last executing test programs: 10.368007182s ago: executing program 1 (id=1114): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x2c, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 9.912295525s ago: executing program 1 (id=1116): sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001a40)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000300)="a0", 0x34000}], 0x1}], 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000020240), 0x10010) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r4, 0x4068aea3, &(0x7f0000000380)) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x13, r5, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000000c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = dup(r8) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000240)="f381c70a0066b8dc95fc9a0f23d00f21f866350000000b0f23f8c59f0060440f20c0663504000000440f22c00f20d86635200000000f22d82ef00fc09cfa4e0f0138653e66f20f38f07300b8420e8ed036652e362e26360f01ca", 0x5a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r10, 0xae9a) ioctl$KVM_RUN(r10, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f00003e1000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0x200394}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r6, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0x10012, r0, 0x0) 8.817361699s ago: executing program 0 (id=1119): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}], 0x38) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"448cc880fe353ca0f2c2e953"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0xc4) write$sndseq(r1, &(0x7f0000002840)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}], 0x54) write$sndseq(r1, &(0x7f0000000300)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @result}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}], 0xc4) write$sndseq(r1, &(0x7f0000000a40)=[{0x0, 0x0, 0x0, 0x1, @time, {0x1}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x48, &(0x7f0000000400)="03743d77482eed07fcfd08afe129571b50696abd0bf6acbad2d26409aef1ff7afd8aa0bcd60d22d120c909a932ad3c3c5e3618f0b5199770d52f859c09d929b015c5edfbdbd1b8d3"}}, {0x0, 0x0, 0x4, 0x0, @tick=0x7, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue={0x4}}, {0x0, 0x1, 0x0, 0x0, @time={0x1}, {}, {}, @queue}], 0x8c) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}], 0x54) write$sndseq(r1, &(0x7f0000000f80)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @addr}, {}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xc4) write$sndseq(r1, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @result}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time}], 0x8c) write$sndseq(r1, &(0x7f0000000740)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @result}], 0x8c) write$sndseq(r1, &(0x7f0000000b00)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @result}, {}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"b5f8fbe8c20c855083221c33"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}], 0xc4) write$sndseq(r1, &(0x7f0000000800)=[{0x0, 0x0, 0x0, 0x0, @time={0xb, 0x3}, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw8={"ce274516c7da5b6da0b16993"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"b134b141793d8609365bda4d"}}, {}], 0xfc) write$sndseq(r1, &(0x7f0000000d00)=[{0x0, 0x0, 0x0, 0x0, @time}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"49cbee45cad57a0372831665"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}], 0x8c) write$sndseq(r1, &(0x7f0000000080)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time={0x0, 0xfffffffc}, {}, {}, @control}], 0x38) write$sndseq(r1, &(0x7f00000005c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}], 0x54) write$sndseq(r1, &(0x7f00000004c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"9f2fb5905835280aeb65e178"}}], 0x54) write$binfmt_misc(r1, &(0x7f0000000440), 0x58) 8.467874257s ago: executing program 3 (id=1120): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000740)=ANY=[], 0x28}}, 0x0) 8.232346318s ago: executing program 0 (id=1121): r0 = socket$l2tp(0x2, 0x2, 0x73) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="04000000005b0000000003000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r3, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000020d0039000000000000b4a518110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001f40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r5}, 0x10) sendmsg$inet(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000740)='=q', 0x2}], 0x1}, 0x1) recvmsg(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x2) close_range(r0, 0xffffffffffffffff, 0x0) 8.177327938s ago: executing program 3 (id=1122): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket(0x2a, 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x20}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000007c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff3}, {}, {0x1c, 0xc}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x1}]}}]}, 0x3c}}, 0x44050) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 7.626802484s ago: executing program 1 (id=1123): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000000)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) setpgid(0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0) 7.428062031s ago: executing program 3 (id=1124): sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xaece, 0x0) preadv(r2, &(0x7f0000000180), 0x5f, 0x0, 0x0) 7.323007534s ago: executing program 1 (id=1125): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2c, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x3e}]}, 0x2c}}, 0x0) r3 = syz_usb_connect(0x0, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f0002"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r4, 0xc0105b08, &(0x7f0000000040)) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x50, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={{{}, {}, @device_b}, @ext_ch_sw={0x4, 0x4, {{}, @val={0x76, 0x6, {0x4, 0x5, 0x19, 0x3}}}}}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x8, 0xcd, [0x0, 0x1]}]}, 0x50}}, 0x0) landlock_create_ruleset(&(0x7f0000000080)={0x8000}, 0x10, 0x0) listen(0xffffffffffffffff, 0x3) syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000e00)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0093d84f10fc3e1ec648b776cb7f8081d09ad0cc63a23840b824f920b21981285520a35f491e6934193661e8f46d"], 0x1, 0xd99, &(0x7f0000000e80)="$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") ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, 0x0) 7.15607141s ago: executing program 0 (id=1126): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {}, {0x2}}}, 0x24}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) openat$ptp0(0xffffffffffffff9c, 0x0, 0x2001, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000"/34, @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 6.838457292s ago: executing program 2 (id=1127): syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @random="00006a9ce7f3", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '@\x00', 0x14, 0x6, 0x0, @private0={0xfc, 0x0, '\x00', 0x3}, @local, {[], {{0x4e20, 0x4e21, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0xc2, 0x2, 0x0, 0x5}}}}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) set_mempolicy(0x2, &(0x7f0000000140)=0x8001, 0x2) syz_mount_image$jfs(&(0x7f0000000200), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="646973636172642c71756f74612c6572726f72733d72656d6f756e742d726f2c696f636861727365743d6d61637475726b6973682c6572726f72733d72656d6f756e742d726f2c71756f74612c696f636861727365743d6d616363726f617469616e006572726f72733d72656df1cd6e742d726f2c75737271756f74612c71756f74612c726573697a653d3078666666666666666666666666666666652c67727071756f74612c726573697a652c646973636172642c61707072616973652c7375626a5f757365723d21952c7375626a5f726f6c653d726573697a652c00"], 0x1, 0x61f5, &(0x7f0000000fc0)="$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") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) 6.718926019s ago: executing program 3 (id=1128): syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000e00)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0093d84f10fc3e1ec648b776cb7f8081d09ad0cc63a23840b824f920b21981285520a35f491e6934193661e8f46d"], 0x1, 0xd99, &(0x7f0000000e80)="$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") syz_io_uring_setup(0x10d, &(0x7f0000000200), &(0x7f0000000340), &(0x7f0000000280)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1ff) ioctl$FITRIM(r3, 0x40086e8b, &(0x7f00000000c0)={0x1ffffe, 0xfffffffffffffff7, 0x1}) 5.12685254s ago: executing program 0 (id=1129): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000580)=ANY=[@ANYBLOB="1201000083667d1040206402d14e010203010902"], 0x0) close(0x3) syz_emit_ethernet(0x36, &(0x7f0000000280)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) 4.777555875s ago: executing program 4 (id=1130): unshare(0x2a020400) r0 = syz_io_uring_setup(0x5c23, &(0x7f0000000240)={0x0, 0x0, 0x13290}, &(0x7f0000000440)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_RENAMEAT={0x23, 0x6, 0x0, 0xffffffffffffffff, &(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000400)='./file0/../file0\x00'}) io_uring_enter(r0, 0x1, 0x0, 0x1, 0x0, 0x1000000) 4.320260613s ago: executing program 2 (id=1131): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup(r1) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, 0x3, 0x8, 0x101, 0x0, 0x0, {0xb37165807fcc9f9f, 0x0, 0x1}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0xc0ed0040, &(0x7f0000000000)={[{@data_writeback}, {@resgid={'resgid', 0x3d, 0xee00}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7f}}, {@noload}, {@nobarrier}, {@nodiscard}]}, 0xfe, 0x477, &(0x7f0000000dc0)="$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") syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0, 0x55}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 4.079339768s ago: executing program 3 (id=1132): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) sendto$inet(r0, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec00000001090212"], 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x3, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) 4.000790779s ago: executing program 4 (id=1133): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket(0x2a, 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000007c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xfff3}, {}, {0x1c, 0xc}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x1}]}}]}, 0x3c}}, 0x44050) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3.151073888s ago: executing program 1 (id=1134): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000000)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) setpgid(0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0) 3.145597901s ago: executing program 4 (id=1135): socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x3c, r1, 0x9, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY={0x14, 0x50, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4001d}, 0x20000000) 2.712622701s ago: executing program 1 (id=1136): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00222200000006232d06e53f070c0008000a9000070900be008300f7ccbde397720a330be58c3dda"], 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) read$hidraw(r1, &(0x7f00000000c0)=""/34, 0x22) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x20}}, 0x20) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000000)='B') syz_mount_image$hfs(&(0x7f0000000240), &(0x7f0000000980)='./file1\x00', 0x18, &(0x7f0000000000)=ANY=[@ANYRES64], 0x1, 0x235, &(0x7f0000000540)="$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") socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_procfs(0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB], 0x24d8}], 0x1}, 0x0) 2.63459345s ago: executing program 4 (id=1137): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xaece, 0x0) preadv(r2, &(0x7f0000000180), 0x5f, 0x0, 0x0) 2.168730815s ago: executing program 2 (id=1138): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x20008800}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@delchain={0x3c, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x0, 0xffff}, {0xfff3, 0x2}}, [@filter_kind_options=@f_flower={{0x5}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_STATE_MASK={0x6, 0x5c, 0xb54}]}}]}, 0x3c}}, 0x4008000) 2.108948409s ago: executing program 4 (id=1139): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {}, {0x2}}}, 0x24}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) openat$ptp0(0xffffffffffffff9c, 0x0, 0x2001, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000"/34, @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.750887119s ago: executing program 0 (id=1140): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000300)='./file1\x00', 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="6d706f6c3d696ed5f3653d7374617469633a382d370a"]) 1.624150132s ago: executing program 2 (id=1141): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x20048800) r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x1, @private}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) dup2(r0, 0xffffffffffffffff) connect$rxrpc(0xffffffffffffffff, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x400}}, 0x24) sendmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, '$'}], 0x18, 0xe000}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0x500}}], 0x2, 0x0) 1.208605922s ago: executing program 2 (id=1142): r0 = socket$l2tp(0x2, 0x2, 0x73) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="04000000005b0000000003000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r3, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000020d0039000000000000b4a518110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001f40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r5}, 0x10) sendmsg$inet(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000740)='=q', 0x2}], 0x1}, 0x1) recvmsg(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x2) close_range(r0, 0xffffffffffffffff, 0x0) 1.071397856s ago: executing program 4 (id=1143): socket$inet6(0xa, 0x80002, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000200)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000180)={r2, 0x3, r1, 0x6}) 924.41704ms ago: executing program 3 (id=1144): creat(&(0x7f0000000240)='./file0\x00', 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_mmap}], [], 0x6b}}) chmod(&(0x7f0000000140)='./file0\x00', 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$UHID_INPUT(r4, &(0x7f0000000540)={0x8, {"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", 0x1000}}, 0x1006) 439.490963ms ago: executing program 0 (id=1145): fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, 0x0, 0x0, 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') preadv(r0, &(0x7f0000000500)=[{&(0x7f0000000080)=""/116, 0x74}], 0x1, 0x2, 0x3) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) 0s ago: executing program 2 (id=1146): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000006180)=""/152, 