last executing test programs: 15.526251577s ago: executing program 4 (id=2041): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x17, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xba}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 10.734312979s ago: executing program 4 (id=2047): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x70}}, 0x0) 9.243391411s ago: executing program 1 (id=2049): r0 = syz_open_dev$sndpcmc(&(0x7f0000000200), 0x0, 0x0) mmap$snddsp_control(&(0x7f0000ffc000/0x2000)=nil, 0x1015, 0x2000003, 0x82012, r0, 0x83000000) 9.182349408s ago: executing program 4 (id=2053): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1a34, 0x802, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="0000070000000ada65aa"], 0x0, 0x0, 0x0, 0x0}, 0x0) 9.007676416s ago: executing program 1 (id=2054): r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) write(r0, &(0x7f0000000a00)="0b24d0d4e87a9c9501bf75d5e17108f2f97a1944fe83e3eebe42a566d640bda70cc5ec3f383561585e09ec7bc5785c4a072e2c700a", 0x35) 8.806754394s ago: executing program 1 (id=2058): r0 = socket$nl_route(0x10, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./bus\x00', 0x1810844, &(0x7f0000000180)={[{@iocharset={'iocharset', 0x3d, 'cp874'}}, {@uni_xlate}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'macceltic'}}, {@rodir}, {@uni_xlateno}, {@fat=@time_offset={'time_offset', 0x3d, 0x61}}, {@fat=@codepage={'codepage', 0x3d, '862'}}, {@rodir}, {@rodir}, {@uni_xlate}, {@uni_xlateno}]}, 0x3, 0x350, &(0x7f0000000580)="$eJzs3U9oW3UcAPBv9tKkHcz2IAwF4elN0LJWPOipZXQwzEUl+OcgBtepNHXQYLA7NKsX8Sh41JM3D3rwsLMIinjz4NUJMhUPutvA4ZMkL81Lk3adkM3i53MI331/329+v7c8mtfX5tdXV2LjwkxcvHHjeszOlqK8cnYlbpZiIZIYuBLjKhNyAMDxcDPL4s+s74gtpSkvCQCYst77/+unCpl3vz6sPvPuDwDHXv79/9xhNbMHDVyaypIAgCkbu///yMhwZfRH/eXCbwUAAMfV8y+9/MxqLeK5NJ2N2HyvXW/X4+nh+OrFeDOasR5nYj5uRfQvFLoPpd7jufO1tTNpmnbil4Wodzva9YjNTrvev1JYTXr91ViK+VjI+/OrjSzLknNf1NaW0p6IuNLpzR+bpXZ9Jk7m8/94MtZjOdK4f6w/4nxtbTnNn6C+OejvROwO71t0178Y8/H9a3EpmnEhur2Dy5ra2s5Smp7NaiP97Xq1V9d34B0QAAAAAAAAAAAAAAAAAAAAAAD4VxbTPQt7+99kw/17FhcnjPf2x+n35/sD7fb3B8qqWWTZH+88Xn8/iZH9gfbvz9Oul+PEvT10AAAAAAAAAAAAAAAAAAAA+M9obVei0Wyub7W2L28Ug85Wa/tERHQzb3372VdzMV5zm6Ccz1EYSvPU5Y1GlgyKs2SkJg+S7uSDzKdX91ZcrKnuHcXEZVQPHmo2Tz3880fDzEPJ4Jn/HtYkMfkAk33LKAab9/WXdCf/UXvB8m1qrmVZdlD7zivjXVGKKN/5C3d4kHWDb66/8cATrdNP9jJfZn2PPjb/wrUPP/lto9Hszhy9V7Cy1bqVbTTyf08+2Q4OksL5U4p+UCqeCeXD2ndHM43kh99ffPCD7442e1bMvD2hJukfzuf7hyr9oLvMfUNzk+aamXDyTyE4/fFK4+rOT78etavwRcJGHQAAAAAAAAAAAAAAAAAAcFcUPiueyz/sO3NY11PPTn9lAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHD3DP/+fyHYHcscJfirE+ND1fWtVkTlXh8mAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/c/8EAAD//9HQbnk=") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000001280)=""/4089, 0xff9) r2 = socket(0x2, 0x2, 0x1) bind$unix(r2, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=ANY=[@ANYBLOB="540000001800010029bd7000fddbdf251c800009fd00000800010000060001"], 0x54}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000080000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r3}, 0x10) getrandom(0x0, 0x0, 0xb32625e3f5b7505d) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mm_vmscan_lru_shrink_active\x00', r4}, 0x10) r6 = socket$packet(0x11, 0x2, 0x300) close_range(r6, 0xffffffffffffffff, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='rss_stat\x00', r7}, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff) ioctl$BTRFS_IOC_DEV_INFO(r6, 0xd000941e, &(0x7f0000000580)={0x0, "6f8708b7c5b8f2b394182b0142ec608f"}) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) lseek(r9, 0x0, 0x3) ioctl$SCSI_IOCTL_PROBE_HOST(r9, 0x5385, &(0x7f0000000440)={0x6d, ""/109}) ioctl$BTRFS_IOC_GET_DEV_STATS(r5, 0xc4089434, &(0x7f0000001580)={r8, 0x7, 0x1, [0x7fffffffffffffff, 0x101, 0x4, 0x0, 0xbf8b], [0x9, 0x8, 0x3f, 0x37b, 0x56cfc1da, 0xf13, 0x8, 0x6, 0xa0, 0x3, 0x8, 0x401, 0x9, 0x20, 0x1, 0x3, 0x8, 0x6, 0x9, 0x2, 0x7ff, 0x35, 0x69, 0xfffffffffffffff8, 0x7, 0x8, 0x750, 0xffffffffffffffff, 0xc4cd2694000, 0x3, 0x3, 0x3ff, 0x8000000000000001, 0x7fff, 0xdfb4, 0x7, 0xff, 0x5, 0x0, 0xffffffffffffff81, 0x8, 0x5, 0x7, 0x80000000, 0x3, 0xdd, 0x1f, 0xce, 0x8000000000000000, 0x0, 0x3, 0x5, 0x8, 0x8000, 0x8, 0x3, 0x3, 0xffff, 0x401, 0x40, 0x1, 0xffff, 0x9, 0x4, 0x82, 0x0, 0x80000000, 0x2, 0x7ff, 0x9, 0xb0, 0x2, 0x6, 0x1, 0xfffffffffffffdbb, 0x2, 0x6, 0xffff, 0x2, 0x100000001, 0x100000000000, 0x3, 0x2, 0x88, 0x2, 0x2, 0x5, 0x5, 0x2, 0x2, 0x7fff, 0xfffffffffffffff9, 0x6, 0xfd, 0xffff, 0x3, 0x2e64, 0x400, 0x2, 0x6, 0x6, 0xc2, 0xfff, 0x7fffffff, 0x9, 0x80000001, 0x3f, 0xffffffffffffffff, 0x33, 0x8000000000000000, 0x800, 0x17, 0x3, 0x1, 0x3, 0x100000001, 0x1fffc00, 0x100000000, 0x9, 0xfffffffffffffffe, 0x80000000]}) 7.755990629s ago: executing program 3 (id=2062): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MIN={0x8}]}}}]}]}], {0x14}}, 0xbc}}, 0x0) 7.4808821s ago: executing program 5 (id=2065): r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000380)={0xffffffffffffffff, 0x1, 0x10}, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x19, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000007000000000000000000010018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018580000040000000000000000000000183400000100000000000000000000005ad71000ffffffff18120000", @ANYRES32=r0, @ANYBLOB="0000850000000c000000b700000000000000bf91000000000000b71d95b17858550a7a00000085000000b7200000000000009500"/72], &(0x7f0000000180)='GPL\x00', 0x8, 0x28, &(0x7f00000001c0)=""/40, 0x41000, 0x60, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[0x1, 0x1], 0x0, 0x10, 0x8}, 0x90) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r2 = epoll_create(0x689) r3 = socket(0x11, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000040)={0x10000005}) epoll_pwait(r2, &(0x7f0000000180)=[{}], 0x1, 0xfffffffa, 0x0, 0x0) accept4(r1, 0x0, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, 0x0, 0x0) writev(r4, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001500add427323b470c45b4560a067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = socket(0x10, 0x0, 0x0) write(r6, &(0x7f00000000c0)="240000001a001f001007f4f9002304000a04f511080004000201000208001e8005000000", 0x24) ioctl$sock_inet_SIOCDARP(r5, 0x8955, &(0x7f00000004c0)={{0x2, 0x0, @broadcast}, {0x0, @random="9f444415c302"}, 0xffffff7d, {0x2, 0x0, @broadcast}}) write(0xffffffffffffffff, &(0x7f0000000300)="ec448506d4e9a160a056b43aaf3d9ea65a351ebef55dc622413dc7379c6a4b4b596037cf8df95ce5ac92f3800db2769addf31a3977cb0f43f41dada4c51a806359970b11f3207e22b4a7e618650300418ccad65569b38cc464d374a54ea7d830e2913eb2e03aa04121e5ac4e480069afef6ebae2417e49a205", 0x79) r7 = socket(0x10, 0x2, 0x0) write(r7, &(0x7f0000000800)="240000001e005f031420000000000000000000000100000000000800080008c013000000", 0x24) 7.262702855s ago: executing program 3 (id=2066): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000040)=@getpolicy={0x5c, 0x15, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in=@local}, 0x6e6bba, 0x2}, [@mark={0xc}]}, 0x5c}}, 0x0) 7.260627021s ago: executing program 1 (id=2067): syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000002505a1a440000102030109025c0002010000000904000001a3f45747d649f9a30105240000000d240f8100000000000000000006241a0000000905810300000000000904010000020d00000904010102020d000009058202000000000009050302"], 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, &(0x7f00000002c0)="be", 0x1) 7.036746956s ago: executing program 3 (id=2068): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x36}}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7}, 0x48) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1}) write$binfmt_script(r2, &(0x7f0000000100), 0xfecc) write$binfmt_script(r2, &(0x7f00000002c0)={'#! ', './file0'}, 0xb) 6.758555544s ago: executing program 0 (id=2070): keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000280), &(0x7f0000000940)=ANY=[@ANYBLOB='enc=oaep hash='], 0x0, 0x0) 6.57613394s ago: executing program 4 (id=2072): syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000bc0)={[{@nobarrier}, {@nobarrier}, {@creator={'creator', 0x3d, "bd3c66f5"}}, {@nls={'nls', 0x3d, 'cp437'}}, {@umask={'umask', 0x3d, 0x1f}}, {@umask={'umask', 0x3d, 0xde5}}]}, 0x3, 0x6a4, &(0x7f0000000100)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() getrlimit(0xb, &(0x7f00000007c0)) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000133, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key(&(0x7f00000013c0)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x1217880, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') read$FUSE(r4, &(0x7f0000002140)={0x2020}, 0x2100) 6.531474792s ago: executing program 0 (id=2073): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0xb8, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x6}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x0, 0x0, 0x10}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/bus/input/devices\x00', 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f00000023c0)={{}, 'syz0\x00', 0xe}) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x5) ioctl$UI_DEV_CREATE(r2, 0x5501) pread64(r1, &(0x7f0000000280)=""/4096, 0x1000, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'ip_vti0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vti={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@vti_common_policy=[@IFLA_VTI_LINK={0x8}, @IFLA_VTI_IKEY={0x8}, @IFLA_VTI_FWMARK={0x8}]]}}}]}, 0x48}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') 6.387338545s ago: executing program 5 (id=2074): r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000000)=""/102, 0x66, 0x0, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="120000001a0035", 0x7) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='z', 0x10a63, 0x800, 0x0, 0x4b6ae4f95a5de35b) 5.262265084s ago: executing program 4 (id=2076): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}}, 0x0) 5.193871436s ago: executing program 3 (id=2077): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00'}, 0x90) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000006c0)={0x4, &(0x7f0000000100)=[{0x25, 0x2, 0x2, 0xfffffffe}, {}, {}, {0x6}]}) syz_emit_ethernet(0xbe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x0) open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$SO_COOKIE(r0, 0x1, 0x28, 0x0, &(0x7f00000012c0)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) r2 = socket(0x2a, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002d00)=@newtfilter={0x318, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@filter_kind_options=@f_matchall={{0xd}, {0x2e4, 0x2, [@TCA_MATCHALL_ACT={0x4}, @TCA_MATCHALL_ACT={0x2d4, 0x2, [@m_sample={0x14c, 0xa, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x9}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x3}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x1, 0xdf7, 0x3, 0x0, 0x7}}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x1}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x3}]}, {0xe7, 0x6, "4079d3d97a801512986c5eff8d0d4373bd241bcaf11e1b60d8c95c4921d195614b6840a396e87acd8ee7185f2d85cf1e1ffbbc3bff397e15278c3a52ea758cd676b9293c8fb74474d63133e189a8a04a32164ef6e9fd349701c8df9f425ada736a6c29c6f9f8f05f2940c997249de12c4e6ba72a4955e61b7331c9783501a996debc1e524d58d744c43fd682923dd9d435b18ab8eb683c50dabeedc2e22de174310b9374dd04d1ce3595eb6ead20b8965939c7da418785df09980a9f7050fd7e85103e6d17c308b6bd467ad95aa992a67bfe257b00e45b9f9d8e53cf47b76f1752fb4a"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_gact={0x184, 0x0, 0x0, 0x0, {{0x9}, {0x70, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x497, 0x4}}, @TCA_GACT_PARMS={0x18, 0x2, {0x401, 0xc64f, 0x20000000, 0x6, 0x7fff}}, @TCA_GACT_PARMS={0x18, 0x2, {0x3, 0x9, 0x10000000, 0xbda, 0x6}}, @TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x8000, 0x10000000, 0x1, 0x599}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x24b2}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x930, 0xffffffffffffffff}}]}, {0xe9, 0x6, "4f231723b053d38a6ba70be38304269b4ae72b0570e7edd745d15fd528358d83dec3d1d538f9b3560faf6d7bdf94ea8f8249460d700524ad2a45d2fa805c0b0ce92e33fdb9bd0279840ee4937541280e1e73e0211301ddf0b70934e933f8e780dc6d1cf17210374f7449b0d39668926ff2faac7bf63007adcdf79f0058d29220530168acca28a898c6c69bfb8e25ba3b67d89661f66ed189751f090e6ed10253f7b4721012d670aa2898545d1c28fb06c373b9a66b4af0cb9a7f07a9b0eb27dc0dd4cc5192c6c9b8f46cd60d9c9a9f76c020c367a5cf7f79317541b13b0f220c0feb15127e"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x6}]}}]}, 0x318}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ff9000/0x4000)=nil) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r6, &(0x7f0000000b80)=[{&(0x7f0000000c40)='S', 0x1}], 0x1, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000080)) bind$inet(r7, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r7, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r5, 0x0, r7, 0x0, 0x81, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}) sendmsg$DEVLINK_CMD_SB_GET(0xffffffffffffffff, 0x0, 0x0) 5.193477199s ago: executing program 5 (id=2078): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1e71, 0x2006, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00{\a'], 0x0, 0x0, 0x0, 0x0}, 0x0) 4.879300625s ago: executing program 2 (id=2079): r0 = socket$inet6(0xa, 0x3, 0x86) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in=@local, @in=@broadcast, 0x4e22, 0x6, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x6c}, 0x0, @in=@remote}}, 0xe8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) 4.688721852s ago: executing program 4 (id=2080): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4004040}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000001540)={&(0x7f00000014c0)=[{0x0, 0x0, 0x44, &(0x7f0000000080)="465730e4ba898f01dd3e1f79117d50d99cb2360d4ef3568f4bf5675f44b45c66412f9dd758c68291c15ce7621c9d4e0db62c93f1a05a7b268755b5d17ad0a1a3b2596788"}], 0x1}) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x4f) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000080)="ab553fec94", 0x5) r2 = accept$alg(0xffffffffffffffff, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) write$binfmt_script(r2, &(0x7f0000000600), 0xfec8) r3 = socket(0x0, 0x5, 0x0) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) r4 = socket(0x15, 0x0, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) getsockopt(r4, 0x200000000114, 0x2713, 0x0, &(0x7f0000000100)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) 4.579412929s ago: executing program 2 (id=2081): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="88040000160001002bbd7000fddbdf2500000000000000000000ffff64010101ac1414150000000000000000000000004e2000004e2107ff020020a033000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x488}}, 0x0) 3.783294608s ago: executing program 1 (id=2083): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000008c0), 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0xd6, 0x0, 0x32}, 0x9c) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) prctl$PR_SCHED_CORE(0x3e, 0x80000000000001, 0x0, 0x1, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000e80)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB, @ANYRES32, @ANYBLOB="25003300d0000000080211000001080211000000505050505050000003010000000100da0f000000"], 0x44}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000200)={0x43, 0x18000000}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r4, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0xfffffffe, 0x0, 0x0, 0xc1}}}}, 0x30}}, 0x0) 3.782071457s ago: executing program 2 (id=2084): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$phonet(0x23, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'ip6gre0\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000980)={0x34, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3ff}]}]}]}]}, 0x34}}, 0x0) 3.261193866s ago: executing program 2 (id=2085): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x204092, &(0x7f0000000000), 0x6, 0x50d, &(0x7f00000006c0)="$eJzs3U1vI3cZAPBnHLubbQNOWw6lEtvQF2URrJM0fYk4lEbi5VQJUe7ZkDhRFCdeJU67iVaQfgIQqgCJC5y4IPEBkFA/AkKqBDcOnEAVZOmBCzIae9xNHDs4Wsezm/x+0mT+8//Hfp7HiSfzFk8AV9ZURLwdEWMR8UpElLP+QjbFYXtKv+/+0b2VdEqi2Xz3n0kkWV/3cz6VPSz1ve9E/CA5HXd3/2BzuVar7pzsPri1sbW8Xl2vbs/Pz72x8ObC6wuzA1aSFM8afToi3vrmpz/78W++/dYfvvb+35b+cfOHaVq3s/FedQxDu/RSjJ9YvjzS35tiq0IAAB4Hz0bEMxHxYkR8JcoxFmduRgMAAACPoeY3Jq51mgAAAMDlVIiIiUgKlex634koFCqV9jW8X4gnC7X6buOra/W97dV0LGIySoW1jVp1NrtWeDJKSbo812o/WH61a3k+uwb3w/L1dLk1BgAAAIzGYtf+/6fl9v4/AAAAcMn0Phk/NvI8AAAAgIvjYnwAAAC4/Oz/AwAAwKX23XfeSafm/aN7rfsArL63v7dZf+/WanV3s7K1t1JZqe/cqazX6+u1amWA/wio1et3XovtvbszjeJuY2Z3/2Bpq7633Vhq3dd7qfrMCGoCAAAATnr6hY/+kkTE4devt6bUE9lYKdfMgEdIUuzquP3lnDIBhuLcH/IztXcxiQAj1/03Hbg67OMDSXdH14bBeL9NhT92d9z4v7FscwAAQD6mv+j8P1xVhbwTAHLzk7wTAHIz8LH4qYvNAxi9ktv8wZV36vx/l/F+A6fO//fTbJ4rIQAAYOgm2rPDyM4FTkShUKl8dlowWduoVWcj4vMR8edy6Vq6PJdjvgAAAAAAAAAAAAAAAAAAAAAAAADwOGo2k2gCAAAAl1pE4e9Jdv+v6fLLE93HB55I/lNuzSPi/V+++/O7y43Gzlza/6/P+hu/yPpfzeMIBgAAAFxFpTNHO/vpnf14AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABim+0f3VjrTKON+shjXY7JX/GKMt+bjUYqIJ/+dRPHY45KIGBtC/MMPIuK5XvGTNK2YzLLojl+IiOs5x39qCPHhKvtoMSLe7vX+K8RUa977/VfMpof1yWLrTd4zfmf9N9Zn/fe5AWM8//HvZvrG/yDi+WLv9U8nftIn/ksDxr/9/YODfmPNX0dM9/z7k7RnhewbG1t3Znb3D25tbC2vV9er2/Pzc28svLnw+sLszNpGrZp97Rnjp1/6/eGHfetvBzgev1PnZDvDH/Wr/+UB6//vx3ePnm03S6fjR9x8qffP/7nWvPfrn/5OvJK9POn4dKd92G4fd+O3f7rRL7c0/mqf17/98y83H8Qvnqj/5mDlH6/5V4M9BAC4SLv7B5vLtVp1ZwSNF18b3hMmrUa6FTSi5PNudA52PCr5jOcT/VrkW/u3Hvp5OpvDD/M8fx1aXek+Q++hHFdKAADAhXiw0Z93JgAAAAAAAAAAAAAAAAAAAHB1tf7/f+ycHwT4wvk+aaw75mE+pQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnOl/AQAA//9DhsFC") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x6}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) r3 = socket$igmp6(0xa, 0x3, 0x2) sendmmsg$inet6(r3, &(0x7f00000066c0)=[{{&(0x7f00000019c0)={0xa, 0x0, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[], 0x30}}], 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000002000000000000000200000408000000000000000300000000000000000000000200000000000000000000000000000200"/78], 0x0, 0x56}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000480)='ext4_read_block_bitmap_load\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) 2.720638186s ago: executing program 5 (id=2086): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 2.513858787s ago: executing program 1 (id=2087): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000007bc0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f0000009240)={0x0, 0x0, &(0x7f0000009200)={&(0x7f0000009180)={0x50, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "e081cc0a605cdbcb9a662cc10a"}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}]}, 0x50}}, 0x0) 2.233731289s ago: executing program 5 (id=2088): syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000001540)='./bus\x00', 0x8402, &(0x7f00000005c0)=ANY=[@ANYBLOB="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", @ANYRES16], 0x2, 0x14fe, &(0x7f0000001580)="$eJzs3QuYjtX6MPB1r7UexjTxNslhWPe6H940WCZJckiSQ5IkSZJTQtIkSUJiyCkJSchxkhyGkBwmJo3z+ZBz0mRLkiSnnML6rqndtve//b/s/e39//y/Pffvutb1rvtaz72etd6beZ/nuebwQ9fhtZrUrt6IiMS/BH57SRFCxAghBgkh8gkhAiFE+fjy8dnjeRSk/GsnYf9ej6Zd6xWwa4nrn7Nx/XM2rn/OxvXP2bj+ORvXP2fj+udsXH/GcrKtMwvfwC3ntn/9+X/Mby/8/P//Q/z5n7Nx/f/TnM7zzxzN9f9Pctl7/89lcP1zNq5/zsb1z9m4/jkb1z9n4/ozlpNd6+fP3K5tu9b//hhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOM5Qzn/BVaCPF7/1qvizHGGGOMMcYYY/8+Pve1XgFjjDHGGGOMMcb+54GQQgktApFL5BYxIo+IFdeJOHG9yCvyiYi4QcSLG0V+cZMoIAqKQqKwSBBFRFFhBAorSISimCguouJmUULcIhJFSVFKlBZOlBFJ4lZRVtwmyonbRXlxh6gg7hQVRSVRWVQRd4mq4m5RTdwjqot7RQ1RU9QStcV9oo64X9QVD4h64kFRXzwkGoiHRUPxiGgkHhWNxWOiiXhcNBVPiGaiuWghWopW/1f5r4ie4lXRS/QWKaKP6CteE/1EfzFADBSDxOtisHhDDBFviqFimBgu3hIjxNtipHhHjBKjxRjxrhgrxonxYoKYKCaJVPGemCzeF1PEB2KqmCamixkiTcwUs8SHYraYI+aKj8Q88bGYLxaIhWKRSBefiMViicgQn4ql4jORKZaJ5WKFWClWidVijVgr1on1YoPYKDaJzWKL2Co+F9vEdrFD7BS7xG6xR3wh9oovxT7xlcgSX/+T+Wf/S343ECBAggQNGnJBLoiBGIiFWIiDOMgLeSECEYiHeMgP+aEAFIBCUAgSIAGKQlFAQCAgKAbFIApRKAElIBESoRSUAgcOkiAJysJtUA7KQXkoDxWgAlSESlAJqkAVqApVoRpUg+pQHWpADagFteA+uA/uh7pQF+pBPagP9aEBNICG0BAaQSNoDI2hCTSBptAUmkEzaAEtoBW0gtbQGtpAG2gH7aA9tIcO0AGSIRk6QkfoBJ2gM3SGLtAFukJX6AbdoTu8Aq/Aq/Aq9IYasg/0hb7QD/rBABgIA+F1GAxvwBvwJgyFYTAc3oK34G0YCWdgFIyGMTAGqspxMB4mAMlJkAqpMBkmwxSYAlNhGkyDGZAGM2EWzILZMAfmwEcwDz6Gj2EBLIBFkA7psBiWQAZkwFI4C5mwDJbDClgJq2AlrIG1sAbWwwZYD5tgE2yBLfA5fA7bYTvshJ2wG3bDF/AFfAlfwlDIgizYD/vhAByAg3AQDsEhOAyH4QgcgaNwFI7BMTgOJ+AknIDTcBrOwFk4B+fgAlyAi3ARLsPl7P/8MpuWWuaSuWSMjJGxMlbGyTiZV+aVERmR8TJe5pf5ZQFZQBaShWSCTJBFZVGJEiXJUBaTxWRURmUJWUImykRZSpaSTjqZJJNkWVlWlpPlZHl5h6wg75QVZSXZ1lWRVWRV2c5Vk/fI6rK6rCFrylqytqwt68g6sq6sK+vJerK+rC8byIdlQ9kHBsCjMrsyTeQwaCqHQzPZXLaQLeXb8KRsLUdCG9lWtpNPy9EwCjrI1i5ZPic7yvHQSb4gJ8CLsoucBF3ly7Kb7C57yFdkT9nG9ZK95VToI/vKGdBP9pcD5EA5G2rK7IrVkm/KoXKYHC7fkovgbTlSviNHydFyjHxXjpXj5Hg5QU6Uk2SqfE9Olu/LKfIDOVVOk9PlDJkmZ8pZ8kM5W86Rc+VHcp78WM6XC+RCuUimy0/kYrlEZshP5VL5mcyUy+RyuUKulKvkarlGrpXr5Hq5QW6Um+RmuUVulZ/LbXK73CF3yl1yt9wjv5B75Zdyn/xKZsmv5X75J3lAfiMPym/lIfmdPCy/l0fkD/Ko/FEekz/J4/KEPClPydPyZ3lGnpXn5Hl5Qf4iL8pL8rL0UihQUimlVaByqdwqRuVRseo6FaeuV3lVPhVRN6h4daPKr25SBVRBVUgVVgmqiCqqjEJlFalQFVPFVVTdrEqoW1SiKqlKqdLKqTIqSd2qyqrbVDl1uyqv7lAV1J2qoqqkKqsq6i5VVd2tqql7VHV1r6qhaqpaqra6T9VR96u66gFVTz2o6quHVAP1sGqoHlGN1KOqsXpMNVGPq6bqCdVMNVctVEvVSj2pWqunVBvVVrVTT6v26hnVQT2rktVzqqN6XnVSL6jO6kXVRb2kuqqXVTfVXfVQl9Rl5VUv1VulqD6qr3pN9VP91QA1UA1Sr6vB6g01RL2phqpharh6S41Qb6uR6h01So1WY9S7aqwap8arCWqimqRS1XtqsnpfTVEfqKlqmpquZqg0NVMN+PNMc/+B/Pf/Tv6QX8++RW1Vn6ttarvaoXaqXWq32qP2qL1qr9qn9qkslaX2q/3qgDqgDqqD6pA6pA6rw+qIOqKOqqPqmDqmjqsT6rw6pU6rn9UZdVadVefVBXVBXfzzeyA0aKmV1jrQuXRuHaPz6Fh9nY7T1+u8Op+O6Bt0vL5R59c36QK6oC6kC+sEXUQX1Uajtpp0qIvp4jqqb9Yl9C06UZfUpXRp7XQZnaRv/Zfzr7a+VrqVbq1b6za6jW6n2+n2ur3uoDvoZJ2sO+qOupPupDvrzrqL7qK76q66m+6me+geuqfuqb0QIkWn6L76Nd1P99cD9EA9SL+uB+vBeogeoofqoXq4Hq5H6BF6pB6pR+lReoweo8fqsXq8Hq8n6ok6VafqyXqynqKn6Kl6qp6up+s0naZn6Vl6tp6t5+q5ep6ep+fr+XqhXqjTdbperBfrDJ2hl+qlOlMv08v0Cr1Cr9Kr9Bq9Rq/T6/QGvUFv0pt0pv79GzR36B16l96l9+g9eq/eq/fpfTpLZ+n9er8+oA/og/qgPqQP6cP6sD6ij+ij+qg+po/p4/q4PqlP6tP6tD6jz+hz+py+oC/oi/qivqwvZ1/2BTKQgQ50kCvIFcQEMUFsEBvEBXFB3iBvEAkiQXwQH+QPbgoKBAWDQkHhICEoEhQNTICBDSgIg2JB8SAa3ByUCG4JEoOSQamgdOCCMkFScGtQNrgtKBfcHpQP7ggqBHcGFYNKQeWgSnBXUDW4O6gW3BNUD+4NagQ1g1pB7eC+oE5wf1A3eCCoFzwY1A8eChoEDwcNg0eCRsGjQePgsaBJ8HjQNHgiaBY0D1oELYNW/9b5vT9T8CnXy/Q2KaaP6WteM/1MfzPADDSDzOtmsHnDDDFvmqFmmBlu3jIjzNtmpHnHjDKjzRjzrhlrxpnxZoKZaCaZVPOemWzeN1PMB2aqmWammxkmzcw0s8yHZraZY+aaj8w887GZbxaYhWaRSTefmMVmickwn5ql5jOTaZaZ5WaFWWlWmdVmjVlr1pn1ZoPZaDaZzWaL2Wo+N9vMdrPD7DS7zG6zx3xh9povzT7zlckyX5v95k/mgPnGHDTfmkPmO3PYfG+OmB/MUfOjOWZ+MsfNCXPSnDKnzc/mjDlrzpnz5oL5xVw0l8xl47Mv7rM/3lGjxlyYC2MwBmMxFuMwDvNiXoxgBOMxHvNjfiyABbAQFsIETMCiWBSzERIWw2IYxSiWwBKYiIlYCkuhQ4dJmIRlsSyWw3JYHstjBayAFbEiVsbs+5G78G68G+/Be/BevBdrYk2sjbWxDtbBulgX62E9rI/1sQE2wIbYEBthI2yMjbEJNsGm2BSbYTNsgS2wFbbC1tga22AbbIftsD22xw7YAZMxGTtiR+yEnbAzdsYu2AW7Ylfsht2wB/bAntgTe2EvTMEU7It9sR/2wwE4AAfhIByMg3EIDsGhOBSH43AcgSNwJI7EUTgax+C7OBbH4XicgBNxEqZiKk7GyTgFp+BUnIrTcTqmYRrOwlk4G2fjXJyL83Aezsf5uBAXYjqm42JcjBmYgUtxKWZiJi7H5bgSV+JqXI1rcS2ux/W4ETfiZtyMW3ErbsNtuAN34C7chXtwD+7FvbgP92EWZuF+3I8H8AAexIN4CA/hYTyMR/AIHsWjeAyP4XE8DifxJJ7G03gGz+A5PIcX8Be8iJfwMnqMsXlsrL3OxtnrbV6bz8bYPL2FEH+JC9nCNsEWsUWtsQVswb+J0VqbaEvaUra0dbaMTbK3/iGuaCvZyraKvctWtXfban+I69j7bV37gK1nH7S17X1/E9e3D9kG9nHb0D5hG9nmtrFtaZvYx21T+4RtZpvbFralbW+fsR3sszbZPmc72uf/EC+2S+xau86utxvsXvulPWfP2yP2B3vB/mJ72d52kH3dDrZv2CH2TTvUDvtDPMa+a8facXa8nWAn2kl/iKfbGTbNzrSz7Id2tp3zhzjdfmLn2Qw73y6wC+2iX+PsNWXYT+1S+5nNtMvscrvCrrSr7Gq75i9rXWE32c12i91jv7Db7Ha7w+60u+zuX+PsfeyzX9ks+7U9bL+3B+w39qA9ag/Z736Ns/d31P5oj9mf7HF7wp60p+xp+7M9Y8/+uv/svZ+yl+xl660gIEmKNAWUi3JTDOWhWLqO4uh6ykv5KEI3UDzdSPnpJipABakQFaYEKkJFyRCSJaKQilFxitLNVIJuoUQqSaWoNDkqQ0l0K5Wl26gc3U7l6Q6qQHdSRapElakK3UVV6W6qRvdQdbqXalBNqkW16T6qQ/dTXXqA6tGDVJ8eogb0MDWkR6gRPUqN6TFqQo9TU3qCmlFzakEtqRU9Sa3pKWpDbakdPU3t6RnqQM9SMj1HHel56kQvUGd6kbrQS9SVXqZu1J160CvUk16lXtSbUqgP9aXXqB/1pwE0kAbR6zSY3qAh9CYNpWE0nN6iEfQ2jaR3aBSNpjH0Lo2lcTSeJtBEmkSp9B5NpvdpCn1AU2kaTacZlEYzaRZ9SLNpDs2lj2gefUzzaQEtpEWUTp/QYlpCGfQpLaXPKJOW0XJaQStpFa2mNbSW1tF62kAbaRNtpi20lT6nbbSddtBO2kW7aQ99QXvpS9pHX1EWfU376U90gL6hg/QtHaLv6DB9T0foBzpKP9Ix+omO0wk6SafoNP1MZ+gsnaPzdIF+oYt0iS6TJxFCKEMV6jAIc4W5w5gwTxgbXhfGhdeHecN8YSS8IYwPbwzzhzeFBcKCYaGwcJgQFgmLhibE0IYUhmGxsHgYDW8OS4S3hIlhybBUWDp0YZkwKbw1LBveFpYLbw/Lh3eEFcI7w4phpbByWCW8K6wa3h1WC+8Jq4f3hjXCmmGtsHZ4X1gnvD+sGz4Q1gsfDMuFD4UNwofDhuEjYaPw0bBx+FjYJHw8bBo+ETYLm4ctwpZhq/DJsHX4VNgmbBu2C58O24fPhB3CZ8Pk8LmwY/j8VcdTwj5h3/C18LXQ+wfUwuiiaHr0k+ji6JJoRvTT6NLoZ9HM6LLo8uiK6Mroqujq6Jro2ui66ProhujG6Kbo5uiWqPe1cwsHTjrltAtcLpfbxbg8LtZd5+Lc9S6vy+ci7gYX7250+d1NroAr6Aq5wi7BFXFFnXHorCMXumKuuIu6m10Jd4tLdCVdKVfaOVfGJbmWrpVr5Vq7p1wb19a1c0+7p90z7hn3rHvWPec6uuddJ/eC6+xedF3cS+4l97Lr5rq7Hu4V19O96nq53i7Fpbi+rq/r5/q5AW6AG+QGucFusBvihrihbqgb7oa7EW6EG+lGulFulBvjxrixbqwb78a7iW6iS3WpbrKb7Ka4KW6qm+qmu+kuzaW5WW6Wm+1mu7lurpvn5rn5br5b6Ba6dJfuFrvFLsNluKVuqct0mW65W+5WupVutVvt1rq1br1b7za6jW6z2+y2uq1um9vmdrgdbpfb5fa4PW6v2+v2uX0uy2W5/W6/O+AOuIPuW3fIfecOu+/dEfeDO+p+dMfcT+64O+FOulPutPvZnXFn3Tl33l1wv7iL7pK77LxLjbwXmRx5PzIl8kFkamRaZHpkRiQtMjMyK/JhZHZkTmRu5KPIvMjHkfmRBZGFkUWR9MgnkcWRJZGMyKeRpZHPIpmRZZHlkRWRlZFVEe+LbAt9MV/cR/3NvoS/xSf6kr6UL+2dL+OT/K2+rL/Nl/O3+/L+Dl/B3+kr+kq+sn/CN/PNfQvf0rfyT/rW/infxrf17fzTvr1/xnfwz/pk/5zv6J/3nfwLvrN/0XfxL/mu/mXfzXf3Pfwrvqd/1ffyvX2K7+P7+td8P9/fD/AD/SD/uh/s3/BD/Jt+qB/mh/u3/Aj/th/p3/Gj/Gg/xr/rx/pxfryf4Cf6ST7Vv+cn+/f9FP+Bn+qn+el+hk/zM/0s/6Gf7ef4uf4jP89/7Of7BX6hX+TT/Sd+sV/iM/ynfqn/zGf6ZX65X+FX+lV+tV/j1/p1fr3f4Df6TX6z3+K3+s/9Nr/d7/A7/S6/2+/xX/i9/ku/z3/ls/zXfr//kz/gv/EH/bf+kP/OH/bf+yP+B3/U/+iP+Z/8cX/Cn/Sn/Gn/sz/jz/pz/ry/4H/xF/0lf5l/Zo0xxhhj7B+irjLe57/JkX/u9xVCXL+98KH/Or6xwG/9/rkT2keEEM/17vro761GjZSUlD8fm6lEUHyBECJyJT+XuBIvE+3EMyJZtBVl/zIe81fn6i+7X6CrzB+9Q4jYv8rJzv89vjL/bX93//3luHlXnX+BEInFr+TkEVfiK/OX+2/mL9j6KvPn+SZViDZ/lRMnrsRX5k8ST4nnRfLfHMkYY4wxxhhjjP2mv6zc+Wr3t9n35wn6Sk5ucSX+e/fnjDHGGGOMMcYY+9/lxe49nn0yObltZ+78T3V8vt/e6v8t6+EOd/6BzrX+ysQYY4wxxhj7d7ty0X+tV8IYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjOVc/y9+ndjv57ra3xpkjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHG/lP9nwAAAP//sjE7Eg==") r0 = syz_open_dev$vim2m(&(0x7f0000000b80), 0x6, 0x2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x40000000, 0xfffefffc, 0x1}, 0x48) socket$packet(0x11, 0x2, 0x300) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) write$vhost_msg_v2(0xffffffffffffffff, 0x0, 0x0) write$vhost_msg_v2(0xffffffffffffffff, 0x0, 0x0) r4 = syz_io_uring_setup(0x183e, &(0x7f0000000080)={0x0, 0x0, 0x2, 0xffffffff, 0x122, 0x0, r1}, &(0x7f0000000100)=0x0, &(0x7f00000001c0)) syz_io_uring_submit(r5, 0x0, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0xb, 0x0, @fd, 0x0, 0x0, 0x7bf, 0x2, 0x0, {0x0, 0x0, r2}}) io_uring_enter(r4, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x4008324, 0x10100, 0x3}, 0x0, &(0x7f00000001c0)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index}) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) r6 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000140)='dns_resolver\x00', 0x0, &(0x7f0000000080)='\x00\x00\x00\x00\x00\x00', 0x6, r6) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000bc0)={0x0, 0x3132564e}) r7 = creat(&(0x7f0000000300)='./bus\x00', 0x20) r8 = open(&(0x7f0000000400)='./bus\x00', 0x16543e, 0x0) mmap(&(0x7f00002b2000/0x2000)=nil, 0x2000, 0x7ffffe, 0x11, r8, 0x0) ftruncate(r8, 0x7fff) fcntl$setstatus(r7, 0x4, 0x6800) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x77359400}}, 0x0) 1.102292304s ago: executing program 2 (id=2089): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x345000, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000040)=0x1b3a, 0x4) setsockopt$sock_int(r1, 0x1, 0x29, &(0x7f0000000140)=0x6, 0x4) sendto$inet(r1, &(0x7f0000000080)='m', 0x1, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000180)='./file0\x00', 0x42, &(0x7f00000001c0)=ANY=[], 0x4, 0x269, &(0x7f00000005c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1817c1, 0x164) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r3 = fanotify_init(0x200, 0x0) fanotify_mark(r3, 0x1, 0x4800003e, r2, 0x0) recvmsg(r1, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002040)=""/183, 0x10}, 0x2000) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', @broadcast}) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x0, 0x0, 0x0, 0x48c}}) 986.317621ms ago: executing program 0 (id=2090): r0 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r1, 0x0) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000280)={0x3000000e}) 698.319012ms ago: executing program 3 (id=2091): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000580)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@msize}]}}) 519.378837ms ago: executing program 0 (id=2092): r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x80000000) 350.627496ms ago: executing program 0 (id=2093): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x24, r1, 0x331, 0x0, 0x0, {0x8}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}}, 0x0) 265.765761ms ago: executing program 3 (id=2094): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0xd9, 0x72, 0xa4, 0x40, 0x20b7, 0x1540, 0xb75a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000100)={0x0, 0x0, 0x3, "0f617f"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000008c0)={0x2c, &(0x7f0000000600)={0x0, 0x0, 0x8, "0413260c91892db8"}, 0x0, 0x0, 0x0, 0x0}) 229.160371ms ago: executing program 5 (id=2095): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000}, 0x1e) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)={0x50, 0x2, 0x9, 0x5, 0x0, 0x0, {}, [@NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_IP={0x12, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x50}}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000080)={r5, 0x1, 0x6, @remote}, 0x10) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001740)='memory.events\x00', 0x275a, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000040)={0x68, r9, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_FRAME={0x4b, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1}, {}, @broadcast, @device_a, @random="a5fcc8639e98"}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @void, @val={0x25, 0x3}, @void, @void, @void, @val={0x72, 0x6}, @void, @void}}]}, 0x68}}, 0x0) write$binfmt_script(r7, &(0x7f0000000000), 0x208e24b) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000140)={0x40000001}) syz_emit_ethernet(0x0, 0x0, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r11, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r12, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r13, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 60.805481ms ago: executing program 0 (id=2096): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000009c0)={0x54, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x28, 0x33, @reassoc_resp={{{0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, @device_a, @device_a, @random="278d10637d2d", {0xc}, @value}, 0x0, 0x0, @default, @val, @void}}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}]]}, 0x54}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x2, [@struct={0x0, 0x2, 0x0, 0x4, 0x0, 0x8, [{0x0, 0x3}, {0x0, 0x2}]}, @ptr, @restrict={0x0, 0x0, 0x0, 0x4}]}}, 0x0, 0x56}, 0x20) waitid(0x1, r4, &(0x7f0000001300), 0x8, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)={0x24, 0x2, 0x3, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1000}, [@NFQA_CFG_MASK={0x8}, @NFQA_CFG_FLAGS={0x8}]}, 0x24}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000017c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1, '\x00', 0x0, r7, 0x0, 0x1}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) dup2(0xffffffffffffffff, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000400)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) 0s ago: executing program 2 (id=2097): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, &(0x7f0000000380)}) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='huge=always,mpol=interleave']) chdir(&(0x7f0000000140)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r5, &(0x7f0000000200), 0xf000) ioctl$FS_IOC_RESVSP(r4, 0x40305829, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xeffe}) kernel console output (not intermixed with test programs): eth1 [ 608.164868][T11790] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 608.186077][T11790] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 608.493752][T11790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 608.563203][T11790] 8021q: adding VLAN 0 to HW filter on device team0 [ 608.674011][T11790] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 608.693741][T11790] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 608.967930][T11993] netlink: 'syz.1.1642': attribute type 11 has an invalid length. [ 609.750319][T11841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 609.757283][T11841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 609.850601][T11841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 609.891689][T11841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 609.911467][T11841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 609.953450][T11841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 610.023567][ T9355] bridge0: port 1(bridge_slave_0) entered blocking state [ 610.030838][ T9355] bridge0: port 1(bridge_slave_0) entered forwarding state [ 610.069001][T12012] loop5: detected capacity change from 0 to 512 [ 610.082469][ T9355] bridge0: port 2(bridge_slave_1) entered blocking state [ 610.089731][ T9355] bridge0: port 2(bridge_slave_1) entered forwarding state [ 610.287927][T12012] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 610.302918][T12012] ext4 filesystem being mounted at /34/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 610.461446][T12012] EXT4-fs error (device loop5): ext4_add_entry:2435: inode #2: comm syz.5.1645: Directory hole found for htree leaf block 0 [ 610.706424][ T63] bridge_slave_1: left allmulticast mode [ 610.719982][ T63] bridge_slave_1: left promiscuous mode [ 610.729047][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 611.614519][ T63] bridge_slave_0: left allmulticast mode [ 611.631589][ T63] bridge_slave_0: left promiscuous mode [ 611.637423][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 611.746585][T11177] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 611.824101][T12010] loop1: detected capacity change from 0 to 32768 [ 611.872693][T12010] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1646 (12010) [ 611.909528][T12010] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 611.922793][T12010] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 611.933971][T12010] BTRFS info (device loop1): using free-space-tree [ 612.023408][T12042] loop5: detected capacity change from 0 to 1024 [ 612.031836][T12042] EXT4-fs: Ignoring removed nomblk_io_submit option [ 612.048185][T12042] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 612.077284][T12042] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 612.108488][ T29] audit: type=1800 audit(1723223230.828:205): pid=12010 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1646" name="bus" dev="loop1" ino=263 res=0 errno=0 [ 612.325672][T10703] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 612.697784][ T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 612.711520][ T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 612.723833][ T63] bond0 (unregistering): Released all slaves [ 612.818616][T11841] hsr_slave_0: entered promiscuous mode [ 612.842164][T11841] hsr_slave_1: entered promiscuous mode [ 612.868096][T11841] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 612.890854][T11841] Cannot create hsr debugfs directory [ 612.916610][T12030] netlink: 'syz.5.1651': attribute type 21 has an invalid length. [ 612.930808][T12030] netlink: 156 bytes leftover after parsing attributes in process `syz.5.1651'. [ 612.953281][T11790] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 613.043647][T11177] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 613.389796][T12049] loop1: detected capacity change from 0 to 32768 [ 613.438526][T12049] XFS (loop1): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 613.505006][ T29] audit: type=1326 audit(1723223232.218:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12058 comm="syz.3.1658" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe6785779f9 code=0x0 [ 613.527613][T12059] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 613.563355][T12049] XFS (loop1): Ending clean mount [ 613.595712][T12049] XFS (loop1): Quotacheck needed: Please wait. [ 613.691198][T12049] XFS (loop1): Quotacheck: Done. [ 613.780087][ T63] hsr_slave_0: left promiscuous mode [ 613.798942][ T63] hsr_slave_1: left promiscuous