last executing test programs: 4m33.933226776s ago: executing program 4 (id=389): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000001fc0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r1, 0x101, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4080) 4m33.16776498s ago: executing program 4 (id=395): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f00000001c0)=0x2001) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @time={0x0, 0x6}, {}, {}, @raw32={[0xffffffff, 0x1]}}, {0x0, 0x0, 0xff, 0x0, @time={0x5, 0xa}, {}, {}, @note={0x4, 0x3, 0xff, 0x0, 0x1}}], 0x38) readv(r1, &(0x7f0000000000)=[{&(0x7f0000001140)=""/136, 0x88}], 0x1) 4m30.227788208s ago: executing program 4 (id=403): syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file0\x00', 0xa00a14, &(0x7f0000000080)=ANY=[], 0x1, 0x322, &(0x7f0000000580)="$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") ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000012c0)={'#! ', './file0', [{0x20, '\xda\xa0\x8b 58Z\xd1v\xbe\x8f7\xe4\xb8<\x97\x10 \x00\b\x00\x00\xc6\xab2\x169\x98L.\x11R\xa6(\xf40\xbb\xfd\xfe\xaft8#o\x84J\xc9j\xe1\xb1\x13\x1a\"\xd8\xc2\x83\x1aCjx\xcd\x92\x00\xe4\xa3\xea\x9c\xf1\aK\xd2\xf2\x93\x13\n\xdb\xf8\xb5i\x17yGm\x10d\a\x10y\xe9\xa0\x93\x88\xbe\x8a\xd1\x8a\x92\t\x00\x00\x00Je)\x84\x01\x9eA\x0e\xf2\x8d\xd9Dp\x8f\x94\x98\xfc\xa8\xdc|\xfdQ\xf5\n\xda7\xa9\x0f@\xfb1\xcfH\f\xa9\xe92x\x03\x94\x1f\x1c)\xd2L?RU\xd8\x9fz\x1b\xf1h\x84T\x1b\xce\xea\x1c=\x0eZ\xf9\xae0;\xb1\x9b\xcb\xba\xf1 F\x97\xea\xbe\xcc\x05\x11\x8c\x870\x9f\x9d*]9\x1f\xdcFe*\a\x98\"'}]}, 0xd1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) 4m29.28061535s ago: executing program 4 (id=407): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1000e, &(0x7f0000000300), 0x3, 0x445, &(0x7f0000000b00)="$eJzs28+PE1UcAPDvTLeLCLgr4g9+qKto3PhjlwVUDh7UaOIBExM96HGzuxCksIZdEyFEwRg8GWPi3Xj0X/CkF2M8mXjVuyEhhgvgqWbaGbYtbdktLUX6+SQD78282fe+nXnte/PaAEbWVPZPErE1Iv6MiIl6trnAVP2/q5fPLly7fHYhiWr13X+SWrkrl88uFEWL87bkmek0Iv0iid1t6l05feb4fKWydCrPz66e+Gh25fSZF46dmD+6dHTp5P5Dhw4emHv5pf0v9iXOrE1Xdn26vGfnWx988/bhr5rib4mjT6a6HXy6Wu1zdcO1rSGdjA2xIWxIKSKyy1Wu9f+JKMXaxZuINz8fauOAgapWq9UtnQ+fqwJ3sSSa87o8jIrigz6b/xZb6yDg1cENP4bu0mv1CVAW99V8qx8ZizQvU26Z3/bTVES8f+7f77ItBvMcAgCgyU/Z+Of5duO/NB5qKHdfvjY0GRH3R8T2iHggInZExIMRtbIPR8QjG6y/dZHkxvFPerGnwNYpG/+9kq9tNY//itFfTJby3LZa/OXkyLHK0r78NZmO8qYsP9eljp/f+OPrTscax3/ZltVfjAXzdlwc29R8zuL86vytxNzo0vmIXWPt4k+urwQkEbEzInb1WMexZ3/Y0+nYzePvog/rTNXvI56pX/9z0RJ/Iem+Pjl7T1SW9s0Wd8WNfvv9wjud6r+l+Psgu/73tr3/r8c/mTSu165svI4Lf33ZcU7T6/0/nrxXS4/n+z6ZX109NRcxnhyuN7px//61c4t8UT6Lf3pv+/6/PdZeid0Rkd3Ej0bEYxHxeN72JyLiyYjY2yX+X19/6sPe4x+sLP7FDV3/tcR4tO5pnygd/+XHpkonb4j/Wvfrf7CWms73rOf9bz3t6u1uBgAAgP+fNCK2RpLOXE+n6cxM/fvyOyLSyvLK6nNHlj8+uVj/jcBklNPiSddEw/PQuXxaX8+fj4j6VwuK4wfy58bfljbX8jMLy5XFYQcPI25Lh/6f+bs07NYBA+f3WjC69H8YXfo/jC79H0ZXm/6/eRjtAG6/dp//nw2hHcDt19L/LfvBCDH/h9Gl/8Po0v9hJK1sjpv/SL5rovhLPZ5+1yaifEc0Y2CJSO+IZkgMKDHc9yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIB++S8AAP///fHg0g==") syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x30000, 0x0, 0x41, 0x0, 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f00000000c0)='./file0\x00', 0x80000552) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@workdir={'workdir', 0x3d, './file0'}}], [], 0x2c}) 4m27.590349414s ago: executing program 4 (id=412): r0 = io_uring_setup(0x7bda, &(0x7f0000000080)={0x0, 0xfffffffd, 0x0, 0x80000000}) io_uring_enter(r0, 0x6fa7, 0x3e85, 0x0, 0x0, 0x0) close(r0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) read(r1, &(0x7f0000000040)=""/148, 0xffffff96) 4m27.10347804s ago: executing program 4 (id=415): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1020}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x0) 4m25.401484735s ago: executing program 32 (id=415): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1020}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x0) 4m23.824659575s ago: executing program 3 (id=424): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x48, 0x14, 0x509, 0x0, 0x25dfdbfd, {0x2, 0x1f, 0x0, 0xcb, r2}, [@IFA_ADDRESS={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x1c}}, @IFA_LOCAL={0x8, 0x2, @broadcast}, @IFA_RT_PRIORITY={0x8, 0x9, 0x6}, @IFA_RT_PRIORITY={0x8, 0x9, 0x10000009}, @IFA_ADDRESS={0x8, 0x1, @loopback}, @IFA_RT_PRIORITY={0x8, 0x9, 0x103}]}, 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x70}}, 0x0) 4m22.672917828s ago: executing program 3 (id=427): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCGSID(r2, 0x4008af21, &(0x7f000000c540)) 4m21.993026349s ago: executing program 3 (id=430): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x2, 0x80051, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x105042, 0x174) read(r1, &(0x7f0000000000), 0x2000) 4m20.885902602s ago: executing program 3 (id=432): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x2101c84, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000008080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x167) 4m20.125609594s ago: executing program 3 (id=437): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000200)={[{@quota}, {@oldalloc}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@block_validity}, {@jqfmt_vfsv1}]}, 0x3, 0x434, &(0x7f0000000940)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f0000000140)='2', 0x1, 0x8000c61) fallocate(r1, 0x3, 0x5000000, 0x8000c62) 4m19.343268667s ago: executing program 3 (id=439): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xd, 0x0, &(0x7f0000000100)="b9ff03076844268cb89e14f005", 0x0, 0x8, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x9}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000000c0)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a35f2", 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x7, 0x0, 0x0, 0x0, {[@generic={0x2, 0x2}]}}}}}}}}, 0x0) 4m18.149781918s ago: executing program 33 (id=439): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xd, 0x0, &(0x7f0000000100)="b9ff03076844268cb89e14f005", 0x0, 0x8, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x9}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000000c0)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a35f2", 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x7, 0x0, 0x0, 0x0, {[@generic={0x2, 0x2}]}}}}}}}}, 0x0) 2m3.160005685s ago: executing program 0 (id=400): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r1, @ANYBLOB="800202000a00020057"], 0x48}}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0xc, &(0x7f00000001c0), 0x1}, 0x0) 1m45.228008455s ago: executing program 6 (id=931): r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x490420, 0x2}}, 0x50) syz_fuse_handle_req(r1, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x6, {0x2e, 0x0, 0x0, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x3, 0x0, 0x5b3, 0x1000000, 0x8000, 0x0, 0x0, r4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) write$FUSE_STATX(r5, &(0x7f0000000800)={0x130, 0x0, r2, {0x6, 0xc2, 0x0, '\x00', {0x30, 0x8, 0x2, 0x3, r3, r4, 0x6000, '\x00', 0x1, 0x3, 0x9e, 0x25cf, {0x8000, 0x80000000}, {0x10000, 0xfffffff7}, {0xb, 0x81}, {0x89, 0x8}, 0x1, 0x8, 0x4, 0x6}}}, 0x130) io_setup(0x2, &(0x7f0000000200)=0x0) io_submit(r6, 0x140b, &(0x7f0000000700)=[&(0x7f0000000440)={0x18, 0x7000000, 0x4, 0x1, 0x0, r5, &(0x7f0000000180)='\x00', 0x1001}]) dup3(r0, r1, 0x0) 1m41.933072114s ago: executing program 0 (id=400): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r1, @ANYBLOB="800202000a00020057"], 0x48}}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0xc, &(0x7f00000001c0), 0x1}, 0x0) 1m41.513738283s ago: executing program 6 (id=936): pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair(0x1, 0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, 0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000100)={0x0, 0x0, 0xe, 0xffffffffffffffff, 0x8}) 1m37.550599106s ago: executing program 6 (id=938): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x4}, 0x18) openat(0xffffffffffffff9c, 0x0, 0x84042, 0x1fb) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$unix(0x1, 0x2, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ppoll(&(0x7f0000000140)=[{r3, 0x1114}, {r2, 0x1620}], 0x2, 0x0, 0x0, 0x0) close(r1) 1m36.169047861s ago: executing program 6 (id=941): openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x8, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000280)='./file0\x00', &(0x7f0000000480)='./file0/../file0\x00', 0x0, 0x21adc51, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r1, &(0x7f0000000340)={0x2020}, 0xcb0a) 1m35.147834037s ago: executing program 6 (id=942): socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r2, 0x4004743a, &(0x7f0000000300)) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000080)) sendmmsg(r0, &(0x7f0000009240)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000340)='C', 0x1}], 0x1}}], 0x1, 0x24005805) 1m33.98023241s ago: executing program 6 (id=947): socket$nl_generic(0x10, 0x3, 0x10) socket$can_bcm(0x1d, 0x2, 0x2) socket$alg(0x26, 0x5, 0x0) socket(0x10, 0x3, 0x0) socket$rds(0x15, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$xdp(0x2c, 0x3, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x403, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, 0x0, 0xff7f}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0x0) 1m33.173472317s ago: executing program 34 (id=947): socket$nl_generic(0x10, 0x3, 0x10) socket$can_bcm(0x1d, 0x2, 0x2) socket$alg(0x26, 0x5, 0x0) socket(0x10, 0x3, 0x0) socket$rds(0x15, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$xdp(0x2c, 0x3, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x403, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, 0x0, 0xff7f}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0x0) 1m13.231199364s ago: executing program 0 (id=400): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r1, @ANYBLOB="800202000a00020057"], 0x48}}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0xc, &(0x7f00000001c0), 0x1}, 0x0) 51.028701418s ago: executing program 0 (id=400): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r1, @ANYBLOB="800202000a00020057"], 0x48}}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0xc, &(0x7f00000001c0), 0x1}, 0x0) 30.156889252s ago: executing program 0 (id=400): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r1, @ANYBLOB="800202000a00020057"], 0x48}}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0xc, &(0x7f00000001c0), 0x1}, 0x0) 10.645658245s ago: executing program 0 (id=400): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r1, @ANYBLOB="800202000a00020057"], 0x48}}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0xc, &(0x7f00000001c0), 0x1}, 0x0) 3.651297683s ago: executing program 7 (id=1209): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000080)={'nr0\x00', {0x2, 0x0, @loopback}}) 3.348102807s ago: executing program 2 (id=1210): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0x560a, &(0x7f0000000380)={0x0, 0x0, 0x9001}) 3.104618362s ago: executing program 7 (id=1212): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb00000800030003000000040004"], 0x68}}, 0x0) 3.000776989s ago: executing program 2 (id=1213): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./mnt\x00', 0x2200054, &(0x7f00000000c0)={[{@minixdf}, {@test_dummy_encryption_v1}]}, 0x1, 0x242, &(0x7f0000000540)="$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") symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') 2.872583175s ago: executing program 7 (id=1214): r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000001980), 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000001a80)={0x9, @sliced={0x7, [0x6, 0xa, 0x2, 0x7f, 0x6, 0x1f, 0xa, 0x2, 0x4, 0x4, 0x9, 0x200, 0x9, 0xe50b, 0x8, 0x9, 0x3, 0x3, 0x7, 0x1ff, 0x3, 0x4, 0x8000, 0x3, 0x6, 0x10, 0x8, 0x3, 0xd, 0x66, 0xff, 0x40, 0xffff, 0x9, 0xce6, 0x9, 0x7, 0x1, 0x1, 0x6, 0x0, 0x4, 0x9, 0x4, 0x4, 0xffff, 0xfa82, 0x3], 0x6}}) 2.838851772s ago: executing program 1 (id=1215): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f00000001c0)={0x0, 0x30, 0x80, 0x80, 0x0, 0x0, 0x10, 0x1, {0x2, 0x5}, {0x2, 0x4}, {0xffffffff, 0x9}, {}, 0x0, 0x3f0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, 0x1, 0x0, 0x0, 0x0, 0x2, 0x2}) 2.756469285s ago: executing program 5 (id=1216): syz_open_procfs(0x0, &(0x7f0000000500)='net/rpc\x00') get_mempolicy(&(0x7f0000000000), &(0x7f0000000040), 0x800, &(0x7f0000bd5000/0x10000)=nil, 0x4) 2.487279888s ago: executing program 7 (id=1217): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140), 0x100, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000280)=@t={0x81, 0x5, 0x2, 0x4, @generic=0x10000}) 2.384211554s ago: executing program 5 (id=1218): r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000c68000/0x3000)=nil, 0x9, 0x0, 0x0, 0x6, 0x0, 0x2, 0x40}) 2.33950142s ago: executing program 1 (id=1219): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) pwritev(r0, &(0x7f0000000600)=[{&(0x7f0000000240)="01000000", 0x4}, {&(0x7f0000000200)="f697079a161cfb7702311e629acda76933ddd0c24174eb4d4d28f9", 0x1b}, {&(0x7f0000000040)="747369587e0a4e47adce", 0xfd5b}], 0x3, 0x4, 0x0) 2.091158538s ago: executing program 7 (id=1220): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000080)={0x1, 0x1, 0x8, 0x0, 0x5}, 0xc) 1.996913252s ago: executing program 2 (id=1221): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCNOTTY(r0, 0x5422) 1.91157188s ago: executing program 1 (id=1222): r0 = syz_open_procfs(0x0, &(0x7f0000000400)='net/ip_vs_stats_percpu\x00') preadv2(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)=""/185, 0xb9}], 0x1, 0x0, 0x0, 0x0) 1.575920037s ago: executing program 7 (id=1223): syz_usb_connect(0x0, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0xf3, 0x46, 0x4b, 0x40, 0x5d8, 0x8108, 0x148, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x4b, 0x0, 0x0, 0x99, 0xbe, 0xf4}}]}}]}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) 1.43651552s ago: executing program 5 (id=1224): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$netlink(r0, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000000c40)=ANY=[@ANYBLOB="1401000027000100000000000000000001"], 0x114}], 0x1}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, 0x0, 0xc000) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r0) close(0xffffffffffffffff) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r4, 0x6) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) accept(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, 0x0, 0x0) recvfrom(r5, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x3e8, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r3, {0x7}}, './file0\x00'}) syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) syz_open_dev$sndctrl(&(0x7f0000000000), 0x1ff, 0x20000) bind$inet6(r2, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x95, &(0x7f0000000ac0)={@link_local, @remote, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010700", 0x5f, 0x11, 0x0, @private1, @mcast2, {[], {0x0, 0xe22, 0x5f, 0x0, @opaque="9135fdfe1a0d44261289d2a669d59a367692d1ebf02ca494fdfd8c91906c405b41cdcec499acc7add81702adeac4cd56720fcb8cb819f3e736ee129092fe43975e895910fdcb0aeb7f88d103ee1c274f9bffef57b04973"}}}}}}, 0x0) 1.408247588s ago: executing program 2 (id=1225): r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_buf(r0, 0x1, 0x4b, 0x0, &(0x7f00000000c0)) 1.280101674s ago: executing program 1 (id=1226): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) fchown(0xffffffffffffffff, 0x0, 0x0) 991.015277ms ago: executing program 5 (id=1227): ioperm(0x6, 0x3, 0xb017) recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x12100) 888.86604ms ago: executing program 2 (id=1228): r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r0, 0x10d, 0xc8, &(0x7f0000000000), &(0x7f0000000080)=0x4) 781.116942ms ago: executing program 1 (id=1229): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000001900010000400000000000001c"], 0x24}}, 0x0) 499.457758ms ago: executing program 2 (id=1230): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x10840, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x2, 0x26f, &(0x7f0000000740)="$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") mount$bpf(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000100), 0x2000000, &(0x7f0000000c40)={[{}]}) 331.556649ms ago: executing program 5 (id=1231): r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendto$inet(r0, 0x0, 0x0, 0x62040001, 0x0, 0x0) 93.156752ms ago: executing program 1 (id=1232): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/cpuinfo\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) 0s ago: executing program 5 (id=1233): r0 = syz_open_dev$vbi(&(0x7f0000000140), 0x2, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000240)={0xecd9f25707fb850a, 0x8000, 0x9, 0xffffffffffffffff, 0x0, 0x0}) kernel console output (not intermixed with test programs): 0438][ T10] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.8/input/input13 [ 481.864401][ T8] f81534 7-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 481.883057][ T8] f81534 7-1:0.12: f81534_find_config_idx: read failed: -71 [ 481.890838][ T8] f81534 7-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 481.899343][ T8] f81534 7-1:0.12: probe with driver f81534 failed with error -71 [ 481.903258][ T44] usb 6-1: USB disconnect, device number 5 [ 481.907822][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 481.920659][ C0] cm109 6-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 481.971273][ T8] usb 7-1: USB disconnect, device number 4 [ 482.003643][ T44] cm109 6-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 482.538619][ T6912] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.644923][ T6912] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.872498][ T6912] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.948255][ T6912] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.098105][ T6912] bridge_slave_1: left allmulticast mode [ 483.104257][ T6912] bridge_slave_1: left promiscuous mode [ 483.110537][ T6912] bridge0: port 2(bridge_slave_1) entered disabled state [ 483.123589][ T6912] bridge_slave_0: left allmulticast mode [ 483.129454][ T6912] bridge_slave_0: left promiscuous mode [ 483.136157][ T6912] bridge0: port 1(bridge_slave_0) entered disabled state [ 483.473451][ T6912] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 483.495656][ T6912] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 483.513551][ T6912] bond0 (unregistering): Released all slaves [ 483.856245][ T6912] hsr_slave_0: left promiscuous mode [ 483.892475][ T6912] hsr_slave_1: left promiscuous mode [ 483.937895][ T6912] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 483.945899][ T6912] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 483.984873][ T6912] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 483.993011][ T6912] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 484.094156][ T6912] veth1_macvtap: left promiscuous mode [ 484.099944][ T6912] veth0_macvtap: left promiscuous mode [ 484.106091][ T6912] veth1_vlan: left promiscuous mode [ 484.112778][ T6912] veth0_vlan: left promiscuous mode [ 484.937967][ T5789] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 484.982239][ T5839] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 485.085116][ T5789] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 485.088565][ T6912] team0 (unregistering): Port device team_slave_1 removed [ 485.116184][ T5789] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 485.146340][ T6912] team0 (unregistering): Port device team_slave_0 removed [ 485.203571][ T5789] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 485.268818][ T5789] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 485.283866][ T5789] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 485.389710][ T5839] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 485.402224][ T5839] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 485.414993][ T5839] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 485.427182][ T5839] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 485.438205][ T5839] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 485.552169][ T44] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 485.693959][ T5839] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 485.704520][ T5839] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 485.714066][ T5839] usb 2-1: Product: syz [ 485.718482][ T5839] usb 2-1: Manufacturer: syz [ 485.723482][ T5839] usb 2-1: SerialNumber: syz [ 485.762590][ T44] usb 7-1: Using ep0 maxpacket: 16 [ 485.809776][ T5839] usb 2-1: config 0 descriptor?? [ 485.827303][ T44] usb 7-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 485.836898][ T44] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.845340][ T44] usb 7-1: Product: syz [ 485.849763][ T44] usb 7-1: Manufacturer: syz [ 485.854798][ T44] usb 7-1: SerialNumber: syz [ 485.899726][ T44] r8152-cfgselector 7-1: Unknown version 0x0000 [ 485.907731][ T44] r8152-cfgselector 7-1: config 0 descriptor?? [ 486.111984][ T5839] radio-si470x 2-1:0.0: DeviceID=0x6465 ChipID=0x7669 [ 486.318939][ T5839] radio-si470x 2-1:0.0: software version 100, hardware version 101 [ 486.531204][ T5839] radio-si470x 2-1:0.0: submitting int urb failed (-90) [ 486.536767][ T10] r8152-cfgselector 7-1: USB disconnect, device number 5 [ 486.767305][ T8792] chnl_net:caif_netlink_parms(): no params data found [ 487.069287][ T8810] syzkaller0: entered promiscuous mode [ 487.075222][ T8810] syzkaller0: entered allmulticast mode [ 487.830774][ T5789] Bluetooth: hci0: command tx timeout [ 487.839157][ T8820] kvm: pic: non byte write [ 487.945062][ T8792] bridge0: port 1(bridge_slave_0) entered blocking state [ 487.956614][ T8792] bridge0: port 1(bridge_slave_0) entered disabled state [ 487.964639][ T8792] bridge_slave_0: entered allmulticast mode [ 487.973838][ T8792] bridge_slave_0: entered promiscuous mode [ 487.988555][ T5839] radio-si470x 2-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 488.016609][ T5839] usb 2-1: USB disconnect, device number 6 [ 488.131441][ T8792] bridge0: port 2(bridge_slave_1) entered blocking state [ 488.139432][ T8792] bridge0: port 2(bridge_slave_1) entered disabled state [ 488.147487][ T8792] bridge_slave_1: entered allmulticast mode [ 488.156805][ T8792] bridge_slave_1: entered promiscuous mode [ 488.356819][ T8792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 488.417938][ T8792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 488.462791][ T8827] loop2: detected capacity change from 0 to 2048 [ 488.505658][ T8827] EXT4-fs: Ignoring removed mblk_io_submit option [ 488.573617][ T8792] team0: Port device team_slave_0 added [ 488.618405][ T8792] team0: Port device team_slave_1 added [ 488.636562][ T8827] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 488.726324][ T8792] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 488.733789][ T8792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 488.762815][ T8792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 488.820724][ T8792] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 488.828160][ T8792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 488.865426][ T8792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 488.930009][ T8827] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.896: bg 0: block 234: padding at end of block bitmap is not set [ 488.950889][ T8827] EXT4-fs (loop2): Remounting filesystem read-only [ 489.094007][ T8832] loop5: detected capacity change from 0 to 512 [ 489.150536][ T8792] hsr_slave_0: entered promiscuous mode [ 489.185094][ T8832] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 489.198997][ T8832] ext4 filesystem being mounted at /111/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 489.215315][ T8792] hsr_slave_1: entered promiscuous mode [ 489.233738][ T8842] loop6: detected capacity change from 0 to 164 [ 489.240503][ T8792] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 489.248456][ T8792] Cannot create hsr debugfs directory [ 489.298227][ T8842] rock: directory entry would overflow storage [ 489.304837][ T8842] rock: sig=0x4543, size=28, remaining=18 [ 489.453719][ T5778] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 489.675374][ T7157] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 489.890066][ T5789] Bluetooth: hci0: command tx timeout [ 490.542825][ T8849] kvm: pic: non byte read [ 491.712154][ T8792] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 491.808951][ T8792] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 491.952189][ T5789] Bluetooth: hci0: command tx timeout [ 491.968276][ T8792] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 492.099461][ T8792] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 493.230696][ T6912] Bluetooth: hci5: Frame reassembly failed (-84) [ 493.256664][ T8792] 8021q: adding VLAN 0 to HW filter on device bond0 [ 493.310407][ T8792] 8021q: adding VLAN 0 to HW filter on device team0 [ 493.376712][ T6888] bridge0: port 1(bridge_slave_0) entered blocking state [ 493.384495][ T6888] bridge0: port 1(bridge_slave_0) entered forwarding state [ 493.525213][ T6888] bridge0: port 2(bridge_slave_1) entered blocking state [ 493.533007][ T6888] bridge0: port 2(bridge_slave_1) entered forwarding state [ 494.035992][ T5076] Bluetooth: hci0: command tx timeout [ 494.324015][ T5839] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 494.388026][ T8792] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 494.530883][ T5839] usb 2-1: Using ep0 maxpacket: 32 [ 494.551988][ T5839] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 494.561480][ T5839] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.581396][ T8792] veth0_vlan: entered promiscuous mode [ 494.610231][ T5839] usb 2-1: config 0 descriptor?? [ 494.626805][ T5839] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 494.662442][ T8792] veth1_vlan: entered promiscuous mode [ 494.773946][ T8792] veth0_macvtap: entered promiscuous mode [ 494.856034][ T8792] veth1_macvtap: entered promiscuous mode [ 494.919020][ T8792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 494.933547][ T8792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 494.944750][ T8792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 494.956593][ T8792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 494.966893][ T8792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 494.977637][ T8792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 494.987812][ T8792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 494.998641][ T8792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 495.013386][ T8792] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 495.059800][ T8792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 495.072315][ T8792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 495.084560][ T8792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 495.095374][ T8792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 495.105609][ T8792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 495.116831][ T8792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 495.129493][ T8792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 495.140860][ T8792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 495.155841][ T8792] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 495.205326][ T8792] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.214760][ T8792] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.226594][ T8792] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.236689][ T8792] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.262061][ T5076] Bluetooth: hci5: command 0x1003 tx timeout [ 495.268667][ T5789] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 495.489803][ T8902] netlink: 44 bytes leftover after parsing attributes in process `syz.6.919'. [ 496.852153][ T5839] gspca_vc032x: I2c Bus Busy Wait 00 [ 497.172715][ T8925] loop6: detected capacity change from 0 to 512 [ 497.188739][ T8925] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 497.306237][ T8925] EXT4-fs (loop6): 1 truncate cleaned up [ 497.315342][ T8925] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 497.975154][ T8927] loop2: detected capacity change from 0 to 32768 [ 497.989593][ T5839] gspca_vc032x: reg_w err -71 [ 497.994694][ T5839] gspca_vc032x: I2c Bus Busy Wait 00 [ 498.000185][ T5839] gspca_vc032x: I2c Bus Busy Wait 00 [ 498.005817][ T5839] gspca_vc032x: I2c Bus Busy Wait 00 [ 498.011315][ T5839] gspca_vc032x: I2c Bus Busy Wait 00 [ 498.018386][ T5839] gspca_vc032x: I2c Bus Busy Wait 00 [ 498.024022][ T5839] gspca_vc032x: I2c Bus Busy Wait 00 [ 498.029514][ T5839] gspca_vc032x: I2c Bus Busy Wait 00 [ 498.035199][ T5839] gspca_vc032x: I2c Bus Busy Wait 00 [ 498.040687][ T5839] gspca_vc032x: I2c Bus Busy Wait 00 [ 498.046419][ T5839] gspca_vc032x: I2c Bus Busy Wait 00 [ 498.052053][ T5839] gspca_vc032x: I2c Bus Busy Wait 00 [ 498.057529][ T5839] gspca_vc032x: I2c Bus Busy Wait 00 [ 498.063146][ T5839] gspca_vc032x: I2c Bus Busy Wait 00 [ 498.068627][ T5839] gspca_vc032x: I2c Bus Busy Wait 00 [ 498.074272][ T5839] gspca_vc032x: I2c Bus Busy Wait 00 [ 498.079754][ T5839] gspca_vc032x: I2c Bus Busy Wait 00 [ 498.085372][ T5839] gspca_vc032x: I2c Bus Busy Wait 00 [ 498.092605][ T5839] gspca_vc032x: Unknown sensor... [ 498.098081][ T5839] vc032x 2-1:0.0: probe with driver vc032x failed with error -22 [ 498.258502][ T5839] usb 2-1: USB disconnect, device number 7 [ 498.427446][ T8927] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 498.695472][ T7225] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 498.932620][ T8927] XFS (loop2): Ending clean mount [ 498.959062][ T8927] XFS (loop2): Quotacheck needed: Please wait. [ 499.045267][ T8927] XFS (loop2): Quotacheck: Done. [ 499.126321][ T8946] loop6: detected capacity change from 0 to 256 [ 499.152922][ T8946] exfat: Bad value for 'gid' [ 499.157967][ T8946] exfat: Bad value for 'gid' [ 499.250579][ T5789] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 499.260626][ T5789] CPU: 1 UID: 0 PID: 5789 Comm: kworker/u9:6 Not tainted 6.13.0-rc7-syzkaller-00039-gc3812b15000c #0 [ 499.271817][ T5789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 499.282241][ T5789] Workqueue: hci3 hci_rx_work [ 499.287333][ T5789] Call Trace: [ 499.290851][ T5789] [ 499.294006][ T5789] dump_stack_lvl+0x216/0x2d0 [ 499.299044][ T5789] dump_stack+0x1e/0x24 [ 499.303521][ T5789] sysfs_create_dir_ns+0x45f/0x4c0 [ 499.309003][ T5789] kobject_add_internal+0xfe7/0x1900 [ 499.314653][ T5789] kobject_add+0x28c/0x3c0 [ 499.319417][ T5789] device_add+0xa90/0x1ba0 [ 499.324159][ T5789] hci_conn_add_sysfs+0x161/0x2c0 [ 499.329544][ T5789] le_conn_complete_evt+0x1adf/0x1fa0 [ 499.335265][ T5789] hci_le_conn_complete_evt+0x15a/0x210 [ 499.341137][ T5789] hci_le_meta_evt+0x600/0x850 [ 499.346215][ T5789] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 499.352610][ T5789] hci_event_packet+0x11df/0x1c20 [ 499.357981][ T5789] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 499.363620][ T5789] hci_rx_work+0x699/0x1260 [ 499.368429][ T5789] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 499.370714][ T8946] loop6: detected capacity change from 0 to 1024 [ 499.374461][ T5789] ? __pfx_hci_rx_work+0x10/0x10 [ 499.374620][ T5789] ? __pfx_hci_rx_work+0x10/0x10 [ 499.391247][ T5789] process_scheduled_works+0xae0/0x1c40 [ 499.397200][ T5789] worker_thread+0xea7/0x14f0 [ 499.402245][ T5789] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 499.408393][ T5789] kthread+0x3e2/0x540 [ 499.413081][ T5789] ? __pfx_worker_thread+0x10/0x10 [ 499.418566][ T5789] ? __pfx_kthread+0x10/0x10 [ 499.423460][ T5789] ret_from_fork+0x6d/0x90 [ 499.428201][ T5789] ? __pfx_kthread+0x10/0x10 [ 499.433117][ T5789] ret_from_fork_asm+0x1a/0x30 [ 499.438271][ T5789] [ 499.444379][ T5789] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 499.458937][ T5789] Bluetooth: hci3: failed to register connection device [ 499.574891][ T8946] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 499.614545][ T5778] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 499.968010][ T6912] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 499.976445][ T6912] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 500.127810][ T7225] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 500.187690][ T6900] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 500.196579][ T6900] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 503.337588][ T6900] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.622767][ T6900] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.916931][ T6900] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.222661][ T6900] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.059646][ T6900] bridge_slave_1: left allmulticast mode [ 505.066757][ T6900] bridge_slave_1: left promiscuous mode [ 505.073612][ T6900] bridge0: port 2(bridge_slave_1) entered disabled state [ 505.167862][ T6900] bridge_slave_0: left allmulticast mode [ 505.174088][ T6900] bridge_slave_0: left promiscuous mode [ 505.180697][ T6900] bridge0: port 1(bridge_slave_0) entered disabled state [ 506.214219][ T6900] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 506.278397][ T6900] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 506.327988][ T6900] bond0 (unregistering): Released all slaves [ 506.910862][ T6900] hsr_slave_0: left promiscuous mode [ 506.921368][ T6900] hsr_slave_1: left promiscuous mode [ 506.956043][ T6900] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 506.964055][ T6900] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 506.985095][ T6900] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 506.993663][ T6900] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 507.027688][ T6900] veth1_macvtap: left promiscuous mode [ 507.034082][ T6900] veth0_macvtap: left promiscuous mode [ 507.040003][ T6900] veth1_vlan: left promiscuous mode [ 507.045923][ T6900] veth0_vlan: left promiscuous mode [ 508.493468][ T6900] team0 (unregistering): Port device team_slave_1 removed [ 508.634051][ T6900] team0 (unregistering): Port device team_slave_0 removed [ 509.490953][ T5076] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 509.501963][ T5076] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 509.514087][ T5076] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 509.549105][ T5076] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 509.563267][ T5076] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 509.572851][ T5076] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 510.840561][ T9009] binder_alloc: 9008: binder_alloc_buf size 69288 failed, no address space [ 510.850675][ T9009] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 8192 (num: 1 largest: 8192) [ 511.129927][ T9003] chnl_net:caif_netlink_parms(): no params data found [ 511.440861][ T3625] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.632031][ T5076] Bluetooth: hci0: command tx timeout [ 511.638243][ T3625] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.652361][ T5839] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 511.822236][ T5839] usb 6-1: Using ep0 maxpacket: 32 [ 511.850508][ T3625] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.879945][ T5839] usb 6-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 511.889753][ T5839] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.929089][ T5839] usb 6-1: config 0 descriptor?? [ 511.954783][ T5839] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 512.032216][ T3625] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.561424][ T9003] bridge0: port 1(bridge_slave_0) entered blocking state [ 512.569369][ T9003] bridge0: port 1(bridge_slave_0) entered disabled state [ 512.577369][ T9003] bridge_slave_0: entered allmulticast mode [ 512.586490][ T9003] bridge_slave_0: entered promiscuous mode [ 512.600910][ T9003] bridge0: port 2(bridge_slave_1) entered blocking state [ 512.608810][ T9003] bridge0: port 2(bridge_slave_1) entered disabled state [ 512.616742][ T9003] bridge_slave_1: entered allmulticast mode [ 512.625841][ T9003] bridge_slave_1: entered promiscuous mode [ 512.757819][ T9003] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 512.828051][ T3625] bridge_slave_1: left allmulticast mode [ 512.834422][ T3625] bridge_slave_1: left promiscuous mode [ 512.842443][ T3625] bridge0: port 2(bridge_slave_1) entered disabled state [ 512.905071][ T3625] bridge_slave_0: left allmulticast mode [ 512.911159][ T3625] bridge_slave_0: left promiscuous mode [ 512.919062][ T3625] bridge0: port 1(bridge_slave_0) entered disabled state [ 513.324868][ T5789] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 513.336840][ T5789] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 513.349041][ T5789] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 513.366200][ T5789] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 513.383812][ T3625] bond1: left allmulticast mode [ 513.389323][ T3625] ip6gretap1: left allmulticast mode [ 513.395949][ T3625] bond1: left promiscuous mode [ 513.401118][ T3625] ip6gretap1: left promiscuous mode [ 513.440773][ T5789] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 513.453906][ T3625] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 513.464146][ T5789] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 513.676619][ T9039] binder: 9038:9039 ioctl c0306201 20000140 returned -14 [ 513.712087][ T5076] Bluetooth: hci0: command tx timeout [ 513.776668][ T3625] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 513.810156][ T3625] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 513.840531][ T3625] bond0 (unregistering): Released all slaves [ 513.921629][ T3625] bond1 (unregistering): Released all slaves [ 513.973362][ T9003] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 514.352368][ T9003] team0: Port device team_slave_0 added [ 514.424234][ T9003] team0: Port device team_slave_1 added [ 514.631546][ T9003] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 514.639839][ T9003] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 514.666314][ T9003] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 514.696590][ T9003] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 514.704071][ T9003] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 514.730756][ T9003] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 514.827767][ T5839] gspca_vc032x: reg_r err -71 [ 514.833005][ T5839] gspca_vc032x: I2c Bus Busy Wait 00 [ 514.838514][ T5839] gspca_vc032x: I2c Bus Busy Wait 00 [ 514.844225][ T5839] gspca_vc032x: I2c Bus Busy Wait 00 [ 514.849742][ T5839] gspca_vc032x: I2c Bus Busy Wait 00 [ 514.855357][ T5839] gspca_vc032x: I2c Bus Busy Wait 00 [ 514.860842][ T5839] gspca_vc032x: I2c Bus Busy Wait 00 [ 514.866481][ T5839] gspca_vc032x: I2c Bus Busy Wait 00 [ 514.872077][ T5839] gspca_vc032x: I2c Bus Busy Wait 00 [ 514.877553][ T5839] gspca_vc032x: I2c Bus Busy Wait 00 [ 514.883180][ T5839] gspca_vc032x: I2c Bus Busy Wait 00 [ 514.889381][ T5839] gspca_vc032x: I2c Bus Busy Wait 00 [ 514.894989][ T5839] gspca_vc032x: I2c Bus Busy Wait 00 [ 514.900474][ T5839] gspca_vc032x: I2c Bus Busy Wait 00 [ 514.906375][ T5839] gspca_vc032x: I2c Bus Busy Wait 00 [ 514.912001][ T5839] gspca_vc032x: I2c Bus Busy Wait 00 [ 514.917500][ T5839] gspca_vc032x: I2c Bus Busy Wait 00 [ 514.923167][ T5839] gspca_vc032x: I2c Bus Busy Wait 00 [ 514.928643][ T5839] gspca_vc032x: Unknown sensor... [ 514.934313][ T5839] vc032x 6-1:0.0: probe with driver vc032x failed with error -22 [ 514.968449][ T5839] usb 6-1: USB disconnect, device number 6 [ 515.091564][ T3625] hsr_slave_0: left promiscuous mode [ 515.129659][ T3625] hsr_slave_1: left promiscuous mode [ 515.172543][ T3625] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 515.180341][ T3625] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 515.208482][ T3625] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 515.216752][ T3625] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 515.249375][ T3625] veth1_macvtap: left promiscuous mode [ 515.255877][ T3625] veth0_macvtap: left promiscuous mode [ 515.262219][ T3625] veth1_vlan: left promiscuous mode [ 515.267812][ T3625] veth0_vlan: left promiscuous mode [ 515.616084][ T9052] loop2: detected capacity change from 0 to 32768 [ 515.649899][ T5076] Bluetooth: hci3: command tx timeout [ 515.815412][ T5076] Bluetooth: hci0: command tx timeout [ 515.841115][ T9052] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=crc64,compression=lz4,norecovery,reconstruct_alloc [ 515.857764][ T9052] bcachefs (loop2): recovering from clean shutdown, journal seq 10 [ 515.867463][ T9052] bcachefs (loop2): Version upgrade required: [ 515.867463][ T9052] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 515.867463][ T9052] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.13: inode_has_child_snapshots [ 515.867463][ T9052] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 515.956023][ T9052] bcachefs (loop2): dropping and reconstructing all alloc info [ 516.039046][ T9052] bcachefs (loop2): insufficient writeable journal devices available: have 0, need 1 [ 516.039046][ T9052] rw journal devs: loop2 [ 516.060624][ T3625] team0 (unregistering): Port device team_slave_1 removed [ 516.091461][ T3625] team0 (unregistering): Port device team_slave_0 removed [ 516.576991][ T9068] Bluetooth: MGMT ver 1.23 [ 516.738103][ T9052] bcachefs (loop2): accounting_read... done [ 516.749598][ T9052] bcachefs (loop2): alloc_read... done [ 516.757967][ T9052] bcachefs (loop2): stripes_read... done [ 516.764290][ T9052] bcachefs (loop2): snapshots_read... done [ 516.770902][ T9052] bcachefs (loop2): check_allocations... [ 516.818522][ T9003] hsr_slave_0: entered promiscuous mode [ 516.847480][ T9003] hsr_slave_1: entered promiscuous mode [ 516.885043][ T9003] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 516.893053][ T9003] Cannot create hsr debugfs directory [ 516.987719][ T9052] done [ 517.017712][ T9052] bcachefs (loop2): going read-write [ 517.088855][ T9052] bcachefs (loop2): done starting filesystem [ 517.140303][ T9072] Driver unsupported XDP return value 0 on prog (id 134) dev N/A, expect packet loss! [ 517.162735][ T9070] loop5: detected capacity change from 0 to 256 [ 517.714938][ T5076] Bluetooth: hci3: command tx timeout [ 517.762413][ T5778] bcachefs (loop2): shutting down [ 517.767690][ T5778] bcachefs (loop2): going read-only [ 517.774188][ T5778] bcachefs (loop2): finished waiting for writes to stop [ 517.846804][ T5778] bcachefs (loop2): flushing journal and stopping allocators, journal seq 10 [ 517.879254][ T5076] Bluetooth: hci0: command tx timeout [ 517.889741][ T5778] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 10 [ 517.913342][ T5778] bcachefs (loop2): unshutdown complete, journal seq 10 [ 517.921104][ T5778] bcachefs (loop2): done going read-only, filesystem not clean [ 517.971339][ T5778] bcachefs (loop2): shutdown complete [ 518.186654][ T9034] chnl_net:caif_netlink_parms(): no params data found [ 518.455499][ T9003] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 518.516151][ T9003] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 518.581469][ T9003] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 518.647965][ T9003] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 518.946463][ T9090] loop5: detected capacity change from 0 to 256 [ 519.298539][ T9092] xt_hashlimit: size too large, truncated to 1048576 [ 519.347925][ T9003] 8021q: adding VLAN 0 to HW filter on device bond0 [ 519.396226][ T9003] 8021q: adding VLAN 0 to HW filter on device team0 [ 519.442902][ T9093] : renamed from bond0 (while UP) [ 519.725446][ T9090] exFAT-fs (loop5): Invalid boot checksum (boot checksum : 0x1119abd0, checksum : 0x1119eb70) [ 519.736480][ T9090] exFAT-fs (loop5): invalid boot region [ 519.742345][ T9090] exFAT-fs (loop5): failed to recognize exfat type [ 519.874789][ T3625] bridge0: port 1(bridge_slave_0) entered blocking state [ 519.882540][ T3625] bridge0: port 1(bridge_slave_0) entered forwarding state [ 519.899530][ T3625] bridge0: port 2(bridge_slave_1) entered blocking state [ 519.907299][ T3625] bridge0: port 2(bridge_slave_1) entered forwarding state [ 520.117464][ T5076] Bluetooth: hci3: command tx timeout [ 520.260700][ T9034] bridge0: port 1(bridge_slave_0) entered blocking state [ 520.268589][ T9034] bridge0: port 1(bridge_slave_0) entered disabled state [ 520.276584][ T9034] bridge_slave_0: entered allmulticast mode [ 520.285954][ T9034] bridge_slave_0: entered promiscuous mode [ 520.300242][ T9034] bridge0: port 2(bridge_slave_1) entered blocking state [ 520.308080][ T9034] bridge0: port 2(bridge_slave_1) entered disabled state [ 520.316840][ T9034] bridge_slave_1: entered allmulticast mode [ 520.326075][ T9034] bridge_slave_1: entered promiscuous mode [ 520.853267][ T9034] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 520.874802][ T9034] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 521.009717][ T9099] kvm: emulating exchange as write [ 521.048085][ T9034] team0: Port device team_slave_0 added [ 521.064500][ T9034] team0: Port device team_slave_1 added [ 521.168322][ T9034] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 521.175665][ T9034] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 521.202038][ T9034] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 521.229487][ T9034] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 521.240576][ T9034] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 521.268761][ T9034] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 521.684157][ T9034] hsr_slave_0: entered promiscuous mode [ 521.739264][ T9034] hsr_slave_1: entered promiscuous mode [ 521.773959][ T9034] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 521.783539][ T9034] Cannot create hsr debugfs directory [ 521.796803][ T9109] netlink: 4 bytes leftover after parsing attributes in process `syz.1.969'. [ 522.192696][ T5076] Bluetooth: hci3: command tx timeout [ 522.595900][ T9003] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 522.742335][ T9034] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 522.810486][ T9034] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 522.860330][ T9034] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 522.928973][ T9034] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 523.104742][ T9116] netlink: 28 bytes leftover after parsing attributes in process `syz.2.971'. [ 523.173906][ T9003] veth0_vlan: entered promiscuous mode [ 523.250210][ T9003] veth1_vlan: entered promiscuous mode [ 523.415150][ T9003] veth0_macvtap: entered promiscuous mode [ 523.436863][ T9003] veth1_macvtap: entered promiscuous mode [ 523.532907][ T9003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 523.543700][ T9003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 523.557024][ T9003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 523.573719][ T9003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 523.584012][ T9003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 523.597161][ T9003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 523.612599][ T9003] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 523.739629][ T9003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 523.751176][ T9003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 523.761444][ T9003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 523.772384][ T9003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 523.782578][ T9003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 523.799108][ T9003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 523.814602][ T9003] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 523.880505][ T9123] block device autoloading is deprecated and will be removed. [ 524.033176][ T9003] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.042329][ T9003] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.051355][ T9003] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.060470][ T9003] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.172123][ T9034] 8021q: adding VLAN 0 to HW filter on device bond0 [ 524.292321][ T9034] 8021q: adding VLAN 0 to HW filter on device team0 [ 524.343565][ T3625] bridge0: port 1(bridge_slave_0) entered blocking state [ 524.351333][ T3625] bridge0: port 1(bridge_slave_0) entered forwarding state [ 524.479380][ T3625] bridge0: port 2(bridge_slave_1) entered blocking state [ 524.487190][ T3625] bridge0: port 2(bridge_slave_1) entered forwarding state [ 524.668797][ T9034] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 524.679749][ T9034] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 525.499309][ T9133] loop2: detected capacity change from 0 to 512 [ 525.518988][ T9133] EXT4-fs: Ignoring removed i_version option [ 525.525625][ T9133] EXT4-fs: Ignoring removed mblk_io_submit option [ 525.532768][ T9133] ext4: Unknown parameter 'seclabel' [ 526.326958][ T9034] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 526.470655][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 526.478614][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 526.537198][ T29] audit: type=1800 audit(1736895738.854:60): pid=9140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.976" name="/" dev="fuse" ino=0 res=0 errno=0 [ 527.419832][ T9156] kvm: kvm [9153]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x252f [ 528.134133][ T9166] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 528.400119][ T9034] veth0_vlan: entered promiscuous mode [ 528.483207][ T9034] veth1_vlan: entered promiscuous mode [ 528.695240][ T9034] veth0_macvtap: entered promiscuous mode [ 528.749176][ T9034] veth1_macvtap: entered promiscuous mode [ 528.939222][ T9034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 528.950472][ T9034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 528.960811][ T9034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 528.977394][ T9034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 528.988726][ T9034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 529.001104][ T9034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 529.013555][ T9034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 529.028003][ T9034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 529.045396][ T9034] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 529.107190][ T9034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 529.119049][ T9034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 529.129326][ T9034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 529.140201][ T9034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 529.150488][ T9034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 529.163299][ T9034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 529.174046][ T9034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 529.184883][ T9034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 529.199877][ T9034] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 529.259061][ T9034] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.268701][ T9034] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.277844][ T9034] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.287084][ T9034] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.197836][ T9191] loop2: detected capacity change from 0 to 512 [ 530.372671][ T9191] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.984: bg 0: block 248: padding at end of block bitmap is not set [ 530.487373][ T6917] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 530.497450][ T6917] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 530.576725][ T9191] Quota error (device loop2): write_blk: dquota write failed [ 530.584966][ T9191] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 530.597009][ T9191] EXT4-fs error (device loop2): ext4_acquire_dquot:6938: comm syz.2.984: Failed to acquire dquot type 1 [ 530.796028][ T9191] EXT4-fs (loop2): 1 truncate cleaned up [ 530.804307][ T9191] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 530.806201][ T9188] loop1: detected capacity change from 0 to 40427 [ 530.817500][ T9191] ext4 filesystem being mounted at /240/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 530.846833][ T9188] F2FS-fs (loop1): build fault injection attr: rate: 690, type: 0x1fffff [ 530.852498][ T6888] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 530.856183][ T9188] F2FS-fs (loop1): heap/no_heap options were deprecated [ 530.864650][ T6888] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 530.893846][ T9188] F2FS-fs (loop1): invalid crc value [ 530.935471][ T9188] F2FS-fs (loop1): Found nat_bits in checkpoint [ 531.324297][ T9188] F2FS-fs (loop1): Start checkpoint disabled! [ 531.381610][ T9188] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 531.661317][ T9188] F2FS-fs (loop1): inject page alloc in f2fs_grab_cache_page of f2fs_new_inode_page+0xb6/0x100 [ 531.871104][ T9188] F2FS-fs (loop1): inject no more block in inc_valid_block_count of f2fs_reserve_new_blocks+0x183/0xda0 [ 531.935357][ T5778] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 532.209892][ T1110] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.317016][ T1110] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.478262][ T6888] F2FS-fs (loop1): inject lock_op in f2fs_trylock_op of f2fs_write_single_data_page+0x16a3/0x2bb0 [ 532.492847][ T6888] kworker/u8:28: attempt to access beyond end of device [ 532.492847][ T6888] loop1: rw=1, sector=77824, nr_sectors = 2048 limit=40427 [ 532.536898][ T6888] F2FS-fs (loop1): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_submit_page_write+0xad6/0x3da0 [ 532.549154][ T6888] F2FS-fs (loop1): invalid blkaddr: 10186, type: 7, run fsck to fix. [ 532.564278][ T6888] kworker/u8:28: attempt to access beyond end of device [ 532.564278][ T6888] loop1: rw=1, sector=79872, nr_sectors = 2048 limit=40427 [ 532.603550][ T6888] kworker/u8:28: attempt to access beyond end of device [ 532.603550][ T6888] loop1: rw=1, sector=49152, nr_sectors = 1216 limit=40427 [ 532.626869][ T1110] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.719067][ T6912] kworker/u8:36: attempt to access beyond end of device [ 532.719067][ T6912] loop1: rw=2049, sector=40960, nr_sectors = 32 limit=40427 [ 532.733759][ T6912] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 532.740925][ T6912] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 532.748239][ T6912] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 532.755491][ T6912] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 533.169402][ T1110] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.665772][ T1110] bridge_slave_1: left allmulticast mode [ 533.671939][ T1110] bridge_slave_1: left promiscuous mode [ 533.678564][ T1110] bridge0: port 2(bridge_slave_1) entered disabled state [ 533.698127][ T1110] bridge_slave_0: left allmulticast mode [ 533.704127][ T1110] bridge_slave_0: left promiscuous mode [ 533.710359][ T1110] bridge0: port 1(bridge_slave_0) entered disabled state [ 534.159891][ T1110] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 534.191351][ T1110] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 534.233210][ T1110] bond0 (unregistering): Released all slaves [ 534.544283][ T9224] vlan2: entered promiscuous mode [ 534.558236][ T9224] nlmon0: entered promiscuous mode [ 534.573020][ T9224] : (slave vlan2): Enslaving as an active interface with an up link [ 534.834285][ T9227] binder_alloc: 9226: binder_alloc_buf, no vma [ 535.503639][ T9229] loop2: detected capacity change from 0 to 32768 [ 535.514065][ T1110] hsr_slave_0: left promiscuous mode [ 535.529803][ T9229] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.991 (9229) [ 535.550691][ T1110] hsr_slave_1: left promiscuous mode [ 535.560157][ T9229] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 535.571554][ T9229] BTRFS info (device loop2): using sha256 (sha256-generic) checksum algorithm [ 535.584900][ T9229] BTRFS info (device loop2): using free-space-tree [ 535.611374][ T1110] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 535.619551][ T1110] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 535.702598][ T1110] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 535.710389][ T1110] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 535.782452][ T1110] veth1_macvtap: left promiscuous mode [ 535.788353][ T1110] veth0_macvtap: left promiscuous mode [ 535.795384][ T1110] veth1_vlan: left promiscuous mode [ 535.800961][ T1110] veth0_vlan: left promiscuous mode [ 536.000282][ T5789] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 536.023192][ T5789] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 536.057392][ T5789] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 536.071006][ T5789] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 536.083542][ T29] audit: type=1804 audit(1736895748.394:61): pid=9229 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.991" name="/newroot/242/bus/file1" dev="loop2" ino=260 res=1 errno=0 [ 536.339682][ T5789] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 536.463644][ T5789] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 536.486839][ T1110] team0 (unregistering): Port device team_slave_1 removed [ 536.620344][ T1110] team0 (unregistering): Port device team_slave_0 removed [ 536.789080][ T9259] loop5: detected capacity change from 0 to 256 [ 536.941501][ T9259] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xcad18bc8, utbl_chksum : 0xe619d30d) [ 537.106425][ T5778] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 537.648512][ T6900] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 537.656846][ T6900] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 537.677645][ T6917] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 537.685916][ T6917] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 537.793269][ T9250] chnl_net:caif_netlink_parms(): no params data found [ 538.005408][ T9273] loop1: detected capacity change from 0 to 1024 [ 538.015010][ T9273] EXT4-fs: Ignoring removed orlov option [ 538.021058][ T9273] EXT4-fs: Ignoring removed nomblk_io_submit option [ 538.119238][ T9273] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 538.522858][ T29] audit: type=1804 audit(1736895750.784:62): pid=9273 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.998" name="/newroot/234/file1/file1" dev="loop1" ino=15 res=1 errno=0 [ 538.546953][ T29] audit: type=1804 audit(1736895750.814:63): pid=9272 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.998" name="/newroot/234/file1/file1" dev="loop1" ino=15 res=1 errno=0 [ 538.682584][ T5076] Bluetooth: hci0: command tx timeout [ 538.819660][ T9250] bridge0: port 1(bridge_slave_0) entered blocking state [ 538.827546][ T9250] bridge0: port 1(bridge_slave_0) entered disabled state [ 538.837449][ T9250] bridge_slave_0: entered allmulticast mode [ 538.849933][ T9250] bridge_slave_0: entered promiscuous mode [ 538.864841][ T9250] bridge0: port 2(bridge_slave_1) entered blocking state [ 538.872700][ T9250] bridge0: port 2(bridge_slave_1) entered disabled state [ 538.880562][ T9250] bridge_slave_1: entered allmulticast mode [ 538.890483][ T9250] bridge_slave_1: entered promiscuous mode [ 539.032418][ T5839] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 539.061373][ T9250] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 539.103597][ T9285] ipvlan2: entered promiscuous mode [ 539.113794][ T9285] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 539.124513][ T9285] team0: Device ipvlan2 is already an upper device of the team interface [ 539.164067][ T5779] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 539.234387][ T5839] usb 6-1: Using ep0 maxpacket: 8 [ 539.369044][ T9250] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 539.431456][ T5839] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 539.441155][ T5839] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 539.450211][ T5839] usb 6-1: Product: syz [ 539.456234][ T5839] usb 6-1: Manufacturer: syz [ 539.463312][ T5839] usb 6-1: SerialNumber: syz [ 539.513778][ T5839] usb 6-1: config 0 descriptor?? [ 539.660859][ T9250] team0: Port device team_slave_0 added [ 539.680223][ T9250] team0: Port device team_slave_1 added [ 539.848133][ T5839] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 539.893356][ T9250] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 539.900540][ T9250] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 539.927536][ T9250] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 539.959487][ T9250] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 539.967096][ T9250] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 539.996014][ T9250] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 540.332429][ T9250] hsr_slave_0: entered promiscuous mode [ 540.374210][ T9250] hsr_slave_1: entered promiscuous mode [ 540.398455][ T9250] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 540.406591][ T9250] Cannot create hsr debugfs directory [ 540.758428][ T5076] Bluetooth: hci0: command tx timeout [ 540.910179][ T9306] loop7: detected capacity change from 0 to 512 [ 540.914417][ T9308] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1006'. [ 540.926158][ T9308] tipc: Started in network mode [ 540.931223][ T9308] tipc: Node identity 1, cluster identity 4711 [ 540.937984][ T9308] tipc: Node number set to 1 [ 540.970638][ T9306] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.1007: invalid indirect mapped block 256 (level 2) [ 541.013018][ T9306] EXT4-fs (loop7): 2 truncates cleaned up [ 541.020852][ T9306] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 541.225136][ T9034] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 541.354156][ T8] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 541.474418][ T5839] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 541.480097][ T9250] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 541.499218][ T5839] usb 6-1: USB disconnect, device number 7 [ 541.519534][ T9250] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 541.535355][ T8] usb 3-1: Using ep0 maxpacket: 32 [ 541.544125][ T9250] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 541.578261][ T8] usb 3-1: unable to get BOS descriptor or descriptor too short [ 541.581189][ T9250] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 541.608185][ T8] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 541.618634][ T8] usb 3-1: can't read configurations, error -71 [ 541.652039][ T10] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 541.829379][ T10] usb 8-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 541.839237][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 541.890345][ T10] usb 8-1: config 0 descriptor?? [ 542.605862][ T9250] 8021q: adding VLAN 0 to HW filter on device bond0 [ 542.780070][ T9250] 8021q: adding VLAN 0 to HW filter on device team0 [ 542.832222][ T5076] Bluetooth: hci0: command tx timeout [ 542.848962][ T6888] bridge0: port 1(bridge_slave_0) entered blocking state [ 542.856744][ T6888] bridge0: port 1(bridge_slave_0) entered forwarding state [ 542.911761][ T6888] bridge0: port 2(bridge_slave_1) entered blocking state [ 542.919627][ T6888] bridge0: port 2(bridge_slave_1) entered forwarding state [ 543.085539][ T9325] loop2: detected capacity change from 0 to 2048 [ 543.154098][ T9325] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 543.243024][ T9325] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 543.387088][ T9325] UDF-fs: error (device loop2): udf_verify_fi: directory (ino 1376) has entry at pos 0 with unaligned length of impUse field [ 544.379290][ T10] asix 8-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 544.389886][ T10] asix 8-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 544.401968][ T10] asix 8-1:0.0: probe with driver asix failed with error -71 [ 544.582155][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 544.644185][ T10] usb 8-1: USB disconnect, device number 2 [ 544.917016][ T5076] Bluetooth: hci0: command tx timeout [ 545.284144][ T9337] loop1: detected capacity change from 0 to 256 [ 545.349238][ T9346] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input14 [ 545.350682][ T9250] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 545.583295][ T9350] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1019'. [ 545.592785][ T9350] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 545.600527][ T9350] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 545.665245][ T9350] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 545.673200][ T9350] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 545.745340][ T29] audit: type=1326 audit(1736895758.064:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9353 comm="syz.5.1020" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7feaec585d29 code=0x0 [ 545.957299][ T9250] veth0_vlan: entered promiscuous mode [ 546.052663][ T9250] veth1_vlan: entered promiscuous mode [ 546.279551][ T9250] veth0_macvtap: entered promiscuous mode [ 546.345527][ T9361] loop2: detected capacity change from 0 to 164 [ 546.349761][ T9250] veth1_macvtap: entered promiscuous mode [ 546.370178][ T9361] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 546.388909][ T9361] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 546.399504][ T9361] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 546.418104][ T9361] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 546.505890][ T9250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 546.517496][ T9250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 546.531035][ T9250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 546.542692][ T9250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 546.552907][ T9250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 546.563723][ T9250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 546.578639][ T9250] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 546.597296][ T9250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 546.609418][ T9250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 546.612139][ T9317] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 546.619561][ T9250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 546.640456][ T9250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 546.651352][ T9250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 546.662221][ T9250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 546.676847][ T9250] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 546.726301][ T29] audit: type=1326 audit(1736895759.024:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9366 comm="syz.7.1024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f906a185d29 code=0x7ffc0000 [ 546.753114][ T29] audit: type=1326 audit(1736895759.024:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9366 comm="syz.7.1024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f906a185d29 code=0x7ffc0000 [ 546.790345][ T9250] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.801046][ T9250] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.810371][ T9250] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.819714][ T9250] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.914432][ T9317] usb 2-1: config 0 has no interfaces? [ 546.922502][ T9317] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 546.932003][ T9317] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 546.968666][ T29] audit: type=1326 audit(1736895759.204:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9366 comm="syz.7.1024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f906a185d29 code=0x7ffc0000 [ 546.991889][ T29] audit: type=1326 audit(1736895759.204:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9366 comm="syz.7.1024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f906a185d29 code=0x7ffc0000 [ 547.015610][ T29] audit: type=1326 audit(1736895759.204:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9366 comm="syz.7.1024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f906a185d29 code=0x7ffc0000 [ 547.035813][ T9317] usb 2-1: config 0 descriptor?? [ 547.037955][ C1] vkms_vblank_simulate: vblank timer overrun [ 547.040997][ T29] audit: type=1326 audit(1736895759.214:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9366 comm="syz.7.1024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f906a185d29 code=0x7ffc0000 [ 547.078067][ T29] audit: type=1326 audit(1736895759.224:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9366 comm="syz.7.1024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f906a185d29 code=0x7ffc0000 [ 547.100516][ C1] vkms_vblank_simulate: vblank timer overrun [ 547.107224][ T29] audit: type=1326 audit(1736895759.224:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9366 comm="syz.7.1024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f906a185d29 code=0x7ffc0000 [ 547.129949][ T29] audit: type=1326 audit(1736895759.284:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9366 comm="syz.7.1024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=98 compat=0 ip=0x7f906a185d29 code=0x7ffc0000 [ 547.152331][ C1] vkms_vblank_simulate: vblank timer overrun [ 547.399540][ T9375] loop2: detected capacity change from 0 to 1764 [ 547.427283][ T5837] usb 2-1: USB disconnect, device number 8 [ 548.687449][ T9394] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1030'. [ 548.697831][ T9394] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1030'. [ 548.707288][ T9394] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1030'. [ 548.716634][ T9394] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1030'. [ 549.378095][ T9405] loop7: detected capacity change from 0 to 32768 [ 549.485266][ T9405] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 550.809545][ T9420] Bluetooth: MGMT ver 1.23 [ 551.072912][ T9034] ocfs2: Unmounting device (7,7) on (node local) [ 551.661504][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 551.661586][ T29] audit: type=1326 audit(1736895763.974:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9430 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f797e585d29 code=0x7ffc0000 [ 551.690268][ T29] audit: type=1326 audit(1736895763.974:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9430 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f797e585d29 code=0x7ffc0000 [ 551.713757][ T29] audit: type=1326 audit(1736895763.974:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9430 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f797e585d29 code=0x7ffc0000 [ 551.736267][ T29] audit: type=1326 audit(1736895763.974:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9430 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f797e585d29 code=0x7ffc0000 [ 551.760349][ T29] audit: type=1326 audit(1736895763.974:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9430 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f797e585d29 code=0x7ffc0000 [ 551.783356][ T29] audit: type=1326 audit(1736895763.974:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9430 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f797e585d29 code=0x7ffc0000 [ 551.806542][ T29] audit: type=1326 audit(1736895763.984:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9430 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f797e585d29 code=0x7ffc0000 [ 551.829506][ T29] audit: type=1326 audit(1736895763.984:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9430 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f797e585d29 code=0x7ffc0000 [ 551.853581][ T29] audit: type=1326 audit(1736895763.984:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9430 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f797e585d29 code=0x7ffc0000 [ 551.876189][ T29] audit: type=1326 audit(1736895763.984:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9430 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f797e585d29 code=0x7ffc0000 [ 551.932570][ T9425] netlink: 256 bytes leftover after parsing attributes in process `syz.5.1037'. [ 551.943285][ T9425] unsupported nlmsg_type 40 [ 552.102192][ T1680] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 552.277027][ T1680] usb 8-1: Using ep0 maxpacket: 8 [ 552.310823][ T1680] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 552.310992][ T1680] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 552.311127][ T1680] usb 8-1: Product: syz [ 552.311234][ T1680] usb 8-1: Manufacturer: syz [ 552.311339][ T1680] usb 8-1: SerialNumber: syz [ 552.318431][ T1680] usb 8-1: config 0 descriptor?? [ 552.561014][ T1680] usb 8-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 553.449856][ T3625] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 553.458183][ T3625] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 553.669372][ T3625] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 553.677594][ T3625] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 553.756912][ T9458] netfs: Couldn't get user pages (rc=-14) [ 554.342205][ T9467] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1048'. [ 554.352499][ T9467] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1048'. [ 554.400051][ T1110] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.527232][ T9317] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 554.551904][ T1110] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.588524][ T1680] dvb_usb_rtl28xxu 8-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 554.633857][ T9469] hsr0: entered promiscuous mode [ 554.649997][ T1680] usb 8-1: USB disconnect, device number 3 [ 554.699092][ T9317] usb 6-1: Using ep0 maxpacket: 16 [ 554.721035][ T9317] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 554.732846][ T9317] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 554.743174][ T9467] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1048'. [ 554.753332][ T9467] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1048'. [ 554.768275][ T9317] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 554.777856][ T9317] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 554.786264][ T9317] usb 6-1: Product: syz [ 554.790774][ T9317] usb 6-1: Manufacturer: syz [ 554.795824][ T9317] usb 6-1: SerialNumber: syz [ 554.826990][ T1110] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.932225][ T5837] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 555.004093][ T1110] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 555.070935][ T9317] usb 6-1: 0:2 : does not exist [ 555.102077][ T5837] usb 2-1: Using ep0 maxpacket: 8 [ 555.166608][ T9317] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 555.177754][ T5837] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 555.187283][ T5837] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 555.195670][ T5837] usb 2-1: Product: syz [ 555.200087][ T5837] usb 2-1: Manufacturer: syz [ 555.205121][ T5837] usb 2-1: SerialNumber: syz [ 555.227328][ T5837] usb 2-1: config 0 descriptor?? [ 555.368692][ T9317] usb 6-1: USB disconnect, device number 8 [ 555.466286][ T5837] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 555.574799][ T1110] bridge_slave_1: left allmulticast mode [ 555.580730][ T1110] bridge_slave_1: left promiscuous mode [ 555.587616][ T1110] bridge0: port 2(bridge_slave_1) entered disabled state [ 555.622363][ T1110] bridge_slave_0: left allmulticast mode [ 555.628479][ T1110] bridge_slave_0: left promiscuous mode [ 555.635834][ T1110] bridge0: port 1(bridge_slave_0) entered disabled state [ 556.181077][ T1110] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 556.208820][ T1110] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 556.229824][ T1110] bond0 (unregistering): Released all slaves [ 556.594599][ T1110] hsr_slave_0: left promiscuous mode [ 556.608004][ T1110] hsr_slave_1: left promiscuous mode [ 556.619729][ T1110] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 556.627819][ T1110] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 556.639255][ T1110] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 556.647298][ T1110] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 556.670121][ T1110] veth1_macvtap: left promiscuous mode [ 556.676413][ T1110] veth0_macvtap: left promiscuous mode [ 556.682480][ T1110] veth1_vlan: left promiscuous mode [ 556.688102][ T1110] veth0_vlan: left promiscuous mode [ 557.299980][ T1110] team0 (unregistering): Port device team_slave_1 removed [ 557.347304][ T1110] team0 (unregistering): Port device team_slave_0 removed [ 557.375776][ T5837] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 557.413235][ T5837] usb 2-1: USB disconnect, device number 9 [ 558.147781][ T9482] loop5: detected capacity change from 0 to 512 [ 558.224086][ T9482] EXT4-fs: Ignoring removed mblk_io_submit option [ 558.356879][ T9482] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 558.482684][ T29] kauditd_printk_skb: 39 callbacks suppressed [ 558.482767][ T29] audit: type=1800 audit(1736895770.794:136): pid=9482 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1051" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 558.632238][ T9491] loop7: detected capacity change from 0 to 8 [ 558.836239][ T9491] SQUASHFS error: xz decompression failed, data probably corrupt [ 558.844509][ T9491] SQUASHFS error: Failed to read block 0x108: -5 [ 558.851062][ T9491] SQUASHFS error: Unable to read metadata cache entry [106] [ 558.858692][ T9491] SQUASHFS error: Unable to read inode 0x11f [ 559.058705][ T9486] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 496: padding at end of block bitmap is not set [ 559.404488][ T5789] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 559.418592][ T5789] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 559.596681][ T5789] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 559.640857][ T9482] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 559.784369][ T29] audit: type=1326 audit(1736895771.964:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9494 comm="syz.1.1052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5287585d29 code=0x7ffc0000 [ 559.808559][ T29] audit: type=1326 audit(1736895771.964:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9494 comm="syz.1.1052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5287585d29 code=0x7ffc0000 [ 559.832585][ T29] audit: type=1326 audit(1736895771.984:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9494 comm="syz.1.1052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5287585d29 code=0x7ffc0000 [ 559.859152][ T29] audit: type=1326 audit(1736895771.984:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9494 comm="syz.1.1052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5287585d29 code=0x7ffc0000 [ 559.882955][ T29] audit: type=1326 audit(1736895771.994:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9494 comm="syz.1.1052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5287584690 code=0x7ffc0000 [ 559.906753][ T29] audit: type=1326 audit(1736895771.994:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9494 comm="syz.1.1052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5287585d29 code=0x7ffc0000 [ 559.930529][ T29] audit: type=1326 audit(1736895771.994:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9494 comm="syz.1.1052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5287585d29 code=0x7ffc0000 [ 559.957074][ T29] audit: type=1326 audit(1736895772.004:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9494 comm="syz.1.1052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5287585d29 code=0x7ffc0000 [ 559.980742][ T29] audit: type=1326 audit(1736895772.004:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9494 comm="syz.1.1052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5287585d29 code=0x7ffc0000 [ 560.010879][ T5789] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 560.023167][ T5789] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 560.046081][ T9482] kvm: pic: single mode not supported [ 560.046414][ T9482] kvm: pic: non byte read [ 560.104406][ T5789] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 561.124494][ T9510] loop1: detected capacity change from 0 to 1024 [ 561.210212][ T9510] hfsplus: failed to load catalog file [ 561.236367][ T7157] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 561.267743][ T9510] overlayfs: failed to get inode (-116) [ 561.287333][ T9510] overlayfs: failed to get inode (-116) [ 561.297851][ T9510] overlayfs: failed to get inode (-116) [ 561.318863][ T9510] overlayfs: failed to get inode (-116) [ 561.327075][ T9492] chnl_net:caif_netlink_parms(): no params data found [ 561.503757][ T9514] syz.7.1055[9514] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 561.504440][ T9514] syz.7.1055[9514] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 561.527426][ T9514] syz.7.1055[9514] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 561.673837][ T9515] loop5: detected capacity change from 0 to 1024 [ 561.795030][ T9514] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 561.933193][ T9515] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 562.242444][ T5789] Bluetooth: hci0: command tx timeout [ 562.385858][ T9519] loop1: detected capacity change from 0 to 32768 [ 562.406976][ T9519] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1057 (9519) [ 562.462500][ T9519] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 562.473170][ T9519] BTRFS info (device loop1): using crc32c (crc32c-x86_64) checksum algorithm [ 562.482956][ T9519] BTRFS info (device loop1): using free-space-tree [ 562.624647][ T9526] loop2: detected capacity change from 0 to 8 [ 562.746289][ T9492] bridge0: port 1(bridge_slave_0) entered blocking state [ 562.754147][ T9492] bridge0: port 1(bridge_slave_0) entered disabled state [ 562.757693][ T5789] Bluetooth: hci1: unexpected event for opcode 0xcbf9 [ 562.762154][ T9492] bridge_slave_0: entered allmulticast mode [ 562.778225][ T9492] bridge_slave_0: entered promiscuous mode [ 562.792930][ T9492] bridge0: port 2(bridge_slave_1) entered blocking state [ 562.800634][ T9492] bridge0: port 2(bridge_slave_1) entered disabled state [ 562.813477][ T9492] bridge_slave_1: entered allmulticast mode [ 562.823944][ T9492] bridge_slave_1: entered promiscuous mode [ 562.866776][ T7157] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 562.990773][ T9492] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 