last executing test programs: 4.629836841s ago: executing program 2 (id=2800): r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x17, 0x3, &(0x7f0000000b00)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) write$tcp_congestion(r0, 0x0, 0x0) 4.581068005s ago: executing program 2 (id=2801): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00220f000000379a2813d947"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGCOLLECTIONINDEX(r1, 0x40184810, 0x0) 3.199270328s ago: executing program 4 (id=2815): mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) syz_io_uring_setup(0xbe3, &(0x7f0000000280)={0x0, 0x3c14, 0x4, 0xfffffffc, 0xfffffffd}, &(0x7f0000000040), &(0x7f00000000c0)) mkdir(0x0, 0x0) chdir(0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r0, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) rmdir(&(0x7f00000001c0)='./cgroup/../file0\x00') mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240), 0x0, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = open(&(0x7f0000000780)='./bus\x00', 0x87e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r2, 0x0) fallocate(r1, 0x0, 0x0, 0x1000f4) 2.966408497s ago: executing program 4 (id=2820): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r0, 0xffffffffffffffff, 0x0) 2.794029081s ago: executing program 3 (id=2823): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r2 = accept$alg(r1, 0x0, 0x0) fcntl$setstatus(r2, 0x4, 0x42000) r3 = dup(r2) write$FUSE_INIT(r3, &(0x7f0000000080)={0x4f}, 0xfffffdef) 2.719722087s ago: executing program 4 (id=2824): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x6, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000580)=[{&(0x7f0000000640)=""/102396, 0xfffffd6e}, {&(0x7f0000019740)=""/242}], 0x2, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000019640)={0x0, 0x14}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000240), 0x208e24b) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x0, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00'}, 0x90) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r4 = syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) ioctl$PAGEMAP_SCAN(r4, 0xc0606610, &(0x7f00000004c0)={0x60, 0x0, &(0x7f0000165000/0x4000)=nil, &(0x7f00004fa000/0x4000)=nil, 0x0, 0x0, 0x0, 0x1ff}) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000"], 0x7c}}, 0x0) sendmsg$OSF_MSG_REMOVE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000019840)={0x14, 0x1, 0x5, 0x0, 0x0, 0x0, {0x5, 0x0, 0x7}}, 0x14}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000060a0b040000000000000000020000002800048024000180090001006d6574610000000014000280080002400000000708000140000000000900010073797a30000000000900020073797a32000000001400000011"], 0x7c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000400)={0x24, r6, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x10, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}]}]}]}, 0x24}}, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000280)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c) 2.719507418s ago: executing program 0 (id=2825): socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000002400)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x3}, 0x8) r4 = socket$inet6(0xa, 0x2, 0x3a) r5 = dup(r4) bind$unix(r5, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x6e) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, 0x0, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$inet_udplite(0x2, 0x2, 0x88) r6 = socket$netlink(0x10, 0x3, 0xc) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000180)={r0, 0x1, 0x3}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)={0x24, 0x0, 0x0, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x10, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x24}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c0000001000030500"/19, @ANYRES32=0x0, @ANYBLOB="000000000000f3002c00128009000100626f6e64000000001c00028008000300000202000800057200000000080004"], 0x4c}}, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r6, 0x10e, 0x1, &(0x7f0000000040)=0x7, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) 2.719145208s ago: executing program 1 (id=2826): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=ANY=[], 0x40}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f00000002c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r1, 0xc0481273, &(0x7f0000000000)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) socket$xdp(0x2c, 0x3, 0x0) 2.44355653s ago: executing program 3 (id=2827): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file0\x00', 0x1000801, &(0x7f0000000080)=ANY=[@ANYRES16=0x0], 0x0, 0x1ca, &(0x7f00000008c0)="$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") mount$overlay(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) fspick(r0, &(0x7f0000000080)='./file0\x00', 0x1) 1.7080313s ago: executing program 0 (id=2828): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) 1.695284361s ago: executing program 1 (id=2829): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f00000001c0)={&(0x7f0000000300)=@id, 0x10, &(0x7f00000007c0)=[{&(0x7f0000000940)="5763f922081ae50887ede09da114c1daa077f9611f8aa81d1b6fa5f806897377d6aa8524a8b1d8c81597ae6a3411d62b43ead10f470c911e8223cee2d6745ff65b450f8b0b46f900c910f852", 0x4c}, {&(0x7f0000000280)="b57af26468ffde59db204ffaa467c0af523b9e6d93dd62dad3d2f90b45e80eb530982e2a1a0b9ebc2c7113d4f93982f87d0ced6312bdcaa996c13c02d027870ae0bdbed8b104a10605ae3939cfa8e7d4ae5e2f97b5958bed4a4430c01d04f980fac5e88de756ec949e14a35bfb3f32197c05b451", 0x74}, {&(0x7f00000009c0)="3d408cd47846fd99d1d1a4df38e0afdd03a817bf3b4673e575b2c253bae12d98c4d5e4e6d317ba457f2d0de6e1fbc5a43bae0d257cda31fb579139135de49db225bf75a3dea059b4a7a9808dd72eb1bd84d0cf9959907ad6b1e1ec718aa8d5004fd0acd19045d8d6e0f04b6b4497bb3126e4ad0d033ef175a58f55d0993d32bb3a10246c0e9ed8956592d6b51d4c1b3d35b68e6a354f5bdddcb0c943411abe361cd03acfa5d2f09a07700d9ce62314a233dc06de1a", 0xb5}, {&(0x7f0000000a80)="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", 0x105}, {&(0x7f0000000600)="c016c55101fc98bba00b0c2946a2b285871ce0494875c9d8979d34a99a409dcb328a6ff1e31414ec38af8d9348d49550faf55f18c1d9f281054ffbe9a13132e9a05e0542a376762a4d799b6b4f0311f62189f67e7708285a203492767e25e6bc4d28d6d3f8d9f50c2660483f8f942ecb733e84f8619101c2ec2ec357bec450d092e6068a319a9f761d766e6ae151f3f3cb790dda0a6dbc381be1a87e4d992bc55e39f166e65d1a5997bc4d255f00c45f6264f7b459ce6fc78a91f8935fa3aa5fe8be532e06387d82f07e", 0xca}, {&(0x7f0000000700)="f32ced1978f6103c6709573259e317066e84d42f18d090e52035bcf2ddcf8761f30c8179d42f2d06e49766e18561147a88e7ab4a817816b9da02e1744bc7eb653eb04ab70b5bf5111e01923c9bd0f4b72df99f19253083a444b5fbf214a2e9fbbc352a08731643692912aebd09546ccb28837254a30d1e53084dd7f6b7114fa3825fcbae9443ec15fb31bca97a87824d4bc8b632cf971bfb523a", 0x9a}], 0x6}, 0x80) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x101d0}], 0x1, 0x0, 0xfffffffffffffe25}, 0x0) 1.639673116s ago: executing program 1 (id=2830): mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) syz_io_uring_setup(0xbe3, &(0x7f0000000280)={0x0, 0x3c14, 0x4, 0xfffffffc, 0xfffffffd}, &(0x7f0000000040), &(0x7f00000000c0)) mkdir(0x0, 0x0) chdir(0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r0, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) rmdir(&(0x7f00000001c0)='./cgroup/../file0\x00') mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240), 0x0, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = open(&(0x7f0000000780)='./bus\x00', 0x87e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r2, 0x0) fallocate(r1, 0x0, 0x0, 0x1000f4) 1.479707069s ago: executing program 0 (id=2831): io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x40}) r0 = io_uring_setup(0x2662, &(0x7f00000003c0)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0x19, 0x20000000, 0x0) 1.46557219s ago: executing program 3 (id=2832): syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000680)='./file0\x00', &(0x7f0000000700)='system.posix_acl_access\x00', &(0x7f0000000800)={{}, {0x2}, [], {0x4, 0x2}, [], {0x10, 0x7}, {0x20, 0x3}}, 0x24, 0x0) 1.334399821s ago: executing program 3 (id=2833): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x54, 0x10, 0x49920d862a92153b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x16281}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @sit={{0x8}, {0x28, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8}, @IFLA_IPTUN_6RD_PREFIX={0x2, 0xb, @rand_addr=' \x01\x00'}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}}]}, 0x54}}, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x1cc, 0x24, 0xf0b, 0x0, 0x25dfdbfb, {0x60, 0x0, 0x0, r2, {0xd, 0x9}, {0xffff, 0xfff3}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}, @TCA_STAB={0x1a0, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7, 0x23, 0x7e, 0x6, 0x2, 0x7, 0x5, 0x1}}, {0x6, 0x2, [0xa4a5]}}, {{0x1c, 0x1, {0xf, 0x3, 0x100, 0x8, 0x1, 0x2, 0x8000, 0x6}}, {0x10, 0x2, [0x40af, 0xd, 0x5, 0x1, 0x0, 0xcc]}}, {{0x1c, 0x1, {0x0, 0x9, 0x6, 0x800000, 0x1, 0x8001, 0x8, 0x2}}, {0x8, 0x2, [0x6, 0x8]}}, {{0x1c, 0x1, {0x3, 0x10, 0x2, 0x4, 0x1, 0xffffffff, 0x200, 0x3}}, {0xa, 0x2, [0x1, 0x5, 0xe53]}}, {{0x1c, 0x1, {0x2, 0x3, 0x101, 0x80, 0x2, 0x3, 0xffffffdc, 0x1}}, {0x6, 0x2, [0x1]}}, {{0x1c, 0x1, {0xc, 0x80, 0xfff, 0x3, 0x1, 0x3, 0x3, 0x6}}, {0x10, 0x2, [0x1, 0x7ff, 0x7, 0x4, 0x4, 0xc]}}, {{0x1c, 0x1, {0x5, 0x6, 0xe, 0x0, 0x0, 0x9, 0x1, 0x5}}, {0xe, 0x2, [0xd5a3, 0x1, 0x5, 0x7, 0x9]}}, {{0x1c, 0x1, {0x67, 0x5, 0x6, 0x4, 0x2, 0x7, 0x3, 0x6}}, {0x10, 0x2, [0x0, 0xfffa, 0x400, 0x81, 0x0, 0x8]}}, {{0x1c, 0x1, {0x26, 0x18, 0x1, 0x7, 0x3, 0x448d, 0x8, 0x3}}, {0xa, 0x2, [0x4, 0x0, 0x6]}}, {{0x1c, 0x1, {0x4, 0x2a, 0x7, 0x5, 0x0, 0x200, 0x3, 0x7}}, {0x12, 0x2, [0x14, 0xe, 0x9522, 0x80, 0x5, 0x3, 0x9]}}]}]}, 0x1cc}}, 0x40000) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="030700000000000000000480040007801300010062726f6164636173742d6c696e6b00001900078008000300000000000800020000000000080003000000000008000200"], 0x7c}}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r4) 1.267656176s ago: executing program 4 (id=2834): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r0, 0xffffffffffffffff, 0x0) 1.267393306s ago: executing program 0 (id=2835): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req3={0x8000, 0x6, 0x8000, 0x6, 0x5, 0x10000000}, 0x1c) setsockopt$packet_buf(r0, 0x107, 0x5, &(0x7f0000000040)="04cadf15768b882c40da23bd3c5feec284", 0x11) 1.233839679s ago: executing program 1 (id=2836): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$caif_seqpacket(0x25, 0x5, 0x2) ppoll(&(0x7f0000003240)=[{r0, 0xc440}], 0x1, &(0x7f0000003280), 0x0, 0x0) 1.21794707s ago: executing program 4 (id=2837): mknod$loop(&(0x7f0000000000)='./file0\x00', 0x100000000000600d, 0x1) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x2) r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x12, 0x0) r2 = dup2(r0, r1) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000340)={'\x00', 0x0, 0x43, 0x10000}) ioctl$BLKTRACESETUP(r2, 0x1275, 0x0) 1.131570527s ago: executing program 0 (id=2838): socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000002400)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x3}, 0x8) r4 = socket$inet6(0xa, 0x2, 0x3a) r5 = dup(r4) bind$unix(r5, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x6e) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, 0x0, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$inet_udplite(0x2, 0x2, 0x88) r6 = socket$netlink(0x10, 0x3, 0xc) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000180)={r0, 0x1, 0x3}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)={0x24, 0x0, 0x0, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x10, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x24}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c0000001000030500"/19, @ANYRES32=0x0, @ANYBLOB="000000000000f3002c00128009000100626f6e64000000001c00028008000300000202000800057200000000080004"], 0x4c}}, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r6, 0x10e, 0x1, &(0x7f0000000040)=0x7, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) 1.118479298s ago: executing program 3 (id=2839): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000200)={r3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f00000004c0)={r4}) 1.084093391s ago: executing program 2 (id=2840): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f00000001c0)={&(0x7f0000000300)=@id, 0x10, &(0x7f00000007c0)=[{&(0x7f0000000940)="5763f922081ae50887ede09da114c1daa077f9611f8aa81d1b6fa5f806897377d6aa8524a8b1d8c81597ae6a3411d62b43ead10f470c911e8223cee2d6745ff65b450f8b0b46f900c910f852", 0x4c}, {&(0x7f0000000280)="b57af26468ffde59db204ffaa467c0af523b9e6d93dd62dad3d2f90b45e80eb530982e2a1a0b9ebc2c7113d4f93982f87d0ced6312bdcaa996c13c02d027870ae0bdbed8b104a10605ae3939cfa8e7d4ae5e2f97b5958bed4a4430c01d04f980fac5e88de756ec949e14a35bfb3f32197c05b451", 0x74}, {&(0x7f00000009c0)="3d408cd47846fd99d1d1a4df38e0afdd03a817bf3b4673e575b2c253bae12d98c4d5e4e6d317ba457f2d0de6e1fbc5a43bae0d257cda31fb579139135de49db225bf75a3dea059b4a7a9808dd72eb1bd84d0cf9959907ad6b1e1ec718aa8d5004fd0acd19045d8d6e0f04b6b4497bb3126e4ad0d033ef175a58f55d0993d32bb3a10246c0e9ed8956592d6b51d4c1b3d35b68e6a354f5bdddcb0c943411abe361cd03acfa5d2f09a07700d9ce62314a233dc06de1a", 0xb5}, {&(0x7f0000000a80)="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", 0x105}, {&(0x7f0000000600)="c016c55101fc98bba00b0c2946a2b285871ce0494875c9d8979d34a99a409dcb328a6ff1e31414ec38af8d9348d49550faf55f18c1d9f281054ffbe9a13132e9a05e0542a376762a4d799b6b4f0311f62189f67e7708285a203492767e25e6bc4d28d6d3f8d9f50c2660483f8f942ecb733e84f8619101c2ec2ec357bec450d092e6068a319a9f761d766e6ae151f3f3cb790dda0a6dbc381be1a87e4d992bc55e39f166e65d1a5997bc4d255f00c45f6264f7b459ce6fc78a91f8935fa3aa5fe8be532e06387d82f07e", 0xca}, {&(0x7f0000000700)="f32ced1978f6103c6709573259e317066e84d42f18d090e52035bcf2ddcf8761f30c8179d42f2d06e49766e18561147a88e7ab4a817816b9da02e1744bc7eb653eb04ab70b5bf5111e01923c9bd0f4b72df99f19253083a444b5fbf214a2e9fbbc352a08731643692912aebd09546ccb28837254a30d1e53084dd7f6b7114fa3825fcbae9443ec15fb31bca97a87824d4bc8b632cf971bfb523a", 0x9a}], 0x6, &(0x7f0000000840)}, 0x80) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x101d0}], 0x1, 0x0, 0xfffffffffffffe25}, 0x0) 955.624411ms ago: executing program 1 (id=2841): r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) ioctl$FITRIM(r0, 0xc0185879, 0x0) 891.027837ms ago: executing program 2 (id=2842): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="02030e00d3fc02000000ab5d71acedd7c9560385dcb18906", 0x18, 0x0, &(0x7f0000000140)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) 659.369186ms ago: executing program 4 (id=2843): r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000180), &(0x7f00000001c0)={'U-', 0x7}, 0xfc8a, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000002c80)={0x0, 0x0, &(0x7f0000002c40)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01080000e0030000000e02000d00090001007300803000"], 0x50}}, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x14, 0x17, 0xa, 0x301, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x5}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000080)={0x5, 0x7}) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000200)={0x5, 0x7ff}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000140)=[{0x9, 0x0, 0x0, 0x1}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x6, 0x8, 0x8, 0x230b, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4000000, 0x0, 0xfffffffd}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0xc17a) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@usrquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2}}, {@stripe={'stripe', 0x3d, 0x2004000}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0x3, 0x43a, &(0x7f0000000780)="$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") setxattr$trusted_overlay_upper(&(0x7f00000004c0)='./file1\x00', &(0x7f0000000bc0), &(0x7f0000000c00)=ANY=[@ANYRESHEX, @ANYRES32=r2, @ANYRES64, @ANYRESOCT, @ANYRES16=r0], 0x835, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) fchmodat(0xffffffffffffff9c, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000500)={0x0, 0x401}, 0x8) syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="bd1a46f1c4e224e4cf07a981e7ef64e92d92df3b5944933c99331303f158dfaeb34e8771e434ce53fbc595c60f73dbb55afe51509d0d7595edb532256ca7570d5c59661bf6e1d8c63a3fad78b67c3ae342c087fd9fe845a57d436532d6ce66ab182c376d826f2418d18cb0b96cb4bb276823d9e6696547487a"], 0x1, 0x174, &(0x7f0000000240)="$eJzsVb1OMkEUPQPDwvfFgtpWIlgoy6LEN5DKygeQwIrExR+WRCEUa8WjkPgUFr6DhYkNFhZaYGli1uzM3fHyAJqQzEl2z7l35t47u8WZ0/AqzAP4WkzaKEJBYA1PQkACKAudO8xr/nA0Nyh+lZprlL8jfiEOR+OzVhD4g18UfzHDCiusWDXxEx7cZvCuvOxxMWkn4hhAHMdxkuvoR/A9WQAPbM+6VI/IIjZ7pHJLoAygOuxfVsPReLvXb3X9rn/uefWGu+u6e171pBf4rn4LNiKjPRIJbwFIPPUfW88BeCaD/Y9lCHY0Whe81mHmXNlYrs2wWt5D9703PcjjkfyKI2yiAOA6EixbUt0k1Kc1IZCloCbZOfXMglrYaV8EnSkERFo2gzQ9anPkTODxoL4fpUecEpeIm8Qz4jlxeneld5JUHd4oqkSAg5vWcDhQl5dWJueZnFeM+I9Lpn46yx9XysPCwsLCwsLCYkXwHQAA///lnWJh") sendmsg$DEVLINK_CMD_TRAP_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r5, 