0x98}], 0x1, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0)=0x20001, 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000100)={@in={{0x2, 0x0, @local}}, 0x0, 0x0, 0x3f, 0x0, "3c982b2bf01cf3cba642d936a9b478c7242d59b62119a4bba38fc8ab386ef786347944d5c551444fd5a59b3d8ce81fc117f407a585e6f6a140426a7a49dacf54de15a7a47759f3108084409aa8b2f15d"}, 0xd8) setsockopt$inet_tcp_int(r1, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) sendto$inet(r1, 0x0, 0x0, 0x20000010, &(0x7f0000000000)={0x2, 0x0, @local}, 0x51) write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) r2 = semget$private(0x0, 0x0, 0x0) semop(r2, 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000780)={[{@nogrpid}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@debug}, {@grpquota}, {@init_itable}]}, 0x3, 0x42f, &(0x7f0000000340)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000000, 0x4010, 0xffffffffffffffff, 0x2474c000) unlink(&(0x7f0000000180)='./file1\x00') rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) userfaultfd(0x80001) socket$alg(0x26, 0x5, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="600000000206050000000000000000000000000005000400000000000900020073797a3200000000140007800800064000006a000800084000005fdc0500050002000000050001000600000011000300686173683a6970"], 0x60}}, 0x0) kernel console output (not intermixed with test programs): n_adv: batadv0: Adding interface: batadv_slave_0 [ 606.643190][ T8686] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 606.669708][ T8686] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 606.686355][ T8686] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 606.693521][ T8686] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 606.723462][ T8686] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 606.817443][ T8546] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.826627][ T8546] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.836049][ T8546] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.845067][ T8546] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.996975][ T8602] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 607.291220][ T8686] hsr_slave_0: entered promiscuous mode [ 607.358886][ T8686] hsr_slave_1: entered promiscuous mode [ 609.128505][ T8602] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 609.201337][ T8686] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 609.255961][ T8686] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 609.345583][ T8686] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 609.406995][ T8686] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 610.673602][ T8686] 8021q: adding VLAN 0 to HW filter on device bond0 [ 610.888090][ T8686] 8021q: adding VLAN 0 to HW filter on device team0 [ 610.972400][ T3272] bridge0: port 1(bridge_slave_0) entered blocking state [ 610.980152][ T3272] bridge0: port 1(bridge_slave_0) entered forwarding state [ 611.130785][ T3272] bridge0: port 2(bridge_slave_1) entered blocking state [ 611.138534][ T3272] bridge0: port 2(bridge_slave_1) entered forwarding state [ 611.992316][ T8602] veth0_vlan: entered promiscuous mode [ 612.231550][ T8602] veth1_vlan: entered promiscuous mode [ 612.634215][ T8602] veth0_macvtap: entered promiscuous mode [ 612.784960][ T8602] veth1_macvtap: entered promiscuous mode [ 612.931021][ T8602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 612.942677][ T8602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 612.953887][ T8602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 612.964969][ T8602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 612.975153][ T8602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 612.985874][ T8602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 613.000738][ T8602] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 613.199382][ T8602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 613.210477][ T8602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 613.220780][ T8602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 613.231541][ T8602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 613.241764][ T8602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 613.253571][ T8602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 613.268556][ T8602] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 613.302303][ T3057] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 613.310371][ T3057] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 613.516935][ T8602] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.526258][ T8602] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.535900][ T8602] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.545114][ T8602] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.593822][ T3567] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 613.602027][ T3567] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 613.734301][ T8686] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 614.328769][ T8686] veth0_vlan: entered promiscuous mode [ 614.466047][ T8686] veth1_vlan: entered promiscuous mode [ 614.862275][ T8686] veth0_macvtap: entered promiscuous mode [ 614.942857][ T8686] veth1_macvtap: entered promiscuous mode [ 615.049285][ T3567] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 615.057491][ T3567] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 615.070948][ T8686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 615.081943][ T8686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 615.092189][ T8686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 615.104010][ T8686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 615.114477][ T8686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 615.125266][ T8686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 615.135418][ T8686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 615.146236][ T8686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 615.161309][ T8686] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 615.291586][ T8686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 615.304298][ T8686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 615.315936][ T8686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 615.329580][ T8686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 615.340320][ T8686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 615.351185][ T8686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 615.361463][ T8686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 615.372296][ T8686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 615.387110][ T8686] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 615.513397][ T8686] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.522636][ T8686] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.531774][ T8686] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.540771][ T8686] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.587531][ T7450] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 615.595941][ T7450] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 617.435319][ T5203] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 617.444865][ T5203] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 617.459781][ T5203] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 617.483175][ T5203] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 617.494809][ T5203] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 617.504523][ T5203] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 618.316554][ T8856] netlink: 40 bytes leftover after parsing attributes in process `syz.0.787'. [ 618.346516][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.561947][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.825521][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.107252][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.559581][ T5203] Bluetooth: hci0: command tx timeout [ 619.647769][ T11] bridge_slave_1: left allmulticast mode [ 619.654792][ T11] bridge_slave_1: left promiscuous mode [ 619.661758][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 619.716783][ T11] bridge_slave_0: left allmulticast mode [ 619.723045][ T11] bridge_slave_0: left promiscuous mode [ 619.729836][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 620.428906][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 620.451752][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 620.483719][ T11] bond0 (unregistering): Released all slaves [ 620.650821][ T8835] chnl_net:caif_netlink_parms(): no params data found [ 621.366922][ T8890] bond1: entered promiscuous mode [ 621.638711][ T5203] Bluetooth: hci0: command tx timeout [ 621.802802][ T11] hsr_slave_0: left promiscuous mode [ 621.820862][ T11] hsr_slave_1: left promiscuous mode [ 621.831402][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 621.839258][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 621.894740][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 621.902580][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 621.978983][ T11] veth1_macvtap: left promiscuous mode [ 621.984745][ T11] veth0_macvtap: left promiscuous mode [ 621.990846][ T11] veth1_vlan: left promiscuous mode [ 621.996403][ T11] veth0_vlan: left promiscuous mode [ 622.746156][ T11] team0 (unregistering): Port device team_slave_1 removed [ 622.803941][ T11] team0 (unregistering): Port device team_slave_0 removed [ 623.132663][ T8903] netlink: 48 bytes leftover after parsing attributes in process `syz.0.794'. [ 623.544289][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 623.552611][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 623.729894][ T5203] Bluetooth: hci0: command tx timeout [ 623.768760][ T8918] netlink: 40 bytes leftover after parsing attributes in process `syz.0.796'. [ 623.822295][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 623.830483][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 624.156835][ T8835] bridge0: port 1(bridge_slave_0) entered blocking state [ 624.164645][ T8835] bridge0: port 1(bridge_slave_0) entered disabled state [ 624.172747][ T8835] bridge_slave_0: entered allmulticast mode [ 624.181907][ T8835] bridge_slave_0: entered promiscuous mode [ 624.196804][ T8835] bridge0: port 2(bridge_slave_1) entered blocking state [ 624.205350][ T8835] bridge0: port 2(bridge_slave_1) entered disabled state [ 624.213352][ T8835] bridge_slave_1: entered allmulticast mode [ 624.279867][ T8835] bridge_slave_1: entered promiscuous mode [ 624.737580][ T8835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 624.850558][ T8835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 625.139585][ T8835] team0: Port device team_slave_0 added [ 625.158218][ T8835] team0: Port device team_slave_1 added [ 625.641689][ T8835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 625.649208][ T8835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 625.675802][ T8835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 625.818755][ T5203] Bluetooth: hci0: command tx timeout [ 625.830052][ T8835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 625.838117][ T8835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 625.865072][ T8835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 625.894319][ T8943] netlink: 48 bytes leftover after parsing attributes in process `syz.4.803'. [ 625.902858][ T3567] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 625.911722][ T3567] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 626.167953][ T3057] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 626.176283][ T3057] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 626.205060][ T8835] hsr_slave_0: entered promiscuous mode [ 626.277949][ T8835] hsr_slave_1: entered promiscuous mode [ 626.303050][ T8835] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 626.311204][ T8835] Cannot create hsr debugfs directory [ 626.539154][ T8947] sp0: Synchronizing with TNC [ 626.595096][ T8946] [U] è` [ 626.968116][ T8733] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 627.135824][ T8733] usb 2-1: Using ep0 maxpacket: 8 [ 627.165253][ T8733] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 627.177161][ T8733] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 627.187666][ T8733] usb 2-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 627.201159][ T8733] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 627.210775][ T8733] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 627.429163][ T8733] usbtmc 2-1:16.0: bulk endpoints not found [ 627.875492][ T5203] Bluetooth: hci0: command tx timeout [ 628.341283][ T8835] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 628.376274][ T8733] usb 2-1: USB disconnect, device number 8 [ 628.393379][ T8835] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 628.426701][ T8835] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 628.453526][ T8835] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 629.047983][ T8987] netlink: 48 bytes leftover after parsing attributes in process `syz.4.813'. [ 629.568439][ T8835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 629.657620][ T8992] netlink: 8 bytes leftover after parsing attributes in process `syz.3.815'. [ 629.666973][ T8992] netlink: 8 bytes leftover after parsing attributes in process `syz.3.815'. [ 629.684921][ T8835] 8021q: adding VLAN 0 to HW filter on device team0 [ 629.712041][ T76] bridge0: port 1(bridge_slave_0) entered blocking state [ 629.719818][ T76] bridge0: port 1(bridge_slave_0) entered forwarding state [ 629.822737][ T76] bridge0: port 2(bridge_slave_1) entered blocking state [ 629.830477][ T76] bridge0: port 2(bridge_slave_1) entered forwarding state [ 630.275922][ T8998] [U] â [ 630.744332][ T9008] loop1: detected capacity change from 0 to 2048 [ 631.054128][ T9008] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 631.415441][ T8733] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 631.592934][ T9025] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 631.646829][ T9025] EXT4-fs (loop1): Remounting filesystem read-only [ 631.732989][ T8733] usb 4-1: Using ep0 maxpacket: 16 [ 631.773887][ T8733] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 631.786207][ T8733] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 631.800235][ T8733] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 631.809782][ T8733] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 631.903987][ T8835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 631.983861][ T9008] loop1: detected capacity change from 2048 to 0 [ 632.091842][ T8733] usb 4-1: config 0 descriptor?? [ 632.144723][ T8546] syz-executor: attempt to access beyond end of device [ 632.144723][ T8546] loop1: rw=12288, sector=64, nr_sectors = 4 limit=0 [ 632.175609][ T8835] veth0_vlan: entered promiscuous mode [ 632.220469][ T8835] veth1_vlan: entered promiscuous mode [ 632.352752][ T8835] veth0_macvtap: entered promiscuous mode [ 632.385030][ T8835] veth1_macvtap: entered promiscuous mode [ 632.453619][ T8835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 