563.019712][ T9492] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 563.233607][ T9548] loop5: detected capacity change from 0 to 2048 [ 563.257444][ T9548] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 563.273098][ T9492] team0: Port device team_slave_0 added [ 563.288751][ T9492] team0: Port device team_slave_1 added [ 563.383565][ T9492] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 563.390884][ T9492] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 563.418028][ T9492] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 563.443971][ T9548] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 563.488848][ T9492] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 563.496212][ T9492] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 563.522693][ T9492] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 563.542531][ T5837] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 563.667134][ T5779] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 563.773773][ T9492] hsr_slave_0: entered promiscuous mode [ 563.836527][ T9492] hsr_slave_1: entered promiscuous mode [ 563.854595][ T9492] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 563.864661][ T9492] Cannot create hsr debugfs directory [ 564.292040][ T5789] Bluetooth: hci0: command tx timeout [ 564.379355][ T9553] loop2: detected capacity change from 0 to 32768 [ 564.419095][ T5837] usb 8-1: Using ep0 maxpacket: 16 [ 564.464660][ T5837] usb 8-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 564.473868][ T5837] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 564.484468][ T5837] usb 8-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 564.494013][ T5837] usb 8-1: config 1 has no interface number 1 [ 564.500371][ T5837] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 564.621115][ T9553] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=ro,metadata_checksum=none,data_checksum=none,compression=lz4,journal_flush_disabled,fsck,norecovery,nojournal_transaction_names,read_only,reconstruct_alloc,no_data_io [ 564.643572][ C0] vkms_vblank_simulate: vblank timer overrun [ 564.653075][ T9553] bcachefs (loop2): recovering from clean shutdown, journal seq 10 [ 564.663267][ T9553] bcachefs (loop2): Version upgrade required: [ 564.663267][ T9553] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 564.663267][ T9553] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.13: inode_has_child_snapshots [ 564.663267][ T9553] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 564.734715][ C0] vkms_vblank_simulate: vblank timer overrun [ 564.764676][ T5837] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 564.774285][ T5837] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 564.782713][ T5837] usb 8-1: Product: syz [ 564.787126][ T5837] usb 8-1: Manufacturer: syz [ 564.792148][ T5837] usb 8-1: SerialNumber: syz [ 564.802046][ T9553] bcachefs (loop2): dropping and reconstructing all alloc info [ 565.185110][ T9553] bcachefs (loop2): check_topology... done [ 565.191554][ T9553] bcachefs (loop2): accounting_read... done [ 565.198672][ T9553] bcachefs (loop2): alloc_read... done [ 565.204771][ T9553] bcachefs (loop2): stripes_read... done [ 565.210884][ T9553] bcachefs (loop2): snapshots_read... done [ 565.217558][ T9553] bcachefs (loop2): check_allocations... [ 565.283053][ T5837] usb 8-1: USB disconnect, device number 4 [ 565.378809][ T9553] done [ 565.400428][ T9553] bcachefs (loop2): going read-write [ 565.419053][ T9553] bcachefs (loop2): going read-only [ 565.424653][ T9553] bcachefs (loop2): finished waiting for writes to stop [ 565.431992][ T9553] bcachefs (loop2): flushing journal and stopping allocators, journal seq 10 [ 565.443917][ T9553] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 10 [ 565.454049][ T10] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 565.490111][ T9553] bcachefs (loop2): unshutdown complete, journal seq 11 [ 565.491537][ T9492] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 565.498016][ T9553] bcachefs (loop2): done going read-only, filesystem not clean [ 565.498086][ T9553] bcachefs (loop2): done starting filesystem [ 565.525475][ T9562] loop5: detected capacity change from 0 to 256 [ 565.560290][ T9492] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 565.598820][ T9492] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 565.633923][ T9492] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 565.653309][ T10] usb 2-1: config 0 has an invalid interface number: 29 but max is 0 [ 565.662168][ T10] usb 2-1: config 0 has no interface number 0 [ 565.668540][ T10] usb 2-1: config 0 interface 29 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 565.681035][ T10] usb 2-1: config 0 interface 29 altsetting 0 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 565.783131][ T5778] bcachefs (loop2): shutting down [ 565.800830][ T10] usb 2-1: New USB device found, idVendor=07fa, idProduct=0847, bcdDevice=60.e8 [ 565.812241][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 565.820893][ T10] usb 2-1: Product: syz [ 565.825494][ T10] usb 2-1: Manufacturer: syz [ 565.830347][ T10] usb 2-1: SerialNumber: syz [ 565.846745][ T10] usb 2-1: config 0 descriptor?? [ 565.914549][ T9565] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 565.966103][ T5778] bcachefs (loop2): shutdown complete [ 565.989019][ T10] HFC-S_USB 2-1:0.29: probe with driver HFC-S_USB failed with error -5 [ 566.292430][ T5841] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 566.298340][ T9492] 8021q: adding VLAN 0 to HW filter on device bond0 [ 566.344323][ T10] usb 2-1: USB disconnect, device number 10 [ 566.352764][ T5076] Bluetooth: hci0: command tx timeout [ 566.364800][ T9492] 8021q: adding VLAN 0 to HW filter on device team0 [ 566.412348][ T4440] bridge0: port 1(bridge_slave_0) entered blocking state [ 566.420186][ T4440] bridge0: port 1(bridge_slave_0) entered forwarding state [ 566.453756][ T4440] bridge0: port 2(bridge_slave_1) entered blocking state [ 566.461645][ T4440] bridge0: port 2(bridge_slave_1) entered forwarding state [ 566.473986][ T5841] usb 6-1: Using ep0 maxpacket: 16 [ 566.565073][ T5841] usb 6-1: config 0 has an invalid interface number: 49 but max is 0 [ 566.573876][ T5841] usb 6-1: config 0 has no interface number 0 [ 566.580468][ T5841] usb 6-1: config 0 interface 49 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 16 [ 566.590859][ T5841] usb 6-1: config 0 interface 49 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 566.593218][ T9492] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 566.603340][ T5841] usb 6-1: config 0 interface 49 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 566.625204][ T9492] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 566.758770][ T5076] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 566.767653][ T5076] Bluetooth: hci3: Injecting HCI hardware error event [ 566.775477][ T5076] Bluetooth: hci3: hardware error 0x00 [ 567.289181][ T9578] loop1: detected capacity change from 0 to 8 [ 567.589729][ T9578] SQUASHFS error: xz decompression failed, data probably corrupt [ 567.598197][ T9578] SQUASHFS error: Failed to read block 0x108: -5 [ 567.604908][ T9578] SQUASHFS error: Unable to read metadata cache entry [106] [ 567.612901][ T9578] SQUASHFS error: Unable to read inode 0x11f [ 567.652881][ T5841] usb 6-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=76.b7 [ 567.662524][ T5841] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 567.670814][ T5841] usb 6-1: Product: syz [ 567.675518][ T5841] usb 6-1: Manufacturer: syz [ 567.680478][ T5841] usb 6-1: SerialNumber: syz [ 567.692463][ T5841] usb 6-1: config 0 descriptor?? [ 567.708311][ T9569] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 567.876827][ T9580] loop7: detected capacity change from 0 to 2048 [ 567.926768][ T5789] Bluetooth: hci3: unexpected event for opcode 0x1004 [ 568.143677][ T9580] loop7: p1 < > p4 [ 568.152211][ T9580] loop7: p4 size 8388608 extends beyond EOD, truncated [ 568.433516][ T5789] Bluetooth: hci0: command tx timeout [ 568.688936][ T5841] usb 6-1: USB disconnect, device number 9 [ 568.749327][ T9492] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 568.996778][ T5076] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 569.170978][ T9588] loop7: detected capacity change from 0 to 512 [ 569.190064][ T9492] veth0_vlan: entered promiscuous mode [ 569.291094][ T9492] veth1_vlan: entered promiscuous mode [ 569.318015][ T9588] EXT4-fs: Ignoring removed nobh option [ 569.365708][ T9588] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 569.563929][ T5076] Bluetooth: hci4: unexpected event for opcode 0x200f [ 569.765909][ T9588] EXT4-fs error (device loop7): ext4_xattr_ibody_find:2240: inode #15: comm syz.7.1070: corrupted in-inode xattr: e_name out of bounds [ 569.855900][ T9588] EXT4-fs (loop7): 1 truncate cleaned up [ 569.863630][ T9588] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 569.899528][ T9492] veth0_macvtap: entered promiscuous mode [ 569.933729][ T9492] veth1_macvtap: entered promiscuous mode [ 570.054678][ T9492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 570.065736][ T9492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 570.075972][ T9492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 570.089273][ T9492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 570.100049][ T9492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 570.110895][ T9492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 570.125913][ T9492] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 570.145072][ T9492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 570.155926][ T9492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 570.166123][ T9492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 570.177253][ T9492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 570.189926][ T9492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 570.201273][ T9492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 570.216363][ T9492] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 570.286566][ T9492] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.295876][ T9492] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.298731][ T9034] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 570.304942][ T9492] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.325606][ T9492] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.532095][ T10] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 570.744124][ T10] usb 6-1: config 0 has an invalid interface number: 74 but max is 1 [ 570.753301][ T10] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 570.763933][ T10] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 570.773186][ T10] usb 6-1: config 0 has no interface number 0 [ 570.779546][ T10] usb 6-1: config 0 interface 74 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 570.791139][ T10] usb 6-1: config 0 interface 74 altsetting 0 has an endpoint descriptor with address 0xFE, changing to 0x8E [ 570.805248][ T10] usb 6-1: config 0 interface 74 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 570.817330][ T10] usb 6-1: config 0 interface 74 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 570.823146][ T9585] loop1: detected capacity change from 0 to 32768 [ 570.950349][ T9602] loop7: detected capacity change from 0 to 16 [ 570.993929][ T9602] erofs (device loop7): too large lz4 pclusterblks 16832 [ 571.006395][ T10] usb 6-1: New USB device found, idVendor=6737, idProduct=0001, bcdDevice=de.66 [ 571.016075][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 571.024439][ T10] usb 6-1: Product: syz [ 571.028847][ T10] usb 6-1: Manufacturer: syz [ 571.033812][ T10] usb 6-1: SerialNumber: syz [ 571.087526][ T10] usb 6-1: config 0 descriptor?? [ 571.172691][ T5841] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 571.346142][ T10] cypress_m8 6-1:0.74: HID->COM RS232 Adapter converter detected [ 571.355001][ T5841] usb 3-1: Using ep0 maxpacket: 32 [ 571.377443][ T10] usb 6-1: HID->COM RS232 Adapter converter now attached to ttyUSB0 [ 571.388748][ T5841] usb 3-1: config 0 has no interfaces? [ 571.395704][ T5841] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 571.405215][ T5841] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 571.418120][ T10] usb 6-1: USB disconnect, device number 10 [ 571.474180][ T5841] usb 3-1: config 0 descriptor?? [ 571.476989][ T10] cyphidcom ttyUSB0: HID->COM RS232 Adapter converter now disconnected from ttyUSB0 [ 571.491648][ T10] cypress_m8 6-1:0.74: device disconnected [ 571.917121][ T9317] usb 3-1: USB disconnect, device number 8 [ 572.223233][ T10] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 572.340432][ T9615] loop5: detected capacity change from 0 to 2048 [ 572.392097][ T10] usb 8-1: Using ep0 maxpacket: 8 [ 572.409408][ T9615] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 572.456669][ T10] usb 8-1: unable to get BOS descriptor or descriptor too short [ 572.496170][ T10] usb 8-1: config 64 has an invalid interface number: 28 but max is 0 [ 572.504915][ T10] usb 8-1: config 64 has no interface number 0 [ 572.511364][ T10] usb 8-1: config 64 interface 28 has no altsetting 0 [ 572.524893][ T10] usb 8-1: language id specifier not provided by device, defaulting to English [ 572.571535][ T10] usb 8-1: New USB device found, idVendor=1604, idProduct=8005, bcdDevice=e7.49 [ 572.581252][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 572.590285][ T10] usb 8-1: SerialNumber: 띛閐଱⠿᳟줷襉⵾譂୬쎸铄駨췏輝ᨧ⯈骖㸚ᚮ婄諎ㄪ䩾甆驷ﮞ᭵枚﷑抒鎯ꔍ늳肸⽪珚琹՟拏飒』⬚듦ྦ막᭎伋僭齈꽐䟎ꄺၑ贉￮诚膨航賋妦賝페㟮瞲糰흄䃴Ƴ䏷䒈ᨥᡐ펅翹請氣틭鸣嘎셩虆鵻춈愢쫟鞼Ԇጻ肀狼먤 [ 572.925020][ T10] usb 8-1: USB disconnect, device number 5 [ 573.111131][ T9623] loop2: detected capacity change from 0 to 2048 [ 573.159564][ T9627] loop1: detected capacity change from 0 to 64 [ 573.783824][ T9640] loop2: detected capacity change from 0 to 128 [ 573.982601][ T10] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 574.172171][ T10] usb 8-1: Using ep0 maxpacket: 8 [ 574.197122][ T10] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 574.207888][ T10] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 574.225656][ T9645] loop1: detected capacity change from 0 to 1024 [ 574.262462][ T10] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 574.272408][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 574.287897][ T10] usb 8-1: Product: syz [ 574.293095][ T10] usb 8-1: Manufacturer: syz [ 574.297954][ T10] usb 8-1: SerialNumber: syz [ 574.306559][ T9645] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 574.324810][ T9645] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 574.344297][ T9645] EXT4-fs (loop1): orphan cleanup on readonly fs [ 574.430498][ T9645] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5837: Corrupt filesystem [ 574.476401][ T9645] EXT4-fs (loop1): Remounting filesystem read-only [ 574.487770][ T1110] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 574.495975][ T1110] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 574.575213][ T9645] __quota_error: 29 callbacks suppressed [ 574.575298][ T9645] Quota error (device loop1): write_blk: dquota write failed [ 574.592353][ T9645] Quota error (device loop1): write_blk: dquota write failed [ 574.600038][ T9645] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 574.610170][ T9645] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 574.619237][ T9645] EXT4-fs (loop1): 1 orphan inode deleted [ 574.633104][ T10] usb 8-1: 0:2 : does not exist [ 574.661405][ T6890] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 574.669737][ T6890] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 574.742798][ T9645] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 574.770338][ T9650] Bluetooth: MGMT ver 1.23 [ 574.773059][ T10] usb 8-1: USB disconnect, device number 6 [ 575.179106][ T5779] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 575.321181][ T6900] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 575.435844][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 575.486447][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 575.646375][ T6900] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 575.755435][ T6900] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 575.867244][ T6900] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.002152][ T5841] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 576.067019][ T6900] bridge_slave_1: left allmulticast mode [ 576.072990][ T6900] bridge_slave_1: left promiscuous mode [ 