0x4140aecd, &(0x7f00000002c0)=ANY=[]) pipe2$watch_queue(&(0x7f0000000000), 0x80) 174.048606ms ago: executing program 1 (id=2844): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x6, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000580)=[{&(0x7f0000000640)=""/102396, 0xfffffd6e}, {&(0x7f0000019740)=""/242}], 0x2, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000019640)={0x0, 0x14}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000240), 0x208e24b) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x0, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00'}, 0x90) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r4 = syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) ioctl$PAGEMAP_SCAN(r4, 0xc0606610, &(0x7f00000004c0)={0x60, 0x0, &(0x7f0000165000/0x4000)=nil, &(0x7f00004fa000/0x4000)=nil, 0x0, 0x0, 0x0, 0x1ff}) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000"], 0x7c}}, 0x0) sendmsg$OSF_MSG_REMOVE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000019840)={0x14, 0x1, 0x5, 0x0, 0x0, 0x0, {0x5, 0x0, 0x7}}, 0x14}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000060a0b040000000000000000020000002800048024000180090001006d6574610000000014000280080002400000000708000140000000000900010073797a30000000000900020073797a32000000001400000011"], 0x7c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000400)={0x24, r6, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x10, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}]}]}]}, 0x24}}, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000280)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c) 173.712095ms ago: executing program 3 (id=2845): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x9b}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x4, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x0}, 0x90) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) write$FUSE_DIRENTPLUS(r3, &(0x7f0000002100)=ANY=[@ANYBLOB="b0000000000000001659ec0889419429aa5db97288b0f8a87ea8e66d9a8b"], 0xb0) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000140)=ANY=[@ANYBLOB="10000000000000"], 0x10) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@posixacl}]}}) 144.105007ms ago: executing program 0 (id=2846): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0xa08000, &(0x7f0000000240), 0xfe, 0x56b, &(0x7f00000003c0)="$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") chdir(&(0x7f0000000080)='./file0\x00') syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x80000) 72.535394ms ago: executing program 2 (id=2847): mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) syz_io_uring_setup(0xbe3, &(0x7f0000000280)={0x0, 0x3c14, 0x4, 0xfffffffc, 0xfffffffd}, &(0x7f0000000040), &(0x7f00000000c0)) mkdir(0x0, 0x0) chdir(0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r0, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) rmdir(&(0x7f00000001c0)='./cgroup/../file0\x00') mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240), 0x0, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = open(&(0x7f0000000780)='./bus\x00', 0x87e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r2, 0x0) fallocate(r1, 0x0, 0x0, 0x1000f4) 0s ago: executing program 2 (id=2848): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): ][T11166] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 538.506496][T11166] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 538.515199][T11166] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 538.530199][T11166] device vxlan0 entered promiscuous mode [ 538.560727][T11166] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 538.569684][T11166] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 538.578697][T11166] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 538.587623][T11166] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 539.006600][T10981] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 539.083134][T10981] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 539.120442][T10981] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 539.184080][T10981] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 539.622830][T10981] 8021q: adding VLAN 0 to HW filter on device bond0 [ 539.667513][T11190] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2169'. [ 539.749776][ T6084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 539.769647][ T6084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 539.830949][T10981] 8021q: adding VLAN 0 to HW filter on device team0 [ 539.898332][ T6084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 539.931242][ T6084] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 539.987066][ T6084] bridge0: port 1(bridge_slave_0) entered blocking state [ 539.994329][ T6084] bridge0: port 1(bridge_slave_0) entered forwarding state [ 540.099782][ T4950] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 540.113103][ T4950] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 540.138976][ T4950] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 540.159248][ T4950] bridge0: port 2(bridge_slave_1) entered blocking state [ 540.166505][ T4950] bridge0: port 2(bridge_slave_1) entered forwarding state [ 540.214730][ T4950] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 540.264215][ T4955] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 540.302464][ T4955] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 540.382182][ T4955] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 540.429705][ T4955] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 540.458834][ T4955] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 540.495982][T10981] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 540.553094][T10981] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 540.599155][ T4950] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 540.637372][ T4950] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 540.676947][ T4950] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 540.716999][ T4950] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 540.753028][ T4950] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 540.793123][ T6084] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 541.432732][ T4950] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 541.443901][ T4950] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 541.464054][T10981] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 541.518221][ T4950] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 541.535219][ T4950] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 541.568632][ T6084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 541.585220][ T6084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 541.616202][T10981] device veth0_vlan entered promiscuous mode [ 541.629338][ T4955] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 541.643226][ T4955] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 541.675301][T10981] device veth1_vlan entered promiscuous mode [ 541.699918][ T4950] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 541.779005][T11231] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 541.787968][T11231] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 541.797148][T11231] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 541.805984][T11231] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 541.820131][T11231] device vxlan0 entered promiscuous mode [ 541.856277][T11231] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 541.865491][T11231] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 541.874555][T11231] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 541.883643][T11231] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 542.047954][ T4955] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 542.059740][ T4955] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 542.070481][ T4950] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 542.078890][ T4950] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 542.100210][ T4955] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 542.109135][ T4955] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 542.121416][T10981] device veth0_macvtap entered promiscuous mode [ 542.150883][ T4955] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 542.178171][T10981] device veth1_macvtap entered promiscuous mode [ 542.190189][ T4950] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 542.199695][ T4950] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 542.247086][ T4950] usb 1-1: Manufacturer: syz [ 542.256379][T10981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 542.293261][ T4950] usb 1-1: config 0 descriptor?? [ 542.300229][T10981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 542.310844][T10981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 542.322475][T10981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 542.332713][T10981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 542.347935][T10981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 542.385310][T10981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 542.455998][T10981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 542.498978][T10981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 542.516824][T10981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 542.536266][T10981] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 542.568250][T10981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 542.606224][T10981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 542.623898][T10981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 542.638986][T10981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 542.655718][ T4950] rc_core: IR keymap rc-hauppauge not found [ 542.663567][ T4950] Registered IR keymap rc-empty [ 542.679672][T10981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 542.699363][ T4950] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 542.716426][T10981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 542.736076][ T4950] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input28 [ 542.747214][T10981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 542.768620][T10981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 542.787306][T10981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 542.793600][ T4950] usb 1-1: USB disconnect, device number 27 [ 542.808902][T10981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 542.846842][T10981] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 542.859437][ T4955] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 542.878469][ T4955] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 542.888176][ T4955] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 542.904568][ T4955] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 542.916421][T11250] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2181'. [ 542.937309][T10981] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.982198][T10981] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 543.002437][T10981] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 543.037706][T10981] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 543.182067][T11258] capability: warning: `syz.4.2183' uses 32-bit capabilities (legacy support in use) [ 543.440114][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 543.448424][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 543.529561][ T5411] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 543.559965][ T5411] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 543.637155][ T4950] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 543.697552][ T4950] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 544.028259][T11274] loop3: detected capacity change from 0 to 16 [ 544.041930][T11274] erofs: Unknown parameter 'ÿÿÿÿÿÿ18446744073709551615°íi‚®(ŒíˆµFïp' [ 544.487009][T11282] loop2: detected capacity change from 0 to 8 [ 544.670022][T11282] SQUASHFS error: zlib decompression failed, data probably corrupt [ 544.678534][T11282] SQUASHFS error: Failed to read block 0x9b: -5 [ 544.735162][T11284] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2186'. [ 544.774734][T11282] SQUASHFS error: Unable to read metadata cache entry [99] [ 544.800768][T11284] tipc: Enabling of bearer rejected, already enabled [ 544.830433][T11282] SQUASHFS error: Unable to read inode 0x127 [ 545.977351][T11282] loop2: detected capacity change from 0 to 32768 [ 546.008776][T11282] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.2182 (11282) [ 546.101912][T11282] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 546.149088][T11282] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 546.154344][T11313] loop3: detected capacity change from 0 to 8192 [ 546.314627][T11282] BTRFS info (device loop2): setting nodatacow, compression disabled [ 546.350202][T11282] BTRFS info (device loop2): enabling auto defrag [ 546.356704][T11282] BTRFS info (device loop2): doing ref verification [ 546.368239][T11282] BTRFS info (device loop2): using free space tree [ 547.000863][T11345] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2194'. [ 547.109254][ T3643] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 547.740167][ T3683] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 548.030485][ T5937] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 548.210056][ T3683] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 548.262571][ T3683] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 548.301339][ T3683] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 548.312716][ T3683] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 548.528859][T11376] loop2: detected capacity change from 0 to 16 [ 548.541795][T11376] erofs: Unknown parameter 'ÿÿÿÿÿÿ18446744073709551615°íi‚®(ŒíˆµFïp' [ 548.754715][T11361] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 548.840909][ T9147] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 548.856954][T11365] tipc: Enabling of bearer rejected, already enabled [ 548.870690][ T3683] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 548.889401][ T3683] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 548.908489][ T3683] usb 1-1: Manufacturer: syz [ 548.937778][ T3683] usb 1-1: config 0 descriptor?? [ 549.020095][ T5937] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 549.070220][ T5937] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 549.190306][T11361] usb 2-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 549.205303][T11361] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 549.218649][T11361] usb 2-1: config 0 descriptor?? [ 549.250180][ T5937] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 549.259265][ T5937] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 549.268942][ T5937] usb 4-1: Product: syz [ 549.277812][ T5937] usb 4-1: Manufacturer: syz [ 549.283719][ T5937] usb 4-1: SerialNumber: syz [ 549.570182][ T3683] usbhid 1-1:0.0: can't add hid device: -32 [ 549.582434][ T3683] usbhid: probe of 1-1:0.0 failed with error -32 [ 549.589105][ T5937] usb 4-1: USB disconnect, device number 24 [ 549.700141][T11361] gs_usb 2-1:0.0: Configuring for 1 interfaces [ 550.189548][T11404] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2209'. [ 550.857104][ T3683] usb 2-1: USB disconnect, device number 30 [ 550.907920][T11362] usb 1-1: USB disconnect, device number 28 [ 551.109608][T11415] netlink: 'syz.0.2213': attribute type 11 has an invalid length. [ 551.419252][T11419] loop2: detected capacity change from 0 to 16 [ 551.443488][T11419] erofs: Unknown parameter 'ÿÿÿÿÿÿ18446744073709551615°íi‚®(ŒíˆµFïp' [ 551.705806][T11415] netlink: 'syz.0.2213': attribute type 11 has an invalid length. [ 551.753936][T11415] debugfs: Directory 'netdev:' with parent 'phy15' already present! [ 552.226278][T11436] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2214'. [ 552.341598][T11436] tipc: Enabling of bearer rejected, already enabled [ 553.398271][T11463] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2222'. [ 554.543249][T11445] loop3: detected capacity change from 0 to 32768 [ 554.774081][ T4953] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 555.201155][T11482] loop4: detected capacity change from 0 to 16 [ 555.212035][T11482] erofs: Unknown parameter 'ÿÿÿÿÿÿ18446744073709551615°íi‚®(ŒíˆµFïp' [ 555.792737][ T4953] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 555.823367][ T4953] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 555.899164][T11496] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2228'. [ 555.952220][T11496] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2228'. [ 556.020296][ T4953] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 556.034832][ T4953] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.059918][ T4953] usb 3-1: Product: syz [ 556.074454][ T4953] usb 3-1: Manufacturer: syz [ 556.079103][ T4953] usb 3-1: SerialNumber: syz [ 556.103066][ T26] audit: type=1326 audit(1723413615.682:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11503 