] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 563.016964][ T9207] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1499'. [ 563.101055][ T44] usb 3-1: USB disconnect, device number 20 [ 563.167322][ T9207] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1499'. [ 563.680941][ T9212] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1502'. [ 563.939765][ T9216] loop0: detected capacity change from 0 to 64 [ 563.949845][ T51] Bluetooth: hci4: unexpected event for opcode 0x1003 [ 563.999085][ T9217] loop4: detected capacity change from 0 to 256 [ 564.025079][ T9217] vfat: Bad value for 'dmask' [ 564.709815][ T9209] loop3: detected capacity change from 0 to 4096 [ 564.747516][ T9209] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [ 565.016876][ T9209] ntfs3: loop3: Failed to initialize $Extend/$ObjId. [ 565.160062][ T9229] loop1: detected capacity change from 0 to 256 [ 565.211685][ T9229] exfat: Deprecated parameter 'namecase' [ 565.320031][ T9229] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 565.479938][ T9229] syz.1.1509: attempt to access beyond end of device [ 565.479938][ T9229] loop1: rw=524288, sector=34359738488, nr_sectors = 1 limit=256 [ 565.498841][ T9229] syz.1.1509: attempt to access beyond end of device [ 565.498841][ T9229] loop1: rw=0, sector=34359738488, nr_sectors = 1 limit=256 [ 565.568306][ T29] audit: type=1800 audit(1721663055.863:27): pid=9229 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1509" name="file1" dev="loop1" ino=1048672 res=0 errno=0 [ 565.711967][ T9238] exFAT-fs (loop1): error, tried to truncate zeroed cluster. [ 565.771467][ T9229] exFAT-fs (loop1): error, invalid size(size(36864) > aligned(0) [ 565.771467][ T9229] [ 566.026917][ T9239] input: syz1 as /devices/virtual/input/input19 [ 566.033874][ T9243] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1513'. [ 566.059373][ T9243] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1513'. [ 566.326051][ T5124] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 566.347176][ T9246] loop3: detected capacity change from 0 to 1024 [ 566.417696][ T9248] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1515'. [ 566.576471][ T5124] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 566.590906][ T5124] usb 1-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 566.604052][ T5124] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 566.668939][ T51] Bluetooth: hci5: unexpected event for opcode 0x1003 [ 566.675084][ T5124] usb 1-1: config 0 descriptor?? [ 566.700222][ T9250] loop2: detected capacity change from 0 to 256 [ 566.715943][ T9250] vfat: Bad value for 'dmask' [ 566.751827][ T5124] usb 1-1: bad CDC descriptors [ 567.036916][ T9252] loop4: detected capacity change from 0 to 64 [ 567.058186][ T5124] usb 1-1: USB disconnect, device number 13 [ 567.842119][ T9260] loop1: detected capacity change from 0 to 1764 [ 567.906315][ T9260] iso9660: Unknown parameter '' [ 568.006495][ T51] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 568.018535][ T51] Bluetooth: hci4: Injecting HCI hardware error event [ 568.030587][ T51] Bluetooth: hci4: hardware error 0x00 [ 568.046086][ T9265] netlink: 'syz.2.1523': attribute type 27 has an invalid length. [ 568.059537][ T9267] loop0: detected capacity change from 0 to 256 [ 568.088297][ T9267] exfat: Deprecated parameter 'namecase' [ 568.348459][ T9267] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 568.580299][ T9267] syz.0.1525: attempt to access beyond end of device [ 568.580299][ T9267] loop0: rw=524288, sector=34359738488, nr_sectors = 1 limit=256 [ 568.603013][ T9267] syz.0.1525: attempt to access beyond end of device [ 568.603013][ T9267] loop0: rw=0, sector=34359738488, nr_sectors = 1 limit=256 [ 568.721348][ T29] audit: type=1800 audit(1721663058.973:28): pid=9267 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1525" name="file1" dev="loop0" ino=1048673 res=0 errno=0 [ 568.777620][ T9277] exFAT-fs (loop0): error, tried to truncate zeroed cluster. [ 568.837401][ T9267] exFAT-fs (loop0): error, invalid size(size(36864) > aligned(0) [ 568.837401][ T9267] [ 569.056306][ T9265] bridge0: port 2(bridge_slave_1) entered disabled state [ 569.066423][ T9265] bridge0: port 1(bridge_slave_0) entered disabled state [ 569.118652][ T9283] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1526'. [ 569.259119][ T9282] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1526'. [ 570.156583][ T9291] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1528'. [ 570.166738][ T51] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 570.481965][ T9292] loop0: detected capacity change from 0 to 1024 [ 570.611848][ T9295] loop4: detected capacity change from 0 to 256 [ 570.640015][ T9295] vfat: Bad value for 'dmask' [ 570.729967][ T51] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 570.730148][ T51] Bluetooth: hci5: Injecting HCI hardware error event [ 570.730729][ T5076] Bluetooth: hci5: hardware error 0x00 [ 570.947029][ T9265] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 571.148997][ T9265] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 572.050535][ T9265] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.065199][ T9265] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.079764][ T9265] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.095774][ T9265] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.896160][ T5076] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 573.290157][ T9323] loop2: detected capacity change from 0 to 256 [ 573.327850][ T9323] exfat: Deprecated parameter 'namecase' [ 573.461320][ T9326] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1541'. [ 573.545965][ T9323] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 573.688680][ T9323] syz.2.1540: attempt to access beyond end of device [ 573.688680][ T9323] loop2: rw=524288, sector=34359738488, nr_sectors = 1 limit=256 [ 573.706775][ T9323] syz.2.1540: attempt to access beyond end of device [ 573.706775][ T9323] loop2: rw=0, sector=34359738488, nr_sectors = 1 limit=256 [ 573.777628][ T9328] loop0: detected capacity change from 0 to 256 [ 573.791668][ T9324] loop1: detected capacity change from 0 to 1764 [ 573.798667][ T29] audit: type=1800 audit(1721663064.073:29): pid=9323 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1540" name="file1" dev="loop2" ino=1048674 res=0 errno=0 [ 573.887166][ T9329] exFAT-fs (loop2): error, tried to truncate zeroed cluster. [ 573.979270][ T9324] iso9660: Unknown parameter '' [ 574.026782][ T9323] exFAT-fs (loop2): error, invalid size(size(36864) > aligned(0) [ 574.026782][ T9323] [ 574.106627][ T9328] FAT-fs (loop0): Directory bread(block 64) failed [ 574.117050][ T9328] FAT-fs (loop0): Directory bread(block 65) failed [ 574.129979][ T9328] FAT-fs (loop0): Directory bread(block 66) failed [ 574.140798][ T9328] FAT-fs (loop0): Directory