last executing test programs: 17.727855299s ago: executing program 4 (id=1662): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000200)=0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, 0x0, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x1, &(0x7f0000000100), 0x4) r4 = socket$kcm(0x10, 0x2, 0x10) openat$vimc2(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r5 = socket$inet_dccp(0x2, 0x6, 0x0) writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000200)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) getsockopt$inet_int(r5, 0x10d, 0xaf, &(0x7f0000000080), &(0x7f00000000c0)=0x4) sendmsg$kcm(r4, 0x0, 0x0) 12.317437709s ago: executing program 2 (id=1703): socket$packet(0x11, 0x2, 0x300) socket$inet6(0xa, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f00000005c0)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000040), 0x80) pipe2$watch_queue(&(0x7f0000000140), 0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) shmget$private(0x0, 0x4000, 0x8, &(0x7f0000001000/0x4000)=nil) statfs(&(0x7f0000000280)='./file0\x00', 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0x2) 11.339266778s ago: executing program 2 (id=1705): bpf$MAP_CREATE(0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) openat$ptp0(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0x40603d10, &(0x7f0000000040)) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000240)={0x50, 0x0, r1}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) close(r2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f00000008c0)={&(0x7f00000001c0)={0x50, 0xffffffffffffffda, 0x0, {0x7, 0x28, 0x0, 0x940000, 0x0, 0x0, 0xfff}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 11.338892558s ago: executing program 4 (id=1706): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x4, 0x8, 0x8}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESOCT=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000280)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={0x0, 0x98}}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0x402}, 0x38) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)="e4e32dd2b696733552eca3e954943a18709f72fbd259a936c67ebe806ab21823f4a0c47bff45323c2b30982dfc67b46cc9a5a07c33fc", 0xff6d}, {&(0x7f0000000100)="3a10bd003aba0c7026336b", 0xb}], 0x2, &(0x7f0000000740)=ANY=[@ANYBLOB="300000000000000017e2ffff010000001800000045f43a7ce45002bdb85e47ab3e39597e422ffab456dd963a00000000180000000000000017010000040000000602000000400000180000000000000017010000030000000100000000000079240809000000ac87448793609bd8299d6dfc465829b711ce28eb8f568438917ebd0699be96bd1485f6aaa8486e00000000e301f2e09aebda6eeb1c61f96b6d3f91c0f8c1ffbb85cfdd5b8b437a3720ba4cdfb681516c3a240207b6bbdfb37747cc7411886fdba55bcbfa68226644556e8117f9f9fc5be3b7095b2ab7c19b0c6fada03a7f9b9172f0cc960ee263e82e3232edea82b9736d65309e0ad2922ecbb7cde9ce78555fabb941d114e83b37255d6b43b2927696e4f4cf3b23086021fe4e33d049de5318ef3803ceacddc02734c96a9765486a9bf8d65791b000000000000000000000000000000000000000009d97cea3f950d55b265e480ff02c27bda4848c64ca7dcbcd060b9c0dea483c6069d2cdc473cfacc9052cc2c9e3ee037042fd329173c5e7c9ef8800a51332df5a08602a72a553035711cb9159757303a5e7d389786df44441dc82a9d32c56db8a8b3578cd0faabfa23fb46e22b45a464e35315d8c2dd3fae8b530cf8eb0d8dcb682772bed766be5208e61eab965c6c9a217a4e13f0085626c0408f381205251c18a8f6a44"], 0x60}], 0x1, 0x8001) recvmmsg(r3, &(0x7f0000001440)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000001c0)=""/156, 0xff78}, {&(0x7f0000000300)=""/92, 0x33}], 0x2}}], 0x1, 0x0, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c340000000000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) syz_usb_control_io$hid(r4, &(0x7f00000001c0)={0x24, &(0x7f0000000dc0)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) 10.399557075s ago: executing program 2 (id=1710): r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) r2 = dup3(r0, r1, 0x0) read$FUSE(r2, &(0x7f0000001380)={0x2020}, 0x2020) 10.33666754s ago: executing program 2 (id=1712): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="0000000000000000660800000000000018000000000000000000000000e2ff009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) 10.221073769s ago: executing program 2 (id=1714): socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="440000002100010000000000000000000a00000000e50000000000000c0014002e"], 0x44}}, 0x0) 10.119741957s ago: executing program 2 (id=1716): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, 0x0, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x1, &(0x7f0000000100), 0x4) r4 = socket$kcm(0x10, 0x2, 0x10) openat$vimc2(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r5 = socket$inet_dccp(0x2, 0x6, 0x0) writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000200)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) getsockopt$inet_int(r5, 0x10d, 0xaf, &(0x7f0000000080), &(0x7f00000000c0)=0x4) sendmsg$kcm(r4, 0x0, 0x0) 9.162711155s ago: executing program 3 (id=1719): futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000013c0)={0x4c, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) r2 = syz_open_dev$dri(&(0x7f0000000740), 0x1ff, 0x0) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x9237, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r3, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000001cc0)='1', 0x1}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r2, 0xc01064bd, &(0x7f0000001240)={&(0x7f0000001180)="b7", 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r3, 0xc00464be, &(0x7f0000000180)={r4}) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = getpid() process_vm_readv(r5, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) unshare(0x22020400) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r6, 0x10f, 0x80, &(0x7f0000001640), 0x4) sendmmsg$inet(r6, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) 7.229760183s ago: executing program 0 (id=1724): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800003f0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESHEX=r4, @ANYBLOB="0000000000000010b7080000000000007b8af8ff00000000bfa200000000000007020000b8ffffffb7030000080000008200000095"], &(0x7f0000000400)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r6}, 0x10) clock_gettime(0x0, &(0x7f0000000000)={0x0}) clock_settime(0x0, &(0x7f0000000080)={r7}) socket$tipc(0x1e, 0x5, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x300001a, &(0x7f0000001080)=ANY=[@ANYBLOB="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", @ANYBLOB="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"], 0xf, 0x2a6, &(0x7f0000000480)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000200000000000000000000008500000005000000850000000800000095", @ANYRES32=r0], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20}, 0x90) r8 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r9 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) 6.995440432s ago: executing program 4 (id=1725): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5ac, 0x262, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002205000000a9ce56"], 0x0}, 0x0) 5.461025557s ago: executing program 0 (id=1727): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$netlink(0x10, 0x3, 0x0) pipe2(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x0) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, 0x0) r5 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000040)={'veth1_virt_wifi\x00', {0x2, 0x4e22, @broadcast}}) rt_sigaction(0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x7, [@fwd={0x5}, @const]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x5f]}}, &(0x7f0000000540)=""/177, 0x37, 0xb1, 0x1}, 0x20) 5.327497377s ago: executing program 1 (id=1728): socket$packet(0x11, 0x2, 0x300) socket$inet6(0xa, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f00000005c0)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000040), 0x80) pipe2$watch_queue(&(0x7f0000000140), 0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) shmget$private(0x0, 0x4000, 0x8, &(0x7f0000001000/0x4000)=nil) statfs(&(0x7f0000000280)='./file0\x00', 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0x2) 3.57176049s ago: executing program 0 (id=1729): r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_ADD_RULE(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=ANY=[@ANYBLOB="10000000f3030000000000000000000010000000"], 0x420}}, 0x0) 3.56776867s ago: executing program 3 (id=1730): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x260, 0xffffffff, 0x98, 0x98, 0x0, 0xffffffff, 0xffffffff, 0x298, 0x298, 0x298, 0xffffffff, 0x4, 0x0, {[{{@ip={@private, @remote, 0x0, 0x0, 'rose0\x00', 'macvlan1\x00'}, 0xa00, 0x70, 0x98, 0x0, {0x100000000000000}}, @REJECT={0x28}}, {{@ip={@multicast1, @local, 0x0, 0x0, 'bridge0\x00', 'caif0\x00'}, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) 3.539617553s ago: executing program 4 (id=1731): mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)='pstore\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@bloom_filter={0x1e, 0x2, 0x5, 0x9, 0x2000, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x0, 0x6}, 0x48) socket$packet(0x11, 0x3, 0x300) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000880)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x79, 0x79, 0x2, [@datasec={0x0, 0x9, 0x0, 0xf, 0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}], "cf"}]}}, 0x0, 0x96}, 0x20) mkdir(&(0x7f0000000580)='./bus\x00', 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(r1, 0x80e85411, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x11, @empty, 0x0, 0x0, 'sh\x00', 0x13}, 0x2c) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x8}}}}}, 0x0) mount$overlay(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000000)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file1'}, 0x3a}], [], 0x2f}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') read$FUSE(r3, &(0x7f0000003040)={0x2020}, 0x2020) r4 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x4e, 0xa, 0xa, 0x0, 0x0, 0x61, 0x10, 0x1c}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000040)={0x14, &(0x7f0000000140)=ANY=[@ANYBLOB="0000b8000000b8003d3477cbc35c8ddcdc0e186953ef0ab2ae2a0eb5a2f97b5aad9e703ce22e42936396734212088ac15a0f2d12e0e29e5bae7468a00f0e08d4bd128002cab945dea8f6e4a4232bf3b44783e6838203aee01bd49acccbcf1570a42ca45151554b17da71ee03667986c5203c85250f6adad276a426ef6dee6af0af1078a78e248499c6641f3bbc0478cb1c11c2c0115b069449a776498514a84664e23426d5bffa0a29c3c74ea2bb26f20573ec7ebf433d518c3793cf78da"], 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r4, 0x82, 0xfffffffffffffddf, &(0x7f0000000000)=ANY=[]) syz_usb_control_io(r4, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000000280)={{0x1, 0x1, 0x18, r1, {0x5}}, './file1\x00'}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x21c000, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000003000000050000000000000c0500000000000000000000090000cafe7b45c872000000e900"], &(0x7f00000004c0)=""/172, 0x33, 0xac, 0x0, 0x4}, 0x20) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000240)=0x1000) 3.479468147s ago: executing program 3 (id=1732): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000001000000000000000000850000007d00000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='sys_enter\x00'}, 0x10) ioctl$KVM_GET_LAPIC(0xffffffffffffffff, 0x8400ae8e, &(0x7f00000008c0)={"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"}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000deffffffffffffff000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) lremovexattr(0x0, 0x0) 3.406035143s ago: executing program 0 (id=1733): r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) r2 = dup3(r0, r1, 0x0) read$FUSE(r2, &(0x7f0000001380)={0x2020}, 0x2020) 3.405804243s ago: executing program 3 (id=1734): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) 3.32521568s ago: executing program 1 (id=1735): bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x8, 0x4, 0x4, 0x10000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 3.244272897s ago: executing program 0 (id=1736): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000280)={0x40, 0x0, 0x211, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TX_RATES={0x24, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14}, @NL80211_TXRATE_GI={0x5}]}]}]}, 0x40}}, 0x0) 3.212277449s ago: executing program 3 (id=1737): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, 0x0, &(0x7f0000000180)) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, 0x0, 0x0) mkdir(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(0x0, 0x0, 0x0, 0x0, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x0) umount2(&(0x7f00000000c0)='./file0/file0\x00', 0x1) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_clone3(&(0x7f0000000700)={0x2000a0080, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r5}}, 0x58) 3.131422856s ago: executing program 1 (id=1738): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 2.940272851s ago: executing program 1 (id=1739): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0), 0x48) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000030101044f0000000000000002000000240002801400018008000100e000000108000200e00000010c00028005000100"], 0x48}}, 0x0) pipe(0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff0081000000a200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000599a988a210c6db191cbb781ee68b037acff50cb0f076953d77c08668186a28bec19325924d02f4fa1657e0aef88156d7c6c69760a7e49badf3050a1e1653a9f63f0d4ec7ac8e01b15145ea86acf47cf61db8d6f8d1ef8de48541c57"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 2.911322774s ago: executing program 0 (id=1740): mknod(&(0x7f0000000140)='./file0\x00', 0x1000, 0x0) r0 = open(&(0x7f0000000140)='./file0\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) fstat(r1, &(0x7f0000000100)) recvmsg$unix(r1, &(0x7f0000000180)={&(0x7f0000000200), 0x6e, &(0x7f0000000100)=[{&(0x7f0000000280)=""/175, 0xaf}, {&(0x7f0000000340)=""/139, 0x8b}, {&(0x7f0000000400)=""/216, 0xd8}], 0x3, &(0x7f0000000500)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x90}, 0x40010042) open$dir(&(0x7f0000002180)='./file1\x00', 0x0, 0x0) splice(r0, 0x0, r0, &(0x7f00000000c0)=0x1ff, 0x7, 0x0) mlockall(0x3) 867.96561ms ago: executing program 3 (id=1741): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0xfffffffffffffd04, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[], 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0xbc) sendmsg$nl_route(r0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xd, 0x0, &(0x7f0000000000)="259a53f271a76d2610054c6560", 0x0, 0x0, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x7}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r3}, &(0x7f00000002c0), &(0x7f0000000300), 0x2}, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x5}}}, 0x24}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r4, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x1c, r5, 0x331, 0x0, 0x0, {0x8}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x19, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x3f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0xffffffffffffffff}, 0x90) socket$inet6_udp(0xa, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000440), 0x4) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r7, 0x8933, &(0x7f0000000040)={'wg1\x00'}) syz_genetlink_get_family_id$wireguard(&(0x7f0000000200), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000fc0)={0x1d4, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_FRAME={0x1b5, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x1}, @device_b, @device_a, @initial, {0x9}, @value=@ver_80211n={0x0, 0x7f, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1}}, 0x410, @default, 0x10, @val={0x0, 0x1a, @random="e105e57602dec24a291254d240bc31d6129be2c3c9bd51903553"}, @void, @val={0x3, 0x1, 0x7c}, @void, @val={0x6, 0x2, 0x2}, @void, @void, @void, @val={0x3c, 0x4, {0x0, 0x9, 0x7c, 0x3}}, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0x0, 0x1, 0x0, 0x2, 0xf8, 0x21}}, @void, [{0xdd, 0x31, "966dc64f90ae9e42d7af14eacef3547bec6dbcba73a8430134b8b2b5c9c0a52ee008401304fd297f418680ed5c44cefc42"}, {0xdd, 0x5a, "92fac575f6f70c5ba9f28550663bb556496eeb6d4278dd31078791e52d268c0b28c5a594a4315d140ef5c7e5cd7151e635e94459f87cf344251eac40891e657fb80287a673734ac825e6d260ea96eb967ad4e32639f501d42e4f"}, {0xdd, 0xbe, "959cfff83e3bb5613b6d59c195cf64f090b11981564fe8c19ad6cbf4fa0042f959d7ee3deef67a921e8b7f1a46ccd5d6d30b1177cbabcf32ec4648a678608163d50cb281011ef33afd9c03720b4775a3bd514aca2c77967eb90766a6d59a66b9f318c97d1e3ca985a50e79255c7b13ff04585409a532228312d3503bcf1b3242999e1f3b0dbff3413818120f5466240fef9bb499e87015786e5a400c55ec55a03a2fb2962e02bad63bf50b848e0260d0e54cc92e5b928622036574969294"}]}}]}, 0x1d4}}, 0x0) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r8, &(0x7f0000000400)={&(0x7f00000000c0), 0xc, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="000125bd7000fedbdf255300000008000300", @ANYRES32=r11, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) 421.455096ms ago: executing program 1 (id=1742): syz_mount_image$udf(&(0x7f0000000f00), &(0x7f00000000c0)='./file1\x00', 0x210008, &(0x7f0000001040)=ANY=[@ANYBLOB='uid=', @ANYRESDEC=0x0, @ANYBLOB="2c756e64656c6574652c6e6f7672732c6164696e6963622c766f6c756d653d30303030303030303030303030303030303030322c7569643d666f726765742c6769643d666f726765742c6e6f7374726963742c6e6f7672732c0085f95733019d784ca386da1fd41ffabd4b47acca2b8d488be702157dd8711c31732d"], 0xff, 