comm="syz.0.2232" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f32e57779f9 code=0x0 [ 556.411116][ T4953] usb 3-1: USB disconnect, device number 24 [ 556.462705][T11513] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2234'. [ 558.487007][T11541] netlink: 'syz.0.2243': attribute type 10 has an invalid length. [ 559.646346][T11520] loop1: detected capacity change from 0 to 32768 [ 559.673081][T11562] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2247'. [ 560.181591][T11579] loop4: detected capacity change from 0 to 16 [ 560.194708][T11579] erofs: Unknown parameter 'ÿÿÿÿÿÿ18446744073709551615°íi‚®(ŒíˆµFïp' [ 561.583460][T11584] loop3: detected capacity change from 0 to 40427 [ 561.641778][T11584] F2FS-fs (loop3): invalid crc value [ 561.696970][T11584] F2FS-fs (loop3): Found nat_bits in checkpoint [ 561.830494][T11584] F2FS-fs (loop3): Cannot turn on quotas: -2 on 1 [ 561.861975][T11584] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 561.963359][T11628] serio: Serial port pts0 [ 562.003038][T11627] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2266'. [ 562.016094][ T5411] kworker/u4:14: attempt to access beyond end of device [ 562.016094][ T5411] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 562.042944][T11584] VFS:Filesystem freeze failed [ 562.070600][T11627] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2266'. [ 562.751601][T11645] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2273'. [ 563.596135][T11636] loop4: detected capacity change from 0 to 32768 [ 564.637239][T11663] loop1: detected capacity change from 0 to 40427 [ 564.717950][T11663] F2FS-fs (loop1): invalid crc value [ 564.797480][T11663] F2FS-fs (loop1): Found nat_bits in checkpoint [ 564.875505][T11663] F2FS-fs (loop1): Cannot turn on quotas: -2 on 1 [ 564.946838][T11663] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 565.138819][ T3982] kworker/u4:13: attempt to access beyond end of device [ 565.138819][ T3982] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 565.172533][T11663] VFS:Filesystem freeze failed [ 566.135015][T11697] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2285'. [ 568.075824][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.344589][T11719] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2298'. [ 568.392958][T11719] tipc: Started in network mode [ 568.398976][T11719] tipc: Node identity 4e2636026213, cluster identity 4711 [ 568.409074][T11719] tipc: Enabled bearer , priority 10 [ 569.400054][T11362] tipc: Node number set to 741684738 [ 571.193007][T11763] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2302'. [ 572.287901][T11748] loop1: detected capacity change from 0 to 40427 [ 572.339473][T11748] F2FS-fs (loop1): invalid crc value [ 572.442312][T11748] F2FS-fs (loop1): Found nat_bits in checkpoint [ 572.588354][T11748] F2FS-fs (loop1): Cannot turn on quotas: -2 on 1 [ 572.628951][T11748] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 572.750673][T11782] loop3: detected capacity change from 0 to 8192 [ 572.799663][ T3750] kworker/u4:6: attempt to access beyond end of device [ 572.799663][ T3750] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 572.843654][T11748] VFS:Filesystem freeze failed [ 574.357189][T11790] loop1: detected capacity change from 0 to 32768 [ 574.416027][ T9147] I/O error, dev loop1, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 575.156270][ T26] audit: type=1326 audit(1723413634.732:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11811 comm="syz.3.2329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bf19779f9 code=0x7ffc0000 [ 575.283796][ T26] audit: type=1326 audit(1723413634.732:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11811 comm="syz.3.2329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bf19779f9 code=0x7ffc0000 [ 575.324379][T11819] loop3: detected capacity change from 0 to 8192 [ 575.419460][ T26] audit: type=1326 audit(1723413634.732:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11811 comm="syz.3.2329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=136 compat=0 ip=0x7f0bf19779f9 code=0x7ffc0000 [ 575.471774][ T26] audit: type=1326 audit(1723413634.732:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11811 comm="syz.3.2329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bf19779f9 code=0x7ffc0000 [ 575.497959][T11827] loop1: detected capacity change from 0 to 256 [ 575.590056][ T26] audit: type=1326 audit(1723413634.732:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11811 comm="syz.3.2329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bf19779f9 code=0x7ffc0000 [ 575.625546][ T26] audit: type=1326 audit(1723413634.732:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11811 comm="syz.3.2329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f0bf19779f9 code=0x7ffc0000 [ 575.675752][T11826] loop4: detected capacity change from 0 to 8192 [ 575.712515][ T26] audit: type=1326 audit(1723413634.732:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11811 comm="syz.3.2329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bf19779f9 code=0x7ffc0000 [ 575.726251][T11827] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 575.769262][ T26] audit: type=1326 audit(1723413634.732:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11811 comm="syz.3.2329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bf19779f9 code=0x7ffc0000 [ 575.879993][ T26] audit: type=1326 audit(1723413634.732:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11811 comm="syz.3.2329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7f0bf19779f9 code=0x7ffc0000 [ 575.902824][ T26] audit: type=1326 audit(1723413634.732:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11811 comm="syz.3.2329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bf19779f9 code=0x7ffc0000 [ 577.102609][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888059999800: rx timeout, send abort [ 577.120269][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff888059999800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 577.138192][ T3638] Bluetooth: hci5: sending frame failed (-49) [ 577.148410][ T3640] Bluetooth: hci5: Opcode 0x1003 failed: -49 [ 577.644005][T11847] input: syz0 as /devices/virtual/input/input30 [ 579.039104][T11884] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2350'. [ 579.695521][T11880] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2347'. [ 579.786485][T11880] tipc: Enabling of bearer rejected, already enabled [ 580.020209][T11359] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 580.152905][T11901] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 580.162195][T11901] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 580.170998][T11901] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 580.179718][T11901] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 580.277311][T11901] device vxlan0 entered promiscuous mode [ 580.298859][T11359] usb 5-1: Using ep0 maxpacket: 8 [ 580.320643][T11901] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 580.329616][T11901] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 580.338594][T11901] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 580.347666][T11901] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 580.430150][T11359] usb 5-1: config 1 has an invalid interface number: 128 but max is 1 [ 580.441616][T11359] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 580.472583][T11359] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 580.489869][T11359] usb 5-1: config 1 has no interface number 0 [ 580.500125][T11359] usb 5-1: config 1 interface 128 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 580.690814][T11359] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 580.714002][T11359] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 580.739041][T11359] usb 5-1: Product: syz [ 580.748855][T11359] usb 5-1: Manufacturer: syz [ 580.757664][T11359] usb 5-1: SerialNumber: syz [ 580.801122][T11359] cdc_wdm: probe of 5-1:1.128 failed with error -22 [ 580.953924][T11920] Bluetooth: MGMT ver 1.22 [ 581.006781][T11359] usb 5-1: USB disconnect, device number 23 [ 581.103885][T11929] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2364'. [ 581.839015][T11934] overlayfs: failed to resolve './file1': -2 [ 581.988435][T11935] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2366'. [ 582.098205][T11935] tipc: Enabling of bearer rejected, already enabled [ 582.300067][T11359] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 582.324385][T11958] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 582.333444][T11958] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 582.342256][T11958] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 582.351345][T11958] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 582.370828][T11958] device vxlan0 entered promiscuous mode [ 582.429951][T11958] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 582.438928][T11958] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 582.448030][T11958] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 582.457430][T11958] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 582.570006][T11359] usb 5-1: Using ep0 maxpacket: 16 [ 583.091209][T11359] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 583.167534][T11359] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 583.261945][T11359] usb 5-1: Product: syz [ 583.313175][T11359] usb 5-1: Manufacturer: syz [ 583.364701][T11359] usb 5-1: SerialNumber: syz [ 583.576544][T11359] r8152-cfgselector 5-1: config 0 descriptor?? [ 583.739652][T11978] overlayfs: failed to resolve './file1': -2 [ 583.859989][T11359] r8152-cfgselector 5-1: Unknown version 0x0000 [ 584.080101][T11359] r8152-cfgselector 5-1: Unknown version 0x0000 [ 584.088655][T11359] r8152-cfgselector 5-1: bad CDC descriptors [ 584.119994][T11359] r8152-cfgselector 5-1: Unknown version 0x0000 [ 584.156143][T11359] r8152-cfgselector 5-1: USB disconnect, device number 24 [ 584.538270][T12001] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2389'. [ 584.555994][T12002] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 584.564808][T12002] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 584.573631][T12002] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 584.582412][T12002] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 584.602993][T12002] device vxlan0 entered promiscuous mode [ 584.662372][T12002] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 584.671586][T12002] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 584.680488][T12002] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 584.689594][T12002] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 585.154721][T12016] overlayfs: failed to resolve './file1': -2 [ 585.262642][T12025] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2397'. [ 585.488627][T12032] loop1: detected capacity change from 0 to 1024 [ 585.598481][T12032] EXT4-fs: Ignoring removed oldalloc option [ 585.648287][T12032] EXT4-fs: Invalid want_extra_isize 4096 [ 585.667858][T12042] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 585.676759][T12042] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 585.685656][T12042] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 585.694429][T12042] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 585.707688][T12042] device vxlan0 entered promiscuous mode [ 585.743467][T12042] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 585.752577][T12042] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 585.761611][T12042] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 585.770593][T12042] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 585.850039][T11359] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 586.220653][T11359] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 586.244430][T11359] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 586.267641][T11359] usb 1-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 586.312308][T11359] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 586.328716][T11359] usb 1-1: config 0 descriptor?? [ 586.632711][T12066] loop4: detected capacity change from 0 to 17 [ 586.646493][T12066] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing [ 586.656459][T12066] BFS-fs: bfs_fill_super(): Impossible last inode number 229432 > 513 on loop4 [ 586.696215][T12066] loop4: detected capacity change from 0 to 512 [ 586.761404][T12066] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.2416: inode #1: comm syz.4.2416: iget: illegal inode # [ 586.806938][T12066] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.2416: error while reading EA inode 1 err=-117 [ 586.827224][T12066] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2816: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 586.828886][T11359] lg-g15 0003:046D:C222.000C: unknown main item tag 0x0 [ 586.845565][T12066] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.2416: inode #1: comm syz.4.2416: iget: illegal inode # [ 586.856437][T12073] loop1: detected capacity change from 0 to 64 [ 586.866714][T11359] lg-g15 0003:046D:C222.000C: unknown main item tag 0x0 [ 586.870947][T12066] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.2416: error while reading EA inode 1 err=-117 [ 586.874504][T11359] lg-g15 0003:046D:C222.000C: unknown main item tag 0x0 [ 586.896290][T12066] EXT4-fs (loop4): 1 orphan inode deleted [ 586.906292][T11359] lg-g15 0003:046D:C222.000C: unknown main item tag 0x0 [ 586.909999][ T3739] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 586.913871][T12066] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 586.930164][T11359] lg-g15 0003:046D:C222.000C: unknown main item tag 0x0 [ 586.964470][T11359] lg-g15 0003:046D:C222.000C: unknown main item tag 0x0 [ 586.990770][T11359] lg-g15 0003:046D:C222.000C: unknown main item tag 0x0 [ 586.997798][T11359] lg-g15 0003:046D:C222.000C: unknown main item tag 0x0 [ 587.012280][T11359] lg-g15 0003:046D:C222.000C: unknown main item tag 0x0 [ 587.025169][T11359] lg-g15 0003:046D:C222.000C: unknown main item tag 0x0 [ 587.051421][T11359] lg-g15 0003:046D:C222.000C: unknown main item tag 0x0 [ 587.092782][T11359] lg-g15 0003:046D:C222.000C: hidraw0: USB HID v0.00 Device [HID 046d:c222] on usb-dummy_hcd.0-1/input0 [ 587.147533][T11359] usb 1-1: USB disconnect, device number 29 [ 587.230499][T12076] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 587.239299][T12076] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 587.248238][T12076] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 587.257025][T12076] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 587.336210][T12076] device vxlan0 entered promiscuous mode [ 587.347955][T12076] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 587.357196][T12076] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 587.366614][T12076] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 587.375687][T12076] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 587.385796][ T3739] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 587.396912][ T3739] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 587.407005][ T3739] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 587.420413][ T3739] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 587.429964][ T3739] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 587.439861][ T3739] usb 3-1: config 0 descriptor?? [ 587.610444][T12080] EXT4-fs error (device loop4): ext4_find_dest_de:2113: inode #2: block 13: comm syz.4.2416: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 587.647975][T12066] EXT4-fs error (device loop4): ext4_lookup:1860: inode #2: comm syz.4.2416: deleted inode referenced: 15 [ 587.761878][T12085] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2420'. [ 588.570024][ T3739] usbhid 3-1:0.0: can't add hid device: -71 [ 588.572328][T12084] loop3: detected capacity change from 0 to 8192 [ 588.576217][ T3739] usbhid: probe of 3-1:0.0 failed with error -71 [ 588.658700][ T3739] usb 3-1: USB disconnect, device number 25 [ 589.316845][T12066] EXT4-fs error (device loop4): ext4_lookup:1860: inode #2: comm syz.4.2416: deleted inode referenced: 15 [ 589.363785][T12101] loop2: detected capacity change from 0 to 2048 [ 589.403603][T12080] EXT4-fs error (device loop4): ext4_find_dest_de:2113: inode #2: block 13: comm syz.4.2416: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 589.477289][T12101] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 589.687115][T12066] EXT4-fs error (device loop4): ext4_find_dest_de:2113: inode #2: block 13: comm syz.4.2416: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 589.724266][ T3643] EXT4-fs (loop2): unmounting filesystem. [ 589.764760][T12066] EXT4-fs error (device loop4): ext4_find_dest_de:2113: inode #2: block 13: comm syz.4.2416: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 589.873871][T12118] random: crng reseeded on system resumption [ 590.065481][ T3639] EXT4-fs (loop4): unmounting filesystem. [ 590.202466][T12128] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2433'. [ 