576.079270][ T6900] bridge0: port 2(bridge_slave_1) entered disabled state [ 576.091581][ T6900] bridge_slave_0: left allmulticast mode [ 576.097771][ T6900] bridge_slave_0: left promiscuous mode [ 576.104472][ T6900] bridge0: port 1(bridge_slave_0) entered disabled state [ 576.185250][ T5841] usb 2-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 576.195017][ T5841] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 576.218875][ T5841] usb 2-1: config 0 descriptor?? [ 576.455082][ T5841] usb 2-1: USB disconnect, device number 11 [ 576.513265][ T6900] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 576.546409][ T6900] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 576.565064][ T6900] bond0 (unregistering): Released all slaves [ 576.855836][ T6900] hsr_slave_0: left promiscuous mode [ 576.867456][ T6900] hsr_slave_1: left promiscuous mode [ 576.875762][ T6900] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 576.884775][ T6900] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 576.900852][ T6900] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 576.908622][ T6900] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 576.930032][ T6900] veth1_macvtap: left promiscuous mode [ 576.936032][ T6900] veth0_macvtap: left promiscuous mode [ 576.944688][ T6900] veth1_vlan: left promiscuous mode [ 576.950288][ T6900] veth0_vlan: left promiscuous mode [ 577.633234][ T6900] team0 (unregistering): Port device team_slave_1 removed [ 577.660950][ T6900] team0 (unregistering): Port device team_slave_0 removed [ 577.762947][ T10] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 577.772189][ T5837] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 577.992612][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 578.023509][ T5837] usb 3-1: config 8 has an invalid interface number: 91 but max is 0 [ 578.032329][ T5837] usb 3-1: config 8 has no interface number 0 [ 578.038731][ T5837] usb 3-1: config 8 interface 91 has no altsetting 0 [ 578.146472][ T9664] loop7: detected capacity change from 0 to 24 [ 578.147474][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 578.163963][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 578.196718][ T5837] usb 3-1: New USB device found, idVendor=03f0, idProduct=4002, bcdDevice= 0.01 [ 578.203605][ T9664] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 578.206215][ T5837] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 578.222343][ T5837] usb 3-1: Product: syz [ 578.226746][ T5837] usb 3-1: Manufacturer: syz [ 578.231582][ T5837] usb 3-1: SerialNumber: syz [ 578.329027][ T10] usb 2-1: New USB device found, idVendor=413c, idProduct=819b, bcdDevice=a7.c0 [ 578.338713][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 578.352451][ T10] usb 2-1: Product: syz [ 578.356887][ T10] usb 2-1: Manufacturer: syz [ 578.361954][ T10] usb 2-1: SerialNumber: syz [ 578.420812][ T10] usb 2-1: config 0 descriptor?? [ 578.429297][ T5789] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 578.457334][ T10] qmi_wwan 2-1:0.0: bogus CDC Union: master=31, slave=0 [ 578.465865][ T10] qmi_wwan 2-1:0.0: probe with driver qmi_wwan failed with error -22 [ 578.487745][ T5789] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 578.513396][ T5789] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 578.575356][ T5789] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 578.594686][ T5789] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 578.606164][ T5789] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 578.650679][ T5841] usb 2-1: USB disconnect, device number 12 [ 578.855251][ T5837] usb-storage 3-1:8.91: USB Mass Storage device detected [ 578.923347][ T5837] usb-storage 3-1:8.91: Quirks match for vid 03f0 pid 4002: 10 [ 579.051537][ T5837] usb 3-1: USB disconnect, device number 9 [ 579.072199][ T10] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 579.238181][ T5841] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 579.247214][ T10] usb 6-1: New USB device found, idVendor=05ac, idProduct=0224, bcdDevice= 0.40 [ 579.257803][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 579.267517][ T10] usb 6-1: Product: syz [ 579.272231][ T10] usb 6-1: Manufacturer: syz [ 579.277088][ T10] usb 6-1: SerialNumber: syz [ 579.372922][ T9665] chnl_net:caif_netlink_parms(): no params data found [ 579.432051][ T5841] usb 8-1: Using ep0 maxpacket: 8 [ 579.458512][ T5841] usb 8-1: config 0 has an invalid interface number: 172 but max is 2 [ 579.467413][ T5841] usb 8-1: config 0 has an invalid interface number: 234 but max is 2 [ 579.476676][ T5841] usb 8-1: config 0 has no interface number 1 [ 579.483093][ T5841] usb 8-1: config 0 has no interface number 2 [ 579.541579][ T5841] usb 8-1: New USB device found, idVendor=05c6, idProduct=9212, bcdDevice=47.83 [ 579.551322][ T5841] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 579.559876][ T5841] usb 8-1: Product: syz [ 579.564393][ T5841] usb 8-1: Manufacturer: syz [ 579.569234][ T5841] usb 8-1: SerialNumber: syz [ 579.645983][ T10] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/input/input15 [ 579.657973][ T5841] usb 8-1: config 0 descriptor?? [ 579.706563][ T5123] bcm5974 6-1:1.0: could not read from device [ 579.717799][ T10] usb 6-1: USB disconnect, device number 11 [ 579.768797][ T9681] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 579.991046][ T5837] usb 8-1: USB disconnect, device number 7 [ 580.013453][ T5789] Bluetooth: hci1: ACL packet too small [ 580.058484][ T9689] loop2: detected capacity change from 0 to 8 [ 580.492031][ T5841] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 580.635214][ T9665] bridge0: port 1(bridge_slave_0) entered blocking state [ 580.643038][ T9665] bridge0: port 1(bridge_slave_0) entered disabled state [ 580.650897][ T9665] bridge_slave_0: entered allmulticast mode [ 580.660436][ T9665] bridge_slave_0: entered promiscuous mode [ 580.715715][ T5789] Bluetooth: hci0: command tx timeout [ 580.737057][ T9665] bridge0: port 2(bridge_slave_1) entered blocking state [ 580.745056][ T9665] bridge0: port 2(bridge_slave_1) entered disabled state [ 580.756510][ T9665] bridge_slave_1: entered allmulticast mode [ 580.768168][ T5841] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 580.768386][ T9665] bridge_slave_1: entered promiscuous mode [ 580.778545][ T5841] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 580.797643][ T5841] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 580.807135][ T5841] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 580.883565][ T5841] usb 2-1: config 0 descriptor?? [ 580.902701][ T5841] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 580.998129][ T5789] Bluetooth: hci4: unexpected event for opcode 0x0403 [ 581.055594][ T9703] loop2: detected capacity change from 0 to 8 [ 581.097501][ T9665] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 581.180000][ T9703] cramfs: Error -3 while decompressing! [ 581.186405][ T9703] cramfs: ffffffff9468d188(26)->ffff88802396e000(4096) [ 581.199463][ T9703] cramfs: Error -3 while decompressing! [ 581.205433][ T9703] cramfs: ffffffff9468d1a2(26)->ffff888062957000(4096) [ 581.213205][ T9703] cramfs: Error -3 while decompressing! [ 581.218959][ T9703] cramfs: ffffffff9468d188(26)->ffff88802396e000(4096) [ 581.238118][ T9665] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 581.275412][ T9706] netlink: 'syz.7.1109': attribute type 29 has an invalid length. [ 581.283736][ T9706] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1109'. [ 581.386765][ T9708] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1110'. [ 581.396397][ T9708] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1110'. [ 581.487384][ T9665] team0: Port device team_slave_0 added [ 581.540492][ T9665] team0: Port device team_slave_1 added [ 581.828881][ T9665] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 581.836859][ T9665] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 581.865781][ T9665] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 581.935467][ T9665] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 581.942858][ T9665] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 581.974000][ T9665] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 582.298337][ T9665] hsr_slave_0: entered promiscuous mode [ 582.317082][ T9665] hsr_slave_1: entered promiscuous mode [ 582.347794][ T9665] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 582.356140][ T9665] Cannot create hsr debugfs directory [ 582.424876][ T10] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 582.637963][ T9728] xt_TCPMSS: Only works on TCP SYN packets [ 582.757227][ T5789] Bluetooth: hci0: command tx timeout [ 582.860276][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 582.872340][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 582.884594][ T10] usb 6-1: New USB device found, idVendor=05ac, idProduct=022a, bcdDevice= 0.00 [ 582.894602][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 582.951880][ T10] usb 6-1: config 0 descriptor?? [ 583.119448][ T5841] usb 2-1: USB disconnect, device number 13 [ 583.256329][ T10] appletouch 6-1:0.0: Failed to read mode from device. [ 583.264398][ T10] appletouch 6-1:0.0: probe with driver appletouch failed with error -5 [ 583.322265][ T10] usb 6-1: USB disconnect, device number 12 [ 583.592563][ T9665] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 583.653088][ T9665] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 583.701409][ T9665] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 583.726465][ T9665] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 583.933351][ T9740] loop7: detected capacity change from 0 to 1024 [ 584.006729][ T9740] EXT4-fs (loop7): invalid inodes per group: 0 [ 584.006729][ T9740] [ 584.409423][ T9748] loop2: detected capacity change from 0 to 64 [ 584.470569][ T9665] 8021q: adding VLAN 0 to HW filter on device bond0 [ 584.513876][ T9748] netlink: 'syz.2.1128': attribute type 1 has an invalid length. [ 584.522408][ T9748] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1128'. [ 584.607127][ T9665] 8021q: adding VLAN 0 to HW filter on device team0 [ 584.668118][ T4440] bridge0: port 1(bridge_slave_0) entered blocking state [ 584.675962][ T4440] bridge0: port 1(bridge_slave_0) entered forwarding state [ 584.738064][ T9754] loop1: detected capacity change from 0 to 1024 [ 584.763551][ T9754] hfsplus: failed to load root directory [ 584.777615][ T6912] bridge0: port 2(bridge_slave_1) entered blocking state [ 584.785587][ T6912] bridge0: port 2(bridge_slave_1) entered forwarding state [ 584.833477][ T5789] Bluetooth: hci0: command tx timeout [ 585.208011][ T9758] netlink: 'syz.2.1128': attribute type 10 has an invalid length. [ 585.324748][ T9758] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1128'. [ 585.345350][ T9763] loop7: detected capacity change from 0 to 64 [ 585.545377][ T9763] netlink: 'syz.7.1132': attribute type 1 has an invalid length. [ 585.553704][ T9763] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1132'. [ 585.780968][ T9771] netlink: 'syz.7.1132': attribute type 10 has an invalid length. [ 585.863119][ T9771] bridge0: port 2(bridge_slave_1) entered disabled state [ 585.873045][ T9771] bridge0: port 1(bridge_slave_0) entered disabled state [ 585.897992][ T9771] bridge0: port 2(bridge_slave_1) entered blocking state [ 585.905947][ T9771] bridge0: port 2(bridge_slave_1) entered forwarding state [ 585.914884][ T9771] bridge0: port 1(bridge_slave_0) entered blocking state [ 585.922768][ T9771] bridge0: port 1(bridge_slave_0) entered forwarding state [ 585.941332][ T9771] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 585.943804][ T9770] loop5: detected capacity change from 0 to 2048 [ 586.126565][ T9770] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 586.135059][ T9770] UDF-fs: Scanning with blocksize 512 failed [ 586.528933][ T9770] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 586.587750][ T9665] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 586.661251][ T9763] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1132'. [ 586.674119][ T9763] bridge_slave_1: left allmulticast mode [ 586.680087][ T9763] bridge_slave_1: left promiscuous mode [ 586.687411][ T9763] bridge0: port 2(bridge_slave_1) entered disabled state [ 586.708998][ T9763] bridge_slave_0: left allmulticast mode [ 586.716327][ T9763] bridge_slave_0: left promiscuous mode [ 586.723391][ T9763] bridge0: port 1(bridge_slave_0) entered disabled state [ 586.854791][ T9763] bond0: (slave bridge0): Releasing backup interface [ 586.912815][ T5789] Bluetooth: hci0: command tx timeout [ 586.991247][ T9785] loop2: detected capacity change from 0 to 256 [ 587.478011][ T9665] veth0_vlan: entered promiscuous mode [ 587.525854][ T9665] veth1_vlan: entered promiscuous mode [ 587.786106][ T9665] veth0_macvtap: entered promiscuous mode [ 587.823240][ T9790] loop1: detected capacity change from 0 to 4096 [ 587.851612][ T9665] veth1_macvtap: entered promiscuous mode [ 587.863116][ T9790] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512). [ 587.904748][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 587.911575][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 588.083722][ T9665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 588.094950][ T9665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 588.107600][ T9665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 588.119695][ T9665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 588.129941][ T9665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 588.140720][ T9665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 588.155809][ T9665] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 588.213278][ T9665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 588.224410][ T9665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 588.234800][ T9665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 588.245652][ T9665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 588.256072][ T9665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 588.266914][ T9665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 588.294425][ T9665] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 588.312344][ T5839] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 588.334691][ T9790] ntfs3(loop1): $Secure::$SDH is corrupted. [ 588.341179][ T9790] ntfs3(loop1): Failed to initialize $Secure (-22). [ 588.358076][ T9665] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 588.367601][ T9665] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 588.376807][ T9665] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 588.385991][ T9665] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 588.501237][ T5839] usb 6-1: Using ep0 maxpacket: 32 [ 588.564181][ T5839] usb 6-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 588.573849][ T5839] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 588.582274][ T5839] usb 6-1: Product: syz [ 588.586705][ T5839] usb 6-1: Manufacturer: syz [ 588.591565][ T5839] usb 6-1: SerialNumber: syz [ 588.685107][ T5839] usb 6-1: config 0 descriptor?? [ 589.144355][ T5839] peak_usb 6-1:0.0 can0: unable to request usb[type=0 value=0] err=-71 [ 589.156413][ T5839] peak_usb 6-1:0.0: unable to read PCAN-USB Pro bootloader info (err -71) [ 589.259234][ T5839] peak_usb 6-1:0.0: probe with driver peak_usb failed with error -71 [ 589.299384][ T5839] usb 6-1: USB disconnect, device number 13 [ 589.504589][ T9813] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1151'. [ 589.626495][ T9816] loop7: detected capacity change from 0 to 16 [ 589.704953][ T9816] erofs (device loop7): mounted with root inode @ nid 36. [ 590.452146][ T5837] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 590.652969][ T5837] usb 3-1: Using ep0 maxpacket: 8 [ 590.705649][ T5837] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 590.716502][ T5837] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 590.781015][ T5837] usb 3-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=e2.d0 [ 590.790626][ T5837] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 590.800119][ T5837] usb 3-1: Product: syz [ 590.805806][ T5837] usb 3-1: Manufacturer: syz [ 590.810654][ T5837] usb 3-1: SerialNumber: syz [ 590.905003][ T5837] usb 3-1: config 0 descriptor?? [ 590.960773][ T9840] Bluetooth: MGMT ver 1.23 [ 591.015158][ T5789] Bluetooth: hci2: unexpected event for opcode 0x080e [ 591.042134][ T1680] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 