mode [ 613.807487][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 613.821783][ T63] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 613.839820][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 613.858512][ T63] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 613.934555][ T63] veth1_macvtap: left promiscuous mode [ 613.949829][ T63] veth0_macvtap: left promiscuous mode [ 613.956723][ T63] veth1_vlan: left promiscuous mode [ 613.962441][ T63] veth0_vlan: left promiscuous mode [ 614.006851][T10703] XFS (loop1): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 614.319423][T12078] loop1: detected capacity change from 0 to 1024 [ 614.327892][T12078] EXT4-fs: Ignoring removed orlov option [ 614.335282][T12078] EXT4-fs (loop1): Test dummy encryption mode enabled [ 614.344969][T12078] EXT4-fs (loop1): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 614.398639][T12078] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 614.486895][T10703] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 615.103291][ T63] team0 (unregistering): Port device team_slave_1 removed [ 615.217576][ T63] team0 (unregistering): Port device team_slave_0 removed [ 617.404459][T12088] loop5: detected capacity change from 0 to 512 [ 617.432477][T12088] EXT4-fs (loop5): blocks per group (71) and clusters per group (20800) inconsistent [ 618.942181][ T25] Bluetooth: Configuration file not found ar3k/ramps_0xd26c879d_26.dfu [ 618.962722][ T25] Bluetooth: Loading sysconfig file failed [ 618.981006][ T25] ath3k 4-1:0.0: probe with driver ath3k failed with error -110 [ 618.992680][ T25] usb 4-1: USB disconnect, device number 16 [ 619.027133][ T9180] udevd[9180]: failed to send result of seq 25607 to main daemon: Connection refused [ 619.197674][T11790] veth0_vlan: entered promiscuous mode [ 619.267514][T12098] team_slave_0: entered promiscuous mode [ 619.273586][T12098] team_slave_1: entered promiscuous mode [ 619.285761][T12098] team_slave_0: left promiscuous mode [ 619.291303][T12098] team_slave_1: left promiscuous mode [ 619.343056][T11790] veth1_vlan: entered promiscuous mode [ 619.514705][T11790] veth0_macvtap: entered promiscuous mode [ 619.552223][T11790] veth1_macvtap: entered promiscuous mode [ 619.675009][T11790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 619.710860][T11790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 619.750219][T11790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 619.780622][T11790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 619.810323][T11790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 619.823630][T11790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 619.833517][T11790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 619.844181][T11790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 619.856813][T11790] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 619.883939][T11790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 619.894824][T11790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 619.910915][T11790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 619.942170][T11790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 619.966148][T11790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 619.988847][T11790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 620.008557][T11790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 620.019137][T12104] loop1: detected capacity change from 0 to 512 [ 620.019879][T12104] ext4: Unexpected value for 'nobarrier' [ 620.048410][T11790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 620.081221][T11790] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 620.099466][T11790] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 620.147420][T11790] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 620.176228][T11790] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 620.204444][T11790] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 620.522390][ T2508] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 620.547017][ T2508] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 620.661735][T11821] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 620.670606][ T5387] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 620.678438][ T5387] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 620.764310][T11821] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 620.834518][T11821] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 620.873402][T11821] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 620.971366][T11841] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 620.989948][T11841] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 621.073436][T11841] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 621.108583][T11841] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 621.477604][T11821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 621.667949][T11841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 621.719087][T11821] 8021q: adding VLAN 0 to HW filter on device team0 [ 621.766923][ T5387] bridge0: port 1(bridge_slave_0) entered blocking state [ 621.774090][ T5387] bridge0: port 1(bridge_slave_0) entered forwarding state [ 621.857305][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 621.864611][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 621.907429][T11841] 8021q: adding VLAN 0 to HW filter on device team0 [ 621.928428][T12118] loop0: detected capacity change from 0 to 8192 [ 621.973834][ T2508] bridge0: port 1(bridge_slave_0) entered blocking state [ 621.981045][ T2508] bridge0: port 1(bridge_slave_0) entered forwarding state [ 622.090188][ T2508] bridge0: port 2(bridge_slave_1) entered blocking state [ 622.097448][ T2508] bridge0: port 2(bridge_slave_1) entered forwarding state [ 622.173307][T11821] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 622.205597][T11821] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 622.377071][T11841] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 622.469613][T12133] loop5: detected capacity change from 0 to 1024 [ 622.489957][T12133] EXT4-fs: Ignoring removed orlov option [ 622.549186][T12133] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 622.681021][T12133] can0: slcan on ptm0. [ 622.776386][T12150] IPv6: NLM_F_REPLACE set, but no existing node found! [ 622.804352][T11821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 623.135747][T11841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 623.184464][T12157] loop1: detected capacity change from 0 to 1764 [ 623.191747][T12157] iso9660: Unknown parameter 'oession' [ 623.295234][T11841] veth0_vlan: entered promiscuous mode [ 623.382826][T11841] veth1_vlan: entered promiscuous mode [ 623.439978][T11177] EXT4-fs error (device loop5): ext4_readdir:260: inode #2: block 16: comm syz-executor: path /45/file0: bad entry in directory: inode out of bounds - offset=76, inode=2320, rec_len=16, size=1024 fake=0 [ 623.512274][T11841] veth0_macvtap: entered promiscuous mode [ 623.596451][T11841] veth1_macvtap: entered promiscuous mode [ 623.754915][T12164] loop1: detected capacity change from 0 to 512 [ 623.767923][T11841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 623.792457][T11841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 623.835813][T11841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 623.866943][T12164] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.1683: corrupted in-inode xattr: invalid ea_ino [ 623.882655][ T1255] ieee802154 phy0 wpan0: encryption failed: -22 [ 623.889000][ T1255] ieee802154 phy1 wpan1: encryption failed: -22 [ 623.895930][T12164] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.1683: couldn't read orphan inode 15 (err -117) [ 623.927352][T12164] EXT4-fs (loop1): mounted filesystem 00000007-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 623.934173][T11841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 623.951249][T11841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 623.967662][T11841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 623.982044][T11841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 623.994987][T11841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 624.006372][T11841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 624.027213][T11841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 624.073769][T11841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 624.111067][T11841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 624.134446][T11841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 624.144614][T11841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 624.155552][T11841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 624.165808][T11841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 624.176612][T11841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 624.191572][T11841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 624.202410][T11841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 624.215171][T11841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 624.446204][T11841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 624.482568][T11841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 624.543177][T12173] xt_NFQUEUE: number of queues (65534) out of range (got 131068) [ 625.458804][T10703] EXT4-fs (loop1): unmounting filesystem 00000007-0000-0000-0000-000000000000. [ 625.510696][T11841] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 625.539026][T11841] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 625.549771][T11841] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 625.563581][T11841] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 625.693923][T12182] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 625.837176][T11821] veth0_vlan: entered promiscuous mode [ 625.872867][T12162] can0 (unregistered): slcan off ptm0. [ 625.959367][T11821] veth1_vlan: entered promiscuous mode [ 625.981294][T12187] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1691'. [ 625.996837][T12162] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 626.101668][ T9343] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 626.128783][ T9343] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 626.299948][T11821] veth0_macvtap: entered promiscuous mode [ 626.312629][ T9355] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 626.330412][ T9355] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 626.353236][T11821] veth1_macvtap: entered promiscuous mode [ 626.488821][ T5387] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 626.593627][T12198] loop2: detected capacity change from 0 to 512 [ 626.600546][T12199] loop1: detected capacity change from 0 to 256 [ 626.614565][T11821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 626.626816][T12199] exfat: Deprecated parameter 'namecase' [ 626.635818][T11821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 626.648384][T12198] EXT4-fs (loop2): blocks per group (71) and clusters per group (20800) inconsistent [ 626.668181][T11821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 626.688178][T11821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 626.789445][T12199] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 626.812531][T11821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 626.847045][T11821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 626.890720][T11821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 626.934990][T11821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 626.980445][T11821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 627.880308][T11821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 627.940291][T11821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 628.000211][T11821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 628.044459][T11821] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 628.079669][ T5225] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 628.103553][ T5225] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 628.114926][ T5225] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 628.123286][ T5225] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 628.135279][ T5225] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 628.142756][ T5225] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 628.236286][ T5387] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 628.278377][T12207] loop1: detected capacity change from 0 to 47 [ 628.321519][T12197] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1697'. [ 628.369580][T11821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 628.411194][T11821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 628.458962][T11821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 628.490025][T11821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 628.514662][T11821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 628.541577][T12210] MINIX-fs: deleted inode referenced: 9 [ 628.558873][T11821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 628.570334][T12210] MINIX-fs: deleted inode referenced: 9 [ 628.580168][T11821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 628.608271][T11821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 628.618492][T11821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 628.632081][T11821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 628.644847][T11821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 628.671329][ T5225] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 628.683057][ T5225] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 628.700508][ T5225] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 628.707634][T11821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 628.718726][ T5225] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 628.720081][T11821] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 628.736641][ T5225] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 628.744245][ T5225] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 628.809890][ T5387] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 628.837934][T12207] bond0: entered promiscuous mode [ 628.848559][T12207] bond_slave_0: entered promiscuous mode [ 628.854605][ T47] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 628.862801][T12207] bond_slave_1: entered promiscuous mode [ 628.911602][T11821] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 628.938006][T11821] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 628.943511][T12209] loop2: detected capacity change from 0 to 32768 [ 628.947952][T11821] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 628.962769][T12209] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1700 (12209) [ 628.966462][T11821] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 629.001234][T12209] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 629.011728][T12209] BTRFS info (device loop2): using sha256 (sha256-ni) checksum algorithm [ 629.020727][T12209] BTRFS info (device loop2): using free-space-tree [ 629.053058][ T5387] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.062496][ T47] usb 1-1: Using ep0 maxpacket: 32 [ 629.087826][ T47] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 629.117506][ T47] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 629.135910][ T47] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 629.144952][ T47] usb 1-1: Product: syz [ 629.149217][ T47] usb 1-1: Manufacturer: syz [ 629.172801][ T47] usb 1-1: SerialNumber: syz [ 629.178423][T12206] bond0: left promiscuous mode [ 629.211521][T12206] bond_slave_0: left promiscuous mode [ 629.217372][T12206] bond_slave_1: left promiscuous mode [ 629.387794][ T9343] kworker/u8:17: attempt to access beyond end of device [ 629.387794][ T9343] loop1: rw=1, sector=48, nr_sectors = 2 limit=47 [ 629.437613][ T9343] Buffer I/O error on dev loop1, logical block 24, lost async page write [ 629.459172][T11841] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 629.480799][ T9343] kworker/u8:17: attempt to access beyond end of device [ 629.480799][ T9343] loop1: rw=1, sector=50, nr_sectors = 2 limit=47 [ 629.532127][ T9343] Buffer I/O error on dev loop1, logical block 25, lost async page write [ 629.635766][T12212] input: syz0 as /devices/virtual/input/input26 [ 629.808758][ T5387] bridge_slave_1: left allmulticast mode [ 629.824053][ T5387] bridge_slave_1: left promiscuous mode [ 629.841379][ T5387] bridge0: port 2(bridge_slave_1) entered disabled state [ 629.899914][ T5387] bridge_slave_0: left allmulticast mode [ 629.930538][ T5387] bridge_slave_0: left promiscuous mode [ 629.950600][ T5387] bridge0: port 1(bridge_slave_0) entered disabled state [ 630.174973][T12242] tipc: Failed to remove unknown binding: 66,1,1/0:3401398757/3401398759 [ 630.187599][T12242] tipc: Failed to remove unknown binding: 66,1,1/0:3401398757/3401398759 [ 630.280307][ T5225] Bluetooth: hci3: command tx timeout [ 630.727069][T12255] loop2: detected capacity change from 0 to 512 [ 630.756065][T12255] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 630.791773][T12255] EXT4-fs (loop2): orphan cleanup on readonly fs [ 630.817318][T12255] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #3: comm syz.2.1711: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 7, max 0(0), depth 0(0) [ 630.843233][T12255] EXT4-fs error (device loop2): ext4_quota_enable:7025: comm syz.2.1711: Bad quota inode: 3, type: 0 [ 630.854443][ T5225] Bluetooth: hci6: command tx timeout [ 630.880037][T12255] EXT4-fs warning (device loop2): ext4_enable_quotas:7066: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 630.895354][T12255] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 630.905528][T12255] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 631.048367][T12255] EXT4-fs error (device loop2): ext4_lookup:1815: inode #2: comm syz.2.1711: deleted inode referenced: 15 [ 631.070835][ T5225] Bluetooth: hci2: command 0x0406 tx timeout [ 631.230203][ T5387] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 631.256135][ T5387] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 631.289493][ T5387] bond0 (unregistering): Released all slaves [ 631.352649][T12212] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1701'. [ 631.460646][T12261] hub 6-0:1.0: USB hub found [ 631.466230][T12261] hub 