last executing test programs: 51.094779717s ago: executing program 4 (id=182): socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6(0xa, 0x2, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) socket$inet6_udplite(0xa, 0x2, 0x88) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xa0}, 0x0) socket$kcm(0x2, 0x0, 0x84) socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8946, &(0x7f0000000900)={'virt_wifi0\x00', @random='\x00\x00\x00 \x00'}) 46.491466099s ago: executing program 3 (id=192): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000004f00000008000300", @ANYRES32=r2, @ANYBLOB="38007a80340002"], 0x54}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000700)={0x8, 0x0}, 0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, r4}, 0x90) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r6, r5, 0x5}, 0x10) close(r5) close(r6) r7 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000180)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x18d1, 0x5030, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x5f1bbd7e56050785, 0x0, [{{0x9, 0x4, 0x0, 0x1, 0x1, 0x3, 0x1, 0x2, 0x1f, {0x9, 0x21, 0x7, 0x1f, 0x1, {0x22, 0x7a2}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x80}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x0, 0x9, 0xfa}}]}}}]}}]}}, &(0x7f0000000500)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x310, 0xc7, 0x4, 0x7, 0x40, 0x3}, 0x1c, &(0x7f0000000280)={0x5, 0xf, 0x1c, 0x2, [@ptm_cap={0x3}, @ssp_cap={0x14, 0x10, 0xa, 0x40, 0x2, 0x0, 0xff0f, 0x3ff, [0xc000, 0x3f3f]}]}, 0x4, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0xf8ff}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x2801}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x447}}, {0x14, &(0x7f00000004c0)=@string={0x14, 0x3, "f5aead0ae4b76e2a65559b19c5749f862049"}}]}) syz_usb_control_io$hid(r7, &(0x7f0000000780)={0x24, &(0x7f0000000580)={0x0, 0x5, 0xc9, {0xc9, 0x21, "927fa2e85435e1d92880ccff32e2c6a6ea0c194a98fc7e1516ef9cdc9938176c910a921c5338ba5ea671ab9d5009e143f16eef94c1cc729aa6442f644ba144dd47465d1506e304c6bd83cdedb319b895e0c54ee40c8514a20dd994172c066e41f9211d0c98121bce577bff51a6bbe07c39b0c5696168629b22b49f4a3a01788832c27751e6994dd9507ee13fb2e25331fba90739467d395ba54e5000ea15ccb7fb60fb19605fc52f6de01b29559215f2dcc95d142283cbcff3a43bfb7cbdce58febd513b1537f5"}}, &(0x7f0000000680)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x420}}, &(0x7f0000000ec0)={0x0, 0x22, 0xf, {[@local=@item_012={0x0, 0x2, 0x5}, @global=@item_4={0x3, 0x1, 0x9, "c53d2643"}, @main=@item_012={0x1, 0x0, 0xb, "c3"}, @global=@item_012={0x1, 0x1, 0x4, "a4"}, @global=@item_4={0x3, 0x1, 0x0, "3528fc33"}]}}, &(0x7f00000006c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1000, 0x0, 0x1, {0x22, 0x17a}}}}, &(0x7f0000000e80)={0x2c, &(0x7f00000007c0)={0x20, 0xf, 0xe8, "f13c358d5b30faa8ee19568e292a6ebab50a74dc420aec210459d4cdb5e9a37ddaf28780422dc9f73b0fda4e572e94dacd3929fb8f8b7faa1e9a6d72f42966a9b0d14ca497242268abd83067d99bf2638162fa4a0517b983f8139465a2c88eb92d95495936b31f3a5829d076225ecd157f4aad1e341854fceec813a968a2077805ed54b690e9846e64372b3be6c1b09a27cb0a4397addf3d589abee36798e88264290c318379983a66d9524aa2214b1093fc06ca9655bf1519534ae266222e0f1f988a9c3d16b00c557f5a8aa7d5c41179b49002c9be4ab0d8dd7e332c76d1cebdac9229685d2f9f"}, &(0x7f00000008c0)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000d00)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000d40)={0x20, 0x1, 0xe5, "504b7b6347ca81d20e9e2651908e43a7d3acc9182ba3ca5f7177d2b7e31f9a757b93a56c2f6c7ec60608f2cd7605e6d526405abeb77b3e6086f486bc3679ee31c28ac4adaa81928693e07c12177042eca0868e23602af5c11719c368662c69e5092eeec07a3e416eb21e6aefa4f46c2323519514e2ebe0a11a35750e118309fb1d80a2bac5f32bc1a90717f7d2dfe1ac6a3a953ba164284ae1b95a581e4f5f9822cbeb9d93d08a36c29bb0f48206a392c6409d1dca2bc483c13e157a1be8fbe18dbabe32a946efde1dc8ce61540588e790d44d0f994caafc5bbae7f39440d7de4451ceb1f4"}, &(0x7f0000000e40)={0x20, 0x3, 0x1, 0x4d}}) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union]}}, 0x0, 0x26}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x3, &(0x7f0000000040)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r8, 0x8, 0x0, 0xed000000, 0x10, &(0x7f0000000200), 0x10}, 0x80) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x4}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000900)={'bridge0\x00', @broadcast}) 42.381897378s ago: executing program 3 (id=203): madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x17) syz_emit_vhci(&(0x7f0000007a80)=ANY=[@ANYBLOB="02c90010000c4ac6bd625ad756f9007f0000020000"], 0x15) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xc) madvise(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xe) r0 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x80) creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000040)={0xffffa2f2}) rmdir(&(0x7f00000003c0)='./file0\x00') r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20}, 0x1c) listen(r1, 0x80080400) r2 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @remote}, 0x10) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000100)={0xc, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000180)={0x28, 0x0, r3, 0x0, &(0x7f0000002000/0x4000)=nil, 0x4000, 0x5}) getsockopt$inet_int(r2, 0x10d, 0x99, &(0x7f0000000000), &(0x7f0000000080)=0x4) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xd) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000400)={0x1, &(0x7f0000000280)=[{0x8, 0x1, 0x6, 0xc2}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x8, 0x7fffffff}]}) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000440)={0x1, &(0x7f00000002c0)=[{0x6, 0x0, 0x8}]}) syz_open_procfs(r4, &(0x7f00000000c0)='net/sockstat6\x00') ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) wait4(0x0, 0x0, 0x40000000, 0x0) syz_mount_image$udf(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYRESOCT], 0x1, 0x516, &(0x7f0000000600)="$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") unlink(&(0x7f0000000000)='./file0/file0\x00') 41.853110893s ago: executing program 3 (id=207): syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$TCSETAW(r1, 0x5407, 0x0) write$UHID_INPUT(r1, &(0x7f0000001040)={0xf, {"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", 0x1000}}, 0x1006) 36.928751043s ago: executing program 2 (id=218): madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x17) syz_emit_vhci(&(0x7f0000007a80)=ANY=[@ANYBLOB="02c90010000c4ac6bd625ad756f9007f0000020000"], 0x15) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xc) madvise(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xe) r0 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x80) creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000040)={0xffffa2f2}) rmdir(&(0x7f00000003c0)='./file0\x00') r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20}, 0x1c) listen(r1, 0x80080400) r2 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @remote}, 0x10) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000100)={0xc, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000180)={0x28, 0x0, r3, 0x0, &(0x7f0000002000/0x4000)=nil, 0x4000, 0x5}) getsockopt$inet_int(r2, 0x10d, 0x99, &(0x7f0000000000), &(0x7f0000000080)=0x4) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xd) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000400)={0x1, &(0x7f0000000280)=[{0x8, 0x1, 0x6, 0xc2}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x8, 0x7fffffff}]}) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000440)={0x1, &(0x7f00000002c0)=[{0x6, 0x0, 0x8}]}) syz_open_procfs(r4, &(0x7f00000000c0)='net/sockstat6\x00') ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) wait4(0x0, 0x0, 0x40000000, 0x0) syz_mount_image$udf(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYRESOCT], 0x1, 0x516, &(0x7f0000000600)="$eJzs289vHGcZB/Dn9azd9Raom4bUrSpkVImmTRMldtJEMofmBwmRqoBIwz2N7WDVsUPsVE2FSiWQ+g9whQMoBw4gcS2iNyQOSFSAUKAceuKChHxA4gia2Znd2a0Tb0jsjevPJ4pndvbZ9Tuj/e7M+77jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAiTn3t5OEjaditAAC204WL3zo84/wPALvK6/r/AACwW6TIYjxSPPOn9fRC8bit+dri8s23L505u/HLxlOkGImsqM//N49Mzxw99srxE9Xy3q9/2J6Jb1x8/eTU6ZVr12/Mr67Oz01dWl68sjI3P/A7POjr+71UHICpa2/enFtYWJ2aPjTT8/TbE/947PF9E7MnDh74UlV76czZsxdrNY3R//u3f4oeHhsZiyx+HylO/fyXaX9EjMSDZ2GT746tNh6NPH/FTlw6c7bYkaXFy8tr+ZNppKxq9GZirMrINmTxgTQiDuZtHZNoHtxoZPFxpDj33fX0YkRkVQ4OFBODm79BYxsaeZdfeygivhk7ILPwiHossjgWKS78dCJeKnNV5L8R8e6wGwdsqUZk8aNIsZLW04HieiA/n+aXza99e+r88sJKrTaNlGfUnd4/2E6uTXiENSOLF4sz/np6ediNAbbVeGSxFik++vdbxbhSFOPST8yeuHCqUR9henqT90llf3x2wD75aDnWmEbyfw9/v4DNNVMW70eKP/ysWTzOs9sq1j75b9uQGwhsnZTFSKT43en1lPrmpbPa/H7HTu/7b237x5unV67furF49TtrGz7fap58Y3XtxuUrGz/dnrvM6ls2m8fs1yjncGEArZTFTyLFbz5Zj9rUeJ75z7cfdT+Nt7/X/S7Y37es1L8/BlkfeBb7PsbR8jallMWrkWLhg8l2PyO/qpEN6JHn/weR4vjiR6lKepn/cma/lv+vdvPTTL3LjiLbX2jf11aNJZxvPX+37VuR/7xNef5vRopTeybLexra+c/6avO6c5Hi3MfPlXUjY3lddVvDRPsdFxaX5g/ntX+NFH+/U9VGUVtNKDzVrT2S1zYixZc/7K1tlbV7u7XTVRtu/mLj2i92a2fy2tuRYnJuqqpt5bV7y9p93dpDV1aW5gY9vOxOef4/jBQ//u3XU/WZv2v+a+f/9/qWHZ/K/L3XH1b+J2rb3itz/VaZ/8Ym+T8YKd64/Vy130X2qq+VJ4uf3fwfihTP/qu3tlnW7unWHhl0t2CY8vz/LVL8euZO5zNffrbLh92E1vP/bKN32bmuHlL+n6xtmyjbNXafxwJ2m9Vb77x5eWlp/oYVK1asdFaG/c0EbLX8+v9XkeL9J7JU9WPL6//PtR91e8z/ebd7/T/bt+wY0vX/ntq22bLXMpr3zdeuXR99OqK5euudg4vXLl+dvzq/PPPK0elj08dPHD08OlZ17rtrAx872Ony/P8lUvx58o+dceze/v/G43+tvmXHkPL/VH2fevo1Ax8K2HWq+b+vLN3pZPle43/VON/+53uXnT+qGVL+99a2TZTtevw+jwUAAAAAAAAAAADsFK2UxQ8jxfl/vpyqe+gGuf93rm/ZMaT7//bVts1t0981DnyQAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdrCRyOJ6pPjg1fX0/XzDZMQL9SXwmfW/AAAA///+zUk1") unlink(&(0x7f0000000000)='./file0/file0\x00') 36.434352967s ago: executing program 2 (id=220): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000cc0)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000f80)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)={0x40, 0x13, 0x6, @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r1, &(0x7f0000000140)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x0, @multicast2}}, 0x24) connect$rxrpc(r1, &(0x7f0000001bc0)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x24) syz_usb_control_io(r0, 0x0, &(0x7f0000001740)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)={0x40, 0x19, 0x2, "b3f0"}, 0x0, 0x0, 0x0, 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000000)="3900000013000b4700bb65e1c3e4ffff010000003d000000560000022500000019000a001000000007fd17e5ffff080004000000000000000a", 0x39}], 0x1) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000012c0)={0x44, &(0x7f0000001040)={0x0, 0x7, 0x1, ';'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newsa={0x154, 0x10, 0x713, 0x0, 0x0, {{@in=@loopback}, {@in=@remote, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0xa, 0x4}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c}]}, 0x154}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 8.067917087s ago: executing program 4 (id=209): r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x1, &(0x7f00000000c0)="e2"}) socket$nl_generic(0x10, 0x3, 0x10) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0x1) mount$9p_rdma(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000680)={'trans=rdma,', {}, 0x2c, {[{@sq={'sq', 0x3d, 0x100000001}}, {@common=@privport}]}}) close(0xffffffffffffffff) openat$mixer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FUSE_DEV_IOC_CLONE(0xffffffffffffffff, 0x80044d00, &(0x7f00000000c0)) r1 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109023b00010100c000090400000002060001052406000005240002000d240f01ffffffff00f9ff007f090582020000000700090503020000090000"], 0x0) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000380)={0x14, 0x0, &(0x7f0000000340)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="757466383d302c636865636b3d7374726963742c756e695f786c6174653d302c757466383d302c73686f72746e616d653d77696e39352c756e695f786c6174653d312c757466383d302c0033280ea65693f5bb470140a77e3a4aae9c8e4e4d83181eb36c27d8f373f93fcd4903f4696b91b77c96cc73fee6d15fcaca7e844556ef4827a5665aedf7d335d648730c0db0527a1b39922427bdf9b048"], 0x1, 0x187, &(0x7f00000004c0)="$eJzs2zFrE2EYB/B/bNSqQzI4icOBi1NI+gksUkEMCEoGBUGxLUhPChYCOthuLn4IP4Cfpp/EsYNwkl6xbUgHsfVs8vst98B7/+N9h7vn3oN7fff91vr2zmb/1X6WW620H6TIQSvdXMlSansBAObJQVXlR1VV1fW93PiWqqqanhEAcNH0fwBYPPo/ACwe/R8AFs/zFy+frA6Ha8+KYjkpv4xH41F9rMdXN/MuZTbSTyc/M3lBOFLXjx4P1/rFoW6+lrtH+d3xaOl0fpBOurPzgzpfnM5fzc2T+ZV0cnt2fmVm/lru3zuR76WT/bfZTpn1TLLH+c+Donj4dDiVv3V4HgAAAMyDXvHbzP17r3fWeJ3/g+8DU/vrdu60m107ACyqnY+ftt6U5caHvyom3f48rqNQnGfxPf/FNC5l0fSTCbhoxzd90zMBAAAAAAAAAAAAAADO8i9+J2p6jQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADDtVwAAAP//dQSwIg==") ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, 0x0) syz_mount_image$hfs(&(0x7f0000000140), &(0x7f00000002c0)='./file0\x00', 0x22000c0, &(0x7f0000000300)=ANY=[@ANYBLOB='codepage=utf8,part=0x0000000000000f85,iocharset=default,dir_umask=000\x000000000000000000002,\x00'], 0x4, 0x32d, &(0x7f0000000540)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000280)='./file0\x00', &(0x7f0000000000)='./file0/../file0/file0\x00', 0x0, 0x2879c03, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1adc51, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') openat$incfs(0xffffffffffffff9c, &(0x7f0000000100)='.pending_reads\x00', 0x208240, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000580)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0115f2f1", @ANYRES32=r3, @ANYBLOB="0800b70000000000080026006c090000"], 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 7.339573998s ago: executing program 3 (id=228): syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x8000, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='huge=always,mpol=interleave']) chdir(&(0x7f0000000140)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) 7.111337782s ago: executing program 3 (id=269): madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x17) syz_emit_vhci(&(0x7f0000007a80)=ANY=[@ANYBLOB="02c90010000c4ac6bd625ad756f9007f0000020000"], 0x15) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xc) madvise(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xe) r0 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x80) creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000040)={0xffffa2f2}) rmdir(&(0x7f00000003c0)='./file0\x00') r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20}, 0x1c) listen(r1, 0x80080400) r2 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @remote}, 0x10) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000100)={0xc, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000180)={0x28, 0x0, r3, 0x0, &(0x7f0000002000/0x4000)=nil, 0x4000, 0x5}) getsockopt$inet_int(r2, 0x10d, 0x99, &(0x7f0000000000), &(0x7f0000000080)=0x4) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xd) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000400)={0x1, &(0x7f0000000280)=[{0x8, 0x1, 0x6, 0xc2}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x8, 0x7fffffff}]}) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r4, 0x0, &(0x7f0000000040)='.') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000440)={0x1, &(0x7f00000002c0)=[{0x6, 0x0, 0x8}]}) syz_open_procfs(0x0, &(0x7f00000000c0)='net/sockstat6\x00') ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) wait4(0x0, 0x0, 0x40000000, 0x0) syz_mount_image$udf(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYRESOCT], 0x1, 0x516, &(0x7f0000000600)="$eJzs289vHGcZB/Dn9azd9Raom4bUrSpkVImmTRMldtJEMofmBwmRqoBIwz2N7WDVsUPsVE2FSiWQ+g9whQMoBw4gcS2iNyQOSFSAUKAceuKChHxA4gia2Znd2a0Tb0jsjevPJ4pndvbZ9Tuj/e7M+77jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAiTn3t5OEjaditAAC204WL3zo84/wPALvK6/r/AACwW6TIYjxSPPOn9fRC8bit+dri8s23L505u/HLxlOkGImsqM//N49Mzxw99srxE9Xy3q9/2J6Jb1x8/eTU6ZVr12/Mr67Oz01dWl68sjI3P/A7POjr+71UHICpa2/enFtYWJ2aPjTT8/TbE/947PF9E7MnDh74UlV76czZsxdrNY3R//u3f4oeHhsZiyx+HylO/fyXaX9EjMSDZ2GT746tNh6NPH/FTlw6c7bYkaXFy8tr+ZNppKxq9GZirMrINmTxgTQiDuZtHZNoHtxoZPFxpDj33fX0YkRkVQ4OFBODm79BYxsaeZdfeygivhk7ILPwiHossjgWKS78dCJeKnNV5L8R8e6wGwdsqUZk8aNIsZLW04HieiA/n+aXza99e+r88sJKrTaNlGfUnd4/2E6uTXiENSOLF4sz/np6ediNAbbVeGSxFik++vdbxbhSFOPST8yeuHCqUR9henqT90llf3x2wD75aDnWmEbyfw9/v4DNNVMW70eKP/ysWTzOs9sq1j75b9uQGwhsnZTFSKT43en1lPrmpbPa/H7HTu/7b237x5unV67furF49TtrGz7fap58Y3XtxuUrGz/dnrvM6ls2m8fs1yjncGEArZTFTyLFbz5Zj9rUeJ75z7cfdT+Nt7/X/S7Y37es1L8/BlkfeBb7PsbR8jallMWrkWLhg8l2PyO/qpEN6JHn/weR4vjiR6lKepn/cma/lv+vdvPTTL3LjiLbX2jf11aNJZxvPX+37VuR/7xNef5vRopTeybLexra+c/6avO6c5Hi3MfPlXUjY3lddVvDRPsdFxaX5g/ntX+NFH+/U9VGUVtNKDzVrT2S1zYixZc/7K1tlbV7u7XTVRtu/mLj2i92a2fy2tuRYnJuqqpt5bV7y9p93dpDV1aW5gY9vOxOef4/jBQ//u3XU/WZv2v+a+f/9/qWHZ/K/L3XH1b+J2rb3itz/VaZ/8Ym+T8YKd64/Vy130X2qq+VJ4uf3fwfihTP/qu3tlnW7unWHhl0t2CY8vz/LVL8euZO5zNffrbLh92E1vP/bKN32bmuHlL+n6xtmyjbNXafxwJ2m9Vb77x5eWlp/oYVK1asdFaG/c0EbLX8+v9XkeL9J7JU9WPL6//PtR91e8z/ebd7/T/bt+wY0vX/ntq22bLXMpr3zdeuXR99OqK5euudg4vXLl+dvzq/PPPK0elj08dPHD08OlZ17rtrAx872Ony/P8lUvx58o+dceze/v/G43+tvmXHkPL/VH2fevo1Ax8K2HWq+b+vLN3pZPle43/VON/+53uXnT+qGVL+99a2TZTtevw+jwUAAAAAAAAAAADsFK2UxQ8jxfl/vpyqe+gGuf93rm/ZMaT7//bVts1t0981DnyQAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdrCRyOJ6pPjg1fX0/XzDZMQL9SXwmfW/AAAA///+zUk1") unlink(&(0x7f0000000000)='./file0/file0\x00') 6.742189034s ago: executing program 3 (id=270): r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000800)="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", 0x2de}, {&(0x7f0000000bc0)="ab29d92826349952eb8f7a2a74f535bc9739c1df57144c51a3391625b8b5354134b06ef1355506aeae96e3f097503998f375a054cf3d7de4fe53ea51518955349cdbadca60e1c65cc18dbe99369be03e492fb55fc9067bb6f7f7c3ee1720000000054a63ac58225ed0502f5ac8999e0c74a5dbb320bd54ec813e8bee6bfa5cbfb0726ac1b6ad97d802d5fae186f0769421fb965c7396854e2a3ac844a3769f8449901ba5e2b2da1ff6119aeb26ac204cfc6b54be73b6f195491ae2c0cb26b0cba61dae7a17740e8112ff188919c6e2e31a2a074863edba4a0e58b61faec4a42c29d7f9e48a43b8cb7d3c5a1e5aa67f87538140f8d633a54bceb8b1dda2397ea147d3b26e903f608b6ab1844ea7cf630d828118bba0f0f85e2e6316ae1ed9a2a7d08a05c170cb76bf111930df0cf760f7768571afdefe82a95296cee7c010f748a97046efcc774e7d85edbd5058104fef4942fb4430da89f67d1fea33bf2acfb793a610b3738b393eed8633fc8e8f630932206960e9076c7d7fc99fce018701c50d39b811a7427a7a9fcb340c2755541f228462010ec40ba945a0febd460dad5d548f1be090f5dbaa8ae8835dc47ed2537681827f6129759272574cf58f2f33e47a0e416573cfdcfb44ed9dd4ce41af4de9c471c49f12f090934c3b32f2f4777c65b1574826727f5f62", 