632.464959][ T8835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 632.475256][ T8835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 632.486209][ T8835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 632.497612][ T8835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 632.508742][ T8835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 632.519015][ T8835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 632.529875][ T8835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 632.546588][ T8835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 632.641192][ T8835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 632.652099][ T8835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 632.662295][ T8835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 632.674119][ T8835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 632.687291][ T8835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 632.699363][ T8835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 632.711409][ T8835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 632.723530][ T8835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 632.723884][ T5242] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 632.741771][ T8835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 632.762531][ T8835] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 632.771745][ T8835] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 632.780937][ T8835] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 632.790135][ T8835] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 632.836585][ T8546] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 632.923227][ T5242] usb 1-1: Using ep0 maxpacket: 8 [ 632.943556][ T5242] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 632.954437][ T5242] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 632.964752][ T5242] usb 1-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 632.978078][ T5242] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 632.987736][ T5242] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 633.177040][ T9038] netlink: 40 bytes leftover after parsing attributes in process `syz.4.825'. [ 633.248458][ T5242] usbtmc 1-1:16.0: bulk endpoints not found [ 633.321909][ T8546] syz-executor: attempt to access beyond end of device [ 633.321909][ T8546] loop1: rw=145409, sector=0, nr_sectors = 4 limit=0 [ 633.336361][ T8546] buffer_io_error: 22 callbacks suppressed [ 633.336432][ T8546] Buffer I/O error on dev loop1, logical block 0, lost sync page write [ 633.351067][ T8546] EXT4-fs (loop1): I/O error while writing superblock [ 633.358611][ T8733] microsoft 0003:045E:07DA.0002: unknown main item tag 0xe [ 633.372657][ T8733] microsoft 0003:045E:07DA.0002: No inputs registered, leaving [ 633.419048][ T9011] kmmpd-loop1: attempt to access beyond end of device [ 633.419048][ T9011] loop1: rw=14337, sector=256, nr_sectors = 4 limit=0 [ 633.433389][ T9011] Buffer I/O error on dev loop1, logical block 64, lost sync page write [ 633.546788][ T9042] loop3: detected capacity change from 0 to 64 [ 633.592311][ T9042] hfs: unable to parse mount options [ 633.721337][ T8733] microsoft 0003:045E:07DA.0002: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 633.734720][ T8733] microsoft 0003:045E:07DA.0002: no inputs found [ 633.741328][ T8733] microsoft 0003:045E:07DA.0002: could not initialize ff, continuing anyway [ 633.840300][ T10] usb 1-1: USB disconnect, device number 15 [ 633.909748][ T8733] usb 4-1: USB disconnect, device number 3 [ 634.009082][ T7450] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 634.407558][ T7450] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 634.709754][ T7450] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 634.819122][ T7450] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 635.330817][ T7450] bridge_slave_1: left allmulticast mode [ 635.336984][ T7450] bridge_slave_1: left promiscuous mode [ 635.344972][ T7450] bridge0: port 2(bridge_slave_1) entered disabled state [ 635.400135][ T7450] bridge_slave_0: left allmulticast mode [ 635.406251][ T7450] bridge_slave_0: left promiscuous mode [ 635.413101][ T7450] bridge0: port 1(bridge_slave_0) entered disabled state [ 636.013850][ T7450] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 636.086525][ T7450] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 636.103949][ T7450] bond0 (unregistering): Released all slaves [ 636.125747][ T7450] bond1 (unregistering): Released all slaves [ 636.417627][ T9064] [U] â [ 636.767451][ T9072] netlink: 40 bytes leftover after parsing attributes in process `syz.0.832'. [ 636.828748][ T5198] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 636.843595][ T5198] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 636.853522][ T5198] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 636.866566][ T5198] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 636.878738][ T5198] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 636.883014][ T9076] loop3: detected capacity change from 0 to 512 [ 636.887861][ T5198] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 637.126526][ T9076] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal [ 637.706308][ T7450] hsr_slave_0: left promiscuous mode [ 637.746118][ T7450] hsr_slave_1: left promiscuous mode [ 637.811629][ T7450] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 637.824584][ T7450] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 637.903891][ T7450] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 637.912442][ T7450] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 638.184500][ T7450] veth1_macvtap: left promiscuous mode [ 638.190286][ T7450] veth0_macvtap: left promiscuous mode [ 638.196893][ T7450] veth1_vlan: left promiscuous mode [ 638.202580][ T7450] veth0_vlan: left promiscuous mode [ 638.821064][ T5242] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 638.974374][ T7450] team0 (unregistering): Port device team_slave_1 removed [ 638.993349][ T5203] Bluetooth: hci4: command tx timeout [ 639.000019][ T5242] usb 1-1: Using ep0 maxpacket: 8 [ 639.019982][ T7450] team0 (unregistering): Port device team_slave_0 removed [ 639.104131][ T9098] loop3: detected capacity change from 0 to 4096 [ 639.104113][ T5242] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 639.104277][ T5242] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 639.133285][ T5242] usb 1-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 639.137938][ T9098] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [ 639.147394][ T5242] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 639.147558][ T5242] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 639.418187][ T5242] usbtmc 1-1:16.0: bulk endpoints not found [ 639.458916][ T9093] netlink: 40 bytes leftover after parsing attributes in process `syz.4.835'. [ 639.771698][ T9102] loop4: detected capacity change from 0 to 256 [ 640.510673][ T4868] usb 1-1: USB disconnect, device number 16 [ 640.523273][ T9075] chnl_net:caif_netlink_parms(): no params data found [ 641.075607][ T5203] Bluetooth: hci4: command tx timeout [ 641.167259][ T9120] [U] â [ 641.730848][ T9129] netlink: 40 bytes leftover after parsing attributes in process `syz.3.842'. [ 642.298020][ T9075] bridge0: port 1(bridge_slave_0) entered blocking state [ 642.306071][ T9075] bridge0: port 1(bridge_slave_0) entered disabled state [ 642.314094][ T9075] bridge_slave_0: entered allmulticast mode [ 642.324389][ T9075] bridge_slave_0: entered promiscuous mode [ 642.425599][ T9075] bridge0: port 2(bridge_slave_1) entered blocking state [ 642.433692][ T9075] bridge0: port 2(bridge_slave_1) entered disabled state [ 642.442409][ T9075] bridge_slave_1: entered allmulticast mode [ 642.451371][ T9075] bridge_slave_1: entered promiscuous mode [ 642.757004][ T9075] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 642.858394][ T9075] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 642.880151][ T9142] loop3: detected capacity change from 0 to 512 [ 642.954692][ T9142] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal [ 643.151168][ T5203] Bluetooth: hci4: command tx timeout [ 643.198440][ T9145] kvm: emulating exchange as write [ 643.271512][ T7450] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 643.279767][ T7450] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 643.429142][ T9075] team0: Port device team_slave_0 added [ 643.465910][ T9075] team0: Port device team_slave_1 added [ 643.518871][ T3567] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 643.527123][ T3567] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 643.827405][ T9075] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 643.834779][ T9075] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 643.864304][ T9075] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 644.058491][ T9075] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 644.068405][ T9075] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 644.096012][ T9075] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 644.339725][ T9150] netlink: 40 bytes leftover after parsing attributes in process `syz.3.846'. [ 645.114750][ T9160] loop0: detected capacity change from 0 to 512 [ 645.149718][ T9075] hsr_slave_0: entered promiscuous mode [ 645.226065][ T9075] hsr_slave_1: entered promiscuous mode [ 645.262456][ T5203] Bluetooth: hci4: command tx timeout [ 645.337439][ T9075] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 645.346210][ T9075] Cannot create hsr debugfs directory [ 645.533707][ T9160] EXT4-fs error (device loop0): ext4_orphan_get:1388: inode #15: comm syz.0.848: casefold flag without casefold feature [ 645.557835][ T9160] EXT4-fs error (device loop0): ext4_orphan_get:1393: comm syz.0.848: couldn't read orphan inode 15 (err -117) [ 645.718866][ T9160] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 646.218551][ T5242] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 646.419521][ T5242] usb 5-1: Using ep0 maxpacket: 8 [ 646.454800][ T5242] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 646.465565][ T5242] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 646.475770][ T5242] usb 5-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 646.489845][ T5242] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 646.499260][ T5242] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 646.668203][ T5242] usbtmc 5-1:16.0: bulk endpoints not found [ 646.942175][ T9160] loop0: detected capacity change from 512 to 0 [ 647.024084][ T9186] syz.0.848: attempt to access beyond end of device [ 647.024084][ T9186] loop0: rw=524288, sector=10, nr_sectors = 2 limit=0 [ 647.043677][ T9186] syz.0.848: attempt to access beyond end of device [ 647.043677][ T9186] loop0: rw=524288, sector=12, nr_sectors = 2 limit=0 [ 647.058927][ T9186] syz.0.848: attempt to access beyond end of device [ 647.058927][ T9186] loop0: rw=524288, sector=14, nr_sectors = 2 limit=0 [ 647.072778][ T9186] syz.0.848: attempt to access beyond end of device [ 647.072778][ T9186] loop0: rw=524288, sector=16, nr_sectors = 2 limit=0 [ 647.086428][ T9186] syz.0.848: attempt to access beyond end of device [ 647.086428][ T9186] loop0: rw=524288, sector=20, nr_sectors = 2 limit=0 [ 647.100101][ T9186] syz.0.848: attempt to access beyond end of device [ 647.100101][ T9186] loop0: rw=524288, sector=22, nr_sectors = 2 limit=0 [ 647.114111][ T9186] syz.0.848: attempt to access beyond end of device [ 647.114111][ T9186] loop0: rw=524288, sector=24, nr_sectors = 2 limit=0 [ 647.128096][ T9186] syz.0.848: attempt to access beyond end of device [ 647.128096][ T9186] loop0: rw=524288, sector=26, nr_sectors = 2 limit=0 [ 647.146338][ T9186] syz.0.848: attempt to access beyond end of device [ 647.146338][ T9186] loop0: rw=12288, sector=18, nr_sectors = 2 limit=0 [ 647.161304][ T9186] EXT4-fs error (device loop0): ext4_get_inode_loc:4541: inode #18: block 9: comm syz.0.848: unable to read itable block [ 647.174978][ T9186] syz.0.848: attempt to access beyond end of device [ 647.174978][ T9186] loop0: rw=14337, sector=2, nr_sectors = 2 limit=0 [ 647.188537][ T9186] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 647.197221][ T9186] EXT4-fs (loop0): I/O error while writing superblock [ 647.204232][ T9186] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5780: IO failure [ 647.213432][ T9186] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 647.222051][ T9186] EXT4-fs (loop0): I/O error while writing superblock [ 647.229360][ T9186] EXT4-fs error (device loop0): ext4_dirty_inode:5984: inode #18: comm syz.0.848: mark_inode_dirty error [ 647.245212][ T9186] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 647.255239][ T9186] EXT4-fs (loop0): I/O error while writing superblock [ 647.263116][ T9186] EXT4-fs error (device loop0): ext4_get_inode_loc:4541: inode #18: block 9: comm syz.0.848: unable to read itable block [ 647.276206][ T9186] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 647.284853][ T9186] EXT4-fs (loop0): I/O error while writing superblock [ 647.292070][ T9186] EXT4-fs error (device loop0): ext4_get_max_inline_size:116: inode #18: comm syz.0.848: can't get inode location 18 [ 647.304886][ T9186] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 647.315505][ T9186] EXT4-fs (loop0): I/O error while writing superblock [ 647.323555][ T9186] EXT4-fs error (device loop0): ext4_get_inode_loc:4541: inode #18: block 9: comm syz.0.848: unable to read itable block [ 647.341413][ T9186] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 647.351727][ T9186] EXT4-fs (loop0): I/O error while writing superblock [ 647.358872][ T9186] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5780: IO failure [ 647.367957][ T9186] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 647.376442][ T9186] EXT4-fs (loop0): I/O error while writing superblock [ 647.383652][ T9186] EXT4-fs error (device loop0): ext4_dirty_inode:5984: inode #18: comm syz.0.848: mark_inode_dirty error [ 647.395398][ T9186] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 647.404017][ T9186] EXT4-fs (loop0): I/O error while writing superblock [ 647.471405][ T9191] loop2: detected capacity change from 0 to 3 [ 647.484944][ T9191] SQUASHFS error: Failed to read block 0x0: -5 [ 647.493767][ T9191] unable to read squashfs_super_block [ 647.507897][ T9191] loop2: detected capacity change from 0 to 8 [ 647.516023][ T9191] squashfs: Unknown parameter 'J' [ 647.612119][ T9186] EXT4-fs error (device loop0): ext4_check_bdev_write_error:225: comm syz.0.848: Error while async write back metadata [ 647.625521][ T9186] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 647.634312][ T9186] EXT4-fs (loop0): I/O error while writing superblock [ 647.641529][ T9186] EXT4-fs error (device loop0): ext4_check_bdev_write_error:225: comm syz.0.848: Error while async write back metadata [ 647.659357][ T9186] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 648.136233][ T4868] usb 5-1: USB disconnect, device number 11 [ 648.165501][ T9194] loop2: detected capacity change from 0 to 512 [ 648.280518][ T9198] loop3: detected capacity change from 0 to 512 [ 648.322128][ T9194] EXT4-fs (loop2): can't mount with data=, fs mounted w/o journal [ 648.367771][ T9198] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 648.379431][ T9198] EXT4-fs (loop3): can't mount with journal_checksum, fs mounted w/o journal [ 648.493650][ T8525] EXT4-fs warning (device loop0): htree_dirblock_to_tree:1083: inode #2: lblock 0: comm syz-executor: error -5 reading directory block [ 648.794179][ T1245] ieee802154 phy0 wpan0: encryption failed: -22 [ 648.803063][ T1245] ieee802154 phy1 wpan1: encryption failed: -22 [ 649.042933][ T9075] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 649.176415][ T9075] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 649.274732][ T9075] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 649.558444][ T9075] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 649.911345][ T3567] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 650.110283][ T3567] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 650.257125][ T3567] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 650.335859][ T4868] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 650.448907][ T3567] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 650.541548][ T4868] usb 3-1: Using ep0 maxpacket: 16 [ 650.568325][ T4868] usb 3-1: config 0 has no interfaces? [ 650.640924][ T4868] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 650.650676][ T4868] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 650.659413][ T4868] usb 3-1: Product: syz [ 650.663899][ T4868] usb 3-1: Manufacturer: syz [ 650.670219][ T4868] usb 3-1: SerialNumber: syz [ 650.798299][ T4868] usb 3-1: config 0 descriptor?? [ 651.090026][ T3567] bridge_slave_1: left allmulticast mode [ 651.097097][ T3567] bridge_slave_1: left promiscuous mode [ 651.103612][ T3567] bridge0: port 2(bridge_slave_1) entered disabled state [ 651.210859][ T3567] bridge_slave_0: left allmulticast mode [ 651.216957][ T3567] bridge_slave_0: left promiscuous mode [ 651.223546][ T3567] bridge0: port 1(bridge_slave_0) entered disabled state [ 651.823554][ T3567] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 651.870044][ T3567] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 651.911501][ T3567] bond0 (unregistering): Released all slaves [ 652.663931][ T3567] hsr_slave_0: left promiscuous mode [ 652.691049][ T9223] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 652.701701][ T3567] hsr_slave_1: left promiscuous mode [ 652.719990][ T3567] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 652.728111][ T3567] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 652.764672][ T3567] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 652.772533][ T3567] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 652.822366][ T3567] veth1_macvtap: left promiscuous mode [ 652.828542][ T3567] veth0_macvtap: left promiscuous mode [ 652.834416][ T3567] veth1_vlan: left promiscuous mode [ 652.841037][ T3567] veth0_vlan: left promiscuous mode [ 653.191360][ T5247] usb 3-1: USB disconnect, device number 12 [ 653.191850][ T5198] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 653.209581][ T5198] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 653.228461][ T5198] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 653.243414][ T5198] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 653.356115][ T5198] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 653.367423][ T5198] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 653.724437][ T9239] loop4: detected capacity change from 0 to 3 [ 653.824029][ T9239] bio_check_eod: 107 callbacks suppressed [ 653.830274][ T9239] syz.4.863: attempt to access beyond end of device [ 653.830274][ T9239] loop4: rw=2048, sector=0, nr_sectors = 8 limit=3 [ 653.845061][ T9239] SQUASHFS error: Failed to read block 0x0: -5 [ 653.851581][ T9239] unable to read squashfs_super_block [ 653.947623][ T9239] loop4: detected capacity change from 0 to 8 [ 653.982664][ T9239] squashfs: Unknown parameter 'J' [ 654.284008][ T9241] loop2: detected capacity change from 0 to 512 [ 654.365779][ T3567] team0 (unregistering): Port device team_slave_1 removed [ 654.415362][ T3567] team0 (unregistering): Port device team_slave_0 removed [ 654.654841][ T9241] EXT4-fs error (device loop2): ext4_orphan_get:1388: inode #15: comm syz.2.865: casefold flag without casefold feature [ 654.697323][ T9241] EXT4-fs error (device loop2): ext4_orphan_get:1393: comm syz.2.865: couldn't read orphan inode 15 (err -117) [ 654.719603][ T5247] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 654.889056][ T9241] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 654.961882][ T9075] 8021q: adding VLAN 0 to HW filter on device bond0 [ 655.126481][ T5247] usb 5-1: Using ep0 maxpacket: 8 [ 655.189982][ T9075] 8021q: adding VLAN 0 to HW filter on device team0 [ 655.204630][ T5247] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 655.215910][ T5247] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 655.229859][ T5247] usb 5-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 655.244347][ T5247] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 655.253821][ T5247] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 655.338045][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 655.345791][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 655.418054][ T9247] sctp: failed to load transform for md5: -2 [ 655.463084][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 655.470939][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 655.598928][ T5247] usbtmc 5-1:16.0: bulk endpoints not found [ 655.635415][ T5203] Bluetooth: hci2: command tx timeout [ 655.961448][ T9075] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 655.973868][ T9075] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 656.431146][ T9269] loop3: detected capacity change from 0 to 512 [ 656.520698][ T9229] chnl_net:caif_netlink_parms(): no params data found [ 656.565955][ T9269] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal [ 656.932534][ T25] usb 5-1: USB disconnect, device number 12 [ 657.705235][ T5203] Bluetooth: hci2: command tx timeout [ 657.924670][ T8835] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 658.010609][ T9075] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 658.063018][ T9286] tmpfs: Bad value for 'mpol' [ 658.437882][ T9229] bridge0: port 1(bridge_slave_0) entered blocking state [ 658.447997][ T9229] bridge0: port 1(bridge_slave_0) entered disabled state [ 658.455872][ T9229] bridge_slave_0: entered allmulticast mode [ 658.465059][ T9229] bridge_slave_0: entered promiscuous mode [ 658.591155][ T9229] bridge0: port 2(bridge_slave_1) entered blocking state [ 658.602713][ T9229] bridge0: port 2(bridge_slave_1) entered disabled state [ 658.610516][ T9229] bridge_slave_1: entered allmulticast mode [ 658.619515][ T9229] bridge_slave_1: entered promiscuous mode [ 658.958821][ T9229] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 659.068303][ T9229] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 659.117049][ T9075] veth0_vlan: entered promiscuous mode [ 659.343568][ T9075] veth1_vlan: entered promiscuous mode [ 659.400029][ T9308] loop3: detected capacity change from 0 to 3 [ 659.412265][ T9308] syz.3.874: attempt to access beyond end of device [ 659.412265][ T9308] loop3: rw=2048, sector=0, nr_sectors = 8 limit=3 [ 659.427606][ T9308] SQUASHFS error: Failed to read block 0x0: -5 [ 659.434650][ T9308] unable to read squashfs_super_block [ 659.563240][ T9229] team0: Port device team_slave_0 added [ 659.635246][ T9308] loop3: detected capacity change from 0 to 8 [ 659.654133][ T9229] team0: Port device team_slave_1 added [ 659.764345][ T9308] squashfs: Unknown parameter 'J' [ 659.789245][ T5203] Bluetooth: hci2: command tx timeout [ 660.099034][ T9229] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 660.106389][ T9229] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 660.134179][ T9229] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 660.222361][ T9075] veth0_macvtap: entered promiscuous mode [ 660.247394][ T9075] veth1_macvtap: entered promiscuous mode [ 660.277997][ T9229] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 660.285386][ T9229] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 660.311947][ T9229] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 660.721734][ T9319] loop3: detected capacity change from 0 to 512 [ 660.820801][ T9319] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal [ 661.001574][ T9326] loop2: detected capacity change from 0 to 512 [ 661.031792][ T9075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 661.043115][ T9075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 661.056066][ T9075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 661.067630][ T9075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 661.077836][ T9075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 661.089637][ T9075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 661.105248][ T9075] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 661.174899][ T9229] hsr_slave_0: entered promiscuous mode [ 661.226719][ T9229] hsr_slave_1: entered promiscuous mode [ 661.280662][ T9229] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 661.288689][ T9229] Cannot create hsr debugfs directory [ 661.355721][ T4868] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 661.410970][ T9075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 661.422708][ T9075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 661.427362][ T9326] EXT4-fs error (device loop2): ext4_orphan_get:1388: inode #15: comm syz.2.878: casefold flag without casefold feature [ 661.432792][ T9075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 661.432887][ T9075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 661.432964][ T9075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 661.433048][ T9075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 661.437462][ T9075] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 661.523019][ T9326] EXT4-fs error (device loop2): ext4_orphan_get:1393: comm syz.2.878: couldn't read orphan inode 15 (err -117) [ 661.591606][ T4868] usb 5-1: Using ep0 maxpacket: 8 [ 661.635111][ T4868] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 661.645960][ T4868] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 661.656530][ T4868] usb 5-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 661.671475][ T4868] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 661.680828][ T4868] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 661.702766][ T9326] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 661.811845][ T4868] usbtmc 5-1:16.0: bulk endpoints not found [ 661.874112][ T5203] Bluetooth: hci2: command tx timeout [ 661.914983][ T9075] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.924459][ T9075] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.933619][ T9075] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.942911][ T9075] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 662.837234][ T25] usb 5-1: USB disconnect, device number 13 [ 663.026370][ T9343] loop3: detected capacity change from 0 to 64 [ 663.490548][ T9326] loop2: detected capacity change from 512 to 0 [ 664.142951][ T9229] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 664.176963][ T9229] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 664.241642][ T9229] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 664.285286][ T9229] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 664.319335][ T8835] syz-executor: attempt to access beyond end of device [ 664.319335][ T8835] loop2: rw=12288, sector=72, nr_sectors = 2 limit=0 [ 664.336428][ T8835] EXT4-fs warning (device loop2): htree_dirblock_to_tree:1083: inode #2: lblock 0: comm syz-executor: error -5 reading directory block [ 664.685135][ T3057] kworker/u8:9: attempt to access beyond end of device [ 664.685135][ T3057] loop2: rw=524288, sector=12, nr_sectors = 2 limit=0 [ 664.700322][ T3057] kworker/u8:9: attempt to access beyond end of device [ 664.700322][ T3057] loop2: rw=524288, sector=14, nr_sectors = 2 limit=0 [ 664.715843][ T3057] kworker/u8:9: attempt to access beyond end of device [ 664.715843][ T3057] loop2: rw=524288, sector=16, nr_sectors = 2 limit=0 [ 664.730502][ T3057] kworker/u8:9: attempt to access beyond end of device [ 664.730502][ T3057] loop2: rw=524288, sector=18, nr_sectors = 2 limit=0 [ 664.749135][ T3057] kworker/u8:9: attempt to access beyond end of device [ 664.749135][ T3057] loop2: rw=524288, sector=20, nr_sectors = 2 limit=0 [ 664.764252][ T3057] kworker/u8:9: attempt to access beyond end of device [ 664.764252][ T3057] loop2: rw=524288, sector=22, nr_sectors = 2 limit=0 [ 664.778376][ T3057] kworker/u8:9: attempt to access beyond end of device [ 664.778376][ T3057] loop2: rw=524288, sector=24, nr_sectors = 2 limit=0 [ 664.792268][ T3057] kworker/u8:9: attempt to access beyond end of device [ 664.792268][ T3057] loop2: rw=524288, sector=26, nr_sectors = 2 limit=0 [ 664.806114][ T3057] kworker/u8:9: attempt to access beyond end of device [ 664.806114][ T3057] loop2: rw=12288, sector=10, nr_sectors = 2 limit=0 [ 664.821705][ T3057] EXT4-fs error (device loop2): __ext4_get_inode_loc_noinmem:4526: inode #2: block 5: comm kworker/u8:9: unable to read itable block [ 664.836588][ T3057] kworker/u8:9: attempt to access beyond end of device [ 664.836588][ T3057] loop2: rw=14337, sector=2, nr_sectors = 2 limit=0 [ 664.852904][ T3057] buffer_io_error: 22 callbacks suppressed [ 664.852976][ T3057] Buffer I/O error on dev loop2, logical block 1, lost sync page write [ 664.868470][ T3057] EXT4-fs (loop2): I/O error while writing superblock [ 664.997378][ T8835] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 665.040220][ T8835] Buffer I/O error on dev loop2, logical block 1, lost sync page write [ 665.051932][ T8835] EXT4-fs (loop2): I/O error while writing superblock [ 665.537594][ T9229] 8021q: adding VLAN 0 to HW filter on device bond0 [ 665.606257][ T9229] 8021q: adding VLAN 0 to HW filter on device team0 [ 665.743856][ T9229] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 665.755004][ T9229] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 665.853129][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 665.860898][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 665.882453][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 665.890210][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 666.934468][ T3272] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.392728][ T3272] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.973696][ T3272] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.003165][ T5198] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 668.050585][ T5198] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 668.059798][ T5198] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 668.083477][ T5198] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 668.107047][ T3272] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.215843][ T5198] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 668.258168][ T5198] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 668.305159][ T9229] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 668.452377][ T9229] veth0_vlan: entered promiscuous mode [ 668.486274][ T9229] veth1_vlan: entered promiscuous mode [ 668.885071][ T3272] bridge_slave_1: left allmulticast mode [ 668.891197][ T3272] bridge_slave_1: left promiscuous mode [ 668.898027][ T3272] bridge0: port 2(bridge_slave_1) entered disabled state [ 668.921913][ T3272] bridge_slave_0: left allmulticast mode [ 668.927798][ T3272] bridge_slave_0: left promiscuous mode [ 668.938850][ T3272] bridge0: port 1(bridge_slave_0) entered disabled state [ 669.008908][ T25] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 669.349471][ T25] usb 4-1: device descriptor read/64, error -71 [ 669.388692][ T4868] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 669.416821][ T3272] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 669.435763][ T3272] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 669.460471][ T3272] bond0 (unregistering): Released all slaves [ 669.568321][ T4868] usb 5-1: Using ep0 maxpacket: 8 [ 669.596430][ T4868] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 669.607242][ T4868] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 669.618181][ T4868] usb 5-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 669.634133][ T4868] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 669.643752][ T4868] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 669.728541][ T25] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 669.759800][ T4868] usbtmc 5-1:16.0: bulk endpoints not found [ 669.922172][ T9229] veth0_macvtap: entered promiscuous mode [ 669.948051][ T25] usb 4-1: device descriptor read/64, error -71 [ 669.977554][ T9229] veth1_macvtap: entered promiscuous mode [ 670.089776][ T25] usb usb4-port1: attempt power cycle [ 670.306571][ T9229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 670.317403][ T9229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 670.328074][ T9229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 670.339135][ T9229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 670.349246][ T9229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 670.360073][ T9229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 670.372949][ T9229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 670.384582][ T9229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 670.399452][ T9229] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 670.423240][ T5203] Bluetooth: hci0: command tx timeout [ 670.579607][ T25] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 670.622395][ T25] usb 4-1: device descriptor read/8, error -71 [ 670.627811][ T3272] hsr_slave_0: left promiscuous mode [ 670.663414][ T3272] hsr_slave_1: left promiscuous mode [ 670.683232][ T3272] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 670.691264][ T3272] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 670.732721][ T3272] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 670.742711][ T3272] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 670.784047][ T3272] veth1_macvtap: left promiscuous mode [ 670.789900][ T3272] veth0_macvtap: left promiscuous mode [ 670.795899][ T3272] veth1_vlan: left promiscuous mode [ 670.801623][ T3272] veth0_vlan: left promiscuous mode [ 671.177474][ T25] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 671.223626][ T25] usb 4-1: device descriptor read/8, error -71 [ 671.340832][ T25] usb usb4-port1: unable to enumerate USB device [ 671.455086][ T3272] team0 (unregistering): Port device team_slave_1 removed [ 671.590437][ T3272] team0 (unregistering): Port device team_slave_0 removed [ 672.037088][ T8579] usb 5-1: USB disconnect, device number 14 [ 672.064892][ T9229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 672.075732][ T9229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 672.085836][ T9229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 672.096633][ T9229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 672.109531][ T9229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 672.121533][ T9229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 672.135986][ T9229] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 672.188720][ T7450] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 672.196809][ T7450] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 672.321192][ T9229] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 672.332077][ T9229] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 672.342149][ T9229] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 672.351747][ T9229] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 672.501753][ T5203] Bluetooth: hci0: command tx timeout [ 672.563030][ T9388] chnl_net:caif_netlink_parms(): no params data found [ 672.628779][ T76] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 672.637038][ T76] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 674.392544][ T9388] bridge0: port 1(bridge_slave_0) entered blocking state [ 674.401280][ T9388] bridge0: port 1(bridge_slave_0) entered disabled state [ 674.409312][ T9388] bridge_slave_0: entered allmulticast mode [ 674.418320][ T9388] bridge_slave_0: entered promiscuous mode [ 674.554615][ T9388] bridge0: port 2(bridge_slave_1) entered blocking state [ 674.562569][ T9388] bridge0: port 2(bridge_slave_1) entered disabled state [ 674.572013][ T9388] bridge_slave_1: entered allmulticast mode [ 674.581214][ T9388] bridge_slave_1: entered promiscuous mode [ 674.592536][ T5203] Bluetooth: hci0: command tx timeout [ 674.808125][ T9430] loop4: detected capacity change from 0 to 4096 [ 674.897154][ T9430] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 675.146248][ T9450] loop3: detected capacity change from 0 to 2048 [ 675.206763][ T9388] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 675.234609][ T9430] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 675.256656][ T9388] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 675.483505][ T9450] loop3: p3 < > p4 < > [ 675.492077][ T9450] loop3: partition table partially beyond EOD, truncated [ 675.502100][ T9450] loop3: p3 start 4284289 is beyond EOD, truncated [ 675.544683][ T9388] team0: Port device team_slave_0 added [ 675.584300][ T9388] team0: Port device team_slave_1 added [ 675.974074][ T9388] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 675.981488][ T9388] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 676.013327][ T9388] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 676.169327][ T4868] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 676.289834][ T9388] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 676.298755][ T9388] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 676.330816][ T9388] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 676.356634][ T9468] loop4: detected capacity change from 0 to 128 [ 676.392334][ T4868] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 676.404049][ T4868] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 676.415159][ T4868] usb 2-1: New USB device found, idVendor=04d5, idProduct=0001, bcdDevice= 0.00 [ 676.424844][ T4868] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 676.598376][ T9468] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 676.618110][ T8802] udevd[8802]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 676.638150][ T4868] usb 2-1: config 0 descriptor?? [ 676.664843][ T5203] Bluetooth: hci0: command tx timeout [ 676.666614][ T9468] ext4 filesystem being mounted at /32/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 676.990070][ T9468] syz.4.898 (pid 9468) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 677.052131][ T4868] usbhid 2-1:0.0: can't add hid device: -71 [ 677.059104][ T4868] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 677.082302][ T9388] hsr_slave_0: entered promiscuous mode [ 677.136191][ T4868] usb 2-1: USB disconnect, device number 9 [ 677.201691][ T9388] hsr_slave_1: entered promiscuous mode [ 677.300809][ T9388] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 677.308796][ T9388] Cannot create hsr debugfs directory [ 677.409420][ T8602] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 679.136861][ T9470] loop3: detected capacity change from 0 to 32768 [ 679.146283][ T9470] btrfs: Deprecated parameter 'usebackuproot' [ 679.152613][ T9470] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 679.176283][ T9470] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.899 (9470) [ 679.303097][ T29] audit: type=1326 audit(1727574885.595:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9484 comm="syz.1.901" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4070d7dff9 code=0x0 [ 679.342747][ T9470] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 679.353617][ T9470] BTRFS info (device loop3): using crc32c (crc32c-generic) checksum algorithm [ 679.363920][ T9470] BTRFS info (device loop3): disk space caching is enabled [ 679.372538][ T9470] BTRFS warning (device loop3): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 679.452723][ T9470] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 679.453695][ T9470] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 679.483007][ T9470] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 679.495063][ T9470] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 679.504927][ T9470] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 679.515239][ T9470] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 679.525043][ T9470] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 679.535416][ T9470] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 679.545210][ T9470] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 679.555626][ T9470] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 679.566469][ T9470] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 679.577100][ T9470] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 679.731629][ T9470] BTRFS error (device loop3): open_ctree failed [ 680.362362][ T9388] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 680.396207][ T9388] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 680.497951][ T9388] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 680.692310][ T9388] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 681.560890][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 681.569072][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 681.800349][ T76] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 681.809109][ T76] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 682.416890][ T9388] 8021q: adding VLAN 0 to HW filter on device bond0 [ 682.470287][ T9388] 8021q: adding VLAN 0 to HW filter on device team0 [ 682.498969][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 682.506679][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 682.620906][ T9388] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 682.632630][ T9388] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 682.666385][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 682.674094][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 683.638049][ T9534] loop4: detected capacity change from 0 to 4096 [ 683.665869][ T9534] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 683.905304][ T9547] loop0: detected capacity change from 0 to 2048 [ 683.941750][ T9546] loop3: detected capacity change from 0 to 2048 [ 683.976452][ T9547] loop0: p3 < > p4 < > [ 683.983408][ T9547] loop0: partition table partially beyond EOD, truncated [ 683.991556][ T9547] loop0: p3 start 4284289 is beyond EOD, truncated [ 684.072749][ T9546] loop3: p3 < > p4 < > [ 684.077175][ T9546] loop3: partition table partially beyond EOD, truncated [ 684.088603][ T9546] loop3: p3 start 4284289 is beyond EOD, truncated [ 684.110335][ T9534] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 684.704539][ T9388] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 684.962197][ T9388] veth0_vlan: entered promiscuous mode [ 685.118479][ T9388] veth1_vlan: entered promiscuous mode [ 685.238961][ T8875] udevd[8875]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 685.581263][ T8802] udevd[8802]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 685.662340][ T29] audit: type=1326 audit(1727574891.948:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9565 comm="syz.1.910" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4070d7dff9 code=0x0 [ 685.678265][ T9388] veth0_macvtap: entered promiscuous mode [ 685.834950][ T9388] veth1_macvtap: entered promiscuous mode [ 685.942679][ T8733] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 686.067720][ T9388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 686.078745][ T9388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 686.089297][ T9388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 686.100210][ T9388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 686.110549][ T9388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 686.121373][ T9388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 686.134703][ T9388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 686.147583][ T9388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 686.162802][ T9388] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 686.212181][ T8733] usb 5-1: Using ep0 maxpacket: 8 [ 686.237811][ T8875] udevd[8875]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 686.251179][ T8733] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 686.262842][ T8733] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 686.273083][ T8733] usb 5-1: New USB device found, idVendor=256c, idProduct=006e, bcdDevice= 0.00 [ 686.282731][ T8733] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 686.394471][ T9388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 686.404387][ T8733] usb 5-1: config 0 descriptor?? [ 686.406122][ T9388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 686.424036][ T9388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 686.435126][ T9388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 686.449891][ T9388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 686.462071][ T9388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 686.472303][ T9388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 686.483018][ T9388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 686.506081][ T9388] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 686.650821][ T9388] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 686.660410][ T9388] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 686.669810][ T9388] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 686.679191][ T9388] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 687.202252][ T8733] usb 5-1: string descriptor 0 read error: -71 [ 687.262459][ T8733] uclogic 0003:256C:006E.0003: failed retrieving string descriptor #200: -71 [ 687.271819][ T8733] uclogic 0003:256C:006E.0003: failed retrieving pen parameters: -71 [ 687.280162][ T8733] uclogic 0003:256C:006E.0003: failed probing pen v2 parameters: -71 [ 687.288971][ T8733] uclogic 0003:256C:006E.0003: failed probing parameters: -71 [ 687.297762][ T8733] uclogic 0003:256C:006E.0003: probe with driver uclogic failed with error -71 [ 687.476091][ T8733] usb 5-1: USB disconnect, device number 15 [ 687.818769][ T9584] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 690.037427][ T9612] loop3: detected capacity change from 0 to 2048 [ 690.359663][ T9612] loop3: p3 < > p4 < > [ 690.364189][ T9612] loop3: partition table partially beyond EOD, truncated [ 690.372572][ T9612] loop3: p3 start 4284289 is beyond EOD, truncated [ 690.676863][ T4620] loop3: p3 < > p4 < > [ 690.681459][ T4620] loop3: partition table partially beyond EOD, truncated [ 690.689661][ T4620] loop3: p3 start 4284289 is beyond EOD, truncated [ 691.337491][ T9616] loop4: detected capacity change from 0 to 4096 [ 691.344579][ T29] audit: type=1326 audit(1727574897.640:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9634 comm="syz.1.924" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4070d7dff9 code=0x0 [ 691.437131][ T8875] udevd[8875]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 691.458643][ T9616] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 691.554500][ T8875] udevd[8875]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 691.837524][ T9616] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 693.188980][ T9658] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 693.665769][ T9673] loop1: detected capacity change from 0 to 24 [ 693.698241][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 693.710992][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 693.769643][ T9673] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 693.888517][ T3567] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 693.897162][ T3567] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 694.031337][ T9673] loop1: detected capacity change from 24 to 0 [ 694.229624][ T9661] loop4: detected capacity change from 0 to 4096 [ 694.320294][ T9661] ntfs3: loop4: Different NTFS sector size (1024) and media sector size (512). [ 694.891234][ T9684] loop1: detected capacity change from 0 to 2048 [ 695.018376][ T8973] loop1: p3 < > p4 < > [ 695.023010][ T8973] loop1: partition table partially beyond EOD, truncated [ 695.028293][ T9690] loop2: detected capacity change from 0 to 512 [ 695.031258][ T8973] loop1: p3 start 4284289 is beyond EOD, truncated [ 695.050910][ T9690] EXT4-fs (loop2): can't mount with data=, fs mounted w/o journal [ 695.265388][ T9684] loop1: p3 < > p4 < > [ 695.270176][ T9684] loop1: partition table partially beyond EOD, truncated [ 695.278294][ T9684] loop1: p3 start 4284289 is beyond EOD, truncated [ 695.433774][ T4620] loop1: p3 < > p4 < > [ 695.438215][ T4620] loop1: partition table partially beyond EOD, truncated [ 695.451897][ T4620] loop1: p3 start 4284289 is beyond EOD, truncated [ 695.596925][ T9661] ntfs3: loop4: Failed to load $Extend (-22). [ 695.603685][ T9661] ntfs3: loop4: Failed to initialize $Extend. [ 695.663456][ T29] audit: type=1326 audit(1727574901.941:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9693 comm="syz.0.936" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4a5837dff9 code=0x0 [ 696.022808][ T8875] udevd[8875]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 696.303858][ T9698] loop3: detected capacity change from 0 to 4096 [ 696.358757][ T9698] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 696.829172][ T8875] udevd[8875]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 696.952625][ T9711] loop2: detected capacity change from 0 to 3 [ 696.973917][ T8875] udevd[8875]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 696.995034][ T9711] bio_check_eod: 1 callbacks suppressed [ 696.995111][ T9711] syz.2.940: attempt to access beyond end of device [ 696.995111][ T9711] loop2: rw=2048, sector=0, nr_sectors = 8 limit=3 [ 697.015798][ T9711] SQUASHFS error: Failed to read block 0x0: -5 [ 697.022446][ T9711] unable to read squashfs_super_block [ 697.475859][ T9698] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 698.153216][ T9730] netlink: 'syz.0.947': attribute type 1 has an invalid length. [ 698.162194][ T9730] netlink: 56 bytes leftover after parsing attributes in process `syz.0.947'. [ 698.172987][ T9730] netlink: 9280 bytes leftover after parsing attributes in process `syz.0.947'. [ 698.900103][ T9736] loop3: detected capacity change from 0 to 1024 [ 699.179267][ T9736] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 699.371551][ T4868] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 699.726662][ T9756] loop1: detected capacity change from 0 to 3 [ 699.737494][ T9756] syz.1.955: attempt to access beyond end of device [ 699.737494][ T9756] loop1: rw=2048, sector=0, nr_sectors = 8 limit=3 [ 699.756610][ T9756] SQUASHFS error: Failed to read block 0x0: -5 [ 699.764981][ T9756] unable to read squashfs_super_block [ 699.814874][ T4868] usb 1-1: config 0 has no interfaces? [ 699.821616][ T4868] usb 1-1: New USB device found, idVendor=172f, idProduct=eced, bcdDevice= 0.00 [ 699.831967][ T4868] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 699.883761][ T4868] usb 1-1: config 0 descriptor?? [ 700.614067][ T8686] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 702.474984][ T9786] loop4: detected capacity change from 0 to 3 [ 702.529361][ T9786] syz.4.969: attempt to access beyond end of device [ 702.529361][ T9786] loop4: rw=2048, sector=0, nr_sectors = 8 limit=3 [ 702.543272][ T9786] SQUASHFS error: Failed to read block 0x0: -5 [ 702.550023][ T9786] unable to read squashfs_super_block [ 702.577441][ T8579] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 702.689131][ T9786] loop4: detected capacity change from 0 to 8 [ 702.743563][ T9786] squashfs: Unknown parameter 'J' [ 702.792621][ T8579] usb 4-1: Using ep0 maxpacket: 16 [ 702.838176][ T8579] usb 4-1: config 0 has no interfaces? [ 702.924323][ T8579] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 702.934190][ T8579] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 702.942689][ T8579] usb 4-1: Product: syz [ 702.947155][ T8579] usb 4-1: Manufacturer: syz [ 702.951977][ T8579] usb 4-1: SerialNumber: syz [ 703.016757][ T4868] usb 1-1: USB disconnect, device number 17 [ 703.059091][ T8579] usb 4-1: config 0 descriptor?? [ 703.113054][ T9789] loop1: detected capacity change from 0 to 512 [ 703.174967][ T9789] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal [ 703.506185][ T8579] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 703.602548][ T9798] loop0: detected capacity change from 0 to 1024 [ 703.780040][ T8579] usb 3-1: config 0 has no interfaces? [ 703.785911][ T8579] usb 3-1: New USB device found, idVendor=1668, idProduct=0323, bcdDevice=5f.ca [ 703.795427][ T8579] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 703.809088][ T8579] usb 3-1: config 0 descriptor?? [ 703.934555][ T9798] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 703.982385][ T9798] overlayfs: missing 'lowerdir' [ 704.105137][ T4868] usb 3-1: USB disconnect, device number 13 [ 704.496332][ T9229] EXT4-fs error (device loop0): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 704.550189][ T9229] EXT4-fs error (device loop0): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 704.570855][ T9809] netlink: 116 bytes leftover after parsing attributes in process `syz.1.976'. [ 704.584243][ T9229] EXT4-fs error (device loop0): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 704.612363][ T9229] EXT4-fs error (device loop0): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 704.630440][ T9229] EXT4-fs error (device loop0): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 704.664366][ T9229] EXT4-fs error (device loop0): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 704.858653][ T9229] EXT4-fs error (device loop0): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 704.927602][ T9229] EXT4-fs error (device loop0): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 704.990429][ T9813] EXT4-fs warning (device sda1): verify_group_input:159: Reserved blocks too high (10) [ 705.049585][ T9229] EXT4-fs error (device loop0): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 705.083919][ T9229] EXT4-fs error (device loop0): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 705.181024][ T9817] fuse: Bad value for 'fd' [ 705.410215][ T4868] usb 4-1: USB disconnect, device number 8 [ 706.052687][ T9830] loop3: detected capacity change from 0 to 512 [ 706.074076][ T9830] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal [ 706.882223][ T9839] netlink: 116 bytes leftover after parsing attributes in process `syz.1.988'. [ 707.145337][ T5198] Bluetooth: hci1: command 0x0406 tx timeout [ 707.223021][ T3567] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 707.238025][ T9229] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 707.462486][ T3567] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 707.816940][ T3567] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 707.923013][ T9848] fuse: Bad value for 'fd' [ 707.937051][ T9843] loop4: detected capacity change from 0 to 2048 [ 708.083780][ T9843] UDF-fs: warning (device loop4): udf_fill_super: No fileset found [ 708.192123][ T3567] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 709.181461][ T3567] bridge_slave_1: left allmulticast mode [ 709.187716][ T3567] bridge_slave_1: left promiscuous mode [ 709.194478][ T3567] bridge0: port 2(bridge_slave_1) entered disabled state [ 709.345354][ T3567] bridge_slave_0: left allmulticast mode [ 709.351334][ T3567] bridge_slave_0: left promiscuous mode [ 709.358824][ T3567] bridge0: port 1(bridge_slave_0) entered disabled state [ 709.933424][ T3567] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 709.953367][ T3567] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 709.978303][ T3567] bond0 (unregistering): Released all slaves [ 710.180898][ T1245] ieee802154 phy0 wpan0: encryption failed: -22 [ 710.191093][ T1245] ieee802154 phy1 wpan1: encryption failed: -22 [ 710.790885][ T5198] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 710.809717][ T5198] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 710.819450][ T5198] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 710.839574][ T5198] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 710.851801][ T5198] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 710.862215][ T5198] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 710.991657][ T3567] hsr_slave_0: left promiscuous mode [ 711.030196][ T3567] hsr_slave_1: left promiscuous mode [ 711.085483][ T3567] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 711.093626][ T3567] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 711.315464][ T3567] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 711.323449][ T3567] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 711.397607][ T3567] veth1_macvtap: left promiscuous mode [ 711.403720][ T3567] veth0_macvtap: left promiscuous mode [ 711.409863][ T3567] veth1_vlan: left promiscuous mode [ 711.418029][ T3567] veth0_vlan: left promiscuous mode [ 711.656215][ T9880] loop4: detected capacity change from 0 to 512 [ 711.754113][ T9880] EXT4-fs (loop4): can't mount with data=, fs mounted w/o journal [ 712.647439][ T9893] netlink: 116 bytes leftover after parsing attributes in process `syz.3.1002'. [ 712.795321][ T3567] team0 (unregistering): Port device team_slave_1 removed [ 712.914514][ T3567] team0 (unregistering): Port device team_slave_0 removed [ 712.990133][ T5198] Bluetooth: hci2: command tx timeout [ 713.070411][ T9896] fuse: Bad value for 'fd' [ 714.466446][ T9907] loop2: detected capacity change from 0 to 2048 [ 714.595300][ T9907] loop2: p3 < > p4 < > [ 714.599765][ T9907] loop2: partition table partially beyond EOD, truncated [ 714.608143][ T9907] loop2: p3 start 4284289 is beyond EOD, truncated [ 714.638146][ T9920] loop3: detected capacity change from 0 to 256 [ 714.850580][ T4620] loop2: p3 < > p4 < > [ 714.856048][ T4620] loop2: partition table partially beyond EOD, truncated [ 714.865332][ T4620] loop2: p3 start 4284289 is beyond EOD, truncated [ 715.042168][ T5198] Bluetooth: hci2: command tx timeout [ 715.060055][ T9920] FAT-fs (loop3): Directory bread(block 64) failed [ 715.067014][ T9920] FAT-fs (loop3): Directory bread(block 65) failed [ 715.074266][ T9920] FAT-fs (loop3): Directory bread(block 66) failed [ 715.081043][ T9920] FAT-fs (loop3): Directory bread(block 67) failed [ 715.088092][ T9920] FAT-fs (loop3): Directory bread(block 68) failed [ 715.095071][ T9920] FAT-fs (loop3): Directory bread(block 69) failed [ 715.107271][ T9920] FAT-fs (loop3): Directory bread(block 70) failed [ 715.115917][ T9920] FAT-fs (loop3): Directory bread(block 71) failed [ 715.122986][ T9920] FAT-fs (loop3): Directory bread(block 72) failed [ 715.129787][ T9920] FAT-fs (loop3): Directory bread(block 73) failed [ 715.459059][ T9870] chnl_net:caif_netlink_parms(): no params data found [ 715.620169][ T8875] udevd[8875]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 715.975310][ T3272] kworker/u8:16: attempt to access beyond end of device [ 715.975310][ T3272] loop3: rw=1, sector=1160, nr_sectors = 4 limit=256 [ 716.111340][ T8875] udevd[8875]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 717.122093][ T5198] Bluetooth: hci2: command tx timeout [ 717.132686][ T9870] bridge0: port 1(bridge_slave_0) entered blocking state [ 717.140365][ T9870] bridge0: port 1(bridge_slave_0) entered disabled state [ 717.151041][ T9870] bridge_slave_0: entered allmulticast mode [ 717.160054][ T9870] bridge_slave_0: entered promiscuous mode [ 717.175474][ T9870] bridge0: port 2(bridge_slave_1) entered blocking state [ 717.185092][ T9870] bridge0: port 2(bridge_slave_1) entered disabled state [ 717.193719][ T9870] bridge_slave_1: entered allmulticast mode [ 717.203993][ T9870] bridge_slave_1: entered promiscuous mode [ 717.308390][ T9870] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 717.341086][ T9870] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 717.657383][ T9870] team0: Port device team_slave_0 added [ 717.697093][ T9870] team0: Port device team_slave_1 added [ 717.994786][ T9870] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 718.002171][ T9870] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 718.028598][ T9870] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 718.270110][ T9870] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 718.280540][ T9870] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 718.308570][ T9870] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 718.758157][ T9870] hsr_slave_0: entered promiscuous mode [ 718.803456][ T9870] hsr_slave_1: entered promiscuous mode [ 718.828204][ T9987] loop2: detected capacity change