6-0:1.0: 1 port detected [ 631.640680][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 631.741840][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 632.224423][ T47] cdc_ncm 1-1:1.0: SET_CRC_MODE failed [ 632.250218][ T47] cdc_ncm 1-1:1.0: bind() failure [ 632.265958][ T47] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 632.299083][T11841] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 632.312970][ T47] cdc_ncm 1-1:1.1: bind() failure [ 632.340444][ T9749] Bluetooth: hci3: command tx timeout [ 632.346396][ T47] usb 1-1: USB disconnect, device number 26 [ 632.542569][ T9337] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 632.552094][ T9337] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 632.838979][T12213] chnl_net:caif_netlink_parms(): no params data found [ 632.862077][T12277] loop4: detected capacity change from 0 to 1024 [ 632.886648][T12273] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1716'. [ 632.896917][T12277] syz.4.1582: attempt to access beyond end of device [ 632.896917][T12277] loop4: rw=0, sector=201326592, nr_sectors = 2 limit=1024 [ 632.911675][ T9749] Bluetooth: hci6: command tx timeout [ 632.917152][T12273] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 632.928514][T12273] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 632.938537][T12273] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 632.946705][T12277] Buffer I/O error on dev loop4, logical block 100663296, async page read [ 632.947274][T12273] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 632.968140][T12281] ecryptfs_parse_options: eCryptfs: unrecognized option [&@] [ 632.977582][T12273] vxlan0: entered promiscuous mode [ 632.987864][T12277] syz.4.1582: attempt to access beyond end of device [ 632.987864][T12277] loop4: rw=0, sector=201326592, nr_sectors = 2 limit=1024 [ 633.013879][T12281] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 633.036565][T12277] Buffer I/O error on dev loop4, logical block 100663296, async page read [ 633.047036][T12281] Error parsing options; rc = [-22] [ 633.071845][T12204] chnl_net:caif_netlink_parms(): no params data found [ 633.194646][ T5387] hsr_slave_0: left promiscuous mode [ 633.207461][ T5387] hsr_slave_1: left promiscuous mode [ 633.218891][ T5387] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 633.241166][ T5387] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 633.265449][ T5387] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 633.279394][ T5387] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 633.322822][ T5387] veth1_macvtap: left promiscuous mode [ 633.328573][ T5387] veth0_macvtap: left promiscuous mode [ 633.343807][ T5387] veth1_vlan: left promiscuous mode [ 633.349385][ T5387] veth0_vlan: left promiscuous mode [ 634.544858][ T9749] Bluetooth: hci3: command tx timeout [ 634.566346][T12294] loop1: detected capacity change from 0 to 256 [ 634.636126][T12294] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xff6f124c, utbl_chksum : 0xe619d30d) [ 634.980245][ T5225] Bluetooth: hci6: command tx timeout [ 635.431287][ T5387] team0 (unregistering): Port device team_slave_1 removed [ 635.489295][ T5387] team0 (unregistering): Port device team_slave_0 removed [ 635.665093][T12306] loop2: detected capacity change from 0 to 64 [ 636.580724][ T5225] Bluetooth: hci3: command tx timeout [ 636.833339][T12317] loop0: detected capacity change from 0 to 512 [ 636.851849][T12317] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 636.901619][T12213] bridge0: port 1(bridge_slave_0) entered blocking state [ 636.911791][T12213] bridge0: port 1(bridge_slave_0) entered disabled state [ 636.928431][T12317] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.1730: bad orphan inode 16 [ 636.965583][T12213] bridge_slave_0: entered allmulticast mode [ 636.985615][T12317] ext4_test_bit(bit=15, block=4) = 0 [ 637.006407][T12213] bridge_slave_0: entered promiscuous mode [ 637.012595][T12317] EXT4-fs (loop0): 1 orphan inode deleted [ 637.044237][T12317] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 637.060501][ T5225] Bluetooth: hci6: command tx timeout [ 637.109528][T12213] bridge0: port 2(bridge_slave_1) entered blocking state [ 637.120720][T12213] bridge0: port 2(bridge_slave_1) entered disabled state [ 637.333904][T12213] bridge_slave_1: entered allmulticast mode [ 637.347388][T12213] bridge_slave_1: entered promiscuous mode [ 637.395917][T12204] bridge0: port 1(bridge_slave_0) entered blocking state [ 637.756200][T12327] EXT4-fs error (device loop0): ext4_lookup:1811: inode #15: comm syz.0.1730: iget: bad extra_isize 46 (inode size 256) [ 637.790371][T12204] bridge0: port 1(bridge_slave_0) entered disabled state [ 637.800580][T12204] bridge_slave_0: entered allmulticast mode [ 637.808345][T12204] bridge_slave_0: entered promiscuous mode [ 637.829911][T12204] bridge0: port 2(bridge_slave_1) entered blocking state [ 637.852803][T12204] bridge0: port 2(bridge_slave_1) entered disabled state [ 637.870873][T12204] bridge_slave_1: entered allmulticast mode [ 637.996497][T12204] bridge_slave_1: entered promiscuous mode [ 638.015678][T11790] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 638.159540][T12334] netlink: 'syz.0.1735': attribute type 3 has an invalid length. [ 638.308806][T12213] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 638.331758][T12204] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 638.366826][T12213] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 638.564334][T12339] loop4: detected capacity change from 0 to 16 [ 638.592709][T12204] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 638.719747][T12339] erofs: (device loop4): mounted with root inode @ nid 36. [ 638.927250][T12213] team0: Port device team_slave_0 added [ 638.950961][T12346] input: syz0 as /devices/virtual/input/input27 [ 639.074798][T12204] team0: Port device team_slave_0 added [ 639.129613][T12204] team0: Port device team_slave_1 added [ 639.143899][ T5225] Bluetooth: hci6: command tx timeout [ 639.184176][T12213] team0: Port device team_slave_1 added [ 639.647294][T12213] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 639.662368][T12213] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 639.704698][T12213] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 639.720664][T12204] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 639.739983][T12204] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 639.773783][T12204] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 639.854611][T12213] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 639.889945][T12213] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 639.978408][T12213] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 640.004954][T12361] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 640.048997][T12204] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 640.071514][T12204] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 640.199262][T12204] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 640.328036][T12368] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 640.357371][T12369] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1748'. [ 640.494618][T12213] hsr_slave_0: entered promiscuous mode [ 640.539241][T12213] hsr_slave_1: entered promiscuous mode [ 640.568041][T12213] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 640.611193][T12213] Cannot create hsr debugfs directory [ 640.759527][T12376] loop1: detected capacity change from 0 to 512 [ 640.774825][T12204] hsr_slave_0: entered promiscuous mode [ 640.832905][T12204] hsr_slave_1: entered promiscuous mode [ 640.839284][T12204] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 640.850973][T12204] Cannot create hsr debugfs directory [ 640.859997][T12376] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 640.883854][T12378] sctp: [Deprecated]: syz.2.1752 (pid 12378) Use of struct sctp_assoc_value in delayed_ack socket option. [ 640.883854][T12378] Use struct sctp_sack_info instead [ 640.916535][T12380] loop0: detected capacity change from 0 to 1024 [ 641.000080][T12376] ext4 filesystem being mounted at /71/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 641.999536][T12389] ip6_vti0: entered promiscuous mode [ 642.021332][T12389] vlan2: entered promiscuous mode [ 642.047910][T12389] ip6_vti0: left promiscuous mode [ 642.748781][T12213] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 642.989685][T12213] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 643.195549][T12213] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 643.358588][T12213] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 643.736780][T12213] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 643.759996][T10703] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 643.965395][T12213] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 644.003053][T12213] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 644.047400][T12213] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 644.425907][T12423] loop1: detected capacity change from 0 to 512 [ 644.460618][T12423] ext3: Bad value for 'auto_da_alloc' [ 644.689919][T12213] 8021q: adding VLAN 0 to HW filter on device bond0 [ 644.706001][T12423] loop1: detected capacity change from 0 to 256 [ 644.783097][T12213] 8021q: adding VLAN 0 to HW filter on device team0 [ 644.908914][ T9337] bridge0: port 1(bridge_slave_0) entered blocking state [ 644.916245][ T9337] bridge0: port 1(bridge_slave_0) entered forwarding state [ 644.992200][ T9337] bridge0: port 2(bridge_slave_1) entered blocking state [ 644.999987][ T9337] bridge0: port 2(bridge_slave_1) entered forwarding state [ 645.156170][T12435] loop2: detected capacity change from 0 to 128 [ 645.215529][T12204] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 645.257539][T12204] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 645.328137][T12204] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 645.422050][T12204] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 645.495762][T12439] loop1: detected capacity change from 0 to 256 [ 645.997602][T12446] loop2: detected capacity change from 0 to 4096 [ 646.056685][T12446] NILFS (loop2): invalid segment: Checksum error in segment payload [ 646.075034][T12204] 8021q: adding VLAN 0 to HW filter on device bond0 [ 646.084024][T12446] NILFS (loop2): trying rollback from an earlier position [ 646.149626][T12204] 8021q: adding VLAN 0 to HW filter on device team0 [ 646.168538][T12446] NILFS (loop2): recovery complete [ 646.195874][T12453] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 646.213200][ T9355] bridge0: port 1(bridge_slave_0) entered blocking state [ 646.220389][ T9355] bridge0: port 1(bridge_slave_0) entered forwarding state [ 646.262890][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 646.270147][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 646.564845][T12213] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 646.868195][T12213] veth0_vlan: entered promiscuous mode [ 647.219901][T12470] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1784'. [ 648.148285][T12213] veth1_vlan: entered promiscuous mode [ 648.408061][T12213] veth0_macvtap: entered promiscuous mode [ 648.674239][T12204] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 649.580382][T12465] loop2: detected capacity change from 0 to 1024 [ 649.654536][T12465] hfsplus: failed to load extents file [ 649.656234][T12213] veth1_macvtap: entered promiscuous mode [ 649.678933][T12487] loop4: detected capacity change from 0 to 512 [ 649.740588][T12487] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.1788: corrupted in-inode xattr: invalid ea_ino [ 649.783260][T12487] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.1788: couldn't read orphan inode 15 (err -117) [ 649.836414][T12487] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 650.778652][T12504] loop1: detected capacity change from 0 to 1024 [ 650.840695][T12213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 650.881682][T12213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 650.896327][T12504] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e04cc02c, mo2=0002] [ 650.920289][T12504] System zones: 0-1, 3-36 [ 650.927277][T12213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 650.939758][T12504] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 650.954348][T12213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 650.964666][T12213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 650.975482][T12213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 650.985962][T12213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 650.998656][T12213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 651.009549][T12213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 651.020717][T12213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 651.030444][T12504] EXT4-fs error (device loop1): __ext4_iget:4985: inode #12: block 13: comm syz.1.1791: invalid block [ 651.038474][T12504] EXT4-fs (loop1): Remounting filesystem read-only [ 651.041541][T12213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 651.041565][T12213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 651.044540][T12213] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 651.062208][T11821] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 651.234421][T12213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 651.248702][T10703] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 651.276091][T12213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 651.311099][T12213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 651.383464][T12213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 651.430169][T12213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 651.445209][T12213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 651.486021][T12213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 651.511090][T12213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 651.533236][T12213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 651.556665][T12213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 651.582483][T12213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 651.605439][T12213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 651.655267][T12213] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 651.733710][T12213] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 651.777738][T12213] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 651.807914][T12213] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 651.813799][T12521] loop2: detected capacity change from 0 to 512 [ 651.830184][T12213] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 651.893404][T12521] EXT4-fs: Ignoring removed i_version option [ 651.970053][T12521] EXT4-fs (loop2): orphan cleanup on readonly fs [ 652.048170][T12521] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.1798: bad orphan inode 1 [ 652.063698][T12521] EXT4-fs (loop2): Remounting filesystem read-only [ 652.363287][T12521] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 652.795965][T12521] EXT4-fs: Ignoring removed mblk_io_submit option [ 652.816562][T12521] EXT4-fs: Ignoring removed nomblk_io_submit option [ 652.870828][T12521] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 653.037792][T12204] veth0_vlan: entered promiscuous mode [ 653.090460][ T2942] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 653.116401][ T2942] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 653.161699][T12204] veth1_vlan: entered promiscuous mode [ 653.375526][ T5387] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 653.397075][T11841] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 653.419644][ T5387] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 653.617050][ T9337] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 653.675556][T12550] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1808'. [ 653.863549][ T9337] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 653.976291][T12204] veth0_macvtap: entered promiscuous mode [ 654.038098][T12204] veth1_macvtap: entered promiscuous mode [ 654.146888][T12561] loop1: detected capacity change from 0 to 2048 [ 654.161208][T12559] loop3: detected capacity change from 0 to 1764 [ 654.183488][T12559] iso9660: Unknown parameter 'oession' [ 654.189360][T12561] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 654.223915][ T9337] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 654.305293][T12565] loop4: detected capacity change from 0 to 1024 [ 654.504681][ T9337] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 654.552632][ T2508] hfsplus: b-tree write err: -5, ino 4 [ 654.689592][T12204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 654.745459][T12204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 654.798731][T12204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 654.810358][ T9749] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 654.831762][ T9749] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 654.844592][ T9749] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 654.855521][ T9749] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 654.870470][ T9749] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 654.878062][T12204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 654.878119][ T9749] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 654.924604][T12204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 654.970995][T12204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 654.973727][T12566] loop3: detected capacity change from 0 to 512 [ 655.007295][T12204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 655.023069][T12580] xt_CT: You must specify a L4 protocol and not use inversions on it [ 655.033206][T12580] xt_CT: You must specify a L4 protocol and not use inversions on it [ 655.048973][T12580] loop1: detected capacity change from 0 to 8 [ 655.068590][T12204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 655.087394][T12580] squashfs image failed sanity check [ 655.090663][T12204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 655.103598][T12204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 655.114131][T12204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 655.126169][T12566] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.1698: corrupted in-inode xattr: invalid ea_ino [ 655.135005][T12204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 655.155925][T12566] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.1698: couldn't read orphan inode 15 (err -117) [ 655.155985][T12204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 655.178651][T12204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 655.186205][T12580] loop1: detected capacity change from 0 to 1024 [ 655.199902][T12566] EXT4-fs (loop3): mounted filesystem 00000007-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 655.214128][T12204] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 655.249531][T12580] EXT4-fs: Ignoring removed orlov option [ 655.260514][T12580] EXT4-fs (loop1): Test dummy encryption mode enabled [ 655.275883][T12580] EXT4-fs (loop1): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 655.330975][T12204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 655.363658][T12580] Quota error (device loop1): v2_read_file_info: Number of blocks too big for quota file size (1316864 > 530432). [ 655.370145][T12204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 655.419335][T12580] EXT4-fs warning (device loop1): ext4_enable_quotas:7066: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 655.440510][T12204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 655.517228][T12587] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1821'. [ 655.526904][T12204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 655.529334][T12587] netlink: 172 bytes leftover after parsing attributes in process `syz.4.1821'. [ 655.550722][T12580] EXT4-fs (loop1): mount failed [ 655.580310][T12204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 655.610201][T12204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 655.633836][ T9749] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 655.662656][T12204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 655.680010][T12204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 655.729505][T12204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 655.750190][T12204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 655.779008][T12204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 655.811878][T12204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 655.833049][T12204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 655.850670][T12204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 655.893574][T12213] EXT4-fs (loop3): unmounting filesystem 00000007-0000-0000-0000-000000000000. [ 655.902789][T12204] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 655.968660][T12204] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 656.003660][T12204] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 656.032926][T12204] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 656.060159][T12204] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 656.403505][ T9337] bridge_slave_1: left allmulticast mode [ 656.409183][ T9337] bridge_slave_1: left promiscuous mode [ 656.429836][ T9337] bridge0: port 2(bridge_slave_1) entered disabled state [ 656.493933][ T9337] bridge_slave_0: left allmulticast mode [ 656.499616][ T9337] bridge_slave_0: left promiscuous mode [ 656.525553][ T9337] bridge0: port 1(bridge_slave_0) entered disabled state [ 656.703040][T12609] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1830'. [ 656.810265][T12592] loop4: detected capacity change from 0 to 32768 [ 656.841390][T12592] bcachefs (/dev/loop4): error reading default superblock: checksum error, type none: got should be [ 656.872000][T12592] bcachefs (/dev/loop4): error validating superblock: Invalid superblock: optional field with size 0 (type 0) [ 656.932936][T12592] bcachefs: bch2_fs_get_tree() error: invalid_sb_field_size [ 656.981990][ T9749] Bluetooth: hci5: command tx timeout [ 657.675253][ T9337] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 657.687942][ T9337] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 657.708039][ T9337] bond0 (unregistering): Released all slaves [ 657.729684][T12602] netlink: 'syz.3.1823': attribute type 12 has an invalid length. [ 658.083747][T12624] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1836'. [ 658.992814][T12627] loop0: detected capacity change from 0 to 256 [ 659.020277][T12627] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xff6f124c, utbl_chksum : 0xe619d30d) [ 659.065513][ T9749] Bluetooth: hci5: command tx timeout [ 659.413864][T12641] loop3: detected capacity change from 0 to 1024 [ 659.434944][T12641] EXT4-fs (loop3): blocks per group (131072) and clusters per group (8192) inconsistent [ 659.473358][T12637] ieee802154 phy0 wpan0: encryption failed: -90 [ 659.497863][T12637] ieee802154 phy0 wpan0: encryption failed: -22 [ 659.561562][T12641] loop3: detected capacity change from 0 to 512 [ 659.619707][ T9749] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 659.620992][ T9343] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 659.696783][ T9343] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 659.718898][T12649] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 659.758414][ C1] sd 0:0:1:0: [sda] tag#5888 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 659.768912][ C1] sd 0:0:1:0: [sda] tag#5888 CDB: Write(6) 0a 0b 00 08 00 00 [ 659.777453][T12645] netlink: 'syz.1.1842': attribute type 5 has an invalid length. [ 659.819779][ T9337] hsr_slave_0: left promiscuous mode [ 659.831769][ T29] audit: type=1326 audit(1723223278.558:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12644 comm="syz.1.1842" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5d00b779f9 code=0x0 [ 659.870570][ T9337] hsr_slave_1: left promiscuous mode [ 659.892225][ T9337] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 659.921767][ T9337] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 659.932672][T12654] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 659.939751][T12654] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 659.967547][ T9337] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 659.981950][ T9337] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 659.984267][T12654] vhci_hcd vhci_hcd.0: Device attached [ 660.055218][ T9337] veth1_macvtap: left promiscuous mode [ 660.082771][ T9337] veth0_macvtap: left promiscuous mode [ 660.095502][ T9337] veth1_vlan: left promiscuous mode [ 660.111266][ T9337] veth0_vlan: left promiscuous mode [ 660.170433][ T5312] vhci_hcd: vhci_device speed not set [ 660.250386][ T5312] usb 11-1: new full-speed USB device number 2 using vhci_hcd [ 660.400529][T12655] vhci_hcd: connection closed [ 660.416855][ T9355] vhci_hcd: stop threads [ 660.444110][ T9355] vhci_hcd: release socket [ 660.467135][ T9355] vhci_hcd: disconnect device [ 660.551109][T12669] loop3: detected capacity change from 0 to 256 [ 660.574179][T12669] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x1aabf3fb, utbl_chksum : 0xe619d30d) [ 661.142797][ T9749] Bluetooth: hci5: command tx timeout [ 661.259263][T12672] sd 0:0:1:0: PR command failed: 1026 [ 661.269371][T12672] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 661.286677][T12672] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 661.513540][T12675] loop1: detected capacity change from 0 to 4096 [ 661.544216][T12675] ntfs3: loop1: It is recommened to use chkdsk. [ 661.555073][T12675] ntfs3: loop1: try to read out of volume at offset 0x3fffffc0c00 [ 661.563015][T12675] ntfs3: loop1: try to read out of volume at offset 0x3fffffc0c00 [ 661.571041][T12675] ntfs3: loop1: try to read out of volume at offset 0x3fffffc0c00 [ 661.578899][T12675] ntfs3: loop1: try to read out of volume at offset 0x3fffffc0c00 [ 661.588189][T12675] ntfs3: loop1: try to read out of volume at offset 0x3fffffc1c00 [ 661.600877][T12675] ntfs3: loop1: try to read out of volume at offset 0x3fffffc2c00 [ 661.608763][T12675] ntfs3: loop1: try to read out of volume at offset 0x3fffffc4c00 [ 661.616810][T12675] ntfs3: loop1: try to read out of volume at offset 0x3fffffc8c00 [ 661.620022][ T9337] team0 (unregistering): Port device team_slave_1 removed [ 661.625319][T12675] ntfs3: loop1: try to read out of volume at offset 0x3fffffd0c00 [ 661.694301][ T9337] team0 (unregistering): Port device team_slave_0 removed [ 662.744012][T12680] fuse: Invalid rootmode [ 663.156417][ T2942] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 663.181419][ T2942] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 663.228371][T12574] chnl_net:caif_netlink_parms(): no params data found [ 663.240891][ T9749] Bluetooth: hci5: command tx timeout [ 663.281607][T12687] netlink: 'syz.0.1856': attribute type 46 has an invalid length. [ 663.423424][ T29] audit: type=1804 audit(1723223282.148:208): pid=12692 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1854" name="/newroot/6/file0" dev="fuse" ino=1 res=1 errno=0 [ 663.703766][T12703] Invalid ELF header type: 0 != 1 [ 663.755238][T12705] netlink: 'syz.5.1861': attribute type 3 has an invalid length. [ 663.765130][T12705] netlink: 'syz.5.1861': attribute type 3 has an invalid length. [ 663.776524][T12574] bridge0: port 1(bridge_slave_0) entered blocking state [ 663.783846][T12705] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1861'. [ 663.793666][T12574] bridge0: port 1(bridge_slave_0) entered disabled state [ 663.801504][T12574] bridge_slave_0: entered allmulticast mode [ 663.813167][T12574] bridge_slave_0: entered promiscuous mode [ 663.831647][T12574] bridge0: port 2(bridge_slave_1) entered blocking state [ 663.860282][T12574] bridge0: port 2(bridge_slave_1) entered disabled state [ 663.867592][T12574] bridge_slave_1: entered allmulticast mode [ 663.890391][T12574] bridge_slave_1: entered promiscuous mode [ 663.906770][ T9749] Bluetooth: hci1: Invalid connection link type handle 0x00c9 [ 664.034583][T12574] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 664.072713][T12574] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 664.163916][T12714] loop4: detected capacity change from 0 to 512 [ 664.185096][T12714] EXT4-fs: Ignoring removed nobh option [ 664.192819][T12714] EXT4-fs: Ignoring removed nobh option [ 664.215634][T12714] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 664.225245][T12714] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.1867: invalid indirect mapped block 2683928664 (level 1) [ 664.240606][T12714] EXT4-fs (loop4): 1 truncate cleaned up [ 664.247725][T12714] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 664.375529][T11821] EXT4-fs error (device loop4): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0 [ 664.376357][T12574] team0: Port device team_slave_0 added [ 664.440218][T11821] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz-executor: Invalid block bitmap block 3 in block_group 0 [ 664.469933][T12574] team0: Port device team_slave_1 added [ 664.644471][T11821] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 665.108602][T11821] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz-executor: corrupted in-inode xattr: e_value out of bounds [ 665.360093][T11821] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz-executor: corrupted in-inode xattr: e_value out of bounds [ 665.377631][T12729] veth0_vlan: entered allmulticast mode [ 665.467549][ T5312] vhci_hcd: vhci_device speed not set [ 665.519509][T12733] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1873'. [ 665.599963][T12574] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 665.619055][T12574] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 665.661064][T12718] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 665.669254][T12574] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 665.704734][T12718] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 665.800451][T12574] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 665.807510][T12574] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 665.834428][T12574] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 665.862001][T12735] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(8) [ 665.868538][T12735] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 665.890276][T12735] vhci_hcd vhci_hcd.0: Device attached [ 665.915077][T12740] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 0 [ 665.923719][ T63] vhci_hcd: stop threads [ 665.927983][ T63] vhci_hcd: release socket [ 665.941301][ T63] vhci_hcd: disconnect device [ 665.957044][T12574] hsr_slave_0: entered promiscuous mode [ 665.964317][T12574] hsr_slave_1: entered promiscuous mode [ 665.971331][T12574] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 665.979267][T12574] Cannot create hsr debugfs directory [ 666.011133][T11821] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 666.146354][ T63] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 666.324427][ T63] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 666.484574][ T63] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 666.581698][T12748] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 666.588261][T12748] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 666.596925][T12748] vhci_hcd vhci_hcd.0: Device attached [ 666.611425][T12750] vhci_hcd: connection closed [ 666.630595][ T9339] vhci_hcd: stop threads [ 666.640559][ T63] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 666.669043][ T9339] vhci_hcd: release socket [ 666.681072][ T9339] vhci_hcd: disconnect device [ 667.089935][T12757] sp0: Synchronizing with TNC [ 667.459659][ T5282] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 667.921946][ T5282] usb 1-1: Using ep0 maxpacket: 32 [ 668.100551][ T9749] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 668.135870][ T9749] Bluetooth: hci1: Injecting HCI hardware error event [ 668.199319][ T5225] Bluetooth: hci1: hardware error 0x00 [ 668.320503][ T9749] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 668.388211][ T9749] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 668.408388][ T9749] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 668.444318][ T5282] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 668.497951][ T9749] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 668.523544][ T9749] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 668.545535][ T9749] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 668.900433][T12756] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 668.941813][ T5231] Bluetooth: hci0: command 0x0406 tx timeout [ 669.051394][ T5282] usb 1-1: New USB device found, idVendor=046d, idProduct=08f6, bcdDevice=81.8a [ 669.354092][ T5282] usb 1-1: New USB device strings: Mfr=0, Product=9, SerialNumber=0 [ 669.638895][ T5282] usb 1-1: Product: syz [ 669.977245][ T5282] usb 1-1: config 0 descriptor?? [ 670.660993][ T5225] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 670.741361][ T5225] Bluetooth: hci4: command tx timeout [ 671.725436][ T5282] usb 1-1: can't set config #0, error -71 [ 671.752997][ T63] bridge_slave_1: left allmulticast mode [ 671.758670][ T63] bridge_slave_1: left promiscuous mode [ 671.780543][ T5282] usb 1-1: USB disconnect, device number 27 [ 671.807356][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 671.873066][ T63] bridge_slave_0: left allmulticast mode [ 671.891910][ T63] bridge_slave_0: left promiscuous mode [ 671.936116][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 673.835412][T12781] loop5: detected capacity change from 0 to 256 [ 674.005186][ T5231] Bluetooth: hci4: command tx timeout [ 674.240537][T12781] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xff6f124c, utbl_chksum : 0xe619d30d) [ 675.104808][T12798] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1894'. [ 675.250621][ T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 675.263510][ T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 675.275347][ T63] bond0 (unregistering): Released all slaves [ 675.390318][ T47] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 675.524725][T12802] loop3: detected capacity change from 0 to 128 [ 676.422006][ T5225] Bluetooth: hci4: command tx timeout [ 676.427540][ T47] usb 6-1: Using ep0 maxpacket: 32 [ 676.465759][ T47] usb 6-1: New USB device found, idVendor=0458, idProduct=7006, bcdDevice=69.91 [ 676.481378][T12802] sysv_count_free_blocks: >flc_size entries in free-list block [ 676.530378][ T47] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 676.589525][ T47] usb 6-1: config 0 descriptor?? [ 676.619167][ T47] gspca_main: sunplus-2.14.0 probing 0458:7006 [ 676.683338][T12802] sysv_count_free_inodes: unable to read inode table [ 676.739982][T12802] sysv_count_free_blocks: >flc_size entries in free-list block [ 676.885348][T12802] sysv_count_free_inodes: unable to read inode table [ 677.196189][ T47] gspca_sunplus: reg_w_riv err -110 [ 677.224602][ T47] sunplus 6-1:0.0: probe with driver sunplus failed with error -110 [ 677.454804][T12574] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 677.458675][ T5283] usb 6-1: USB disconnect, device number 18 [ 677.626572][T12213] sysv_free_block: flc_count > flc_size [ 677.649768][T12213] sysv_free_block: flc_count > flc_size [ 677.676476][T12213] sysv_free_block: flc_count > flc_size [ 677.701657][T12213] sysv_free_block: flc_count > flc_size [ 677.734456][T12213] sysv_free_block: flc_count > flc_size [ 677.762544][T12213] sysv_free_block: flc_count > flc_size [ 677.768110][T12213] sysv_free_block: flc_count > flc_size [ 677.807097][T12213] sysv_free_block: flc_count > flc_size [ 677.814767][T12574] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 677.830042][T12213] sysv_free_block: flc_count > flc_size [ 677.866916][T12213] sysv_free_block: flc_count > flc_size [ 677.893915][T12213] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 677.945034][T12574] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 678.035654][T12574] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 678.074557][ T63] hsr_slave_0: left promiscuous mode [ 678.091579][ T63] hsr_slave_1: left promiscuous mode [ 678.112113][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 678.120010][ T63] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 678.138762][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 678.167506][ T63] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 678.257147][ T63] veth1_macvtap: left promiscuous mode [ 678.265129][ T63] veth0_macvtap: left promiscuous mode [ 678.274469][ T63] veth1_vlan: left promiscuous mode [ 678.284521][ T63] veth0_vlan: left promiscuous mode [ 678.366965][T12809] loop0: detected capacity change from 0 to 40427 [ 678.396789][T12809] F2FS-fs (loop0): Found nat_bits in checkpoint [ 678.412240][T12832] loop5: detected capacity change from 0 to 256 [ 678.500606][ T5225] Bluetooth: hci4: command tx timeout [ 678.501344][T12832] FAT-fs (loop5): Directory bread(block 64) failed [ 678.544705][T12832] FAT-fs (loop5): Directory bread(block 65) failed [ 678.570062][T12832] FAT-fs (loop5): Directory bread(block 66) failed [ 678.587573][T12832] FAT-fs (loop5): Directory bread(block 67) failed [ 678.599552][T12832] FAT-fs (loop5): Directory bread(block 68) failed [ 678.607342][T12809] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 678.615108][T12832] FAT-fs (loop5): Directory bread(block 69) failed [ 678.625725][T12832] FAT-fs (loop5): Directory bread(block 70) failed [ 678.632412][T12832] FAT-fs (loop5): Directory bread(block 71) failed [ 678.639158][T12832] FAT-fs (loop5): Directory bread(block 72) failed [ 678.645903][T12832] FAT-fs (loop5): Directory bread(block 73) failed [ 678.689172][T12809] syz.0.1898: attempt to access beyond end of device [ 678.689172][T12809] loop0: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 678.690570][ T5282] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 678.708767][T12809] F2FS-fs (loop0): Remounting filesystem read-only [ 678.730941][T12809] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 678.905657][ T5282] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 678.926644][ T5282] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 678.947930][ T5282] usb 4-1: New USB device found, idVendor=048d, idProduct=ce50, bcdDevice= 0.00 [ 678.957910][ T5282] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 678.968668][ T5282] usb 4-1: config 0 descriptor?? [ 679.400018][ T5282] asus 0003:048D:CE50.0015: unknown main item tag 0xd [ 679.411495][ T5282] asus 0003:048D:CE50.0015: hidraw0: USB HID v0.00 Device [HID 048d:ce50] on usb-dummy_hcd.3-1/input0 [ 679.424599][ T5282] asus 0003:048D:CE50.0015: Asus input not registered [ 679.443411][ T5282] asus 0003:048D:CE50.0015: probe with driver asus failed with error -12 [ 679.636441][ T63] team0 (unregistering): Port device team_slave_1 removed [ 679.653792][ T5326] usb 4-1: USB disconnect, device number 17 [ 679.695074][ T63] team0 (unregistering): Port device team_slave_0 removed [ 680.354667][T12843] netlink: 14569 bytes leftover after parsing attributes in process `syz.5.1909'. [ 680.530456][T12761] chnl_net:caif_netlink_parms(): no params data found [ 680.769033][T12855] loop5: detected capacity change from 0 to 8 [ 680.839422][T12855] SQUASHFS error: lzo decompression failed, data probably corrupt [ 680.883679][T12855] SQUASHFS error: Failed to read block 0x28d: -5 [ 680.907878][T12855] SQUASHFS error: Unable to read metadata cache entry [28b] [ 680.921934][T12855] SQUASHFS error: Unable to read inode 0x11f [ 680.978991][T12761] bridge0: port 1(bridge_slave_0) entered blocking state [ 680.993827][T12761] bridge0: port 1(bridge_slave_0) entered disabled state [ 681.006341][T12761] bridge_slave_0: entered allmulticast mode [ 681.014696][T12761] bridge_slave_0: entered promiscuous mode [ 681.084993][T12761] bridge0: port 2(bridge_slave_1) entered blocking state [ 681.111991][T12761] bridge0: port 2(bridge_slave_1) entered disabled state [ 681.138488][T12761] bridge_slave_1: entered allmulticast mode [ 681.166074][T12761] bridge_slave_1: entered promiscuous mode [ 681.308889][T12855] loop5: detected capacity change from 0 to 1756 [ 681.352524][T12761] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 681.497288][T12855] ISOFS: Unable to identify CD-ROM format. [ 681.537830][T12761] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 681.747403][T12761] team0: Port device team_slave_0 added [ 681.772832][T12574] 8021q: adding VLAN 0 to HW filter on device bond0 [ 681.789052][T12761] team0: Port device team_slave_1 added [ 681.968254][T12761] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 681.997344][T12761] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 682.023239][ C0] vkms_vblank_simulate: vblank timer overrun [ 682.054612][T12761] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 682.119577][T12761] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 682.134899][T12761] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 682.245370][T12761] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 682.398825][T12574] 8021q: adding VLAN 0 to HW filter on device team0 [ 682.582984][T12879] loop1: detected capacity change from 0 to 1024 [ 682.641942][T12879] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (24866!=20869) [ 682.662302][T12879] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 682.684249][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 682.691409][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 682.772652][T12879] EXT4-fs (loop1): invalid journal inode [ 682.822209][T12761] hsr_slave_0: entered promiscuous mode [ 682.856991][T12761] hsr_slave_1: entered promiscuous mode [ 682.890436][T12879] loop1: detected capacity change from 0 to 256 [ 682.906097][T12761] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 682.955981][T12761] Cannot create hsr debugfs directory [ 682.983129][ T5387] bridge0: port 2(bridge_slave_1) entered blocking state [ 682.990276][ T5387] bridge0: port 2(bridge_slave_1) entered forwarding state [ 683.018538][T12883] input: syz1 as /devices/virtual/input/input28 [ 683.204934][T12885] netlink: 308 bytes leftover after parsing attributes in process `syz.1.1921'. [ 683.564480][T10703] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 683.687633][T10703] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 684.663251][ T63] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 684.708132][ T63] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 685.143876][ T63] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 685.200285][ T63] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 685.306431][ T1255] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.313200][ T1255] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.499397][ T63] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 686.533105][ T63] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 686.612252][T12899] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1926'. [ 686.747544][T12574] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 686.793198][T12901] loop3: detected capacity change from 0 to 4096 [ 686.840348][T12901] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 686.864929][ T63] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 686.920163][ T63] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 687.038001][T12901] ntfs3: loop3: ino=1b, "file0" directory corrupted [ 687.054018][ T5231] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 687.066191][ T5231] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 687.079169][ T5231] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 687.087878][ T5231] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 687.101436][ T5231] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 687.108951][ T5231] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 687.493637][T12574] veth0_vlan: entered promiscuous mode [ 687.944343][T12574] veth1_vlan: entered promiscuous mode [ 689.082509][T12761] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 689.142184][ T63] bridge_slave_1: left allmulticast mode [ 689.144093][ T5231] Bluetooth: hci2: command tx timeout [ 689.147833][ T63] bridge_slave_1: left promiscuous mode [ 689.148048][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 689.238947][ T63] bridge_slave_0: left allmulticast mode [ 689.257346][ T63] bridge_slave_0: left promiscuous mode [ 689.263220][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 689.646911][T12928] loop5: detected capacity change from 0 to 512 [ 689.698152][T12928] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 689.751982][T12928] EXT4-fs (loop5): 1 truncate cleaned up [ 689.812450][T12928] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 690.159753][T12204] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 691.649020][ T5231] Bluetooth: hci2: command tx timeout [ 691.849949][T12924] loop3: detected capacity change from 0 to 32768 [ 691.923446][T12924] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1936 (12924) [ 691.984816][T12924] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 692.006063][T12924] BTRFS info (device loop3): using sha256 (sha256-ni) checksum algorithm [ 692.019274][T12924] BTRFS info (device loop3): using free-space-tree [ 692.345546][T12213] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 692.511066][ T5225] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 692.523674][ T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 692.532542][ T5225] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 692.546724][ T5225] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 692.559344][ T5225] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 692.568358][ T5225] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 692.584638][ T5225] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 692.585190][ T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 692.700917][ T63] bond0 (unregistering): Released all slaves [ 692.843470][T12761] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 693.043545][T12761] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 693.121173][T12761] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 693.238275][T12957] loop5: detected capacity change from 0 to 8192 [ 693.411864][T12957] loop5: p2 p3 p4 [ 693.430990][T12957] loop5: p2 start 452985600 is beyond EOD, truncated [ 693.444879][T12574] veth0_macvtap: entered promiscuous mode [ 693.463487][T12957] loop5: p3 start 4177527808 is beyond EOD, truncated [ 693.500451][T12957] loop5: p4 size 3599499392 extends beyond EOD, truncated [ 693.523085][T12905] chnl_net:caif_netlink_parms(): no params data found [ 693.700562][ T5231] Bluetooth: hci2: command tx timeout [ 693.726162][T12964] team0: entered promiscuous mode [ 693.733313][T12964] team_slave_0: entered promiscuous mode [ 693.739827][T12964] team_slave_1: entered promiscuous mode [ 693.752219][T12964] team0: left promiscuous mode [ 693.757057][T12964] team_slave_0: left promiscuous mode [ 693.802589][T12964] team_slave_1: left promiscuous mode [ 694.169834][ T63] hsr_slave_0: left promiscuous mode [ 694.204904][ T63] hsr_slave_1: left promiscuous mode [ 694.233561][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 694.243398][ T63] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 694.271531][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 694.278943][ T63] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 694.386608][ T63] veth1_macvtap: left promiscuous mode [ 694.404042][ T63] veth0_macvtap: left promiscuous mode [ 694.422995][ T63] veth1_vlan: left promiscuous mode [ 694.431382][ T63] veth0_vlan: left promiscuous mode [ 694.740580][ T5231] Bluetooth: hci7: command tx timeout [ 695.780741][ T5231] Bluetooth: hci2: command tx timeout [ 696.075500][ T63] team0 (unregistering): Port device team_slave_1 removed [ 696.173052][ T63] team0 (unregistering): Port device team_slave_0 removed [ 696.820751][ T5231] Bluetooth: hci7: command tx timeout [ 697.593236][T12574] veth1_macvtap: entered promiscuous mode [ 697.788621][T12968] tipc: Started in network mode [ 697.793758][T12968] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 697.808402][T12968] tipc: Enabled bearer , priority 0 [ 697.853915][T12574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 697.895931][T12574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 697.934199][T12574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 698.019274][T12574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 698.030840][T12574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 698.050343][T12574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 698.061167][T12574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 698.088814][T12574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 698.098833][T12574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 698.110763][T12574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 698.154137][T12574] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 698.398010][T12574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 698.430642][ T59] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 698.438843][T12574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 698.461876][T12574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 698.490303][T12574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 698.510308][T12574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 698.530718][T12574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 698.550275][T12574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 698.565210][T12574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 698.575405][T12574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 698.586217][T12574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 698.620050][T12574] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 698.633403][ T59] usb 4-1: config 0 has no interfaces? [ 698.673778][ T59] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 698.708414][ T59] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 698.742793][T12574] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 698.770626][ T59] usb 4-1: Product: syz [ 698.800308][ T59] usb 4-1: Manufacturer: syz [ 698.819067][T12574] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 698.829131][ T59] usb 4-1: config 0 descriptor?? [ 698.869419][T12574] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 698.878377][T12574] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 698.904148][ T5231] Bluetooth: hci7: command tx timeout [ 698.923299][ T47] tipc: Node number set to 11578026 [ 699.206451][T12905] bridge0: port 1(bridge_slave_0) entered blocking state [ 699.233690][T12905] bridge0: port 1(bridge_slave_0) entered disabled state [ 699.264806][T12905] bridge_slave_0: entered allmulticast mode [ 699.285945][T12905] bridge_slave_0: entered promiscuous mode [ 699.422467][T12905] bridge0: port 2(bridge_slave_1) entered blocking state [ 699.441785][T12905] bridge0: port 2(bridge_slave_1) entered disabled state [ 699.466455][T12905] bridge_slave_1: entered allmulticast mode [ 699.489685][T12905] bridge_slave_1: entered promiscuous mode [ 699.647743][ T63] IPVS: stop unused estimator thread 0... [ 699.692892][T12905] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 699.860540][T12905] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 700.150029][ T9355] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 700.197160][ T9355] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 700.209048][T12761] 8021q: adding VLAN 0 to HW filter on device bond0 [ 700.250295][T12905] team0: Port device team_slave_0 added [ 700.270921][T12905] team0: Port device team_slave_1 added [ 700.304871][ T5312] usb 4-1: USB disconnect, device number 18 [ 700.419609][T12954] chnl_net:caif_netlink_parms(): no params data found [ 700.583887][T12905] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 700.598648][T12905] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 700.628956][T12905] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 700.682638][T12905] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 700.689581][T12905] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 700.790184][T12905] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 700.895489][T12761] 8021q: adding VLAN 0 to HW filter on device team0 [ 700.972145][T12982] netlink: 'syz.5.1949': attribute type 4 has an invalid length. [ 700.981545][ T5231] Bluetooth: hci7: command tx timeout [ 701.141203][T12983] netlink: 'syz.5.1949': attribute type 4 has an invalid length. [ 701.343869][T12989] loop3: detected capacity change from 0 to 512 [ 702.412147][ T2508] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 702.434934][ T9355] bridge0: port 1(bridge_slave_0) entered blocking state [ 702.442077][ T9355] bridge0: port 1(bridge_slave_0) entered forwarding state [ 702.481859][ T2508] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 702.542207][ T9355] bridge0: port 2(bridge_slave_1) entered blocking state [ 702.549370][ T9355] bridge0: port 2(bridge_slave_1) entered forwarding state [ 702.687287][T12905] hsr_slave_0: entered promiscuous mode [ 702.735028][T12905] hsr_slave_1: entered promiscuous mode [ 702.784722][T12905] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 702.805210][T12905] Cannot create hsr debugfs directory [ 703.206180][T12954] bridge0: port 1(bridge_slave_0) entered blocking state [ 703.233434][T13000] loop3: detected capacity change from 0 to 512 [ 703.246888][T12954] bridge0: port 1(bridge_slave_0) entered disabled state [ 703.278011][T12954] bridge_slave_0: entered allmulticast mode [ 703.309563][T12954] bridge_slave_0: entered promiscuous mode [ 703.338377][T13000] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 703.403115][T13000] ext4 filesystem being mounted at /35/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 703.593361][T12954] bridge0: port 2(bridge_slave_1) entered blocking state [ 703.640359][T12954] bridge0: port 2(bridge_slave_1) entered disabled state [ 703.666620][T12954] bridge_slave_1: entered allmulticast mode [ 703.742021][T12954] bridge_slave_1: entered promiscuous mode [ 704.493697][T12954] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 704.553602][T12954] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 704.726801][T12213] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 705.092939][T13028] loop2: detected capacity change from 0 to 512 [ 705.143154][T12954] team0: Port device team_slave_0 added [ 705.176644][T12954] team0: Port device team_slave_1 added [ 705.194997][T13028] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 705.334464][T13031] loop5: detected capacity change from 0 to 256 [ 705.562543][T12574] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 705.583839][T12954] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 705.604817][T12954] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 705.681609][T12954] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 705.709523][T12954] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 705.740243][T12954] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 705.819688][T12954] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 706.331642][T12954] hsr_slave_0: entered promiscuous mode [ 706.371102][T12954] hsr_slave_1: entered promiscuous mode [ 706.474138][T12954] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 706.574238][T12954] Cannot create hsr debugfs directory [ 707.150549][T13026] loop3: detected capacity change from 0 to 32768 [ 707.223536][T13026] XFS (loop3): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 707.308412][T13053] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1967'. [ 707.351363][T13053] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1967'. [ 707.378327][T13026] XFS (loop3): Ending clean mount [ 707.457386][T12761] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 707.530416][T13026] syz.3.1960 (13026) used greatest stack depth: 17840 bytes left [ 707.688547][T12213] XFS (loop3): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 711.653328][T12954] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 711.681053][T12905] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 711.697109][T12905] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 711.776848][T12905] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 712.120979][T12954] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 712.247025][T13093] Cannot find set identified by id 0 to match [ 713.021675][T12905] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 713.054581][T13098] loop3: detected capacity change from 0 to 64 [ 713.213387][T12954] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 713.246005][T13101] loop5: detected capacity change from 0 to 128 [ 713.588592][T12954] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 714.663851][T12761] veth0_vlan: entered promiscuous mode [ 714.990355][T12761] veth1_vlan: entered promiscuous mode [ 715.954377][T12761] veth0_macvtap: entered promiscuous mode [ 716.026577][T12761] veth1_macvtap: entered promiscuous mode [ 716.183584][T12761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 716.220192][T12761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 716.240209][T12761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 716.242191][T13122] loop2: detected capacity change from 0 to 64 [ 716.280019][T12761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 716.309275][T12761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 716.349020][T13124] loop5: detected capacity change from 0 to 128 [ 716.352961][T12761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 716.376608][T13122] BFS-fs: bfs_fill_super(): Superblock is corrupted on loop2 [ 716.392665][T12761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 716.438601][T12761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 716.452800][T13126] loop3: detected capacity change from 0 to 1024 [ 716.464284][T12761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 716.478446][T13124] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 716.510516][T12761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 716.520575][T12761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 716.531229][T12761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 716.541687][T13124] ext4 filesystem being mounted at /44/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 716.543350][T12761] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 716.601059][T13126] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 716.819878][T12761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 716.879698][T12761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 716.904579][T12761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 716.940002][T12761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 716.970190][T12761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 717.010149][T12761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 717.046478][T12761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 717.093245][T12761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 717.115536][T12761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 717.211352][T12761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 717.224786][T12761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 717.237711][T12761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 717.251038][T12761] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 717.263493][T12213] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 717.989576][T12954] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 718.170635][T12761] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 718.212000][T13145] loop3: detected capacity change from 0 to 256 [ 718.218447][T12761] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 718.246582][T13145] exfat: Deprecated parameter 'utf8' [ 718.251976][T12761] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 718.261086][T13145] exfat: Deprecated parameter 'utf8' [ 718.270833][T12761] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 718.293522][T12954] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 718.303245][T12204] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 718.391459][T12954] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 718.401774][T13145] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x23a77120, utbl_chksum : 0xe619d30d) [ 718.434075][T12954] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 718.652032][T12905] 8021q: adding VLAN 0 to HW filter on device bond0 [ 718.793135][T13154] loop5: detected capacity change from 0 to 64 [ 718.853943][T13154] BFS-fs: bfs_fill_super(): Inode 0x00000002 corrupted on loop5 [ 719.098850][T12905] 8021q: adding VLAN 0 to HW filter on device team0 [ 719.127730][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 719.150860][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 719.311849][ T8592] bridge0: port 1(bridge_slave_0) entered blocking state [ 719.319254][ T8592] bridge0: port 1(bridge_slave_0) entered forwarding state [ 719.357487][T13162] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2000'. [ 719.606641][T13164] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2001'. [ 719.734899][ T8592] bridge0: port 2(bridge_slave_1) entered blocking state [ 719.742139][ T8592] bridge0: port 2(bridge_slave_1) entered forwarding state [ 719.749680][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 719.800203][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 721.407639][T13176] loop2: detected capacity change from 0 to 2048 [ 721.463161][T13176] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 721.491362][T13176] UDF-fs: Scanning with blocksize 512 failed [ 721.529344][T12954] 8021q: adding VLAN 0 to HW filter on device bond0 [ 721.529890][T13176] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 129: 0x7d != 0x7e [ 721.618212][T12954] 8021q: adding VLAN 0 to HW filter on device team0 [ 721.681319][T13176] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 721.707574][ T5387] bridge0: port 1(bridge_slave_0) entered blocking state [ 721.714782][ T5387] bridge0: port 1(bridge_slave_0) entered forwarding state [ 721.791045][ T5387] bridge0: port 2(bridge_slave_1) entered blocking state [ 721.798217][ T5387] bridge0: port 2(bridge_slave_1) entered forwarding state [ 723.227215][ T5231] Bluetooth: hci4: Malformed MSFT vendor event: 0x02 [ 723.275630][T12954] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 723.279717][ T5231] Bluetooth: hci4: SCO packet for unknown connection handle 0 [ 724.141612][T12905] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 724.611841][T12905] veth0_vlan: entered promiscuous mode [ 724.688299][T12905] veth1_vlan: entered promiscuous mode [ 724.973265][T12905] veth0_macvtap: entered promiscuous mode [ 725.029429][T12905] veth1_macvtap: entered promiscuous mode [ 725.172230][T12954] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 725.223555][T12905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 725.276850][T12905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 725.309830][T12905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 725.391509][T12905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 725.434468][T12905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 725.482139][T12905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 725.521691][T12905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 725.583108][T12905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 725.614600][T12905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 725.676353][T12905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 725.712855][T13210] loop2: detected capacity change from 0 to 32768 [ 725.723123][T12905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 725.965864][T12905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 725.976066][T12905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 725.986771][T12905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 726.098738][T13233] ubi0: attaching mtd0 [ 726.136215][T13233] ubi0: scanning is finished [ 726.141153][T13233] ubi0: empty MTD device detected [ 727.318481][T13210] read_mapping_page failed! [ 727.323198][T13210] jfs_mount: diMount(ipaimap) failed w/rc = -5 [ 727.357152][T13210] Mount JFS Failure: -5 [ 727.383633][T13233] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 727.503819][T13210] jfs_mount failed w/return code = -5 [ 727.546407][T12905] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 727.645230][T12905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 727.696332][T12905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 727.736218][T12905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 727.800143][T12905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 727.840169][T12905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 727.903366][T12905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 727.927432][T13241] loop8: detected capacity change from 0 to 7 [ 727.932592][T12905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 727.966224][T12905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 728.006694][T13241] Dev loop8: unable to read RDB block 7 [ 728.026598][T13241] loop8: unable to read partition table [ 728.047107][T12905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 728.050549][T13241] loop8: partition table beyond EOD, truncated [ 728.103726][T12905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 728.120315][T13241] loop_reread_partitions: partition scan of loop8 (被xڬdƤݡ [ 728.120315][T13241] ) failed (rc=-5) [ 728.139005][T12905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 728.176807][T12905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 728.199414][T12905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 728.229538][T12905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 728.535766][T12905] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 730.005525][T12905] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 730.015416][T12905] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 730.025283][T12905] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 730.034070][T12905] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 730.293749][T13252] loop5: detected capacity change from 0 to 512 [ 730.366989][T13254] loop4: detected capacity change from 0 to 16 [ 730.399079][T13254] erofs: (device loop4): mounted with root inode @ nid 36. [ 731.350013][T13252] EXT4-fs error (device loop5): ext4_orphan_get:1391: inode #15: comm syz.5.2025: casefold flag without casefold feature [ 731.391486][T13252] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.2025: couldn't read orphan inode 15 (err -117) [ 731.454455][T13252] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 731.602362][T12954] veth0_vlan: entered promiscuous mode [ 731.613494][T13260] loop4: detected capacity change from 0 to 64 [ 731.677455][T13260] minix: Unknown parameter '|Aā W1gARYgZOr+]0#Q'ڸ˝&} [ 731.677455][T13260] Py`}ő*$8' [ 731.881679][ T2942] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 731.889496][ T2942] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 731.902870][T13260] 9pnet_fd: Insufficient options for proto=fd [ 732.036557][T12954] veth1_vlan: entered promiscuous mode [ 732.119568][T12204] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 732.162974][ T2942] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 732.200287][ T2942] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 732.322539][T12954] veth0_macvtap: entered promiscuous mode [ 732.373554][ T5312] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 732.565255][T13264] binder: 13262:13264 ioctl c0306201 0 returned -14 [ 732.590784][T12954] veth1_macvtap: entered promiscuous mode [ 732.626939][ T5312] usb 5-1: config 0 has no interfaces? [ 732.680411][ T5312] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 732.737248][T12954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 732.746364][ T5312] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 732.819493][ T5312] usb 5-1: config 0 descriptor?? [ 732.833724][T12954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 732.857719][T13266] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1925'. [ 732.890206][T12954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 733.022884][T12954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 733.053338][T12954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 733.097817][T12954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 733.118172][T12954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 733.190233][T12954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 733.236910][T12954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 733.322067][T12954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 733.365210][T12954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 733.460930][T12954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 733.550829][T12954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 733.614084][T12954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 733.655661][T12954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 733.662491][T13261] loop4: detected capacity change from 0 to 4096 [ 733.742533][T13261] ntfs3: Unknown parameter 'Yz7*UX' [ 733.761615][T12954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 733.811815][T12954] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 733.949944][T13269] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 735.235130][T12954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 735.247684][T12954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 735.257980][T12954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 735.269884][T12954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 735.279773][T12954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 735.292055][T12954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 735.302191][T12954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 735.312730][T12954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 735.325871][T12954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 735.336508][T12954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 735.346465][T12954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 735.357072][T12954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 735.931338][T12954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 736.044498][T12954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 736.064711][T12954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 736.096841][T12954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 736.172558][T12954] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 736.331508][T12954] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 736.396295][T12954] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 736.560268][ T5281] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 736.681649][T12954] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 737.427764][ T29] audit: type=1326 audit(1723223355.488:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13290 comm="syz.3.2035" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f661c9779f9 code=0x0 [ 737.476569][T12954] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 737.641342][ T5281] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 737.695222][ T5281] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 737.800260][ T5281] usb 3-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 737.814855][ T5281] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 737.863632][ T5281] usb 3-1: config 0 descriptor?? [ 737.918889][ T47] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 738.021379][ T2942] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 738.072673][ T2942] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 738.093396][ T936] usb 5-1: USB disconnect, device number 10 [ 738.111230][T13304] loop1: detected capacity change from 0 to 128 [ 738.150790][ T47] usb 4-1: Using ep0 maxpacket: 8 [ 738.169487][ T47] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 738.213336][ T2508] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 738.234208][ T2508] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 738.258637][T13304] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 738.278758][ T47] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 738.372671][T13309] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2034'. [ 738.376338][ T47] usb 4-1: New USB device found, idVendor=056a, idProduct=00c5, bcdDevice= 0.00 [ 738.399662][T13304] ext4 filesystem being mounted at /3/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 738.473566][ T47] usb 4-1: New USB device strings: Mfr=8, Product=0, SerialNumber=0 [ 738.517832][ T47] usb 4-1: Manufacturer: syz [ 738.554945][ T47] usb 4-1: config 0 