0xc43, &(0x7f00000011c0)="$eJzs3U9sHOd9N/DfM1qKK/l9KyZ2FCeNi01bpLJiufoXU7EKd1XTbAPIshCKuQXgiqTUhSmSIKlGNtKC6aWHHgIURQ85EWiNAikaGE0R9Mi0LpBcfChy6oloYSMoemCLADkFLGb2WXFJkRYjkhJlfT429Z2dfZ6Z55lZzVAEn3kCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIj4vdcunT6THnUrAICH6crIV0+fdf8HgCfKNf/+BwAAAAAAAAAAAACAgy5FEU9Hitkrq2mset1Rv9zuu31ndGh462pHUlXzUFW+/KqfOXvu/JdeGrzQzcvt6Y+ov9c+G2+MXLvUeHXm1uzc5Pz85ERjdLo9PjMxueMt7Lb+ZierA9C49ebtiRs35htnXzy34e07Ax/2P3V84OLg86ee65YdHRoeHlkvUu8tX3vghnRsN8LjcBRxKlK88L2fplZEFLH7Y1F/uOd+syNVJ05WnRgdGq46MtVuTS+Ub17tHogiotFTqdk9Rlufi6j1PdQ+bK8ZsVg2v2zwybJ7I7Otudb1qcnG1dbcQnuhPTN9NXVaW/anEUVcSBFLEbHSf+/m+qKIWqT4zrHVdD0iDnWPwxergcHbt6PYxz7uQNnORl/EUvEYnLMDrD+KeD1S/Oy9EzGerzPVteYLEa+X+YOId8p8JSKVH4zzER9s8Tni8VSLIv68PP8XV9NEdT3oXlcuf63xlekbMz1lu9eVX/L+cM+V4hHdH45syofjgF+b6lFEq7rir6YH/2YHAAAAAAAAAAAAAAAAgL12JIr4TKR47d/+qBpXHNW49GMXB39/4P/3jhl/9j7bKcu+GBGLxc7G5B7OAwOvpqspPeKxxE+yehTxx3n837cedWMAAAAAAAAAAAAAAAAAAACeaEX8JFK8/P6JtBS9c4q3p282rrWuT3Vmhe3O/dudM31tbW2tkTrZzDmWczHnUs7lnCs5o8j1czZzjuVczLmUcznnSs44lOvnbOYcy7mYcynncs6VnFHL9XM2c47lXMy5lHM550rOOCBz9wIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfJwUUcQvIsW3v7GaIkVEM2IsOrnc/6hbBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACU+lMR348UjT9o3l1Xi4hU/d9xovzjfDQPl/nJaA6W+Uo0L+VsVVlrfusRtJ/d6UtF/DhS9NffvXvC8/nv67y6+zGId765/uqztU4e6r45UETEsYuDw7/2bAx82P/U8XuX01YNOHm5PX37TmN0aHh4pGd1Le/9kz3rBvJ+i73pOhEx/9bbb7ampibnHnyh/AjsovpjtJBqT0pPLVQLUTsQzXgIC/35etDTd54A5f3/g0jx2+//e/eG37n/1+P/dV7dvcPHz/9k/f7/8uYNbXPP33z/r22ul+//5T19q/v/0z3rXs7fjfTVIuoLt2b7jkfU5996+1T7Vuvm5M3J6fOnT395cPDL5073HY6o32hPTfYs7cnhAgAAAAAAAAAAAAAAAHh4UhG/GylaP15NjYi4U43XGrg4+Pyp5w7FoWq81YZx22+MXLvUeHXm1uzc5Pz85ERjdLo9PjMxudPd1avhXqNDw/vSmfs6ss/tP1J/dWb2rbn2zT9c2PL9o/VL1+cX5lrjW78dR6KIaPauOVk1eHRouGr0VLs1XVW9uuVg+l9eXyriPyLF+PlG+nxel8f/bx7hv2H8/+LmDe1w/N897jP+/xM968p9plTEzyPFb/3Fs/H5qp1H455jlsv9TaQ4eeFzuVwcLst129B5rkBnZGBZ9n8ixT/8YmPZ7njIp9fLntnxgX1MlOf/WKT4/p99N349r9v4/Ietz//RzRval/Nfj2d61h3d8LyCPeg81fk/FSleefrd+I287qOe/9F99saJXPju8zn26e//p3rWDeT9/ubedB0AAAAAAAAAAOCx1peK+NtI8cPhWnopr9vJ7/9NbN7QPv3+16d71k3szXxF913Y9UEFAAAAgAOiLxXxk0hxc+Hdu2OoN47/7hn/+Tvr4z+H0qZ3q5/z/Ur13IC9/Plfr4G837HddxsAAAAAAAAAAAAAAAAAAAAOlJSKeCnPpz5Wjeef2HY+9eVI8dp/vZDLpeNlue488APVn/UrM9OnLk1NzYy3FlrXpyYbI7Ot8cmy7jORYvWvP5frFtX86t355jtzvK/PxT4XKYb/rlu2Mxd7d27yZ9bLninLfiJS/Offbyzbncf6U+tlz5Zl/ypSfP2fti57fL3subLsdyPFj77e6JY9WpbtPh/10+tlXxyfKfbhrAAAAAAAAAAAAAAAAAAAAPCk6UtF/Gmk+O9bS3fH8uf5//t6Xlbe+WbPfP+b3Knm+R+o5v/fbvlB5v+vniuwuN1eAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg4ylFEW9Hitkrq2m5v3zdUb/cnr59Z3RoeOtqR1JV81BVvvyqnzl77vyXXhq80M2Prr/XPhNvjFy71Hh15tbs3OT8/OREY3S6PT4zMbnjLey2/mYnqwPQuPXm7YkbN+YbZ188t+HtOwMf9j91fODi4POnnuuWHR0aHh7pKVPre+C93yNts/5wFPGXkeKF7/00/bA/oojdH4v7fHb225GqEyerTowODVcdmWq3phfKN692D0QR0eip1Oweo4dwLnalGbFYNr9s8MmyeyOzrbnW9anJxtXW3EJ7oT0zfTV1Wlv2pxFFXEgRSxGx0n/v5vqiiDcjxXeOraZ/7o841D0OX7wy8tXTZ7dvR7GPfdyBsp2Nvoil4jE4ZwdYfxTxj5HiZ++diH/pj6hF5yu+EPF6mT+IeCc65zuVH4zzER9s8Tni8VSLIv63PP8XV9N7/eX1oHtdufy1xlemb8z0lO29rpQe2/vDw3TAr031KOJH1RldTf/q7zUAAAAAAAAAAAAAAADAAVLEr0aKl98/karxwXfHFLenbzauta5PdYb1dcf+dcdMr62trTVSJ5s5x3Iu5lzKuZxzJWcUuX7OZpn1tbWx/Hox51LO5ZwrOeNQrp+zmXMs52LOpZzLOVdyRi3Xz9nMOZZzMedSzuWcKznjgIzdAwAAAAAAAAAAAAAAAAAAPl6K6r8U3/7Galrr78wvPRadXDYf6Mfe/wUAAP//n3DyMQ==") rename(&(0x7f0000000140)='./file0\x00', 0x0) rename(&(0x7f0000000240)='./file0\x00', &(0x7f0000000ac0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 360.584631ms ago: executing program 4 (id=1743): open(0x0, 0x60c2, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0], [0x0, 0x0, 0x3]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000280)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000100)={r6}) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r5}) 96.916012ms ago: executing program 1 (id=1744): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="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", 0x13c}], 0x2}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b18, &(0x7f0000000000)={'wlan1\x00'}) 0s ago: executing program 4 (id=1746): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0xf, &(0x7f0000000680)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r1, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={0x0, 0x0, 0x40}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xb, 0xc, 0x4, 0xc4f, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000100), 0x6c7, r2}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, &(0x7f0000000340)=""/211, &(0x7f0000000180), &(0x7f0000000440), 0x3, r2}, 0x38) kernel console output (not intermixed with test programs): ][ T935] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 339.029261][ T935] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 339.072515][ T935] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 339.105305][ T7475] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 339.119401][ T935] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 339.167513][ T935] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 339.200610][ T935] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.240661][ T7475] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 339.251221][ T935] usb 3-1: can't set config #1, error -71 [ 339.258125][ T935] usb 3-1: USB disconnect, device number 19 [ 339.413096][ T7] hid (null): bogus close delimiter [ 339.422541][ T7] hid (null): unknown global tag 0xe [ 339.444879][ T7] hid (null): unknown global tag 0xe [ 339.464979][ T7] hid (null): unknown global tag 0xc [ 339.497628][ T7] hid-generic 0003:0158:0100.0013: unknown main item tag 0x1 [ 339.527850][ T7] hid-generic 0003:0158:0100.0013: unexpected long global item [ 339.555178][ T7] hid-generic: probe of 0003:0158:0100.0013 failed with error -22 [ 340.042556][ T7530] device vlan1 entered promiscuous mode [ 340.077684][ T7529] device vlan1 left promiscuous mode [ 340.210685][ T7534] hub 5-0:1.0: USB hub found [ 340.227331][ T7534] hub 5-0:1.0: 1 port detected [ 340.717079][ T3592] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 340.815431][ T935] usb 4-1: USB disconnect, device number 19 [ 340.963964][ T3592] usb 1-1: Using ep0 maxpacket: 8 [ 341.081488][ T3592] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 341.106171][ T3592] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 341.142871][ T3592] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 341.191908][ T3592] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 341.257267][ T3592] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 341.286910][ T3592] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.362046][ T3592] hub 1-1:1.0: bad descriptor, ignoring hub [ 341.368862][ T3592] hub: probe of 1-1:1.0 failed with error -5 [ 341.389514][ T3592] cdc_wdm 1-1:1.0: skipping garbage [ 341.408552][ T3592] cdc_wdm 1-1:1.0: skipping garbage [ 341.420671][ T3592] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 341.436978][ T3592] cdc_wdm 1-1:1.0: Unknown control protocol [ 341.661126][ T935] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 341.694735][ T4210] usb 1-1: USB disconnect, device number 21 [ 342.051157][ T4210] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 342.066955][ T935] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11 [ 342.094590][ T935] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024 [ 342.136054][ T935] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 342.159587][ T935] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.201462][ T7560] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 342.303930][ T4210] usb 1-1: Using ep0 maxpacket: 8 [ 342.421345][ T4210] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 342.431932][ T4210] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 342.440884][ T4210] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 342.461316][ T4210] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 342.472787][ T4210] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 342.491135][ T4210] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.542063][ T4210] hub 1-1:1.0: bad descriptor, ignoring hub [ 342.560417][ T4210] hub: probe of 1-1:1.0 failed with error -5 [ 342.576592][ T4210] cdc_wdm 1-1:1.0: skipping garbage [ 342.582068][ T4210] cdc_wdm 1-1:1.0: skipping garbage [ 342.588345][ T4210] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 342.615002][ T4210] cdc_wdm 1-1:1.0: Unknown control protocol [ 342.681234][ T935] aiptek 5-1:17.0: Aiptek using 400 ms programming speed [ 342.689969][ T935] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:17.0/input/input10 [ 342.771398][ T935] usb 5-1: USB disconnect, device number 25 [ 342.781126][ C0] aiptek 5-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 acpid: input device has been disconnected, fd 10 [ 343.025174][ T3657] usb 1-1: USB disconnect, device number 22 [ 343.588060][ T3657] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 343.817364][ T7585] loop1: detected capacity change from 0 to 512 [ 343.827218][ T7585] ext4: Unknown parameter 'fowner<00000000000000000000' [ 343.951286][ T3657] usb 3-1: Using ep0 maxpacket: 16 [ 344.072021][ T3657] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 344.121535][ T3657] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 344.176640][ T3657] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.337494][ T3657] usb 3-1: config 0 descriptor?? [ 345.145013][ T7577] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 345.248018][ T7577] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 345.310971][ T7585] fuse: Bad value for 'fd' [ 346.016167][ T7599] xt_CT: You must specify a L4 protocol and not use inversions on it [ 346.362036][ T7577] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 346.370690][ T7577] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 346.482284][ T3657] hid (null): bogus close delimiter [ 346.496661][ T3657] hid-generic 0003:0158:0100.0014: unknown main item tag 0x1 [ 346.532355][ T3657] hid-generic 0003:0158:0100.0014: unexpected long global item [ 346.564609][ T3657] hid-generic: probe of 0003:0158:0100.0014 failed with error -22 [ 346.707589][ T2965] usb 3-1: USB disconnect, device number 20 [ 347.157818][ T7618] rtc_cmos 00:00: Alarms can be up to one day in the future [ 347.257738][ T7621] hub 5-0:1.0: USB hub found [ 347.301148][ T7621] hub 5-0:1.0: 1 port detected [ 347.881599][ T3598] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 348.151481][ T3598] usb 5-1: Using ep0 maxpacket: 8 [ 348.411660][ T3598] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 348.459544][ T3598] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 348.511239][ T3598] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 348.574042][ T3598] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 348.651277][ T3598] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 348.719751][ T3598] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.812610][ T3598] hub 5-1:1.0: bad descriptor, ignoring hub [ 348.818587][ T3598] hub: probe of 5-1:1.0 failed with error -5 [ 348.855591][ T3598] cdc_wdm 5-1:1.0: skipping garbage [ 348.860858][ T3598] cdc_wdm 5-1:1.0: skipping garbage [ 348.918530][ T3598] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 348.973147][ T3598] cdc_wdm 5-1:1.0: Unknown control protocol [ 349.052460][ T3598] usb 5-1: USB disconnect, device number 26 [ 349.321799][ T2965] rtc_cmos 00:00: Alarms can be up to one day in the future [ 349.329993][ T2965] rtc_cmos 00:00: Alarms can be up to one day in the future [ 349.345314][ T2965] rtc_cmos 00:00: Alarms can be up to one day in the future [ 349.353024][ T2965] rtc_cmos 00:00: Alarms can be up to one day in the future [ 349.360351][ T2965] rtc rtc0: __rtc_set_alarm: err=-22 [ 350.416761][ T7642] loop2: detected capacity change from 0 to 512 [ 350.424450][ T7642] ext4: Unknown parameter 'fowner<00000000000000000000' [ 350.439885][ T3598] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 350.698381][ T7642] fuse: Bad value for 'fd' [ 350.811321][ T3598] usb 5-1: Using ep0 maxpacket: 8 [ 351.088637][ T7647] loop0: detected capacity change from 0 to 8 [ 351.141399][ T3598] usb 5-1: device descriptor read/all, error -71 [ 351.297668][ T7647] SQUASHFS error: Unable to read inode 0x2000 [ 352.955245][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 353.371234][ T7] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 353.762821][ T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 353.784132][ T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 353.814792][ T7] usb 3-1: New USB device found, idVendor=05ac, idProduct=0262, bcdDevice= 0.00 [ 353.840029][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.873393][ T7] usb 3-1: config 0 descriptor?? [ 354.341158][ T3597] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 354.574012][ T7] apple 0003:05AC:0262.0015: unbalanced delimiter at end of report description [ 354.583230][ T3597] usb 1-1: Using ep0 maxpacket: 16 [ 354.603339][ T7] apple 0003:05AC:0262.0015: parse failed [ 354.622983][ T7] apple: probe of 0003:05AC:0262.0015 failed with error -22 [ 354.702111][ T3597] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 354.741123][ T3597] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 354.750255][ T3597] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.792130][ T3597] usb 1-1: config 0 descriptor?? [ 354.828632][ T4210] usb 3-1: USB disconnect, device number 21 [ 355.283995][ T7674] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 355.305824][ T7674] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 355.578425][ T7674] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 355.601407][ T7674] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 355.632352][ T3597] hid (null): bogus close delimiter [ 355.662024][ T3597] hid-generic 0003:0158:0100.0016: unknown main item tag 0x1 [ 355.669495][ T3597] hid-generic 0003:0158:0100.0016: unexpected long global item [ 355.701921][ T3597] hid-generic: probe of 0003:0158:0100.0016 failed with error -22 [ 355.849499][ T3597] usb 1-1: USB disconnect, device number 23 [ 356.001326][ T3657] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 356.241164][ T3657] usb 3-1: Using ep0 maxpacket: 8 [ 356.361356][ T3657] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 356.393101][ T3657] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 356.438383][ T3657] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 356.477212][ T3657] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 356.527412][ T3657] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 356.558014][ T3657] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.632223][ T3657] hub 3-1:1.0: bad descriptor, ignoring hub [ 356.638189][ T3657] hub: probe of 3-1:1.0 failed with error -5 [ 356.671604][ T3657] cdc_wdm 3-1:1.0: skipping garbage [ 356.678162][ T3657] cdc_wdm 3-1:1.0: skipping garbage [ 356.702954][ T3657] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 356.709278][ T3657] cdc_wdm 3-1:1.0: Unknown control protocol [ 356.848668][ T7687] loop0: detected capacity change from 0 to 2048 [ 356.917990][ T7687] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 356.951496][ T3657] usb 3-1: USB disconnect, device number 22 [ 358.991132][ T3597] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 359.587156][ T3563] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 359.598639][ T3563] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 359.609948][ T3563] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 359.618113][ T3563] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 359.626457][ T3563] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 359.633868][ T3563] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 361.142190][ T7698] chnl_net:caif_netlink_parms(): no params data found [ 361.441145][ T3592] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 361.604096][ T7698] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.626660][ T7698] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.649870][ T7698] device bridge_slave_0 entered promiscuous mode [ 361.671382][ T3563] Bluetooth: hci1: command tx timeout [ 361.681975][ T7698] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.707451][ T7698] bridge0: port 2(bridge_slave_1) entered disabled state [ 361.776454][ T7698] device bridge_slave_1 entered promiscuous mode [ 361.801374][ T3592] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 361.831498][ T3592] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 361.854978][ T3592] usb 5-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 361.871663][ T3592] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.892162][ T3592] usb 5-1: config 0 descriptor?? [ 362.073556][ T7698] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 362.110813][ T7698] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 362.223446][ T7698] team0: Port device team_slave_0 added [ 362.250633][ T7698] team0: Port device team_slave_1 added [ 362.323615][ T1164] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.425375][ T3592] magicmouse 0003:05AC:0269.0017: item fetching failed at offset 6/7 [ 362.460866][ T3592] magicmouse 0003:05AC:0269.0017: magicmouse hid parse failed [ 362.481364][ T7725] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 362.490181][ T3592] magicmouse: probe of 0003:05AC:0269.0017 failed with error -22 [ 362.578223][ T1164] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.598851][ T7698] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 362.607536][ T7698] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 362.652916][ T4210] usb 5-1: USB disconnect, device number 29 [ 