591.130059][T12139] loop3: detected capacity change from 0 to 1024 [ 591.174232][T12135] loop4: detected capacity change from 0 to 8192 [ 591.183403][T12139] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 591.280074][T12139] loop3: detected capacity change from 1024 to 1023 [ 591.426348][ T5693] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 16: comm syz-executor: path /406/file1: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=33619980, rec_len=46, size=1024 fake=0 [ 591.453162][T12154] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2442'. [ 591.479994][T11359] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 591.539489][ T5693] EXT4-fs (loop3): unmounting filesystem. [ 591.720210][T11359] usb 3-1: Using ep0 maxpacket: 16 [ 591.802613][ T6769] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.850248][T11359] usb 3-1: config 0 has no interfaces? [ 591.855782][T11359] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 591.874193][T11359] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 591.893656][T11359] usb 3-1: config 0 descriptor?? [ 592.043877][ T6769] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 592.240895][ T6769] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 592.262289][T11359] usb 3-1: USB disconnect, device number 26 [ 592.453953][ T3640] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 592.465143][ T3640] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 592.477252][ T6769] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 592.488191][ T3640] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 592.498490][ T3640] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 592.576889][T12177] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2448'. [ 592.639138][ T3638] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 592.651610][ T3638] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 592.830080][ T4953] usb 1-1: new full-speed USB device number 30 using dummy_hcd [ 593.280106][ T4953] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 593.299258][ T4953] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 593.309767][ T4953] usb 1-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x76, skipping [ 593.311655][T12187] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2454'. [ 593.321732][ T4953] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 593.373477][ T4953] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 593.440134][T12174] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 593.467734][ T4953] hub 1-1:1.0: bad descriptor, ignoring hub [ 593.476820][ T4953] hub: probe of 1-1:1.0 failed with error -5 [ 593.497471][ T4953] cdc_wdm 1-1:1.0: skipping garbage [ 593.520526][T12170] chnl_net:caif_netlink_parms(): no params data found [ 593.534427][ T4953] cdc_wdm 1-1:1.0: skipping garbage [ 593.553135][ T6769] tipc: Disabling bearer [ 593.557427][ T4953] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 593.565462][ T6769] tipc: Left network mode [ 593.651383][T12196] overlayfs: failed to resolve './file0': -2 [ 593.800101][ T3683] usb 1-1: USB disconnect, device number 30 [ 593.989846][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 594.090170][T12170] bridge0: port 1(bridge_slave_0) entered blocking state [ 594.097312][T12170] bridge0: port 1(bridge_slave_0) entered disabled state [ 594.120103][ T4953] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 594.132053][T12170] device bridge_slave_0 entered promiscuous mode [ 594.146648][T12170] bridge0: port 2(bridge_slave_1) entered blocking state [ 594.161136][T12170] bridge0: port 2(bridge_slave_1) entered disabled state [ 594.186291][T12170] device bridge_slave_1 entered promiscuous mode [ 594.254118][T12228] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2465'. [ 594.269169][T12229] loop2: detected capacity change from 0 to 64 [ 594.409853][ T4953] usb 2-1: Using ep0 maxpacket: 8 [ 594.501095][T12170] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 594.530301][ T4953] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 594.539047][ T4953] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 594.562272][T12170] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 594.580335][ T4953] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 594.589423][ T4953] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 594.710390][ T3651] Bluetooth: hci4: command tx timeout [ 594.764989][T12243] overlayfs: failed to resolve './file0': -2 [ 594.841418][T12170] team0: Port device team_slave_0 added [ 594.938678][T12170] team0: Port device team_slave_1 added [ 595.018658][T12250] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2472'. [ 595.056974][T12170] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 595.072367][T12170] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 595.134418][T12170] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 595.207432][T12170] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 595.226040][T12256] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2475'. [ 595.227642][T12170] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 595.320790][T12170] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 595.522517][T12271] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond_slave_1, syncid = -4, id = 0 [ 595.533651][T12268] IPVS: stopping backup sync thread 12271 ... [ 595.686720][T12279] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 595.720705][T12279] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 595.798449][T12170] device hsr_slave_0 entered promiscuous mode [ 595.809508][T12170] device hsr_slave_1 entered promiscuous mode [ 595.819555][T12170] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 595.833310][T12170] Cannot create hsr debugfs directory [ 595.842629][T12284] overlayfs: failed to resolve './file0': -2 [ 596.213745][ T6769] device hsr_slave_0 left promiscuous mode [ 596.237898][T12299] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2485'. [ 596.275374][ T6769] device hsr_slave_1 left promiscuous mode [ 596.300161][ T6769] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 596.307632][ T6769] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 596.371386][ T6769] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 596.379145][ T6769] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 596.417136][ T6769] device bridge_slave_1 left promiscuous mode [ 596.430656][ T6769] bridge0: port 2(bridge_slave_1) entered disabled state [ 596.447951][ T6769] device bridge_slave_0 left promiscuous mode [ 596.470417][ T6769] bridge0: port 1(bridge_slave_0) entered disabled state [ 596.577308][ T6769] device veth1_macvtap left promiscuous mode [ 596.593351][ T6769] device veth0_macvtap left promiscuous mode [ 596.620097][ T6769] device veth1_vlan left promiscuous mode [ 596.625965][ T6769] device veth0_vlan left promiscuous mode [ 596.791554][ T3638] Bluetooth: hci4: command tx timeout [ 596.955344][ T3683] usb 2-1: USB disconnect, device number 31 [ 597.031214][ T4953] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 597.290152][ T4953] usb 5-1: Using ep0 maxpacket: 8 [ 597.353200][T12331] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2497'. [ 597.439066][ T4953] usb 5-1: config 1 has an invalid interface number: 128 but max is 1 [ 597.447746][ T4953] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 597.458724][ T4953] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 597.468412][ T4953] usb 5-1: config 1 has no interface number 0 [ 597.475119][ T4953] usb 5-1: config 1 interface 128 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 597.651424][ T4953] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 597.660892][ T4953] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 597.669117][ T4953] usb 5-1: Product: syz [ 597.674425][ T4953] usb 5-1: Manufacturer: syz [ 597.679274][ T4953] usb 5-1: SerialNumber: syz [ 597.733313][ T4953] cdc_wdm 5-1:1.128: skipping garbage [ 597.754435][ T4953] cdc_wdm 5-1:1.128: skipping garbage [ 597.759966][ T4953] cdc_wdm: probe of 5-1:1.128 failed with error -22 [ 597.788160][ T6769] team0 (unregistering): Port device team_slave_1 removed [ 597.942762][ T4953] usb 5-1: USB disconnect, device number 25 [ 597.978926][ T6769] team0 (unregistering): Port device team_slave_0 removed [ 598.063200][ T6769] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 598.164426][ T6769] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 598.766610][T12356] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2507'. [ 598.879958][ T3651] Bluetooth: hci4: command tx timeout [ 598.982901][ T6769] bond0 (unregistering): Released all slaves [ 599.111019][T12359] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2508'. [ 599.466378][T12369] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2511'. [ 599.838120][T12386] loop2: detected capacity change from 0 to 64 [ 600.149503][T12393] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2517'. [ 600.313261][T12398] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2518'. [ 600.589292][T12170] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 600.627988][T12170] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 600.646556][T12170] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 600.692031][T12170] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 600.925384][T12170] 8021q: adding VLAN 0 to HW filter on device bond0 [ 600.949453][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 600.957120][ T3638] Bluetooth: hci4: command tx timeout [ 600.966734][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 600.988354][T12170] 8021q: adding VLAN 0 to HW filter on device team0 [ 601.001106][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 601.010723][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 601.019294][ T3739] bridge0: port 1(bridge_slave_0) entered blocking state [ 601.026471][ T3739] bridge0: port 1(bridge_slave_0) entered forwarding state [ 601.044499][ T4955] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 601.052991][ T4955] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 601.068370][ T4955] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 601.077818][ T4955] bridge0: port 2(bridge_slave_1) entered blocking state [ 601.085006][ T4955] bridge0: port 2(bridge_slave_1) entered forwarding state [ 601.100778][ T4955] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 601.133220][ T5937] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 601.233909][ T5937] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 601.254517][ T5937] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 601.274613][ T5937] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 601.291551][ T5937] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 601.315841][ T5937] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 601.337131][ T5937] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 601.358939][ T5937] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 601.383637][T12170] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 601.419256][ T4955] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 601.432900][ T4955] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 602.088415][T12170] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 602.141065][T11362] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 602.148658][T11362] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 602.182567][T12448] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2530'. [ 602.257377][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 602.290242][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 602.361433][T11362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 602.369619][T11362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 602.448763][T12170] device veth0_vlan entered promiscuous mode [ 602.475857][T11362] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 602.504040][T11362] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 602.538074][T12170] device veth1_vlan entered promiscuous mode [ 602.674787][ T4950] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 602.693084][ T4950] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 602.734195][T12170] device veth0_macvtap entered promiscuous mode [ 602.770068][T12170] device veth1_macvtap entered promiscuous mode [ 602.878307][T12170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 602.908827][T12170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 602.979672][T12170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 603.032230][T12170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 603.077857][T12170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 603.150276][T12170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 603.184367][T12170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 603.203441][T12471] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2537'. [ 603.233595][T12170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 603.279844][T12170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 603.344484][T12170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 603.397934][T12170] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 603.438818][T11362] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 603.455004][T11362] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 603.489429][T11362] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 603.547515][T11362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 603.577135][T12170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 603.608530][T12170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 603.637503][T12170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 603.669958][T12170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 603.717894][T12170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 603.767785][T12170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 603.816689][T12170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 603.865461][T12170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 603.907669][T12170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 603.963350][T12170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 604.011382][T12170] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 604.043695][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 604.057817][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 604.091516][T12170] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 604.143809][T12170] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 604.169988][T12170] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 604.178744][T12170] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 604.495816][ T3752] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 604.514248][ T3752] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 604.590040][T11362] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 604.653334][T12499] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2542'. [ 604.678441][ T3752] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 604.698388][ T3752] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 604.750619][T11362] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 604.927401][T12505] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2543'. [ 605.186969][T12521] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=167772160 (335544320 ns) > initial count (40 ns). Using initial count to start timer. [ 605.246295][T12513] kvm: pic: non byte write [ 605.650450][T12533] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2553'. [ 606.087923][T12547] hfsplus: unable to find HFS+ superblock [ 606.201596][T12549] RDS: rds_bind could not find a transport for 0:0:6400::, load rds_tcp or rds_rdma? [ 606.812784][T12555] loop3: detected capacity change from 0 to 8192 [ 607.894583][T12584] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 609.581441][T12617] loop3: detected capacity change from 0 to 164 [ 610.028690][T12617] syz.3.2575: attempt to access beyond end of device [ 610.028690][T12617] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 610.043677][T12617] syz.3.2575: attempt to access beyond end of device [ 610.043677][T12617] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 610.086515][T12617] syz.3.2575: attempt to access beyond end of device [ 610.086515][T12617] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 610.103798][T12617] syz.3.2575: attempt to access beyond end of device [ 610.103798][T12617] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 610.119320][T12617] syz.3.2575: attempt to access beyond end of device [ 610.119320][T12617] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 610.133241][T12617] syz.3.2575: attempt to access beyond end of device [ 610.133241][T12617] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 610.148767][T12617] syz.3.2575: attempt to access beyond end of device [ 610.148767][T12617] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 