bread(block 67) failed [ 574.151296][ T9328] FAT-fs (loop0): Directory bread(block 68) failed [ 574.161377][ T9328] FAT-fs (loop0): Directory bread(block 69) failed [ 574.171769][ T9328] FAT-fs (loop0): Directory bread(block 70) failed [ 574.181884][ T9328] FAT-fs (loop0): Directory bread(block 71) failed [ 574.192243][ T9328] FAT-fs (loop0): Directory bread(block 72) failed [ 574.202366][ T9328] FAT-fs (loop0): Directory bread(block 73) failed [ 574.438525][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 574.527936][ T9320] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=4091629214 (65466067424 ns) > initial count (185248 ns). Using initial count to start timer. [ 574.640921][ T9328] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1542'. [ 575.280135][ T9338] bond0: option min_links: invalid value (18446744073709551615) [ 575.280272][ T9338] bond0: option min_links: allowed values 0 - 2147483647 [ 575.796281][ T9342] loop4: detected capacity change from 0 to 1024 [ 576.269659][ T9350] netlink: 'syz.3.1551': attribute type 27 has an invalid length. [ 577.022844][ T9350] bridge0: port 2(bridge_slave_1) entered disabled state [ 577.032985][ T9350] bridge0: port 1(bridge_slave_0) entered disabled state [ 577.627901][ T9362] loop4: detected capacity change from 0 to 1024 [ 577.665887][ T9362] hfsplus: part requires an argument [ 577.671490][ T9362] hfsplus: unable to parse mount options [ 577.816199][ T9366] netlink: 248 bytes leftover after parsing attributes in process `syz.1.1558'. [ 577.828244][ T9366] netlink: 248 bytes leftover after parsing attributes in process `syz.1.1558'. [ 578.629062][ T9350] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 578.769270][ T9350] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 580.031249][ T9350] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 580.031480][ T9350] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 580.031686][ T9350] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 580.031891][ T9350] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 580.119082][ T9389] loop0: detected capacity change from 0 to 1024 [ 580.592255][ T9369] bond0: option min_links: invalid value (18446744073709551615) [ 580.592386][ T9369] bond0: option min_links: allowed values 0 - 2147483647 [ 582.248284][ T9286] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 582.480351][ T9286] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 582.490048][ T9286] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 582.536607][ T9286] usb 1-1: config 0 descriptor?? [ 583.343647][ C1] ===================================================== [ 583.343931][ C1] BUG: KMSAN: uninit-value in skb_release_data+0x3dc/0x1140 [ 583.344137][ C1] skb_release_data+0x3dc/0x1140 [ 583.344280][ C1] __kfree_skb+0x6b/0x250 [ 583.344407][ C1] consume_skb+0xa8/0x2d0 [ 583.344533][ C1] ath6kl_usb_cleanup_recv_urb+0x47/0x450 [ 583.344661][ C1] ath6kl_usb_recv_complete+0xd4/0x420 [ 583.344791][ C1] __usb_hcd_giveback_urb+0x572/0x840 [ 583.344955][ C1] usb_hcd_giveback_urb+0x157/0x720 [ 583.345114][ C1] dummy_timer+0xd3f/0x6aa0 [ 583.345278][ C1] __hrtimer_run_queues+0x564/0xe40 [ 583.345424][ C1] hrtimer_interrupt+0x3ab/0x1490 [ 583.345582][ C1] __sysvec_apic_timer_interrupt+0xa6/0x3a0 [ 583.345742][ C1] sysvec_apic_timer_interrupt+0x40/0x90 [ 583.345870][ C1] asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 583.346055][ C1] kmsan_get_metadata+0x60/0x1c0 [ 583.346214][ C1] kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 583.346381][ C1] __msan_metadata_ptr_for_load_4+0x24/0x40 [ 583.346526][ C1] fq_pie_timer+0x195/0x440 [ 583.346659][ C1] call_timer_fn+0x49/0x580 [ 583.346791][ C1] __run_timer_base+0x84e/0xe90 [ 583.346907][ C1] run_timer_softirq+0x3a/0x70 [ 583.347021][ C1] handle_softirqs+0x1ce/0x800 [ 583.347182][ C1] __irq_exit_rcu+0x68/0x120 [ 583.347322][ C1] irq_exit_rcu+0x12/0x20 [ 583.347478][ C1] sysvec_apic_timer_interrupt+0x83/0x90 [ 583.347591][ C1] asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 583.347808][ C1] unwind_get_return_address+0x3d/0x140 [ 583.347923][ C1] arch_stack_walk+0x168/0x2d0 [ 583.348051][ C1] stack_trace_save+0xaa/0xe0 [ 583.348149][ C1] kmsan_internal_poison_memory+0x49/0x90 [ 583.348287][ C1] kmsan_slab_alloc+0xdf/0x160 [ 583.348429][ C1] kmem_cache_alloc_node_noprof+0x6bf/0xb80 [ 583.348574][ C1] __alloc_skb+0x1e9/0x7b0 [ 583.348700][ C1] nsim_dev_trap_report_work+0x3f5/0x1230 [ 583.348823][ C1] process_scheduled_works+0xae0/0x1c40 [ 583.348970][ C1] worker_thread+0xea5/0x1520 [ 583.349104][ C1] kthread+0x3dd/0x540 [ 583.349253][ C1] ret_from_fork+0x6d/0x90 [ 583.349354][ C1] ret_from_fork_asm+0x1a/0x30 [ 583.349506][ C1] [ 583.349526][ C1] Uninit was created at: [ 583.349701][ C1] __alloc_pages_noprof+0x9d6/0xe70 [ 583.349822][ C1] allocate_slab+0x203/0x1220 [ 583.349981][ C1] ___slab_alloc+0x12ef/0x35e0 [ 583.350119][ C1] __kmalloc_node_track_caller_noprof+0x7f4/0xf90 [ 583.350277][ C1] kmalloc_reserve+0x23e/0x4a0 [ 583.350405][ C1] __alloc_skb+0x363/0x7b0 [ 583.350524][ C1] __netdev_alloc_skb+0x11a/0x710 [ 583.350654][ C1] ath6kl_usb_post_recv_transfers+0x319/0xa50 [ 583.350780][ C1] ath6kl_usb_power_on+0x7f/0x2d0 [ 583.350889][ C1] ath6kl_core_init+0x231/0x1720 [ 583.351043][ C1] ath6kl_usb_probe+0x1d73/0x1f90 [ 583.351225][ C1] usb_probe_interface+0xd6f/0x1350 [ 583.351376][ C1] really_probe+0x4db/0xd90 [ 583.351497][ C1] __driver_probe_device+0x2ab/0x5d0 [ 583.351601][ C1] driver_probe_device+0x72/0x890 [ 583.351711][ C1] __device_attach_driver+0x568/0x9e0 [ 583.351829][ C1] bus_for_each_drv+0x403/0x620 [ 583.351983][ C1] __device_attach+0x3c1/0x650 [ 583.352077][ C1] device_initial_probe+0x32/0x40 [ 583.352176][ C1] bus_probe_device+0x3dc/0x5c0 [ 583.352316][ C1] device_add+0x13aa/0x1ba0 [ 583.352469][ C1] usb_set_configuration+0x31c9/0x38d0 [ 583.352613][ C1] usb_generic_driver_probe+0x109/0x2a0 [ 583.352747][ C1] usb_probe_device+0x3a7/0x690 [ 583.352888][ C1] really_probe+0x4db/0xd90 [ 583.352988][ C1] __driver_probe_device+0x2ab/0x5d0 [ 583.353098][ C1] driver_probe_device+0x72/0x890 [ 583.353205][ C1] __device_attach_driver+0x568/0x9e0 [ 583.353321][ C1] bus_for_each_drv+0x403/0x620 [ 583.353455][ C1] __device_attach+0x3c1/0x650 [ 583.353549][ C1] device_initial_probe+0x32/0x40 [ 583.353647][ C1] bus_probe_device+0x3dc/0x5c0 [ 583.353786][ C1] device_add+0x13aa/0x1ba0 [ 583.353942][ C1] usb_new_device+0x15f4/0x2470 [ 583.354058][ C1] hub_event+0x4ff8/0x72d0 [ 583.354188][ C1] process_scheduled_works+0xae0/0x1c40 [ 583.354325][ C1] worker_thread+0xea5/0x1520 [ 583.354462][ C1] kthread+0x3dd/0x540 [ 583.354612][ C1] ret_from_fork+0x6d/0x90 [ 583.354724][ C1] ret_from_fork_asm+0x1a/0x30 [ 583.354865][ C1] [ 583.354905][ C1] CPU: 1 UID: 0 PID: 9293 Comm: kworker/1:16 Not tainted 6.10.0-syzkaller-11840-g933069701c1b #0 [ 583.355039][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 