362.677612][ T7698] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 362.740269][ T1164] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.805569][ T7698] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 362.822869][ T7698] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 362.891361][ T7698] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 362.942995][ T1164] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.963801][ T7730] loop2: detected capacity change from 0 to 128 [ 363.087746][ T7698] device hsr_slave_0 entered promiscuous mode [ 363.114340][ T7698] device hsr_slave_1 entered promiscuous mode [ 363.370467][ T7734] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1271'. [ 363.751394][ T3563] Bluetooth: hci1: command tx timeout [ 364.530045][ T7698] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 364.587493][ T7698] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 364.718315][ T7698] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 364.729899][ T7698] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 364.782911][ T1164] device hsr_slave_0 left promiscuous mode [ 364.798935][ T1164] device hsr_slave_1 left promiscuous mode [ 364.818499][ T1164] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 364.842398][ T1164] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 364.866475][ T1164] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 364.896033][ T1164] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 364.923780][ T1164] device bridge_slave_1 left promiscuous mode [ 364.930038][ T1164] bridge0: port 2(bridge_slave_1) entered disabled state [ 364.963224][ T1164] device bridge_slave_0 left promiscuous mode [ 364.969522][ T1164] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.052744][ T1164] device veth1_macvtap left promiscuous mode [ 365.058875][ T1164] device veth0_macvtap left promiscuous mode [ 365.087197][ T1164] device veth1_vlan left promiscuous mode [ 365.098073][ T1164] device veth0_vlan left promiscuous mode [ 365.525577][ T7761] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1275'. [ 365.834973][ T3563] Bluetooth: hci1: command tx timeout [ 366.320931][ T7765] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 366.583490][ T1164] team0 (unregistering): Port device virt_wifi0 removed [ 367.262537][ T7771] loop4: detected capacity change from 0 to 512 [ 367.271662][ T7771] ext4: Unknown parameter 'fowner<00000000000000000000' [ 367.465961][ T7771] fuse: Bad value for 'fd' [ 367.911402][ T3563] Bluetooth: hci1: command tx timeout [ 368.592303][ T1164] team0 (unregistering): Port device team_slave_1 removed [ 368.902201][ T1164] team0 (unregistering): Port device team_slave_0 removed [ 369.101449][ T1164] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 369.232574][ T1164] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 370.611946][ T1164] bond0 (unregistering): Released all slaves [ 370.837420][ T7778] team0: Port device virt_wifi0 added [ 371.100959][ T7698] 8021q: adding VLAN 0 to HW filter on device bond0 [ 371.180048][ T3657] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 371.193830][ T3657] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 371.223259][ T7698] 8021q: adding VLAN 0 to HW filter on device team0 [ 371.239782][ T3657] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 371.259570][ T3657] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 371.280564][ T3657] bridge0: port 1(bridge_slave_0) entered blocking state [ 371.287730][ T3657] bridge0: port 1(bridge_slave_0) entered forwarding state [ 371.329033][ T7796] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 371.349638][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 371.369758][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 371.396088][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 371.429100][ T3598] bridge0: port 2(bridge_slave_1) entered blocking state [ 371.436321][ T3598] bridge0: port 2(bridge_slave_1) entered forwarding state [ 371.486977][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 371.551672][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 371.573250][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 371.595716][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 371.658447][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 371.667414][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 371.705149][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 371.737946][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 371.768032][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 371.796460][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 371.826759][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 371.856604][ T7804] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1290'. [ 371.915965][ T7698] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 372.977537][ T3657] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 372.997056][ T3657] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 373.088278][ T7698] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 373.172694][ T7818] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1292'. [ 373.287504][ T3657] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 373.312431][ T3657] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 373.456439][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 373.487151][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 373.555844][ T7698] device veth0_vlan entered promiscuous mode [ 373.605106][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 373.622665][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 373.648487][ T7698] device veth1_vlan entered promiscuous mode [ 373.747933][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 373.769800][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 373.799784][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 373.824922][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 373.859379][ T7698] device veth0_macvtap entered promiscuous mode [ 373.900394][ T7698] device veth1_macvtap entered promiscuous mode [ 373.951127][ T7] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 373.959765][ T7698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 374.010930][ T7698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.031301][ T7698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 374.051416][ T7698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.084877][ T7698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 374.111186][ T7698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.141129][ T7698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 374.172310][ T7698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.191141][ T7] usb 1-1: Using ep0 maxpacket: 16 [ 374.207048][ T7698] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 374.232210][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 374.244451][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 374.272399][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 374.292856][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 374.324973][ T7698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 374.326884][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 374.351554][ T7698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.381128][ T7698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 374.411184][ T7] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 374.420292][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.423117][ T7698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.478715][ T7698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 374.490484][ T7] usb 1-1: config 0 descriptor?? [ 374.520134][ T7698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.556606][ T7698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 374.591086][ T7698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.638068][ T7698] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 374.656150][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 374.671431][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 374.694988][ T7698] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.731129][ T7698] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.760189][ T7698] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.781239][ T7698] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.972530][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 374.983168][ T7823] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 375.016368][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 375.021692][ T7823] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 375.057193][ T2965] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 375.124116][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 375.151435][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 375.183980][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 375.323482][ T7823] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 375.361369][ T7823] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 375.412423][ T7] hid (null): bogus close delimiter [ 375.433631][ T7] hid-generic 0003:0158:0100.0018: unknown main item tag 0x1 [ 375.491170][ T7] hid-generic 0003:0158:0100.0018: unexpected long global item [ 375.530191][ T7] hid-generic: probe of 0003:0158:0100.0018 failed with error -22 [ 375.617919][ T935] usb 1-1: USB disconnect, device number 24 [ 376.101563][ T7839] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1296'. [ 376.909080][ T3563] block nbd1: Receive control failed (result -32) [ 376.909818][ T7842] block nbd1: shutting down sockets [ 377.266465][ T7861] team0: Port device virt_wifi0 added [ 377.741275][ T7874] device vlan1 entered promiscuous mode [ 377.763805][ T7874] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1310'. [ 377.800232][ T7873] device vlan1 left promiscuous mode [ 378.411009][ T7876] device wg2 entered promiscuous mode [ 378.554348][ T1256] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.560836][ T1256] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.540250][ T7905] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1323'. [ 380.341173][ T7914] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1322'. [ 381.462548][ T7929] loop4: detected capacity change from 0 to 128 [ 383.636307][ T3565] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 383.655934][ T3565] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 383.667829][ T3558] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 383.678876][ T3558] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 383.691722][ T3565] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 383.699162][ T3558] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 383.938057][ T7950] device vlan1 entered promiscuous mode [ 383.995714][ T7950] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1336'. [ 384.049078][ T7947] device vlan1 left promiscuous mode [ 384.399605][ T7960] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1338'. [ 384.718708][ T46] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.778313][ T7943] chnl_net:caif_netlink_parms(): no params data found [ 384.899860][ T46] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.077330][ T46] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.210661][ T7963] loop1: detected capacity change from 0 to 8192 [ 385.221386][ T46] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.263567][ T7963] loop1: p2 p3 p4 [ 385.269233][ T7963] loop1: p2 start 452985600 is beyond EOD, truncated [ 385.281276][ T7963] loop1: p3 start 4177527808 is beyond EOD, truncated [ 385.302234][ T7963] loop1: p4 size 3599499392 extends beyond EOD, truncated [ 385.382796][ T7943] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.410195][ T7943] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.448461][ T7943] device bridge_slave_0 entered promiscuous mode [ 385.535842][ T7943] bridge0: port 2(bridge_slave_1) entered blocking state [ 385.543701][ T7943] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.562508][ T7943] device bridge_slave_1 entered promiscuous mode [ 385.671289][ T935] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 385.751231][ T3563] Bluetooth: hci5: command tx timeout [ 385.835550][ T7943] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 385.961361][ T935] usb 1-1: Using ep0 maxpacket: 16 [ 386.030055][ T7943] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 386.096191][ T935] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 386.109712][ T935] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 386.126415][ T935] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.191958][ T935] usb 1-1: config 0 descriptor?? [ 386.288010][ T7980] loop4: detected capacity change from 0 to 128 [ 386.350232][ T7943] team0: Port device team_slave_0 added [ 386.389795][ T7943] team0: Port device team_slave_1 added [ 386.590488][ T7982] device vlan1 entered promiscuous mode [ 386.774879][ T7981] device vlan1 left promiscuous mode [ 386.801230][ T7943] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 386.815592][ T7972] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 386.860256][ T7972] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 386.873527][ T7943] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 387.201080][ T7943] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 387.313064][ T7943] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 387.330326][ T7943] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 387.385028][ T7972] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 387.406998][ T7972] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 387.441291][ T7943] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 387.846605][ T7993] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1348'. [ 389.189602][ T3563] Bluetooth: hci5: command tx timeout [ 389.340602][ T7943] device hsr_slave_0 entered promiscuous mode [ 389.347041][ T935] hid (null): bogus close delimiter [ 389.351896][ T935] hid-generic 0003:0158:0100.0019: unknown main item tag 0x1 [ 389.433457][ T7943] device hsr_slave_1 entered promiscuous mode [ 389.461441][ T7943] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 389.505632][ T7943] Cannot create hsr debugfs directory [ 389.794174][ T935] hid-generic 0003:0158:0100.0019: unexpected long global item [ 389.802893][ T935] hid-generic: probe of 0003:0158:0100.0019 failed with error -22 [ 389.814129][ T935] usb 1-1: USB disconnect, device number 25 [ 390.519311][ T8002] loop1: detected capacity change from 0 to 8192 [ 390.584932][ T8002] loop1: p2 p3 p4 [ 390.590069][ T8002] loop1: p2 start 452985600 is beyond EOD, truncated [ 390.613601][ T8002] loop1: p3 start 4177527808 is beyond EOD, truncated [ 390.637215][ T8002] loop1: p4 size 3599499392 extends beyond EOD, truncated [ 391.047727][ T8008] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1355'. [ 391.130280][ T46] device hsr_slave_0 left promiscuous mode [ 391.162170][ T46] device hsr_slave_1 left promiscuous mode [ 391.189814][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 391.235972][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 391.271490][ T3563] Bluetooth: hci5: command tx timeout [ 391.273432][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 391.331664][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 391.419732][ T46] device bridge_slave_1 left promiscuous mode [ 391.450319][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.481985][ T46] device bridge_slave_0 left promiscuous mode [ 391.493911][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.574310][ T46] device veth1_macvtap left promiscuous mode [ 391.582251][ T46] device veth0_macvtap left promiscuous mode [ 391.604321][ T46] device veth1_vlan left promiscuous mode [ 391.624477][ T46] device veth0_vlan left promiscuous mode [ 392.824807][ T46] team0 (unregistering): Port device virt_wifi0 removed [ 393.351741][ T3563] Bluetooth: hci5: command tx timeout [ 393.470466][ T46] team0 (unregistering): Port device team_slave_1 removed [ 393.627051][ T46] team0 (unregistering): Port device team_slave_0 removed [ 393.718978][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 393.822726][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 394.654547][ T46] bond0 (unregistering): Released all slaves [ 395.015884][ T8028] loop0: detected capacity change from 0 to 512 [ 395.094514][ T7943] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 395.113208][ T7943] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 395.140508][ T7943] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 395.164990][ T7943] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 395.175586][ T27] audit: type=1326 audit(1720785640.028:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8027 comm="syz.0.1361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c4ad75bd9 code=0x7fc00000 [ 395.252476][ T27] audit: type=1326 audit(1720785640.028:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8027 comm="syz.0.1361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7c4ad75bd9 code=0x7fc00000 [ 395.329411][ T27] audit: type=1326 audit(1720785640.028:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8027 comm="syz.0.1361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c4ad75bd9 code=0x7fc00000 [ 395.492337][ T7943] 8021q: adding VLAN 0 to HW filter on device bond0 [ 395.523354][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 