591.159347][ T5837] usb 3-1: probing VID:PID(0424:012C) [ 591.167614][ T5837] usb 3-1: vub300 testing UNKNOWN EndPoint(0) 05 [ 591.177417][ T5837] usb 3-1: vub300 ignoring EndPoint(0) 05 [ 591.184324][ T5837] usb 3-1: vub300 testing UNKNOWN EndPoint(1) 0C [ 591.190957][ T5837] usb 3-1: vub300 ignoring EndPoint(1) 0C [ 591.197087][ T5837] usb 3-1: Could not find two sets of bulk-in/out endpoint pairs [ 591.258482][ T5837] vub300 3-1:0.0: probe with driver vub300 failed with error -22 [ 591.258637][ T1680] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 591.313912][ T5837] usb 3-1: USB disconnect, device number 10 [ 591.338434][ T1680] usb 8-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 591.348712][ T1680] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 591.357138][ T1680] usb 8-1: Product: syz [ 591.361552][ T1680] usb 8-1: Manufacturer: syz [ 591.366698][ T1680] usb 8-1: SerialNumber: syz [ 591.445082][ T1680] usb 8-1: config 0 descriptor?? [ 591.482983][ T1680] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 591.762339][ T1680] snd-usb-audio 8-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 591.908845][ T5837] usb 8-1: USB disconnect, device number 8 [ 592.548932][ T9845] loop1: detected capacity change from 0 to 32768 [ 592.637647][ T9845] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1163 (9845) [ 592.664100][ T9845] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 592.675974][ T9845] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 592.687362][ T9845] BTRFS info (device loop1): using free-space-tree [ 593.255485][ T9884] loop5: detected capacity change from 0 to 128 [ 593.270645][ T9884] EXT4-fs (loop5): Test dummy encryption mode enabled [ 593.274741][ T9840] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1163'. [ 593.316340][ T9840] fs-verity: sha512 using implementation "sha512-generic" [ 593.320967][ T29] audit: type=1800 audit(1736895805.634:175): pid=9840 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1163" name="file0" dev="loop1" ino=258 res=0 errno=0 [ 593.333634][ T9840] BTRFS info (device loop1): setting compat-ro feature flag for VERITY (0x4) [ 593.389775][ T9884] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 593.443328][ T9884] ext4 filesystem being mounted at /183/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 593.769771][ T5779] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 593.852471][ T4440] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 593.860566][ T4440] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 593.958167][ T7157] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 593.995283][ T6912] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 594.005479][ T6912] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 594.718144][ T6900] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 594.947289][ T6900] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.198410][ T6900] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.433583][ T6900] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.626068][ T6900] bridge_slave_1: left allmulticast mode [ 595.632082][ T6900] bridge_slave_1: left promiscuous mode [ 595.638723][ T6900] bridge0: port 2(bridge_slave_1) entered disabled state [ 595.659511][ T6900] bridge_slave_0: left allmulticast mode [ 595.665670][ T6900] bridge_slave_0: left promiscuous mode [ 595.672372][ T6900] bridge0: port 1(bridge_slave_0) entered disabled state [ 595.996716][ T6900] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 596.013039][ T6900] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 596.027981][ T6900] bond0 (unregistering): Released all slaves [ 596.336636][ T6900] hsr_slave_0: left promiscuous mode [ 596.349929][ T6900] hsr_slave_1: left promiscuous mode [ 596.362058][ T6900] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 596.369745][ T6900] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 596.383735][ T6900] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 596.391323][ T6900] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 596.410550][ T6900] veth1_macvtap: left promiscuous mode [ 596.417000][ T6900] veth0_macvtap: left promiscuous mode [ 596.423080][ T6900] veth1_vlan: left promiscuous mode [ 596.428565][ T6900] veth0_vlan: left promiscuous mode [ 596.853221][ T6900] team0 (unregistering): Port device team_slave_1 removed [ 596.877360][ T6900] team0 (unregistering): Port device team_slave_0 removed [ 597.387712][ T9917] loop5: detected capacity change from 0 to 64 [ 597.842051][ T5837] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 597.940264][ T5076] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 597.962319][ T5076] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 598.041437][ T5837] usb 2-1: New USB device found, idVendor=04b4, idProduct=6830, bcdDevice=86.cf [ 598.050791][ T5076] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 598.053061][ T5837] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 598.086687][ T5076] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 598.090589][ T5076] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 598.092902][ T5076] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 598.353047][ T5837] ums-cypress 2-1:1.0: USB Mass Storage device detected [ 598.696994][ T9936] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1191'. [ 599.186372][ T9919] loop1: detected capacity change from 0 to 32768 [ 599.197040][ T9919] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1185 (9919) [ 599.239167][ T9919] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 599.255370][ T9919] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 599.268529][ T9919] BTRFS info (device loop1): using free-space-tree [ 599.469572][ T9951] ip6t_srh: unknown srh match flags 744E [ 599.616396][ T1680] usb 2-1: USB disconnect, device number 14 [ 599.762423][ T9922] chnl_net:caif_netlink_parms(): no params data found [ 600.037902][ T9971] loop7: detected capacity change from 0 to 16 [ 600.072564][ T9971] erofs (device loop7): mounted with root inode @ nid 36. [ 600.197352][ T5789] Bluetooth: hci0: command tx timeout [ 600.360222][ T5779] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 600.451579][ T9976] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 600.459471][ T9976] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 600.908810][ T9970] loop5: detected capacity change from 0 to 8192 [ 600.996821][ T9970] loop5: p1 < > p2 < > p3 [ 601.005360][ T9922] bridge0: port 1(bridge_slave_0) entered blocking state [ 601.013557][ T9922] bridge0: port 1(bridge_slave_0) entered disabled state [ 601.021430][ T9922] bridge_slave_0: entered allmulticast mode [ 601.028871][ T9970] loop5: p3 start 55115776 is beyond EOD, truncated [ 601.032356][ T9922] bridge_slave_0: entered promiscuous mode [ 601.096983][ T9922] bridge0: port 2(bridge_slave_1) entered blocking state [ 601.107823][ T9922] bridge0: port 2(bridge_slave_1) entered disabled state [ 601.115872][ T9922] bridge_slave_1: entered allmulticast mode [ 601.125029][ T9922] bridge_slave_1: entered promiscuous mode [ 601.256088][ T9922] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 601.276492][ T9922] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 601.392503][ T9987] loop2: detected capacity change from 0 to 64 [ 601.430292][ T9922] team0: Port device team_slave_0 added [ 601.458495][ T9922] team0: Port device team_slave_1 added [ 601.639122][ T9922] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 601.647329][ T9922] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 601.680217][ T9922] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 601.837191][ T9922] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 601.844635][ T9922] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 601.871177][ T9922] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 602.270745][ T9999] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1212'. [ 602.280243][ T9999] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1212'. [ 602.312422][ T5789] Bluetooth: hci0: command tx timeout [ 602.348185][ T9922] hsr_slave_0: entered promiscuous mode [ 602.409283][ T9922] hsr_slave_1: entered promiscuous mode [ 602.572238][ T9922] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 602.580054][ T9922] Cannot create hsr debugfs directory [ 602.678256][T10007] loop2: detected capacity change from 0 to 128 [ 602.745795][T10007] EXT4-fs (loop2): Test dummy encryption mode enabled [ 602.792617][T10007] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 602.902688][T10007] ext4 filesystem being mounted at /305/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 603.326377][ T5778] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 603.483355][T10019] pim6reg: entered allmulticast mode [ 603.866446][ T9922] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 603.943498][ T9922] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 603.994412][ T9922] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 604.053203][ T9922] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 604.067771][T10027] netlink: 256 bytes leftover after parsing attributes in process `syz.5.1224'. [ 604.228112][ T5837] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 604.363210][ T5789] Bluetooth: hci0: command tx timeout [ 604.564220][ T5837] usb 8-1: config 1 has an invalid interface number: 75 but max is 0 [ 604.573091][ T5837] usb 8-1: config 1 has no interface number 0 [ 604.579573][ T5837] usb 8-1: New USB device found, idVendor=05d8, idProduct=8108, bcdDevice= 1.48 [ 604.591138][ T5837] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 604.629139][ T9922] 8021q: adding VLAN 0 to HW filter on device bond0 [ 604.655545][ T5837] dvb-usb: found a 'Artec T1 USB1.1 TVBOX with AN2235' in warm state. [ 604.664377][ T5837] dvb-usb: bulk message failed: -22 (3/0) [ 604.677918][ T9922] 8021q: adding VLAN 0 to HW filter on device team0 [ 604.712348][ T4440] bridge0: port 1(bridge_slave_0) entered blocking state [ 604.720034][ T4440] bridge0: port 1(bridge_slave_0) entered forwarding state [ 604.743926][ T5837] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 604.773910][ T5837] dvbdev: DVB: registering new adapter (Artec T1 USB1.1 TVBOX with AN2235) [ 604.783188][ T5837] usb 8-1: media controller created [ 604.874451][ T5837] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 604.954908][T10040] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1229'. [ 604.977889][ T6890] bridge0: port 2(bridge_slave_1) entered blocking state [ 604.985724][ T6890] bridge0: port 2(bridge_slave_1) entered forwarding state [ 604.987517][T10041] loop2: detected capacity change from 0 to 256 [ 605.114881][T10041] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 605.158792][ T5837] dvb-usb: bulk message failed: -22 (6/0) [ 605.165284][ T5837] dvb-usb: no frontend was attached by 'Artec T1 USB1.1 TVBOX with AN2235' [ 605.187252][ T5837] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.7/usb8/8-1/input/input18 [ 605.352940][ T5837] dvb-usb: schedule remote query interval to 150 msecs. [ 605.360310][ T5837] dvb-usb: bulk message failed: -22 (3/0) [ 605.436547][ T6900] ===================================================== [ 605.443963][ T6900] BUG: KMSAN: uninit-value in n_tty_receive_buf_closing+0x539/0xb40 [ 605.454116][ T6900] n_tty_receive_buf_closing+0x539/0xb40 [ 605.459962][ T6900] n_tty_receive_buf_common+0x196b/0x2490 [ 605.466149][ T6900] n_tty_receive_buf2+0x4c/0x60 [ 605.471189][ T6900] tty_ldisc_receive_buf+0xd0/0x290 [ 605.477240][ T6900] tty_port_default_receive_buf+0xdf/0x190 [ 605.483386][ T6900] flush_to_ldisc+0x473/0xdb0 [ 605.488272][ T6900] process_scheduled_works+0xae0/0x1c40 [ 605.494299][ T6900] worker_thread+0xea7/0x14f0 [ 605.499238][ T6900] kthread+0x3e2/0x540 [ 605.504209][ T6900] ret_from_fork+0x6d/0x90 [ 605.511532][ T6900] ret_from_fork_asm+0x1a/0x30 [ 605.517159][ T6900] [ 605.519581][ T6900] Uninit was created at: [ 605.524364][ T6900] __kmalloc_noprof+0x923/0x1230 [ 605.529511][ T6900] __tty_buffer_request_room+0x36e/0x6d0 [ 605.535477][ T6900] __tty_insert_flip_string_flags+0x140/0x570 [ 605.541924][ T6900] uart_insert_char+0x39e/0xa10 [ 605.546968][ T6900] serial8250_read_char+0x1a7/0x5d0 [ 605.552484][ T6900] serial8250_handle_irq+0x970/0x1130 [ 605.558072][ T6900] serial8250_default_handle_irq+0x120/0x2b0 [ 605.564415][ T6900] serial8250_interrupt+0xc5/0x360 [ 605.568588][ T9317] dvb-usb: bulk message failed: -22 (1/0) [ 605.569659][ T6900] __handle_irq_event_percpu+0x118/0xca0 [ 605.569815][ T6900] handle_irq_event+0xef/0x2c0 [ 605.569945][ T6900] handle_edge_irq+0x340/0xfb0 [ 605.570069][ T6900] __common_interrupt+0x97/0x1f0 [ 605.570174][ T6900] common_interrupt+0x92/0xb0 [ 605.576685][ T9317] dvb-usb: error while querying for an remote control event. [ 605.581886][ T6900] asm_common_interrupt+0x2b/0x40 [ 605.582029][ T6900] [ 605.582056][ T6900] CPU: 1 UID: 0 PID: 6900 Comm: kworker/u8:32 Not tainted 6.13.0-rc7-syzkaller-00039-gc3812b15000c #0 [ 605.582170][ T6900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 605.582245][ T6900] Workqueue: events_unbound flush_to_ldisc [ 605.582390][ T6900] ===================================================== [ 605.582423][ T6900] Disabling lock debugging due to kernel taint [ 605.582470][ T6900] Kernel panic - not syncing: kmsan.panic set ... [ 605.582531][ T6900] CPU: 1 UID: 0 PID: 6900 Comm: kworker/u8:32 Tainted: G B 6.13.0-rc7-syzkaller-00039-gc3812b15000c #0 [ 605.582671][ T6900] Tainted: [B]=BAD_PAGE [ 605.582714][ T6900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 605.582786][ T6900] Workqueue: events_unbound flush_to_ldisc [ 605.582922][ T6900] Call Trace: [ 605.582956][ T6900] [ 605.582992][ T6900] dump_stack_lvl+0x216/0x2d0 [ 605.583131][ T6900] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 605.583252][ T6900] dump_stack+0x1e/0x24 [ 605.583376][ T6900] panic+0x4e2/0xcf0 [ 605.583502][ T6900] ? kmsan_get_metadata+0x111/0x1c0 [ 605.583626][ T6900] kmsan_report+0x2c7/0x2d0 [ 605.583740][ T6900] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 605.583852][ T6900] ? __msan_warning+0x95/0x120 [ 605.583997][ T6900] ? n_tty_receive_buf_closing+0x539/0xb40 [ 605.584118][ T6900] ? n_tty_receive_buf_common+0x196b/0x2490 [ 605.584239][ T6900] ? n_tty_receive_buf2+0x4c/0x60 [ 605.584346][ T6900] ? tty_ldisc_receive_buf+0xd0/0x290 [ 605.584487][ T6900] ? tty_port_default_receive_buf+0xdf/0x190 [ 605.584645][ T6900] ? flush_to_ldisc+0x473/0xdb0 [ 605.584790][ T6900] ? process_scheduled_works+0xae0/0x1c40 [ 605.584942][ T6900] ? worker_thread+0xea7/0x14f0 [ 605.585087][ T6900] ? kthread+0x3e2/0x540 [ 605.585188][ T6900] ? ret_from_fork+0x6d/0x90 [ 605.585305][ T6900] ? ret_from_fork_asm+0x1a/0x30 [ 605.585459][ T6900] ? __update_load_avg_cfs_rq+0xced/0x1090 [ 605.585619][ T6900] ? kmsan_get_metadata+0x13e/0x1c0 [ 605.585730][ T6900] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 605.585851][ T6900] ? __rb_insert_augmented+0x9e/0x10e0 [ 605.585958][ T6900] ? __pfx_min_vruntime_cb_rotate+0x10/0x10 [ 605.586075][ T6900] ? kmsan_get_metadata+0x13e/0x1c0 [ 605.586183][ T6900] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 605.586303][ T6900] ? kmsan_get_metadata+0x13e/0x1c0 [ 605.586409][ T6900] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 605.586525][ T6900] __msan_warning+0x95/0x120 [ 605.586667][ T6900] n_tty_receive_buf_closing+0x539/0xb40 [ 605.586826][ T6900] n_tty_receive_buf_common+0x196b/0x2490 [ 605.587004][ T6900] n_tty_receive_buf2+0x4c/0x60 [ 605.587114][ T6900] ? __pfx_n_tty_receive_buf2+0x10/0x10 [ 605.587231][ T6900] tty_ldisc_receive_buf+0xd0/0x290 [ 605.587383][ T6900] tty_port_default_receive_buf+0xdf/0x190 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 605.587542][ T6900] flush_to_ldisc+0x473/0xdb0 [ 605.587697][ T6900] ? __pfx_tty_port_default_receive_buf+0x10/0x10 [ 605.900174][ T6900] ? __pfx_flush_to_ldisc+0x10/0x10 [ 605.905615][ T6900] process_scheduled_works+0xae0/0x1c40 [ 605.911441][ T6900] worker_thread+0xea7/0x14f0 [ 605.916377][ T6900] kthread+0x3e2/0x540 [ 605.920645][ T6900] ? __pfx_worker_thread+0x10/0x10 [ 605.925997][ T6900] ? __pfx_kthread+0x10/0x10 [ 605.930771][ T6900] ret_from_fork+0x6d/0x90 [ 605.935390][ T6900] ? __pfx_kthread+0x10/0x10 [ 605.940158][ T6900] ret_from_fork_asm+0x1a/0x30 [ 605.945160][ T6900] [ 605.948461][ T6900] Kernel Offset: disabled [ 605.952851][ T6900] Rebooting in 86400 seconds..