583.355123][ C1] Workqueue: events nsim_dev_trap_report_work [ 583.355249][ C1] ===================================================== [ 583.355289][ C1] Disabling lock debugging due to kernel taint [ 583.355330][ C1] Kernel panic - not syncing: kmsan.panic set ... [ 583.355396][ C1] CPU: 1 UID: 0 PID: 9293 Comm: kworker/1:16 Tainted: G B 6.10.0-syzkaller-11840-g933069701c1b #0 [ 583.355545][ C1] Tainted: [B]=BAD_PAGE [ 583.355579][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 583.355676][ C1] Workqueue: events nsim_dev_trap_report_work [ 583.355821][ C1] Call Trace: [ 583.355860][ C1] [ 583.355919][ C1] dump_stack_lvl+0x216/0x2d0 [ 583.356061][ C1] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 583.356239][ C1] dump_stack+0x1e/0x30 [ 583.356364][ C1] panic+0x4e2/0xcd0 [ 583.356508][ C1] ? kmsan_get_metadata+0xf1/0x1c0 [ 583.356694][ C1] kmsan_report+0x2c7/0x2d0 [ 583.356843][ C1] ? __rb_insert_augmented+0x9e/0x10e0 [ 583.356978][ C1] ? kmsan_report+0x290/0x2d0 [ 583.357134][ C1] ? kmsan_get_metadata+0x13e/0x1c0 [ 583.357297][ C1] ? __msan_warning+0x95/0x120 [ 583.357435][ C1] ? skb_release_data+0x3dc/0x1140 [ 583.357581][ C1] ? __kfree_skb+0x6b/0x250 [ 583.357716][ C1] ? consume_skb+0xa8/0x2d0 [ 583.357858][ C1] ? ath6kl_usb_cleanup_recv_urb+0x47/0x450 [ 583.357982][ C1] ? ath6kl_usb_recv_complete+0xd4/0x420 [ 583.358107][ C1] ? __usb_hcd_giveback_urb+0x572/0x840 [ 583.358277][ C1] ? usb_hcd_giveback_urb+0x157/0x720 [ 583.358431][ C1] ? dummy_timer+0xd3f/0x6aa0 [ 583.358601][ C1] ? __hrtimer_run_queues+0x564/0xe40 [ 583.358748][ C1] ? hrtimer_interrupt+0x3ab/0x1490 [ 583.358882][ C1] ? __sysvec_apic_timer_interrupt+0xa6/0x3a0 [ 583.359024][ C1] ? sysvec_apic_timer_interrupt+0x40/0x90 [ 583.359136][ C1] ? asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 583.359297][ C1] ? kmsan_get_metadata+0x60/0x1c0 [ 583.359432][ C1] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 583.359579][ C1] ? __msan_metadata_ptr_for_load_4+0x24/0x40 [ 583.359718][ C1] ? fq_pie_timer+0x195/0x440 [ 583.359843][ C1] ? call_timer_fn+0x49/0x580 [ 583.359957][ C1] ? __run_timer_base+0x84e/0xe90 [ 583.360064][ C1] ? run_timer_softirq+0x3a/0x70 [ 583.360177][ C1] ? handle_softirqs+0x1ce/0x800 [ 583.360312][ C1] ? __irq_exit_rcu+0x68/0x120 [ 583.360440][ C1] ? irq_exit_rcu+0x12/0x20 [ 583.360566][ C1] ? sysvec_apic_timer_interrupt+0x83/0x90 [ 583.360678][ C1] ? asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 583.360841][ C1] ? unwind_get_return_address+0x3d/0x140 [ 583.360953][ C1] ? arch_stack_walk+0x168/0x2d0 [ 583.361071][ C1] ? stack_trace_save+0xaa/0xe0 [ 583.361164][ C1] ? kmsan_internal_poison_memory+0x49/0x90 [ 583.361292][ C1] ? kmsan_slab_alloc+0xdf/0x160 [ 583.361417][ C1] ? kmem_cache_alloc_node_noprof+0x6bf/0xb80 [ 583.361550][ C1] ? __alloc_skb+0x1e9/0x7b0 [ 583.361662][ C1] ? nsim_dev_trap_report_work+0x3f5/0x1230 [ 583.361786][ C1] ? process_scheduled_works+0xae0/0x1c40 [ 583.361913][ C1] ? worker_thread+0xea5/0x1520 [ 583.362039][ C1] ? kthread+0x3dd/0x540 [ 583.362169][ C1] ? ret_from_fork+0x6d/0x90 [ 583.362268][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 583.362399][ C1] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 583.362542][ C1] ? kmsan_get_metadata+0x13e/0x1c0 [ 583.362684][ C1] ? kmsan_get_metadata+0x13e/0x1c0 [ 583.362831][ C1] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 583.362982][ C1] ? sysvec_apic_timer_interrupt+0x40/0x90 [ 583.363098][ C1] ? kmsan_get_metadata+0x13e/0x1c0 [ 583.363239][ C1] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 583.363393][ C1] __msan_warning+0x95/0x120 [ 583.363519][ C1] skb_release_data+0x3dc/0x1140 [ 583.363651][ C1] ? kmsan_get_metadata+0x13e/0x1c0 [ 583.363802][ C1] ? kmsan_get_metadata+0x13e/0x1c0 [ 583.363954][ C1] __kfree_skb+0x6b/0x250 [ 583.364075][ C1] ? ath6kl_usb_cleanup_recv_urb+0x47/0x450 [ 583.364193][ C1] consume_skb+0xa8/0x2d0 [ 583.364315][ C1] ath6kl_usb_cleanup_recv_urb+0x47/0x450 [ 583.364431][ C1] ? kmsan_get_metadata+0x13e/0x1c0 [ 583.364573][ C1] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 583.364735][ C1] ath6kl_usb_recv_complete+0xd4/0x420 [ 583.364852][ C1] ? __pfx_ath6kl_usb_recv_complete+0x10/0x10 [ 583.364971][ C1] __usb_hcd_giveback_urb+0x572/0x840 [ 583.365128][ C1] ? kmsan_get_metadata+0x13e/0x1c0 [ 583.365280][ C1] usb_hcd_giveback_urb+0x157/0x720 [ 583.365438][ C1] dummy_timer+0xd3f/0x6aa0 [ 583.365599][ C1] ? kmsan_get_metadata+0x13e/0x1c0 [ 583.365743][ C1] ? kmsan_get_metadata+0x13e/0x1c0 [ 583.365892][ C1] ? kmsan_get_metadata+0x13e/0x1c0 [ 583.366040][ C1] ? kmsan_get_metadata+0x13e/0x1c0 [ 583.366184][ C1] ? kmsan_get_metadata+0x13e/0x1c0 [ 583.366325][ C1] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 583.366482][ C1] ? rb_erase+0x20e/0x23b0 [ 583.366580][ C1] ? kmsan_get_metadata+0x13e/0x1c0 [ 583.366743][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 583.366890][ C1] __hrtimer_run_queues+0x564/0xe40 [ 583.367054][ C1] hrtimer_interrupt+0x3ab/0x1490 [ 583.367209][ C1] ? __pfx_hrtimer_interrupt+0x10/0x10 [ 583.367347][ C1] ? __pfx_hrtimer_interrupt+0x10/0x10 [ 583.367480][ C1] __sysvec_apic_timer_interrupt+0xa6/0x3a0 [ 583.367631][ C1] sysvec_apic_timer_interrupt+0x40/0x90 [ 583.367747][ C1] asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 583.367912][ C1] RIP: 0010:kmsan_get_metadata+0x60/0x1c0 [ 583.368062][ C1] Code: 48 39 c3 0f 92 c0 20 c8 75 12 48 81 fb 00 00 00 a0 72 74 48 81 fb ff ff ff fe 77 6b f6 c3 03 74 09 45 84 f6 0f 85 40 01 00 00 <84> c0 74 1d 41 0f b6 ce 48 c1 e1 2b 48 01 d9 48 b8 00 00 00 00 00 [ 583.368164][ C1] RSP: 0018:ffff88813fd05c78 EFLAGS: 00000246 [ 583.368246][ C1] RAX: ffffd0ffffffff01 RBX: ffffc90011e26c24 RCX: ffffc90011e26c01 [ 583.368330][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffffc90011e26c24 [ 583.368399][ C1] RBP: ffff88813fd05c90 R08: ffffea000000000f R09: 0000000000000000 [ 583.368475][ C1] R10: 00051eb851eb851e R11: ffffffff8cdae590 R12: 0000000000000000 [ 583.368549][ C1] R13: ffffc90011a00000 R14: 0000000000000001 R15: ffffc90011e26c24 [ 583.368631][ C1] ? __pfx_fq_pie_timer+0x10/0x10 [ 583.368799][ C1] kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 583.368953][ C1] __msan_metadata_ptr_for_load_4+0x24/0x40 [ 583.369096][ C1] fq_pie_timer+0x195/0x440 [ 583.369234][ C1] ? __pfx_fq_pie_timer+0x10/0x10 [ 583.369366][ C1] call_timer_fn+0x49/0x580 [ 583.369485][ C1] ? __pfx_fq_pie_timer+0x10/0x10 [ 583.369614][ C1] __run_timer_base+0x84e/0xe90 [ 583.369748][ C1] ? kmsan_get_metadata+0x13e/0x1c0 [ 583.369891][ C1] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 583.370041][ C1] ? __pfx_run_timer_softirq+0x10/0x10 [ 583.370162][ C1] run_timer_softirq+0x3a/0x70 [ 583.370276][ C1] handle_softirqs+0x1ce/0x800 [ 583.370434][ C1] __irq_exit_rcu+0x68/0x120 [ 583.370572][ C1] irq_exit_rcu+0x12/0x20 [ 583.370705][ C1] sysvec_apic_timer_interrupt+0x83/0x90 [ 583.370819][ C1] [ 583.370850][ C1] [ 583.370884][ C1] asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 583.371047][ C1] RIP: 0010:unwind_get_return_address+0x3d/0x140 [ 583.371172][ C1] Code: fe e8 a7 6e f5 00 49 89 c5 e8 cf 08 60 00 45 8b 3e 4c 89 f7 e8 94 61 f5 00 8b 18 44 8b 22 41 c7 45 00 00 00 00 00 41 89 5d 08 <45> 89 a5 90 0c 00 00 31 ff 44 89 fe e8 e2 0c 60 00 85 db 74 0b f7 [ 583.371272][ C1] RSP: 0018:ffff88802258b630 EFLAGS: 00000286 [ 583.371352][ C1] RAX: ffff888021d8b668 RBX: 0000000000000000 RCX: 000000002218b668 [ 583.371424][ C1] RDX: ffff88802218b668 RSI: ffff88813fff9040 RDI: ffff88802258b668 [ 583.371506][ C1] RBP: ffff88802258b658 R08: ffffea000000000f R09: ffff888022588000 [ 583.371587][ C1] R10: ffff88802258b668 R11: ffffffff8193f8f0 R12: 0000000000000000 [ 583.371664][ C1] R13: ffff888113c0ac00 R14: ffff88802258b668 R15: 0000000000000001 [ 583.371752][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 583.371882][ C1] arch_stack_walk+0x168/0x2d0 [ 583.372013][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 583.372150][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 583.372264][ C1] stack_trace_save+0xaa/0xe0 [ 583.372367][ C1] kmsan_internal_poison_memory+0x49/0x90 [ 583.372497][ C1] ? kmsan_internal_poison_memory+0x49/0x90 [ 583.372619][ C1] ? kmsan_slab_alloc+0xdf/0x160 [ 583.372752][ C1] ? kmem_cache_alloc_node_noprof+0x6bf/0xb80 [ 583.372888][ C1] ? __alloc_skb+0x1e9/0x7b0 [ 583.373005][ C1] ? nsim_dev_trap_report_work+0x3f5/0x1230 [ 583.373128][ C1] ? process_scheduled_works+0xae0/0x1c40 [ 583.373262][ C1] ? worker_thread+0xea5/0x1520 [ 583.373390][ C1] ? kthread+0x3dd/0x540 [ 583.373527][ C1] ? ret_from_fork+0x6d/0x90 [ 583.373628][ C1] ? nsim_dev_trap_report_work+0xb97/0x1230 [ 583.373755][ C1] ? process_scheduled_works+0xae0/0x1c40 [ 583.373886][ C1] ? worker_thread+0xea5/0x1520 [ 583.374014][ C1] ? kthread+0x3dd/0x540 [ 583.374149][ C1] ? ret_from_fork+0x6d/0x90 [ 583.374252][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 583.374392][ C1] ? kmsan_get_metadata+0x13e/0x1c0 [ 583.374539][ C1] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 583.374697][ C1] ? kmem_cache_alloc_node_noprof+0x70/0xb80 [ 583.374836][ C1] ? kmsan_get_metadata+0x13e/0x1c0 [ 583.374980][ C1] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 583.375140][ C1] ? kmsan_get_metadata+0x13e/0x1c0 [ 583.375283][ C1] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 583.375438][ C1] ? kmsan_get_metadata+0x13e/0x1c0 [ 583.375581][ C1] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 583.375760][ C1] kmsan_slab_alloc+0xdf/0x160 [ 583.375887][ C1] kmem_cache_alloc_node_noprof+0x6bf/0xb80 [ 583.376015][ C1] ? __alloc_skb+0x1e9/0x7b0 [ 583.376144][ C1] __alloc_skb+0x1e9/0x7b0 [ 583.376272][ C1] nsim_dev_trap_report_work+0x3f5/0x1230 [ 583.376431][ C1] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 583.376553][ C1] process_scheduled_works+0xae0/0x1c40 [ 583.376725][ C1] worker_thread+0xea5/0x1520 [ 583.376857][ C1] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 583.377024][ C1] kthread+0x3dd/0x540 [ 583.377159][ C1] ? __pfx_worker_thread+0x10/0x10 [ 583.377295][ C1] ? __pfx_kthread+0x10/0x10 [ 583.377431][ C1] ret_from_fork+0x6d/0x90 [ 583.377529][ C1] ? __pfx_kthread+0x10/0x10 [ 583.377667][ C1] ret_from_fork_asm+0x1a/0x30 [ 583.377819][ C1] [ 583.378107][ C1] Kernel Offset: disabled