395.532215][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 395.544569][ T7943] 8021q: adding VLAN 0 to HW filter on device team0 [ 395.589516][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 395.599316][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 395.622500][ T3592] bridge0: port 1(bridge_slave_0) entered blocking state [ 395.629643][ T3592] bridge0: port 1(bridge_slave_0) entered forwarding state [ 395.696203][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 395.705054][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 395.722188][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 395.730855][ T3599] bridge0: port 2(bridge_slave_1) entered blocking state [ 395.738165][ T3599] bridge0: port 2(bridge_slave_1) entered forwarding state [ 395.792125][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 395.834557][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 395.857215][ T8045] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1368'. [ 395.935654][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 395.954963][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 396.012949][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 396.029910][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 396.060747][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 396.084797][ T7943] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 396.129124][ T7943] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 396.165495][ T3657] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 396.180922][ T3657] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 396.214914][ T3657] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 396.251910][ T3657] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 396.291689][ T3657] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 396.686016][ T8056] loop0: detected capacity change from 0 to 128 [ 396.751700][ T8056] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 396.777201][ T8056] ext4 filesystem being mounted at /44/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 397.121504][ T7313] EXT4-fs (loop0): unmounting filesystem. [ 397.305467][ T8062] device vlan1 entered promiscuous mode [ 397.336732][ T8061] device vlan1 left promiscuous mode [ 397.442703][ T7943] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 397.487332][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 397.503690][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 397.603009][ T3657] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 397.620966][ T3657] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 397.702534][ T3657] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 397.722005][ T3657] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 397.749132][ T7943] device veth0_vlan entered promiscuous mode [ 397.770782][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 397.792326][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 397.818076][ T7943] device veth1_vlan entered promiscuous mode [ 397.954328][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 397.981542][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 397.997002][ T7943] device veth0_macvtap entered promiscuous mode [ 398.009179][ T8070] IPVS: sh: UDP 0.0.0.0:0 - no destination available [ 398.029602][ T7943] device veth1_macvtap entered promiscuous mode [ 398.073615][ T3657] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 398.089597][ T3657] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 398.098902][ T3657] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 398.128201][ T8072] team0: Port device virt_wifi0 added [ 398.160447][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 398.186201][ T7943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 398.220119][ T7943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.259364][ T7943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 398.284441][ T7943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.318956][ T7943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 398.331133][ T7] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 398.358787][ T7943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.388601][ T7943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 398.424434][ T7943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.447955][ T7943] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 398.467712][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 398.480357][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 398.500201][ T7943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 398.525851][ T7943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.543349][ T7943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 398.563371][ T7943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.576884][ T7943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 398.589973][ T7943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.609442][ T7943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 398.621102][ T7] usb 1-1: Using ep0 maxpacket: 32 [ 398.633314][ T7943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.658886][ T7943] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 398.678753][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 398.697060][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 398.720825][ T7943] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.744476][ T7943] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.761377][ T7] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 398.778941][ T7943] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.791204][ T7] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 398.798098][ T7943] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.799936][ T7] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 398.799963][ T7] usb 1-1: config 1 has no interface number 0 [ 398.905092][ T7] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 398.944710][ T7] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 50692, setting to 1024 [ 398.996847][ T7] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 399.028627][ T3798] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 399.040494][ T7] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 399.060583][ T3798] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 399.072029][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.129563][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 399.141619][ T8070] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 399.143041][ T3655] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 399.163683][ T7] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 399.171259][ T3655] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 399.216943][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 399.386787][ T8070] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 399.421748][ T8083] tipc: Can't bind to reserved service type 0 [ 399.440178][ T7] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached [ 399.450979][ T8083] 9pnet_fd: Insufficient options for proto=fd [ 399.815027][ T8093] device vlan1 entered promiscuous mode [ 399.848257][ T8092] device vlan1 left promiscuous mode [ 399.900444][ T8095] loop4: detected capacity change from 0 to 1024 [ 399.929062][ T8095] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 399.967359][ T8095] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 399.993712][ T8095] EXT4-fs error (device loop4): ext4_get_journal_inode:5733: comm syz.4.1383: inode #1: comm syz.4.1383: iget: illegal inode # [ 400.037013][ T8095] EXT4-fs (loop4): no journal found [ 400.053110][ T8095] EXT4-fs (loop4): can't get journal size [ 400.076753][ T8095] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 400.130762][ T8095] Bluetooth: MGMT ver 1.22 [ 400.158072][ T7290] EXT4-fs (loop4): unmounting filesystem. [ 400.290006][ T8104] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1386'. [ 400.471188][ T3605] snd_usb_pod 1-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 400.990725][ T22] usb 1-1: USB disconnect, device number 26 [ 401.007704][ T22] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 402.685736][ T8121] device vlan1 entered promiscuous mode [ 402.693295][ T8120] device vlan1 left promiscuous mode [ 402.941263][ T3605] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 403.380217][ T3605] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 403.575646][ T3605] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 403.890528][ T3605] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 403.931145][ T3605] usb 3-1: SerialNumber: syz [ 403.961683][ T8143] loop4: detected capacity change from 0 to 764 [ 403.986946][ T8143] rock: directory entry would overflow storage [ 404.005376][ T3605] cdc_acm 3-1:1.0: Control and data interfaces are not separated! [ 404.020305][ T3605] cdc_acm 3-1:1.0: This needs exactly 3 endpoints [ 404.038735][ T8143] rock: sig=0x4654, size=5, remaining=4 [ 404.070873][ T8146] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1401'. [ 404.079963][ T8143] ISOFS: unable to read i-node block [ 404.088095][ T3605] cdc_acm: probe of 3-1:1.0 failed with error -22 [ 404.153512][ T3563] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 404.163269][ T3563] Bluetooth: hci3: Injecting HCI hardware error event [ 404.173311][ T3565] Bluetooth: hci3: hardware error 0x00 [ 404.246031][ T3597] usb 3-1: USB disconnect, device number 24 [ 404.780685][ T8150] loop0: detected capacity change from 0 to 1024 [ 404.851088][ T8150] hfsplus: bad catalog file entry [ 404.884941][ T8150] hfsplus: failed to load root directory [ 405.264529][ T8160] device vlan1 entered promiscuous mode [ 405.312468][ T8159] device vlan1 left promiscuous mode [ 406.321368][ T3565] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 406.815389][ T8173] fuse: Bad value for 'fd' [ 409.043059][ T8184] loop1: detected capacity change from 0 to 764 [ 409.072165][ T8184] rock: directory entry would overflow storage [ 409.078362][ T8184] rock: sig=0x4654, size=5, remaining=4 [ 409.359352][ T8184] ISOFS: unable to read i-node block [ 410.487421][ T8188] binder: 8186:8188 ioctl c0306201 200001c0 returned -14 [ 410.495761][ T8188] binder: 8186:8188 ioctl c0306201 20000680 returned -14 [ 410.771137][ T935] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 411.831221][ T935] usb 5-1: device descriptor read/64, error -71 [ 412.101091][ T935] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 412.140858][ T3563] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 412.155062][ T3563] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 412.164346][ T3563] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 412.174773][ T3563] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 412.183953][ T3563] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 412.202731][ T3563] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 413.661341][ T4210] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 413.787024][ T8202] chnl_net:caif_netlink_parms(): no params data found [ 413.872170][ T4210] usb 5-1: device descriptor read/64, error -71 [ 414.091256][ T8202] bridge0: port 1(bridge_slave_0) entered blocking state [ 414.129827][ T8202] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.151464][ T4210] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 414.197066][ T8202] device bridge_slave_0 entered promiscuous mode [ 414.207870][ T8202] bridge0: port 2(bridge_slave_1) entered blocking state [ 414.231413][ T3563] Bluetooth: hci0: command tx timeout [ 414.238890][ T8202] bridge0: port 2(bridge_slave_1) entered disabled state [ 414.241316][ T3657] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 414.257797][ T8202] device bridge_slave_1 entered promiscuous mode [ 414.357887][ T4210] usb 5-1: device descriptor read/64, error -71 [ 414.408051][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.481532][ T4210] usb usb5-port1: attempt power cycle [ 414.491288][ T3657] usb 2-1: Using ep0 maxpacket: 16 [ 414.502464][ T8202] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 414.590193][ T27] audit: type=1326 audit(1720785659.438:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8235 comm="syz.2.1430" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc508d75bd9 code=0x0 [ 414.611390][ T3657] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 414.614372][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.674250][ T8202] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 414.691431][ T3657] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 414.752151][ T3657] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.755161][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.793410][ T3657] usb 2-1: config 0 descriptor?? [ 414.855946][ T8202] team0: Port device team_slave_0 added [ 414.869902][ T8234] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1428'. [ 414.891253][ T4210] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 414.911771][ T8202] team0: Port device team_slave_1 added [ 414.972019][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.991274][ T4210] usb 5-1: device descriptor read/8, error -71 [ 415.010940][ T8202] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 415.024830][ T8202] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 415.056259][ T8202] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 415.074021][ T8202] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 415.081287][ T8202] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 415.108214][ T8202] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 415.191571][ T8202] device hsr_slave_0 entered promiscuous mode [ 415.198766][ T8202] device hsr_slave_1 entered promiscuous mode [ 415.205677][ T8202] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 415.222658][ T8202] Cannot create hsr debugfs directory [ 415.261205][ T4210] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 415.270455][ T8228] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 415.289267][ T8228] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 415.371492][ T4210] usb 5-1: device descriptor read/8, error -71 [ 415.465877][ T8240] afs: Bad value for 'flock' [ 415.491653][ T4210] usb usb5-port1: unable to enumerate USB device [ 415.633663][ T8228] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 415.671719][ T8228] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 415.722064][ T3657] hid (null): bogus close delimiter [ 415.730137][ T3657] hid-generic 0003:0158:0100.001A: unknown main item tag 0x1 [ 415.773802][ T3657] hid-generic 0003:0158:0100.001A: unexpected long global item [ 415.892851][ T3657] hid-generic: probe of 0003:0158:0100.001A failed with error -22 [ 415.959085][ T3657] usb 2-1: USB disconnect, device number 19 [ 416.311583][ T3563] Bluetooth: hci0: command tx timeout [ 416.971552][ T8253] can0: slcan on ttyprintk. [ 417.142646][ T8252] can0 (unregistered): slcan off ttyprintk. [ 417.555065][ T8268] mmap: syz.0.1440 (8268) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 417.590661][ T11] device hsr_slave_0 left promiscuous mode [ 417.629097][ T11] device hsr_slave_1 left promiscuous mode [ 417.643513][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 417.663077][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 417.679677][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 417.687577][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 417.702916][ T11] device bridge_slave_1 left promiscuous mode [ 417.714349][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.723700][ T11] device bridge_slave_0 left promiscuous mode [ 417.730782][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.834443][ T11] device veth1_macvtap left promiscuous mode [ 417.849381][ T11] device veth0_macvtap left promiscuous mode [ 417.860707][ T11] device veth1_vlan left promiscuous mode [ 417.875258][ T11] device veth0_vlan left promiscuous mode [ 418.391473][ T3565] Bluetooth: hci0: command tx timeout [ 419.151294][ T3598] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 419.277167][ T11] team0 (unregistering): Port device virt_wifi0 removed [ 419.297197][ T8286] kvm: emulating exchange as write [ 419.429250][ T3598] usb 5-1: Using ep0 maxpacket: 16 [ 419.571526][ T3598] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 419.582959][ T3598] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 419.592318][ T3598] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.603337][ T3598] usb 5-1: config 0 descriptor?? [ 419.776952][ T11] team0 (unregistering): Port device team_slave_1 removed [ 419.850491][ T11] team0 (unregistering): Port device team_slave_0 removed [ 419.904854][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 419.957840][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 420.052502][ T8281] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 420.077583][ T8281] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 420.347194][ T8281] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 420.373497][ T8281] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 420.402443][ T3598] hid (null): bogus close delimiter [ 420.420107][ T3598] hid-generic 0003:0158:0100.001B: unknown main item tag 0x1 [ 420.541164][ T3565] Bluetooth: hci0: command tx timeout [ 420.567954][ T3598] hid-generic 0003:0158:0100.001B: unexpected long global item [ 420.581461][ T3598] hid-generic: probe of 0003:0158:0100.001B failed with error -22 [ 422.107744][ T14] usb 5-1: USB disconnect, device number 36 [ 422.682494][ T11] bond0 (unregistering): Released all slaves [ 422.834061][ T8202] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 422.857841][ T8294] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1448'. [ 422.892306][ T8202] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 422.966198][ T8202] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 423.016471][ T8202] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 423.146434][ T8311] loop2: detected capacity change from 0 to 512 [ 423.213674][ T8311] EXT4-fs (loop2): 1 orphan inode deleted [ 423.316062][ T8311] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 423.417681][ T8311] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038 (0x7fffffff) [ 423.568476][ T7943] EXT4-fs error (device loop2): ext4_map_blocks:607: inode #2: block 3: comm syz-executor: lblock 0 mapped to illegal pblock 3 (length 1) [ 423.635054][ T7943] EXT4-fs (loop2): Remounting filesystem read-only [ 423.648201][ T8202] 8021q: adding VLAN 0 to HW filter on device bond0 [ 423.651099][ T7943] EXT4-fs warning (device loop2): htree_dirblock_to_tree:1082: inode #2: lblock 0: comm syz-executor: error -117 reading directory block [ 423.707409][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 423.727880][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 423.746682][ T8202] 8021q: adding VLAN 0 to HW filter on device team0 [ 423.755254][ T7943] EXT4-fs (loop2): unmounting filesystem. [ 423.775966][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 423.795035][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 423.809747][ T3596] bridge0: port 1(bridge_slave_0) entered blocking state [ 423.816993][ T3596] bridge0: port 1(bridge_slave_0) entered forwarding state [ 423.848305][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 423.860350][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 423.875829][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 423.898659][ T3596] bridge0: port 2(bridge_slave_1) entered blocking state [ 423.905999][ T3596] bridge0: port 2(bridge_slave_1) entered forwarding state [ 423.939798][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 424.627135][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 424.651809][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 424.682788][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 424.702299][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 424.833974][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 424.854158][ T8202] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 424.902133][ T8202] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 426.091574][ T3605] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 426.111910][ T3605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 426.430302][ T3605] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 426.439062][ T3605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 426.451539][ T3605] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 426.468923][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 426.631865][ T8338] loop1: detected capacity change from 0 to 512 [ 426.686695][ T8338] EXT4-fs error (device loop1): ext4_orphan_get:1396: inode #15: comm syz.1.1462: casefold flag without casefold feature [ 426.755629][ T8338] EXT4-fs (loop1): Remounting filesystem read-only [ 426.768304][ T8338] EXT4-fs error (device loop1): ext4_orphan_get:1422: comm syz.1.1462: bad orphan inode 15 [ 426.800079][ T8338] ext4_test_bit(bit=14, block=18) = 1 [ 426.809813][ T8338] is_bad_inode(inode)=0 [ 426.849243][ T8338] NEXT_ORPHAN(inode)=1023 [ 426.861188][ T8338] max_ino=32 [ 426.864527][ T8338] i_nlink=0 [ 426.867733][ T8338] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 426.942851][ T8348] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1466'. [ 426.966707][ T8338] ext4 filesystem being mounted at /50/bus supports timestamps until 2038 (0x7fffffff) [ 426.992471][ T8338] EXT4-fs (loop1): unmounting filesystem. [ 427.049486][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 427.065123][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 427.095605][ T8202] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 427.205080][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 427.233290][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 427.386115][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 427.410272][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 427.453164][ T8202] device veth0_vlan entered promiscuous mode [ 427.481399][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 427.526712][ T3563] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 427.542157][ T3563] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 427.544062][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 427.557479][ T3558] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 427.568076][ T3558] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 427.576148][ T3558] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 427.583571][ T3558] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 427.607205][ T8202] device veth1_vlan entered promiscuous mode [ 427.682417][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 427.693868][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 427.713750][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 427.733247][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 427.756662][ T8202] device veth0_macvtap entered promiscuous mode [ 427.820400][ T8202] device veth1_macvtap entered promiscuous mode [ 427.937924][ T8202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 427.989597][ T8202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 428.002917][ T8202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 428.019941][ T8202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 428.047670][ T8202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 428.063173][ T8202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 428.077495][ T8202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 428.093568][ T8202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 428.139605][ T8202] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 428.176020][ T8366] 9pnet_fd: Insufficient options for proto=fd [ 428.206636][ T3605] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 428.229883][ T3605] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 428.274100][ T3605] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 428.320895][ T3605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 428.365554][ T8202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 428.383798][ T8202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 428.394227][ T8202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 428.406108][ T8202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 428.418071][ T8202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 428.428918][ T8202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 428.460024][ T8202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 428.504124][ T8202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 428.548226][ T8202] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 428.582334][ T3605] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 428.598653][ T3605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 428.631174][ T8202] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.640345][ T8202] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.658205][ T8202] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.671324][ T8202] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.044763][ T1164] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 429.086895][ T1164] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 429.134852][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 429.157596][ T3798] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 429.184078][ T8355] chnl_net:caif_netlink_parms(): no params data found [ 429.191266][ T3798] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 429.247936][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 429.501247][ T8384] device vlan1 entered promiscuous mode [ 429.521940][ T8355] bridge0: port 1(bridge_slave_0) entered blocking state [ 429.551325][ T8355] bridge0: port 1(bridge_slave_0) entered disabled state [ 429.599517][ T8355] device bridge_slave_0 entered promiscuous mode [ 429.618862][ T8381] device vlan1 left promiscuous mode [ 429.641824][ T8355] bridge0: port 2(bridge_slave_1) entered blocking state [ 429.671252][ T3558] Bluetooth: hci2: command tx timeout [ 429.712784][ T8355] bridge0: port 2(bridge_slave_1) entered disabled state [ 429.721458][ T8355] device bridge_slave_1 entered promiscuous mode [ 429.787653][ T8355] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 429.860832][ T8355] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 429.986806][ T8355] team0: Port device team_slave_0 added [ 430.005505][ T8387] loop3: detected capacity change from 0 to 4096 [ 430.038628][ T8355] team0: Port device team_slave_1 added [ 430.065494][ T8389] loop1: detected capacity change from 0 to 512 [ 430.090833][ T8387] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 430.136698][ T8389] EXT4-fs error (device loop1): ext4_orphan_get:1396: inode #15: comm syz.1.1477: casefold flag without casefold feature [ 430.161363][ T8389] EXT4-fs (loop1): Remounting filesystem read-only [ 430.167910][ T8389] EXT4-fs error (device loop1): ext4_orphan_get:1422: comm syz.1.1477: bad orphan inode 15 [ 430.191533][ T8389] ext4_test_bit(bit=14, block=18) = 1 [ 430.196986][ T8389] is_bad_inode(inode)=0 [ 430.231614][ T8389] NEXT_ORPHAN(inode)=1023 [ 430.236044][ T8389] max_ino=32 [ 430.249054][ T8355] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 430.287140][ T8355] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 430.315399][ C0] vkms_vblank_simulate: vblank timer overrun [ 430.329019][ T8389] i_nlink=0 [ 430.334559][ T8202] EXT4-fs (loop3): unmounting filesystem. [ 430.347399][ T8389] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 430.361343][ T8389] ext4 filesystem being mounted at /54/bus supports timestamps until 2038 (0x7fffffff) [ 430.378109][ T8355] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 430.394551][ T8389] EXT4-fs (loop1): unmounting filesystem. [ 430.406936][ T8355] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 430.451238][ T8355] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 430.489060][ T8355] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 430.601924][ T8355] device hsr_slave_0 entered promiscuous mode [ 430.622246][ T8355] device hsr_slave_1 entered promiscuous mode [ 430.643640][ T8355] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 430.651570][ T8355] Cannot create hsr debugfs directory [ 430.800259][ T8407] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1482'. [ 431.028494][ T8409] loop1: detected capacity change from 0 to 164 [ 431.095086][ T8409] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 431.234565][ T8355] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.332619][ T8411] device vlan1 entered promiscuous mode [ 431.446833][ T8355] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.515996][ T8410] device vlan1 left promiscuous mode [ 431.627592][ T8355] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.752322][ T3558] Bluetooth: hci2: command tx timeout [ 431.895023][ T8355] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.327052][ T8355] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 432.369833][ T8355] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 432.430958][ T8355] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 432.499922][ T8355] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 432.814592][ T8355] 8021q: adding VLAN 0 to HW filter on device bond0 [ 432.858752][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 432.877638][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 432.904999][ T8355] 8021q: adding VLAN 0 to HW filter on device team0 [ 432.946290][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 432.957435][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 432.987736][ T3596] bridge0: port 1(bridge_slave_0) entered blocking state [ 432.994928][ T3596] bridge0: port 1(bridge_slave_0) entered forwarding state [ 433.046548][ T3605] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 433.055758][ T3605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 433.076933][ T3605] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 433.096328][ T3605] bridge0: port 2(bridge_slave_1) entered blocking state [ 433.103533][ T3605] bridge0: port 2(bridge_slave_1) entered forwarding state [ 433.131619][ T3605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 433.152497][ T8439] device vlan1 entered promiscuous mode [ 433.176545][ T8439] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1496'. [ 433.211153][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 433.220394][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 433.240640][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 433.271697][ T8438] device vlan1 left promiscuous mode [ 433.279118][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 433.297553][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 433.320656][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 433.340393][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 433.367081][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 433.394898][ T8355] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 433.421261][ T8355] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 433.441690][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 433.461744][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 433.732800][ T8455] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1500'. [ 433.825604][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 433.833771][ T3558] Bluetooth: hci2: command tx timeout [ 433.851229][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 433.876170][ T8355] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 433.914309][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 433.925919][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 433.984702][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 434.004569][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 434.038787][ T8355] device veth0_vlan entered promiscuous mode [ 434.063211][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 434.077252][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 434.108450][ T8355] device veth1_vlan entered promiscuous mode [ 434.170180][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 434.181968][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 434.193117][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 434.207937][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 434.229634][ T8355] device veth0_macvtap entered promiscuous mode [ 434.261456][ T8355] device veth1_macvtap entered promiscuous mode [ 434.309146][ T8355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 434.321720][ T8355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.374856][ T8355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 434.423099][ T8355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.450438][ T8355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 434.479276][ T8462] loop3: detected capacity change from 0 to 2048 [ 434.506485][ T8355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.530671][ T8355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 434.541695][ T8355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.560810][ T8355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 434.579110][ T8462] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 434.608300][ T8355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.647782][ T8355] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 434.677322][ T3605] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 434.696148][ T3605] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 434.721896][ T3605] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 434.749047][ T3605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 434.780314][ T8355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 434.798822][ T8355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.816491][ T8355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 434.827229][ T8355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.837434][ T8355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 434.848341][ T8355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.859025][ T8355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 434.869886][ T8355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.880689][ T8355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 434.891403][ T8355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.931489][ T8355] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 434.951387][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 434.994955][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 435.034739][ T8355] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.179512][ T8355] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.198768][ T8355] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.229867][ T8355] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.273478][ T8470] device vlan1 entered promiscuous mode [ 435.293204][ T8472] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1506'. [ 435.351758][ T8469] device vlan1 left promiscuous mode [ 435.396805][ T8474] hub 9-0:1.0: USB hub found [ 435.402053][ T8474] hub 9-0:1.0: 8 ports detected [ 436.605665][ T3558] Bluetooth: hci2: command tx timeout [ 437.045144][ T4427] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 437.079823][ T4427] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 437.132996][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 437.159450][ T3798] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 437.180135][ T3798] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 437.204861][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 438.354106][ T8500] loop3: detected capacity change from 0 to 2048 [ 438.370540][ T8500] ext3: Unknown parameter 'uid' [ 438.406586][ T8504] device vlan1 entered promiscuous mode [ 438.410909][ T8502] loop1: detected capacity change from 0 to 2048 [ 438.430806][ T8504] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1517'. [ 438.452761][ T8502] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 438.454379][ T8503] device vlan1 left promiscuous mode [ 438.929229][ T8515] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1519'. [ 439.265896][ T8522] binder: Unknown parameter 'seclabel' [ 440.618303][ T1256] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.625454][ T1256] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.461890][ T8518] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1521'. [ 441.762977][ T8533] binder: Unknown parameter 'seclabel' [ 442.645524][ T3565] Bluetooth: hci4: command 0x0406 tx timeout [ 443.531299][ T8330] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 443.759719][ T8543] device vlan1 entered promiscuous mode [ 443.773409][ T8543] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1528'. [ 443.791294][ T8330] usb 1-1: Using ep0 maxpacket: 32 [ 443.806209][ T8542] device vlan1 left promiscuous mode [ 443.893172][ T8545] loop4: detected capacity change from 0 to 2048 [ 443.919811][ T8545] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 443.931534][ T8330] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 443.951149][ T8330] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 443.980794][ T8330] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.052291][ T8330] hub 1-1:4.0: bad descriptor, ignoring hub [ 444.061139][ T8330] hub: probe of 1-1:4.0 failed with error -5 [ 444.070294][ T8330] usbhid 1-1:4.0: couldn't find an input interrupt endpoint [ 444.401600][ T8330] usb 1-1: USB disconnect, device number 27 [ 444.972239][ T8567] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1538'. [ 445.088966][ T8569] device vlan1 entered promiscuous mode [ 445.105522][ T8569] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1540'. [ 445.146149][ T8568] device vlan1 left promiscuous mode [ 446.975072][ T8574] loop4: detected capacity change from 0 to 2048 [ 447.063198][ T8574] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 447.400223][ T8582] binder: Unknown parameter 'seclabel' [ 449.306901][ T8589] loop4: detected capacity change from 0 to 2048 [ 449.556120][ T8596] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1551'. [ 449.763223][ T3558] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 449.782259][ T3558] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 449.791090][ T3558] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 449.800722][ T3558] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 449.808631][ T3558] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 449.816196][ T3558] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 449.870706][ T8602] device vlan1 entered promiscuous mode [ 449.928556][ T8602] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1553'. [ 449.941401][ T3596] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 450.010950][ T8601] device vlan1 left promiscuous mode [ 450.191070][ T3596] usb 5-1: Using ep0 maxpacket: 32 [ 450.321371][ T3596] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 450.376429][ T8606] loop2: detected capacity change from 0 to 2048 [ 450.383192][ T3596] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 450.422803][ T3596] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.465617][ T8606] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 451.921276][ T3558] Bluetooth: hci5: command tx timeout [ 452.000776][ T3596] hub 5-1:4.0: bad descriptor, ignoring hub [ 452.011258][ T3596] hub: probe of 5-1:4.0 failed with error -5 [ 452.041831][ T3596] usbhid 5-1:4.0: couldn't find an input interrupt endpoint [ 452.124945][ T3596] usb 5-1: USB disconnect, device number 37 [ 452.378894][ T8599] chnl_net:caif_netlink_parms(): no params data found [ 452.741434][ T8626] binder: Unknown parameter 'seclabel' [ 453.991134][ T3558] Bluetooth: hci5: command tx timeout [ 454.642525][ T8621] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1556'. [ 455.116364][ T8599] bridge0: port 1(bridge_slave_0) entered blocking state [ 455.151186][ T8599] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.191791][ T8599] device bridge_slave_0 entered promiscuous mode [ 455.236883][ T8599] bridge0: port 2(bridge_slave_1) entered blocking state [ 455.290116][ T8599] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.330687][ T8599] device bridge_slave_1 entered promiscuous mode [ 455.541155][ T8648] device vlan1 entered promiscuous mode [ 455.567550][ T8648] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1563'. [ 455.640978][ T8599] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 455.778694][ T8647] device vlan1 left promiscuous mode [ 455.787310][ T8599] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 455.951296][ T8599] team0: Port device team_slave_0 added [ 455.959999][ T8599] team0: Port device team_slave_1 added [ 456.070315][ T8599] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 456.081715][ T3558] Bluetooth: hci5: command tx timeout [ 456.089356][ T8652] xt_CT: You must specify a L4 protocol and not use inversions on it [ 456.102116][ T8599] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 456.192579][ T8599] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 456.239669][ T8599] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 456.264388][ T8599] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 456.321106][ T8599] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 456.444146][ T8599] device hsr_slave_0 entered promiscuous mode [ 456.467713][ T8599] device hsr_slave_1 entered promiscuous mode [ 456.494208][ T8599] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 456.519936][ T8599] Cannot create hsr debugfs directory [ 456.876618][ T8656] loop2: detected capacity change from 0 to 2048 [ 456.946840][ T8658] loop3: detected capacity change from 0 to 2048 [ 456.982240][ T8658] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 457.058220][ T8599] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.225000][ T8599] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.282146][ T8661] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1567'. [ 457.413710][ T8599] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.556495][ T8599] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.855733][ T8664] loop2: detected capacity change from 0 to 2048 [ 457.942726][ T8664] loop2: p1 < > p4 [ 457.956247][ T8664] loop2: p4 size 8388608 extends beyond EOD, truncated [ 458.026648][ T8599] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 458.090637][ T8599] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 458.118937][ T8599] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 458.151116][ T3558] Bluetooth: hci5: command tx timeout [ 458.201732][ T8599] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 458.373476][ T8667] loop2: detected capacity change from 0 to 2048 [ 458.493523][ T8667] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 458.525073][ T8599] 8021q: adding VLAN 0 to HW filter on device bond0 [ 458.641407][ T8667] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 458.692466][ T8667] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 1 with error 28 [ 458.720720][ T8599] 8021q: adding VLAN 0 to HW filter on device team0 [ 458.726993][ T8667] EXT4-fs (loop2): This should not happen!! Data will be lost [ 458.726993][ T8667] [ 458.754505][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 458.767066][ T8667] EXT4-fs (loop2): Total free blocks count 0 [ 458.779412][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 458.803117][ T8667] EXT4-fs (loop2): Free/Dirty block details [ 458.826147][ T8667] EXT4-fs (loop2): free_blocks=2415919104 [ 458.861431][ T8667] EXT4-fs (loop2): dirty_blocks=16 [ 458.879923][ T8667] EXT4-fs (loop2): Block reservation details [ 458.908507][ T8667] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 458.962223][ T8671] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 11 with error 28 [ 459.002645][ T3657] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 459.025783][ T3657] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 459.068698][ T3657] bridge0: port 1(bridge_slave_0) entered blocking state [ 459.076011][ T3657] bridge0: port 1(bridge_slave_0) entered forwarding state [ 459.132205][ T3657] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 459.165688][ T3657] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 459.203626][ T3657] bridge0: port 2(bridge_slave_1) entered blocking state [ 459.210842][ T3657] bridge0: port 2(bridge_slave_1) entered forwarding state [ 459.267885][ T3657] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 459.394790][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 459.405705][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 459.449892][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 459.492339][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 459.650212][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 459.663606][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 459.703520][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 459.747238][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 459.792162][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 459.829378][ T4427] device hsr_slave_0 left promiscuous mode [ 459.862427][ T4427] device hsr_slave_1 left promiscuous mode [ 459.883307][ T4427] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 459.929271][ T4427] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 459.958698][ T4427] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 459.983251][ T4427] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 460.008280][ T4427] device bridge_slave_1 left promiscuous mode [ 460.042715][ T4427] bridge0: port 2(bridge_slave_1) entered disabled state [ 460.083932][ T4427] device bridge_slave_0 left promiscuous mode [ 460.138395][ T4427] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.257796][ T8679] hub 9-0:1.0: USB hub found [ 460.263102][ T8679] hub 9-0:1.0: 8 ports detected [ 460.582724][ T4427] device veth1_macvtap left promiscuous mode [ 460.603442][ T4427] device veth0_macvtap left promiscuous mode [ 460.625344][ T4427] device veth1_vlan left promiscuous mode [ 460.801461][ T4427] device veth0_vlan left promiscuous mode [ 463.259501][ T4427] team0 (unregistering): Port device virt_wifi0 removed [ 463.364665][ T8697] loop3: detected capacity change from 0 to 2048 [ 463.386704][ T8697] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 463.560359][ T4427] team0 (unregistering): Port device team_slave_1 removed [ 463.608843][ T4427] team0 (unregistering): Port device team_slave_0 removed [ 463.650910][ T4427] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 463.699053][ T4427] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 464.186253][ T4427] bond0 (unregistering): Released all slaves [ 464.293514][ T8683] device vlan1 entered promiscuous mode [ 464.310114][ T8687] device vlan1 left promiscuous mode [ 464.340979][ T8330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 464.349813][ T8330] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 464.373323][ T8691] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1573'. [ 464.441265][ T8599] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 464.717278][ T8701] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1578'. [ 464.946035][ T8715] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1580'. [ 465.233154][ T8725] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1582'. [ 465.242525][ T3595] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 465.369399][ T8599] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 465.441318][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 465.459111][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 465.491150][ T3595] usb 5-1: Using ep0 maxpacket: 16 [ 465.587223][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 465.611688][ T3595] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 465.631586][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 465.640080][ T3595] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 465.664580][ T3595] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.691593][ T8599] device veth0_vlan entered promiscuous mode [ 465.704479][ T3595] usb 5-1: config 0 descriptor?? [ 465.717014][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 465.743488][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 465.780814][ T8599] device veth1_vlan entered promiscuous mode [ 465.803462][ T8330] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 465.839216][ T8330] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 465.877055][ T8330] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 465.953726][ T8330] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 465.966593][ T8330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 465.982044][ T8330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 466.004308][ T8599] device veth0_macvtap entered promiscuous mode [ 466.047202][ T8599] device veth1_macvtap entered promiscuous mode [ 466.106282][ T8599] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 466.129587][ T8599] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 466.159140][ T8599] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 466.176531][ T8718] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 466.197178][ T8718] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 466.235309][ T8599] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 466.268853][ T8599] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 466.300550][ T8599] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 466.323880][ T8599] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 466.351869][ T8599] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 466.389568][ T8599] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 466.431040][ T8599] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 466.453328][ T8599] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 466.482923][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 466.501726][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 466.510731][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 466.520802][ T8718] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 466.539828][ T8718] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 466.548720][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 466.583295][ T8599] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 466.592397][ T3595] hid (null): bogus close delimiter [ 466.601148][ T3657] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 466.617967][ T3595] hid-generic 0003:0158:0100.001C: unknown main item tag 0x1 [ 466.621240][ T8599] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 466.651672][ T8599] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 466.662281][ T3595] hid-generic 0003:0158:0100.001C: unexpected long global item [ 466.662953][ T3595] hid-generic: probe of 0003:0158:0100.001C failed with error -22 [ 466.783187][ T8599] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 466.816851][ T3599] usb 5-1: USB disconnect, device number 38 [ 466.820589][ T8599] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 466.851070][ T3657] usb 1-1: Using ep0 maxpacket: 32 [ 466.862963][ T8599] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 466.897125][ T8599] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 466.919714][ T8599] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 466.940248][ T8599] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 466.971383][ T8599] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 466.991775][ T3657] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 467.004698][ T8599] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 467.012043][ T3657] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 467.032718][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 467.040877][ T3657] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 467.055613][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 467.070368][ T3657] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.081383][ T3657] usb 1-1: config 0 descriptor?? [ 467.092434][ T8599] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.111669][ T8599] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.120405][ T8599] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.134451][ T3657] hub 1-1:0.0: USB hub found [ 467.159712][ T8599] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.305889][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 