0x1e9}, {&(0x7f00000000c0)="05437c98b91b1455046f57b5fc913814bde2bbeac2104eaea9c9d01a7838d859207067c10aa7352abbdf98e9bf033a3184a11e84639d3b9164d9c5d729f3dd409d39ff6d5cf367cd939f790732e8d2310e876fcb299cd44b72bda697035b7b475bc35afbb483db39ac864dbee0c9760c22a1d32d83588afd7c994652413b22db76874ca052ef2013317eb7fcc5677e9d", 0x90}, {&(0x7f0000000200)="f610e61fc81cc3edc86f0500194d27a5a42cf15fab0dfd1ecda0fd0ed9a444b7fbb161860c18ff8519", 0x29}], 0x4, 0x0, 0x0, 0x900}}], 0x2, 0x0) 6.090130234s ago: executing program 4 (id=271): socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6(0xa, 0x2, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) socket$inet6_udplite(0xa, 0x2, 0x88) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xa0}, 0x0) socket$kcm(0x2, 0x1, 0x84) socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8946, 0x0) 5.612102361s ago: executing program 4 (id=273): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1000e, &(0x7f00000002c0)={[{@init_itable}, {@resuid}, {@stripe}]}, 0x3, 0x445, &(0x7f0000000b00)="$eJzs28+PE1UcAPDvTLeLCLgr4g9+qKto3PhjlwVUDh7UaOIBExM96HGzuxCksIZdEyFEwRg8GWPi3Xj0X/CkF2M8mXjVuyEhhgvgqWbaGbYtbdktLUX6+SQD78282fe+nXnte/PaAEbWVPZPErE1Iv6MiIl6trnAVP2/q5fPLly7fHYhiWr13X+SWrkrl88uFEWL87bkmek0Iv0iid1t6l05feb4fKWydCrPz66e+Gh25fSZF46dmD+6dHTp5P5Dhw4emHv5pf0v9iXOrE1Xdn26vGfnWx988/bhr5rib4mjT6a6HXy6Wu1zdcO1rSGdjA2xIWxIKSKyy1Wu9f+JKMXaxZuINz8fauOAgapWq9UtnQ+fqwJ3sSSa87o8jIrigz6b/xZb6yDg1cENP4bu0mv1CVAW99V8qx8ZizQvU26Z3/bTVES8f+7f77ItBvMcAgCgyU/Z+Of5duO/NB5qKHdfvjY0GRH3R8T2iHggInZExIMRtbIPR8QjG6y/dZHkxvFPerGnwNYpG/+9kq9tNY//itFfTJby3LZa/OXkyLHK0r78NZmO8qYsP9eljp/f+OPrTscax3/ZltVfjAXzdlwc29R8zuL86vytxNzo0vmIXWPt4k+urwQkEbEzInb1WMexZ3/Y0+nYzePvog/rTNXvI56pX/9z0RJ/Iem+Pjl7T1SW9s0Wd8WNfvv9wjud6r+l+Psgu/73tr3/r8c/mTSu165svI4Lf33ZcU7T6/0/nrxXS4/n+z6ZX109NRcxnhyuN7px//61c4t8UT6Lf3pv+/6/PdZeid0Rkd3Ej0bEYxHxeN72JyLiyYjY2yX+X19/6sPe4x+sLP7FDV3/tcR4tO5pnygd/+XHpkonb4j/Wvfrf7CWms73rOf9bz3t6u1uBgAAgP+fNCK2RpLOXE+n6cxM/fvyOyLSyvLK6nNHlj8+uVj/jcBklNPiSddEw/PQuXxaX8+fj4j6VwuK4wfy58bfljbX8jMLy5XFYQcPI25Lh/6f+bs07NYBA+f3WjC69H8YXfo/jC79H0ZXm/6/eRjtAG6/dp//nw2hHcDt19L/LfvBCDH/h9Gl/8Po0v9hJK1sjpv/SL5rovhLPZ5+1yaifEc0Y2CJSO+IZkgMKDHc9yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIB++S8AAP///fHg0g==") syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) chdir(&(0x7f0000000240)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x103042, 0x0) 4.558799333s ago: executing program 4 (id=275): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x48fecd23}, @NFTA_NG_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) 4.553949432s ago: executing program 1 (id=276): syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000700)={{r0}, &(0x7f0000000680), &(0x7f00000006c0)='%+9llu \x00'}, 0x20) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) syz_mount_image$fuse(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', 0x40000, &(0x7f0000000380)=ANY=[], 0x1, 0x0, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0) 4.460448946s ago: executing program 2 (id=238): socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x2, 0x0, &(0x7f0000000000)) 4.327716122s ago: executing program 2 (id=277): r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOVER(r0, 0xc0044306, 0x0) r1 = gettid() ioctl$CAPI_MANUFACTURER_CMD(r0, 0xc0104320, &(0x7f0000000480)={0xc, &(0x7f0000000440)="7890ecfdd6beb66c164649b54d61"}) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r2, 0x1, 0x20, &(0x7f0000000340), 0x4) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000002c0)={'wg1\x00', &(0x7f0000000280)=@ethtool_perm_addr}) syz_usb_connect(0x0, 0x24, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000f1d566201e043c40d7cc000000010902120001000000000904"], 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqsrc(r4, 0x0, 0x27, &(0x7f0000000000)={@multicast1=0xe000bb00, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc) setsockopt$inet_mreqsrc(r4, 0x0, 0x27, &(0x7f0000000040)={@multicast1=0xe000bb00, @local, @local}, 0xc) setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f00000001c0)=ANY=[@ANYBLOB="e000bb007f"], 0x14) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f0000005b574e69622bf85e"], 0x0}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x0, 0x2019}}}, 0x7) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) sendmmsg$inet6(r2, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)='6', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000200)="7a9be70c46f899b9104d07749cdeba6b9a72a32d194138d65ecee2076f14981d27b216d0e529069631e37a357906885a99f62f4c75519d7cb7acde43019e99fbbab9c4", 0x43}], 0x1, &(0x7f0000000380)=ANY=[@ANYRES8=r1, @ANYRESHEX=r2, @ANYRES32=r2, @ANYBLOB="81e1448d5fd1a148e96930dace5c986b600b7844700975c90cd7a24feb2bd496f54b1e6cf37ac63bc6ac5bc9d4a61b4d6ab0dcc4254da9cf5ecc27556477798e0b0e315e9e48d6b6dbdbef66d093f2607947e55719999ffd69a6cbaea8733d73bed4fff14d0bba979a97572e0832ab722ec655c4ca4020f4c3b4ecd7d00892d45c6246144f08d74c928d4f8a4ed8f64a6ec80c580297ce586f64ad7efdc073b2aad457"], 0x12b0}}, {{0x0, 0x0, &(0x7f0000004a00)}}], 0x3, 0x4) rt_sigqueueinfo(r1, 0x21, &(0x7f0000002d00)={0x0, 0x0, 0xffffffff}) 4.323734046s ago: executing program 1 (id=278): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000539d00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) close(r0) 4.09911865s ago: executing program 4 (id=279): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000180)={@link_local, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @broadcast}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x0) 1.947792873s ago: executing program 0 (id=283): r0 = socket$key(0xf, 0x3, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x10) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c00)=ANY=[@ANYBLOB="020d8600250000000000000000000000030007"], 0x128}}, 0x0) 1.819812685s ago: executing program 0 (id=284): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='ext4_writepages_result\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r2, &(0x7f0000000180), 0x2000) 1.703416648s ago: executing program 0 (id=285): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x1000}, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) r2 = dup(r1) sendmsg$inet(r2, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000000)="be39", 0xffeb}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}], 0xf}, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) syz_emit_ethernet(0x82, &(0x7f00000000c0)={@random="195df410dc24", @random="77b6d4f11b32", @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "aac4e0", 0x4c, 0x2c, 0x0, @dev, @local, {[@routing={0x3a}]}}}}}, 0x0) 628.875255ms ago: executing program 1 (id=286): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f50850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="440000001100290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c001a800800068004000500080000003e"], 0x44}}, 0x0) 554.962534ms ago: executing program 0 (id=287): socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x2, 0x0, &(0x7f0000000000)) 534.865551ms ago: executing program 1 (id=288): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{r0}, &(0x7f00000004c0), &(0x7f0000000500)='%pK \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) socketpair$nbd(0x2, 0x1, 0x0, &(0x7f0000000180)) 482.447891ms ago: executing program 2 (id=289): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x48fecd23}, @NFTA_NG_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) 383.802427ms ago: executing program 1 (id=290): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000700)='net_dev_start_xmit\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2c00000013000100"/20, @ANYRES32=r4, @ANYBLOB="00000000000000000a000100003b"], 0x2c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000800000000000000000001811", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000"], 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00'}, 0x90) 363.74495ms ago: executing program 0 (id=291): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000900), 0x3, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x8000, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00'], 0x2, 0x597, &(0x7f0000000c00)="$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") r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) unlinkat(r2, &(0x7f0000002780)='./file1\x00', 0x0) 333.885379ms ago: executing program 2 (id=292): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x9) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x20044001) socket$inet(0x2, 0x4000000000000001, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x2c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98f}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_GET_STATION(r2, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r5, 0x100, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x4, 0x4}}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x43e}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x9}]}, 0x30}, 0x1, 0x0, 0x0, 0x20040000}, 0x40000) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r9 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r2) sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000e00)={0x2c, r9, 0x18fe2a01ed25d92f, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}]}, 0x2c}}, 0x0) r10 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/image_size', 0x20202, 0x0) sendmsg$NL80211_CMD_DISASSOCIATE(r2, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x2c, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1000, 0x2e}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x80c0) sendfile(r10, r10, 0x0, 0xc3) r11 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="000202000000fedbdf250200000058000180060004004e2400000c000700060000002600000008000900340000000800080000000000060004004e2200000600f0ff0c000000180007000600000000005f1214000300fe8000003738920c9c97775f000000bb"], 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x20008090) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000a80), &(0x7f0000000ac0)=0x4) sendmsg$TEAM_CMD_NOOP(r10, &(0x7f0000000b40)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040000}, 0x8000) 93.644707ms ago: executing program 1 (id=293): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000040)=0x6, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000140)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}}, 0x0, 0x0, 0x0, 0x0, "e541bd3d3aa6a2d875e9671e8abcb31c134f3a9db8f52e1f54fe6e079f35ac63186c7244fc3b3801e79b8e5545b90f2dbec29f15cec2fd7e55d0345bce05c13ed90158fbdeb70322ea3188f81890e3db"}, 0xd8) sendmmsg$inet6(r0, 0x0, 0x0, 0x0) 0s ago: executing program 0 (id=294): openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x413, &(0x7f0000000100)={[{@bh}, {@errors_continue}, {@errors_remount}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [{@smackfsfloor={'smackfsfloor', 0x3d, 'ext4\x00'}}, {@fsname={'fsname', 0x3d, '+'}}], 0x2c}, 0x84, 0x45a, &(0x7f0000000480)="$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") sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x2) readv(r0, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0x940}], 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) kernel console output (not intermixed with test programs): 110.005248][ T5473] netlink_sendmsg+0x8e4/0xcb0 [ 110.010037][ T5473] ? __pfx_netlink_sendmsg+0x10/0x10 [ 110.015347][ T5473] ? __import_iovec+0x536/0x820 [ 110.020316][ T5473] ? aa_sock_msg_perm+0x91/0x160 [ 110.025264][ T5473] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 110.030578][ T5473] ? security_socket_sendmsg+0x87/0xb0 [ 110.036066][ T5473] ? __pfx_netlink_sendmsg+0x10/0x10 [ 110.041396][ T5473] __sock_sendmsg+0x221/0x270 [ 110.046121][ T5473] ____sys_sendmsg+0x525/0x7d0 [ 110.050901][ T5473] ? __pfx_____sys_sendmsg+0x10/0x10 [ 110.056241][ T5473] __sys_sendmsg+0x2b0/0x3a0 [ 110.060873][ T5473] ? __pfx___sys_sendmsg+0x10/0x10 [ 110.066056][ T5473] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 110.072421][ T5473] ? do_syscall_64+0x100/0x230 [ 110.077293][ T5473] ? do_syscall_64+0xb6/0x230 [ 110.081990][ T5473] do_syscall_64+0xf3/0x230 [ 110.086522][ T5473] ? clear_bhb_loop+0x35/0x90 [ 110.091220][ T5473] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.097144][ T5473] RIP: 0033:0x7f9114975ae9 [ 110.101595][ T5473] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 110.121237][ T5473] RSP: 002b:00007f9115700048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 110.129679][ T5473] RAX: ffffffffffffffda RBX: 00007f9114b04070 RCX: 00007f9114975ae9 [ 110.137679][ T5473] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000007 [ 110.145648][ T5473] RBP: 00007f91149f6756 R08: 0000000000000000 R09: 0000000000000000 [ 110.153629][ T5473] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 110.161625][ T5473] R13: 000000000000006e R14: 00007f9114b04070 R15: 00007ffd0bd899e8 [ 110.169626][ T5473] [ 110.426253][ T46] usb 1-1: 0:2 : does not exist [ 110.476562][ T46] usb 1-1: USB disconnect, device number 4 [ 110.570287][ T5346] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 110.588761][ T5346] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 110.672552][ T5152] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 110.723326][ T5346] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 110.726627][ T5242] udevd[5242]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 110.750419][ T5346] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 110.882280][ T5152] usb 4-1: Using ep0 maxpacket: 32 [ 110.894014][ T5152] usb 4-1: config 1 interface 0 altsetting 8 bulk endpoint 0x82 has invalid maxpacket 32 [ 110.904390][ T5152] usb 4-1: config 1 interface 0 altsetting 8 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 110.918826][ T5152] usb 4-1: config 1 interface 0 has no altsetting 0 [ 110.930674][ T5152] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 110.941025][ T5152] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.960710][ T5152] usb 4-1: Product: 㖷絩嬼埀ꯤꠣ璉䭪ꕂ鋀宂넻痎ጆ訄䨮䉓罴˙䒰⍇ᛆ袾䁚៸뚎餍譤὘ߒ흌哽ㅪ׉⢿賎螊⢣忞웉⦸ࠟ⊝穫⇊䊧䫁灪ᲃ᧦ⷮ噒遽 [ 110.980617][ T5152] usb 4-1: Manufacturer: ｖ鲆땀훯Ṽ酠饴໪嚦蒉혺莛번噸蔍핰裨ཁឌ즋蠹娦좀ﮫ澁喥௯붨錒詸㤸￾ᴈӸꮺ뀳돣쁻ᆯ㳨얘埦䊒੎鯩図怙츎礄⧳ [ 111.000156][ T5152] usb 4-1: SerialNumber: ш [ 111.008429][ T5488] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 111.016730][ T5488] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 111.176667][ T5304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 111.281771][ T5152] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 111.307536][ T5396] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 111.317203][ T5152] usb 4-1: USB disconnect, device number 6 [ 111.341922][ T5396] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 111.411029][ T5396] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 111.431894][ T5396] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 111.448663][ T5346] 8021q: adding VLAN 0 to HW filter on device bond0 [ 111.468821][ T5304] 8021q: adding VLAN 0 to HW filter on device team0 [ 111.508879][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.516043][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.539849][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.547000][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.594735][ T5346] 8021q: adding VLAN 0 to HW filter on device team0 [ 111.635933][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.643152][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.671247][ T5153] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.678402][ T5153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.945987][ T5503] loop3: detected capacity change from 0 to 256 [ 111.973355][ T5503] exfat: Deprecated parameter 'namecase' [ 111.979108][ T5503] exfat: Deprecated parameter 'utf8' [ 112.010193][ T5503] exfat: Deprecated parameter 'namecase' [ 112.042062][ T5503] exfat: Deprecated parameter 'utf8' [ 112.047434][ T5503] exfat: Bad value for 'gid' [ 112.067949][ T5396] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.165077][ T5510] loop0: detected capacity change from 0 to 512 [ 112.218371][ T5510] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 112.265099][ T5396] 8021q: adding VLAN 0 to HW filter on device team0 [ 112.265400][ T5510] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 112.304695][ T5304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.321561][ T5510] System zones: 0-2, 18-18, 34-35 [ 112.339429][ T5510] EXT4-fs (loop0): mounted filesystem 00000000-0700-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.395986][ T5148] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.403232][ T5148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.438959][ T5152] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.446183][ T5152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.577568][ T5346] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.631996][ T5153] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 112.658534][ T5304] veth0_vlan: entered promiscuous mode [ 112.779518][ T5304] veth1_vlan: entered promiscuous mode [ 112.824974][ T5153] usb 1-1: Using ep0 maxpacket: 8 [ 112.846107][ T5153] usb 1-1: config 0 has an invalid interface number: 52 but max is 0 [ 112.872803][ T5153] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 112.890609][ T5153] usb 1-1: config 0 has no interface number 0 [ 112.898196][ T5153] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 112.941113][ T5153] usb 1-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 112.974034][ T5153] usb 1-1: config 0 interface 52 has no altsetting 0 [ 112.996322][ T5304] veth0_macvtap: entered promiscuous mode [ 113.017935][ T5153] usb 1-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 113.031761][ T5153] usb 1-1: New USB device strings: Mfr=22, Product=149, SerialNumber=35 [ 113.041021][ T5153] usb 1-1: Product: syz [ 113.059221][ T5304] veth1_macvtap: entered promiscuous mode [ 113.070216][ T5153] usb 1-1: Manufacturer: syz [ 113.082766][ T5153] usb 1-1: SerialNumber: syz [ 113.129946][ T5153] usb 1-1: config 0 descriptor?? [ 113.164423][ T5304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.177820][ T5304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.190003][ T5304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.201023][ T5304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.220404][ T5304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 113.260056][ T5304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.279043][ T5304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.293463][ T5304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.304172][ T5304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.316480][ T5304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.359450][ T5153] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.52/input/input11 [ 113.373180][ T5304] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.384605][ T5304] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.424336][ T5304] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.451260][ T5304] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.605217][ T5153] usb 1-1: USB disconnect, device number 5 [ 113.605283][ C1] synaptics_usb 1-1:0.52: synusb_irq - usb_submit_urb failed with result: -19 [ 113.743338][ T5396] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 113.869742][ T5346] veth0_vlan: entered promiscuous mode [ 113.898261][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.923352][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.982257][ T5346] veth1_vlan: entered promiscuous mode [ 114.045963][ T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.066356][ T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.220455][ T5396] veth0_vlan: entered promiscuous mode [ 114.220625][ T5097] EXT4-fs (loop0): unmounting filesystem 00000000-0700-0000-0000-000000000000. [ 114.255510][ T5346] veth0_macvtap: entered promiscuous mode [ 114.303870][ T5346] veth1_macvtap: entered promiscuous mode [ 114.383182][ T5396] veth1_vlan: entered promiscuous mode [ 114.438645][ T5346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.453510][ T5346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.476564][ T5346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.490728][ T5346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.505698][ T5346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.518387][ T5346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.536417][ T5346] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 114.578641][ T5346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.608191][ T5346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.620819][ T5346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.636591][ T5346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.646822][ T5346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.657689][ T5150] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 114.669677][ T5346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.694328][ T5346] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 114.721152][ T9] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 114.760882][ T5346] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.780950][ T5346] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.791269][ T5346] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.800022][ T5346] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.853295][ T5150] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 114.869648][ T5150] usb 3-1: New USB device found, idVendor=0867, idProduct=9812, bcdDevice=40.85 [ 114.879901][ T5150] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.900349][ T5150] usb 3-1: config 0 descriptor?? [ 114.934099][ T9] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 114.961389][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 114.962622][ T5396] veth0_macvtap: entered promiscuous mode [ 114.994973][ T5150] comedi comedi0: Wrong number of endpoints [ 114.995400][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.008058][ T5150] dt9812 3-1:0.0: driver 'dt9812' failed to auto-configure device. [ 115.055895][ T9] usb 1-1: Product: syz [ 115.061116][ T5396] veth1_macvtap: entered promiscuous mode [ 115.081461][ T9] usb 1-1: Manufacturer: syz [ 115.098528][ T9] usb 1-1: SerialNumber: syz [ 115.356648][ T5396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.375755][ T9] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 115.394538][ T5396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.408954][ T5396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.423679][ T5396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.460996][ T5396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.474511][ T5396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.485400][ T5396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.497165][ T5396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.537273][ T5396] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 115.578793][ T5541] loop0: detected capacity change from 0 to 128 [ 115.617462][ T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.658382][ T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.671660][ T5498] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 115.696932][ T5541] loop0: detected capacity change from 0 to 64 [ 115.700416][ T5396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.722613][ T5498] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 115.739664][ T5396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.762787][ T5498] Buffer I/O error on dev loop0, logical block 0, async page read [ 115.798154][ T5396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.832303][ T5396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.843510][ T5396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.909411][ T5396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.947981][ T5396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.977135][ T5396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.010761][ T5180] usb 1-1: USB disconnect, device number 6 [ 116.015040][ T5396] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 116.137576][ T5559] loop3: detected capacity change from 0 to 1024 [ 116.199332][ T5559] hfsplus: Filesystem is marked locked, mounting read-only. [ 116.224055][ T2403] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.227956][ T5396] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.244869][ T2403] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.291302][ T5396] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.308781][ T5396] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.341293][ T5396] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.358633][ T5563] input: syz0 as /devices/virtual/input/input12 [ 116.523161][ T5109] Bluetooth: hci3: unexpected event 0x2f length: 763 > 260 [ 116.935509][ T5568] debugfs: Directory 'C|+i!3rU&6 bOo '1©|y' with parent 'ieee80211' already present! [ 117.101271][ T5150] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 117.292488][ T5150] usb 1-1: Using ep0 maxpacket: 8 [ 117.314838][ T5151] usb 3-1: USB disconnect, device number 3 [ 117.349479][ T5150] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 117.379046][ T5150] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.430701][ T5150] usb 1-1: config 0 descriptor?? [ 117.455087][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.477115][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.650817][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.677450][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.833971][ T5581] netlink: 4 bytes leftover after parsing attributes in process `syz.2.81'. [ 117.912227][ T5580] loop2: detected capacity change from 0 to 512 [ 117.977957][ T5580] EXT4-fs warning (device loop2): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 118.056360][ T5580] EXT4-fs warning (device loop2): dx_probe:880: Enable large directory feature to access it [ 118.068035][ T5580] EXT4-fs warning (device loop2): dx_probe:965: inode #2: comm syz.2.81: Corrupt directory, running e2fsck is recommended [ 118.091617][ T5580] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 118.100820][ T5580] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2234: inode #15: comm syz.2.81: corrupted in-inode xattr: invalid ea_ino [ 118.118818][ T5580] EXT4-fs (loop2): Remounting filesystem read-only [ 118.126806][ T5580] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.230014][ T5591] kcapi: manufacturer command 12 unknown. [ 118.379295][ T5573] netlink: 'syz.0.80': attribute type 10 has an invalid length. [ 118.445237][ T5580] netlink: 12 bytes leftover after parsing attributes in process `syz.2.81'. [ 118.474740][ T5573] team0: Device veth1_macvtap failed to register rx_handler [ 118.581396][ T5148] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 118.639808][ T5304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.801831][ T5148] usb 2-1: Using ep0 maxpacket: 32 [ 118.830115][ T5148] usb 2-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 118.852094][ T5148] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.910504][ T5148] usb 2-1: config 0 descriptor?? [ 118.943989][ T5148] gspca_main: sq930x-2.14.0 probing 041e:403c [ 119.217677][ T5598] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.310868][ T5598] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.475599][ T5148] gspca_sq930x: reg_r 001f failed -110 [ 119.508053][ T5148] sq930x 2-1:0.0: probe with driver sq930x failed with error -110 [ 119.679999][ T5153] usb 2-1: USB disconnect, device number 4 [ 120.101705][ T5150] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71 [ 120.112595][ T5150] asix 1-1:0.0: probe with driver asix failed with error -71 [ 120.131333][ T5150] usb 1-1: USB disconnect, device number 7 [ 120.226591][ T5596] loop2: detected capacity change from 0 to 32768 [ 120.241897][ T5596] jfs: Unrecognized mount option "ui~=" or missing value [ 120.271728][ T46] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 120.317698][ T5242] I/O error, dev loop2, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 120.491211][ T46] usb 5-1: Using ep0 maxpacket: 8 [ 120.514227][ T46] usb 5-1: New USB device found, idVendor=2040, idProduct=7080, bcdDevice=4a.2c [ 120.541183][ T46] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.560280][ T46] usb 5-1: Product: syz [ 120.568455][ T46] usb 5-1: Manufacturer: syz [ 120.581228][ T46] usb 5-1: SerialNumber: syz [ 120.597210][ T46] usb 5-1: config 0 descriptor?? [ 120.637327][ T5617] loop1: detected capacity change from 0 to 256 [ 120.646955][ T5617] exfat: Deprecated parameter 'namecase' [ 120.687830][ T5617] exfat: Deprecated parameter 'utf8' [ 120.698937][ T5617] exfat: Deprecated parameter 'namecase' [ 120.708445][ T5617] exfat: Deprecated parameter 'utf8' [ 120.724303][ T5617] exfat: Bad value for 'gid' [ 120.765202][ T5573] syz.0.80 (5573) used greatest stack depth: 18224 bytes left [ 120.820349][ T46] dvb-usb: found a 'Hauppauge Nova-T MyTV.t' in cold state, will try to load a firmware [ 120.841164][ T5152] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 120.859237][ T46] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 120.878796][ T46] dib0700: firmware download failed at 7 with -22 [ 120.940620][ T46] usb 5-1: USB disconnect, device number 3 [ 120.969039][ T5622] loop0: detected capacity change from 0 to 128 [ 121.051211][ T5152] usb 4-1: Using ep0 maxpacket: 16 [ 121.059576][ T5152] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 121.100247][ T5152] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 121.131238][ T5152] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.163136][ T5152] usb 4-1: config 0 descriptor?? [ 121.220787][ T5624] loop2: detected capacity change from 0 to 4096 [ 121.243244][ T5624] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 121.308020][ T5624] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 121.316946][ T5624] ntfs3: loop2: Failed to load $Extend (-22). [ 121.326222][ T5624] ntfs3: loop2: Failed to initialize $Extend. [ 121.382086][ T5615] netlink: 8 bytes leftover after parsing attributes in process `syz.3.87'. [ 121.412290][ T5150] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 121.613629][ T5150] usb 1-1: Using ep0 maxpacket: 32 [ 121.623386][ T5150] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 121.648879][ T5150] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 121.669600][ T5150] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 121.722437][ T5150] usb 1-1: string descriptor 0 read error: -22 [ 121.763200][ T5150] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 121.775258][ T5615] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.807619][ T5615] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.918627][ T5152] hid-generic 0003:0158:0100.0001: unknown main item tag 0x1 [ 121.954808][ T5152] hid-generic 0003:0158:0100.0001: unexpected long global item [ 121.993465][ T5152] hid-generic 0003:0158:0100.0001: probe with driver hid-generic failed with error -22 [ 122.084322][ T5152] usb 4-1: USB disconnect, device number 7 [ 122.266050][ T5150] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.668802][ T5644] loop4: detected capacity change from 0 to 16 [ 122.747995][ T5644] erofs: (device loop4): mounted with root inode @ nid 36. [ 122.970218][ T5650] syz.4.96: attempt to access beyond end of device [ 122.970218][ T5650] loop4: rw=0, sector=8, nr_sectors = 16 limit=16 [ 123.551877][ T5109] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 123.560596][ T5109] Bluetooth: hci0: Injecting HCI hardware error event [ 123.569104][ T4490] Bluetooth: hci0: hardware error 0x00 [ 124.097203][ T5150] cdc_ncm 1-1:1.0: bind() failure [ 124.129794][ T5150] cdc_ncm 1-1:1.1: probe with driver cdc_ncm failed with error -71 [ 124.157789][ T5150] cdc_mbim 1-1:1.1: probe with driver cdc_mbim failed with error -71 [ 124.191485][ T5150] usbtest 1-1:1.1: probe with driver usbtest failed with error -71 [ 124.251517][ T5150] usb 1-1: USB disconnect, device number 8 [ 125.015129][ T5663] loop2: detected capacity change from 0 to 4096 [ 125.051296][ T5663] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 125.201532][ T5663] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 125.279410][ T5663] ntfs3: loop2: Failed to load $Extend (-22). [ 125.305115][ T5663] ntfs3: loop2: Failed to initialize $Extend. [ 125.396028][ T5674] binder: 5672:5674 ioctl c0306201 0 returned -14 [ 125.631599][ T4490] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 126.089112][ T5659] loop3: detected capacity change from 0 to 32768 [ 126.101420][ T5150] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 126.124732][ T5659] jfs: Unrecognized mount option "ui~=" or missing value [ 126.321550][ T46] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 126.329445][ T5150] usb 3-1: Using ep0 maxpacket: 16 [ 126.371154][ C1] hrtimer: interrupt took 146450 ns [ 126.378318][ T5150] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 126.428136][ T5150] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 126.461332][ T5150] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.503308][ T5150] usb 3-1: config 0 descriptor?? [ 126.576891][ T46] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 126.620200][ T5692] netlink: 'syz.3.111': attribute type 2 has an invalid length. [ 126.627218][ T5671] loop1: detected capacity change from 0 to 32768 [ 126.641329][ T46] usb 1-1: New USB device found, idVendor=0867, idProduct=9812, bcdDevice=40.85 [ 126.674969][ T46] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.741664][ T5683] netlink: 8 bytes leftover after parsing attributes in process `syz.2.108'. [ 126.764936][ T46] usb 1-1: config 0 descriptor?? [ 126.779305][ T5671] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 126.837956][ T46] comedi comedi0: Wrong number of endpoints [ 126.878090][ T46] dt9812 1-1:0.0: driver 'dt9812' failed to auto-configure device. [ 127.105920][ T5683] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.115358][ T5671] XFS (loop1): Ending clean mount [ 127.124871][ T5683] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.177718][ T5150] hid-generic 0003:0158:0100.0002: unknown main item tag 0x1 [ 127.187396][ T5150] hid-generic 0003:0158:0100.0002: unexpected long global item [ 127.199641][ T5150] hid-generic 0003:0158:0100.0002: probe with driver hid-generic failed with error -22 [ 127.358468][ T5148] usb 3-1: USB disconnect, device number 4 [ 127.450077][ T5396] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 128.365528][ T5723] loop4: detected capacity change from 0 to 4096 [ 128.379582][ T5723] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 128.389701][ T5148] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 128.455681][ T5727] binder: 5726:5727 ioctl c0306201 0 returned -14 [ 128.514641][ T5723] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 128.542464][ T5723] ntfs3: loop4: Failed to load $Extend (-22). [ 128.561341][ T5723] ntfs3: loop4: Failed to initialize $Extend. [ 128.631446][ T5148] usb 2-1: Using ep0 maxpacket: 8 [ 128.648216][ T5148] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 128.681560][ T5148] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.726149][ T5148] usb 2-1: config 0 descriptor?? [ 128.950607][ T5151] usb 1-1: USB disconnect, device number 9 [ 129.236070][ T5739] loop3: detected capacity change from 0 to 512 [ 129.385359][ T5721] netlink: 'syz.1.114': attribute type 10 has an invalid length. [ 129.409466][ T5739] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 129.474147][ T5739] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 129.513799][ T5721] team0: Device veth1_macvtap failed to register rx_handler [ 129.521345][ T5739] System zones: 0-2, 18-18, 34-35 [ 129.553018][ T5739] EXT4-fs (loop3): mounted filesystem 00000000-0700-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.844864][ T5736] loop0: detected capacity change from 0 to 32768 [ 129.857945][ T5736] jfs: Unrecognized mount option "ui~=" or missing value [ 129.881542][ T5153] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 129.916127][ T5235] I/O error, dev loop0, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 130.071150][ T5153] usb 4-1: Using ep0 maxpacket: 8 [ 130.081212][ T5153] usb 4-1: config 0 has an invalid interface number: 52 but max is 0 [ 130.097675][ T5153] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 130.133815][ T5153] usb 4-1: config 0 has no interface number 0 [ 130.140281][ T5180] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 130.160652][ T5153] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 130.189973][ T5153] usb 4-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 130.231234][ T5153] usb 4-1: config 0 interface 52 has no altsetting 0 [ 130.254164][ T5153] usb 4-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 130.264914][ T5153] usb 4-1: New USB device strings: Mfr=22, Product=149, SerialNumber=35 [ 130.278704][ T5153] usb 4-1: Product: syz [ 130.284581][ T5153] usb 4-1: Manufacturer: syz [ 130.296798][ T5153] usb 4-1: SerialNumber: syz [ 130.307271][ T5153] usb 4-1: config 0 descriptor?? [ 130.362712][ T5759] loop4: detected capacity change from 0 to 4096 [ 130.371365][ T5180] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 130.385751][ T5759] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 130.414607][ T5180] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 130.441961][ T5180] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.490249][ T5180] usb 3-1: Product: syz [ 130.498471][ T5180] usb 3-1: Manufacturer: syz [ 130.507738][ T5180] usb 3-1: SerialNumber: syz [ 130.535616][ T5759] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 130.546596][ T5153] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.52/input/input14 [ 130.565379][ T5759] ntfs3: loop4: Failed to load $Extend (-22). [ 130.601728][ T5759] ntfs3: loop4: Failed to initialize $Extend. [ 130.793671][ T5180] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 130.838578][ T5149] usb 4-1: USB disconnect, device number 8 [ 130.839013][ C1] synaptics_usb 4-1:0.52: synusb_irq - usb_submit_urb failed with result: -19 [ 130.898985][ T5148] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71 [ 130.969094][ T5148] asix 2-1:0.0: probe with driver asix failed with error -71 [ 131.021017][ T5148] usb 2-1: USB disconnect, device number 5 [ 131.051254][ T5754] loop2: detected capacity change from 0 to 128 [ 131.189692][ T5754] loop2: detected capacity change from 0 to 64 [ 131.327114][ T5148] usb 3-1: USB disconnect, device number 5 [ 131.450866][ T5101] EXT4-fs (loop3): unmounting filesystem 00000000-0700-0000-0000-000000000000. [ 131.465883][ T5151] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 131.552590][ T5774] loop1: detected capacity change from 0 to 256 [ 131.580463][ T5774] exfat: Deprecated parameter 'namecase' [ 131.599464][ T5774] exfat: Deprecated parameter 'utf8' [ 131.636338][ T5774] exfat: Deprecated parameter 'namecase' [ 131.643377][ T5774] exfat: Deprecated parameter 'utf8' [ 131.649059][ T5774] exfat: Bad value for 'gid' [ 131.660428][ T5776] binder: 5775:5776 ioctl c0306201 0 returned -14 [ 131.887330][ T5151] usb 5-1: Using ep0 maxpacket: 32 [ 131.897463][ T5151] usb 5-1: config 1 interface 0 altsetting 8 bulk endpoint 0x82 has invalid maxpacket 32 [ 131.908293][ T5151] usb 5-1: config 1 interface 0 altsetting 8 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 131.921480][ T5151] usb 5-1: config 1 interface 0 has no altsetting 0 [ 131.934034][ T5151] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 132.495152][ T1058] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.705904][ T5151] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.714107][ T5151] usb 5-1: Product: 㖷絩嬼埀ꯤꠣ璉䭪ꕂ鋀宂넻痎ጆ訄䨮䉓罴˙䒰⍇ᛆ袾䁚៸뚎餍譤὘ߒ흌哽ㅪ׉⢿賎螊⢣忞웉⦸ࠟ⊝穫⇊䊧䫁灪ᲃ᧦ⷮ噒遽 [ 132.733551][ T5151] usb 5-1: Manufacturer: ｖ鲆땀훯Ṽ酠饴໪嚦蒉혺莛번噸蔍핰裨ཁឌ즋蠹娦좀ﮫ澁喥௯붨錒詸㤸￾ᴈӸꮺ뀳돣쁻ᆯ㳨얘埦䊒੎鯩図怙츎礄⧳ﭺ✔꺳ꈑᾣ昇렳毧ၚ쬜ٞ懃썇ˢㄫታꔺ [ 132.791208][ T5151] usb 5-1: SerialNumber: ш [ 132.808634][ T5768] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 132.919288][ T1058] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.010101][ T1058] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.075663][ T1244] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.084430][ T1244] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.136718][ T1058] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.202292][ T5151] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 133.230054][ T5151] usb 5-1: USB disconnect, device number 4 [ 133.368454][ T5788] loop3: detected capacity change from 0 to 4096 [ 133.385778][ T5788] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 133.422551][ T1058] bridge_slave_1: left allmulticast mode [ 133.443489][ T1058] bridge_slave_1: left promiscuous mode [ 133.457756][ T1058] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.466122][ T5788] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 133.483891][ T1058] bridge_slave_0: left allmulticast mode [ 133.488045][ T5788] ntfs3: loop3: Failed to load $Extend (-22). [ 133.489820][ T1058] bridge_slave_0: left promiscuous mode [ 133.505330][ T1058] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.509804][ T5788] ntfs3: loop3: Failed to initialize $Extend. [ 133.796325][ T5109] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 133.807696][ T5109] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 133.817028][ T5109] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 133.826676][ T5109] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 133.845029][ T5109] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 133.861956][ T5109] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 133.943637][ T5798] netlink: 'syz.4.144': attribute type 2 has an invalid length. [ 134.226995][ T1058] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 134.248020][ T1058] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 134.266923][ T1058] bond0 (unregistering): Released all slaves [ 135.089287][ T5812] loop4: detected capacity change from 0 to 512 [ 135.132045][ T5812] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 135.179000][ T5812] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 135.200521][ T5812] System zones: 0-2, 18-18, 34-35 [ 135.232655][ T5812] EXT4-fs (loop4): mounted filesystem 00000000-0700-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.460177][ T5822] kcapi: manufacturer command 12 unknown. [ 135.602380][ T5149] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 135.624775][ T5152] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 135.815568][ T5149] usb 3-1: Using ep0 maxpacket: 8 [ 135.831834][ T5152] usb 5-1: Using ep0 maxpacket: 8 [ 135.850374][ T5149] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 135.851869][ T46] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 135.891276][ T5152] usb 5-1: config 0 has an invalid interface number: 52 but max is 0 [ 135.902855][ T5149] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.937183][ T5152] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 135.953503][ T5109] Bluetooth: hci2: command tx timeout [ 135.963648][ T5149] usb 3-1: config 0 descriptor?? [ 135.994739][ T5152] usb 5-1: config 0 has no interface number 0 [ 136.000976][ T5152] usb 5-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 136.014450][ T5152] usb 5-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 136.031872][ T5152] usb 5-1: config 0 interface 52 has no altsetting 0 [ 136.042466][ T5152] usb 5-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 136.057794][ T5152] usb 5-1: New USB device strings: Mfr=22, Product=149, SerialNumber=35 [ 136.067698][ T5152] usb 5-1: Product: syz [ 136.072389][ T5152] usb 5-1: Manufacturer: syz [ 136.072601][ T46] usb 2-1: Using ep0 maxpacket: 32 [ 136.077032][ T5152] usb 5-1: SerialNumber: syz [ 136.102808][ T5152] usb 5-1: config 0 descriptor?? [ 136.124568][ T46] usb 2-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 136.134671][ T1058] hsr_slave_0: left promiscuous mode [ 136.146468][ T46] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.162144][ T1058] hsr_slave_1: left promiscuous mode [ 136.170083][ T1058] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 136.178650][ T46] usb 2-1: config 0 descriptor?? [ 136.197898][ T1058] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 136.199032][ T46] gspca_main: sq930x-2.14.0 probing 041e:403c [ 136.214562][ T1058] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 136.224743][ T1058] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 136.259825][ T1058] veth0_macvtap: left promiscuous mode [ 136.266019][ T1058] veth1_vlan: left promiscuous mode [ 136.272708][ T1058] veth0_vlan: left promiscuous mode [ 136.354077][ T5152] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.52/input/input15 [ 136.631014][ T5153] usb 5-1: USB disconnect, device number 5 [ 136.631072][ C0] synaptics_usb 5-1:0.52: synusb_irq - usb_submit_urb failed with result: -19 [ 136.714719][ T5844] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.745981][ T5844] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.755076][ T46] gspca_sq930x: reg_r 001f failed -110 [ 136.777844][ T46] sq930x 2-1:0.0: probe with driver sq930x failed with error -110 [ 137.242271][ T5346] EXT4-fs (loop4): unmounting filesystem 00000000-0700-0000-0000-000000000000. [ 137.387844][ T5846] binder: 5845:5846 ioctl c0306201 0 returned -14 [ 137.527235][ T1058] team0 (unregistering): Port device team_slave_1 removed [ 138.041471][ T5109] Bluetooth: hci2: command tx timeout [ 138.221790][ T5850] loop3: detected capacity change from 0 to 40427 [ 138.358610][ T5850] F2FS-fs (loop3): Found nat_bits in checkpoint [ 138.470413][ T5819] netlink: 'syz.2.149': attribute type 10 has an invalid length. [ 138.514545][ T5819] team0: Device veth1_macvtap failed to register rx_handler [ 138.556879][ T5850] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 138.601379][ T5153] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 138.740839][ T5150] usb 2-1: USB disconnect, device number 6 [ 138.821242][ T5153] usb 5-1: Using ep0 maxpacket: 32 [ 138.842856][ T5149] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 138.849557][ T5153] usb 5-1: config 1 interface 0 altsetting 8 bulk endpoint 0x82 has invalid maxpacket 32 [ 138.856496][ T5149] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 138.874591][ T5149] asix 3-1:0.0: probe with driver asix failed with error -71 [ 138.894487][ T5149] usb 3-1: USB disconnect, device number 6 [ 139.103394][ T5862] syz.3.153: attempt to access beyond end of device [ 139.103394][ T5862] loop3: rw=2049, sector=77824, nr_sectors = 976 limit=40427 [ 139.319755][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 139.319799][ T29] audit: type=1800 audit(1719498237.040:26): pid=5862 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.153" name="bus" dev="loop3" ino=10 res=0 errno=0 [ 139.703994][ T5792] chnl_net:caif_netlink_parms(): no params data found [ 139.739932][ T5153] usb 5-1: config 1 interface 0 altsetting 8 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 139.771311][ T5153] usb 5-1: config 1 interface 0 has no altsetting 0 [ 139.779633][ T5101] syz-executor: attempt to access beyond end of device [ 139.779633][ T5101] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 139.785288][ T5153] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 139.834282][ T5153] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.861194][ T5153] usb 5-1: Product: 㖷絩嬼埀ꯤꠣ璉䭪ꕂ鋀宂넻痎ጆ訄䨮䉓罴˙䒰⍇ᛆ袾䁚៸뚎餍譤὘ߒ흌哽ㅪ׉⢿賎螊⢣忞웉⦸ࠟ⊝穫⇊䊧䫁灪ᲃ᧦ⷮ噒遽 [ 139.903291][ T5101] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 139.940078][ T5153] usb 5-1: Manufacturer: ｖ鲆땀훯Ṽ酠饴໪嚦蒉혺莛번噸蔍핰裨ཁឌ즋蠹娦좀ﮫ澁喥௯붨錒詸㤸￾ᴈӸꮺ뀳돣쁻ᆯ㳨얘埦䊒੎鯩図怙츎礄⧳ﭺ✔꺳ꈑᾣ昇렳毧ၚ쬜ٞ懃썇ˢㄫታꔺ [ 139.981771][ T5153] usb 5-1: SerialNumber: ш [ 139.993629][ T5852] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 140.141618][ T5109] Bluetooth: hci2: command tx timeout [ 141.142968][ T5153] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 141.234879][ T5153] usb 5-1: USB disconnect, device number 6 [ 141.385071][ T5792] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.408459][ T5792] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.430261][ T5792] bridge_slave_0: entered allmulticast mode [ 141.446124][ T5792] bridge_slave_0: entered promiscuous mode [ 141.471241][ T5149] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 141.478657][ T5792] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.488074][ T5792] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.496589][ T5792] bridge_slave_1: entered allmulticast mode [ 141.523414][ T5792] bridge_slave_1: entered promiscuous mode [ 141.724098][ T5792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 141.731169][ T5149] usb 3-1: Using ep0 maxpacket: 16 [ 141.773960][ T5792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 141.779268][ T5149] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 141.845514][ T5149] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 141.881371][ T5149] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.922274][ T5149] usb 3-1: config 0 descriptor?? [ 141.981403][ T5792] team0: Port device team_slave_0 added [ 142.016333][ T5792] team0: Port device team_slave_1 added [ 142.188826][ T5907] binder: 5904:5907 ioctl c0306201 0 returned -14 [ 142.195552][ T5109] Bluetooth: hci2: command tx timeout [ 142.210785][ T5883] netlink: 8 bytes leftover after parsing attributes in process `syz.2.159'. [ 142.268704][ T5792] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 142.277665][ T5792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 142.318703][ T5792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 142.387063][ T5792] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 142.415398][ T5792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 142.483644][ T5792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 142.511250][ T46] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 142.572010][ T5883] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.594173][ T5883] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.619574][ T5792] hsr_slave_0: entered promiscuous mode [ 142.627454][ T5792] hsr_slave_1: entered promiscuous mode [ 142.684129][ T5149] hid-generic 0003:0158:0100.0003: unknown main item tag 0x1 [ 142.701165][ T46] usb 4-1: Using ep0 maxpacket: 32 [ 142.710672][ T5149] hid-generic 0003:0158:0100.0003: unexpected long global item [ 142.720620][ T46] usb 4-1: config 1 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 142.731961][ T5149] hid-generic 0003:0158:0100.0003: probe with driver hid-generic failed with error -22 [ 142.808296][ T46] usb 4-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 142.846037][ T46] usb 4-1: config 1 interface 0 has no altsetting 0 [ 142.877938][ T46] usb 4-1: New USB device found, idVendor=18d1, idProduct=5030, bcdDevice= 0.40 [ 142.901958][ T5149] usb 3-1: USB disconnect, device number 7 [ 142.911234][ T46] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.929743][ T46] usb 4-1: Product: ч [ 142.934364][ T46] usb 4-1: Manufacturer: ⠁ [ 142.947897][ T46] usb 4-1: SerialNumber: 껵ભ럤⩮啥ᦛ瓅蚟䤠 [ 143.139261][ T5918] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 143.411457][ T5905] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.419165][ T5905] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.469828][ T5905] bridge0: entered allmulticast mode [ 143.769591][ T5909] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.776890][ T5909] bridge0: port 2(bridge_slave_1) entered forwarding state [ 143.784596][ T5909] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.792736][ T5909] bridge0: port 1(bridge_slave_0) entered forwarding state [ 143.811607][ T5909] bridge0: entered promiscuous mode [ 143.878441][ T46] usbhid 4-1:1.0: can't add hid device: -71 [ 143.898215][ T46] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 143.936502][ T46] usb 4-1: USB disconnect, device number 9 [ 144.653269][ T29] audit: type=1326 audit(1719498242.680:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5941 comm="syz.1.170" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd878775ae9 code=0x0 [ 144.821697][ T4875] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 144.893818][ T5792] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 144.938824][ T5792] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 144.958875][ T5792] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 144.985564][ T5792] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 145.014178][ T4875] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 145.064634][ T4875] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 145.080229][ T4875] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.098830][ T4875] usb 4-1: Product: syz [ 145.113191][ T4875] usb 4-1: Manufacturer: syz [ 145.118214][ T4875] usb 4-1: SerialNumber: syz [ 145.162076][ T5929] loop4: detected capacity change from 0 to 40427 [ 145.210229][ T5929] F2FS-fs (loop4): Found nat_bits in checkpoint [ 145.225886][ T5950] loop2: detected capacity change from 0 to 2048 [ 145.284804][ T5950] loop2: p1 < > p4 [ 145.297238][ T5950] loop2: p4 size 8388608 extends beyond EOD, truncated [ 145.396520][ T4875] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 145.403962][ T5929] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 145.555017][ T5498] udevd[5498]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 145.566701][ T5242] udevd[5242]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 145.600562][ T5940] loop3: detected capacity change from 0 to 128 [ 145.895118][ T5962] syz.4.166: attempt to access beyond end of device [ 145.895118][ T5962] loop4: rw=2049, sector=77824, nr_sectors = 976 limit=40427 [ 146.011438][ T29] audit: type=1800 audit(1719498243.860:28): pid=5962 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.166" name="bus" dev="loop4" ino=10 res=0 errno=0 [ 146.444358][ T5940] loop3: detected capacity change from 0 to 64 [ 146.596818][ T5346] syz-executor: attempt to access beyond end of device [ 146.596818][ T5346] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 146.651327][ T5346] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 146.857738][ T9] usb 4-1: USB disconnect, device number 10 [ 146.898574][ T5977] loop2: detected capacity change from 0 to 256 [ 146.936827][ T5977] exfat: Deprecated parameter 'namecase' [ 146.957838][ T5977] exfat: Deprecated parameter 'utf8' [ 146.978129][ T5977] exfat: Deprecated parameter 'namecase' [ 147.004314][ T5977] exfat: Deprecated parameter 'utf8' [ 147.009718][ T5977] exfat: Bad value for 'gid' [ 147.265499][ T5792] 8021q: adding VLAN 0 to HW filter on device bond0 [ 147.553484][ T5792] 8021q: adding VLAN 0 to HW filter on device team0 [ 147.604135][ T9] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 147.991612][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 148.107475][ T5149] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.114822][ T5149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 148.170744][ T9] usb 2-1: config 1 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 148.215662][ T9] usb 2-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 148.238747][ T9] usb 2-1: config 1 interface 0 has no altsetting 0 [ 148.280403][ T9] usb 2-1: New USB device found, idVendor=18d1, idProduct=5030, bcdDevice= 0.40 [ 148.297377][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.318369][ T9] usb 2-1: Product: ч [ 148.332121][ T9] usb 2-1: Manufacturer: ⠁ [ 148.338614][ T5149] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.345839][ T5149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 148.354960][ T9] usb 2-1: SerialNumber: 껵ભ럤⩮啥ᦛ瓅蚟䤠 [ 148.673837][ T29] audit: type=1326 audit(1719498246.700:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5992 comm="syz.4.177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa97d375ae9 code=0x7ffc0000 [ 148.744439][ T29] audit: type=1326 audit(1719498246.720:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5992 comm="syz.4.177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fa97d375ae9 code=0x7ffc0000 [ 148.788974][ T29] audit: type=1326 audit(1719498246.720:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5992 comm="syz.4.177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa97d375ae9 code=0x7ffc0000 [ 148.812208][ T29] audit: type=1326 audit(1719498246.720:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5992 comm="syz.4.177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa97d375ae9 code=0x7ffc0000 [ 148.838682][ T5982] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.846619][ T5982] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.868012][ T5982] bridge0: entered allmulticast mode [ 148.868051][ T6002] loop4: detected capacity change from 0 to 256 [ 148.898671][ T6002] udf: Unknown parameter '01777777777777777777777' [ 148.911406][ T29] audit: type=1326 audit(1719498246.720:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5992 comm="syz.4.177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fa97d375ae9 code=0x7ffc0000 [ 148.950080][ T5149] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 148.970782][ T5982] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.978078][ T5982] bridge0: port 2(bridge_slave_1) entered forwarding state [ 148.985673][ T5982] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.992934][ T5982] bridge0: port 1(bridge_slave_0) entered forwarding state [ 149.020696][ T29] audit: type=1326 audit(1719498246.720:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5992 comm="syz.4.177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa97d375ae9 code=0x7ffc0000 [ 149.036399][ T5982] bridge0: entered promiscuous mode [ 149.090328][ T29] audit: type=1326 audit(1719498246.720:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5992 comm="syz.4.177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fa97d375ae9 code=0x7ffc0000 [ 149.133969][ T9] usbhid 2-1:1.0: can't add hid device: -71 [ 149.145866][ T9] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 149.162153][ T5149] usb 4-1: Using ep0 maxpacket: 16 [ 149.171492][ T29] audit: type=1326 audit(1719498246.760:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5992 comm="syz.4.177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa97d375ae9 code=0x7ffc0000 [ 149.201769][ T9] usb 2-1: USB disconnect, device number 7 [ 149.210031][ T5149] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 149.272109][ T5149] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 149.307649][ T5149] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 149.341193][ T5149] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.377919][ T5792] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 149.387089][ T5149] usb 4-1: config 0 descriptor?? [ 149.525069][ T5792] veth0_vlan: entered promiscuous mode [ 149.566081][ T5792] veth1_vlan: entered promiscuous mode [ 149.722842][ T5792] veth0_macvtap: entered promiscuous mode [ 149.795813][ T5792] veth1_macvtap: entered promiscuous mode [ 149.876272][ T5995] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.895917][ T5995] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.978526][ T5149] usbhid 4-1:0.0: can't add hid device: -71 [ 149.987443][ T5149] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 149.999436][ T5149] usb 4-1: USB disconnect, device number 11 [ 150.066478][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.107480][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.145252][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.211527][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.237129][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.292346][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.384167][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.412335][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.467331][ T5792] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 150.577498][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.641348][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.679187][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.720298][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.762443][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.812094][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.845796][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.868975][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.934274][ T5792] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 151.133524][ T5792] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.171161][ T5792] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.201172][ T5792] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.230436][ T5792] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.439109][ T6050] sysfs: cannot create duplicate filename '/class/ieee80211/C|+i!3rU&6 bOo '1©|y' [ 151.461489][ T6050] CPU: 0 UID: 0 PID: 6050 Comm: syz.3.187 Not tainted 6.10.0-rc5-next-20240624-syzkaller #0 [ 151.471617][ T6050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 151.481796][ T6050] Call Trace: [ 151.485127][ T6050] [ 151.488145][ T6050] dump_stack_lvl+0x241/0x360 [ 151.492871][ T6050] ? __pfx_dump_stack_lvl+0x10/0x10 [ 151.498105][ T6050] ? __pfx__printk+0x10/0x10 [ 151.502725][ T6050] ? sysfs_warn_dup+0x51/0xa0 [ 151.507443][ T6050] ? __kmalloc_cache_noprof+0x19c/0x2c0 [ 151.513040][ T6050] sysfs_warn_dup+0x8e/0xa0 [ 151.517586][ T6050] sysfs_do_create_link_sd+0xbe/0x110 [ 151.523014][ T6050] device_add_class_symlinks+0x1c5/0x250 [ 151.528701][ T6050] device_add+0x553/0xbf0 [ 151.533076][ T6050] ? rtnl_lock+0xe7/0x130 [ 151.537446][ T6050] wiphy_register+0x1d3f/0x2b30 [ 151.542371][ T6050] ? __pfx_wiphy_register+0x10/0x10 [ 151.547615][ T6050] ? minstrel_ht_alloc+0x72b/0x860 [ 151.552787][ T6050] ? ieee80211_init_rate_ctrl_alg+0x5a2/0x620 [ 151.558904][ T6050] ieee80211_register_hw+0x3098/0x3d80 [ 151.564439][ T6050] ? ieee80211_register_hw+0x10d1/0x3d80 [ 151.570227][ T6050] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 151.576103][ T6050] ? __hrtimer_init+0xcd/0x250 [ 151.580931][ T6050] ? __asan_memset+0x23/0x50 [ 151.585581][ T6050] ? __hrtimer_init+0x170/0x250 [ 151.590488][ T6050] mac80211_hwsim_new_radio+0x2597/0x44d0 [ 151.596304][ T6050] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 151.602431][ T6050] ? kmalloc_node_track_caller_noprof+0x242/0x440 [ 151.608907][ T6050] ? kstrndup+0x5c/0xb0 [ 151.613123][ T6050] ? __asan_memcpy+0x40/0x70 [ 151.617770][ T6050] hwsim_new_radio_nl+0xe4c/0x21d0 [ 151.622959][ T6050] ? __pfx___nla_validate_parse+0x10/0x10 [ 151.628735][ T6050] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 151.634381][ T6050] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 151.640762][ T6050] genl_rcv_msg+0xb14/0xec0 [ 151.645310][ T6050] ? mark_lock+0x9a/0x360 [ 151.649704][ T6050] ? __pfx_genl_rcv_msg+0x10/0x10 [ 151.654801][ T6050] ? __pfx_lock_acquire+0x10/0x10 [ 151.659872][ T6050] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 151.665485][ T6050] ? __pfx___might_resched+0x10/0x10 [ 151.670820][ T6050] netlink_rcv_skb+0x1e3/0x430 [ 151.675639][ T6050] ? __pfx_genl_rcv_msg+0x10/0x10 [ 151.680701][ T6050] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 151.686048][ T6050] ? __netlink_deliver_tap+0x77e/0x7c0 [ 151.691565][ T6050] genl_rcv+0x28/0x40 [ 151.695577][ T6050] netlink_unicast+0x7f0/0x990 [ 151.700381][ T6050] ? __pfx_netlink_unicast+0x10/0x10 [ 151.705700][ T6050] ? __virt_addr_valid+0x183/0x520 [ 151.710868][ T6050] ? __check_object_size+0x49c/0x900 [ 151.716201][ T6050] ? bpf_lsm_netlink_send+0x9/0x10 [ 151.721352][ T6050] netlink_sendmsg+0x8e4/0xcb0 [ 151.726161][ T6050] ? __pfx_netlink_sendmsg+0x10/0x10 [ 151.731501][ T6050] ? __import_iovec+0x536/0x820 [ 151.736395][ T6050] ? aa_sock_msg_perm+0x91/0x160 [ 151.741367][ T6050] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 151.746703][ T6050] ? security_socket_sendmsg+0x87/0xb0 [ 151.752214][ T6050] ? __pfx_netlink_sendmsg+0x10/0x10 [ 151.757539][ T6050] __sock_sendmsg+0x221/0x270 [ 151.762254][ T6050] ____sys_sendmsg+0x525/0x7d0 [ 151.767102][ T6050] ? __pfx_____sys_sendmsg+0x10/0x10 [ 151.772452][ T6050] __sys_sendmsg+0x2b0/0x3a0 [ 151.777083][ T6050] ? __pfx___sys_sendmsg+0x10/0x10 [ 151.782291][ T6050] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 151.788665][ T6050] ? do_syscall_64+0x100/0x230 [ 151.793458][ T6050] ? do_syscall_64+0xb6/0x230 [ 151.798167][ T6050] do_syscall_64+0xf3/0x230 [ 151.802707][ T6050] ? clear_bhb_loop+0x35/0x90 [ 151.807429][ T6050] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.813360][ T6050] RIP: 0033:0x7f9114975ae9 [ 151.817814][ T6050] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 151.837454][ T6050] RSP: 002b:00007f9115700048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 151.845901][ T6050] RAX: ffffffffffffffda RBX: 00007f9114b04070 RCX: 00007f9114975ae9 [ 151.853898][ T6050] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000006 [ 151.861896][ T6050] RBP: 00007f91149f6756 R08: 0000000000000000 R09: 0000000000000000 [ 151.869979][ T6050] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 151.877975][ T6050] R13: 000000000000006e R14: 00007f9114b04070 R15: 00007ffd0bd899e8 [ 151.885984][ T6050] [ 153.207670][ T2410] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.261478][ T2410] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.503115][ T2403] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.531592][ T2403] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.654849][ T6069] loop2: detected capacity change from 0 to 32768 [ 153.795471][ T6069] XFS (loop2): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 153.992352][ T6069] XFS (loop2): Ending clean mount [ 154.064062][ T6069] XFS (loop2): Quotacheck needed: Please wait. [ 154.068528][ T6090] kcapi: manufacturer command 12 unknown. [ 154.172652][ T5153] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 154.212701][ T6069] XFS (loop2): Quotacheck: Done. [ 154.296650][ T5304] XFS (loop2): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 154.394918][ T5153] usb 4-1: Using ep0 maxpacket: 32 [ 154.407861][ T5153] usb 4-1: config 1 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 154.420982][ T5153] usb 4-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 154.426971][ T5152] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 154.462350][ T5153] usb 4-1: config 1 interface 0 has no altsetting 0 [ 154.505220][ T5153] usb 4-1: New USB device found, idVendor=18d1, idProduct=5030, bcdDevice= 0.40 [ 154.531428][ T5153] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.549781][ T5153] usb 4-1: Product: ч [ 154.570050][ T5153] usb 4-1: Manufacturer: ⠁ [ 154.576467][ T5153] usb 4-1: SerialNumber: 껵ભ럤⩮啥ᦛ瓅蚟䤠 [ 154.672238][ T5152] usb 1-1: Using ep0 maxpacket: 32 [ 154.689293][ T5152] usb 1-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 154.712607][ T5152] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.746526][ T5152] usb 1-1: config 0 descriptor?? [ 154.775361][ T5152] gspca_main: sq930x-2.14.0 probing 041e:403c [ 154.896273][ T6094] syzkaller0: entered promiscuous mode [ 154.903769][ T6094] syzkaller0: entered allmulticast mode [ 155.227222][ T6101] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.254475][ T6101] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.292491][ T5152] gspca_sq930x: reg_r 001f failed -110 [ 155.298112][ T5152] sq930x 1-1:0.0: probe with driver sq930x failed with error -110 [ 155.587626][ T6108] loop1: detected capacity change from 0 to 1764 [ 157.672852][ T6084] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.680376][ T6084] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.688810][ T6084] bridge0: left promiscuous mode [ 157.725983][ T6099] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.733325][ T6099] bridge0: port 2(bridge_slave_1) entered forwarding state [ 157.741081][ T6099] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.748350][ T6099] bridge0: port 1(bridge_slave_0) entered forwarding state [ 157.762489][ T6099] bridge0: entered promiscuous mode [ 157.840724][ T5153] usbhid 4-1:1.0: can't add hid device: -71 [ 157.848067][ T5153] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 157.904136][ T5153] usb 4-1: USB disconnect, device number 12 [ 157.999086][ T29] kauditd_printk_skb: 23 callbacks suppressed [ 157.999107][ T29] audit: type=1326 audit(1719498256.020:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6116 comm="syz.3.203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9114975ae9 code=0x7ffc0000 [ 158.060969][ T29] audit: type=1326 audit(1719498256.020:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6116 comm="syz.3.203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9114975ae9 code=0x7ffc0000 [ 158.086742][ T46] usb 1-1: USB disconnect, device number 10 [ 158.141261][ T6121] loop3: detected capacity change from 0 to 256 [ 158.157631][ T29] audit: type=1326 audit(1719498256.060:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6116 comm="syz.3.203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f9114975ae9 code=0x7ffc0000 [ 158.202820][ T6121] udf: Unknown parameter '01777777777777777777777' [ 158.265024][ T29] audit: type=1326 audit(1719498256.060:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6116 comm="syz.3.203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9114975ae9 code=0x7ffc0000 [ 158.296202][ T29] audit: type=1326 audit(1719498256.060:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6116 comm="syz.3.203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f9114975ae9 code=0x7ffc0000 [ 158.330879][ T5498] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 158.366292][ T29] audit: type=1326 audit(1719498256.060:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6116 comm="syz.3.203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9114975ae9 code=0x7ffc0000 [ 158.389234][ T29] audit: type=1326 audit(1719498256.060:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6116 comm="syz.3.203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f9114975ae9 code=0x7ffc0000 [ 158.417082][ T29] audit: type=1326 audit(1719498256.070:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6116 comm="syz.3.203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9114975ae9 code=0x7ffc0000 [ 158.444676][ T29] audit: type=1326 audit(1719498256.080:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6116 comm="syz.3.203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9114975ae9 code=0x7ffc0000 [ 158.540638][ T29] audit: type=1326 audit(1719498256.080:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6120 comm="syz.3.203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f91149a7ac5 code=0x7ffc0000 [ 158.571649][ T5152] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 158.661215][ T46] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 158.771145][ T5152] usb 3-1: Using ep0 maxpacket: 8 [ 158.778479][ T5152] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 158.791147][ T5152] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.812361][ T5152] usb 3-1: config 0 descriptor?? [ 158.851155][ T46] usb 1-1: Using ep0 maxpacket: 8 [ 158.872561][ T46] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 158.892613][ T46] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.901237][ T5149] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 