last executing test programs: 3.938178564s ago: executing program 4 (id=1131): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'bond_slave_0\x00', &(0x7f00000004c0)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2}}) close_range(r1, 0xffffffffffffffff, 0x0) 3.847892091s ago: executing program 4 (id=1132): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text64={0x40, &(0x7f0000000a00)="3e0fedc048b818000000000000000f23d80f21f835000000900f23f866b80f000f00d8f245db5587400f190430c461be5ca9769600000f01f866ba400066b8000066ef642ef2f22e2edf8700000000c4437d5d3633", 0x55}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x8, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.720940502s ago: executing program 4 (id=1134): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) close(r0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x30004081) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r3, r2, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg(r1, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f00000001c0)=""/34, 0x22}], 0x1}, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000480)={r4, &(0x7f0000000440)}, 0x20) 3.529805788s ago: executing program 2 (id=1139): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha20-simd,anubis-generic,nhpoly1305-sse2)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_EEE_SET(r2, &(0x7f0000008800)={0x0, 0x0, &(0x7f0000004440)={&(0x7f0000008740)=ANY=[], 0xa8}}, 0x0) recvmmsg(r2, &(0x7f0000002fc0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)=""/74, 0x4a}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000740)=""/82, 0x52}, {&(0x7f0000000800)=""/114, 0x72}], 0x2}}], 0x2, 0x40, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000e00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb0120180000000000b500000000000000020000000082c7ca26d52b361b84afe7e20c51d988745bc37123c9e80feb8f5dcf6819b13c247e7f2627a4d8ae"], 0x0, 0x1a}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xafac}, 0x90) sendmsg$GTP_CMD_GETPDP(r2, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0xc0020040}, 0x7, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) write$tun(0xffffffffffffffff, &(0x7f0000000d40)={@val={0x58}, @void, @eth={@multicast, @empty, @val={@void, {0x8864}}, {@canfd={0xd, {{0x2, 0x1, 0x1}, 0xe, 0x1, 0x0, 0x0, "ae206f513094d43e68d8cc29fa930ee1899c868ab725dc9d31e788954fbe43f1a985b6b35fb83166d12a44e861f69a82c44bb4ccd2fe55d6af2b8157df93084e"}}}}}, 0x5e) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x9, 0x42, 0x40, 0x42}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000140), 0x1003, r4, 0x0, 0xd88d02a0}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r4, &(0x7f0000000100), 0x0}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=@bloom_filter={0x1e, 0xb17, 0x5d, 0xa567, 0x800, r4, 0x101, '\x00', 0x0, r3, 0x5, 0x2, 0x1, 0x1}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.swap.events\x00', 0x275a, 0x0) mmap(&(0x7f00006b6000/0x1000)=nil, 0x1000, 0x2, 0x28011, r10, 0x0) write$binfmt_misc(r8, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r7, 0x0, r9, 0x0, 0x7fff, 0x0) vmsplice(r7, &(0x7f0000000100)=[{&(0x7f0000000080)="86", 0x1}], 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='ext4_allocate_inode\x00', r6}, 0x10) sendmsg$qrtr(r2, &(0x7f00000007c0)={&(0x7f00000003c0)={0x2a, 0x0, 0x4000}, 0xc, &(0x7f0000000b40)=[{&(0x7f0000000580)="5091ca9b4e135dd217eddd9b91d2f9d31972657db84232d5b96acf2130ccf30f4a271fbab3b5e87dc6145e691c9ac3a3b6553e3cf9d506abba5866f7e3f04a5622876141b2cce5bc03730a407040ed9170567bb2e3dec9c59347a18843e1933429934a2a3c0077fb4df8954cb04fcd509d691e91ba5aa27cc954ee1c1062381cccd8924d4fb8ad88469113a3a93d8c42044df794bde9d8b38c6b31e7ebad2fc10f9ade17798bc8dacc5607bf04fb7d72fc8ccbf0b354130c26b7052beb55ef6894020bbd7ad5599cb2afda1e77c88c5762d3a5b377156c16e26329356fd4febac84795174f80665cfeac7a7f6a", 0xed}, {&(0x7f0000000400)="6c9862371d993287171bfcd1ee7691b73829f5de525a0ef9156fc7124e7259733e589c1f892fb08f982a8c901f7fecde11ed6b136ba02ee0cef04d9c9d5acd932bdd2ed2531bd4275f3c445bec4e5fc1f542e8c86e6eb1c575e90faa6421c181fac4e2ec4cd2c516ced619ae4616be79a136aa1e65ad96f7e780a31a9c0df882e8e53c4b95f2e5b548cf1500460c2d6837db67dc025aae1b40dabeff854df9a00646f917b4ac3b06379bd021e8b7dc4fa673b432a7fa", 0xb6}, {&(0x7f00000008c0)="67a8d5247b8db930441feae1e94cf2b6bebf8d543be3f79f0b3812b7008855bc2451e6b82761d62e3d4a5fa8082e2901ee7b9d36a92d25480c5d1c6f122bf7509a148f03a1ea9b36bba9a0bbd1ca6c5d5c1ceb5b85b89dd9bb0bd7c3e694eca9190193cb2a4ce3bd4c95aaddb66caf9b7ecf5c68e4e18d52f63773248f077d19355838752d5ab18c72f5f098467d563b04c8b9538825c6ef02f885aa9c2b41c777d47025932cc9545aa881b390d1f14220fda03e2e0e1212c5603000aaa4dc03ac71ab813fe9d8eb06b3626197824f61b6a2d4e68f1d42a907a0ef017d70abc9a739319b09afe4bd761861b209", 0xed}, {&(0x7f0000000680)="a6d1a2f0cfa41b276787ace39a693e7941dc4161d5494ca52226981171bf83288ef0ebb6b7afb64c7a6e5cea58e59aea4b0a70dd218b8161bd9cf36d5a7d52aaab416149f1432daec08a9a17569075ba149225dac2eb317340a11b0547c5b8638282ff3c3263f93614d3232b84ac96c2651b20", 0x73}, {&(0x7f0000000a40)="b429a5abbf2bd7f2bba3ae44ede8bb92e1e5c909107f37531e5e759d4624f43b4460f8a9af8990a5eae1436ac70c74e822f8228a4570fea37b03b68433a92d3f925e5139161fdd23425cc349c2e6b74a64f34939fbdcc28ae6610a324b1297a24c6bafe4e960b03a3d07903c912a6d1efbc6571a1e038f78503fae52402eb4234920d7d9f30bd6a4d0e80e03257ffbcba526a63e87cf63ce7b51825036c3b2509ee00954d47ea8b0381493f02257204eea8250408c45a768a704cca98cf9af39979c88c6034fd00d2e69ff4c517c0a89c35cc99a9f4d1b75bd2c68abc6ae42914974a8d83f46535cc8118a357adcb61192a528734815f528", 0xf8}, {&(0x7f0000000700)="57a67bcaeb933d55ffb40d", 0xb}, {&(0x7f0000000e40)="5482f2705bcad098bf62b862bfb42dafe0f495fd144991c11e3028b218ae60540cd912d3ef521a8450be1518c1b488f685f5d26e69f70f1fdea2c245163b6b00d81fa2dfb962cb194d6a29fdfdb4c9cc5b5e5615ed329b08b089f417b14871256530669b30f424f443a2220979672e537260c8b2bf841eab6ebb47b26581e6b4540868a5c9547a134b195d848f36176b48bc7e29b8abc52000cf28f218a055119b4f238f64d2c46263403a547e2385b3e4863e726241f93af136b3a124c8f7c95da7a18f1c16f1e39e3c78c780c07cd6d6a230e85a2cee4739752a4ca85384e864fe0a9b96535eb9b1fb54bbd9b091d50aedcb974f2503b7b4ccc084b9d57951410ff70d5d2a81380eacb2ea0cf31261ae5ff3cf91e74c31555c5525bd3d07d75b2156deee58774082a8ca4008a9241b689ffeed96db848dc4f1d91b60876ceb7807f50fa0ccf04533b1c6eecac2d12e65f43f88b8b217f5bef82954d4f06f6d7ba04b3fd0801481d1ba99734e0467cf9b02768b906c3885eded51ab9a1f510f96dd28d526a7a717cdf800b7b108fde96ad83b11d308e6d965852f7d61b379742f917f65e0030fb96939ca04b5a287b61bce9a3526061f3011482a9a05b8608c43211869df803cbf910b55b7319c183778b0e7d044405f12bb772f839d259064e4d9c8b0e325d215ed78fcf9af77cfd56bb534ce4de7f23fc306cfd2648ae8a668fb1023b89e108507f559062c217c7d1eea9cf0bc97c21dc1d4af01ba19217c60fbb06fda1baba9faeffca34133fa334006e8052180a2ebe85ae81193647235a69e19dba4a86d2ab53739ef10893a8cf7cfad70d98c5f2e9b3365d366412526b058649b53884ad757775be909029f4f61109d6089624232b1fa6cb221af5974a9aed666ddaaf08944020613602216d605694b91cc36c686ba8f3e17f31c09d5080cb8f5749e2134438e832d312a80d5d286a76d987c0bc0425d507b4c26c8ece68169cb2a4bfb62d33451a401330bd3ed0cd3d7eefe2baa7bd9bebb3818516d3fe056b024be53ab2b19fbbfbab591d8216302805ba845d2e4156b149a04886a248e4499a012495680fd5b4ef5e93ecd2da76e7264b1d802bcbb977dce23ead924c07ab806ae7a6059399b30c136f0f71f91e30b9cc963e51e253ba5f7c51c5f324aa17f58803954e73c16c1c1253a7d2272366801a75f22f676bbf2c489db7b9ceedd0a9a5ac56eda4d1d72c679a2d485a428f6839fbaa033ad9c192610d9fb71b8ef8cb900a2c4da7b3a755b45cac113a89b6d416238b47a1e1d679acd0d8fddfb79ec5ebd7bfa37807e08dac44a6fc9489570a78b94e02d6de3581da198fb751ec578eeacfddc7adbd19f80b3f663ee5d0df93762d1e95025dfebc45343a2b015e2fa7e9516f8a27c916fc43501bc457bf229b80b97b8315b965d723429c06aa1c8e3836b61af0cae1a20b721bba338bfc46aa0bf425b9eab976006567682ef45114ef3a0716a0e1272c91ae65a638a0c90bef866c135d889bd3955529bd5d1e741c6316edf515d1b1eeb1cc69b87146718ef664abffc5ab60f7a4baacba2793295ee06122d67174f7ce7144007f96638df9aa25d7786428a4ed78be7f602cf361303122e48b5903051de4c21431a015abd100c5bec8b1fc38cced9ce7b71602c843f15af8ceeecb40d2ef0d459055f8b6b5378bdec172e9d53e54900eafbc82de4e9f9f162ec578956ec5abdf1fa0c137f4fda30deafd6e78df34ed9279f11c5c4eba427ec15eb5738400eda2a490cfba7af30451bd088e093848bcd0a09c8fe7066c8da40db47b488c888f309fc47120f605f8e2ba30d5d2a67477f0ea125a28aefb69c22168ff04f98941229638ec31cff4c1f4bec43cccdaae16b549a43e0bcb57d4c12ed4fd44878eee72bbc38d3689d6f7740c467c930b9efa531c0165800b901b0a040f9b60405648a77f84ae7a4f9a0df14e922afcd4b0bfe192cbae1f0e6491cbdd0bfdeba100e7cdf1593b241b0cd751367daccd548a368807664a3d9159145b0d3c735844ef3134b9de3969585e775d18364a7a7d1b8cb50f6f33d9506ad3e2bc7644b101a5eebd4709ff1246788b3919699f4a27dfc34b862b2fc9f384f7df4b92a115ce939199b3b48ad32054ddddc663409bed30d1c6a084486e7056dac40535107e96e48d63dd3525e6e17f15cba6d482a0da66920ef7e1a0d8afd0c5d6ba67fdffcab1a3de3fdff339bc2518785723b6fdc13ecd8b5da7971bd9b946318ee68d43b91dfe2279915350a75c114054348e531bbac18a8955e00b7ec09d0274d7281eae7dbab49697fdbc3a178440b3feb90170b5cda0c663e5b35989a114922fb9478e7326561a3384aa0e94c0b52965a7d171062a951b1fdd579731eacc77182f8b7f20f3ef094dd7d92406050420b8ad7afd0f8bfb6c5d078859b9714dde8d3e18fbb11bfc5b62ed2d8386325c46e51b3239b0155eea3a6b2f43696d16822c6ebd2ef9e404ebabd6f0cac943c08147cb7df35b8b48afb67cced48b4dacbc81b4137afa76721c993afd960c359c36ef0a4ec336e33d1060136476809544911f69e1667635a1afc91995c652deb0c428d0dd24b8442ddf4c2c31e40e93d9d71c973afeaee1622c2d62020eee0af33a0cffc58c75feaecf097869cd25001f04cf8d1adb9aeb514efa86d61167b357434aa9de83167e94c6f0c0acb793d9a5a9b2f3a29ab1d853d9a2a5a5a81b7e6fe8deec83f595386ffa584f5001d355ef8a26ba2f506f88e6689856672e8ea5f702e3bb3b2a79840fe07edde3694f000903bc18fdc145a70b801ac7572267bacfe0097a12d9aba2beb80981fb9215521f6844c0cc43218e16b8255e863c1aca93942ee9c3475571eb6b35d97859ef2440fd0490106d34904516e92fc52d4be855e3070c213ef7bf75d150629b6879fef2128ba00be4b1e42a370f7259ed01b9beae205991b139c1cbdccf831d2ace322a43753e9f70c651f7d25a2f5c96c1dc6a4d17a8847bd07581e6648bd258d9b210384a7b86ba19e9cbd3e4f069d8e2f0a6e3877057816da9e342ffd326a6e74e6dbf414a748036e4ae64ca2a7cc1d01c30d950a0b4e1584d360b70ce7f5efe4cfd467612a591e3c7b2015db8e6bc1323aa241879c5ea11ea024c48a3c527bb911ace3af259a8d52e1aa7ee3b17fafd8fb3f7bccd89a38ee66d7f65de10d0d37c4cef99410885f001ccf24ca3808052ca8b75001641d27db69936957cf5b816e731bbb3ba58f43b447b39331efd7e5ee344f99a7f9d1fe9200c922e71898eae99b6e3112ff7d24af41ae8ce7de6119ac635d73dcde9cc0a00de54a23eb5c34a284bdb1cdd888ba53ebd67a3c05dd66e8eb3621ef331fafc0ef1be5f2903d7d46e88ec013b137ee252821b116211ee8e75e8ff42994ebd9d46fa3bf75976fa7e2781c65d78d6ddc71f49ac5c85997975980296901e6f2cd464c3fa910c0e7b65a9e34d709baf63c2ca69536d72cd5d69e1870a364baf2b908286cb89b7761bbc222879a1335560d563390cc32ec53cdb12e465781985601769f51b689ae2abd4a33976fb6f584b8be2c010150b763c4f43651bdc2d36adce6ffc1531acb553e64254a23f3f66b15b542f318cfcab745e1dea1566eee4d2884b24fa1726884c7e67f6f1029840d2c6f4a0175975a3e1396e79b06d23f9a38509ac146aba100b63ba3e7aa7fa010b4a20b8f3b3286ad08dedbc7ab4e014de0d9099e3311c2a3cfabf7bc7f22f50669b3125eaee24465fc03a419fe8226a1b2e6833d28dbcca9bdd708874af5e8df0a1c78e09ae513678b43cd5b22fff3a109f82ec192f79a057ab9feb77c53f8f257edc471e19ed92c047cff70af5f5078fd954a0ddef4fdba70f7a19d185ccf5b9055c667bbbf390591c6315afe9f8b4c30ab8a628dfe9c5ac7b48c225afec99cc54b5debf35e55cb2c8057c8a27b050b088c1ee30de946a64893c99db3e81cf2a65806149ce2858c87790666d1bf51978ab5d9077e55214671578dc1517b097b9f0a2f313252f1175cc326fb3ce8c4bdfb9347405e57a46776d864e130175b9f9a541fbf8b7eb4a62d5ef3f3e90f9dc8ec1e3575e70a8e081b7cf9970351dd4501288c9dd023e9a79204fa916479f4f498697d3445c67a2e4e9772d62cfe004a50f3940f25073ce65521357b642891a8801702c3048642480a0f007e29fa88adf4f5cfa8fd97d501ed66f01fa7af73a8b34708a96472dc5773ed0abf8361973f9d26b7fc230012e5a1cf8795c6ac48a93000f886dc522ee0e80ae397318c0c67bd2545502ae79634b447ddf62341f197e2128a06fcb4460b26cbb42fd25c714137af2155ba3abf1c4561036d026ddad5fbcfc4bfb01443414faa00a07907165eeebd46a5396aa8eff79f9de542ead20bf23e5be6bae07dae61905b95b2326c7c7b2894489116ba685cad2a22a4048138859a1573d957d4f20b52a816e7df7ab37d2f114e44b2c2d4e9fa1d5006f19e06c9b4772d0f38a7b18e11740bbae8862063e36bf2cb9f058ec4363378a96b98389bebb4dbbbc607f321f809dffb0439464b8ca73ef68b334a26e5d7accc2b486886fe9303babf3aa5ace5236f419cb5dc5bc5a5b78ba8d7d85a18070942a9024a252063dfd7f0a9d0bdaa57d18aaf8b52c5a8e1936cf0bab923b5660596242d1660ece6d848c5ec11eeb2ff5a491c344984a6836ca5d5e04b88263b638f23d56fd782bcff49b8f53013e7fe1bc9d1c86b2bc237807ee919d5078004fe400453470a791fd3a4d5c56fa384c1f8e30c869857502a4e440faba92fb959fd10b73d75089a0ba232d7bd02fc254ade0ac0f728908cafb2555fe35c6c11b87ad63877046957368fa366f8332b77bb6fcc0f6d3e10f9e5aa8001500475b40db0f47fa582b4aa24ca496f077c672917638f050b328dbbaa405a6f6d355214ecf2ee99cc266581018f4984934fc6207ddafeaa714990139b6426a467cca9a77787e835904e46d9faeb7e06d72670cdef330743f4523dba2f89e714d6fef1f226bbfa1c570b6ac86ce519ae38c4c924348f001fd2210b2f95e46f1ec7da78ded2a609bcc4e7918c50e7de822c543992e5bfc4266272958e7ee0ff5b9d97ff9a7dc5c7117bf96c244813d3acc902dfea18368b4c6c116c4fca49ba3a0a79b7817ae53ad5a468aae25727028a1bd274e4e92b5a82f975252aefc6ddf1f3036300924d4be496f2f7544b5fc699a032066cb23182ec9766c1affc6ffa4c55f0d3c95cfe599f1b5f7d6bdfa08afdb0b194d049bfe261fb21aa49f3b5e004d86329924bbb67113d91cda32f84972f627887fb2ad3d2694c4a5576cf45410b587d49e47183cc9db03bfe0841ab9cce55f5de1db332706f56f431b1cbc58a83959c5ca345989f9f7c903ef296eb4fef07f8f7fbd222c03463a397110662714df95faaa0d101bb4887581f9f324fa3aac374c09b4e1443bf9920ad3744dc90b65b876c409b2868c7708893f96e56d1a92c5b41576c0874536441a24eb7b4048d66edb845f0af5bb862ccfd5328120fa74bf82cb7dbc4026e1f280f2e4efcfce3d6a3f8af48784f2ff1d0f7e22a397ed22107ea621b5b1f1450c1b52ed5ca48e06ea8b30b6bf236d633a1dfe082a045bfbcf97595c2400bdf3872afa8b923af36a6e06beecd5a7720d704bcb6eb258d9d06d4887470567c5f39cd1e7c5585e37b8bce8a3f75000c4a6db5a18b0673ab3a3f84f405533d9339dbc034e4b2c1adecd3caaaebcea8b116f10a9f567b1535", 0x1000}], 0x7, 0x0, 0x0, 0xc000}, 0x38) 3.457096343s ago: executing program 4 (id=1140): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f00000000c0)="eb", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYBLOB="99"], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000140)={0x0, 0xd88, 0x1, "b6"}, 0x9) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x18, &(0x7f0000000100), 0x8) 3.405688958s ago: executing program 4 (id=1141): openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000080)='./file2\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='alloc_mode=default,resgid=', @ANYRESHEX=0x0, @ANYBLOB=',background_gc=off,resgid=', @ANYRESHEX=0x0, @ANYBLOB='\x00\b'], 0x1, 0x5501, &(0x7f0000005880)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x23, 0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) creat(&(0x7f0000000240)='./bus\x00', 0x1a) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) sendfile(r7, r6, 0x0, 0x3ffff) 3.171988257s ago: executing program 0 (id=1145): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff) syz_mount_image$hfs(&(0x7f0000000100), &(0x7f0000000900)='./file1\x00', 0x200010, &(0x7f0000000a80)=ANY=[@ANYBLOB="747970653d704351852c636f6465706167653d63703836332c00000000746f723db84f842468f8c5568bcf21a304fee0a339572c6469725f756d61736b3d30303030303030313030303030303030303030303030313000"], 0x1, 0x2e4, &(0x7f0000000200)="$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") mkdir(&(0x7f0000000380)='./file0\x00', 0x0) r1 = syz_mount_image$udf(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x1004000, &(0x7f0000000140)=ANY=[@ANYBLOB="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", @ANYBLOB="006d49eded00bb5ed8ce77cb41f9eb4f3ebb4ed2e1680579239feeb8965e672e39c4f1af9e67cb616ce2b0824616c3cbb25cd8bee0886be4bc73b08e0d8d5feed940e0d7ae2828863c6cd6b52fcfafdc96c81a6ebf2f3ac17f8876ba760489ae195aa6377daf6c977bd35e4a21ed9bf47486e95690b0b4be2721b0dd7de94dd9e37633a15fbd8bba48c53338fe77a410e8e561d6179833f0b1d504d8ca289b", @ANYRESHEX, @ANYRESHEX=0x0, @ANYRES32, @ANYRESOCT=r0, @ANYRES32=0x0], 0x0, 0xc2d, &(0x7f0000000540)="$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") ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r1, 0xc0086c43, 0x100000000000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r2, &(0x7f0000000180), 0x2009) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r4, 0x11, 0x1, &(0x7f0000000000), 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0xb, 0x9, 0x0, 0x1, 0x81020000}, {0x65}}, [@printk={@lld, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x2, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x15}}], {{0x4, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000100)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mkdir(0x0, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r6, &(0x7f0000000f80)=""/4096, 0x1000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r7, 0xc0c0583b, &(0x7f0000000d40)={0x0, 0x2904c, 0x7, 0x10003, '\x00', [{}, {0xffffffff}]}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001bc0)={0xffffffffffffffff, 0xe0, &(0x7f0000001ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000001900)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001940)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) 3.026831899s ago: executing program 1 (id=1146): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) unshare(0x26020480) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) unshare(0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000140)={0xe, 0x18, 0xfa00, @id_tos={0x0, r2}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000100)={0x1, 0x10, 0xfa00, {&(0x7f00000000c0), r2}}, 0x18) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="180000000714010000000007000021ef04"], 0x18}}, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.threads\x00', 0x2, 0x0) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000002280), 0x280903, 0x0) writev(r4, &(0x7f0000002300)=[{&(0x7f00000022c0)="8803a756af789b2df4f542b26d", 0xd}], 0x1) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x2, &(0x7f0000000440)=0x82, 0x49) r6 = socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = socket$inet_udp(0x2, 0x2, 0x0) close_range(r7, r9, 0x0) setsockopt$sock_int(r8, 0x1, 0x1e, &(0x7f0000000180), 0x4) getsockopt$packet_buf(r6, 0x107, 0xb, 0x0, &(0x7f0000001000)=0x300) recvmsg(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000001c0)=@hci, 0x80, &(0x7f0000000280)=[{&(0x7f0000000140)}, {&(0x7f0000000300)=""/94, 0x5e}, {&(0x7f0000000480)=""/160, 0xa0}], 0x3, &(0x7f0000000540)=""/123, 0x7b}, 0x20) setsockopt$inet_tcp_int(r5, 0x6, 0xa, &(0x7f0000000100), 0x4) setsockopt$sock_int(r5, 0x1, 0x21, &(0x7f0000000080), 0x4) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000640)='cpuacct.usage_all\x00', 0x0, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x12, &(0x7f0000000240)=0x7, 0x4) socket(0xa, 0x1, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x2002) 2.917290428s ago: executing program 1 (id=1147): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5a, &(0x7f0000000040)={@local, @random="4c5b01f560e4", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x24, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0xc2, 0x0, 0x0, 0x0, {[@mptcp=@synack={0x1e, 0x10, 0x0, 0x2, 0x56}]}}}}}}}}, 0x0) 2.720921054s ago: executing program 1 (id=1148): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) r1 = syz_open_dev$swradio(&(0x7f0000000180), 0x0, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ioctl$VIDIOC_S_TUNER(r1, 0x4054561e, &(0x7f00000001c0)={0x0, "be3ff4f2d3b71ad35cbc5ad31906b40f70ea0177f7f3f12a503b7e8e589e845a"}) write(r0, &(0x7f0000000040)="05000000010000", 0x7) 1.92542195s ago: executing program 2 (id=1149): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="a8"], 0xa8) write$FUSE_INIT(r2, &(0x7f0000000440)={0x50}, 0x50) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000640)={0x10}, 0x10) write$FUSE_BMAP(r2, &(0x7f00000000c0)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) fchmodat(0xffffffffffffff9c, 0x0, 0x0) getdents64(r3, 0x0, 0x0) 1.776972693s ago: executing program 1 (id=1151): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32=r2, @ANYBLOB="14005e8008000200000000e9070001"], 0x30}}, 0x0) 1.664509032s ago: executing program 1 (id=1153): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100003020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.588893678s ago: executing program 2 (id=1154): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) unshare(0x2a020400) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) unshare(0x44020400) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x4, &(0x7f00000001c0)=[{0x15, 0x0, 0x2}, {0x7, 0xfc, 0x7f}, {0x2}, {0x6}]}) r3 = openat$capi20(0xffffffffffffff9c, &(0x7f0000001f80), 0x0, 0x0) ioctl$CAPI_MANUFACTURER_CMD(r3, 0xc0104320, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000140)={0x2, 0x0, @local}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000180)="ba", 0x1}], 0x1}, 0x4008804) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000040)={0x2, 0x0, @dev}, 0x10, &(0x7f00000001c0)}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001880)=ANY=[@ANYBLOB="1400000010000100000000000000e700000000000a00000000000000000000010000000900010073797a300000000034000000030a00000000000000000000010000003100030073797a320000000014004788ec483b0480080002400000000008000140000000003c000000060a010400000000000000000000000008000b40000000000900010073797a30000000001400048010000180090001006d61737100000000140000001100010000000000000000"], 0xb8}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r6, 0xc0505350, &(0x7f0000000280)={{0x0, 0x41}, {0xf, 0x1b}, 0x808}) sendmsg$nl_generic(r5, 0x0, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r7, 0x107, 0xc, &(0x7f0000000080)=0x2, 0xfffffffffffffe54) setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c) r8 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$apparmor_exec(r8, &(0x7f0000000500)=ANY=[@ANYBLOB='stack : :'], 0x11) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r9, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) 1.57081338s ago: executing program 0 (id=1155): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340)={0x0, 0xa}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffff0ba}, 0x90) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x5}, @union={0x0, 0x1, 0x0, 0x5, 0x1, 0x0, [{0x0, 0x1}]}]}}, &(0x7f0000000000)=""/140, 0x42, 0x8c, 0x1}, 0x20) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89b0, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @multicast1}}}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000f00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x90) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x35, &(0x7f0000fbe000)={0x1, &(0x7f00000000c0)=[{}]}, 0x10) r3 = syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/uts\x00') r4 = dup3(r0, r3, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0) write$uinput_user_dev(r7, &(0x7f0000000200)={'syz0\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x45c) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000b00), r4) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r4, &(0x7f0000000bc0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x2c, r9, 0x62b, 0x70bd2c, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x84}, 0x4048000) r10 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r10, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r10, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendto$packet(r10, 0x0, 0x0, 0xe3edd16a85a399c5, &(0x7f00000000c0)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @link_local}, 0x14) syz_open_dev$evdev(&(0x7f0000000700), 0x3, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) 1.532903143s ago: executing program 1 (id=1156): r0 = syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000540)={0x0, [[0x223], [0xfffffffb], [0x3]], '\x00', [{}, {0x0, 0xffffffff, 0x0, 0x1}]}) r1 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_ifreq(r1, 0x89fb, &(0x7f0000000040)={'bond0\x00', @ifru_settings={0x20001100, 0x0, @fr=0x0}}) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r2 = socket(0x2a, 0x2, 0x0) read$qrtrtun(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x0, 0x0, 0x0, &(0x7f00000005c0)='syzkaller\x00'}, 0x90) socket$igmp6(0xa, 0x3, 0x2) syz_open_dev$vcsa(&(0x7f0000000380), 0x7b95b611, 0x802) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r3, 0xc02c564a, &(0x7f0000000100)={0x0, 0x32314742, 0x0, @stepwise={0x7, 0x0, 0x104, 0x800, 0x3f, 0x4}}) r4 = syz_io_uring_setup(0x4072, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f00000002c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x27}) io_uring_enter(r4, 0x567, 0x0, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, r2) pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{}], 0x1, 0x9, 0x4) r7 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="120100002eab5a40401c3405cc6d010203010902120001000000000904"], 0x0) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r7, 0x0, &(0x7f0000000280)={0x10, &(0x7f0000000080)={0x40, 0x0, 0x5, "5bce791a0d375708c7a3b38ad3f38aba761303469ce1f1fe54b9aed1f27f5c0b92d20458075f706bea61ad9474c1591a9f07c82e04675715f5994747af"}, 0x0, 0x0}) 1.464828429s ago: executing program 3 (id=1157): syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000003680)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\x00\b', 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_redir={0x87, 0x0, 0x0, '\x00', @local, @mcast2={0xe}}}}}}}, 0x0) 1.453434349s ago: executing program 3 (id=1158): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_GET_UNIQUE(r0, 0xc0106401, &(0x7f0000000140)={0xa3, &(0x7f0000000080)=""/163}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$ax25(0x3, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = syz_io_uring_setup(0x22e, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000009c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x6, 0x0, 0x0}) io_uring_enter(r4, 0x7a98, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_AGP_RELEASE(r0, 0x6431) r7 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) keyctl$read(0xb, r7, &(0x7f0000001300)=""/4096, 0xffffffffffffffd2) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 589.255061ms ago: executing program 3 (id=1159): syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) syz_clone3(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x2}, 0xa0) 588.868521ms ago: executing program 4 (id=1160): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r1, &(0x7f0000000080), 0x0}, 0x20) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, 0xffffffffffffffff, 0x0) r3 = dup(r2) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[], 0xa0}}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb702000008000000182100", @ANYRES32=r5, @ANYBLOB="0000000002000000b705000008000000850000003100000095"], &(0x7f0000000300)='GPL\x00'}, 0x90) syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000280)='./file0\x00', 0xa00010, &(0x7f0000000700)=ANY=[@ANYBLOB='nodecompose,decompose,nobarrier,gid=', @ANYRESHEX=0xee01, @ANYRES32=0x0], 0x4e, 0x635, &(0x7f0000000c80)="$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") mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) link(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000d40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') link(&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000006d80)={0x0, 0x0, &(0x7f0000006d40)={&(0x7f0000006d00)={0x28, 0x1, 0x4, 0x101, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_MODE={0xa, 0x2, {0x0, 0x1}}]}, 0x28}}, 0x0) 424.981114ms ago: executing program 0 (id=1161): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000002c0)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x50}, {0x6}]}, 0x10) r1 = socket$kcm(0x2, 0x3, 0x106) sendmsg$inet(r1, &(0x7f0000000340)={&(0x7f0000000380)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x0) 424.752374ms ago: executing program 2 (id=1162): creat(&(0x7f0000001180)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x70d, &(0x7f0000000480), &(0x7f00000011c0)=0x0, &(0x7f0000001240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r0, &(0x7f00000000c0)={0x0, 0x0, 0x15}, &(0x7f0000000100)='./file0\x00', 0x18}) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) io_uring_enter(r1, 0x47ba, 0x0, 0x0, 0x0, 0x0) 386.030228ms ago: executing program 3 (id=1163): syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f00000000c0)='./file0\x00', 0xa04710, &(0x7f0000000140)={[{@dioread_nolock}, {@grpquota}, {@debug}, {@noauto_da_alloc}, {@mblk_io_submit}, {@errors_remount}, {@usrjquota}]}, 0x1, 0x459, &(0x7f0000000700)="$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") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, &(0x7f0000000680)={0x4, [0x0, 0x0, 0x0, 0x0]}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}]}, 0x24}}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e21, @local}, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}, {0x2, 0x4e22, @broadcast}, 0x8, 0x0, 0x0, 0x0, 0x4, &(0x7f00000001c0)='wg1\x00', 0x9, 0x0, 0x569}) open(&(0x7f00000006c0)='./file0\x00', 0x1, 0x140) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000640)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r2, 0x14, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) 375.248108ms ago: executing program 0 (id=1164): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000103c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000180)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x2816c00}}, 0x50) syz_fuse_handle_req(r1, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x1c1401, 0x0) syz_fuse_handle_req(r1, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000100)={&(0x7f0000000200)={0x50, 0xffffffffffffffda}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) close_range(r0, 0xffffffffffffffff, 0x0) 316.976613ms ago: executing program 2 (id=1165): mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='v7\x00', 0x2008044, 0x0) 269.475087ms ago: executing program 3 (id=1166): syz_mount_image$minix(&(0x7f0000000540), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYRES64=0x0, @ANYRESDEC, @ANYRES8=0x0], 0xfd, 0x187, &(0x7f0000000200)="$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") chdir(&(0x7f00000001c0)='./file0\x00') chdir(&(0x7f0000000000)='./file1\x00') unlink(&(0x7f0000000280)='./file1\x00') 201.936312ms ago: executing program 2 (id=1167): syz_usb_connect(0x0, 0x956, &(0x7f0000001640)=ANY=[@ANYBLOB="120100004c628040110f00123d35010203010902440903000000000904000003fb6da8000a24010000000201020c2402000000000000000000132406000006000000000000000000000000000924030000000400000824050603"], 0x0) 136.993618ms ago: executing program 3 (id=1168): keyctl$clear(0x7, 0xfffffffffffffffc) syz_usb_connect(0x3, 0x158, &(0x7f00000000c0)={{0x12, 0x1, 0x201, 0xca, 0xb4, 0xc5, 0x8, 0xc72, 0x14, 0x578a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x146, 0x1, 0xb, 0x0, 0xe0, 0x9, [{{0x9, 0x4, 0xf4, 0x5, 0x3, 0x1d, 0xf4, 0x52, 0x8, [@cdc_ecm={{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x3, 0x4, 0x7}}], [{{0x9, 0x5, 0x3, 0x3, 0x0, 0x5, 0x8, 0x81, [@generic={0x100, 0x3, "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"}]}}, {{0x9, 0x5, 0x80, 0x4, 0x400, 0x8, 0x3, 0x4, [@generic={0x2, 0x9}]}}, {{0x9, 0x5, 0xb, 0x0, 0x10, 0x40, 0x1, 0x7f}}]}}]}}]}}, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect$printer(0x4, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) 129.936389ms ago: executing program 0 (id=1169): r0 = gettid() r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, &(0x7f0000000040), 0x8) listen(r1, 0x0) r2 = dup2(r1, r1) accept4$bt_l2cap(r2, 0x0, 0x0, 0x0) shutdown(r2, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 0s ago: executing program 0 (id=1170): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{0x0}], 0x1}, 0x0) socket$kcm(0x10, 0x2, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x1000000, 0x0, 0x0, 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, 0x0, 0x4000840) ioctl$EXT4_IOC_GETFSUUID(0xffffffffffffffff, 0x8008662c, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000940)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x5ac, 0x272, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x2, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x17}}}}}]}}]}}, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000000)='./file0\x00', 0x900000d2) read(r1, 0x0, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = socket$inet(0x2, 0x0, 0x7) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) kernel console output (not intermixed with test programs): e team_slave_0 removed [ 165.778282][ T3861] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 165.829559][ T3861] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 166.108578][ T3861] bond0 (unregistering): Released all slaves [ 166.285595][ T5605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 166.315089][ T5605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.326189][ T5926] loop0: detected capacity change from 0 to 2048 [ 166.341624][ T5605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 166.352819][ T5605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.372664][ T5605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 166.392932][ T5605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.407189][ T5605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 166.422735][ T5605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.435306][ T5605] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 166.459736][ T5926] EXT4-fs (loop0): Ignoring removed bh option [ 166.572402][ T5788] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 166.616186][ T5788] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 166.643178][ T5605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.657541][ T5926] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_lock,noinit_itable,init_itable=0x0000000000000080,norecovery,auto_da_alloc,noquota,bh,barrier=0x0000000000000000,noload,jqfmt=vfsold,,errors=continue. Quota mode: none. [ 166.663404][ T5605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.690842][ T5605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.701361][ T5605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.730744][ T5605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.742907][ T5605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.753842][ T5605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.767865][ T5605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.779283][ T5605] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 166.790520][ T5784] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 166.800458][ T5784] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 166.816307][ T5605] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.830073][ T5605] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.847611][ T5605] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.883883][ T3903] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 166.884831][ T5605] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.115781][ T4947] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:405: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 167.150854][ T3662] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 167.425736][ T3662] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 167.434202][ T3903] usb 5-1: Using ep0 maxpacket: 8 [ 167.845025][ T3696] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 167.872132][ T4947] EXT4-fs error (device loop0): ext4_readdir:220: inode #11: comm syz-executor: path /36/file2/lost+found: directory fails checksum at offset 0 [ 167.940738][ T3995] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 167.964031][ T3995] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 167.972623][ T4947] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:405: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 167.977457][ T4681] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 168.016282][ T4947] EXT4-fs error (device loop0): ext4_readdir:220: inode #11: comm syz-executor: path /36/file2/lost+found: directory fails checksum at offset 2048 [ 168.047082][ T4947] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:405: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 168.071745][ T4947] EXT4-fs error (device loop0): ext4_readdir:220: inode #11: comm syz-executor: path /36/file2/lost+found: directory fails checksum at offset 4096 [ 168.072041][ T4947] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:405: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 168.072075][ T4947] EXT4-fs error (device loop0): ext4_readdir:220: inode #11: comm syz-executor: path /36/file2/lost+found: directory fails checksum at offset 6144 [ 168.072305][ T4947] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:405: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 168.072337][ T4947] EXT4-fs error (device loop0): ext4_readdir:220: inode #11: comm syz-executor: path /36/file2/lost+found: directory fails checksum at offset 8192 [ 168.072581][ T4947] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:405: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 168.072612][ T4947] EXT4-fs error (device loop0): ext4_readdir:220: inode #11: comm syz-executor: path /36/file2/lost+found: directory fails checksum at offset 10240 [ 168.072823][ T4947] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:405: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 168.072855][ T4947] EXT4-fs error (device loop0): ext4_readdir:220: inode #11: comm syz-executor: path /36/file2/lost+found: directory fails checksum at offset 12288 [ 168.073334][ T4947] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:405: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 168.073418][ T4947] EXT4-fs error (device loop0): ext4_empty_dir:3093: inode #11: comm syz-executor: Directory block failed checksum [ 168.078654][ T4947] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:405: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 168.078693][ T4947] EXT4-fs error (device loop0): ext4_readdir:220: inode #11: comm syz-executor: path /36/file2/lost+found: directory fails checksum at offset 0 [ 168.078906][ T4947] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:405: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 168.078937][ T4947] EXT4-fs error (device loop0): ext4_readdir:220: inode #11: comm syz-executor: path /36/file2/lost+found: directory fails checksum at offset 2048 [ 168.114013][ T3903] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 168.114064][ T3903] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.114087][ T3903] usb 5-1: Product: syz [ 168.114103][ T3903] usb 5-1: Manufacturer: syz [ 168.114119][ T3903] usb 5-1: SerialNumber: syz [ 168.116951][ T3903] usb 5-1: config 0 descriptor?? [ 168.374105][ T3903] usb 5-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 168.427709][ T4681] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 168.541543][ T5950] loop2: detected capacity change from 0 to 16 [ 168.603918][ T3903] usb write operation failed. (-71) [ 168.633967][ T5950] erofs: (device loop2): mounted with root inode @ nid 36. [ 168.654942][ T5950] attempt to access beyond end of device [ 168.654942][ T5950] loop2: rw=524288, want=328, limit=16 [ 168.662580][ T3903] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 168.690831][ T5950] attempt to access beyond end of device [ 168.690831][ T5950] loop2: rw=524288, want=336, limit=16 [ 168.714386][ T3903] dvbdev: DVB: registering new adapter (Terratec H7) [ 168.724329][ T5950] attempt to access beyond end of device [ 168.724329][ T5950] loop2: rw=524288, want=1049296, limit=16 [ 168.733813][ T3903] usb 5-1: media controller created [ 168.753783][ T4681] usb 2-1: Using ep0 maxpacket: 16 [ 168.773869][ T5950] attempt to access beyond end of device [ 168.773869][ T5950] loop2: rw=524288, want=1049304, limit=16 [ 168.774565][ T3903] usb read operation failed. (-71) [ 168.816404][ T3903] usb write operation failed. (-71) [ 168.856209][ T3903] dvb_usb_az6007: probe of 5-1:0.0 failed with error -5 [ 168.891098][ T4681] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 168.894083][ T3903] usb 5-1: USB disconnect, device number 5 [ 168.912133][ T4681] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 168.936794][ T4681] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 169.056302][ T5784] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 169.074110][ T5784] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 169.092718][ T5784] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz1 [ 169.148915][ T4681] usb 2-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=96.bc [ 169.179887][ T4681] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.226870][ T4681] usb 2-1: Product: syz [ 169.231073][ T4681] usb 2-1: Manufacturer: syz [ 169.242829][ T4681] usb 2-1: SerialNumber: syz [ 169.256615][ T4681] usb 2-1: config 0 descriptor?? [ 169.310095][ T4681] adutux 2-1:0.0: interrupt endpoints not found [ 169.507965][ T4681] usb 2-1: USB disconnect, device number 5 [ 169.642796][ T5963] wlan0 speed is unknown, defaulting to 1000 [ 169.996341][ T5963] chnl_net:caif_netlink_parms(): no params data found [ 170.206926][ T5963] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.237631][ T5963] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.409371][ T5967] loop4: detected capacity change from 0 to 8192 [ 170.432235][ T5963] device bridge_slave_0 entered promiscuous mode [ 170.440769][ T5963] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.440864][ T5963] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.442125][ T5963] device bridge_slave_1 entered promiscuous mode [ 171.310219][ T5963] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 171.312766][ T5963] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 171.449597][ T5963] team0: Port device team_slave_0 added [ 171.469313][ T5963] team0: Port device team_slave_1 added [ 171.526465][ T5963] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 171.543996][ T5963] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 171.570554][ T5786] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 171.593885][ T3898] Bluetooth: hci4: command 0x0409 tx timeout [ 171.600219][ T5963] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 171.632321][ T5993] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 171.679262][ T5963] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 171.696588][ T5963] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 171.753419][ T5963] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 171.850371][ T5963] device hsr_slave_0 entered promiscuous mode [ 171.856881][ T5786] usb 5-1: Using ep0 maxpacket: 16 [ 171.874916][ T5963] device hsr_slave_1 entered promiscuous mode [ 171.884009][ T5963] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 171.903397][ T5963] Cannot create hsr debugfs directory [ 171.991857][ T5786] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 172.026329][ T5786] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 172.065591][ T5786] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 172.102297][ T5786] usb 5-1: New USB device found, idVendor=1e7d, idProduct=31ce, bcdDevice= 0.00 [ 172.119836][ T5786] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.133236][ T5786] usb 5-1: config 0 descriptor?? [ 172.226325][ T5963] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.256970][ T6006] device gretap0 entered promiscuous mode [ 172.280066][ T6006] netlink: 'syz.3.607': attribute type 2 has an invalid length. [ 172.310604][ T6006] netlink: 9 bytes leftover after parsing attributes in process `syz.3.607'. [ 172.411727][ T5963] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.487457][ T6012] loop2: detected capacity change from 0 to 4096 [ 172.505321][ T5963] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.617558][ T5963] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.646172][ T5786] ryos 0003:1E7D:31CE.0003: ignoring exceeding usage max [ 172.655619][ T5786] ryos 0003:1E7D:31CE.0003: ignoring exceeding usage max [ 172.662714][ T5786] ryos 0003:1E7D:31CE.0003: usage index exceeded [ 172.669838][ T5786] ryos 0003:1E7D:31CE.0003: item 0 0 2 2 parsing failed [ 172.678190][ T5786] ryos 0003:1E7D:31CE.0003: parse failed [ 172.684370][ T5786] ryos: probe of 0003:1E7D:31CE.0003 failed with error -22 [ 172.871237][ T5786] usb 5-1: USB disconnect, device number 6 [ 173.519413][ T5963] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 173.531923][ T5963] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 173.543129][ T5963] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 173.553537][ T5963] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 173.673955][ T5784] Bluetooth: hci4: command 0x041b tx timeout [ 173.714607][ T6021] loop2: detected capacity change from 0 to 1024 [ 173.812387][ T5963] 8021q: adding VLAN 0 to HW filter on device bond0 [ 173.842431][ T6021] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 173.884636][ T3898] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 173.896508][ T6026] loop4: detected capacity change from 0 to 4096 [ 173.916277][ T6021] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,journal_ioprio=0x0000000000000001,discard,i_version,debug_want_extra_isize=0x0000000000000040,jqfmt=vfsold,barrier=0x0000000000000006,barrier=0x0000000000000007,,errors=continue. Quota mode: writeback. [ 173.955343][ T3898] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 174.008794][ T6026] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 174.035498][ T5963] 8021q: adding VLAN 0 to HW filter on device team0 [ 174.042659][ T6026] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 174.070347][ T3898] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 174.094517][ T3898] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 174.103093][ T3898] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.110224][ T3898] bridge0: port 1(bridge_slave_0) entered forwarding state [ 174.165286][ T3649] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 174.173465][ T3649] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 174.200044][ T3649] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 174.217930][ T3649] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.225053][ T3649] bridge0: port 2(bridge_slave_1) entered forwarding state [ 174.241656][ T3649] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 174.250448][ T3649] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 174.306238][ T6040] netlink: 'syz.1.630': attribute type 10 has an invalid length. [ 174.325921][ T3696] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 174.342701][ T3696] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 174.354436][ T3696] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 174.391634][ T3649] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 174.400920][ T3649] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 174.418636][ T3649] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 174.449230][ T3649] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 174.468442][ T3649] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 174.497933][ T3649] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 174.521608][ T6048] ALSA: seq fatal error: cannot create timer (-19) [ 174.539220][ T5963] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 174.590786][ T6052] cgroup: subsys name conflicts with all [ 174.675749][ T6057] netlink: 28 bytes leftover after parsing attributes in process `syz.1.634'. [ 174.705569][ T6057] siw: device registration error -23 [ 174.786397][ T3903] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 174.797509][ T3903] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 174.845087][ T5963] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 174.896554][ T5788] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 174.914559][ T5788] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 174.962170][ T6044] loop4: detected capacity change from 0 to 32768 [ 174.972153][ T3861] device hsr_slave_0 left promiscuous mode [ 174.982593][ T3861] device hsr_slave_1 left promiscuous mode [ 174.989304][ T3861] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 174.997993][ T3861] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 175.008510][ T3861] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 175.016461][ T3861] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 175.024653][ T3861] device bridge_slave_1 left promiscuous mode [ 175.030948][ T3861] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.049783][ T3861] device bridge_slave_0 left promiscuous mode [ 175.053519][ T6044] gfs2: fsid=_dev_net_tun: Trying to join cluster "lock_nolock", "_dev_net_tun" [ 175.059627][ T3861] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.082818][ T6044] gfs2: fsid=_dev_net_tun: Now mounting FS (format 1801)... [ 175.103426][ T6044] gfs2: fsid=_dev_net_tun.0: journal 0 mapped with 16 extents in 0ms [ 175.114994][ T3861] device veth1_macvtap left promiscuous mode [ 175.121221][ T3861] device veth0_macvtap left promiscuous mode [ 175.125194][ T5790] gfs2: fsid=_dev_net_tun.0: jid=0, already locked for use [ 175.127747][ T3861] device veth1_vlan left promiscuous mode [ 175.135315][ T5790] gfs2: fsid=_dev_net_tun.0: jid=0: Looking at journal... [ 175.142080][ T3861] device veth0_vlan left promiscuous mode [ 175.202105][ T5790] gfs2: fsid=_dev_net_tun.0: jid=0: Journal head lookup took 66ms [ 175.210307][ T5790] gfs2: fsid=_dev_net_tun.0: jid=0: Done [ 175.216142][ T6044] gfs2: fsid=_dev_net_tun.0: first mount done, others may mount [ 175.531054][ T6044] gfs2: fsid=_dev_net_tun.0: fatal: invalid metadata block [ 175.531054][ T6044] bh = 2049 (type: exp=14, found=8) [ 175.531054][ T6044] function = gfs2_quota_init, file = fs/gfs2/quota.c, line = 1406 [ 175.633870][ T6044] gfs2: fsid=_dev_net_tun.0: about to withdraw this file system [ 175.647784][ T3861] team0 (unregistering): Port device team_slave_1 removed [ 175.654665][ T6044] gfs2: fsid=_dev_net_tun.0: Journal recovery skipped for jid 0 until next mount. [ 175.666308][ T6044] gfs2: fsid=_dev_net_tun.0: Glock dequeues delayed: 0 [ 175.669639][ T3861] team0 (unregistering): Port device team_slave_0 removed [ 175.812723][ T6067] netlink: 165 bytes leftover after parsing attributes in process `syz.3.625'. [ 176.405015][ T5785] Bluetooth: hci4: command 0x040f tx timeout [ 176.419956][ T6044] gfs2: fsid=_dev_net_tun.0: File system withdrawn [ 176.505693][ T6070] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 176.519094][ T3861] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 176.543993][ T6044] CPU: 1 PID: 6044 Comm: syz.4.618 Not tainted 5.15.164-syzkaller #0 [ 176.552067][ T6044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 176.562116][ T6044] Call Trace: [ 176.565384][ T6044] [ 176.568301][ T6044] dump_stack_lvl+0x1e3/0x2d0 [ 176.572971][ T6044] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 176.578591][ T6044] ? panic+0x860/0x860 [ 176.582647][ T6044] ? do_raw_spin_unlock+0x137/0x8b0 [ 176.587836][ T6044] gfs2_withdraw+0xe9e/0x14e0 [ 176.592521][ T6044] ? gfs2_lm+0x230/0x230 [ 176.596754][ T6044] ? gfs2_meta_ra+0x568/0x5f0 [ 176.601441][ T6044] ? gfs2_meta_buffer+0x410/0x410 [ 176.606485][ T6044] gfs2_metatype_check_ii+0x75/0x90 [ 176.611714][ T6044] gfs2_quota_init+0xe06/0x1110 [ 176.616620][ T6044] ? qd_get+0x5c0/0x5c0 [ 176.620791][ T6044] ? gfs2_end_log_write+0x800/0x800 [ 176.626002][ T6044] ? inode_go_inval+0x25c/0x2c0 [ 176.630855][ T6044] gfs2_make_fs_rw+0x436/0x5b0 [ 176.635643][ T6044] ? gfs2_jdesc_check+0x290/0x290 [ 176.640684][ T6044] ? gfs2_glock_wait+0x137/0x1c0 [ 176.645644][ T6044] gfs2_reconfigure+0x77a/0xcf0 [ 176.650534][ T6044] ? gfs2_get_tree+0x210/0x210 [ 176.655316][ T6044] ? gfs2_freeze_lock+0x52/0xc0 [ 176.660196][ T6044] reconfigure_super+0x43a/0x870 [ 176.665160][ T6044] path_mount+0xceb/0x10a0 [ 176.669598][ T6044] ? user_path_at_empty+0x12b/0x180 [ 176.674832][ T6044] __se_sys_mount+0x2d5/0x3c0 [ 176.679534][ T6044] ? __x64_sys_mount+0xc0/0xc0 [ 176.684317][ T6044] ? syscall_enter_from_user_mode+0x2e/0x240 [ 176.690349][ T6044] ? lockdep_hardirqs_on+0x94/0x130 [ 176.695574][ T6044] ? __x64_sys_mount+0x1c/0xc0 [ 176.700370][ T6044] do_syscall_64+0x3b/0xb0 [ 176.704800][ T6044] ? clear_bhb_loop+0x15/0x70 [ 176.709502][ T6044] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 176.715449][ T6044] RIP: 0033:0x7fb30db700fa [ 176.719886][ T6044] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 7e 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 176.739596][ T6044] RSP: 002b:00007fb30bfeae68 EFLAGS: 00000202 ORIG_RAX: 00000000000000a5 [ 176.748013][ T6044] RAX: ffffffffffffffda RBX: 00007fb30bfeaef0 RCX: 00007fb30db700fa [ 176.756000][ T6044] RDX: 0000000020000180 RSI: 0000000020000100 RDI: 0000000000000000 [ 176.763987][ T6044] RBP: 0000000020000180 R08: 00007fb30bfeaef0 R09: 0000000001a4243c [ 176.771987][ T6044] R10: 0000000001a4243c R11: 0000000000000202 R12: 0000000020000100 [ 176.779985][ T6044] R13: 00007fb30bfeaeb0 R14: 0000000000000000 R15: 0000000020007980 [ 176.787962][ T6044] [ 176.793251][ T6044] gfs2: unable to remount read-write [ 176.822569][ T3861] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 176.873897][ T5785] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 177.210337][ T3861] bond0 (unregistering): Released all slaves [ 177.224911][ T5785] usb 2-1: Using ep0 maxpacket: 16 [ 177.308153][ T5790] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 177.335026][ T5790] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 177.343539][ T5790] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 177.374019][ T5785] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 177.388393][ T5785] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 177.422550][ T5790] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 177.430309][ T5785] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 177.455455][ T5963] device veth0_vlan entered promiscuous mode [ 177.468889][ T5785] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 177.483775][ T5785] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 177.525379][ T5785] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 177.557707][ T5963] device veth1_vlan entered promiscuous mode [ 177.620224][ T3696] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 177.633295][ T3696] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 177.647809][ T5963] device veth0_macvtap entered promiscuous mode [ 177.680362][ T5963] device veth1_macvtap entered promiscuous mode [ 177.728509][ T5963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.740150][ T5963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.747462][ T5785] usb 2-1: New USB device found, idVendor=0525, idProduct=9ea1, bcdDevice= 0.40 [ 177.761273][ T5963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.777814][ T5963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.789687][ T5963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.789789][ T5785] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.814253][ T5963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.820864][ T5785] usb 2-1: Product: syz [ 177.828363][ T5785] usb 2-1: Manufacturer: syz [ 177.838539][ T5963] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 177.859995][ T5785] usb 2-1: SerialNumber: syz [ 177.883275][ T3903] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 177.903163][ T3903] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 178.047127][ T3903] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 178.056086][ T3903] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 178.068862][ T5963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.081433][ T5963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.094015][ T5963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.105426][ T5963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.925772][ T5788] Bluetooth: hci4: command 0x0419 tx timeout [ 178.950335][ T5963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.973869][ T4681] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 178.990653][ T5963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.003654][ T5963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 179.009114][ T5785] cdc_ncm 2-1:1.0: bind() failure [ 179.016085][ T5963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.037256][ T5785] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 179.050420][ T5785] cdc_ncm 2-1:1.1: bind() failure [ 179.059522][ T5963] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 179.088003][ T3903] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 179.103884][ T5785] usb 2-1: USB disconnect, device number 6 [ 179.111466][ T3903] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 179.130265][ T6093] netlink: 'syz.3.637': attribute type 10 has an invalid length. [ 179.216996][ T6093] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 179.228135][ T6101] loop4: detected capacity change from 0 to 1024 [ 179.254427][ T6097] wlan1: mtu less than device minimum [ 179.263960][ T5963] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.283420][ T5963] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.302877][ T5963] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.324213][ T5963] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.389786][ T4681] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 67, using maximum allowed: 30 [ 179.394350][ T6099] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 179.410771][ T4681] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 179.434151][ T26] audit: type=1326 audit(1723540119.453:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6100 comm="syz.4.640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb30db6e9f9 code=0x7ffc0000 [ 179.444120][ T4681] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 67 [ 179.474187][ T26] audit: type=1326 audit(1723540119.473:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6100 comm="syz.4.640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=265 compat=0 ip=0x7fb30db6e9f9 code=0x7ffc0000 [ 179.506024][ T26] audit: type=1326 audit(1723540119.473:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6100 comm="syz.4.640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb30db6e9f9 code=0x7ffc0000 [ 179.531960][ T26] audit: type=1326 audit(1723540119.473:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6100 comm="syz.4.640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fb30db6e9f9 code=0x7ffc0000 [ 179.573600][ T26] audit: type=1326 audit(1723540119.473:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6100 comm="syz.4.640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb30db6e9f9 code=0x7ffc0000 [ 179.604148][ T26] audit: type=1326 audit(1723540119.483:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6100 comm="syz.4.640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7fb30db6e9f9 code=0x7ffc0000 [ 179.673787][ T3696] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 179.692465][ T26] audit: type=1326 audit(1723540119.483:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6100 comm="syz.4.640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb30db6e9f9 code=0x7ffc0000 [ 179.718847][ T4681] usb 3-1: New USB device found, idVendor=0572, idProduct=0320, bcdDevice= 1.85 [ 179.732900][ T3998] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 179.741515][ T4681] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.761755][ T3998] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 179.783840][ T4681] usb 3-1: Product: syz [ 179.793762][ T4681] usb 3-1: Manufacturer: syz [ 179.808644][ T4681] usb 3-1: SerialNumber: syz [ 179.821684][ T3998] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 179.840424][ T26] audit: type=1326 audit(1723540119.483:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6100 comm="syz.4.640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7fb30db6e9f9 code=0x7ffc0000 [ 179.850589][ T4681] usb 3-1: config 0 descriptor?? [ 179.876961][ T3998] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 179.914357][ T26] audit: type=1326 audit(1723540119.483:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6100 comm="syz.4.640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb30db6e9f9 code=0x7ffc0000 [ 179.930064][ T5784] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 179.942763][ T3696] usb 4-1: Using ep0 maxpacket: 8 [ 179.976093][ T4681] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 179.993854][ T5784] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 180.034087][ T4681] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 180.040466][ T4681] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 180.064228][ T3696] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 180.080094][ T6111] loop4: detected capacity change from 0 to 128 [ 180.122938][ T6111] qnx6: invalid mount options. [ 180.208707][ T4681] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 180.234215][ T4681] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 180.277728][ T3696] usb 4-1: New USB device found, idVendor=1b80, idProduct=d700, bcdDevice=d0.46 [ 180.316053][ T3696] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.324183][ T4681] usb 3-1: dvb_usb_v2: found a 'DVBSky T330' in warm state [ 180.333466][ T3696] usb 4-1: Product: syz [ 180.333490][ T4681] usb 3-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 180.343818][ T3696] usb 4-1: Manufacturer: syz [ 180.370005][ T4681] usb 3-1: USB disconnect, device number 6 [ 180.404178][ T3696] usb 4-1: SerialNumber: syz [ 180.430137][ T3696] usb 4-1: config 0 descriptor?? [ 180.487325][ T3696] radio-si470x 4-1:0.0: could not find interrupt in endpoint [ 180.512189][ T6117] netlink: 4 bytes leftover after parsing attributes in process `syz.4.648'. [ 180.521437][ T3696] radio-si470x: probe of 4-1:0.0 failed with error -5 [ 180.529086][ T3696] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 180.563952][ T3649] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 180.934054][ T3649] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 180.963194][ T6121] loop4: detected capacity change from 0 to 16384 [ 180.970332][ T3649] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 181.001138][ T3649] usb 1-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00 [ 181.026740][ T3649] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.059534][ T3649] usb 1-1: config 0 descriptor?? [ 181.084567][ T6121] REISERFS warning (device loop4): super-6519 read_super_block: Unfinished reiserfsck --rebuild-tree run detected. Please run [ 181.084567][ T6121] reiserfsck --rebuild-tree and wait for a completion. If that fails [ 181.084567][ T6121] get newer reiserfsprogs package [ 181.123966][ T6121] REISERFS warning (device loop4): sh-2021 reiserfs_fill_super: can not find reiserfs on loop4 [ 181.223038][ T3696] usb 4-1: USB disconnect, device number 6 [ 181.372179][ T6124] loop2: detected capacity change from 0 to 1024 [ 181.531797][ T6115] xt_CT: You must specify a L4 protocol and not use inversions on it [ 181.583477][ T6129] loop4: detected capacity change from 0 to 512 [ 181.611084][ T3649] logitech-djreceiver 0003:046D:C71B.0004: hidraw0: USB HID v0.00 Device [HID 046d:c71b] on usb-dummy_hcd.0-1/input0 [ 181.795207][ T6136] 9pnet: Insufficient options for proto=fd [ 181.872344][ T3649] usb 1-1: USB disconnect, device number 8 [ 181.880240][ T6129] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.651: inode #1: comm syz.4.651: iget: illegal inode # [ 182.053129][ T6129] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.651: error while reading EA inode 1 err=-117 [ 182.212950][ T6129] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.651: inode #1: comm syz.4.651: iget: illegal inode # [ 182.351840][ T6129] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.651: error while reading EA inode 1 err=-117 [ 182.540829][ T6129] EXT4-fs (loop4): 1 orphan inode deleted [ 182.571723][ T6129] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,journal_dev=0x0000000000008000,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,grpquota,usrjquota=,,errors=continue. Quota mode: writeback. [ 182.757485][ T6153] loop0: detected capacity change from 0 to 256 [ 182.826730][ T6153] exfat: Deprecated parameter 'namecase' [ 182.852548][ T6153] exfat: Deprecated parameter 'namecase' [ 182.881828][ T6153] exfat: Deprecated parameter 'namecase' [ 182.897116][ T6159] Cannot find add_set index 0 as target [ 182.971080][ T6153] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 183.059651][ T6159] netdevsim netdevsim2: Direct firmware load for ng failed with error -2 [ 183.086560][ T6169] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 183.104206][ T6159] netdevsim netdevsim2: Falling back to sysfs fallback for: ng [ 183.216377][ T6173] input: syz0 as /devices/virtual/input/input8 [ 183.268996][ T6169] CIFS mount error: No usable UNC path provided in device string! [ 183.268996][ T6169] [ 183.284347][ T6169] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 183.413548][ T6177] loop4: detected capacity change from 0 to 256 [ 183.509054][ T6177] FAT-fs (loop4): Unrecognized mount option "uni_xlate=" or missing value [ 183.554104][ T5786] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 183.974776][ T6183] loop0: detected capacity change from 0 to 4096 [ 183.984092][ T5786] usb 2-1: config 1 interface 0 altsetting 253 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 183.999648][ T5786] usb 2-1: config 1 interface 0 has no altsetting 0 [ 184.030807][ T26] audit: type=1326 audit(1723540124.043:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6194 comm="syz.3.687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f074222e9f9 code=0x7ffc0000 [ 184.062797][ T6195] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 184.075848][ T6183] ntfs3: loop0: Different NTFS' sector size (2048) and media sector size (512) [ 184.114126][ T5786] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 184.146930][ T6199] IPVS: wlc: SCTP 172.20.20.187:0 - no destination available [ 184.155318][ T5786] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 184.163361][ T5786] usb 2-1: SerialNumber: syz [ 184.177666][ T6183] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 184.189209][ T6183] ntfs3: loop0: Failed to load $MFT. [ 184.451718][ T6205] loop0: detected capacity change from 0 to 1024 [ 184.460601][ T26] kauditd_printk_skb: 57 callbacks suppressed [ 184.460615][ T26] audit: type=1326 audit(1723540124.473:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6194 comm="syz.3.687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f074222e9f9 code=0x7ffc0000 [ 184.502117][ T26] audit: type=1326 audit(1723540124.483:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6194 comm="syz.3.687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f074222e9f9 code=0x7ffc0000 [ 184.524522][ T3696] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 184.540642][ T26] audit: type=1326 audit(1723540124.553:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6194 comm="syz.3.687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f074222e9f9 code=0x7ffc0000 [ 184.659026][ T26] audit: type=1326 audit(1723540124.673:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6194 comm="syz.3.687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f074222e9f9 code=0x7ffc0000 [ 184.716271][ T26] audit: type=1326 audit(1723540124.693:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6194 comm="syz.3.687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f074222e9f9 code=0x7ffc0000 [ 184.804092][ T4681] Bluetooth: hci2: command 0x0409 tx timeout [ 184.883001][ T5786] cdc_ether 2-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.1-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 184.895634][ T3696] usb 3-1: config 0 has an invalid interface number: 156 but max is 1 [ 184.895664][ T3696] usb 3-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 184.895686][ T3696] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 184.895707][ T3696] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 184.895730][ T3696] usb 3-1: config 0 has no interface number 0 [ 184.895770][ T3696] usb 3-1: config 0 interface 156 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 184.895797][ T3696] usb 3-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 184.895825][ T3696] usb 3-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 184.895850][ T3696] usb 3-1: config 0 interface 156 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 184.988319][ T3696] usb 3-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 185.019347][ T3696] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.039157][ T6215] netlink: 12 bytes leftover after parsing attributes in process `syz.0.683'. [ 185.054363][ T3696] usb 3-1: config 0 descriptor?? [ 185.096044][ T3696] gspca_main: spca561-2.14.0 probing abcd:cdee [ 185.226796][ T6230] loop4: detected capacity change from 0 to 256 [ 185.684140][ T3696] spca561: probe of 3-1:0.156 failed with error -22 [ 185.710002][ T3696] usb 3-1: MIDIStreaming interface descriptor not found [ 185.964506][ T6230] FAT-fs (loop4): Directory bread(block 64) failed [ 185.971086][ T6230] FAT-fs (loop4): Directory bread(block 65) failed [ 186.060711][ T6230] FAT-fs (loop4): Directory bread(block 66) failed [ 186.109912][ T6230] FAT-fs (loop4): Directory bread(block 67) failed [ 186.129584][ T6230] FAT-fs (loop4): Directory bread(block 68) failed [ 186.139061][ T6230] FAT-fs (loop4): Directory bread(block 69) failed [ 186.150569][ T6230] FAT-fs (loop4): Directory bread(block 70) failed [ 186.160645][ T6230] FAT-fs (loop4): Directory bread(block 71) failed [ 186.201026][ T6230] FAT-fs (loop4): Directory bread(block 72) failed [ 186.211716][ T5786] usb 2-1: USB disconnect, device number 7 [ 186.219715][ T5786] cdc_ether 2-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.1-1, CDC Ethernet Device [ 186.274153][ T6230] FAT-fs (loop4): Directory bread(block 73) failed [ 186.286911][ T3649] usb 3-1: USB disconnect, device number 7 [ 187.133200][ T6262] netlink: 24 bytes leftover after parsing attributes in process `syz.2.695'. [ 187.356686][ T6273] netlink: 4 bytes leftover after parsing attributes in process `syz.2.695'. [ 188.649050][ T6284] netlink: 68 bytes leftover after parsing attributes in process `syz.3.698'. [ 189.923738][ C0] sched: RT throttling activated [ 190.883965][ T4681] Bluetooth: hci1: command 0x0406 tx timeout [ 191.323835][ T3900] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 192.377709][ T6334] overlayfs: upper fs does not support tmpfile. [ 192.384682][ T3900] usb 2-1: config 0 has an invalid interface number: 6 but max is 1 [ 192.392706][ T3900] usb 2-1: config 0 has no interface number 1 [ 192.409700][ T3900] usb 2-1: config 0 interface 6 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 192.429922][ T3900] usb 2-1: config 0 interface 0 altsetting 143 has a duplicate endpoint with address 0xB, skipping [ 192.464038][ T3900] usb 2-1: config 0 interface 0 has no altsetting 0 [ 192.594407][ T6342] loop0: detected capacity change from 0 to 2048 [ 192.626253][ T3900] usb 2-1: New USB device found, idVendor=2639, idProduct=0101, bcdDevice=76.ea [ 192.651006][ T3900] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.691699][ T6342] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 192.710669][ T3900] usb 2-1: Product: syz [ 192.724173][ T3900] usb 2-1: Manufacturer: syz [ 192.728937][ T3900] usb 2-1: SerialNumber: syz [ 192.773920][ T3900] usb 2-1: config 0 descriptor?? [ 193.065212][ T3900] ftdi_sio 2-1:0.6: FTDI USB Serial Device converter detected [ 193.080707][ T3900] usb 2-1: Detected FT2232C [ 193.104084][ T3900] ftdi_sio ttyUSB0: Overriding wMaxPacketSize on endpoint 11 [ 193.153924][ T3900] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 193.184466][ T3900] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 193.216771][ T3900] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 193.252895][ T3900] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 193.282903][ T3900] usb 2-1: Detected FT2232C [ 193.299590][ T6336] loop4: detected capacity change from 0 to 40427 [ 193.323522][ T3900] ftdi_sio ttyUSB1: Unable to read latency timer: -71 [ 193.365725][ T3900] ftdi_sio ttyUSB1: Unable to write latency timer: -71 [ 193.388973][ T6336] F2FS-fs (loop4): invalid crc value [ 193.404551][ T3900] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB1 [ 193.431569][ T6336] F2FS-fs (loop4): Found nat_bits in checkpoint [ 193.451556][ T3900] usb 2-1: USB disconnect, device number 8 [ 193.502141][ T3900] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 193.533212][ T3900] ftdi_sio 2-1:0.6: device disconnected [ 193.584644][ T3900] ftdi_sio ttyUSB1: FTDI USB Serial Device converter now disconnected from ttyUSB1 [ 193.616572][ T3900] ftdi_sio 2-1:0.0: device disconnected [ 193.639604][ T6336] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 193.816593][ T6363] loop0: detected capacity change from 0 to 128 [ 193.920739][ T1388] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.927116][ T1388] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.949293][ T3769] attempt to access beyond end of device [ 193.949293][ T3769] loop4: rw=2049, want=45104, limit=40427 [ 193.977990][ T6363] UDF-fs: bad mount option "" or missing value [ 194.066492][ T6361] loop0: detected capacity change from 0 to 512 [ 194.123868][ T6361] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 194.256971][ T6361] EXT4-fs (loop0): 1 truncate cleaned up [ 194.263143][ T6361] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodiscard,resgid=0x000000000000ee00,init_itable,noload,minixdf,usrjquota=,,errors=continue. Quota mode: none. [ 194.858929][ T6391] netlink: 8 bytes leftover after parsing attributes in process `syz.4.726'. [ 195.336576][ T6408] netlink: 28 bytes leftover after parsing attributes in process `syz.0.742'. [ 195.793820][ T6410] infiniband syz1: set active [ 195.799369][ T6410] infiniband syz1: added bond_slave_1 [ 196.002703][ T6410] RDS/IB: syz1: added [ 196.035385][ T6410] smc: adding ib device syz1 with port count 1 [ 196.055028][ T6410] smc: ib device syz1 port 1 has pnetid [ 196.782538][ T6414] loop0: detected capacity change from 0 to 40427 [ 196.910363][ T6414] F2FS-fs (loop0): Found nat_bits in checkpoint [ 197.040915][ T6414] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 197.119597][ T26] audit: type=1804 audit(1723540137.133:93): pid=6414 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.746" name="/newroot/23/file2/bus" dev="loop0" ino=10 res=1 errno=0 [ 197.173590][ T5963] attempt to access beyond end of device [ 197.173590][ T5963] loop0: rw=2049, want=45104, limit=40427 [ 198.014866][ T6464] program syz.3.764 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 198.153571][ T6468] netlink: 'syz.4.775': attribute type 21 has an invalid length. [ 198.184063][ T6468] netlink: 160 bytes leftover after parsing attributes in process `syz.4.775'. [ 198.476504][ T5785] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 198.486462][ T5785] Bluetooth: hci4: Injecting HCI hardware error event [ 198.496658][ T3585] Bluetooth: hci4: hardware error 0x00 [ 199.254133][ T6458] loop0: detected capacity change from 0 to 32768 [ 199.441863][ T6495] loop4: detected capacity change from 0 to 764 [ 199.579756][ T6458] XFS (loop0): Mounting V5 Filesystem [ 199.674755][ T3903] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 199.825325][ T6458] XFS (loop0): Ending clean mount [ 200.060272][ T5963] XFS (loop0): Unmounting Filesystem [ 200.069251][ T5786] libceph: connect (1)[c::]:6789 error -101 [ 200.076782][ T5786] libceph: mon0 (1)[c::]:6789 connect error [ 200.086649][ T5786] libceph: connect (1)[c::]:6789 error -101 [ 200.093057][ T5786] libceph: mon0 (1)[c::]:6789 connect error [ 200.134201][ T3903] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 200.406360][ T3903] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 200.554994][ T3903] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 200.591165][ T3903] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 200.816576][ T3903] usb 3-1: SerialNumber: syz [ 200.930789][ T6504] ceph: No mds server is up or the cluster is laggy [ 201.107456][ T3903] usb 3-1: skipping empty audio interface (v1) [ 201.205780][ T3903] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 201.233931][ T6518] netlink: 'syz.4.780': attribute type 1 has an invalid length. [ 201.237340][ T3903] usb 3-1: USB disconnect, device number 8 [ 201.268400][ T3559] udevd[3559]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 202.553452][ T6536] dccp_invalid_packet: P.Data Offset(172) too large [ 202.957036][ T6524] loop4: detected capacity change from 0 to 32768 [ 203.122896][ T6567] netlink: 'syz.3.796': attribute type 1 has an invalid length. [ 203.139908][ T6524] XFS (loop4): Mounting V5 Filesystem [ 203.248247][ T6524] XFS (loop4): Ending clean mount [ 203.277809][ T6524] XFS (loop4): Quotacheck needed: Please wait. [ 203.302754][ T6547] loop2: detected capacity change from 0 to 32768 [ 203.385549][ T6547] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 scanned by syz.2.791 (6547) [ 203.427612][ T6547] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 203.667132][ T6547] BTRFS info (device loop2): enabling disk space caching [ 203.774275][ T6547] BTRFS info (device loop2): force clearing of disk cache [ 203.781527][ T6547] BTRFS info (device loop2): use zlib compression, level 3 [ 203.813289][ T6580] loop0: detected capacity change from 0 to 128 [ 203.824969][ T6547] BTRFS info (device loop2): enabling auto defrag [ 203.831430][ T6524] XFS (loop4): Quotacheck: Done. [ 203.840303][ T6547] BTRFS info (device loop2): turning on flush-on-commit [ 203.859696][ T6547] BTRFS info (device loop2): disk space caching is enabled [ 203.894740][ T6547] BTRFS info (device loop2): has skinny extents [ 203.933839][ T6580] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 203.984558][ T6580] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 204.001297][ T3769] XFS (loop4): Unmounting Filesystem [ 204.277475][ T6547] BTRFS info (device loop2): enabling ssd optimizations [ 204.292913][ T6547] BTRFS info (device loop2): clearing free space tree [ 204.300383][ T6547] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 204.310899][ T6547] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 204.385848][ T6547] BTRFS info (device loop2): checking UUID tree [ 204.404832][ T6609] netlink: 464 bytes leftover after parsing attributes in process `syz.3.804'. [ 204.653957][ T3696] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 204.904358][ T3696] usb 1-1: Using ep0 maxpacket: 16 [ 204.926297][ T6616] loop4: detected capacity change from 0 to 512 [ 205.032121][ T3696] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 205.043959][ T6616] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 205.059739][ T3696] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 205.073486][ T3696] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 205.083503][ T3696] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.093546][ T6616] EXT4-fs (loop4): 1 truncate cleaned up [ 205.101269][ T6616] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000006,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000068,bsdgroups,nombcache,noload,,errors=continue. Quota mode: none. [ 205.124874][ T3696] usb 1-1: config 0 descriptor?? [ 205.326442][ T3769] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /155/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 205.386098][ T3769] EXT4-fs error (device loop4): ext4_empty_dir:3131: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 205.418141][ T3769] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /155/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 205.485497][ T3769] EXT4-fs error (device loop4): ext4_empty_dir:3131: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 205.523336][ T3769] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /155/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 205.547827][ T3769] EXT4-fs error (device loop4): ext4_empty_dir:3131: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 205.568628][ T3769] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /155/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 205.600611][ T3769] EXT4-fs error (device loop4): ext4_empty_dir:3131: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 205.606310][ T3696] elan 0003:04F3:0755.0005: failed to start in urb: -90 [ 205.629266][ T3769] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /155/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 205.630176][ T6619] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 205.659783][ T3769] EXT4-fs error (device loop4): ext4_empty_dir:3131: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 205.680738][ T3696] elan 0003:04F3:0755.0005: hidraw0: USB HID v0.00 Device [HID 04f3:0755] on usb-dummy_hcd.0-1/input0 [ 205.823158][ T23] usb 1-1: USB disconnect, device number 9 [ 205.934031][ T6619] usb 4-1: Using ep0 maxpacket: 8 [ 206.053964][ T6619] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 0 [ 206.243887][ T6619] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 206.252952][ T6619] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.290219][ T6619] usb 4-1: Product: syz [ 206.310197][ T6619] usb 4-1: Manufacturer: syz [ 206.315304][ T6619] usb 4-1: SerialNumber: syz [ 206.371813][ T6619] cdc_ether: probe of 4-1:1.0 failed with error -22 [ 206.522594][ T6634] netlink: 'syz.0.822': attribute type 5 has an invalid length. [ 206.593607][ T4681] usb 4-1: USB disconnect, device number 7 [ 206.690323][ T6639] netlink: 72 bytes leftover after parsing attributes in process `syz.0.813'. [ 206.854122][ T6639] IPv6: NLM_F_CREATE should be specified when creating new route [ 206.876223][ T6639] IPv6: Can't replace route, no match found [ 208.408646][ T6667] wlan0 speed is unknown, defaulting to 1000 [ 208.783618][ T6669] loop2: detected capacity change from 0 to 32768 [ 208.901059][ T6666] loop0: detected capacity change from 0 to 32768 [ 208.932563][ T6669] XFS (loop2): Mounting V5 Filesystem [ 208.947381][ T6667] chnl_net:caif_netlink_parms(): no params data found [ 208.965066][ T6666] XFS: ikeep mount option is deprecated. [ 209.102927][ T6666] XFS (loop0): Mounting V5 Filesystem [ 209.129817][ T6698] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 209.130294][ T6669] XFS (loop2): Ending clean mount [ 209.188181][ T6667] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.212552][ T6667] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.249351][ T6667] device bridge_slave_0 entered promiscuous mode [ 209.289592][ T5492] XFS (loop2): Unmounting Filesystem [ 209.306848][ T6667] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.329920][ T6666] XFS (loop0): Ending clean mount [ 209.371183][ T6667] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.394881][ T6667] device bridge_slave_1 entered promiscuous mode [ 209.402324][ T6666] XFS (loop0): Quotacheck needed: Please wait. [ 209.485395][ T6667] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 209.531553][ T6666] XFS (loop0): Quotacheck: Done. [ 209.556787][ T6667] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 209.760966][ T6667] team0: Port device team_slave_0 added [ 209.885500][ T6667] team0: Port device team_slave_1 added [ 209.948110][ T6667] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 209.963552][ T6666] XFS (loop0): Unmounting Filesystem [ 209.983197][ T6667] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.054363][ T6667] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 210.077466][ T6667] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 210.093186][ T6667] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.143529][ T6667] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 210.266153][ T6667] device hsr_slave_0 entered promiscuous mode [ 210.288182][ T6667] device hsr_slave_1 entered promiscuous mode [ 210.295000][ T6667] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 210.302661][ T6667] Cannot create hsr debugfs directory [ 210.365356][ T4681] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 210.406131][ T5784] Bluetooth: hci1: command 0x0409 tx timeout [ 210.591319][ T6667] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.634136][ T4681] usb 4-1: Using ep0 maxpacket: 8 [ 210.754162][ T4681] usb 4-1: config 0 has an invalid descriptor of length 10, skipping remainder of the config [ 210.783247][ T6721] loop0: detected capacity change from 0 to 128 [ 210.803566][ T6667] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.848233][ T6721] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 210.934103][ T4681] usb 4-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=31.1f [ 210.959506][ T4681] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.998069][ T4681] usb 4-1: Product: syz [ 211.011210][ T4681] usb 4-1: Manufacturer: syz [ 211.022992][ T4681] usb 4-1: SerialNumber: syz [ 211.046109][ T6667] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.072976][ T4681] usb 4-1: config 0 descriptor?? [ 211.126360][ T4681] (null): radio-mr800 - initialization failed [ 211.148944][ T4681] radio-mr800: probe of 4-1:0.0 failed with error -22 [ 211.185976][ T4681] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 211.300091][ T6667] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.329640][ T4681] usb 4-1: USB disconnect, device number 8 [ 211.719610][ T6667] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 211.759584][ T6667] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 211.791212][ T6667] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 211.914643][ T6667] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 211.955633][ T6745] loop2: detected capacity change from 0 to 47 [ 212.990866][ T5786] Bluetooth: hci1: command 0x041b tx timeout [ 214.264332][ T6667] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.796503][ T6765] loop2: detected capacity change from 0 to 1024 [ 214.833210][ T6667] 8021q: adding VLAN 0 to HW filter on device team0 [ 214.915470][ T3696] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 214.953222][ T3696] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 215.017445][ T6765] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,noload,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,resgid=0x0000000000000000,usrquota,data_err=abort,data_err=abort,,errors=continue. Quota mode: writeback. [ 215.042597][ T4681] Bluetooth: hci1: command 0x040f tx timeout [ 215.084646][ T4681] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 215.147244][ T4681] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 215.191986][ T4681] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.199246][ T4681] bridge0: port 1(bridge_slave_0) entered forwarding state [ 215.212186][ T4681] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 215.259506][ T4681] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 215.285695][ T4681] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.292808][ T4681] bridge0: port 2(bridge_slave_1) entered forwarding state [ 215.333140][ T4681] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 215.421230][ T5790] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 215.435119][ T5790] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 215.452180][ T5790] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 215.470211][ T5790] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 215.559918][ T5785] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 215.569003][ T5785] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 215.593209][ T5785] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 215.637426][ T5785] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 215.675069][ T5785] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 215.719249][ T6667] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 215.757089][ T6667] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 215.761608][ T6787] loop0: detected capacity change from 0 to 128 [ 215.811973][ T5790] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 215.837011][ T5790] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 215.911935][ T6787] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 215.974730][ T6787] ext4 filesystem being mounted at /47/file0 supports timestamps until 2038 (0x7fffffff) [ 216.107795][ T26] audit: type=1804 audit(1723540156.123:94): pid=6787 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.863" name="/newroot/47/file0/bus" dev="loop0" ino=13 res=1 errno=0 [ 216.150864][ T3696] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 216.160844][ T3696] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 216.182887][ T6667] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 216.626094][ T5788] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 216.646528][ T5788] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 216.683144][ T6667] device veth0_vlan entered promiscuous mode [ 216.720467][ T6667] device veth1_vlan entered promiscuous mode [ 216.743447][ T6819] netlink: 'syz.2.870': attribute type 62 has an invalid length. [ 216.761098][ T5785] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 216.774582][ T5785] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 216.793507][ T5785] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 216.814077][ T5785] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 216.822034][ T5785] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 216.830758][ T5785] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 216.886604][ T5790] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 216.903578][ T5790] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 216.924441][ T6825] loop2: detected capacity change from 0 to 512 [ 216.934026][ T6667] device veth0_macvtap entered promiscuous mode [ 216.943188][ T6667] device veth1_macvtap entered promiscuous mode [ 216.971156][ T5788] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 216.980263][ T5788] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 216.997391][ T6825] EXT4-fs (loop2): Ignoring removed orlov option [ 217.011699][ T6667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 217.031633][ T6825] EXT4-fs (loop2): Test dummy encryption mode enabled [ 217.043373][ T6667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.054178][ T6667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 217.071234][ T6825] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a014e09c, mo2=0002] [ 217.083134][ T6825] System zones: 1-12 [ 217.088090][ T6667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.100086][ T6667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 217.110689][ T6825] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #15: comm syz.2.873: casefold flag without casefold feature [ 217.126651][ T5790] Bluetooth: hci1: command 0x0419 tx timeout [ 217.146225][ T6825] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: inode #12: comm syz.2.873: missing EA_INODE flag [ 217.166742][ T6667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.182549][ T6667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 217.205867][ T6825] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.873: error while reading EA inode 12 err=-117 [ 217.229426][ T6667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.249747][ T6825] EXT4-fs (loop2): 1 orphan inode deleted [ 217.255673][ T6667] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 217.281999][ T6825] EXT4-fs (loop2): mounted filesystem without journal. Opts: orlov,minixdf,max_dir_size_kb=0x0000000000009c7c,debug,grpquota,errors=continue,test_dummy_encryption,auto_da_alloc,nodiscard,,errors=continue. Quota mode: writeback. [ 217.305694][ T6619] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 217.319792][ T6619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 217.351590][ T6667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 217.390989][ T6667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.427196][ T6667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 217.447461][ T6667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.594453][ T6845] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 217.661900][ T6667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.249986][ T6851] fscrypt (loop2): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 218.895331][ T6667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.968944][ T6667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.014781][ T6861] loop0: detected capacity change from 0 to 512 [ 219.033854][ T6667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.051722][ T6667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.063019][ T6667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.076352][ T6667] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 219.118149][ T3900] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 219.130227][ T6861] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 219.184539][ T3900] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 219.204721][ T6861] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 219.237304][ T6667] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.251823][ T6667] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.261712][ T6667] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.271163][ T6667] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.271528][ T6861] [EXT4 FS bs=4096, gc=1, bpg=3008, ipg=32, mo=8001e019, mo2=0000] [ 219.432478][ T3662] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 219.444278][ T4001] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 219.487102][ T3662] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 219.494121][ T4001] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 219.514110][ T3900] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 219.592289][ T6874] netlink: 8 bytes leftover after parsing attributes in process `syz.3.886'. [ 219.690788][ T3696] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 219.753897][ T6861] EXT4-fs (loop0): 1 truncate cleaned up [ 219.902934][ T3861] Quota error (device loop0): free_dqentry: Quota structure has offset to other block (1) than it should (5) [ 219.961421][ T6861] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobarrier,noblock_validity,nombcache,nogrpid,acl,resgid=0x000000000000ee01,jqfmt=vfsv1,noauto_da_alloc,resgid=0x000000000000ee002,errors=continue. Quota mode: writeback. [ 220.097263][ T3861] EXT4-fs error (device loop0): ext4_release_dquot:6219: comm kworker/u4:12: Failed to release dquot type 1 [ 221.168821][ T6899] netlink: 'syz.3.894': attribute type 29 has an invalid length. [ 221.181941][ T26] audit: type=1800 audit(1723540161.193:95): pid=6897 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.895" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 221.227805][ T6899] netlink: 'syz.3.894': attribute type 29 has an invalid length. [ 221.246329][ T6902] netlink: 'syz.3.894': attribute type 29 has an invalid length. [ 221.288011][ T6899] netlink: 'syz.3.894': attribute type 29 has an invalid length. [ 221.331966][ T6907] netlink: 'syz.3.894': attribute type 29 has an invalid length. [ 221.469190][ T6911] option changes via remount are deprecated (pid=6910 comm=syz.3.898) [ 221.493887][ T5790] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 