610.162756][T12617] syz.3.2575: attempt to access beyond end of device [ 610.162756][T12617] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 610.176661][T12617] syz.3.2575: attempt to access beyond end of device [ 610.176661][T12617] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 610.191919][T12617] syz.3.2575: attempt to access beyond end of device [ 610.191919][T12617] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 610.389979][ T26] kauditd_printk_skb: 2 callbacks suppressed [ 610.389996][ T26] audit: type=1800 audit(1723413669.632:100): pid=12617 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2575" name="file0" dev="loop3" ino=1862 res=0 errno=0 [ 613.723024][ T3651] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 613.735787][ T3651] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 613.745723][ T3651] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 613.755286][ T3651] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 613.763473][ T3651] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 613.771102][ T3651] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 613.809913][ T4950] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 614.028070][T12638] loop3: detected capacity change from 0 to 40427 [ 614.054613][T12638] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 614.070233][T12638] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 614.170295][ T4950] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 614.181580][ T4950] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 614.193121][T12638] F2FS-fs (loop3): Found nat_bits in checkpoint [ 614.209898][ T4950] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 614.224316][ T4950] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 614.240414][ T4950] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 614.258639][ T4950] usb 2-1: config 0 descriptor?? [ 614.298830][T12638] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 614.317493][T12638] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 614.333493][T12639] chnl_net:caif_netlink_parms(): no params data found [ 614.366381][T12638] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 614.386997][T12638] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 614.461918][T12639] bridge0: port 1(bridge_slave_0) entered blocking state [ 614.469556][T12639] bridge0: port 1(bridge_slave_0) entered disabled state [ 614.499147][T12639] device bridge_slave_0 entered promiscuous mode [ 614.539732][T12639] bridge0: port 2(bridge_slave_1) entered blocking state [ 614.547544][T12639] bridge0: port 2(bridge_slave_1) entered disabled state [ 614.602603][T12639] device bridge_slave_1 entered promiscuous mode [ 614.722969][T12639] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 614.741795][ T4950] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 614.766731][ T4950] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 614.776885][T12639] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 614.796364][ T4950] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 614.820105][ T4950] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 614.840660][ T4950] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 614.848203][ T4950] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 614.863932][ T4950] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 614.875227][ T4950] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 614.887275][ T4950] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 614.898322][ T4950] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 614.911990][ T4950] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 614.922571][ T4950] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 614.930188][ T4950] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 614.937754][ T4950] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 614.946511][ T4950] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 614.955897][ T4950] plantronics 0003:047F:FFFF.000D: No inputs registered, leaving [ 614.969421][ T4950] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 614.989017][ T4950] usb 2-1: USB disconnect, device number 32 [ 615.099460][T12639] team0: Port device team_slave_0 added [ 615.127020][T12639] team0: Port device team_slave_1 added [ 615.152795][T12667] loop3: detected capacity change from 0 to 512 [ 615.177660][T12667] EXT4-fs: Ignoring removed bh option [ 615.193801][T12667] EXT4-fs: Ignoring removed mblk_io_submit option [ 615.213682][T12639] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 615.222332][T12639] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 615.248942][T12639] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 615.265235][T12667] EXT4-fs error (device loop3): ext4_find_inline_data_nolock:164: inode #12: comm syz.3.2589: inline data xattr refers to an external xattr inode [ 615.266051][T12639] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 615.287593][T12639] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 615.300108][T12667] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz.3.2589: couldn't read orphan inode 12 (err -117) [ 615.314321][T12639] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 615.360564][T12667] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 615.418768][T12639] device hsr_slave_0 entered promiscuous mode [ 615.433870][T12639] device hsr_slave_1 entered promiscuous mode [ 615.451912][T12639] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 615.479861][T12639] Cannot create hsr debugfs directory [ 615.861226][ T3651] Bluetooth: hci5: command tx timeout [ 616.219358][T12170] EXT4-fs (loop3): unmounting filesystem. [ 616.745447][T12639] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 616.799942][T11359] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 616.842772][T12681] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2594'. [ 616.942677][T12639] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 616.996256][T12687] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2595'. [ 617.064741][T12639] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 617.160063][T11359] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 617.184403][T11359] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 617.245808][T12639] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 617.360190][T11359] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 617.374842][T11359] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 617.398033][T11359] usb 2-1: Product: syz [ 617.411670][T11359] usb 2-1: Manufacturer: syz [ 617.426727][T11359] usb 2-1: SerialNumber: syz [ 617.728973][T12639] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 617.737067][T11359] usb 2-1: USB disconnect, device number 33 [ 617.766398][T12639] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 617.802070][T12639] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 617.827967][T12639] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 617.910109][ T3638] Bluetooth: hci5: command tx timeout [ 618.100464][T12639] 8021q: adding VLAN 0 to HW filter on device bond0 [ 618.138363][ T4950] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 618.157232][ T4950] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 618.212531][T12639] 8021q: adding VLAN 0 to HW filter on device team0 [ 618.280118][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 618.305371][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 618.339093][T12697] loop7: detected capacity change from 0 to 16384 [ 618.352167][ T3739] bridge0: port 1(bridge_slave_0) entered blocking state [ 618.359341][ T3739] bridge0: port 1(bridge_slave_0) entered forwarding state [ 618.490132][ T4950] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 618.498734][ T4950] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 618.540942][ T4950] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 618.571258][ T4950] bridge0: port 2(bridge_slave_1) entered blocking state [ 618.578381][ T4950] bridge0: port 2(bridge_slave_1) entered forwarding state [ 618.618561][ T4950] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 618.649183][ T4950] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 618.676486][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 618.712282][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 618.720615][ T3682] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 618.735643][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 618.755612][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 618.765555][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 618.797514][T12639] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 618.814559][T12639] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 618.852856][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 618.867184][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 618.890064][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 618.908189][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 618.924894][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 619.083976][ T3682] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 619.100823][ T3682] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 619.138830][ T3682] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 619.159452][ T3682] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 619.167770][T12719] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2604'. [ 619.183866][ T3682] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 619.236296][ T3682] usb 4-1: config 0 descriptor?? [ 619.268012][ C0] eth0: bad gso: type: 1, size: 1408 [ 619.360354][T12639] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 619.377689][T11359] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 619.404237][T11359] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 619.726638][ T3682] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 619.739111][ T3682] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 619.747798][ T3682] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 619.755729][ T3682] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 619.763954][ T3682] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 619.772014][ T3682] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 619.810186][ T3682] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 619.839701][ T3682] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 619.869153][ T3682] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 619.883396][T12731] loop2: detected capacity change from 0 to 1024 [ 619.903486][ T3682] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 619.947322][ T3682] plantronics 0003:047F:FFFF.000E: No inputs registered, leaving [ 619.956637][T12731] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 619.977704][ T3682] plantronics 0003:047F:FFFF.000E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 619.990860][ T3638] Bluetooth: hci5: command tx timeout [ 620.014024][ T3682] usb 4-1: USB disconnect, device number 25 [ 620.058382][T12731] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 620.073404][ T4953] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 620.091064][ T4953] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 620.158114][ T4953] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 620.179517][ T4953] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 620.192346][T12731] 9pnet: p9_errstr2errno: server reported unknown error 18446744073 [ 620.200897][T12639] device veth0_vlan entered promiscuous mode [ 620.224555][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 620.236081][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 620.273886][T12639] device veth1_vlan entered promiscuous mode [ 620.308812][ T3643] EXT4-fs (loop2): unmounting filesystem. [ 620.327531][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 620.345136][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 620.354476][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 620.371125][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 620.389655][T12639] device veth0_macvtap entered promiscuous mode [ 620.442940][T12639] device veth1_macvtap entered promiscuous mode [ 620.469708][ T4953] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 620.482685][ T4953] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 620.534574][T12639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 620.582607][T12639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 620.609711][T12639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 620.640470][T12639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 620.682887][T12639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 620.725753][T12639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 620.764453][T12639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 620.799120][T12639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 620.828103][T12639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 620.857542][T12639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 620.889322][T12639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 620.934860][T12639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 620.968925][T12639] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 620.989336][T11359] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 621.031137][T11359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 621.083306][T12639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 621.109270][T12639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 621.133244][T12639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 621.149365][T12639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 621.184150][T12639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 621.195678][T12639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 621.206394][T12639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 621.220558][T12639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 621.231065][T12639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 621.242141][T12639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 621.252422][T12639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 621.263828][T12639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 621.288261][T12639] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 621.299494][T12759] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2614'. [ 621.319532][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 621.363291][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 621.407525][T12639] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.424159][ C0] eth0: bad gso: type: 1, size: 1408 [ 621.463539][T12639] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.500613][T12639] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.538523][T12639] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.724014][T12770] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=167772160 (335544320 ns) > initial count (40 ns). Using initial count to start timer. [ 621.772128][ T3882] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 621.788535][ T3882] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 621.887140][T12767] kvm: pic: non byte write [ 621.915090][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 621.916180][ T5411] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 621.950273][ T5411] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 622.070717][ T5937] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 622.070830][ T3638] Bluetooth: hci5: command tx timeout [ 622.547841][T12791] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2626'. [ 622.700408][ C0] eth0: bad gso: type: 1, size: 1408 [ 623.766686][T12806] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 623.775651][T12806] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 623.784431][T12806] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 623.793242][T12806] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 623.806746][T12806] device vxlan0 entered promiscuous mode [ 623.847501][T12806] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 623.856649][T12806] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 623.865648][T12806] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 623.874585][T12806] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 623.920129][ T5937] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 624.169955][ T5937] usb 2-1: Using ep0 maxpacket: 16 [ 624.299994][ T5937] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 624.329443][ T5937] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 624.353098][ T5937] usb 2-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 624.429429][ T5937] usb 2-1: config 0 interface 0 has no altsetting 0 [ 624.438653][T12772] loop2: detected capacity change from 0 to 40427 [ 624.449447][ T5937] usb 2-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00 [ 624.462453][T12772] F2FS-fs (loop2): Unrecognized mount option "" or missing value [ 624.468805][ T5937] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 624.488067][T12820] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2637'. [ 624.508217][ T5937] usb 2-1: config 0 descriptor?? [ 624.908387][T12834] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 624.917332][T12834] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 624.926117][T12834] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 624.934906][T12834] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 624.970675][ T5937] hid (null): invalid report_count -1900850887 [ 624.989079][ T5937] hid (null): usage index exceeded [ 625.014397][ T5937] hid-generic 0003:045E:05DA.000F: invalid report_count -1900850887 [ 625.032534][ T5937] hid-generic 0003:045E:05DA.000F: item 0 4 1 9 parsing failed [ 625.052753][ T5937] hid-generic: probe of 0003:045E:05DA.000F failed with error -22 [ 625.108360][T12834] device vxlan0 entered promiscuous mode [ 625.141984][T12834] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 625.151564][T12834] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 625.160616][T12834] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 625.169505][T12834] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 625.188139][ T4953] usb 2-1: USB disconnect, device number 34 [ 625.477721][T12843] random: crng reseeded on system resumption [ 625.555439][T12832] loop4: detected capacity change from 0 to 32768 [ 625.592107][T12832] XFS: ikeep mount option is deprecated. [ 625.608276][T12846] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2649'. [ 625.608668][T12832] XFS: ikeep mount option is deprecated. [ 625.688650][T12832] XFS (loop4): Mounting V5 Filesystem [ 625.807243][T12856] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2651'. [ 625.834545][T12832] XFS (loop4): Ending clean mount [ 625.960362][T12639] XFS (loop4): Unmounting Filesystem [ 626.349966][ T5937] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 626.357830][ T4953] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 626.609953][ T5937] usb 1-1: Using ep0 maxpacket: 8 [ 626.693745][T12873] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 626.702921][T12873] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 626.711705][T12873] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 626.720461][T12873] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 626.729588][T12873] device vxlan0 entered promiscuous mode [ 626.738220][T12873] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 626.747515][T12873] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 626.756597][T12873] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 626.765654][T12873] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 626.781379][ T5937] usb 1-1: config 1 has an invalid interface number: 128 but max is 1 [ 626.790214][ T4953] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 626.805982][ T5937] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 626.816746][ T4953] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 626.826778][ T5937] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 626.836011][ T4953] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 626.849118][ T5937] usb 1-1: config 1 has no interface number 0 [ 626.855569][ T4953] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 626.865039][ T5937] usb 1-1: config 1 interface 128 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 626.876288][ T4953] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 626.902792][ T4953] usb 4-1: config 0 descriptor?? [ 627.049065][T10981] cgroup: fork rejected by pids controller in /syz1 [ 627.064325][ T5937] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 627.075592][ T5937] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 627.084334][ T5937] usb 1-1: Product: syz [ 627.088529][ T5937] usb 1-1: Manufacturer: syz [ 627.093572][ T5937] usb 1-1: SerialNumber: syz [ 627.158564][ T5937] cdc_wdm 1-1:1.128: skipping garbage [ 627.164557][ T5937] cdc_wdm: probe of 1-1:1.128 failed with error -22 [ 627.260096][ T4955] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 627.365986][ T5937] usb 1-1: USB disconnect, device number 31 [ 627.384368][ T4953] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 627.400679][ T4953] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 627.418529][ T4953] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 627.426637][ T4953] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 627.452447][ T4953] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 627.474737][ T4953] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 627.486354][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 627.492134][ T4953] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 627.511358][ T4955] usb 3-1: Using ep0 maxpacket: 8 [ 627.522591][T12885] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2664'. [ 627.524062][ T4953] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 627.547361][ T4953] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 627.555267][ T4953] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 627.571900][ T4953] plantronics 0003:047F:FFFF.0010: No inputs registered, leaving [ 627.597390][ T4953] plantronics 0003:047F:FFFF.0010: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 627.644616][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 627.651443][ T4953] usb 4-1: USB disconnect, device number 26 [ 627.661398][ T4955] usb 3-1: config 1 has an invalid interface number: 128 but max is 1 [ 627.669588][ T4955] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 627.696886][ T4955] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 627.709611][ T4955] usb 3-1: config 1 has no interface number 0 [ 627.725087][ T4955] usb 3-1: config 1 interface 128 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 627.817890][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 627.930167][ T4955] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 627.953255][ T4955] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 627.958148][ T3651] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 627.973611][ T3651] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 627.981081][ T4955] usb 3-1: Product: syz [ 627.985492][ T3651] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 627.985554][ T4955] usb 3-1: Manufacturer: syz [ 628.006536][ T4955] usb 3-1: SerialNumber: syz [ 628.006553][ T3651] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 628.024548][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 628.024560][ T3651] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 628.024802][ T3651] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 628.049948][ T5937] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 628.065101][ T4955] cdc_wdm 3-1:1.128: skipping garbage [ 628.081337][ T4955] cdc_wdm: probe of 3-1:1.128 failed with error -22 [ 628.264750][ T11] tipc: Disabling bearer [ 628.280326][T11362] usb 3-1: USB disconnect, device number 27 [ 628.295366][ T11] tipc: Left network mode [ 628.320860][T12899] random: crng reseeded on system resumption [ 628.432237][ T5937] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 628.462076][ T5937] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 628.660318][ T5937] usb 5-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 628.668520][T12889] chnl_net:caif_netlink_parms(): no params data found [ 628.679734][ T5937] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 628.688681][ T5937] usb 5-1: Product: syz [ 628.693333][ T5937] usb 5-1: Manufacturer: syz [ 628.703180][ T5937] usb 5-1: SerialNumber: syz [ 628.715037][ T5937] usb 5-1: config 0 descriptor?? [ 628.740109][T12888] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 628.757768][T12888] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 628.986667][T12888] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 628.998121][T12919] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 629.007203][T12919] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 629.015994][T12919] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 629.024782][T12919] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 629.036331][T12888] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 629.044774][T12919] device vxlan0 entered promiscuous mode [ 629.055322][T12919] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 629.064379][T12919] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 629.073383][T12919] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 629.082309][T12919] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 629.109991][ T4955] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 629.120549][T12889] bridge0: port 1(bridge_slave_0) entered blocking state [ 629.127660][T12889] bridge0: port 1(bridge_slave_0) entered disabled state [ 629.136603][T12889] device bridge_slave_0 entered promiscuous mode [ 629.187652][T12889] bridge0: port 2(bridge_slave_1) entered blocking state [ 629.198764][T12889] bridge0: port 2(bridge_slave_1) entered disabled state [ 629.208356][T12889] device bridge_slave_1 entered promiscuous mode [ 629.313396][T12889] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 629.333815][T12928] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2673'. [ 629.362318][T12889] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 629.370331][ T4955] usb 1-1: Using ep0 maxpacket: 32 [ 629.495470][ T5937] dm9601: No valid MAC address in EEPROM, using d2:83:d4:2c:1b:ae [ 629.520152][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 629.530711][ T4955] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 629.540270][ T4955] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 629.551594][ T4955] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 629.563350][ T4955] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 629.576643][ T4955] usb 1-1: config 0 interface 0 has no altsetting 0 [ 629.597595][T12889] team0: Port device team_slave_0 added [ 629.684071][T12889] team0: Port device team_slave_1 added [ 629.770088][ T4955] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 629.779182][ T4955] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 629.789878][ T4955] usb 1-1: Product: syz [ 629.794206][ T4955] usb 1-1: Manufacturer: syz [ 629.798947][ T4955] usb 1-1: SerialNumber: syz [ 629.806113][ T4955] usb 1-1: config 0 descriptor?? [ 629.851255][ T4955] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 629.885677][ T4955] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 629.930175][ T5937] dm9601 5-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 629.962645][ T5937] usb 5-1: USB disconnect, device number 26 [ 630.039183][T12934] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2676'. [ 630.055362][T12889] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 630.062439][T11362] usb 1-1: USB disconnect, device number 32 [ 630.089984][T12889] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 630.100461][T11362] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 630.150389][ T3651] Bluetooth: hci0: command tx timeout [ 630.216723][T12889] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 630.253126][T12889] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 630.267430][T12889] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 630.294951][T12904] ldusb: No device or device unplugged -19 [ 630.320336][T12889] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 630.459928][ T3682] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 630.692379][T12889] device hsr_slave_0 entered promiscuous mode [ 630.713211][T12889] device hsr_slave_1 entered promiscuous mode [ 630.744398][T12889] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 630.780110][T12889] Cannot create hsr debugfs directory [ 630.829515][ T11] device hsr_slave_0 left promiscuous mode [ 630.840074][ T3682] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 630.851484][ T11] device hsr_slave_1 left promiscuous mode [ 630.867035][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 630.869735][ T3682] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 630.895528][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 630.904846][ T3682] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 630.920679][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 630.942515][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 630.948750][ T3682] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 630.960464][ T11] device bridge_slave_1 left promiscuous mode [ 630.966693][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 630.987136][ T3682] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 630.998148][ T11] device bridge_slave_0 left promiscuous mode [ 631.010929][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 631.021295][ T3682] usb 4-1: config 0 descriptor?? [ 631.090062][ T4950] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 631.109394][ T11] device veth1_macvtap left promiscuous mode [ 631.127590][ T11] device veth0_macvtap left promiscuous mode [ 631.138244][ T11] device veth1_vlan left promiscuous mode [ 631.158253][ T11] device veth0_vlan left promiscuous mode [ 631.359838][ T4950] usb 3-1: Using ep0 maxpacket: 8 [ 631.490089][ T4950] usb 3-1: config 1 has an invalid interface number: 128 but max is 1 [ 631.504846][ T4950] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 631.512215][ T3682] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 631.529888][ T4950] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 631.550502][T12959] loop4: detected capacity change from 0 to 40427 [ 631.565270][ T4950] usb 3-1: config 1 has no interface number 0 [ 631.574227][ T4950] usb 3-1: config 1 interface 128 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 631.598266][ T3682] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 631.598354][T12959] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 631.616294][T12959] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 631.623586][ T3682] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 631.635268][T12959] F2FS-fs (loop4): invalid crc value [ 631.636807][ T3682] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 631.657404][ T3682] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 631.666096][ T3682] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 631.678531][ T3682] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 631.679331][T12959] F2FS-fs (loop4): Found nat_bits in checkpoint [ 631.716083][ T3682] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 631.742394][ T3682] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 631.763986][ T3682] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 631.794361][ T3682] plantronics 0003:047F:FFFF.0011: No inputs registered, leaving [ 631.810017][ T4950] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 631.821835][ T4950] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 631.834765][ T4950] usb 3-1: Product: syz [ 631.838981][ T4950] usb 3-1: Manufacturer: syz [ 631.844537][ T4950] usb 3-1: SerialNumber: syz [ 631.850845][T12959] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 631.852115][ T3682] plantronics 0003:047F:FFFF.0011: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 631.858144][T12959] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 631.920529][ T4950] cdc_wdm 3-1:1.128: skipping garbage [ 631.925919][ T4950] cdc_wdm 3-1:1.128: skipping garbage [ 631.932433][ T4950] cdc_wdm: probe of 3-1:1.128 failed with error -22 [ 631.976193][ T3682] usb 4-1: USB disconnect, device number 27 [ 632.208878][ T4953] usb 3-1: USB disconnect, device number 28 [ 632.230158][ T3651] Bluetooth: hci0: command tx timeout [ 632.558291][T12976] loop3: detected capacity change from 0 to 8192 [ 632.575818][T12979] random: crng reseeded on system resumption [ 633.481748][T12988] loop3: detected capacity change from 0 to 16 [ 633.489260][T12988] erofs: (device loop3): mounted with root inode @ nid 36. [ 633.580075][ T4953] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 633.731352][ T11] team0 (unregistering): Port device team_slave_1 removed [ 633.787187][ T11] team0 (unregistering): Port device team_slave_0 removed [ 633.800361][ T4953] usb 1-1: device descriptor read/64, error -71 [ 633.855965][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 633.952845][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 634.079893][ T4953] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 634.098298][T12996] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2689'. [ 634.300448][ T4953] usb 1-1: device descriptor read/64, error -71 [ 634.309970][ T3651] Bluetooth: hci0: command tx timeout [ 634.430049][ T4953] usb usb1-port1: attempt power cycle [ 634.855687][ T4953] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 634.874224][ T11] bond0 (unregistering): Released all slaves [ 634.950052][ T4953] usb 1-1: device descriptor read/8, error -71 [ 635.004886][T12986] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2688'. [ 635.219911][ T4953] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 635.246104][T13003] loop3: detected capacity change from 0 to 1024 [ 635.340119][ T4953] usb 1-1: device descriptor read/8, error -71 [ 635.354845][T13003] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 635.386842][T13006] loop2: detected capacity change from 0 to 2048 [ 635.470014][ T4953] usb usb1-port1: unable to enumerate USB device [ 635.519867][T13006] loop2: p1 < > p4 [ 635.587402][T13006] loop2: p4 size 8388608 extends beyond EOD, truncated [ 636.163269][ T8960] udevd[8960]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 636.225055][ T3882] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 636.245568][ T3882] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 64 with error 28 [ 636.259030][ T3882] EXT4-fs (loop3): This should not happen!! Data will be lost [ 636.259030][ T3882] [ 636.269136][ T3882] EXT4-fs (loop3): Total free blocks count 0 [ 636.272609][ T9147] udevd[9147]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 636.275271][ T3882] EXT4-fs (loop3): Free/Dirty block details [ 636.288343][ T8960] udevd[8960]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 636.290996][ T3882] EXT4-fs (loop3): free_blocks=68451041280 [ 636.306647][ T3882] EXT4-fs (loop3): dirty_blocks=64 [ 636.355783][ T3882] EXT4-fs (loop3): Block reservation details [ 636.390045][ T3651] Bluetooth: hci0: command tx timeout [ 636.394498][ T3882] EXT4-fs (loop3): i_reserved_data_blocks=4 [ 636.404470][T13020] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2695'. [ 636.413840][ T4955] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 636.515605][T12170] EXT4-fs (loop3): unmounting filesystem. [ 636.840135][ T4955] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 636.861526][ T4955] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 636.914227][ T4955] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 637.043286][ T4955] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 637.074953][ T4955] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 637.082808][T13041] loop4: detected capacity change from 0 to 16 [ 637.133986][T13041] erofs: (device loop4): mounted with root inode @ nid 36. [ 637.134757][ T4955] usb 1-1: config 0 descriptor?? [ 637.211016][T13036] loop3: detected capacity change from 0 to 8192 [ 637.336268][T12889] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 637.398698][T12889] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 637.484746][T12889] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 637.533273][T12889] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 637.672490][ T4955] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 637.705831][ T4955] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 637.767138][ T4955] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 637.809973][ T4955] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 637.855568][ T4955] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 637.900174][ T4955] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 637.907625][ T4955] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 637.951569][T12889] 8021q: adding VLAN 0 to HW filter on device bond0 [ 637.975382][ T4955] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 637.994438][T13053] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2703'. [ 638.016857][T13055] random: crng reseeded on system resumption [ 638.035727][ T4955] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 638.066245][T11356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 638.071361][ T4955] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 638.090840][T11356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 638.113762][T12889] 8021q: adding VLAN 0 to HW filter on device team0 [ 638.130449][ T4955] plantronics 0003:047F:FFFF.0012: No inputs registered, leaving [ 638.164794][ T4955] plantronics 0003:047F:FFFF.0012: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 638.165106][T11356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 638.210700][T11356] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 638.233410][T13059] loop2: detected capacity change from 0 to 16 [ 638.251028][T11356] bridge0: port 1(bridge_slave_0) entered blocking state [ 638.258201][T11356] bridge0: port 1(bridge_slave_0) entered forwarding state [ 638.263361][ T4955] usb 1-1: USB disconnect, device number 37 [ 638.308331][T13059] erofs: (device loop2): mounted with root inode @ nid 36. [ 638.386129][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 638.412003][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 638.462968][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 638.490861][ T3682] bridge0: port 2(bridge_slave_1) entered blocking state [ 638.498006][ T3682] bridge0: port 2(bridge_slave_1) entered forwarding state [ 638.540246][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 638.587239][T13065] fuse: Bad value for 'fd' [ 638.603281][T12889] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 638.669901][T12889] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 638.719131][T11356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 638.760853][T11356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 638.801676][T11356] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 638.831001][T11356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 638.872431][T11356] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 638.900718][T11356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 638.909266][T11356] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 638.975269][T11356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 639.000539][T11356] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 639.025211][T11356] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 639.065021][T11356] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 639.369833][T11356] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 639.414467][T13089] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2713'. [ 639.433160][ T3683] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 639.570049][T11356] usb 5-1: device descriptor read/64, error -71 [ 639.663872][ T4953] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 639.680243][ T4953] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 639.690320][ T3683] usb 1-1: Using ep0 maxpacket: 8 [ 639.711941][T12889] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 639.772130][ T4953] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 639.784468][ T4953] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 639.810298][ T3683] usb 1-1: config 0 has no interfaces? [ 639.816006][ T3683] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 639.825784][ T3683] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 639.837102][ T6084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 639.840125][T11356] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 639.860545][ T6084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 639.860566][ T3683] usb 1-1: config 0 descriptor?? [ 639.881710][T12889] device veth0_vlan entered promiscuous mode [ 639.900516][ T6084] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 639.908261][ T6084] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 639.915924][ T3680] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 639.942743][T12889] device veth1_vlan entered promiscuous mode [ 639.973881][T12977] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 639.982840][T12977] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 639.992138][T12977] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 640.002394][T12977] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 640.014163][T12889] device veth0_macvtap entered promiscuous mode [ 640.034603][T12889] device veth1_macvtap entered promiscuous mode [ 640.064343][T12889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 640.066871][T11356] usb 5-1: device descriptor read/64, error -71 [ 640.075043][T12889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 640.075060][T12889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 640.075075][T12889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 640.075084][T12889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 640.123543][ T6084] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 640.147423][T13081] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 640.163626][T13081] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 640.210183][T11356] usb usb5-port1: attempt power cycle [ 640.215810][ T3682] usb 1-1: USB disconnect, device number 38 [ 640.224047][T12889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 640.240310][T12889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 640.253495][T12889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 640.265098][T12889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 640.276223][T12889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 640.294722][T12889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 640.306425][T12889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 640.316827][ T3680] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 640.326615][T12889] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 640.340266][ T3680] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 640.355989][T11362] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 640.360092][ T3680] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 640.366570][T11362] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 640.386099][T11362] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 640.397083][ T3680] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 640.399464][T11362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 640.409853][ T6084] usb 3-1: Using ep0 maxpacket: 32 [ 640.417381][T12889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 640.431354][T12889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 640.431786][ T3680] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 640.458657][T12889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 640.481180][ T3680] usb 4-1: config 0 descriptor?? [ 640.487524][T12889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 640.506820][T12889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 640.518899][T12889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 640.529702][T12889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 640.543313][T12889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 640.553828][T12889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 640.564781][ T6084] usb 3-1: config 0 has no interfaces? [ 640.570444][ T6084] usb 3-1: New USB device found, idVendor=0458, idProduct=7006, bcdDevice=69.91 [ 640.579584][T12889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 640.590156][ T6084] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 640.599014][T12889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 640.611279][ T6084] usb 3-1: config 0 descriptor?? [ 640.617287][T12889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 640.630421][T11356] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 640.648377][T12889] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 640.666485][ T6084] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 640.680686][ T6084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 640.702527][T12889] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 640.719289][T12889] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 640.730093][T11356] usb 5-1: device descriptor read/8, error -71 [ 640.771097][T12889] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 640.794180][T12889] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 640.929281][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 640.959227][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 640.971884][ T3680] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 640.998965][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 641.001548][ T3680] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 641.009933][T11356] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 641.032893][ T3680] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 641.053776][ T3680] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 641.068904][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 641.107279][ T3680] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 641.117983][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 641.140422][ T3680] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 641.150474][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 641.178391][ T3680] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 641.211669][ T3680] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 641.234941][ T3680] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 641.252875][ T3680] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 641.269441][ T3680] plantronics 0003:047F:FFFF.0013: No inputs registered, leaving [ 641.318706][ T3680] plantronics 0003:047F:FFFF.0013: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 641.319865][T11356] usb 5-1: device not accepting address 30, error -71 [ 641.354830][T11356] usb usb5-port1: unable to enumerate USB device [ 641.375864][ T3680] usb 4-1: USB disconnect, device number 28 [ 641.409425][T13137] loop4: detected capacity change from 0 to 1024 [ 641.664778][ T11] hfsplus: b-tree write err: -5, ino 4 [ 641.905288][T13151] Invalid ELF header magic: != ELF [ 642.028618][T13155] usb usb5: usbfs: process 13155 (syz.0.2724) did not claim interface 0 before use [ 642.082706][T13157] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2725'. [ 642.342442][T13151] syz.3.2723 (13151): /proc/13147/oom_adj is deprecated, please use /proc/13147/oom_score_adj instead. [ 642.357521][T13169] random: crng reseeded on system resumption [ 642.963312][ T3683] usb 3-1: USB disconnect, device number 29 [ 643.229891][T13185] loop2: detected capacity change from 0 to 8192 [ 643.270323][T11356] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 643.278387][T11362] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 643.500694][T11362] usb 1-1: device descriptor read/64, error -71 [ 643.660916][T13188] netlink: 232 bytes leftover after parsing attributes in process `syz.4.2736'. [ 643.670385][T11356] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 643.705039][T11356] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 643.760043][T11356] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 643.779990][T11362] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 643.825622][T13195] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2738'. [ 643.836286][T11356] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 643.872513][T11356] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 643.912931][T11356] usb 2-1: config 0 descriptor?? [ 643.979905][T11362] usb 1-1: device descriptor read/64, error -71 [ 644.100058][T11362] usb usb1-port1: attempt power cycle [ 644.379904][ T3680] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 644.392286][T11356] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 644.399720][T11356] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 644.408923][T11356] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 644.417001][T11356] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 644.426068][T11356] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 644.433996][T11356] plantronics 0003:047F:FFFF.0014: No inputs registered, leaving [ 644.444782][T11356] plantronics 0003:047F:FFFF.0014: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 644.449988][ T4955] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 644.519967][T11362] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 644.610488][T11362] usb 1-1: device descriptor read/8, error -71 [ 644.632301][ T3680] usb 3-1: Using ep0 maxpacket: 8 [ 644.635725][ T3683] usb 2-1: USB disconnect, device number 35 [ 644.700087][T12977] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 644.739993][ T4955] usb 5-1: Using ep0 maxpacket: 8 [ 644.769981][ T3680] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 644.879951][T11362] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 644.940004][ T3680] usb 3-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 644.949157][ T3680] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 644.957390][ T3680] usb 3-1: Product: syz [ 644.961866][ T3680] usb 3-1: Manufacturer: syz [ 644.966474][ T3680] usb 3-1: SerialNumber: syz [ 644.971153][T11362] usb 1-1: device descriptor read/8, error -71 [ 644.985611][ T3680] usb 3-1: config 0 descriptor?? [ 645.032272][ T3680] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 645.050045][ T4955] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 645.059113][ T4955] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 645.067227][ T4955] usb 5-1: Product: syz [ 645.071561][T12977] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 