158.924542][ T46] usb 1-1: config 0 descriptor?? [ 159.093473][ T5149] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 159.114668][ T5149] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 159.134222][ T5149] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.155864][ T5149] usb 2-1: Product: syz [ 159.160122][ T5149] usb 2-1: Manufacturer: syz [ 159.185319][ T5149] usb 2-1: SerialNumber: syz [ 159.391375][ T5109] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 159.401395][ T5109] Bluetooth: hci2: Injecting HCI hardware error event [ 159.409418][ T5149] usb 2-1: bad CDC descriptors [ 159.410138][ T4490] Bluetooth: hci2: hardware error 0x00 [ 159.428484][ T6125] netlink: 'syz.2.206': attribute type 10 has an invalid length. [ 159.444821][ T6125] team0: Device veth1_macvtap failed to register rx_handler [ 159.583052][ T6124] netlink: 'syz.0.205': attribute type 10 has an invalid length. [ 159.682568][ T6124] team0: Device veth1_macvtap failed to register rx_handler [ 159.934119][ T6127] loop1: detected capacity change from 0 to 4096 [ 160.290798][ T5107] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 160.304146][ T5107] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 160.318397][ T5107] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 160.332686][ T5107] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 160.340514][ T5107] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 160.350392][ T5107] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 160.460197][ T63] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.475837][ T4875] usb 2-1: USB disconnect, device number 8 [ 160.611793][ T63] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.728154][ T63] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.875997][ T63] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.916181][ T46] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 160.951501][ T5152] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71 [ 160.965169][ T46] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 160.971799][ T5152] asix 3-1:0.0: probe with driver asix failed with error -71 [ 161.001531][ T5152] usb 3-1: USB disconnect, device number 8 [ 161.010920][ T46] asix 1-1:0.0: probe with driver asix failed with error -71 [ 161.054355][ T46] usb 1-1: USB disconnect, device number 11 [ 161.571245][ T4490] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 162.443606][ T4490] Bluetooth: hci3: command tx timeout [ 162.452076][ T63] bridge_slave_1: left allmulticast mode [ 162.457946][ T63] bridge_slave_1: left promiscuous mode [ 162.467133][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.483736][ T63] bridge_slave_0: left allmulticast mode [ 162.489449][ T63] bridge_slave_0: left promiscuous mode [ 162.499669][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.944228][ T6157] process 'syz.1.215' launched './file1' with NULL argv: empty string added [ 163.156433][ T6160] kcapi: manufacturer command 12 unknown. [ 163.259627][ T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 163.293640][ T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 163.325989][ T63] bond0 (unregistering): Released all slaves [ 163.361630][ T6146] netlink: 12 bytes leftover after parsing attributes in process `syz.0.212'. [ 163.383290][ T6143] bridge_slave_1: left allmulticast mode [ 163.392659][ T6143] bridge_slave_1: left promiscuous mode [ 163.398532][ T6143] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.413956][ T29] kauditd_printk_skb: 21 callbacks suppressed [ 163.413974][ T29] audit: type=1326 audit(1719498261.440:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6164 comm="syz.2.218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f489b575ae9 code=0x7ffc0000 [ 163.477733][ T29] audit: type=1326 audit(1719498261.440:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6164 comm="syz.2.218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f489b575ae9 code=0x7ffc0000 [ 163.510613][ T29] audit: type=1326 audit(1719498261.440:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6164 comm="syz.2.218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f489b575ae9 code=0x7ffc0000 [ 163.539508][ T29] audit: type=1326 audit(1719498261.440:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6164 comm="syz.2.218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f489b575ae9 code=0x7ffc0000 [ 163.572350][ T4875] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 163.588929][ T6167] loop2: detected capacity change from 0 to 256 [ 163.597703][ T29] audit: type=1326 audit(1719498261.470:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6164 comm="syz.2.218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f489b575ae9 code=0x7ffc0000 [ 163.620394][ T6167] udf: Unknown parameter '01777777777777777777777' [ 163.655413][ T29] audit: type=1326 audit(1719498261.470:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6164 comm="syz.2.218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f489b575ae9 code=0x7ffc0000 [ 163.708571][ T29] audit: type=1326 audit(1719498261.470:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6164 comm="syz.2.218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f489b575ae9 code=0x7ffc0000 [ 163.711523][ T5242] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 163.775436][ T4875] usb 2-1: Using ep0 maxpacket: 32 [ 163.787122][ T4875] usb 2-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 163.807460][ T4875] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.820014][ T6134] chnl_net:caif_netlink_parms(): no params data found [ 163.828162][ T29] audit: type=1326 audit(1719498261.480:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6164 comm="syz.2.218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f489b575ae9 code=0x7ffc0000 [ 163.866343][ T4875] usb 2-1: config 0 descriptor?? [ 163.901845][ T4875] gspca_main: sq930x-2.14.0 probing 041e:403c [ 163.911301][ T29] audit: type=1326 audit(1719498261.510:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6164 comm="syz.2.218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f489b575ae9 code=0x7ffc0000 [ 164.023925][ T29] audit: type=1326 audit(1719498261.510:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6164 comm="syz.2.218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f489b575ae9 code=0x7ffc0000 [ 164.265397][ T6160] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.295408][ T6160] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.422634][ T4875] gspca_sq930x: reg_r 001f failed -110 [ 164.428261][ T4875] sq930x 2-1:0.0: probe with driver sq930x failed with error -110 [ 164.521151][ T4490] Bluetooth: hci3: command tx timeout [ 164.657737][ T6134] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.660060][ T5151] usb 2-1: USB disconnect, device number 9 [ 164.688854][ T6134] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.721599][ T6134] bridge_slave_0: entered allmulticast mode [ 164.729252][ T6134] bridge_slave_0: entered promiscuous mode [ 164.836619][ T6169] loop0: detected capacity change from 0 to 32768 [ 164.843709][ T63] hsr_slave_0: left promiscuous mode [ 164.850337][ T63] hsr_slave_1: left promiscuous mode [ 164.856796][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 164.905200][ T63] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 164.922576][ T5242] I/O error, dev loop0, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 164.962400][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 164.970493][ T63] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 165.043272][ T63] veth1_macvtap: left promiscuous mode [ 165.048864][ T63] veth0_macvtap: left promiscuous mode [ 165.079293][ T63] veth1_vlan: left promiscuous mode [ 165.101285][ T63] veth0_vlan: left promiscuous mode [ 165.902140][ T6185] netlink: 4 bytes leftover after parsing attributes in process `syz.0.222'. [ 166.591296][ T4490] Bluetooth: hci3: command tx timeout [ 166.785017][ T6190] input: syz0 as /devices/virtual/input/input16 [ 166.841200][ T63] team0 (unregistering): Port device team_slave_1 removed [ 167.012636][ T63] team0 (unregistering): Port device team_slave_0 removed [ 168.077506][ T6192] loop0: detected capacity change from 0 to 16 [ 168.118786][ T6192] erofs: (device loop0): mounted with root inode @ nid 36. [ 168.154348][ T6192] syz.0.225: attempt to access beyond end of device [ 168.154348][ T6192] loop0: rw=0, sector=8, nr_sectors = 16 limit=16 [ 168.674058][ T4490] Bluetooth: hci3: command tx timeout [ 168.721489][ T6134] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.742396][ T6134] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.793048][ T6134] bridge_slave_1: entered allmulticast mode [ 168.813693][ T6134] bridge_slave_1: entered promiscuous mode [ 169.108332][ T6198] debugfs: Directory 'C|+i!3rU&6 bOo '1©|y' with parent 'ieee80211' already present! [ 169.397955][ T6134] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 169.573737][ T5109] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 169.584502][ T5109] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 169.593009][ T5109] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 169.603091][ T5109] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 169.613116][ T5109] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 169.623490][ T5109] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 169.658727][ T6134] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 169.979109][ T6134] team0: Port device team_slave_0 added [ 170.049759][ T6134] team0: Port device team_slave_1 added [ 170.242488][ T6134] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 170.249501][ T6134] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 170.300152][ T6134] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 170.447433][ T6134] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 170.467857][ T6134] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 170.572426][ T6134] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 170.994175][ T6134] hsr_slave_0: entered promiscuous mode [ 171.027785][ T6134] hsr_slave_1: entered promiscuous mode [ 171.078499][ T6134] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 171.086911][ T6134] Cannot create hsr debugfs directory [ 171.706238][ T63] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.721408][ T5109] Bluetooth: hci4: command tx timeout [ 171.749842][ T6225] loop1: detected capacity change from 0 to 2048 [ 171.833968][ T6225] EXT4-fs: Ignoring removed mblk_io_submit option [ 171.914384][ T4490] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 171.924941][ T4490] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 171.934088][ T4490] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 171.943072][ T4490] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 171.953089][ T4490] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 171.960647][ T4490] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 172.000222][ T6225] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.050202][ T6225] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.234: bg 0: block 234: padding at end of block bitmap is not set [ 172.090542][ T63] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.118565][ T6225] EXT4-fs (loop1): Delayed block allocation failed for inode 16 at logical offset 0 with max blocks 1 with error 28 [ 172.150960][ T6225] EXT4-fs (loop1): This should not happen!! Data will be lost [ 172.150960][ T6225] [ 172.174806][ T6225] EXT4-fs (loop1): Total free blocks count 0 [ 172.180858][ T6225] EXT4-fs (loop1): Free/Dirty block details [ 172.201168][ T6225] EXT4-fs (loop1): free_blocks=0 [ 172.206237][ T6225] EXT4-fs (loop1): dirty_blocks=16 [ 172.217160][ T6225] EXT4-fs (loop1): Block reservation details [ 172.224000][ T6225] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 172.303332][ T5396] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.335122][ T63] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.463735][ T63] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.504060][ T6202] chnl_net:caif_netlink_parms(): no params data found [ 173.444963][ T6202] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.515719][ T6202] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.561370][ T6202] bridge_slave_0: entered allmulticast mode [ 173.594930][ T6202] bridge_slave_0: entered promiscuous mode [ 173.636202][ T6202] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.653349][ T6202] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.660758][ T6202] bridge_slave_1: entered allmulticast mode [ 173.682803][ T6202] bridge_slave_1: entered promiscuous mode [ 173.811139][ T4490] Bluetooth: hci4: command tx timeout [ 174.120138][ T4490] Bluetooth: hci2: command tx timeout [ 175.319576][ T6202] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 175.333422][ T5109] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 175.346940][ T5109] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 175.355679][ T5109] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 175.366622][ T5109] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 175.370187][ T6202] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 175.393085][ T5109] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 175.400618][ T5109] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 175.576425][ T63] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.758545][ T63] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.844961][ T6202] team0: Port device team_slave_0 added [ 175.864337][ T6272] loop1: detected capacity change from 0 to 32768 [ 175.871400][ T4490] Bluetooth: hci4: command tx timeout [ 175.878690][ T6272] jfs: Unrecognized mount option "ui~=" or missing value [ 175.897814][ T63] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.939446][ T6202] team0: Port device team_slave_1 added [ 176.054220][ T63] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.133900][ T6202] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 176.140892][ T6202] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.169393][ T6202] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 176.186845][ T6202] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 176.191507][ T4490] Bluetooth: hci2: command tx timeout [ 176.194227][ T6202] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.226070][ T6202] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 176.238952][ T6227] chnl_net:caif_netlink_parms(): no params data found [ 176.520300][ T6134] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 176.539146][ T6134] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 176.668210][ T6134] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 176.699019][ T6134] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 176.797309][ T6202] hsr_slave_0: entered promiscuous mode [ 176.819449][ T6202] hsr_slave_1: entered promiscuous mode [ 176.843755][ T6202] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 176.870727][ T6202] Cannot create hsr debugfs directory [ 177.200890][ T6227] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.208323][ T6227] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.227299][ T6227] bridge_slave_0: entered allmulticast mode [ 177.246961][ T6227] bridge_slave_0: entered promiscuous mode [ 177.287558][ T63] bridge_slave_0: left allmulticast mode [ 177.306098][ T63] bridge_slave_0: left promiscuous mode [ 177.313128][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.338361][ T63] bridge_slave_1: left allmulticast mode [ 177.352252][ T63] bridge_slave_1: left promiscuous mode [ 177.358149][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.390564][ T63] bridge_slave_0: left allmulticast mode [ 177.397300][ T63] bridge_slave_0: left promiscuous mode [ 177.411422][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.471184][ T4490] Bluetooth: hci1: command tx timeout [ 177.951183][ T4490] Bluetooth: hci4: command tx timeout [ 178.128426][ T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 178.141216][ T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 178.153216][ T63] bond0 (unregistering): Released all slaves [ 178.258410][ T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 178.271659][ T4490] Bluetooth: hci2: command tx timeout [ 178.278276][ T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 178.290437][ T63] bond0 (unregistering): Released all slaves [ 178.322636][ T6227] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.329935][ T6227] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.337435][ T6227] bridge_slave_1: entered allmulticast mode [ 178.345118][ T6227] bridge_slave_1: entered promiscuous mode [ 178.531699][ T6227] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 178.662928][ T6227] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 178.788292][ T6307] sysfs: cannot create duplicate filename '/class/ieee80211/C|+i!3rU&6 bOo '1©|y' [ 178.799761][ T6307] CPU: 0 UID: 0 PID: 6307 Comm: syz.1.247 Not tainted 6.10.0-rc5-next-20240624-syzkaller #0 [ 178.809872][ T6307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 178.819929][ T6307] Call Trace: [ 178.823225][ T6307] [ 178.826153][ T6307] dump_stack_lvl+0x241/0x360 [ 178.830863][ T6307] ? __pfx_dump_stack_lvl+0x10/0x10 [ 178.836067][ T6307] ? __pfx__printk+0x10/0x10 [ 178.840754][ T6307] ? sysfs_warn_dup+0x51/0xa0 [ 178.845441][ T6307] ? __kmalloc_cache_noprof+0x19c/0x2c0 [ 178.851003][ T6307] sysfs_warn_dup+0x8e/0xa0 [ 178.855640][ T6307] sysfs_do_create_link_sd+0xbe/0x110 [ 178.861063][ T6307] device_add_class_symlinks+0x1c5/0x250 [ 178.866736][ T6307] device_add+0x553/0xbf0 [ 178.871104][ T6307] ? rtnl_lock+0xe7/0x130 [ 178.875461][ T6307] wiphy_register+0x1d3f/0x2b30 [ 178.880336][ T6307] ? __pfx_wiphy_register+0x10/0x10 [ 178.885558][ T6307] ? minstrel_ht_alloc+0x72b/0x860 [ 178.890685][ T6307] ? ieee80211_init_rate_ctrl_alg+0x5a2/0x620 [ 178.896761][ T6307] ieee80211_register_hw+0x3098/0x3d80 [ 178.902269][ T6307] ? ieee80211_register_hw+0x10d1/0x3d80 [ 178.907960][ T6307] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 178.913816][ T6307] ? __asan_memset+0x23/0x50 [ 178.918432][ T6307] ? __hrtimer_init+0x170/0x250 [ 178.923298][ T6307] mac80211_hwsim_new_radio+0x2597/0x44d0 [ 178.929083][ T6307] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 178.935193][ T6307] ? kmalloc_node_track_caller_noprof+0x242/0x440 [ 178.941640][ T6307] ? kstrndup+0x5c/0xb0 [ 178.945812][ T6307] ? __asan_memcpy+0x40/0x70 [ 178.950417][ T6307] hwsim_new_radio_nl+0xe4c/0x21d0 [ 178.955560][ T6307] ? __pfx___nla_validate_parse+0x10/0x10 [ 178.961296][ T6307] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 178.966895][ T6307] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 178.973243][ T6307] genl_rcv_msg+0xb14/0xec0 [ 178.977772][ T6307] ? mark_lock+0x9a/0x360 [ 178.982151][ T6307] ? __pfx_genl_rcv_msg+0x10/0x10 [ 178.987229][ T6307] ? __pfx_lock_acquire+0x10/0x10 [ 178.992270][ T6307] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 178.997858][ T6307] ? __pfx___might_resched+0x10/0x10 [ 179.003175][ T6307] netlink_rcv_skb+0x1e3/0x430 [ 179.007969][ T6307] ? __pfx_genl_rcv_msg+0x10/0x10 [ 179.013010][ T6307] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 179.018326][ T6307] ? __netlink_deliver_tap+0x77e/0x7c0 [ 179.023831][ T6307] genl_rcv+0x28/0x40 [ 179.027815][ T6307] netlink_unicast+0x7f0/0x990 [ 179.032597][ T6307] ? __pfx_netlink_unicast+0x10/0x10 [ 179.037985][ T6307] ? __virt_addr_valid+0x183/0x520 [ 179.043118][ T6307] ? __check_object_size+0x49c/0x900 [ 179.048418][ T6307] ? bpf_lsm_netlink_send+0x9/0x10 [ 179.053562][ T6307] netlink_sendmsg+0x8e4/0xcb0 [ 179.058367][ T6307] ? __pfx_netlink_sendmsg+0x10/0x10 [ 179.063662][ T6307] ? __import_iovec+0x536/0x820 [ 179.068521][ T6307] ? aa_sock_msg_perm+0x91/0x160 [ 179.073465][ T6307] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 179.078760][ T6307] ? security_socket_sendmsg+0x87/0xb0 [ 179.084231][ T6307] ? __pfx_netlink_sendmsg+0x10/0x10 [ 179.089527][ T6307] __sock_sendmsg+0x221/0x270 [ 179.094215][ T6307] ____sys_sendmsg+0x525/0x7d0 [ 179.099086][ T6307] ? __pfx_____sys_sendmsg+0x10/0x10 [ 179.104415][ T6307] __sys_sendmsg+0x2b0/0x3a0 [ 179.109022][ T6307] ? __pfx___sys_sendmsg+0x10/0x10 [ 179.114180][ T6307] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 179.120641][ T6307] ? do_syscall_64+0x100/0x230 [ 179.125416][ T6307] ? do_syscall_64+0xb6/0x230 [ 179.130108][ T6307] do_syscall_64+0xf3/0x230 [ 179.134623][ T6307] ? clear_bhb_loop+0x35/0x90 [ 179.139320][ T6307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.145243][ T6307] RIP: 0033:0x7fd878775ae9 [ 179.149669][ T6307] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 179.169412][ T6307] RSP: 002b:00007fd8794dd048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 179.177855][ T6307] RAX: ffffffffffffffda RBX: 00007fd878904070 RCX: 00007fd878775ae9 [ 179.185870][ T6307] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000007 [ 179.193862][ T6307] RBP: 00007fd8787f6756 R08: 0000000000000000 R09: 0000000000000000 [ 179.201851][ T6307] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 179.209839][ T6307] R13: 000000000000006e R14: 00007fd878904070 R15: 00007fff1a85e958 [ 179.217838][ T6307] [ 179.551441][ T4490] Bluetooth: hci1: command tx timeout [ 179.587484][ T6227] team0: Port device team_slave_0 added [ 179.611494][ T6227] team0: Port device team_slave_1 added [ 179.762695][ T6269] chnl_net:caif_netlink_parms(): no params data found [ 179.993388][ T6227] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 180.000465][ T6227] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 180.027444][ T6227] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 180.054304][ T6227] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 180.063040][ T6227] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 180.089166][ T6227] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 180.351169][ T4490] Bluetooth: hci2: command tx timeout [ 180.479974][ T6269] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.496822][ T6269] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.505187][ T6269] bridge_slave_0: entered allmulticast mode [ 180.517576][ T6269] bridge_slave_0: entered promiscuous mode [ 180.596325][ T6227] hsr_slave_0: entered promiscuous mode [ 180.631720][ T6319] binder: 6318:6319 ioctl c0306201 0 returned -14 [ 180.631915][ T6227] hsr_slave_1: entered promiscuous mode [ 180.649884][ T6227] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 180.658447][ T6227] Cannot create hsr debugfs directory [ 180.670910][ T6269] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.678647][ T6269] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.690122][ T6269] bridge_slave_1: entered allmulticast mode [ 180.697499][ T6269] bridge_slave_1: entered promiscuous mode [ 180.719666][ T63] hsr_slave_0: left promiscuous mode [ 180.727690][ T63] hsr_slave_1: left promiscuous mode [ 180.735425][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 180.743195][ T63] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 180.752134][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 180.759583][ T63] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 180.775648][ T63] hsr_slave_0: left promiscuous mode [ 180.786202][ T63] hsr_slave_1: left promiscuous mode [ 180.794014][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 180.802082][ T63] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 180.810001][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 180.817570][ T63] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 180.855680][ T63] veth0_macvtap: left promiscuous mode [ 180.861616][ T63] veth1_vlan: left promiscuous mode [ 180.867076][ T63] veth0_vlan: left promiscuous mode [ 180.875923][ T63] veth1_macvtap: left promiscuous mode [ 180.881637][ T63] veth0_macvtap: left promiscuous mode [ 180.888675][ T63] veth1_vlan: left promiscuous mode [ 180.894185][ T63] veth0_vlan: left promiscuous mode [ 181.543983][ T63] team0 (unregistering): Port device team_slave_1 removed [ 181.633866][ T4490] Bluetooth: hci1: command tx timeout [ 181.654223][ T63] team0 (unregistering): Port device team_slave_0 removed [ 182.498127][ T63] team0 (unregistering): Port device team_slave_1 removed [ 183.035366][ T6269] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 183.058158][ T6269] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 183.270517][ T6269] team0: Port device team_slave_0 added [ 183.387948][ T6269] team0: Port device team_slave_1 added [ 183.568539][ T6202] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 183.580363][ T6269] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 183.588613][ T6269] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 183.615926][ T6269] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 183.633419][ T6334] loop1: detected capacity change from 0 to 32768 [ 183.644931][ T6334] XFS: attr2 mount option is deprecated. [ 183.659564][ T6202] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 183.675550][ T6202] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 183.695214][ T6269] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 183.707684][ T6334] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 183.715158][ T6269] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 183.716771][ T4490] Bluetooth: hci1: command tx timeout [ 183.749075][ T6269] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 183.794702][ T6202] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 183.865976][ T6134] 8021q: adding VLAN 0 to HW filter on device bond0 [ 183.895992][ T6334] XFS (loop1): Ending clean mount [ 183.934636][ T6334] XFS (loop1): Quotacheck needed: Please wait. [ 183.985715][ T5150] XFS (loop1): Metadata CRC error detected at xfs_rmapbt_read_verify+0x41/0xd0, xfs_rmapbt block 0x14 [ 184.014444][ T5150] XFS (loop1): Unmount and run xfs_repair [ 184.019579][ T6269] hsr_slave_0: entered promiscuous mode [ 184.020258][ T5150] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 184.045533][ T5150] 00000000: 52 4d 42 33 00 00 00 0c ff ff ff ff ff ff ff ff RMB3............ [ 184.055643][ T6269] hsr_slave_1: entered promiscuous mode [ 184.061364][ T5150] 00000010: 00 00 02 00 00 00 00 14 00 00 00 01 00 00 00 80 ................ [ 184.061389][ T5150] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 184.061408][ T5150] 00000030: 00 00 00 00 5b af 3b 1d 00 00 00 00 00 00 00 01 ....[.;......... [ 184.061426][ T5150] 00000040: ff ff ff ff ff ff ff fd 00 00 00 00 00 00 00 00 ................ [ 184.061444][ T5150] 00000050: 00 00 00 01 00 00 00 02 ff ff ff ff ff ff ff fb ................ [ 184.061461][ T5150] 00000060: 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 02 ................ [ 184.061479][ T5150] 00000070: ff ff ff ff ff ff ff fa 00 00 00 00 00 00 00 00 ................ [ 184.061793][ T35] XFS (loop1): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x14 len 4 error 74 [ 184.155749][ T35] XFS (loop1): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x663/0xad0 (fs/xfs/xfs_trans_buf.c:296). Shutting down filesystem. [ 184.170909][ T35] XFS (loop1): Please unmount the filesystem and rectify the problem(s) [ 184.193457][ T6334] XFS (loop1): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 184.276570][ T6134] 8021q: adding VLAN 0 to HW filter on device team0 [ 184.450846][ T5396] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 184.759236][ T5151] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.766495][ T5151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 184.923755][ T5149] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.930925][ T5149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 185.066729][ T63] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.254594][ T63] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.362967][ T63] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.507626][ T63] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.533631][ T6227] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 185.536745][ T6365] overlayfs: missing 'workdir' [ 185.563102][ T6227] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 185.584020][ T6227] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 185.649140][ T6227] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 185.756173][ T6202] 8021q: adding VLAN 0 to HW filter on device bond0 [ 185.986457][ T63] bridge_slave_1: left allmulticast mode [ 185.998198][ T63] bridge_slave_1: left promiscuous mode [ 186.008405][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.033995][ T63] bridge_slave_0: left allmulticast mode [ 186.039700][ T63] bridge_slave_0: left promiscuous mode [ 186.046552][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.620562][ T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 186.639595][ T29] kauditd_printk_skb: 22 callbacks suppressed [ 186.639613][ T29] audit: type=1326 audit(1719498284.660:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6395 comm="syz.1.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd878775ae9 code=0x7ffc0000 [ 186.692438][ T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 186.698620][ T29] audit: type=1326 audit(1719498284.700:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6395 comm="syz.1.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd878775ae9 code=0x7ffc0000 [ 186.744195][ T63] bond0 (unregistering): Released all slaves [ 186.769604][ T29] audit: type=1326 audit(1719498284.700:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6395 comm="syz.1.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fd878774457 code=0x7ffc0000 [ 186.809123][ T29] audit: type=1326 audit(1719498284.700:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6395 comm="syz.1.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd878775ae9 code=0x7ffc0000 [ 186.948088][ T29] audit: type=1326 audit(1719498284.700:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6395 comm="syz.1.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd878775ae9 code=0x7ffc0000 [ 187.002853][ T29] audit: type=1326 audit(1719498284.700:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6395 comm="syz.1.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7fd878775ae9 code=0x7ffc0000 [ 187.038642][ T29] audit: type=1326 audit(1719498284.700:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6395 comm="syz.1.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd878775ae9 code=0x7ffc0000 [ 187.089782][ T6409] loop1: detected capacity change from 0 to 128 [ 187.090864][ T29] audit: type=1326 audit(1719498284.700:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6395 comm="syz.1.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd878775ae9 code=0x7ffc0000 [ 187.122335][ T29] audit: type=1326 audit(1719498284.700:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6395 comm="syz.1.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd878775ae9 code=0x7ffc0000 [ 187.146795][ T29] audit: type=1326 audit(1719498284.700:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6395 comm="syz.1.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd878775ae9 code=0x7ffc0000 [ 187.226451][ T6202] 8021q: adding VLAN 0 to HW filter on device team0 [ 187.332797][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.339922][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 187.389905][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.397094][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 187.429299][ T63] hsr_slave_0: left promiscuous mode [ 187.435570][ T63] hsr_slave_1: left promiscuous mode [ 187.442084][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 187.449521][ T63] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 187.457916][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 187.469614][ T63] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 187.476932][ T25] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 187.499842][ T63] veth0_macvtap: left promiscuous mode [ 187.505624][ T63] veth1_vlan: left promiscuous mode [ 187.510944][ T63] veth0_vlan: left promiscuous mode [ 187.671388][ T25] usb 2-1: Using ep0 maxpacket: 32 [ 187.685428][ T25] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 187.705841][ T25] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 187.729084][ T25] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 187.743431][ T25] usb 2-1: string descriptor 0 read error: -22 [ 187.750032][ T25] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 187.776089][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.005482][ T63] team0 (unregistering): Port device team_slave_1 removed [ 188.057507][ T63] team0 (unregistering): Port device team_slave_0 removed [ 188.617039][ T6134] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 189.151620][ T6269] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 189.200083][ T6269] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 189.246652][ T6227] 8021q: adding VLAN 0 to HW filter on device bond0 [ 189.265513][ T6269] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 189.293040][ T6269] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 189.494155][ T6227] 8021q: adding VLAN 0 to HW filter on device team0 [ 189.546871][ T5180] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.554172][ T5180] bridge0: port 1(bridge_slave_0) entered forwarding state [ 189.649999][ T4875] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.657369][ T4875] bridge0: port 2(bridge_slave_1) entered forwarding state [ 189.860318][ T6134] veth0_vlan: entered promiscuous mode [ 190.042572][ T6134] veth1_vlan: entered promiscuous mode [ 190.137828][ T25] cdc_ncm 2-1:1.0: bind() failure [ 190.159025][ T25] cdc_ncm 2-1:1.1: probe with driver cdc_ncm failed with error -71 [ 190.170589][ T25] cdc_mbim 2-1:1.1: probe with driver cdc_mbim failed with error -71 [ 190.193612][ T25] usbtest 2-1:1.1: probe with driver usbtest failed with error -71 [ 190.234248][ T25] usb 2-1: USB disconnect, device number 10 [ 190.292600][ T6438] overlayfs: missing 'workdir' [ 190.303905][ T6202] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 190.423151][ T6440] loop1: detected capacity change from 0 to 2048 [ 190.440880][ T6440] EXT4-fs: Ignoring removed orlov option [ 190.464774][ T6269] 8021q: adding VLAN 0 to HW filter on device bond0 [ 190.499058][ T6440] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 190.527874][ T6134] veth0_macvtap: entered promiscuous mode [ 190.580846][ T6269] 8021q: adding VLAN 0 to HW filter on device team0 [ 190.638805][ T6134] veth1_macvtap: entered promiscuous mode [ 190.699415][ T5153] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.706691][ T5153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 190.794297][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.801575][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 190.863242][ T6202] veth0_vlan: entered promiscuous mode [ 190.900468][ T6134] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 190.927658][ T6134] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.949990][ T6134] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 190.993076][ T6134] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.013502][ T6134] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.034858][ T6134] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 191.044265][ T6202] veth1_vlan: entered promiscuous mode [ 191.089165][ T6227] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 191.124557][ T6134] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.142922][ T6134] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.160123][ T6134] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.179192][ T6134] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.258037][ T6448] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 191.298250][ T6448] EXT4-fs (loop1): Remounting filesystem read-only [ 191.527863][ T6202] veth0_macvtap: entered promiscuous mode [ 191.611692][ T6202] veth1_macvtap: entered promiscuous mode [ 191.676853][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.712477][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.782437][ T6227] veth0_vlan: entered promiscuous mode [ 191.867382][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.875678][ T5396] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.897302][ T6227] veth1_vlan: entered promiscuous mode [ 191.906318][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.916639][ T6202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.927773][ T6202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.938991][ T6202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.949975][ T6202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.962870][ T6202] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 191.990459][ T6202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.009644][ T6202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.021104][ T6202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.032315][ T6202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.049915][ T6202] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 192.134944][ T6202] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.161779][ T6202] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.180551][ T6202] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.189913][ T6202] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.275966][ T6269] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 192.347009][ T6227] veth0_macvtap: entered promiscuous mode [ 192.419686][ T6227] veth1_macvtap: entered promiscuous mode [ 192.462210][ T9] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 192.504888][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.526602][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.628122][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.636417][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.655747][ T6269] veth0_vlan: entered promiscuous mode [ 192.663246][ T9] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 192.679297][ T6227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.680864][ T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 192.702157][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.710279][ T9] usb 5-1: Product: syz [ 192.711070][ T6227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.716759][ T9] usb 5-1: Manufacturer: syz [ 192.738291][ T6227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.739686][ T9] usb 5-1: SerialNumber: syz [ 192.749004][ T6227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.777707][ T6227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.788545][ T6227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.807663][ T6227] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 192.846369][ T6227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.889387][ T6227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.909752][ T6227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.940988][ T6227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.956432][ T6227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.977112][ T6227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.989114][ T9] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 192.991233][ T6227] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 193.035530][ T6227] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.052234][ T6227] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.063612][ T6227] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.078718][ T6227] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.108464][ T6269] veth1_vlan: entered promiscuous mode [ 193.206572][ T6481] loop4: detected capacity change from 0 to 128 [ 193.239252][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 193.239272][ T29] audit: type=1326 audit(1719498291.260:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6488 comm="syz.3.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8840975ae9 code=0x7ffc0000 [ 193.253287][ T6489] loop3: detected capacity change from 0 to 256 [ 193.279994][ T29] audit: type=1326 audit(1719498291.260:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6488 comm="syz.3.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f8840975ae9 code=0x7ffc0000 [ 193.305698][ T6489] udf: Unknown parameter '01777777777777777777777' [ 193.317008][ T29] audit: type=1326 audit(1719498291.260:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6488 comm="syz.3.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8840975ae9 code=0x7ffc0000 [ 193.355018][ T29] audit: type=1326 audit(1719498291.260:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6488 comm="syz.3.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8840975ae9 code=0x7ffc0000 [ 193.399917][ T29] audit: type=1326 audit(1719498291.260:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6488 comm="syz.3.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f8840975ae9 code=0x7ffc0000 [ 193.443071][ T29] audit: type=1326 audit(1719498291.260:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6488 comm="syz.3.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8840975ae9 code=0x7ffc0000 [ 193.505616][ T5151] usb 5-1: USB disconnect, device number 7 [ 193.552478][ T29] audit: type=1326 audit(1719498291.260:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6488 comm="syz.3.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8840975ae9 code=0x7ffc0000 [ 193.578616][ T29] audit: type=1326 audit(1719498291.260:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6488 comm="syz.3.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8840974550 code=0x7ffc0000 [ 193.653557][ T29] audit: type=1326 audit(1719498291.260:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6488 comm="syz.3.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f8840977277 code=0x7ffc0000 [ 193.719071][ T29] audit: type=1326 audit(1719498291.260:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6488 comm="syz.3.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8840975ae9 code=0x7ffc0000 [ 193.747205][ T6269] veth0_macvtap: entered promiscuous mode [ 193.787613][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 193.811478][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 193.905411][ T6269] veth1_macvtap: entered promiscuous mode [ 193.934601][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 193.948361][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 193.988124][ T6269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.031945][ T6269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.071142][ T6269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.093173][ T6269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.120098][ T6269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.143313][ T6269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.171132][ T6269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.191533][ T6269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.213228][ T6269] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 194.338267][ T6269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 194.407482][ T6269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.433221][ T6269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 194.463543][ T6269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.491991][ T6269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 194.518057][ T1244] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.528910][ T1244] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.571227][ T6269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.603988][ T6269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 194.649729][ T6269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.682361][ T6269] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 194.739185][ T6269] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.786119][ T6502] loop4: detected capacity change from 0 to 512 [ 194.813030][ T6502] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 194.816466][ T6269] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.857324][ T6502] EXT4-fs (loop4): 1 truncate cleaned up [ 194.876896][ T6269] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.889554][ T6502] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 194.962413][ T6269] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.494779][ T6491] loop0: detected capacity change from 0 to 32768 [ 195.526017][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 195.537956][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 195.671334][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 195.679210][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 196.006908][ T6512] kcapi: manufacturer command 12 unknown. [ 196.095035][ T6134] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.206466][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.371492][ T5180] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 196.426663][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.581357][ T5180] usb 3-1: Using ep0 maxpacket: 32 [ 196.588832][ T5180] usb 3-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 196.599191][ T6518] syzkaller0: entered promiscuous mode [ 196.609032][ T6518] syzkaller0: entered allmulticast mode [ 196.611376][ T5180] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.658620][ T5180] usb 3-1: config 0 descriptor?? [ 196.670551][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.692714][ T5180] gspca_main: sq930x-2.14.0 probing 041e:403c [ 196.723619][ T5151] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 196.922289][ T5151] usb 1-1: Using ep0 maxpacket: 32 [ 196.930034][ T5109] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 196.951857][ T5151] usb 1-1: config 1 interface 0 altsetting 8 bulk endpoint 0x82 has invalid maxpacket 32 [ 196.963090][ T5109] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 196.965898][ T5151] usb 1-1: config 1 interface 0 altsetting 8 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 196.983700][ T5109] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 197.011669][ T5109] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 197.012128][ T5151] usb 1-1: config 1 interface 0 has no altsetting 0 [ 197.034495][ T5109] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 197.042119][ T5151] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 197.051189][ T5109] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 197.067809][ T5151] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.100751][ T5151] usb 1-1: Product: 㖷絩嬼埀ꯤꠣ璉䭪ꕂ鋀宂넻痎ጆ訄䨮䉓罴˙䒰⍇ᛆ袾䁚៸뚎餍譤὘ߒ흌哽ㅪ׉⢿賎螊⢣忞웉⦸ࠟ⊝穫⇊䊧䫁灪ᲃ᧦ⷮ噒遽 [ 197.134059][ T6526] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 197.149101][ T5151] usb 1-1: Manufacturer: ｖ鲆땀훯Ṽ酠饴໪嚦蒉혺莛번噸蔍핰裨ཁឌ즋蠹娦좀ﮫ澁喥௯붨錒詸㤸￾ᴈӸꮺ뀳돣쁻ᆯ㳨얘埦䊒੎鯩図怙츎礄⧳ﭺ✔꺳ꈑᾣ昇렳毧ၚ쬜ٞ懃썇ˢㄫታ [ 197.173690][ T6526] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 197.235175][ T5151] usb 1-1: SerialNumber: ш [ 197.247118][ T5180] gspca_sq930x: reg_r 001f failed -110 [ 197.253117][ T5180] sq930x 3-1:0.0: probe with driver sq930x failed with error -110 [ 197.253130][ T6519] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 197.277900][ T6519] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 197.585369][ T5151] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 197.603193][ T5151] usb 1-1: USB disconnect, device number 12 [ 199.162359][ T5109] Bluetooth: hci3: command tx timeout [ 199.524562][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.708527][ T5151] usb 3-1: USB disconnect, device number 9 [ 199.941755][ T6550] loop0: detected capacity change from 0 to 512 [ 199.997961][ T6550] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 200.064006][ T12] bridge_slave_1: left allmulticast mode [ 200.069700][ T12] bridge_slave_1: left promiscuous mode [ 200.076183][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.093504][ T12] bridge_slave_0: left allmulticast mode [ 200.101895][ T12] bridge_slave_0: left promiscuous mode [ 200.107625][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.254471][ T6227] BUG: unable to handle page fault for address: ffffffffffffffeb [ 200.254491][ T6227] #PF: supervisor read access in kernel mode [ 200.254502][ T6227] #PF: error_code(0x0000) - not-present page [ 200.254520][ T6227] PGD e136067 P4D e136067 PUD e138067 PMD 0 [ 200.254552][ T6227] Oops: Oops: 0000 [#1] PREEMPT SMP KASAN PTI [ 200.254572][ T6227] CPU: 0 UID: 0 PID: 6227 Comm: syz-executor Not tainted 6.10.0-rc5-next-20240624-syzkaller #0 [ 200.254596][ T6227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 200.254608][ T6227] RIP: 0010:__brelse+0x38/0xa0 [ 200.254635][ T6227] Code: 48 83 c3 60 48 89 df be 04 00 00 00 e8 a1 e9 dc ff 48 89 d8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 0f b6 04 08 84 c0 75 44 <8b> 2b 31 ff 89 ee e8 0d 49 76 ff 85 ed 74 17 e8 c4 44 76 ff 48 89 [ 200.254653][ T6227] RSP: 0018:ffffc90004957c68 EFLAGS: 00010246 [ 200.254670][ T6227] RAX: 0000000000000000 RBX: ffffffffffffffeb RCX: dffffc0000000000 [ 200.254686][ T6227] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffffffffffffffeb [ 200.254699][ T6227] RBP: 0000000000000008 R08: ffffffffffffffee R09: 1ffffffffffffffd [ 200.254715][ T6227] R10: dffffc0000000000 R11: fffffbfffffffffe R12: 0000000000000008 [ 200.254729][ T6227] R13: ffff88802934e340 R14: 0000000000000000 R15: dffffc0000000000 [ 200.254743][ T6227] FS: 0000555584935500(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000 [ 200.254762][ T6227] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 200.254776][ T6227] CR2: ffffffffffffffeb CR3: 0000000069158000 CR4: 00000000003506f0 [ 200.254813][ T6227] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 200.254827][ T6227] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 200.254841][ T6227] Call Trace: [ 200.254849][ T6227] [ 200.254857][ T6227] ? __die_body+0x88/0xe0 [ 200.254890][ T6227] ? page_fault_oops+0x8e4/0xcc0 [ 200.254922][ T6227] ? __pfx_page_fault_oops+0x10/0x10 [ 200.254947][ T6227] ? is_prefetch+0x4ed/0x780 [ 200.254972][ T6227] ? schedule+0x90/0x320 [ 200.254999][ T6227] ? schedule+0x90/0x320 [ 200.255023][ T6227] ? schedule+0x155/0x320 [ 200.255049][ T6227] ? __pfx_is_prefetch+0x10/0x10 [ 200.255081][ T6227] ? __bad_area_nosemaphore+0x118/0x770 [ 200.255105][ T6227] ? __pfx_bit_wait_io+0x10/0x10 [ 200.255139][ T6227] ? __pfx_bit_wait_io+0x10/0x10 [ 200.255168][ T6227] ? __pfx___bad_area_nosemaphore+0x10/0x10 [ 200.255194][ T6227] ? spurious_kernel_fault+0x11e/0x5d0 [ 200.255236][ T6227] ? exc_page_fault+0x5c8/0x8c0 [ 200.255270][ T6227] ? asm_exc_page_fault+0x26/0x30 [ 200.255301][ T6227] ? __brelse+0x38/0xa0 [ 200.255322][ T6227] ? __brelse+0x1f/0xa0 [ 200.255360][ T6227] udf_sb_free_partitions+0x1d5/0x540 [ 200.255391][ T6227] udf_put_super+0x113/0x160 [ 200.255415][ T6227] ? __pfx_udf_put_super+0x10/0x10 [ 200.255453][ T6227] generic_shutdown_super+0x136/0x2d0 [ 200.255478][ T6227] kill_block_super+0x44/0x90 [ 200.255503][ T6227] deactivate_locked_super+0xc4/0x130 [ 200.255533][ T6227] cleanup_mnt+0x41f/0x4b0 [ 200.255564][ T6227] ? lockdep_hardirqs_on+0x99/0x150 [ 200.255596][ T6227] task_work_run+0x24f/0x310 [ 200.255631][ T6227] ? __pfx_task_work_run+0x10/0x10 [ 200.255662][ T6227] ? __x64_sys_umount+0x123/0x170 [ 200.255686][ T6227] ? syscall_exit_to_user_mode+0xa3/0x370 [ 200.255708][ T6227] syscall_exit_to_user_mode+0x168/0x370 [ 200.255731][ T6227] do_syscall_64+0x100/0x230 [ 200.255753][ T6227] ? clear_bhb_loop+0x35/0x90 [ 200.255780][ T6227] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.255810][ T6227] RIP: 0033:0x7f9905376e17 [ 200.255827][ T6227] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 200.255845][ T6227] RSP: 002b:00007fffc00f7788 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 200.255866][ T6227] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f9905376e17 [ 200.255879][ T6227] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffc00f7840 [ 200.255893][ T6227] RBP: 00007fffc00f7840 R08: 0000000000000000 R09: 0000000000000000 [ 200.255906][ T6227] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fffc00f88f0 [ 200.255920][ T6227] R13: 00007f99053e364a R14: 0000000000030cb0 R15: 00007fffc00f8930 [ 200.255943][ T6227] [ 200.255951][ T6227] Modules linked in: [ 200.255970][ T6227] CR2: ffffffffffffffeb [ 200.255984][ T6227] ---[ end trace 0000000000000000 ]--- [ 200.675083][ T6227] RIP: 0010:__brelse+0x38/0xa0 [ 200.679869][ T6227] Code: 48 83 c3 60 48 89 df be 04 00 00 00 e8 a1 e9 dc ff 48 89 d8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 0f b6 04 08 84 c0 75 44 <8b> 2b 31 ff 89 ee e8 0d 49 76 ff 85 ed 74 17 e8 c4 44 76 ff 48 89 [ 200.699493][ T6227] RSP: 0018:ffffc90004957c68 EFLAGS: 00010246 [ 200.705567][ T6227] RAX: 0000000000000000 RBX: ffffffffffffffeb RCX: dffffc0000000000 [ 200.713548][ T6227] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffffffffffffffeb [ 200.721529][ T6227] RBP: 0000000000000008 R08: ffffffffffffffee R09: 1ffffffffffffffd [ 200.729503][ T6227] R10: dffffc0000000000 R11: fffffbfffffffffe R12: 0000000000000008 [ 200.737486][ T6227] R13: ffff88802934e340 R14: 0000000000000000 R15: dffffc0000000000 [ 200.745488][ T6227] FS: 0000555584935500(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000 [ 200.754526][ T6227] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 200.761210][ T6227] CR2: ffffffffffffffeb CR3: 0000000069158000 CR4: 00000000003506f0 [ 200.769220][ T6227] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 200.777287][ T6227] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 200.785266][ T6227] Kernel panic - not syncing: Fatal exception [ 200.791588][ T6227] Kernel Offset: disabled [ 200.795908][ T6227] Rebooting in 86400 seconds..