467.330416][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 467.361519][ T3657] hub 1-1:0.0: config failed, can't read hub descriptor (err -90) [ 467.369428][ T8330] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 467.438129][ T5487] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 467.461286][ T5487] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 467.517252][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 467.570637][ T8738] loop2: detected capacity change from 0 to 2048 [ 467.633461][ T8738] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 467.671459][ T3657] usbhid 1-1:0.0: can't add hid device: -71 [ 467.689130][ T3657] usbhid: probe of 1-1:0.0 failed with error -71 [ 467.753425][ T3657] usb 1-1: USB disconnect, device number 28 [ 467.843533][ T8747] device vlan1 entered promiscuous mode [ 467.863065][ T8747] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1589'. [ 467.893645][ T8746] device vlan1 left promiscuous mode [ 468.084942][ T8749] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1590'. [ 470.267670][ T8763] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1593'. [ 472.531474][ T14] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 474.123494][ T8790] device vlan1 entered promiscuous mode [ 474.151235][ T14] usb 5-1: Using ep0 maxpacket: 16 [ 474.163771][ T8790] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1601'. [ 474.219293][ T8789] device vlan1 left promiscuous mode [ 474.271557][ T14] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 474.300826][ T14] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 474.320519][ T14] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.363023][ T14] usb 5-1: config 0 descriptor?? [ 475.721198][ T8798] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1603'. [ 476.571459][ T14] usbhid 5-1:0.0: can't add hid device: -71 [ 476.577692][ T14] usbhid: probe of 5-1:0.0 failed with error -71 [ 476.604727][ T14] usb 5-1: USB disconnect, device number 39 [ 477.131277][ T3599] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 477.391096][ T3599] usb 2-1: Using ep0 maxpacket: 32 [ 477.541493][ T3599] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 477.558972][ T3599] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 477.570945][ T3599] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 477.583795][ T3599] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 477.594708][ T3599] usb 2-1: Duplicate descriptor for config 0 interface 0 altsetting 0, skipping [ 477.975024][ T8825] loop2: detected capacity change from 0 to 128 [ 477.982660][ T8825] FAT-fs (loop2): Unrecognized mount option "error.3 /s=c " or missing value [ 478.051885][ T3599] usb 2-1: New USB device found, idVendor=0c52, idProduct=2842, bcdDevice=aa.15 [ 478.308097][ T3565] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 478.317097][ T3599] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 478.337844][ T3599] usb 2-1: Product: 珋ᩇ믨ꩭ俸鮕煼少髪ޘ︌眝⎦퍆P郳싏㶁​賴鿝놂㓼睉턁笥ő둾뷤煦볹ҙﴩ贯㻣춌굈 [ 478.352198][ T3599] usb 2-1: SerialNumber: syz [ 479.485296][ T3565] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 479.494051][ T3565] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 479.850317][ T3565] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 479.858380][ T3565] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 479.870308][ T3565] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 479.932587][ T3599] usb 2-1: config 0 descriptor?? [ 479.991449][ T3599] usb 2-1: can't set config #0, error -71 [ 480.032548][ T3599] usb 2-1: USB disconnect, device number 20 [ 480.397597][ T8836] loop1: detected capacity change from 0 to 2048 [ 480.458929][ T8838] device vlan1 entered promiscuous mode [ 480.515636][ T8836] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 480.542909][ T8838] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1613'. [ 480.587707][ T8837] device vlan1 left promiscuous mode [ 481.014259][ T8821] chnl_net:caif_netlink_parms(): no params data found [ 481.171220][ T3595] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 481.195665][ T8853] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1615'. [ 481.387748][ T8821] bridge0: port 1(bridge_slave_0) entered blocking state [ 481.395167][ T8821] bridge0: port 1(bridge_slave_0) entered disabled state [ 481.406098][ T8821] device bridge_slave_0 entered promiscuous mode [ 481.415982][ T8821] bridge0: port 2(bridge_slave_1) entered blocking state [ 481.423108][ T3595] usb 3-1: Using ep0 maxpacket: 16 [ 481.428509][ T8821] bridge0: port 2(bridge_slave_1) entered disabled state [ 481.436996][ T8821] device bridge_slave_1 entered promiscuous mode [ 481.493726][ T8821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 481.534974][ T8821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 481.541313][ T3595] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 481.574511][ T3595] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 481.621317][ T3595] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.660797][ T3595] usb 3-1: config 0 descriptor?? [ 481.691651][ T8821] team0: Port device team_slave_0 added [ 481.720655][ T8821] team0: Port device team_slave_1 added [ 481.852252][ T8821] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 481.899922][ T8821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 481.931166][ T3565] Bluetooth: hci1: command tx timeout [ 482.037919][ T8821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 482.063033][ T8821] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 482.100655][ T8821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 482.172824][ T8847] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 482.181464][ T8821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 482.192565][ T8847] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 482.452187][ T8821] device hsr_slave_0 entered promiscuous mode [ 482.455941][ T8847] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 482.474723][ T8821] device hsr_slave_1 entered promiscuous mode [ 482.485641][ T8847] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 482.532250][ T3595] hid (null): bogus close delimiter [ 482.552865][ T3595] hid-generic 0003:0158:0100.001D: unknown main item tag 0x1 [ 482.560297][ T3595] hid-generic 0003:0158:0100.001D: unexpected long global item [ 482.601770][ T3595] hid-generic: probe of 0003:0158:0100.001D failed with error -22 [ 482.745567][ T3657] usb 3-1: USB disconnect, device number 25 [ 483.045663][ T8821] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.190032][ T8821] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.366066][ T8821] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.418785][ T8873] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1621'. [ 483.516238][ T8821] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.714554][ T8881] device vlan1 entered promiscuous mode [ 483.743755][ T8881] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1625'. [ 483.829881][ T8880] device vlan1 left promiscuous mode [ 483.965347][ T8821] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 483.991241][ T3565] Bluetooth: hci1: command tx timeout [ 484.005693][ T8821] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 484.055997][ T8821] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 484.244312][ T8821] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 484.565349][ T8821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 484.662732][ T8821] 8021q: adding VLAN 0 to HW filter on device team0 [ 484.679155][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 484.692345][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 484.800177][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 484.822625][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 484.841498][ T3598] bridge0: port 1(bridge_slave_0) entered blocking state [ 484.848658][ T3598] bridge0: port 1(bridge_slave_0) entered forwarding state [ 484.946667][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 484.961984][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 484.970967][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 485.012012][ T22] bridge0: port 2(bridge_slave_1) entered blocking state [ 485.019267][ T22] bridge0: port 2(bridge_slave_1) entered forwarding state [ 485.041555][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 485.077189][ T8896] team0: Port device virt_wifi0 added [ 485.231439][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 485.260932][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 485.293229][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 485.334353][ T8909] loop2: detected capacity change from 0 to 512 [ 485.356045][ T8907] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1633'. [ 485.370885][ T8909] EXT4-fs warning (device loop2): read_mmp_block:115: Error -117 while reading MMP block 0 [ 485.406376][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 485.416964][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 485.450118][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 485.476090][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 485.497367][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 485.517291][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 485.739484][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 485.778237][ T8821] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 485.855257][ T8915] hub 6-0:1.0: USB hub found [ 485.860568][ T8915] hub 6-0:1.0: 1 port detected [ 486.071226][ T3565] Bluetooth: hci1: command tx timeout [ 487.392227][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 487.407858][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 487.470496][ T8821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 487.712255][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 487.723984][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 487.762056][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 487.770637][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 487.876917][ T8945] loop4: detected capacity change from 0 to 164 [ 488.011341][ T8945] loop4: detected capacity change from 164 to 0 [ 488.087628][ T8821] device veth0_vlan entered promiscuous mode [ 488.103034][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 488.119024][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 488.151593][ T3565] Bluetooth: hci1: command tx timeout [ 488.186530][ T4427] device hsr_slave_0 left promiscuous mode [ 488.202674][ T4427] device hsr_slave_1 left promiscuous mode [ 488.209854][ T4427] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 488.227046][ T4427] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 488.237253][ T4427] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 488.255545][ T4427] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 488.274750][ T4427] device bridge_slave_1 left promiscuous mode [ 488.288602][ T4427] bridge0: port 2(bridge_slave_1) entered disabled state [ 488.306326][ T4427] device bridge_slave_0 left promiscuous mode [ 488.315086][ T4427] bridge0: port 1(bridge_slave_0) entered disabled state [ 488.426376][ T8956] loop4: detected capacity change from 0 to 1024 [ 488.426622][ T4427] device veth1_macvtap left promiscuous mode [ 488.439186][ T4427] device veth0_macvtap left promiscuous mode [ 488.446015][ T4427] device veth1_vlan left promiscuous mode [ 488.452683][ T4427] device veth0_vlan left promiscuous mode [ 488.477662][ T8956] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 488.557407][ T7290] EXT4-fs (loop4): unmounting filesystem. [ 489.436941][ T4427] team0 (unregistering): Port device team_slave_1 removed [ 489.516659][ T4427] team0 (unregistering): Port device team_slave_0 removed [ 489.587869][ T4427] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 489.652097][ T4427] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 490.266605][ T4427] bond0 (unregistering): Released all slaves [ 490.382543][ T8952] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1644'. [ 490.394115][ T8821] device veth1_vlan entered promiscuous mode [ 490.420944][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 490.534019][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 490.554747][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 490.592735][ T8821] device veth0_macvtap entered promiscuous mode [ 490.628959][ T8821] device veth1_macvtap entered promiscuous mode [ 490.758056][ T8821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 490.827691][ T8821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 490.858916][ T8821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 490.869791][ T8821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 490.889799][ T8821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 490.913335][ T8821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 490.938621][ T8821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 490.959464][ T8821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 490.993293][ T8821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 491.616733][ T8975] loop2: detected capacity change from 0 to 512 [ 491.628833][ T8821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 491.683010][ T8821] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 491.733310][ T3657] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 491.746207][ T3657] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 491.787785][ T8975] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 491.840141][ T8975] ext4 filesystem being mounted at /38/file0 supports timestamps until 2038 (0x7fffffff) [ 491.862490][ T3657] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 491.905922][ T3657] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 491.957342][ T8975] EXT4-fs error (device loop2): ext4_do_update_inode:5210: inode #2: comm syz.2.1651: corrupted inode contents [ 491.972750][ T8821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 492.025723][ T8821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.068318][ T8975] EXT4-fs error (device loop2): ext4_dirty_inode:6072: inode #2: comm syz.2.1651: mark_inode_dirty error [ 492.092483][ T8821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 492.155631][ T8821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.185555][ T8975] EXT4-fs error (device loop2): ext4_do_update_inode:5210: inode #2: comm syz.2.1651: corrupted inode contents [ 492.217818][ T8821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 492.269160][ T8821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.291259][ T8975] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #2: comm syz.2.1651: mark_inode_dirty error [ 492.327328][ T8821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 492.374679][ T8821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.417019][ T8821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 492.472969][ T8821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.546296][ T8821] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 492.605349][ T8355] EXT4-fs (loop2): unmounting filesystem. [ 492.644056][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 492.662710][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 492.790867][ T8997] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1654'. [ 492.974581][ T9007] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1658'. [ 492.986222][ T8821] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.015654][ T8821] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.029975][ T9007] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1658'. [ 493.054921][ T8821] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.084187][ T8821] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.128197][ T9008] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1657'. [ 493.258141][ T9018] loop1: detected capacity change from 0 to 512 [ 493.345922][ T9018] ext4: Unknown parameter 'fsname' [ 493.353829][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 493.391823][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 493.420568][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 493.449661][ T4428] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 493.498877][ T4428] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 493.515014][ T9018] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1661'. [ 493.528992][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 493.748675][ T9018] loop1: detected capacity change from 0 to 512 [ 493.763896][ T9018] EXT4-fs: Ignoring removed oldalloc option [ 493.811844][ T9018] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 493.925771][ T9018] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 493.998823][ T9018] ext4 filesystem being mounted at /15/bus supports timestamps until 2038 (0x7fffffff) [ 494.100140][ T9018] EXT4-fs (loop1): unmounting filesystem. [ 494.463722][ T3565] Bluetooth: hci0: sending frame failed (-49) [ 494.471641][ T3558] Bluetooth: hci0: Opcode 0x1003 failed: -49 [ 494.769751][ T9059] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1671'. [ 495.011190][ T22] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 495.273828][ T22] usb 2-1: Using ep0 maxpacket: 16 [ 495.403519][ T22] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 495.428730][ T22] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 495.488626][ T22] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.512931][ T22] usb 2-1: config 0 descriptor?? [ 495.972735][ T9056] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 496.016255][ T9056] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 496.319337][ T9056] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 496.338233][ T9056] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 496.392095][ T22] hid (null): bogus close delimiter [ 496.405475][ T22] hid-generic 0003:0158:0100.001E: unknown main item tag 0x1 [ 496.453729][ T22] hid-generic 0003:0158:0100.001E: unexpected long global item [ 496.475879][ T22] hid-generic: probe of 0003:0158:0100.001E failed with error -22 [ 496.592020][ T9087] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1680'. [ 496.606005][ T3596] usb 2-1: USB disconnect, device number 21 [ 497.320922][ T9102] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1685'. [ 497.415309][ T9104] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1684'. [ 498.301129][ T3597] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 498.541141][ T3597] usb 4-1: Using ep0 maxpacket: 16 [ 498.661343][ T3597] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 498.701794][ T3597] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 498.744177][ T3597] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.803366][ T3597] usb 4-1: config 0 descriptor?? [ 498.934378][ T9148] IPVS: sh: UDP 0.0.0.0:0 - no destination available [ 498.982637][ T9148] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 499.286502][ T9124] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 499.301101][ T22] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 499.309359][ T9124] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 499.561236][ T22] usb 1-1: Using ep0 maxpacket: 32 [ 499.584272][ T9124] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 499.616217][ T9124] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 499.637413][ T3597] hid (null): bogus close delimiter [ 499.654158][ T3597] hid-generic 0003:0158:0100.001F: unknown main item tag 0x1 [ 499.690627][ T3597] hid-generic 0003:0158:0100.001F: unexpected long global item [ 499.721528][ T22] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 499.728955][ T3597] hid-generic: probe of 0003:0158:0100.001F failed with error -22 [ 499.738515][ T22] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 499.758704][ T22] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 499.789836][ T22] usb 1-1: config 1 has no interface number 0 [ 499.796339][ T22] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 499.820158][ T22] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 50692, setting to 1024 [ 499.848114][ T22] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 499.874632][ T22] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 499.884265][ T935] usb 4-1: USB disconnect, device number 20 [ 499.894297][ T22] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 499.931679][ T9148] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 499.964074][ T22] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 500.052251][ T3597] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 500.166525][ T9148] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 500.192578][ T22] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached [ 500.291062][ T3597] usb 5-1: Using ep0 maxpacket: 32 [ 500.411330][ T3597] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 190, changing to 11 [ 500.450080][ T3597] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 25610, setting to 1024 [ 500.471132][ T3597] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 500.480210][ T3597] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 500.535703][ T9155] raw-gadget.4 gadget.4: fail, usb_ep_enable returned -22 [ 500.552357][ T3597] hub 5-1:4.0: USB hub found [ 500.603269][ T9162] loop3: detected capacity change from 0 to 1024 [ 500.646769][ T9162] EXT4-fs: quotafile must be on filesystem root [ 500.771367][ T3597] hub 5-1:4.0: 2 ports detected [ 501.271299][ T22] snd_usb_pod 1-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 501.432883][ T1256] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.439281][ T1256] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.890574][ T3594] usb 1-1: USB disconnect, device number 29 [ 501.904225][ T3594] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 501.931280][ T3597] hub 5-1:4.0: hub_hub_status failed (err = -32) [ 501.938249][ T3597] hub 5-1:4.0: config failed, can't get hub status (err -32) [ 505.671495][ T3596] usb 5-1: reset high-speed USB device number 40 using dummy_hcd [ 505.761104][ T3596] usb 5-1: device reset changed ep0 maxpacket size! [ 506.910471][ T3596] usb 5-1: USB disconnect, device number 40 [ 507.593410][ T9227] IPVS: sh: UDP 0.0.0.0:0 - no destination available [ 507.643115][ T9227] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 509.971081][ T22] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 510.142799][ T9250] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1739'. [ 510.251264][ T22] usb 5-1: Using ep0 maxpacket: 32 [ 510.382678][ T22] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 510.401935][ T22] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 510.420955][ T22] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 510.523903][ T22] usb 5-1: config 1 has no interface number 0 [ 510.531100][ T22] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 510.542516][ T22] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 50692, setting to 1024 [ 510.554345][ T22] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 510.567400][ T22] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 510.576529][ T22] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 510.641432][ T22] usb 5-1: can't set config #1, error -71 [ 510.651642][ T22] usb 5-1: USB disconnect, device number 41 [ 510.703861][ T9252] loop1: detected capacity change from 0 to 2048 [ 510.759662][ T9252] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 511.024573][ T9259] ================================================================== [ 511.032688][ T9259] BUG: KASAN: slab-out-of-bounds in cfg80211_wext_freq+0x1f1/0x230 [ 511.040665][ T9259] Read of size 2 at addr ffff88805c9ee540 by task syz.1.1744/9259 [ 511.048488][ T9259] [ 511.050832][ T9259] CPU: 1 PID: 9259 Comm: syz.1.1744 Not tainted 6.1.98-syzkaller #0 [ 511.058837][ T9259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 511.068903][ T9259] Call Trace: [ 511.072182][ T9259] [ 511.075109][ T9259] dump_stack_lvl+0x1e3/0x2cb [ 511.079797][ T9259] ? nf_tcp_handle_invalid+0x642/0x642 [ 511.085266][ T9259] ? panic+0x764/0x764 [ 511.089343][ T9259] ? _printk+0xd1/0x111 [ 511.093508][ T9259] ? __virt_addr_valid+0x17f/0x520 [ 511.098631][ T9259] ? __virt_addr_valid+0x17f/0x520 [ 511.103762][ T9259] print_report+0x15f/0x4f0 [ 511.108265][ T9259] ? __virt_addr_valid+0x17f/0x520 [ 511.113376][ T9259] ? __virt_addr_valid+0x17f/0x520 [ 511.118489][ T9259] ? __virt_addr_valid+0x44a/0x520 [ 511.123599][ T9259] ? __phys_addr+0xb6/0x170 [ 511.128139][ T9259] ? cfg80211_wext_freq+0x1f1/0x230 [ 511.133365][ T9259] kasan_report+0x136/0x160 [ 511.137894][ T9259] ? cfg80211_wext_freq+0x1f1/0x230 [ 511.143139][ T9259] cfg80211_wext_freq+0x1f1/0x230 [ 511.148173][ T9259] cfg80211_wext_siwscan+0x4ee/0x10c0 [ 511.153548][ T9259] ioctl_standard_iw_point+0x780/0xca0 [ 511.159010][ T9259] ? cmp_bss+0xde0/0xde0 [ 511.163246][ T9259] ? iw_handler_get_iwstats+0x240/0x240 [ 511.168809][ T9259] ? wext_ioctl_dispatch+0xb9/0x460 [ 511.174009][ T9259] ? __lock_acquire+0x1f80/0x1f80 [ 511.179048][ T9259] ? mutex_lock_nested+0x10/0x10 [ 511.183989][ T9259] ? apparmor_capable+0x12e/0x190 [ 511.189192][ T9259] ? full_name_hash+0x8f/0xe0 [ 511.193874][ T9259] ioctl_standard_call+0xc3/0x280 [ 511.198904][ T9259] ? cmp_bss+0xde0/0xde0 [ 511.203145][ T9259] ? cmp_bss+0xde0/0xde0 [ 511.207382][ T9259] wext_ioctl_dispatch+0x16f/0x460 [ 511.212506][ T9259] ? wext_ioctl_dispatch+0x460/0x460 [ 511.217801][ T9259] ? iw_handler_get_private+0x1e0/0x1e0 [ 511.223363][ T9259] wext_handle_ioctl+0x15b/0x260 [ 511.228302][ T9259] ? call_commit_handler+0xf0/0xf0 [ 511.233504][ T9259] sock_ioctl+0x13b/0x770 [ 511.237828][ T9259] ? sock_poll+0x410/0x410 [ 511.242242][ T9259] ? __fget_files+0x28/0x4a0 [ 511.246832][ T9259] ? __fget_files+0x435/0x4a0 [ 511.251697][ T9259] ? __fget_files+0x28/0x4a0 [ 511.256379][ T9259] ? bpf_lsm_file_ioctl+0x5/0x10 [ 511.261323][ T9259] ? security_file_ioctl+0x7d/0xa0 [ 511.266461][ T9259] ? sock_poll+0x410/0x410 [ 511.270900][ T9259] __se_sys_ioctl+0xf1/0x160 [ 511.275542][ T9259] do_syscall_64+0x3b/0xb0 [ 511.279973][ T9259] ? clear_bhb_loop+0x45/0xa0 [ 511.284662][ T9259] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 511.290562][ T9259] RIP: 0033:0x7f6178575bd9 [ 511.294990][ T9259] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 511.314622][ T9259] RSP: 002b:00007f6179360048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 511.323600][ T9259] RAX: ffffffffffffffda RBX: 00007f6178703f60 RCX: 00007f6178575bd9 [ 511.331578][ T9259] RDX: 0000000020000000 RSI: 0000000000008b18 RDI: 0000000000000003 [ 511.339550][ T9259] RBP: 00007f61785e4e60 R08: 0000000000000000 R09: 0000000000000000 [ 511.347608][ T9259] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 511.355592][ T9259] R13: 000000000000000b R14: 00007f6178703f60 R15: 00007fffcb2ecad8 [ 511.363576][ T9259] [ 511.366594][ T9259] [ 511.368916][ T9259] Allocated by task 9259: [ 511.373236][ T9259] kasan_set_track+0x4b/0x70 [ 511.377867][ T9259] __kasan_kmalloc+0x97/0xb0 [ 511.382557][ T9259] __kmalloc+0xb2/0x230 [ 511.386747][ T9259] ioctl_standard_iw_point+0x4aa/0xca0 [ 511.392231][ T9259] ioctl_standard_call+0xc3/0x280 [ 511.397376][ T9259] wext_ioctl_dispatch+0x16f/0x460 [ 511.402501][ T9259] wext_handle_ioctl+0x15b/0x260 [ 511.407455][ T9259] sock_ioctl+0x13b/0x770 [ 511.411795][ T9259] __se_sys_ioctl+0xf1/0x160 [ 511.416404][ T9259] do_syscall_64+0x3b/0xb0 [ 511.420893][ T9259] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 511.426812][ T9259] [ 511.429153][ T9259] Last potentially related work creation: [ 511.434879][ T9259] kasan_save_stack+0x3b/0x60 [ 511.439665][ T9259] __kasan_record_aux_stack+0xb0/0xc0 [ 511.445061][ T9259] kvfree_call_rcu+0x116/0x8c0 [ 511.449844][ T9259] ipv6_mc_destroy_dev+0x3ae/0x570 [ 511.454984][ T9259] addrconf_ifdown+0x16d3/0x1b90 [ 511.459936][ T9259] addrconf_notify+0x3ec/0xf60 [ 511.464715][ T9259] raw_notifier_call_chain+0xd0/0x170 [ 511.470100][ T9259] unregister_netdevice_many+0xec1/0x17a0 [ 511.475838][ T9259] default_device_exit_batch+0x956/0x9d0 [ 511.481484][ T9259] cleanup_net+0x763/0xb60 [ 511.485916][ T9259] process_one_work+0x8a9/0x11d0 [ 511.490861][ T9259] worker_thread+0xa47/0x1200 [ 511.495545][ T9259] kthread+0x28d/0x320 [ 511.499744][ T9259] ret_from_fork+0x1f/0x30 [ 511.504180][ T9259] [ 511.506507][ T9259] The buggy address belongs to the object at ffff88805c9ee400 [ 511.506507][ T9259] which belongs to the cache kmalloc-512 of size 512 [ 511.520566][ T9259] The buggy address is located 320 bytes inside of [ 511.520566][ T9259] 512-byte region [ffff88805c9ee400, ffff88805c9ee600) [ 511.533847][ T9259] [ 511.536203][ T9259] The buggy address belongs to the physical page: [ 511.542640][ T9259] page:ffffea0001727b00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5c9ec [ 511.552802][ T9259] head:ffffea0001727b00 order:2 compound_mapcount:0 compound_pincount:0 [ 511.561130][ T9259] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 511.569124][ T9259] raw: 00fff00000010200 0000000000000000 dead000000000001 ffff888012441c80 [ 511.577708][ T9259] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 511.586283][ T9259] page dumped because: kasan: bad access detected [ 511.592703][ T9259] page_owner tracks the page as allocated [ 511.598420][ T9259] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd28c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 3556, tgid 3556 (syz-executor), ts 71213132859, free_ts 19323312004 [ 511.620835][ T9259] post_alloc_hook+0x18d/0x1b0 [ 511.625631][ T9259] get_page_from_freelist+0x322e/0x33b0 [ 511.631403][ T9259] __alloc_pages+0x28d/0x770 [ 511.636036][ T9259] alloc_slab_page+0x6a/0x150 [ 511.640749][ T9259] new_slab+0x84/0x2d0 [ 511.644841][ T9259] ___slab_alloc+0xc20/0x1270 [ 511.649803][ T9259] __kmem_cache_alloc_node+0x19f/0x260 [ 511.655275][ T9259] __kmalloc_node_track_caller+0xa0/0x220 [ 511.661021][ T9259] pskb_expand_head+0x18c/0x10e0 [ 511.665969][ T9259] netlink_trim+0x183/0x220 [ 511.670486][ T9259] netlink_broadcast+0x5b/0x10b0 [ 511.675532][ T9259] nlmsg_notify+0xfb/0x1c0 [ 511.679964][ T9259] rtmsg_fib+0x39f/0x620 [ 511.684218][ T9259] fib_table_insert+0xfb6/0x1f20 [ 511.689167][ T9259] fib_add_ifaddr+0xf4c/0x1730 [ 511.693965][ T9259] fib_netdev_event+0x620/0x730 [ 511.698941][ T9259] page last free stack trace: [ 511.703632][ T9259] free_unref_page_prepare+0xf63/0x1120 [ 511.709288][ T9259] free_unref_page+0x33/0x3e0 [ 511.713988][ T9259] free_contig_range+0x9a/0x150 [ 511.718850][ T9259] destroy_args+0xfe/0x997 [ 511.723283][ T9259] debug_vm_pgtable+0x416/0x46b [ 511.728171][ T9259] do_one_initcall+0x265/0x8f0 [ 511.732950][ T9259] do_initcall_level+0x157/0x207 [ 511.737892][ T9259] do_initcalls+0x49/0x86 [ 511.742231][ T9259] kernel_init_freeable+0x45c/0x60f [ 511.747439][ T9259] kernel_init+0x19/0x290 [ 511.751803][ T9259] ret_from_fork+0x1f/0x30 [ 511.756234][ T9259] [ 511.758563][ T9259] Memory state around the buggy address: [ 511.764195][ T9259] ffff88805c9ee400: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 511.772354][ T9259] ffff88805c9ee480: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 511.780611][ T9259] >ffff88805c9ee500: 00 00 00 00 00 00 00 04 fc fc fc fc fc fc fc fc [ 511.788958][ T9259] ^ [ 511.795292][ T9259] ffff88805c9ee580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 511.803370][ T9259] ffff88805c9ee600: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 511.811442][ T9259] ================================================================== [ 511.819661][ C1] vkms_vblank_simulate: vblank timer overrun [ 511.941098][ T9259] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 511.948343][ T9259] CPU: 0 PID: 9259 Comm: syz.1.1744 Not tainted 6.1.98-syzkaller #0 [ 511.956348][ T9259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 511.966522][ T9259] Call Trace: [ 511.969826][ T9259] [ 511.972780][ T9259] dump_stack_lvl+0x1e3/0x2cb [ 511.977545][ T9259] ? nf_tcp_handle_invalid+0x642/0x642 [ 511.983269][ T9259] ? panic+0x764/0x764 [ 511.987376][ T9259] ? preempt_schedule_common+0xa6/0xd0 [ 511.992866][ T9259] ? vscnprintf+0x59/0x80 [ 511.997228][ T9259] panic+0x318/0x764 [ 512.001153][ T9259] ? check_panic_on_warn+0x1d/0xa0 [ 512.006296][ T9259] ? memcpy_page_flushcache+0xfc/0xfc [ 512.011810][ T9259] ? _raw_spin_unlock_irqrestore+0x128/0x130 [ 512.017937][ T9259] ? _raw_spin_unlock+0x40/0x40 [ 512.022846][ T9259] ? print_report+0x4a3/0x4f0 [ 512.027567][ T9259] check_panic_on_warn+0x7e/0xa0 [ 512.032544][ T9259] ? cfg80211_wext_freq+0x1f1/0x230 [ 512.037787][ T9259] end_report+0x66/0x110 [ 512.042059][ T9259] kasan_report+0x143/0x160 [ 512.046590][ T9259] ? cfg80211_wext_freq+0x1f1/0x230 [ 512.051878][ T9259] cfg80211_wext_freq+0x1f1/0x230 [ 512.056942][ T9259] cfg80211_wext_siwscan+0x4ee/0x10c0 [ 512.062351][ T9259] ioctl_standard_iw_point+0x780/0xca0 [ 512.067896][ T9259] ? cmp_bss+0xde0/0xde0 [ 512.072167][ T9259] ? iw_handler_get_iwstats+0x240/0x240 [ 512.077776][ T9259] ? wext_ioctl_dispatch+0xb9/0x460 [ 512.083005][ T9259] ? __lock_acquire+0x1f80/0x1f80 [ 512.088151][ T9259] ? mutex_lock_nested+0x10/0x10 [ 512.093123][ T9259] ? apparmor_capable+0x12e/0x190 [ 512.098174][ T9259] ? full_name_hash+0x8f/0xe0 [ 512.102880][ T9259] ioctl_standard_call+0xc3/0x280 [ 512.107934][ T9259] ? cmp_bss+0xde0/0xde0 [ 512.112201][ T9259] ? cmp_bss+0xde0/0xde0 [ 512.116464][ T9259] wext_ioctl_dispatch+0x16f/0x460 [ 512.121602][ T9259] ? wext_ioctl_dispatch+0x460/0x460 [ 512.126913][ T9259] ? iw_handler_get_private+0x1e0/0x1e0 [ 512.132484][ T9259] wext_handle_ioctl+0x15b/0x260 [ 512.137466][ T9259] ? call_commit_handler+0xf0/0xf0 [ 512.142610][ T9259] sock_ioctl+0x13b/0x770 [ 512.146974][ T9259] ? sock_poll+0x410/0x410 [ 512.151408][ T9259] ? __fget_files+0x28/0x4a0 [ 512.156018][ T9259] ? __fget_files+0x435/0x4a0 [ 512.160747][ T9259] ? __fget_files+0x28/0x4a0 [ 512.165384][ T9259] ? bpf_lsm_file_ioctl+0x5/0x10 [ 512.170436][ T9259] ? security_file_ioctl+0x7d/0xa0 [ 512.175570][ T9259] ? sock_poll+0x410/0x410 [ 512.180169][ T9259] __se_sys_ioctl+0xf1/0x160 [ 512.184794][ T9259] do_syscall_64+0x3b/0xb0 [ 512.189221][ T9259] ? clear_bhb_loop+0x45/0xa0 [ 512.193908][ T9259] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 512.199809][ T9259] RIP: 0033:0x7f6178575bd9 [ 512.204226][ T9259] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 512.224095][ T9259] RSP: 002b:00007f6179360048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 512.232510][ T9259] RAX: ffffffffffffffda RBX: 00007f6178703f60 RCX: 00007f6178575bd9 [ 512.240489][ T9259] RDX: 0000000020000000 RSI: 0000000000008b18 RDI: 0000000000000003 [ 512.248456][ T9259] RBP: 00007f61785e4e60 R08: 0000000000000000 R09: 0000000000000000 [ 512.256509][ T9259] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 512.264646][ T9259] R13: 000000000000000b R14: 00007f6178703f60 R15: 00007fffcb2ecad8 [ 512.272624][ T9259] [ 512.276023][ T9259] Kernel Offset: disabled [ 512.280349][ T9259] Rebooting in 86400 seconds..