645.084999][ T4955] usb 5-1: Manufacturer: syz [ 645.089583][ T4955] usb 5-1: SerialNumber: syz [ 645.090269][T11362] usb usb1-port1: unable to enumerate USB device [ 645.110214][T12977] usb 4-1: New USB device found, idVendor=046d, idProduct=c532, bcdDevice= 0.00 [ 645.119576][T12977] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 645.130140][ T4955] usb 5-1: config 0 descriptor?? [ 645.137794][T12977] usb 4-1: config 0 descriptor?? [ 645.202749][T12977] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 645.340709][T13220] kvm: pic: non byte write [ 645.400234][ T4955] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 645.407644][T11356] usb 4-1: USB disconnect, device number 29 [ 645.586141][T13228] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2754'. [ 645.678141][T13233] netlink: 763 bytes leftover after parsing attributes in process `syz.1.2755'. [ 645.837261][T13243] random: crng reseeded on system resumption [ 645.969861][T11356] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 646.280171][ T3683] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 646.340121][T11356] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 646.353645][T11356] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 646.369406][T11356] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 646.382773][T11356] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 646.391981][T11356] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 646.402683][T11356] usb 1-1: config 0 descriptor?? [ 646.480029][ T3683] usb 2-1: device descriptor read/64, error -71 [ 646.754510][T13255] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2763'. [ 646.780163][ T3683] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 646.905258][T11356] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 646.936056][T11356] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 646.994657][T11356] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 647.020008][ T3683] usb 2-1: device descriptor read/64, error -71 [ 647.045358][T11356] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 647.140529][ T3683] usb usb2-port1: attempt power cycle [ 647.151939][T11356] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 647.243069][T11356] plantronics 0003:047F:FFFF.0015: No inputs registered, leaving [ 647.262071][T11356] plantronics 0003:047F:FFFF.0015: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 647.278711][T11356] usb 1-1: USB disconnect, device number 43 [ 647.440254][ T3680] gspca_zc3xx: reg_r err -71 [ 647.551120][ T3683] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 647.650022][ T3683] usb 2-1: device descriptor read/8, error -71 [ 647.676252][T13261] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2765'. [ 647.720057][ T4953] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 647.800000][ T4955] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -71 [ 647.817573][ T4955] usb 5-1: USB disconnect, device number 31 [ 647.920001][ T3683] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 647.969859][ T4953] usb 4-1: Using ep0 maxpacket: 8 [ 648.020070][ T3683] usb 2-1: device descriptor read/8, error -71 [ 648.888793][ T3680] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 648.910319][ T3683] usb usb2-port1: unable to enumerate USB device [ 648.942259][ T3680] gspca_zc3xx: probe of 3-1:0.0 failed with error -71 [ 648.970056][ T4953] usb 4-1: config 1 has an invalid interface number: 128 but max is 1 [ 648.978565][ T4953] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 648.989467][ T3680] usb 3-1: USB disconnect, device number 30 [ 648.996524][ T4953] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 649.006572][ T4953] usb 4-1: config 1 has no interface number 0 [ 649.013219][ T4953] usb 4-1: config 1 interface 128 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 649.200083][ T4953] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 649.209221][ T4953] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 649.235464][T13284] overlayfs: missing 'lowerdir' [ 649.244401][ T4953] usb 4-1: Product: syz [ 649.248595][ T4953] usb 4-1: Manufacturer: syz [ 649.270703][ T4953] usb 4-1: SerialNumber: syz [ 649.330973][ T4953] cdc_wdm 4-1:1.128: skipping garbage [ 649.344394][ T4953] cdc_wdm: probe of 4-1:1.128 failed with error -22 [ 649.375214][T13284] overlayfs: failed to resolve './file1': -2 [ 649.546683][T13290] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2774'. [ 649.580019][ T3683] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 649.852582][ T3682] usb 4-1: USB disconnect, device number 30 [ 650.050328][ T3683] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 650.190119][ T3683] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 650.204900][ T3683] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 650.218339][ T3683] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 650.232686][ T3683] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 650.261499][ T3683] usb 5-1: config 0 descriptor?? [ 650.480259][T13297] loop2: detected capacity change from 0 to 8192 [ 650.752583][ T3683] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 650.782632][ T3683] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 650.807074][ T3683] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 650.816347][T13305] random: crng reseeded on system resumption [ 650.833542][ T3683] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 650.860102][ T3683] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 650.883726][ T3683] plantronics 0003:047F:FFFF.0016: No inputs registered, leaving [ 650.928427][ T3683] plantronics 0003:047F:FFFF.0016: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 650.944233][T13308] netlink: 'syz.0.2784': attribute type 10 has an invalid length. [ 650.979282][ T3683] usb 5-1: USB disconnect, device number 32 [ 651.013505][T13308] team0: Device hsr_slave_0 failed to register rx_handler [ 651.073024][T13308] tipc: Resetting bearer [ 651.607271][ T4953] kernel write not supported for file /snd/seq (pid: 4953 comm: kworker/0:12) [ 651.986367][T13334] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2788'. [ 652.010109][ T3683] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 652.260090][ T3683] usb 4-1: device descriptor read/64, error -71 [ 652.554909][ T3683] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 652.839989][ T3683] usb 4-1: device descriptor read/64, error -71 [ 652.941820][T13357] netlink: 11 bytes leftover after parsing attributes in process `syz.0.2806'. [ 652.970377][ T3683] usb usb4-port1: attempt power cycle [ 653.047978][T13361] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2808'. [ 653.059938][T11356] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 653.068292][T13363] netlink: 252 bytes leftover after parsing attributes in process `syz.0.2809'. [ 653.408503][ T3683] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 653.425759][T13374] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2811'. [ 653.551290][ T3683] usb 4-1: device descriptor read/8, error -71 [ 653.610413][T11356] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 653.982331][T11356] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 654.071861][T11356] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 654.086080][T11356] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 654.099923][T11356] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 654.109617][T11356] usb 3-1: config 0 descriptor?? [ 654.180665][T13373] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2813'. [ 654.239639][T13373] tipc: Started in network mode [ 654.250139][T13373] tipc: Node identity d6d0de0bd6fe, cluster identity 4711 [ 654.305969][T13373] tipc: Enabled bearer , priority 10 [ 654.394979][T13390] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2821'. [ 654.619085][T11356] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0 [ 654.639837][T11356] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0 [ 654.658513][T11356] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0 [ 654.771697][T11356] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0 [ 654.779485][T11356] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0 [ 654.787748][T11356] plantronics 0003:047F:FFFF.0017: No inputs registered, leaving [ 654.801883][T11356] plantronics 0003:047F:FFFF.0017: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 654.904506][T13406] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2825'. [ 655.582764][T12977] tipc: Node number set to 3071499 [ 655.631880][ T3682] usb 3-1: USB disconnect, device number 31 [ 655.648428][T13412] loop3: detected capacity change from 0 to 16 [ 655.729093][T13412] erofs: (device loop3): mounted with root inode @ nid 36. [ 655.774205][T13412] overlayfs: failed to get redirect (-117) [ 656.051555][T13426] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2833'. [ 656.479955][T13444] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2838'. [ 657.170687][T13448] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2843'. [ 657.187925][T13448] loop4: detected capacity change from 0 to 512 [ 657.200416][T13448] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 657.286217][T13448] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 657.313942][T13451] ------------[ cut here ]------------ [ 657.320114][T13451] WARNING: CPU: 1 PID: 13451 at mm/page_alloc.c:5534 __alloc_pages+0x3b7/0x770 [ 657.329106][T13451] Modules linked in: [ 657.333093][T13451] CPU: 1 PID: 13451 Comm: syz.3.2845 Not tainted 6.1.104-syzkaller #0 [ 657.341296][T13451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 657.351382][T13451] RIP: 0010:__alloc_pages+0x3b7/0x770 [ 657.356765][T13451] Code: fc ff df 0f 85 fa 00 00 00 44 89 e9 81 e1 7f ff ff ff a9 00 00 04 00 41 0f 44 cd 41 89 cd e9 ea 00 00 00 c6 05 7e 39 af 0c 01 <0f> 0b 41 83 fc 0a 0f 86 1e fd ff ff 45 31 e4 48 c7 44 24 20 0e 36 [ 657.376528][T13451] RSP: 0018:ffffc900050a79e0 EFLAGS: 00010246 [ 657.382613][T13451] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000000000 [ 657.390613][T13451] RDX: 0000000000000028 RSI: 0000000000000000 RDI: ffffc900050a7a68 [ 657.398573][T13451] RBP: ffffc900050a7b00 R08: dffffc0000000000 R09: ffffc900050a7a40 [ 657.407055][T13451] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000033 [ 657.415177][T13451] R13: 0000000000040d40 R14: 1ffff92000a14f44 R15: 1ffff92000a14f40 [ 657.423175][T13451] FS: 00007f9041dff6c0(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 657.432120][T13451] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 657.438688][T13451] CR2: 000000110c3a76b7 CR3: 0000000045e97000 CR4: 00000000003506e0 [ 657.446680][T13451] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 657.454668][T13451] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 657.462657][T13451] Call Trace: [ 657.465924][T13451] [ 657.468839][T13451] ? __warn+0x15a/0x520 [ 657.473012][T13451] ? __alloc_pages+0x3b7/0x770 [ 657.477765][T13451] ? report_bug+0x2af/0x500 [ 657.482282][T13451] ? __alloc_pages+0x3b7/0x770 [ 657.487039][T13451] ? handle_bug+0x3d/0x70 [ 657.491378][T13451] ? exc_invalid_op+0x16/0x40 [ 657.496038][T13451] ? asm_exc_invalid_op+0x16/0x20 [ 657.501073][T13451] ? __alloc_pages+0x3b7/0x770 [ 657.505823][T13451] ? zone_statistics+0x160/0x160 [ 657.510788][T13451] ? p9_fid_get+0xa0/0xa0 [ 657.515120][T13451] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 657.521117][T13451] ? print_irqtrace_events+0x210/0x210 [ 657.526564][T13451] __kmalloc_large_node+0x91/0x1d0 [ 657.531687][T13451] ? __v9fs_get_acl+0x40/0x110 [ 657.536455][T13451] __kmalloc+0x118/0x230 [ 657.540706][T13451] __v9fs_get_acl+0x40/0x110 [ 657.545632][T13451] v9fs_get_acl+0x93/0x280 [ 657.550064][T13451] v9fs_mount+0x954/0xc30 [ 657.554380][T13451] ? xfs_fs_commit_blocks+0x7b0/0x7b0 [ 657.559825][T13451] legacy_get_tree+0xeb/0x180 [ 657.564532][T13451] ? xfs_fs_commit_blocks+0x7b0/0x7b0 [ 657.569936][T13451] vfs_get_tree+0x88/0x270 [ 657.574347][T13451] do_new_mount+0x2ba/0xb40 [ 657.578836][T13451] ? ns_capable+0x85/0xe0 [ 657.583186][T13451] ? do_move_mount_old+0x160/0x160 [ 657.588291][T13451] __se_sys_mount+0x2d5/0x3c0 [ 657.592983][T13451] ? __x64_sys_mount+0xc0/0xc0 [ 657.597734][T13451] ? syscall_enter_from_user_mode+0x2e/0x230 [ 657.603737][T13451] ? lockdep_hardirqs_on+0x94/0x130 [ 657.608920][T13451] ? __x64_sys_mount+0x1c/0xc0 [ 657.613706][T13451] do_syscall_64+0x3b/0xb0 [ 657.618110][T13451] ? clear_bhb_loop+0x45/0xa0 [ 657.622803][T13451] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 657.628683][T13451] RIP: 0033:0x7f9041f779f9 [ 657.633121][T13451] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 657.652746][T13451] RSP: 002b:00007f9041dff038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 657.661179][T13451] RAX: ffffffffffffffda RBX: 00007f9042105f80 RCX: 00007f9041f779f9 [ 657.669137][T13451] RDX: 0000000020000b80 RSI: 00000000200003c0 RDI: 0000000000000000 [ 657.677119][T13451] RBP: 00007f9041fe58ee R08: 0000000020000500 R09: 0000000000000000 [ 657.685112][T13451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 657.693159][T13451] R13: 0000000000000000 R14: 00007f9042105f80 R15: 00007ffe7ab4bf98 [ 657.701158][T13451] [ 657.704172][T13451] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 657.711438][T13451] CPU: 1 PID: 13451 Comm: syz.3.2845 Not tainted 6.1.104-syzkaller #0 [ 657.719575][T13451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 657.729617][T13451] Call Trace: [ 657.732882][T13451] [ 657.735794][T13451] dump_stack_lvl+0x1e3/0x2cb [ 657.740463][T13451] ? nf_tcp_handle_invalid+0x642/0x642 [ 657.745905][T13451] ? panic+0x764/0x764 [ 657.749956][T13451] ? 0xffffffffa00038c0 [ 657.754115][T13451] ? vscnprintf+0x59/0x80 [ 657.758449][T13451] panic+0x318/0x764 [ 657.762336][T13451] ? __warn+0x169/0x520 [ 657.766827][T13451] ? memcpy_page_flushcache+0xfc/0xfc [ 657.772197][T13451] __warn+0x348/0x520 [ 657.776162][T13451] ? __alloc_pages+0x3b7/0x770 [ 657.780913][T13451] report_bug+0x2af/0x500 [ 657.785232][T13451] ? __alloc_pages+0x3b7/0x770 [ 657.789980][T13451] handle_bug+0x3d/0x70 [ 657.794217][T13451] exc_invalid_op+0x16/0x40 [ 657.798705][T13451] asm_exc_invalid_op+0x16/0x20 [ 657.803542][T13451] RIP: 0010:__alloc_pages+0x3b7/0x770 [ 657.808895][T13451] Code: fc ff df 0f 85 fa 00 00 00 44 89 e9 81 e1 7f ff ff ff a9 00 00 04 00 41 0f 44 cd 41 89 cd e9 ea 00 00 00 c6 05 7e 39 af 0c 01 <0f> 0b 41 83 fc 0a 0f 86 1e fd ff ff 45 31 e4 48 c7 44 24 20 0e 36 [ 657.828489][T13451] RSP: 0018:ffffc900050a79e0 EFLAGS: 00010246 [ 657.834540][T13451] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000000000 [ 657.842493][T13451] RDX: 0000000000000028 RSI: 0000000000000000 RDI: ffffc900050a7a68 [ 657.850449][T13451] RBP: ffffc900050a7b00 R08: dffffc0000000000 R09: ffffc900050a7a40 [ 657.858411][T13451] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000033 [ 657.866451][T13451] R13: 0000000000040d40 R14: 1ffff92000a14f44 R15: 1ffff92000a14f40 [ 657.874425][T13451] ? zone_statistics+0x160/0x160 [ 657.879381][T13451] ? p9_fid_get+0xa0/0xa0 [ 657.883695][T13451] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 657.889667][T13451] ? print_irqtrace_events+0x210/0x210 [ 657.895143][T13451] __kmalloc_large_node+0x91/0x1d0 [ 657.900245][T13451] ? __v9fs_get_acl+0x40/0x110 [ 657.904996][T13451] __kmalloc+0x118/0x230 [ 657.909221][T13451] __v9fs_get_acl+0x40/0x110 [ 657.913798][T13451] v9fs_get_acl+0x93/0x280 [ 657.918207][T13451] v9fs_mount+0x954/0xc30 [ 657.922534][T13451] ? xfs_fs_commit_blocks+0x7b0/0x7b0 [ 657.927895][T13451] legacy_get_tree+0xeb/0x180 [ 657.932558][T13451] ? xfs_fs_commit_blocks+0x7b0/0x7b0 [ 657.937914][T13451] vfs_get_tree+0x88/0x270 [ 657.942322][T13451] do_new_mount+0x2ba/0xb40 [ 657.946804][T13451] ? ns_capable+0x85/0xe0 [ 657.951128][T13451] ? do_move_mount_old+0x160/0x160 [ 657.956223][T13451] __se_sys_mount+0x2d5/0x3c0 [ 657.960888][T13451] ? __x64_sys_mount+0xc0/0xc0 [ 657.965635][T13451] ? syscall_enter_from_user_mode+0x2e/0x230 [ 657.971602][T13451] ? lockdep_hardirqs_on+0x94/0x130 [ 657.976786][T13451] ? __x64_sys_mount+0x1c/0xc0 [ 657.981534][T13451] do_syscall_64+0x3b/0xb0 [ 657.985944][T13451] ? clear_bhb_loop+0x45/0xa0 [ 657.990604][T13451] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 657.996478][T13451] RIP: 0033:0x7f9041f779f9 [ 658.000874][T13451] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 658.020471][T13451] RSP: 002b:00007f9041dff038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 658.028871][T13451] RAX: ffffffffffffffda RBX: 00007f9042105f80 RCX: 00007f9041f779f9 [ 658.036855][T13451] RDX: 0000000020000b80 RSI: 00000000200003c0 RDI: 0000000000000000 [ 658.044809][T13451] RBP: 00007f9041fe58ee R08: 0000000020000500 R09: 0000000000000000 [ 658.053198][T13451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 658.061151][T13451] R13: 0000000000000000 R14: 00007f9042105f80 R15: 00007ffe7ab4bf98 [ 658.069113][T13451] [ 658.072369][T13451] Kernel Offset: disabled [ 658.076767][T13451] Rebooting in 86400 seconds..