221.542552][ T6913] loop0: detected capacity change from 0 to 2048 [ 221.617712][ T6913] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 221.633653][ T6913] UDF-fs: Scanning with blocksize 512 failed [ 221.649362][ T6913] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 129: 0x7d != 0x7e [ 221.669597][ T6913] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 221.733892][ T5790] usb 5-1: Using ep0 maxpacket: 32 [ 221.864141][ T5790] usb 5-1: New USB device found, idVendor=0458, idProduct=7006, bcdDevice=69.91 [ 221.873228][ T5790] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.906149][ T5790] usb 5-1: config 0 descriptor?? [ 222.158686][ T5790] gspca_main: sunplus-2.14.0 probing 0458:7006 [ 223.760071][ T6931] loop2: detected capacity change from 0 to 512 [ 223.974050][ T6934] futex_wake_op: syz.4.895 tries to shift op by 32; fix this program [ 224.048723][ T6935] loop0: detected capacity change from 0 to 47 [ 224.388761][ T6940] netlink: 24 bytes leftover after parsing attributes in process `syz.3.908'. [ 224.573975][ T6931] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 224.581490][ T6931] UDF-fs: Scanning with blocksize 512 failed [ 224.591480][ T6931] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 224.598997][ T6931] UDF-fs: Scanning with blocksize 1024 failed [ 224.605797][ T6931] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 224.613189][ T6931] UDF-fs: Scanning with blocksize 2048 failed [ 224.621477][ T6931] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 224.665543][ T6931] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 225.613532][ T4003] Bluetooth: hci5: Frame reassembly failed (-84) [ 225.713833][ T5790] gspca_sunplus: reg_w_riv err -71 [ 225.720016][ T5790] sunplus: probe of 5-1:0.0 failed with error -71 [ 225.737851][ T6949] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 225.764576][ T6957] kernel profiling enabled (shift: 12) [ 225.774285][ T5790] usb 5-1: USB disconnect, device number 7 [ 226.143865][ T3896] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 226.367121][ T6968] loop4: detected capacity change from 0 to 512 [ 226.410821][ T6966] loop0: detected capacity change from 0 to 32768 [ 226.466910][ T6966] XFS: ikeep mount option is deprecated. [ 226.478241][ T6968] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 226.524096][ T3896] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 226.563849][ T3896] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 226.588504][ T6968] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended [ 226.602918][ T6966] XFS (loop0): Mounting V5 Filesystem [ 226.622179][ T6968] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 226.644085][ T6968] System zones: 0-2, 18-18, 34-34 [ 226.663568][ T6966] XFS (loop0): Ending clean mount [ 226.665146][ T6968] EXT4-fs error (device loop4): ext4_orphan_get:1423: comm syz.4.917: bad orphan inode 15 [ 226.680688][ T6968] ext4_test_bit(bit=14, block=18) = 1 [ 226.691083][ T6968] is_bad_inode(inode)=0 [ 226.693586][ T6966] XFS (loop0): Quotacheck needed: Please wait. [ 226.723862][ T6968] NEXT_ORPHAN(inode)=2264924160 [ 226.734816][ T3896] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 226.734853][ T6968] max_ino=32 [ 226.745016][ T3896] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.756552][ T3896] usb 2-1: Product: syz [ 226.763840][ T3896] usb 2-1: Manufacturer: syz [ 226.770453][ T3896] usb 2-1: SerialNumber: syz [ 226.788850][ T3896] usb 2-1: config 0 descriptor?? [ 226.798579][ T6968] i_nlink=0 [ 226.814080][ T6957] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 226.822292][ T6968] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1061: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 226.833955][ T6957] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 226.857870][ T6968] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.917: bg 0: block 80: padding at end of block bitmap is not set [ 226.878537][ T6968] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6186: Corrupt filesystem [ 226.898771][ T6968] EXT4-fs (loop4): mounted filesystem without journal. Opts: resuid=0x0000000000000000,,errors=continue. Quota mode: none. [ 227.064960][ T6966] XFS (loop0): Quotacheck: Done. [ 227.935519][ T3900] Bluetooth: hci5: command 0x1003 tx timeout [ 227.941699][ T3572] Bluetooth: hci5: sending frame failed (-49) [ 228.178321][ T3896] dm9601: probe of 2-1:0.0 failed with error -71 [ 228.227915][ T3896] usb 2-1: USB disconnect, device number 9 [ 228.836282][ T7000] loop4: detected capacity change from 0 to 512 [ 228.908513][ T7000] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 228.916159][ T7000] UDF-fs: Scanning with blocksize 512 failed [ 228.927834][ T7000] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 228.935492][ T7000] UDF-fs: Scanning with blocksize 1024 failed [ 228.948802][ T7000] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 228.956489][ T7000] UDF-fs: Scanning with blocksize 2048 failed [ 229.003850][ T7000] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 229.033290][ T7000] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 229.658976][ T5963] XFS (loop0): Unmounting Filesystem [ 229.724058][ T5788] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 229.896745][ T4003] tipc: Left network mode [ 230.671828][ T3898] Bluetooth: hci5: command 0x1001 tx timeout [ 230.698302][ T3572] Bluetooth: hci5: sending frame failed (-49) [ 230.961063][ T7008] loop4: detected capacity change from 0 to 4096 [ 231.146989][ T7012] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 231.384357][ T7016] loop2: detected capacity change from 0 to 47 [ 231.614860][ T26] audit: type=1804 audit(1723540171.563:96): pid=7013 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.926" name="/newroot/7/file0/bus" dev="loop4" ino=18 res=1 errno=0 [ 231.997404][ T5788] usb 3-1: device not accepting address 9, error -71 [ 232.273891][ T6619] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 232.544019][ T6619] usb 2-1: Using ep0 maxpacket: 16 [ 232.824781][ T6619] usb 2-1: New USB device found, idVendor=23a7, idProduct=fedc, bcdDevice=e0.0b [ 232.905641][ T6619] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.922525][ T6619] usb 2-1: Product: syz [ 232.928818][ T6619] usb 2-1: Manufacturer: syz [ 232.933506][ T6619] usb 2-1: SerialNumber: syz [ 232.947189][ T3900] Bluetooth: hci5: command 0x1009 tx timeout [ 232.995030][ T6619] usb 2-1: config 0 descriptor?? [ 233.068547][ T23] wlan0 speed is unknown, defaulting to 1000 [ 233.323056][ T7041] loop2: detected capacity change from 0 to 1024 [ 234.003063][ T6619] usb 2-1: MIDIStreaming interface descriptor not found [ 234.009250][ T3987] hfsplus: b-tree write err: -5, ino 4 [ 234.055890][ T6619] usb 2-1: USB disconnect, device number 10 [ 234.941706][ T4003] device hsr_slave_0 left promiscuous mode [ 234.961687][ T4003] device hsr_slave_1 left promiscuous mode [ 235.018648][ T150] block nbd0: Attempted send on invalid socket [ 235.027458][ T150] blk_update_request: I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 235.081618][ T7051] SQUASHFS error: Failed to read block 0x0: -5 [ 235.090794][ T4003] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 236.044799][ T7051] unable to read squashfs_super_block [ 236.084870][ T3789] udevd[3789]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 236.103818][ T4003] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 236.424798][ T4003] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 236.447937][ T4003] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 236.492680][ T4003] device bridge_slave_1 left promiscuous mode [ 236.514730][ T4003] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.589283][ T4003] device bridge_slave_0 left promiscuous mode [ 236.638787][ T4003] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.724090][ T4003] rdma_rxe: ignoring netdev event = 10 for bond_slave_1 [ 237.134346][ T4003] device veth1_macvtap left promiscuous mode [ 237.179197][ T4003] device veth0_macvtap left promiscuous mode [ 237.217918][ T7080] loop4: detected capacity change from 0 to 1024 [ 237.238461][ T4003] device veth1_vlan left promiscuous mode [ 237.255103][ T4003] device veth0_vlan left promiscuous mode [ 237.270010][ T7080] EXT4-fs (loop4): Test dummy encryption mode enabled [ 237.305533][ T7080] EXT4-fs (loop4): Ignoring removed orlov option [ 237.341465][ T7080] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,stripe=0x0000000000000007,lazytime,orlov,barrier=0x0000000000000005,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue. Quota mode: writeback. [ 237.499343][ T4003] infiniband syz1: set down [ 237.616984][ T7080] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 237.969540][ T4003] team0 (unregistering): Port device team_slave_1 removed [ 238.097123][ T4003] team0 (unregistering): Port device team_slave_0 removed [ 238.195412][ T7097] netlink: 8 bytes leftover after parsing attributes in process `syz.1.950'. [ 238.939205][ T4003] rdma_rxe: ignoring netdev event = 27 for bond_slave_1 [ 238.947281][ T4003] rdma_rxe: ignoring netdev event = 26 for bond_slave_1 [ 238.954484][ T4003] rdma_rxe: ignoring netdev event = 21 for bond_slave_1 [ 238.961613][ T4003] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 238.973251][ T4003] rdma_rxe: ignoring netdev event = 9 for bond_slave_1 [ 238.980468][ T4003] rdma_rxe: ignoring netdev event = 8 for bond_slave_1 [ 238.999507][ T3660] smc: removing ib device syz1 [ 239.017800][ T4003] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 239.246694][ T4003] bond0 (unregistering): Released all slaves [ 239.273827][ T6619] Bluetooth: hci3: command 0x0409 tx timeout [ 239.955078][ T7107] dccp_invalid_packet: P.CsCov 4 exceeds packet length 28 [ 240.011452][ T7076] chnl_net:caif_netlink_parms(): no params data found [ 243.404858][ T23] Bluetooth: hci3: command 0x041b tx timeout [ 243.463787][ T6619] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 243.473590][ T7117] loop4: detected capacity change from 0 to 128 [ 243.625508][ T7119] netlink: 2 bytes leftover after parsing attributes in process `syz.2.957'. [ 243.644689][ T7117] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 243.672505][ T7119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 243.683629][ T7119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.686817][ T7117] ext4 filesystem being mounted at /15/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 243.698571][ T7119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 243.725455][ T3898] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 243.738010][ T7119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.753307][ T7119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 243.763873][ T7119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.773885][ T7119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 243.784673][ T7119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.800142][ T7119] device batadv_slave_1 entered promiscuous mode [ 244.057026][ T7076] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.076657][ T7076] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.096961][ T7076] device bridge_slave_0 entered promiscuous mode [ 244.132278][ T7076] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.159305][ T7076] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.217839][ T7076] device bridge_slave_1 entered promiscuous mode [ 244.280108][ T7142] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 244.342508][ T7076] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 244.348701][ T7137] loop2: detected capacity change from 0 to 512 [ 244.383275][ T7076] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 244.439294][ T7137] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 244.593253][ T7137] EXT4-fs (loop2): 1 orphan inode deleted [ 244.613861][ T7137] EXT4-fs (loop2): 1 truncate cleaned up [ 244.619553][ T7137] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,nodelalloc,debug_want_extra_isize=0x000000000000002e,inode_readahead_blks=0x0000000000010000,block_validity,quota,. Quota mode: writeback. [ 244.680419][ T7076] team0: Port device team_slave_0 added [ 244.734762][ T7076] team0: Port device team_slave_1 added [ 244.744278][ T7131] loop0: detected capacity change from 0 to 32768 [ 244.832792][ T7076] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 244.853308][ T7076] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 244.894743][ T7131] XFS (loop0): Mounting V5 Filesystem [ 244.984661][ T7076] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 245.016200][ T7076] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 245.023174][ T7076] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 245.130728][ T7131] XFS (loop0): Ending clean mount [ 245.198161][ T7131] XFS (loop0): Quotacheck needed: Please wait. [ 245.247436][ T7076] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 245.434322][ T6619] Bluetooth: hci3: command 0x040f tx timeout [ 245.546595][ T7166] netlink: 'syz.2.966': attribute type 10 has an invalid length. [ 245.625348][ T7131] XFS (loop0): Quotacheck: Done. [ 245.940104][ T5963] XFS (loop0): Unmounting Filesystem [ 245.948820][ T7076] device hsr_slave_0 entered promiscuous mode [ 245.971531][ T7179] ALSA: mixer_oss: invalid OSS volume '' [ 245.987464][ T7076] device hsr_slave_1 entered promiscuous mode [ 246.053990][ T7076] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 246.072517][ T7076] Cannot create hsr debugfs directory [ 246.277488][ T7076] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.173274][ T7076] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.340884][ T7076] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.514121][ T3696] Bluetooth: hci3: command 0x0419 tx timeout [ 247.786631][ T7076] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.334977][ T7076] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 248.403065][ T7076] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 248.428248][ T7076] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 248.441950][ T7213] loop2: detected capacity change from 0 to 2048 [ 248.482532][ T7076] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 248.814126][ T7076] 8021q: adding VLAN 0 to HW filter on device bond0 [ 248.855276][ T6619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 248.867983][ T6619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 248.900405][ T7076] 8021q: adding VLAN 0 to HW filter on device team0 [ 248.929472][ T6619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 248.939066][ T6619] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 248.959832][ T6619] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.966996][ T6619] bridge0: port 1(bridge_slave_0) entered forwarding state [ 249.034885][ T6619] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 249.094636][ T6619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 249.103453][ T6619] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 249.153025][ T6619] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.160196][ T6619] bridge0: port 2(bridge_slave_1) entered forwarding state [ 249.211158][ T6619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 249.236636][ T6619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 250.734044][ T7226] netlink: 'syz.2.985': attribute type 10 has an invalid length. [ 250.852371][ T7226] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 250.965170][ T7230] wlan1: mtu less than device minimum [ 250.975637][ T3649] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 251.005544][ T3649] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 251.054789][ T3649] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 251.102091][ T3649] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 251.162899][ T3649] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 251.253796][ T3649] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 251.300114][ T7076] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 251.333081][ T7076] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 251.356585][ T3649] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 251.371271][ T3649] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 251.401215][ T7238] loop0: detected capacity change from 0 to 512 [ 251.419456][ T3649] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 251.557290][ T7238] EXT4-fs (loop0): mounted filesystem without journal. Opts: acl,,errors=continue. Quota mode: writeback. [ 251.592540][ T7238] ext4 filesystem being mounted at /80/bus supports timestamps until 2038 (0x7fffffff) [ 251.602248][ T5785] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 251.602404][ T5785] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 251.633832][ T3649] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 251.652258][ T7076] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 251.772819][ T5790] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 251.811098][ T5790] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 251.883899][ T3649] usb 3-1: Using ep0 maxpacket: 8 [ 251.887206][ T5790] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 251.916317][ T5790] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 251.950603][ T7262] loop4: detected capacity change from 0 to 512 [ 251.967882][ T7076] device veth0_vlan entered promiscuous mode [ 251.988499][ T5789] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 252.004141][ T3649] usb 3-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice=13.13 [ 252.004419][ T5789] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 252.023594][ T3649] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.049752][ T7262] EXT4-fs (loop4): Test dummy encryption mode enabled [ 252.067079][ T3649] usb 3-1: config 0 descriptor?? [ 252.077938][ T7076] device veth1_vlan entered promiscuous mode [ 252.088616][ T7262] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 252.108878][ T3649] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input10 [ 252.128139][ T5790] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 252.151607][ T5790] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 252.494807][ T7076] device veth0_macvtap entered promiscuous mode [ 253.370885][ T7262] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #17: comm syz.4.994: iget: bogus i_mode (0) [ 253.392804][ T7076] device veth1_macvtap entered promiscuous mode [ 253.444036][ T7076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 253.456555][ T7262] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.994: couldn't read orphan inode 17 (err -117) [ 253.492883][ T7076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.522358][ T7076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 253.541834][ T7262] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv0,abort,barrier,barrier,test_dummy_encryption,nomblk_io_submit,,errors=continue. Quota mode: none. [ 253.584390][ T7076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.594391][ T7076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 