descriptor?? [ 738.738144][ T5281] hid (null): global environment stack underflow [ 738.775788][ T5281] uclogic 0003:5543:0522.0016: global environment stack underflow [ 738.846115][ T5281] uclogic 0003:5543:0522.0016: item 0 1 1 11 parsing failed [ 738.876114][ T5281] uclogic 0003:5543:0522.0016: parse failed [ 738.912718][ T5281] uclogic 0003:5543:0522.0016: probe with driver uclogic failed with error -22 [ 741.973339][ T47] wacom 0003:056A:00C5.0017: unknown main item tag 0x0 [ 743.169938][ T47] wacom 0003:056A:00C5.0017: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 743.294647][T12905] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 743.370804][ T47] usb 3-1: USB disconnect, device number 24 [ 743.381650][ T5285] usb 4-1: USB disconnect, device number 19 [ 744.817440][T13332] netlink: 'syz.4.2047': attribute type 4 has an invalid length. [ 745.531276][T10079] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 745.585648][T13356] loop1: detected capacity change from 0 to 256 [ 746.172583][T13353] loop3: detected capacity change from 0 to 1024 [ 746.185043][T10079] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 746.202518][T10079] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 746.212747][T10079] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 746.226995][T10079] usb 5-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 746.239553][T10079] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 746.253593][T10079] usb 5-1: config 0 descriptor?? [ 746.340304][T13356] FAT-fs (loop1): Directory bread(block 64) failed [ 746.357587][T13356] FAT-fs (loop1): Directory bread(block 65) failed [ 746.376682][T13356] FAT-fs (loop1): Directory bread(block 66) failed [ 746.386880][T13356] FAT-fs (loop1): Directory bread(block 67) failed [ 746.393587][T13356] FAT-fs (loop1): Directory bread(block 68) failed [ 746.404715][T13356] FAT-fs (loop1): Directory bread(block 69) failed [ 746.515187][T13356] FAT-fs (loop1): Directory bread(block 70) failed [ 746.556118][T13356] FAT-fs (loop1): Directory bread(block 71) failed [ 746.584511][T13356] FAT-fs (loop1): Directory bread(block 72) failed [ 746.617175][T13356] FAT-fs (loop1): Directory bread(block 73) failed [ 746.739988][T13356] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2058'. [ 746.765667][ T1255] ieee802154 phy0 wpan0: encryption failed: -22 [ 746.773673][ T1255] ieee802154 phy1 wpan1: encryption failed: -22 [ 746.795024][T10079] acrux 0003:1A34:0802.0018: item fetching failed at offset 3/5 [ 746.804980][T10079] acrux 0003:1A34:0802.0018: parse failed [ 746.817753][T13370] program syz.2.2061 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 746.827967][T10079] acrux 0003:1A34:0802.0018: probe with driver acrux failed with error -22 [ 746.933039][T13370] Cannot find add_set index 0 as target [ 746.995808][T13370] loop2: detected capacity change from 0 to 64 [ 747.056933][ T59] usb 5-1: USB disconnect, device number 11 [ 747.818954][T13391] loop2: detected capacity change from 0 to 256 [ 747.845282][T13393] loop4: detected capacity change from 0 to 1024 [ 748.168569][T13398] netlink: 44306 bytes leftover after parsing attributes in process `syz.5.2074'. [ 749.040765][T12761] hfsplus: bad catalog entry type [ 749.080569][ T59] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 749.268443][ T29] audit: type=1326 audit(1723223367.978:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13400 comm="syz.3.2077" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f661c9779f9 code=0x0 [ 749.326299][ T59] usb 1-1: Using ep0 maxpacket: 32 [ 749.357169][ T59] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 749.417698][ T59] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 749.438046][ T59] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 749.449377][ T59] usb 1-1: Product: syz [ 749.465207][ T59] usb 1-1: Manufacturer: syz [ 749.474451][ T59] usb 1-1: SerialNumber: syz [ 749.563462][ T5326] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 749.573139][ T9339] hfsplus: b-tree write err: -5, ino 4 [ 749.603698][T13407] 9pnet_fd: Insufficient options for proto=fd [ 749.791692][ T5326] usb 6-1: Using ep0 maxpacket: 8 [ 749.828163][ T5326] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 749.885788][ T5326] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 749.902803][ T29] audit: type=1326 audit(1723223368.618:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13400 comm="syz.3.2077" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f661c9779f9 code=0x0 [ 749.914466][ T5326] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 749.990736][ T5326] usb 6-1: New USB device found, idVendor=1e71, idProduct=2006, bcdDevice= 0.00 [ 749.999000][ T35] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 750.007333][ T5326] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 750.023546][ T5326] usb 6-1: config 0 descriptor?? [ 750.085080][T13395] input: syz0 as /devices/virtual/input/input32 [ 750.503129][ T5326] nzxt-smart2 0003:1E71:2006.0019: unknown main item tag 0x0 [ 750.542454][ T5326] nzxt-smart2 0003:1E71:2006.0019: unknown main item tag 0x0 [ 750.550458][ T5326] nzxt-smart2 0003:1E71:2006.0019: unknown main item tag 0x0 [ 750.579831][ T35] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 750.616220][ T5326] nzxt-smart2 0003:1E71:2006.0019: unknown main item tag 0x0 [ 750.675576][ T5326] nzxt-smart2 0003:1E71:2006.0019: unknown main item tag 0x0 [ 750.746967][ T5326] nzxt-smart2 0003:1E71:2006.0019: hidraw0: USB HID v0.00 Device [HID 1e71:2006] on usb-dummy_hcd.5-1/input0 [ 750.960085][ T59] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 750.966651][ T59] cdc_ncm 1-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 751.000401][ T35] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 751.030593][ T5326] usb 6-1: USB disconnect, device number 19 [ 751.040184][ T59] cdc_ncm 1-1:1.0: setting rx_max = 2048 [ 751.253096][T13422] loop2: detected capacity change from 0 to 512 [ 751.318468][ T35] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 751.372889][T13422] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 751.448718][ T59] cdc_ncm 1-1:1.0: setting tx_max = 88 [ 751.541690][T13422] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #17: comm syz.2.2085: iget: bad i_size value: -6917529027641081756 [ 751.680660][ T59] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 751.732605][T13422] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.2085: couldn't read orphan inode 17 (err -117) [ 751.782614][ T59] usb 1-1: USB disconnect, device number 28 [ 751.821061][ T59] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM (NO ZLP) [ 751.883575][T13422] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 752.123586][ T35] bridge_slave_1: left allmulticast mode [ 752.133510][ T35] bridge_slave_1: left promiscuous mode [ 752.139283][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 752.150059][T13432] loop5: detected capacity change from 0 to 256 [ 752.336860][ T9749] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 752.350268][ T9749] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 752.358498][ T9749] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 752.367605][ T9749] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 752.376615][ T9749] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 752.384200][ T9749] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 752.403061][ T35] bridge_slave_0: left allmulticast mode [ 752.408855][ T35] bridge_slave_0: left promiscuous mode [ 752.414734][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 752.501423][T13436] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2085: bg 0: block 65: padding at end of block bitmap is not set [ 752.525027][T13436] Quota error (device loop2): write_blk: dquota write failed [ 752.540370][T13436] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 752.560211][T13436] EXT4-fs error (device loop2): ext4_acquire_dquot:6848: comm syz.2.2085: Failed to acquire dquot type 0 [ 753.236043][T12574] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 753.270752][T13432] exFAT-fs (loop5): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 753.587122][T13437] dns_resolver: Unsupported server list version (0) [ 753.606525][T13443] loop2: detected capacity change from 0 to 256 [ 753.617348][T13443] FAT-fs (loop2): Directory bread(block 1285) failed [ 753.685004][ T29] audit: type=1800 audit(1723223372.408:212): pid=13437 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2088" name="bus" dev="loop5" ino=1048946 res=0 errno=0 [ 753.685559][T13443] FAT-fs (loop2): Directory bread(block 1285) failed [ 753.788887][T13443] FAT-fs (loop2): Directory bread(block 1285) failed [ 753.796591][T13443] FAT-fs (loop2): Directory bread(block 1285) failed [ 753.816079][T13443] FAT-fs (loop2): Directory bread(block 1285) failed [ 753.865304][ T29] audit: type=1800 audit(1723223372.448:213): pid=13437 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2088" name="bus" dev="loop5" ino=1048946 res=0 errno=0 [ 753.869573][T13443] FAT-fs (loop2): FAT read failed (blocknr 1281) [ 753.940605][ T9749] Bluetooth: hci3: command 0x0406 tx timeout [ 753.972310][T13449] FAT-fs (loop2): Directory bread(block 1285) failed [ 753.979267][T13449] FAT-fs (loop2): FAT read failed (blocknr 1281) [ 754.044592][T13448] FAT-fs (loop2): Directory bread(block 1285) failed [ 754.111594][T13448] FAT-fs (loop2): Directory bread(block 1285) failed [ 754.332551][T13455] netlink: 'syz.5.2095': attribute type 1 has an invalid length. [ 754.350224][T13455] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2095'. [ 754.440231][ T5281] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 755.284341][T12213] ------------[ cut here ]------------ [ 755.289833][T12213] DEBUG_LOCKS_WARN_ON(1) [ 755.289939][T12213] WARNING: CPU: 1 PID: 12213 at kernel/locking/lockdep.c:231 __lock_acquire+0x58c/0x2040 [ 755.303994][T12213] Modules linked in: [ 755.307896][T12213] CPU: 1 UID: 0 PID: 12213 Comm: syz-executor Not tainted 6.11.0-rc2-syzkaller-00111-gee9a43b7cfe2 #0 [ 755.318842][T12213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 755.328900][T12213] RIP: 0010:__lock_acquire+0x58c/0x2040 [ 755.334469][T12213] Code: 00 00 83 3d 65 30 a8 0e 00 75 23 90 48 c7 c7 00 d4 0a 8c 48 c7 c6 a0 d6 0a 8c e8 ff d8 e5 ff 48 ba 00 00 00 00 00 fc ff df 90 <0f> 0b 90 90 90 31 db 48 81 c3 c4 00 00 00 48 89 d8 48 c1 e8 03 0f [ 755.354084][T12213] RSP: 0018:ffffc900043a79f0 EFLAGS: 00010046 [ 755.360159][T12213] RAX: 4548cfadae728100 RBX: 0000000000001420 RCX: ffff88802a9b5a00 [ 755.368133][T12213] RDX: dffffc0000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 755.376109][T12213] RBP: 0000000000000000 R08: ffffffff8155a2d2 R09: fffffbfff1cfa0d8 [ 755.384083][T12213] R10: dffffc0000000000 R11: fffffbfff1cfa0d8 R12: ffff88802a9b5a00 [ 755.392063][T12213] R13: 0000000000001420 R14: 1ffff11005536ca0 R15: ffff88802a9b6500 [ 755.400047][T12213] FS: 0000555577cc5500(0000) GS:ffff8880b9300000(0000) knlGS:0000000000000000 [ 755.408983][T12213] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 755.415566][T12213] CR2: 0000001b2c90aff8 CR3: 0000000066b8c000 CR4: 0000000000350ef0 [ 755.423526][T12213] Call Trace: [ 755.426786][T12213] [ 755.429700][T12213] ? __warn+0x163/0x4e0 [ 755.433858][T12213] ? __lock_acquire+0x58c/0x2040 [ 755.438791][T12213] ? report_bug+0x2b3/0x500 [ 755.443289][T12213] ? __lock_acquire+0x58c/0x2040 [ 755.448222][T12213] ? handle_bug+0x3e/0x70 [ 755.452538][T12213] ? exc_invalid_op+0x1a/0x50 [ 755.457199][T12213] ? asm_exc_invalid_op+0x1a/0x20 [ 755.462214][T12213] ? __warn_printk+0x292/0x360 [ 755.466965][T12213] ? __lock_acquire+0x58c/0x2040 [ 755.471907][T12213] lock_acquire+0x1ed/0x550 [ 755.476401][T12213] ? raw_spin_rq_lock_nested+0xb0/0x140 [ 755.481942][T12213] ? __pfx_lock_acquire+0x10/0x10 [ 755.486962][T12213] ? rcu_note_context_switch+0xc7c/0xff0 [ 755.492588][T12213] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 755.498919][T12213] ? srso_alias_return_thunk+0x5/0xfbef5 [ 755.504544][T12213] ? remove_wait_queue+0x33/0x130 [ 755.509562][T12213] ? srso_alias_return_thunk+0x5/0xfbef5 [ 755.515202][T12213] _raw_spin_lock_nested+0x31/0x40 [ 755.520323][T12213] ? raw_spin_rq_lock_nested+0xb0/0x140 [ 755.525868][T12213] raw_spin_rq_lock_nested+0xb0/0x140 [ 755.531234][T12213] __schedule+0x357/0x4a60 [ 755.535646][T12213] ? __pfx_child_wait_callback+0x10/0x10 [ 755.541273][T12213] ? srso_alias_return_thunk+0x5/0xfbef5 [ 755.546896][T12213] ? hrtimer_nanosleep+0x387/0x470 [ 755.552002][T12213] ? srso_alias_return_thunk+0x5/0xfbef5 [ 755.557626][T12213] ? __pfx___schedule+0x10/0x10 [ 755.562470][T12213] ? __pfx___x64_sys_wait4+0x10/0x10 [ 755.567762][T12213] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 755.573735][T12213] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 755.580061][T12213] schedule+0x14b/0x320 [ 755.584222][T12213] syscall_exit_to_user_mode+0x13e/0x370 [ 755.589857][T12213] do_syscall_64+0x100/0x230 [ 755.594447][T12213] ? srso_alias_return_thunk+0x5/0xfbef5 [ 755.600080][T12213] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 755.605983][T12213] RIP: 0033:0x7f661c96dc57 [ 755.610386][T12213] Code: 89 7c 24 10 48 89 4c 24 18 e8 55 15 03 00 4c 8b 54 24 18 8b 54 24 14 41 89 c0 48 8b 74 24 08 8b 7c 24 10 b8 3d 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 89 44 24 10 e8 a5 15 03 00 8b 44 [ 755.629976][T12213] RSP: 002b:00007fffb5a87790 EFLAGS: 00000293 ORIG_RAX: 000000000000003d [ 755.638378][T12213] RAX: 0000000000000000 RBX: 00000000000000c2 RCX: 00007f661c96dc57 [ 755.646361][T12213] RDX: 0000000040000001 RSI: 00007fffb5a877ec RDI: 00000000ffffffff [ 755.654319][T12213] RBP: 00007fffb5a877ec R08: 0000000000000000 R09: 7fffffffffffffff [ 755.662275][T12213] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000032 [ 755.670244][T12213] R13: 00000000000b81bb R14: 00000000000b81bb R15: 00007fffb5a87840 [ 755.678210][T12213] [ 755.681229][T12213] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 755.688489][T12213] CPU: 1 UID: 0 PID: 12213 Comm: syz-executor Not tainted 6.11.0-rc2-syzkaller-00111-gee9a43b7cfe2 #0 [ 755.699406][T12213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 755.709449][T12213] Call Trace: [ 755.712715][T12213] [ 755.715629][T12213] dump_stack_lvl+0x241/0x360 [ 755.720307][T12213] ? __pfx_dump_stack_lvl+0x10/0x10 [ 755.725500][T12213] ? __pfx__printk+0x10/0x10 [ 755.730080][T12213] ? _printk+0xd5/0x120 [ 755.734245][T12213] ? srso_alias_return_thunk+0x5/0xfbef5 [ 755.739868][T12213] ? vscnprintf+0x5d/0x90 [ 755.744192][T12213] panic+0x349/0x860 [ 755.748103][T12213] ? __warn+0x172/0x4e0 [ 755.752250][T12213] ? __pfx_panic+0x10/0x10 [ 755.756659][T12213] ? show_trace_log_lvl+0x4e6/0x520 [ 755.761884][T12213] __warn+0x346/0x4e0 [ 755.765868][T12213] ? __lock_acquire+0x58c/0x2040 [ 755.770804][T12213] report_bug+0x2b3/0x500 [ 755.775130][T12213] ? __lock_acquire+0x58c/0x2040 [ 755.780062][T12213] handle_bug+0x3e/0x70 [ 755.784204][T12213] exc_invalid_op+0x1a/0x50 [ 755.788691][T12213] asm_exc_invalid_op+0x1a/0x20 [ 755.793528][T12213] RIP: 0010:__lock_acquire+0x58c/0x2040 [ 755.799066][T12213] Code: 00 00 83 3d 65 30 a8 0e 00 75 23 90 48 c7 c7 00 d4 0a 8c 48 c7 c6 a0 d6 0a 8c e8 ff d8 e5 ff 48 ba 00 00 00 00 00 fc ff df 90 <0f> 0b 90 90 90 31 db 48 81 c3 c4 00 00 00 48 89 d8 48 c1 e8 03 0f [ 755.818661][T12213] RSP: 0018:ffffc900043a79f0 EFLAGS: 00010046 [ 755.824722][T12213] RAX: 4548cfadae728100 RBX: 0000000000001420 RCX: ffff88802a9b5a00 [ 755.832682][T12213] RDX: dffffc0000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 755.840640][T12213] RBP: 0000000000000000 R08: ffffffff8155a2d2 R09: fffffbfff1cfa0d8 [ 755.848597][T12213] R10: dffffc0000000000 R11: fffffbfff1cfa0d8 R12: ffff88802a9b5a00 [ 755.856554][T12213] R13: 0000000000001420 R14: 1ffff11005536ca0 R15: ffff88802a9b6500 [ 755.864516][T12213] ? __warn_printk+0x292/0x360 [ 755.869370][T12213] lock_acquire+0x1ed/0x550 [ 755.873872][T12213] ? raw_spin_rq_lock_nested+0xb0/0x140 [ 755.879430][T12213] ? __pfx_lock_acquire+0x10/0x10 [ 755.884449][T12213] ? rcu_note_context_switch+0xc7c/0xff0 [ 755.890086][T12213] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 755.896429][T12213] ? srso_alias_return_thunk+0x5/0xfbef5 [ 755.902056][T12213] ? remove_wait_queue+0x33/0x130 [ 755.907085][T12213] ? srso_alias_return_thunk+0x5/0xfbef5 [ 755.912732][T12213] _raw_spin_lock_nested+0x31/0x40 [ 755.917840][T12213] ? raw_spin_rq_lock_nested+0xb0/0x140 [ 755.923378][T12213] raw_spin_rq_lock_nested+0xb0/0x140 [ 755.928743][T12213] __schedule+0x357/0x4a60 [ 755.933154][T12213] ? __pfx_child_wait_callback+0x10/0x10 [ 755.938778][T12213] ? srso_alias_return_thunk+0x5/0xfbef5 [ 755.944408][T12213] ? hrtimer_nanosleep+0x387/0x470 [ 755.949510][T12213] ? srso_alias_return_thunk+0x5/0xfbef5 [ 755.955133][T12213] ? __pfx___schedule+0x10/0x10 [ 755.959977][T12213] ? __pfx___x64_sys_wait4+0x10/0x10 [ 755.965256][T12213] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 755.971231][T12213] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 755.977556][T12213] schedule+0x14b/0x320 [ 755.981708][T12213] syscall_exit_to_user_mode+0x13e/0x370 [ 755.987338][T12213] do_syscall_64+0x100/0x230 [ 755.991927][T12213] ? srso_alias_return_thunk+0x5/0xfbef5 [ 755.997550][T12213] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 756.003429][T12213] RIP: 0033:0x7f661c96dc57 [ 756.007939][T12213] Code: 89 7c 24 10 48 89 4c 24 18 e8 55 15 03 00 4c 8b 54 24 18 8b 54 24 14 41 89 c0 48 8b 74 24 08 8b 7c 24 10 b8 3d 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 89 44 24 10 e8 a5 15 03 00 8b 44 [ 756.027728][T12213] RSP: 002b:00007fffb5a87790 EFLAGS: 00000293 ORIG_RAX: 000000000000003d [ 756.036133][T12213] RAX: 0000000000000000 RBX: 00000000000000c2 RCX: 00007f661c96dc57 [ 756.044098][T12213] RDX: 0000000040000001 RSI: 00007fffb5a877ec RDI: 00000000ffffffff [ 756.052064][T12213] RBP: 00007fffb5a877ec R08: 0000000000000000 R09: 7fffffffffffffff [ 756.060021][T12213] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000032 [ 756.067976][T12213] R13: 00000000000b81bb R14: 00000000000b81bb R15: 00007fffb5a87840 [ 756.075946][T12213] [ 756.079182][T12213] Kernel Offset: disabled [ 756.083493][T12213] Rebooting in 86400 seconds..