253.605251][ T7076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.615240][ T7076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 253.625768][ T7076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.639096][ T7076] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 253.650074][ T4681] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 253.665761][ T4681] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 253.687424][ T4681] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 253.703475][ T4681] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 253.723128][ T7076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 253.748788][ T7076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.780591][ T7076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 253.798133][ T7076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.815488][ T7076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 253.841299][ T7076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.856934][ T7279] loop0: detected capacity change from 0 to 512 [ 253.862610][ T7076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 253.885463][ T7076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.902263][ T7076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 253.920229][ T7076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.952496][ T7076] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 253.986848][ T5790] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 253.999081][ T5790] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 254.024531][ T7279] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 254.036076][ T7076] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.052145][ T7076] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.065221][ T7279] ext4 filesystem being mounted at /82/file0 supports timestamps until 2038 (0x7fffffff) [ 254.082675][ T7076] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.125880][ T7076] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.127984][ T7279] EXT4-fs error (device loop0): ext4_do_update_inode:5160: inode #2: comm syz.0.999: corrupted inode contents [ 254.155395][ T7279] EXT4-fs error (device loop0): ext4_dirty_inode:5993: inode #2: comm syz.0.999: mark_inode_dirty error [ 254.171618][ T6667] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 13: comm syz-executor: path /26/bus: bad entry in directory: rec_len % 4 != 0 - offset=92, inode=0, rec_len=127, size=1024 fake=0 [ 254.186953][ T7279] EXT4-fs error (device loop0): ext4_do_update_inode:5160: inode #2: comm syz.0.999: corrupted inode contents [ 254.244493][ T6667] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz-executor: bg 0: block 7: invalid block bitmap [ 254.264585][ T7279] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #2: comm syz.0.999: mark_inode_dirty error [ 254.282793][ T6667] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6186: Corrupt filesystem [ 254.316819][ T6667] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 13: comm syz-executor: path /26/bus: bad entry in directory: rec_len % 4 != 0 - offset=92, inode=0, rec_len=127, size=1024 fake=0 [ 254.318772][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 254.356715][ T6667] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 13: comm syz-executor: path /26/bus: bad entry in directory: rec_len % 4 != 0 - offset=92, inode=0, rec_len=127, size=1024 fake=0 [ 254.411341][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.421427][ T3011] bcm5974 3-1:0.0: could not read from device [ 254.453933][ T3011] bcm5974 3-1:0.0: could not read from device [ 254.474527][ T6667] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 13: comm syz-executor: path /26/bus: bad entry in directory: rec_len % 4 != 0 - offset=92, inode=0, rec_len=127, size=1024 fake=0 [ 254.495568][ T3649] usb 3-1: USB disconnect, device number 12 [ 254.516019][ T3011] bcm5974 3-1:0.0: could not read from device [ 254.533118][ T4681] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 254.551547][ T3987] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 254.578103][ T3987] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.656910][ T6667] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 13: comm syz-executor: path /26/bus: bad entry in directory: rec_len % 4 != 0 - offset=92, inode=0, rec_len=127, size=1024 fake=0 [ 254.694877][ T4681] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 254.825496][ T6667] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 13: comm syz-executor: path /26/bus: bad entry in directory: rec_len % 4 != 0 - offset=92, inode=0, rec_len=127, size=1024 fake=0 [ 254.997843][ T7292] xt_l2tp: wrong L2TP version: 0 [ 255.422765][ T1388] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.429292][ T1388] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.464881][ T6667] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 13: comm syz-executor: path /26/bus: bad entry in directory: rec_len % 4 != 0 - offset=92, inode=0, rec_len=127, size=1024 fake=0 [ 255.542900][ T7291] loop2: detected capacity change from 0 to 4096 [ 255.551222][ T6667] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 13: comm syz-executor: path /26/bus: bad entry in directory: rec_len % 4 != 0 - offset=92, inode=0, rec_len=127, size=1024 fake=0 [ 255.707778][ T7291] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 255.766983][ T7291] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 255.788215][ T7291] ntfs3: loop2: Failed to load $UpCase. [ 257.948831][ T4003] bond0: (slave wlan1): Releasing backup interface [ 258.170440][ T4003] device hsr_slave_0 left promiscuous mode [ 258.177478][ T4003] device hsr_slave_1 left promiscuous mode [ 258.198384][ T4003] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 258.207483][ T4003] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 258.223961][ T4003] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 258.256361][ T4003] device bridge_slave_1 left promiscuous mode [ 258.263840][ T4003] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.277583][ T4003] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.331901][ T4003] device veth1_macvtap left promiscuous mode [ 258.353744][ T4003] device veth0_macvtap left promiscuous mode [ 258.359846][ T4003] device veth1_vlan left promiscuous mode [ 258.386878][ T4003] device veth0_vlan left promiscuous mode [ 260.287551][ T5789] libceph: connect (1)[c::]:6789 error -101 [ 260.294935][ T5789] libceph: mon0 (1)[c::]:6789 connect error [ 260.347118][ T4003] team0 (unregistering): Port device team_slave_1 removed [ 260.361578][ T4003] team0 (unregistering): Port device team_slave_0 removed [ 260.375454][ T4003] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 260.390578][ T4003] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 260.471289][ T4003] bond0 (unregistering): Released all slaves [ 260.556076][ T5789] libceph: connect (1)[c::]:6789 error -101 [ 260.562341][ T5789] libceph: mon0 (1)[c::]:6789 connect error [ 260.763685][ T7364] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 261.026708][ T7340] chnl_net:caif_netlink_parms(): no params data found [ 261.058294][ T7357] ceph: No mds server is up or the cluster is laggy [ 261.094217][ T5785] libceph: connect (1)[c::]:6789 error -101 [ 261.119146][ T5785] libceph: mon0 (1)[c::]:6789 connect error [ 261.407967][ T7380] loop0: detected capacity change from 0 to 1024 [ 261.839175][ T154] hfsplus: b-tree write err: -5, ino 4 [ 262.040686][ T5789] Bluetooth: hci1: command 0x0409 tx timeout [ 262.329584][ T7340] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.391559][ T7340] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.429073][ T7340] device bridge_slave_0 entered promiscuous mode [ 262.648465][ T7340] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.649612][ T7340] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.659354][ T5785] Bluetooth: hci1: command 0x041b tx timeout [ 264.683764][ T7340] device bridge_slave_1 entered promiscuous mode [ 264.989447][ T7340] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 265.002919][ T7340] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 265.038008][ T7340] team0: Port device team_slave_0 added [ 265.048875][ T7340] team0: Port device team_slave_1 added [ 265.091658][ T7340] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 265.099254][ T7340] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.125625][ T3898] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 265.133265][ T7340] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 265.146886][ T7340] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 265.153900][ T7340] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.191525][ T7340] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 265.435852][ T7340] device hsr_slave_0 entered promiscuous mode [ 265.493918][ T3898] usb 1-1: Using ep0 maxpacket: 8 [ 265.674174][ T7340] device hsr_slave_1 entered promiscuous mode [ 265.743892][ T3898] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 265.783951][ T3898] usb 1-1: can't read configurations, error -71 [ 266.424890][ T7420] IPVS: nq: SCTP 127.0.0.1:0 - no destination available [ 266.771141][ T7422] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1037'. [ 267.375829][ T5789] Bluetooth: hci1: command 0x040f tx timeout [ 267.456865][ T7340] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.546809][ T7428] rdma_op ffff888077e7f1f0 conn xmit_rdma 0000000000000000 [ 267.583392][ T7340] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.601799][ T7405] loop2: detected capacity change from 0 to 32768 [ 267.843778][ T23] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 267.852419][ T7405] XFS (loop2): Mounting V5 Filesystem [ 267.860730][ T7340] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.204293][ T23] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 268.304585][ T23] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 268.548873][ T7405] XFS (loop2): Ending clean mount [ 268.630448][ T7405] XFS (loop2): Quotacheck needed: Please wait. [ 268.661982][ T7340] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.847445][ T7405] XFS (loop2): Quotacheck: Done. [ 268.917417][ T5492] XFS (loop2): Unmounting Filesystem [ 269.094916][ T23] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 269.138988][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.215563][ T23] usb 2-1: Manufacturer: 她蕋멳龜ؔ됛ꦆ뗮齔㗘మᆤ幽埍瀷쬎룱窛퍽黱覝轤㴓犂讯࣍䉙녒ⶇ扚邆镻㢗濇蕃鐍혣☲밉庙랸袰৽夂憬芣稐录빬旟깿ꦇ婞㘳௴ﺋ࣊绾鸓ᬪ哴s [ 269.239023][ C1] vkms_vblank_simulate: vblank timer overrun [ 269.527132][ T23] usb 2-1: SerialNumber: syz [ 269.591629][ T4677] Bluetooth: hci1: command 0x0419 tx timeout [ 269.666129][ T7340] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 269.692985][ T7340] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 269.741434][ T7340] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 269.787243][ T7340] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 270.654009][ T23] usb 2-1: 0:2 : does not exist [ 270.705195][ T23] usb 2-1: USB disconnect, device number 11 [ 270.775988][ T7340] 8021q: adding VLAN 0 to HW filter on device bond0 [ 270.846032][ T4677] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 270.861880][ T4677] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 270.904234][ T7340] 8021q: adding VLAN 0 to HW filter on device team0 [ 270.992950][ T5785] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 271.009367][ T5785] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 271.039328][ T5785] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.046474][ T5785] bridge0: port 1(bridge_slave_0) entered forwarding state [ 271.088206][ T5785] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 271.107160][ T5785] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 271.132234][ T5785] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.139554][ T5785] bridge0: port 2(bridge_slave_1) entered forwarding state [ 271.159877][ T5785] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 271.174420][ T5785] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 271.211361][ T7340] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 271.228689][ T7340] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 271.242360][ T4677] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 271.252330][ T4677] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 271.262861][ T4677] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 271.273342][ T4677] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 271.282759][ T4677] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 271.291779][ T4677] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 271.300544][ T4677] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 271.312799][ T4677] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 271.324495][ T4677] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 271.344222][ T4677] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 271.364592][ T4677] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 271.499110][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 271.507252][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 271.518308][ T7340] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 271.525995][ T5789] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 271.699169][ T3898] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 271.708478][ T3898] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 271.733369][ T7340] device veth0_vlan entered promiscuous mode [ 271.743942][ T5789] usb 3-1: device descriptor read/64, error -71 [ 271.758522][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 271.767287][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 271.783112][ T7340] device veth1_vlan entered promiscuous mode [ 271.792702][ T3898] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 271.802734][ T3898] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 271.816671][ T3898] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 271.850768][ T4677] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 271.859193][ T4677] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 271.868362][ T4677] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 271.886687][ T7340] device veth0_macvtap entered promiscuous mode [ 271.898983][ T7340] device veth1_macvtap entered promiscuous mode [ 271.918582][ T7340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.930524][ T7340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.940582][ T7340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.951036][ T7340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.961290][ T7340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.972052][ T7340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.982212][ T7340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.992676][ T7340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.002969][ T7340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 272.013437][ T7340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.027083][ T7340] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 272.034603][ T5789] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 272.042697][ T4681] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 272.051586][ T4681] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 272.060388][ T4681] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 272.078805][ T7340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 272.090918][ T7340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.101160][ T7340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 272.111815][ T7340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.121679][ T7340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 272.132615][ T7340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.143927][ T7340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 272.154720][ T7340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.164891][ T7340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 272.175745][ T7340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.187567][ T7340] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 272.197376][ T4677] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 272.208404][ T4677] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 272.220356][ T7340] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.230635][ T7340] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.239884][ T5789] usb 3-1: device descriptor read/64, error -71 [ 272.246242][ T7340] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.257396][ T7340] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.342272][ T3987] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 272.365794][ T3987] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 272.374592][ T3994] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 272.385672][ T5789] usb usb3-port1: attempt power cycle [ 272.398175][ T3898] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 272.408046][ T3994] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 272.423251][ T3898] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 272.517992][ T7475] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1052'. [ 272.529929][ T7475] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1052'. [ 272.601305][ T7482] program syz.4.1041 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 272.794246][ T23] Bluetooth: hci2: command 0x0406 tx timeout [ 272.934137][ T7493] IPVS: nq: SCTP 127.0.0.1:0 - no destination available [ 273.581363][ T5789] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 273.653923][ T3998] device hsr_slave_0 left promiscuous mode [ 273.660761][ T3998] device hsr_slave_1 left promiscuous mode [ 273.673131][ T3998] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 273.692086][ T3998] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 273.703740][ T3998] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 273.718336][ T5789] usb 3-1: device descriptor read/8, error -71 [ 273.724855][ T3998] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 273.752472][ T3998] device bridge_slave_1 left promiscuous mode [ 273.759172][ T3998] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.794304][ T3998] device bridge_slave_0 left promiscuous mode [ 274.553030][ T3998] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.721249][ T3998] device veth1_macvtap left promiscuous mode [ 274.740276][ T3998] device veth0_macvtap left promiscuous mode [ 274.773487][ T3998] device veth1_vlan left promiscuous mode [ 274.807666][ T3998] device veth0_vlan left promiscuous mode [ 275.121170][ T7518] usb usb8: usbfs: process 7518 (syz.1.1057) did not claim interface 0 before use [ 275.391465][ T5784] kernel write not supported for file /277/uid_map (pid: 5784 comm: kworker/0:16) [ 275.671953][ T7532] input: syz0 as /devices/virtual/input/input11 [ 276.200757][ T3998] team0 (unregistering): Port device team_slave_1 removed [ 276.288850][ T3998] team0 (unregistering): Port device team_slave_0 removed [ 276.347449][ T3998] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 276.421735][ T7543] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1065'. [ 276.476873][ T3998] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 276.590466][ T3998] bond0 (unregistering): Released all slaves [ 277.091054][ T7549] device ip6tnl1 entered promiscuous mode [ 277.939142][ T3649] Bluetooth: hci0: command 0x0406 tx timeout [ 278.661961][ T7585] rdma_op ffff88807d5b71f0 conn xmit_rdma 0000000000000000 [ 281.384579][ T7641] netlink: 'syz.4.1096': attribute type 8 has an invalid length. [ 281.700085][ T3649] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 281.724574][ T3696] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 281.949333][ T3649] usb 2-1: Using ep0 maxpacket: 8 [ 281.990332][ T7665] xt_TCPMSS: Only works on TCP SYN packets [ 282.074168][ T3649] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 282.093933][ T3696] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 282.113700][ T3649] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 282.138206][ T3696] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 282.210992][ T3649] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 282.226479][ T7673] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1102'. [ 282.255695][ T3696] usb 4-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 282.281263][ T3649] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 282.294471][ T3696] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.334380][ T3649] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 282.470762][ T3696] usb 4-1: config 0 descriptor?? [ 282.723506][ T3649] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 282.901658][ T3649] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.064464][ T3696] hid (null): global environment stack underflow [ 283.092237][ T3696] uclogic 0003:5543:0522.0006: global environment stack underflow [ 283.133393][ T3696] uclogic 0003:5543:0522.0006: item 0 1 1 11 parsing failed [ 283.171280][ T3696] uclogic 0003:5543:0522.0006: parse failed [ 283.198693][ T3696] uclogic: probe of 0003:5543:0522.0006 failed with error -22 [ 283.213838][ T3649] usb 2-1: GET_CAPABILITIES returned 0 [ 283.219394][ T3649] usbtmc 2-1:16.0: can't read capabilities [ 283.302749][ T3696] usb 4-1: USB disconnect, device number 9 [ 283.440664][ T3649] usb 2-1: USB disconnect, device number 12 [ 284.450712][ T7710] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1110'. [ 286.149606][ T3649] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 286.203800][ T4681] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 286.446657][ T5790] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 286.654354][ T4681] usb 3-1: config index 0 descriptor too short (expected 106, got 36) [ 286.682515][ T4681] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 286.858341][ T4681] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 286.955337][ T4681] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00 [ 287.051684][ T4681] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.094745][ T5790] usb 1-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 287.131288][ T5790] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.190647][ T5790] usb 1-1: Product: syz [ 287.200814][ T5790] usb 1-1: Manufacturer: syz [ 287.219116][ T5790] usb 1-1: SerialNumber: syz [ 287.260905][ T5790] usb 1-1: config 0 descriptor?? [ 287.266960][ T4681] usb 3-1: config 0 descriptor?? [ 287.356056][ T5790] i2c-tiny-usb 1-1:0.0: version 6d.cc found at bus 001 address 013 [ 287.478500][ T3649] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 287.489521][ T3649] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 287.500512][ T3649] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 287.513367][ T3649] usb 2-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 287.522528][ T3649] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.534194][ T3649] usb 2-1: config 0 descriptor?? [ 287.937357][ T3649] usb 2-1: USB disconnect, device number 13 [ 288.121328][ T3696] Bluetooth: hci2: command 0x2016 tx timeout [ 288.304291][ T4681] corsair 0003:1B1C:1B3E.0007: unknown main item tag 0x0 [ 288.311476][ T4681] corsair 0003:1B1C:1B3E.0007: unknown main item tag 0x0 [ 288.319876][ T4681] corsair 0003:1B1C:1B3E.0007: unknown main item tag 0x0 [ 288.327020][ T4681] corsair 0003:1B1C:1B3E.0007: unknown main item tag 0x0 [ 288.334102][ T4681] corsair 0003:1B1C:1B3E.0007: unknown main item tag 0x0 [ 288.341652][ T4681] corsair 0003:1B1C:1B3E.0007: failed to start in urb: -90 [ 288.372645][ T4681] corsair 0003:1B1C:1B3E.0007: hidraw0: USB HID v0.00 Device [HID 1b1c:1b3e] on usb-dummy_hcd.2-1/input0 [ 288.394667][ T4681] usb 3-1: USB disconnect, device number 17 [ 288.563805][ T3898] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 288.584033][ T5790] i2c i2c-1: failure reading functionality [ 288.593046][ T5790] i2c i2c-1: connected i2c-tiny-usb device [ 288.616553][ T5790] usb 1-1: USB disconnect, device number 13 [ 288.934092][ T3898] usb 4-1: config 220 has too many interfaces: 184, using maximum allowed: 32 [ 288.943086][ T3898] usb 4-1: config 220 has 1 interface, different from the descriptor's value: 184 [ 288.961079][ T7796] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1142'. [ 288.970746][ T3898] usb 4-1: New USB device found, idVendor=0c45, idProduct=8008, bcdDevice=e1.85 [ 288.981721][ T7796] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1142'. [ 288.997146][ T3898] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.005200][ T7796] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1142'. [ 289.017496][ T7796] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1142'. [ 289.068697][ T3898] gspca_main: sn9c2028-2.14.0 probing 0c45:8008 [ 289.283827][ T3898] gspca_sn9c2028: read1 error -32 [ 289.323857][ T3898] gspca_sn9c2028: read1 error -32 [ 289.427325][ T7808] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 289.567685][ T3696] usb 4-1: USB disconnect, device number 10 [ 289.573538][ T7795] loop4: detected capacity change from 0 to 40427 [ 289.747647][ T7795] F2FS-fs (loop4): Invalid Fs Meta Ino: node(1) meta(262146) root(3) [ 290.339442][ T7795] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 290.591503][ T7795] F2FS-fs (loop4): Found nat_bits in checkpoint [ 290.724350][ T7795] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 290.731541][ T7795] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 291.066326][ T26] audit: type=1326 audit(1723605996.035:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7832 comm="syz.2.1154" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdd614d79f9 code=0x0 [ 291.722281][ T26] audit: type=1804 audit(1723605996.105:98): pid=7842 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1141" name="/newroot/23/file2/bus" dev="loop4" ino=10 res=1 errno=0 [ 291.748299][ T7340] attempt to access beyond end of device [ 291.748299][ T7340] loop4: rw=2049, want=45104, limit=40427 [ 291.760294][ T5788] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 291.791468][ T26] audit: type=1804 audit(1723605996.105:99): pid=7842 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.1141" name="/newroot/23/file2/bus" dev="loop4" ino=10 res=1 errno=0 [ 291.924680][ T5790] Bluetooth: hci0: command 0x0c1a tx timeout [ 292.003704][ T150] block nbd2: Attempted send on invalid socket [ 292.009936][ T150] blk_update_request: I/O error, dev nbd2, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 292.033901][ T7858] VFS: could not find a valid V7 on nbd2. [ 292.306895][ T7871] loop4: detected capacity change from 0 to 1024 [ 292.354059][ T5788] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 292.364802][ T5788] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.372812][ T5788] usb 2-1: Product: syz [ 292.377996][ T5788] usb 2-1: Manufacturer: syz [ 292.382725][ T5788] usb 2-1: SerialNumber: syz [ 292.393162][ T5790] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 292.424604][ T4681] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 292.444752][ T5788] usb 2-1: config 0 descriptor?? [ 292.451721][ T7871] [ 292.454061][ T7871] ====================================================== [ 292.461095][ T7871] WARNING: possible circular locking dependency detected [ 292.468114][ T7871] 5.15.164-syzkaller #0 Not tainted [ 292.473321][ T7871] ------------------------------------------------------ [ 292.480331][ T7871] syz.4.1160/7871 is trying to acquire lock: [ 292.486307][ T7871] ffff888014d96648 (&HFSPLUS_I(inode)->extents_lock){+.+.}-{3:3}, at: hfsplus_file_extend+0x1d2/0x1b10 [ 292.497390][ T7871] [ 292.497390][ T7871] but task is already holding lock: [ 292.504749][ T7871] ffff88807eb160b0 (&tree->tree_lock){+.+.}-{3:3}, at: hfsplus_find_init+0x146/0x1c0 [ 292.514253][ T7871] [ 292.514253][ T7871] which lock already depends on the new lock. [ 292.514253][ T7871] [ 292.524651][ T7871] [ 292.524651][ T7871] the existing dependency chain (in reverse order) is: [ 292.533671][ T7871] [ 292.533671][ T7871] -> #1 (&tree->tree_lock){+.+.}-{3:3}: [ 292.541410][ T7871] lock_acquire+0x1db/0x4f0 [ 292.546441][ T7871] __mutex_lock_common+0x1da/0x25a0 [ 292.552171][ T7871] mutex_lock_nested+0x17/0x20 [ 292.557464][ T7871] hfsplus_file_truncate+0x864/0xb80 [ 292.563275][ T7871] hfsplus_delete_inode+0x170/0x220 [ 292.569001][ T7871] hfsplus_unlink+0x50d/0x7f0 [ 292.573683][ T3696] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 292.574202][ T7871] vfs_unlink+0x359/0x5f0 [ 292.586569][ T7871] do_unlinkat+0x4a3/0x950 [ 292.591510][ T7871] __x64_sys_unlink+0x45/0x50 [ 292.596701][ T7871] do_syscall_64+0x3b/0xb0 [ 292.601645][ T7871] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 292.608068][ T7871] [ 292.608068][ T7871] -> #0 (&HFSPLUS_I(inode)->extents_lock){+.+.}-{3:3}: [ 292.617124][ T7871] validate_chain+0x1649/0x5930 [ 292.622513][ T7871] __lock_acquire+0x1295/0x1ff0 [ 292.627879][ T7871] lock_acquire+0x1db/0x4f0 [ 292.632903][ T7871] __mutex_lock_common+0x1da/0x25a0 [ 292.638619][ T7871] mutex_lock_nested+0x17/0x20 [ 292.643904][ T7871] hfsplus_file_extend+0x1d2/0x1b10 [ 292.649634][ T7871] hfsplus_bmap_reserve+0x101/0x4e0 [ 292.655362][ T7871] hfsplus_rename_cat+0x1cf/0x1090 [ 292.661001][ T7871] hfsplus_link+0x3a9/0x840 [ 292.666021][ T7871] vfs_link+0x65e/0x810 [ 292.670702][ T7871] do_linkat+0x5c8/0x9d0 [ 292.675477][ T7871] __x64_sys_link+0x82/0x90 [ 292.680495][ T7871] do_syscall_64+0x3b/0xb0 [ 292.685443][ T7871] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 292.691876][ T7871] [ 292.691876][ T7871] other info that might help us debug this: [ 292.691876][ T7871] [ 292.702091][ T7871] Possible unsafe locking scenario: [ 292.702091][ T7871] [ 292.709524][ T7871] CPU0 CPU1 [ 292.714877][ T7871] ---- ---- [ 292.720253][ T7871] lock(&tree->tree_lock); [ 292.724755][ T7871] lock(&HFSPLUS_I(inode)->extents_lock); [ 292.733072][ T7871] lock(&tree->tree_lock); [ 292.740086][ T7871] lock(&HFSPLUS_I(inode)->extents_lock); [ 292.745882][ T7871] [ 292.745882][ T7871] *** DEADLOCK *** [ 292.745882][ T7871] [ 292.754128][ T7871] 5 locks held by syz.4.1160/7871: [ 292.759252][ T7871] #0: ffff88807b700460 (sb_writers#13){.+.+}-{0:0}, at: mnt_want_write+0x3b/0x80 [ 292.768510][ T7871] #1: ffff888014d95400 (&type->i_mutex_dir_key#8/1){+.+.}-{3:3}, at: filename_create+0x25c/0x530 [ 292.779152][ T7871] #2: ffff888014d91e00 (&sb->s_type->i_mutex_key#22){+.+.}-{3:3}, at: vfs_link+0x53f/0x810 [ 292.789261][ T7871] #3: ffff88801fb2d198 (&sbi->vh_mutex){+.+.}-{3:3}, at: hfsplus_link+0x234/0x840 [ 292.798565][ T7871] #4: ffff88807eb160b0 (&tree->tree_lock){+.+.}-{3:3}, at: hfsplus_find_init+0x146/0x1c0 [ 292.808470][ T7871] [ 292.808470][ T7871] stack backtrace: [ 292.814343][ T7871] CPU: 0 PID: 7871 Comm: syz.4.1160 Not tainted 5.15.164-syzkaller #0 [ 292.822486][ T7871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 292.832531][ T7871] Call Trace: [ 292.835803][ T7871] [ 292.838734][ T7871] dump_stack_lvl+0x1e3/0x2d0 [ 292.843408][ T7871] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 292.849036][ T7871] ? print_circular_bug+0x12b/0x1a0 [ 292.854226][ T7871] check_noncircular+0x2f8/0x3b0 [ 292.859158][ T7871] ? add_chain_block+0x850/0x850 [ 292.864084][ T7871] ? lockdep_lock+0x11f/0x2a0 [ 292.868758][ T7871] ? validate_chain+0x112/0x5930 [ 292.873682][ T7871] validate_chain+0x1649/0x5930 [ 292.878522][ T7871] ? validate_chain+0x112/0x5930 [ 292.883457][ T7871] ? validate_chain+0x112/0x5930 [ 292.888428][ T7871] ? reacquire_held_locks+0x660/0x660 [ 292.893800][ T7871] ? reacquire_held_locks+0x660/0x660 [ 292.899162][ T7871] ? mark_lock+0x98/0x340 [ 292.903478][ T7871] ? look_up_lock_class+0x77/0x120 [ 292.908584][ T7871] ? register_lock_class+0x100/0x9a0 [ 292.913870][ T7871] ? is_dynamic_key+0x1f0/0x1f0 [ 292.918733][ T7871] ? mark_lock+0x98/0x340 [ 292.923052][ T7871] __lock_acquire+0x1295/0x1ff0 [ 292.927903][ T7871] lock_acquire+0x1db/0x4f0 [ 292.932403][ T7871] ? hfsplus_file_extend+0x1d2/0x1b10 [ 292.937773][ T7871] ? read_lock_is_recursive+0x10/0x10 [ 292.943137][ T7871] ? __might_sleep+0xc0/0xc0 [ 292.947719][ T7871] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 292.953688][ T7871] ? print_irqtrace_events+0x210/0x210 [ 292.959140][ T7871] __mutex_lock_common+0x1da/0x25a0 [ 292.964326][ T7871] ? hfsplus_file_extend+0x1d2/0x1b10 [ 292.969700][ T7871] ? hfsplus_file_extend+0x1d2/0x1b10 [ 292.975291][ T7871] ? mutex_lock_io_nested+0x60/0x60 [ 292.980501][ T7871] ? read_lock_is_recursive+0x10/0x10 [ 292.985862][ T7871] mutex_lock_nested+0x17/0x20 [ 292.990618][ T7871] hfsplus_file_extend+0x1d2/0x1b10 [ 292.995819][ T7871] ? hfsplus_get_block+0x14e0/0x14e0 [ 293.001118][ T7871] ? __mutex_lock_common+0x444/0x25a0 [ 293.006485][ T7871] ? hfsplus_find_init+0x146/0x1c0 [ 293.011594][ T7871] ? mutex_lock_io_nested+0x60/0x60 [ 293.016790][ T7871] hfsplus_bmap_reserve+0x101/0x4e0 [ 293.021988][ T7871] hfsplus_rename_cat+0x1cf/0x1090 [ 293.027093][ T7871] ? mark_lock+0x98/0x340 [ 293.031419][ T7871] ? hfsplus_subfolders_dec+0x110/0x110 [ 293.036955][ T7871] ? print_irqtrace_events+0x210/0x210 [ 293.042410][ T7871] ? number+0xb5a/0xf80 [ 293.046580][ T7871] ? vsprintf+0x30/0x30 [ 293.050744][ T7871] hfsplus_link+0x3a9/0x840 [ 293.055249][ T7871] ? hfsplus_create+0x30/0x30 [ 293.059918][ T7871] ? rwsem_write_trylock+0x166/0x210 [ 293.065195][ T7871] ? clear_nonspinnable+0x60/0x60 [ 293.070216][ T7871] ? inode_permission+0xf7/0x450 [ 293.075149][ T7871] vfs_link+0x65e/0x810 [ 293.079297][ T7871] do_linkat+0x5c8/0x9d0 [ 293.083534][ T7871] ? fsnotify_link+0x220/0x220 [ 293.088290][ T7871] ? getname_flags+0x1ec/0x4e0 [ 293.093063][ T7871] ? lockdep_hardirqs_on+0x94/0x130 [ 293.098252][ T7871] __x64_sys_link+0x82/0x90 [ 293.102766][ T7871] do_syscall_64+0x3b/0xb0 [ 293.107274][ T7871] ? clear_bhb_loop+0x15/0x70 [ 293.111942][ T7871] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 293.117851][ T7871] RIP: 0033:0x7fdd62f189f9 [ 293.122258][ T7871] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 293.141865][ T7871] RSP: 002b:00007fdd61395038 EFLAGS: 00000246 ORIG_RAX: 0000000000000056 [ 293.150351][ T7871] RAX: ffffffffffffffda RBX: 00007fdd630b4f80 RCX: 00007fdd62f189f9 [ 293.158308][ T7871] RDX: 0000000000000000 RSI: 0000000020000d40 RDI: 0000000020000940 [ 293.166272][ T7871] RBP: 00007fdd62f868ee R08: 0000000000000000 R09: 0000000000000000 [ 293.174235][ T7871] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 293.182192][ T7871] R13: 0000000000000000 R14: 00007fdd630b4f80 R15: 00007ffd4a4c71a8 [ 293.190155][ T7871] [ 293.255161][ T5788] i2c-tiny-usb 2-1:0.0: version 6d.cc found at bus 002 address 014 [ 293.414151][ T5790] usb 4-1: Using ep0 maxpacket: 8 [ 293.433878][ T3696] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 293.444947][ T3696] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 293.563864][ T4681] usb 3-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 293.574268][ T4681] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 293.585479][ T4681] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 293.595120][ T4681] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 293.606526][ T5790] usb 4-1: unable to get BOS descriptor or descriptor too short [ 293.613880][ T3696] usb 1-1: New USB device found, idVendor=05ac, idProduct=0272, bcdDevice= 0.40 [ 293.614306][ T4681] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 293.625134][ T3696] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.633413][ T4681] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 293.641591][ T3696] usb 1-1: Product: syz [ 293.660082][ T3696] usb 1-1: Manufacturer: syz [ 293.664706][ T3696] usb 1-1: SerialNumber: syz [ 293.705512][ T3696] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input13 [ 293.723817][ T5790] usb 4-1: config 11 has an invalid interface number: 244 but max is 0 [ 293.732166][ T5790] usb 4-1: config 11 has an invalid descriptor of length 0, skipping remainder of the config [ 293.742463][ T5790] usb 4-1: config 11 has no interface number 0 [ 293.748827][ T5790] usb 4-1: config 11 interface 244 altsetting 5 endpoint 0x3 has invalid wMaxPacketSize 0 [ 293.759129][ T5790] usb 4-1: config 11 interface 244 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 293.772295][ T5790] usb 4-1: config 11 interface 244 has no altsetting 0 [ 293.833992][ T4681] usb 3-1: New USB device found, idVendor=0f11, idProduct=1200, bcdDevice=35.3d [ 293.844745][ T4681] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.852718][ T4681] usb 3-1: Product: syz [ 293.857541][ T4681] usb 3-1: Manufacturer: syz [ 293.862150][ T4681] usb 3-1: SerialNumber: syz [ 293.869290][ T4681] usb 3-1: config 0 descriptor?? [ 293.895418][ T5788] i2c i2c-1: failure reading functionality [ 293.902938][ T5788] i2c i2c-1: connected i2c-tiny-usb device [ 293.915057][ T4681] ldusb 3-1:0.0: Interrupt in endpoint not found [ 293.925271][ T5788] usb 2-1: USB disconnect, device number 14 [ 293.943956][ T5790] usb 4-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=57.8a [ 293.953274][ T5790] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.963388][ T5790] usb 4-1: Product: syz [ 293.967897][ T3011] bcm5974 1-1:1.0: could not read from device [ 293.974368][ T3011] bcm5974: mode switch failed [ 293.987137][ T5790] usb 4-1: Manufacturer: syz [ 293.991855][ T5790] usb 4-1: SerialNumber: syz [ 293.997579][ T5784] Bluetooth: hci0: command 0x0406 tx timeout [ 294.008076][ T3696] usb 1-1: USB disconnect, device number 14 [ 294.023779][ T3011] bcm5974 1-1:1.0: could not read from device [ 294.029862][ T3011] bcm5974: mode switch failed [ 294.035381][ T3011] bcm5974 1-1:1.0: could not read from device [ 294.041466][ T3011] bcm5974: mode switch failed [ 294.131585][ T5784] usb 3-1: USB disconnect, device number 18 [ 294.294523][ T5790] peak_usb 4-1:11.244 can0: unable to request usb[type=0 value=1] err=-71 [ 294.303214][ T5790] peak_usb 4-1:11.244: unable to read PCAN-USB X6 firmware info (err -71) [ 294.365441][ T5790] peak_usb: probe of 4-1:11.244 failed with error -71 [ 294.375183][ T5790] usb 4-1: USB disconnect, device number 11