from 0 to 256 [ 718.841862][ T9870] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 718.849875][ T9870] Cannot create hsr debugfs directory [ 719.013172][ T9989] loop3: detected capacity change from 0 to 2048 [ 719.069059][ T9989] loop3: p3 < > p4 < > [ 719.073629][ T9989] loop3: partition table partially beyond EOD, truncated [ 719.081987][ T9989] loop3: p3 start 4284289 is beyond EOD, truncated [ 719.202006][ T5198] Bluetooth: hci2: command tx timeout [ 719.285355][ T4620] loop3: p3 < > p4 < > [ 719.289784][ T4620] loop3: partition table partially beyond EOD, truncated [ 719.303090][ T4620] loop3: p3 start 4284289 is beyond EOD, truncated [ 719.622631][ T9987] FAT-fs (loop2): Directory bread(block 64) failed [ 719.629458][ T9987] FAT-fs (loop2): Directory bread(block 65) failed [ 719.637710][ T9987] FAT-fs (loop2): Directory bread(block 66) failed [ 719.645661][ T9987] FAT-fs (loop2): Directory bread(block 67) failed [ 719.653452][ T9987] FAT-fs (loop2): Directory bread(block 68) failed [ 719.660222][ T9987] FAT-fs (loop2): Directory bread(block 69) failed [ 719.670810][ T9987] FAT-fs (loop2): Directory bread(block 70) failed [ 719.677612][ T9987] FAT-fs (loop2): Directory bread(block 71) failed [ 719.685601][ T9987] FAT-fs (loop2): Directory bread(block 72) failed [ 719.693147][ T9987] FAT-fs (loop2): Directory bread(block 73) failed [ 720.136375][ T9991] loop1: detected capacity change from 0 to 8192 [ 720.159352][ T9991] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 720.172994][ T9991] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 720.182934][ T9991] REISERFS (device loop1): using ordered data mode [ 720.189831][ T9991] reiserfs: using flush barriers [ 720.199393][ T9991] REISERFS (device loop1): journal params: device ram0, size 0, journal first block 18, max trans len 1024, max batch 900, max commit age 30, max trans age 30 [ 720.216178][ T9991] REISERFS warning (device loop1): journal-2004 journal_init: Journal cnode memory allocation failed (0 bytes). Journal is too large for available memory. Usually this is due to a journal that is too large. [ 720.246651][ T9991] REISERFS warning (device loop1): sh-2022 reiserfs_fill_super: unable to initialize journal space [ 720.319446][ T8802] udevd[8802]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 720.788913][ T8875] udevd[8875]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 720.941438][ T3567] kworker/u8:21: attempt to access beyond end of device [ 720.941438][ T3567] loop2: rw=1, sector=1160, nr_sectors = 4 limit=256 [ 722.024095][ T9870] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 722.074240][ T9870] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 722.108591][ T9870] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 722.237816][ T9870] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 722.481329][ T5203] Bluetooth: hci3: command 0x0406 tx timeout [ 723.529122][ T9870] 8021q: adding VLAN 0 to HW filter on device bond0 [ 723.795503][T10044] loop3: detected capacity change from 0 to 256 [ 723.809460][ T8733] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 723.836041][ T9870] 8021q: adding VLAN 0 to HW filter on device team0 [ 723.918675][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 723.926424][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 724.072162][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 724.079959][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 724.118637][ T8733] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 724.127744][T10044] FAT-fs (loop3): Directory bread(block 64) failed [ 724.130076][ T8733] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 724.136819][T10044] FAT-fs (loop3): Directory bread(block 65) failed [ 724.146643][ T8733] usb 5-1: New USB device found, idVendor=04b4, idProduct=0001, bcdDevice= 0.00 [ 724.153398][T10044] FAT-fs (loop3): Directory bread(block 66) failed [ 724.163924][ T8733] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 724.169143][T10044] FAT-fs (loop3): Directory bread(block 67) failed [ 724.169404][T10044] FAT-fs (loop3): Directory bread(block 68) failed [ 724.191991][T10044] FAT-fs (loop3): Directory bread(block 69) failed [ 724.198909][T10044] FAT-fs (loop3): Directory bread(block 70) failed [ 724.205800][T10044] FAT-fs (loop3): Directory bread(block 71) failed [ 724.218152][T10044] FAT-fs (loop3): Directory bread(block 72) failed [ 724.226738][T10044] FAT-fs (loop3): Directory bread(block 73) failed [ 724.589132][ T8733] usb 5-1: config 0 descriptor?? [ 725.409669][ T7450] kworker/u8:1: attempt to access beyond end of device [ 725.409669][ T7450] loop3: rw=1, sector=1160, nr_sectors = 4 limit=256 [ 725.513502][T10053] loop4: detected capacity change from 0 to 1024 [ 725.815988][T10053] hfsplus: failed to load root directory [ 725.934631][T10061] overlayfs: failed to resolve './file0': -2 [ 726.004392][ T9870] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 726.201113][ T9870] veth0_vlan: entered promiscuous mode [ 726.236486][ T9870] veth1_vlan: entered promiscuous mode [ 726.384743][ T9870] veth0_macvtap: entered promiscuous mode [ 726.406933][ T9870] veth1_macvtap: entered promiscuous mode [ 726.538123][ T9870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 726.549075][ T9870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 726.561361][ T9870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 726.569207][ T8733] usbhid 5-1:0.0: can't add hid device: -71 [ 726.577818][ T9870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 726.578730][ T8733] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 726.589554][ T9870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 726.606707][ T9870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 726.616929][ T9870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 726.627649][ T9870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 726.643464][ T9870] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 726.712408][ T9870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 726.724116][ T9870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 726.735283][ T9870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 726.746052][ T9870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 726.756191][ T9870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 726.767464][ T9870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 726.772112][ T8733] usb 5-1: USB disconnect, device number 16 [ 726.782772][ T9870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 726.795851][ T9870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 726.812952][ T9870] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 726.896373][ T9870] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 726.905659][ T9870] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 726.914850][ T9870] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 726.924062][ T9870] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 728.750437][T10085] loop4: detected capacity change from 0 to 512 [ 729.186024][T10085] EXT4-fs error (device loop4): ext4_orphan_get:1388: inode #15: comm syz.4.1049: casefold flag without casefold feature [ 729.205717][T10085] EXT4-fs error (device loop4): ext4_orphan_get:1393: comm syz.4.1049: couldn't read orphan inode 15 (err -117) [ 729.273916][T10085] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 729.300296][T10096] loop3: detected capacity change from 0 to 256 [ 729.537847][ T4868] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 729.552466][T10096] FAT-fs (loop3): Directory bread(block 64) failed [ 729.561049][T10096] FAT-fs (loop3): Directory bread(block 65) failed [ 729.568292][T10096] FAT-fs (loop3): Directory bread(block 66) failed [ 729.575075][T10096] FAT-fs (loop3): Directory bread(block 67) failed [ 729.582161][T10096] FAT-fs (loop3): Directory bread(block 68) failed [ 729.589071][T10096] FAT-fs (loop3): Directory bread(block 69) failed [ 729.595975][T10096] FAT-fs (loop3): Directory bread(block 70) failed [ 729.603055][T10096] FAT-fs (loop3): Directory bread(block 71) failed [ 729.610110][T10096] FAT-fs (loop3): Directory bread(block 72) failed [ 729.616868][T10096] FAT-fs (loop3): Directory bread(block 73) failed [ 729.766884][T10085] loop4: detected capacity change from 512 to 64 [ 729.822221][ T4868] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 729.833598][ T4868] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 729.845820][ T4868] usb 2-1: New USB device found, idVendor=04b4, idProduct=0001, bcdDevice= 0.00 [ 729.855791][ T4868] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 729.982823][ T4868] usb 2-1: config 0 descriptor?? [ 730.123140][ T3567] kworker/u8:21: attempt to access beyond end of device [ 730.123140][ T3567] loop3: rw=1, sector=1160, nr_sectors = 4 limit=256 [ 730.291447][T10081] kvm: MONITOR instruction emulated as NOP! [ 730.712764][ T8602] syz-executor: attempt to access beyond end of device [ 730.712764][ T8602] loop4: rw=14337, sector=510, nr_sectors = 2 limit=64 [ 730.727072][ T8602] Buffer I/O error on dev loop4, logical block 255, lost sync page write [ 730.735767][ T8602] EXT4-fs error (device loop4): ext4_handle_dirty_dirblock:440: inode #2: block 255: comm syz-executor: IO error syncing itable block [ 730.792779][ T8602] EXT4-fs error (device loop4) in ext4_delete_entry:2751: IO failure [ 730.913530][ T4868] usbhid 2-1:0.0: can't add hid device: -71 [ 730.921283][ T4868] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 730.941712][ T4868] usb 2-1: USB disconnect, device number 10 [ 731.317288][ T10] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 731.522770][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 731.569064][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 731.582348][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 731.593316][ T10] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 731.602794][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 731.711532][ T10] usb 4-1: config 0 descriptor?? [ 731.791983][ T5242] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 731.878888][ T9382] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 731.913354][ T8602] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 732.006839][ T5242] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 732.015889][ T5242] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 732.026987][ T5242] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 732.036326][ T5242] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 732.047783][ T5242] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 732.142905][ T9382] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 732.368800][ T9382] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 732.383347][ T5242] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 732.393054][ T5242] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 732.405795][ T5242] usb 3-1: Product: syz [ 732.411684][ T5242] usb 3-1: Manufacturer: syz [ 732.617516][T10136] capability: warning: `syz.1.1056' uses 32-bit capabilities (legacy support in use) [ 732.621478][ T9382] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 732.639008][ T5242] cdc_wdm 3-1:1.0: skipping garbage [ 732.639113][ T5242] cdc_wdm 3-1:1.0: skipping garbage [ 732.670808][ T5242] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 732.677150][ T5242] cdc_wdm 3-1:1.0: Unknown control protocol [ 732.839930][ T5242] usb 3-1: USB disconnect, device number 14 [ 732.873661][T10139] loop1: detected capacity change from 0 to 16 [ 732.982554][ T10] usbhid 4-1:0.0: can't add hid device: -71 [ 732.991266][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 733.054174][ T10] usb 4-1: USB disconnect, device number 9 [ 733.632728][ T9382] bridge_slave_1: left allmulticast mode [ 733.643602][ T9382] bridge_slave_1: left promiscuous mode [ 733.654481][ T9382] bridge0: port 2(bridge_slave_1) entered disabled state [ 733.849234][ T9382] bridge_slave_0: left allmulticast mode [ 733.855144][ T9382] bridge_slave_0: left promiscuous mode [ 733.861841][ T9382] bridge0: port 1(bridge_slave_0) entered disabled state [ 734.350869][ T5242] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 734.513613][ T9382] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 734.607353][ T9382] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 734.648085][ T9382] bond0 (unregistering): Released all slaves [ 734.816263][ T25] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 734.971866][ T5242] usb 3-1: device descriptor read/all, error -71 [ 735.054634][ T5198] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 735.073978][ T5198] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 735.084869][ T5198] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 735.120074][ T7450] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 735.128611][ T7450] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 735.185941][ T5198] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 735.230120][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 735.230422][ T5198] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 735.241351][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 735.241556][ T25] usb 4-1: New USB device found, idVendor=04b4, idProduct=0001, bcdDevice= 0.00 [ 735.271726][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 735.304982][ T5198] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 735.340528][ T25] usb 4-1: config 0 descriptor?? [ 735.358790][ T3085] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 735.367390][ T3085] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 736.056504][T10148] loop3: detected capacity change from 0 to 1024 [ 736.282525][T10148] hfsplus: failed to load root directory [ 736.364853][ T9382] hsr_slave_0: left promiscuous mode [ 736.376524][T10163] loop2: detected capacity change from 0 to 256 [ 736.427151][ T9382] hsr_slave_1: left promiscuous mode [ 736.489434][ T9382] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 736.501389][ T9382] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 736.530511][ T25] usbhid 4-1:0.0: can't add hid device: -71 [ 736.537200][ T25] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 736.575082][ T25] usb 4-1: USB disconnect, device number 10 [ 736.590051][ T9382] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 736.603702][ T9382] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 736.654521][ T9382] veth1_macvtap: left promiscuous mode [ 736.662262][ T9382] veth0_macvtap: left promiscuous mode [ 736.668560][ T9382] veth1_vlan: left promiscuous mode [ 736.674107][ T9382] veth0_vlan: left promiscuous mode [ 736.724227][T10163] FAT-fs (loop2): Directory bread(block 64) failed [ 736.732468][T10163] FAT-fs (loop2): Directory bread(block 65) failed [ 736.739706][T10163] FAT-fs (loop2): Directory bread(block 66) failed [ 736.746686][T10163] FAT-fs (loop2): Directory bread(block 67) failed [ 736.753795][T10163] FAT-fs (loop2): Directory bread(block 68) failed [ 736.760847][T10163] FAT-fs (loop2): Directory bread(block 69) failed [ 736.767930][T10163] FAT-fs (loop2): Directory bread(block 70) failed [ 736.774697][T10163] FAT-fs (loop2): Directory bread(block 71) failed [ 736.781751][T10163] FAT-fs (loop2): Directory bread(block 72) failed [ 736.788924][T10163] FAT-fs (loop2): Directory bread(block 73) failed [ 736.977427][ T8733] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 737.170503][ T8733] usb 1-1: Using ep0 maxpacket: 16 [ 737.198264][ T8733] usb 1-1: config 0 has no interfaces? [ 737.262491][ T8733] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 737.272740][ T8733] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 737.281289][ T8733] usb 1-1: Product: syz [ 737.285783][ T8733] usb 1-1: Manufacturer: syz [ 737.290614][ T8733] usb 1-1: SerialNumber: syz [ 737.322765][ T8733] usb 1-1: config 0 descriptor?? [ 737.450871][ T7450] kworker/u8:1: attempt to access beyond end of device [ 737.450871][ T7450] loop2: rw=1, sector=1160, nr_sectors = 4 limit=256 [ 737.515206][ T5198] Bluetooth: hci1: command tx timeout [ 737.757705][ T9382] team0 (unregistering): Port device team_slave_1 removed [ 737.906655][ T9382] team0 (unregistering): Port device team_slave_0 removed [ 738.173996][T10179] loop3: detected capacity change from 0 to 8 [ 739.128195][T10153] chnl_net:caif_netlink_parms(): no params data found [ 739.645118][ T5198] Bluetooth: hci1: command tx timeout [ 739.648364][ T4868] usb 1-1: USB disconnect, device number 18 [ 740.108139][ T10] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 740.280693][ T25] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 740.367422][T10153] bridge0: port 1(bridge_slave_0) entered blocking state [ 740.375361][T10153] bridge0: port 1(bridge_slave_0) entered disabled state [ 740.383107][T10153] bridge_slave_0: entered allmulticast mode [ 740.398458][T10153] bridge_slave_0: entered promiscuous mode [ 740.416759][T10153] bridge0: port 2(bridge_slave_1) entered blocking state [ 740.424684][T10153] bridge0: port 2(bridge_slave_1) entered disabled state [ 740.432383][T10153] bridge_slave_1: entered allmulticast mode [ 740.441361][T10153] bridge_slave_1: entered promiscuous mode [ 740.494468][ T25] usb 4-1: Using ep0 maxpacket: 16 [ 740.496220][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 740.535527][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 740.547119][ T25] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 740.550383][ T10] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 740.560315][ T25] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 740.568619][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 740.577803][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 740.588576][ T10] usb 2-1: config 0 has no interface number 0 [ 740.671625][T10153] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 740.754923][T10153] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 740.774980][ T25] usb 4-1: config 0 descriptor?? [ 740.800086][ T10] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 740.810173][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 740.818643][ T10] usb 2-1: Product: syz [ 740.823043][ T10] usb 2-1: Manufacturer: syz [ 740.828159][ T10] usb 2-1: SerialNumber: syz [ 740.940382][ T10] usb 2-1: config 0 descriptor?? [ 741.020372][ T10] usb 2-1: Found UVC 0.00 device syz (046d:08f3) [ 741.027291][ T10] usb 2-1: No valid video chain found. [ 741.178357][ T10] usb 2-1: USB disconnect, device number 11 [ 741.232164][ T25] microsoft 0003:045E:07DA.0004: unknown main item tag 0xe [ 741.256422][T10153] team0: Port device team_slave_0 added [ 741.280277][ T25] microsoft 0003:045E:07DA.0004: No inputs registered, leaving [ 741.302692][T10153] team0: Port device team_slave_1 added [ 741.343614][ T25] microsoft 0003:045E:07DA.0004: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 741.358694][ T25] microsoft 0003:045E:07DA.0004: no inputs found [ 741.366281][ T25] microsoft 0003:045E:07DA.0004: could not initialize ff, continuing anyway [ 741.689410][ T5198] Bluetooth: hci1: command tx timeout [ 741.750344][T10205] loop3: detected capacity change from 0 to 64 [ 741.786010][T10205] hfs: unable to parse mount options [ 741.837263][ T25] usb 4-1: USB disconnect, device number 11 [ 742.064400][T10153] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 742.071795][T10153] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 742.098292][T10153] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 742.428314][T10153] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 742.439335][T10153] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 742.466886][T10153] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 742.530461][T10224] loop1: detected capacity change from 0 to 256 [ 743.038254][T10224] FAT-fs (loop1): Directory bread(block 64) failed [ 743.045341][T10224] FAT-fs (loop1): Directory bread(block 65) failed [ 743.055950][T10224] FAT-fs (loop1): Directory bread(block 66) failed [ 743.062733][T10224] FAT-fs (loop1): Directory bread(block 67) failed [ 743.071247][T10224] FAT-fs (loop1): Directory bread(block 68) failed [ 743.078111][T10224] FAT-fs (loop1): Directory bread(block 69) failed [ 743.085094][T10224] FAT-fs (loop1): Directory bread(block 70) failed [ 743.091863][T10224] FAT-fs (loop1): Directory bread(block 71) failed [ 743.099442][T10224] FAT-fs (loop1): Directory bread(block 72) failed [ 743.106295][T10224] FAT-fs (loop1): Directory bread(block 73) failed [ 743.235117][T10153] hsr_slave_0: entered promiscuous mode [ 743.247698][T10153] hsr_slave_1: entered promiscuous mode [ 743.436491][T10153] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 743.444867][T10153] Cannot create hsr debugfs directory [ 743.452153][ T5242] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 743.659426][ T5242] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 743.674025][ T5242] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 743.687139][ T5242] usb 4-1: New USB device found, idVendor=04b4, idProduct=0001, bcdDevice= 0.00 [ 743.696624][ T5242] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 743.754856][ T7450] kworker/u8:1: attempt to access beyond end of device [ 743.754856][ T7450] loop1: rw=1, sector=1160, nr_sectors = 4 limit=256 [ 743.780336][ T5242] usb 4-1: config 0 descriptor?? [ 743.783410][ T5198] Bluetooth: hci1: command tx timeout [ 744.441713][T10229] loop3: detected capacity change from 0 to 1024 [ 744.622796][T10229] hfsplus: failed to load root directory [ 744.744665][ T5242] usbhid 4-1:0.0: can't add hid device: -71 [ 744.751522][ T5242] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 744.799230][ T5242] usb 4-1: USB disconnect, device number 12 [ 744.928668][ T8579] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 745.102125][ T8579] usb 3-1: Using ep0 maxpacket: 16 [ 745.147677][ T8579] usb 3-1: config 0 has no interfaces? [ 745.189796][ T8579] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 745.203958][ T8579] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 745.212235][ T8579] usb 3-1: Product: syz [ 745.216760][ T8579] usb 3-1: Manufacturer: syz [ 745.221683][ T8579] usb 3-1: SerialNumber: syz [ 745.394325][ T8579] usb 3-1: config 0 descriptor?? [ 745.521340][T10153] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 745.676673][T10153] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 745.774157][T10153] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 745.801072][T10153] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 746.343709][ T4868] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 746.556697][ T4868] usb 4-1: Using ep0 maxpacket: 16 [ 746.578951][ T4868] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 746.591472][ T4868] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 746.605482][ T4868] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 746.615383][ T4868] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 746.701329][ T4868] usb 4-1: config 0 descriptor?? [ 746.750255][T10267] loop0: detected capacity change from 0 to 256 [ 746.933321][T10267] FAT-fs (loop0): Directory bread(block 64) failed [ 746.944020][T10267] FAT-fs (loop0): Directory bread(block 65) failed [ 746.950946][T10267] FAT-fs (loop0): Directory bread(block 66) failed [ 746.959896][T10267] FAT-fs (loop0): Directory bread(block 67) failed [ 746.964584][T10153] 8021q: adding VLAN 0 to HW filter on device bond0 [ 746.966890][T10267] FAT-fs (loop0): Directory bread(block 68) failed [ 746.980230][T10267] FAT-fs (loop0): Directory bread(block 69) failed [ 746.987349][T10267] FAT-fs (loop0): Directory bread(block 70) failed [ 746.994277][T10267] FAT-fs (loop0): Directory bread(block 71) failed [ 747.001207][T10267] FAT-fs (loop0): Directory bread(block 72) failed [ 747.008080][T10267] FAT-fs (loop0): Directory bread(block 73) failed [ 747.080628][T10153] 8021q: adding VLAN 0 to HW filter on device team0 [ 747.116017][ T3567] bridge0: port 1(bridge_slave_0) entered blocking state [ 747.123791][ T3567] bridge0: port 1(bridge_slave_0) entered forwarding state [ 747.167964][ T3567] bridge0: port 2(bridge_slave_1) entered blocking state [ 747.175771][ T3567] bridge0: port 2(bridge_slave_1) entered forwarding state [ 747.257814][ T4868] microsoft 0003:045E:07DA.0005: unknown main item tag 0xe [ 747.364075][T10153] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 747.377280][ T4868] microsoft 0003:045E:07DA.0005: No inputs registered, leaving [ 747.423628][ T4868] microsoft 0003:045E:07DA.0005: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 747.435611][ T4868] microsoft 0003:045E:07DA.0005: no inputs found [ 747.442434][ T4868] microsoft 0003:045E:07DA.0005: could not initialize ff, continuing anyway [ 747.674108][ T10] usb 3-1: USB disconnect, device number 17 [ 747.826327][T10259] loop3: detected capacity change from 0 to 64 [ 747.848174][T10259] hfs: unable to parse mount options [ 748.113411][ T10] usb 4-1: USB disconnect, device number 13 [ 749.440190][T10153] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 750.150843][T10302] loop2: detected capacity change from 0 to 256 [ 750.275728][T10285] loop0: detected capacity change from 0 to 4096 [ 750.446947][T10285] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 750.536901][T10302] FAT-fs (loop2): Directory bread(block 64) failed [ 750.544217][T10302] FAT-fs (loop2): Directory bread(block 65) failed [ 750.552367][T10302] FAT-fs (loop2): Directory bread(block 66) failed [ 750.559147][T10302] FAT-fs (loop2): Directory bread(block 67) failed [ 750.566271][T10302] FAT-fs (loop2): Directory bread(block 68) failed [ 750.573133][T10302] FAT-fs (loop2): Directory bread(block 69) failed [ 750.580035][T10302] FAT-fs (loop2): Directory bread(block 70) failed [ 750.587009][T10302] FAT-fs (loop2): Directory bread(block 71) failed [ 750.594035][T10302] FAT-fs (loop2): Directory bread(block 72) failed [ 750.600843][T10302] FAT-fs (loop2): Directory bread(block 73) failed [ 750.925421][ T9870] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 751.795670][ T8612] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 752.012723][ T8612] usb 1-1: Using ep0 maxpacket: 16 [ 752.035007][T10153] veth0_vlan: entered promiscuous mode [ 752.074352][ T8612] usb 1-1: config 0 has no interfaces? [ 752.108643][ T8612] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 752.118377][ T8612] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 752.127359][ T8612] usb 1-1: Product: syz [ 752.131916][ T8612] usb 1-1: Manufacturer: syz [ 752.136750][ T8612] usb 1-1: SerialNumber: syz [ 752.192386][T10153] veth1_vlan: entered promiscuous mode [ 752.227220][ T8612] usb 1-1: config 0 descriptor?? [ 752.493689][ T8612] usb 1-1: USB disconnect, device number 19 [ 752.582695][T10153] veth0_macvtap: entered promiscuous mode [ 752.661371][T10153] veth1_macvtap: entered promiscuous mode [ 752.861031][T10153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 752.872069][T10153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 752.886082][T10153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 752.898003][T10153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 752.908307][T10153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 752.921874][T10153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 752.932250][T10153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 752.945451][T10153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 752.964442][T10153] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 753.136472][T10153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 753.147869][T10153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 753.158042][T10153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 753.168850][T10153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 753.178969][T10153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 753.193649][T10153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 753.205021][T10153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 753.215784][T10153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 753.230768][T10153] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 753.301925][ T8612] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 753.307691][T10153] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 753.318849][T10153] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 753.328040][T10153] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 753.337165][T10153] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 753.501605][ T8612] usb 3-1: Using ep0 maxpacket: 16 [ 753.550881][ T8612] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 753.562281][ T8612] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 753.575678][ T8612] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 753.585151][ T8612] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 753.787657][ T8612] usb 3-1: config 0 descriptor?? [ 754.250744][ T8612] microsoft 0003:045E:07DA.0006: unknown main item tag 0xe [ 754.339999][ T8612] microsoft 0003:045E:07DA.0006: No inputs registered, leaving [ 754.374352][ T8612] microsoft 0003:045E:07DA.0006: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 754.386313][ T8612] microsoft 0003:045E:07DA.0006: no inputs found [ 754.394495][ T8612] microsoft 0003:045E:07DA.0006: could not initialize ff, continuing anyway [ 755.065787][T10326] loop2: detected capacity change from 0 to 64 [ 755.108223][T10326] hfs: unable to parse mount options [ 755.278403][ T8612] usb 3-1: USB disconnect, device number 18 [ 758.449707][ T5242] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 758.580581][T10375] program syz.0.1115 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 758.660799][ T5242] usb 4-1: Using ep0 maxpacket: 16 [ 758.695553][ T5242] usb 4-1: config 0 has no interfaces? [ 758.761257][ T5242] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 758.772018][ T5242] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 758.781278][ T5242] usb 4-1: Product: syz [ 758.785694][ T5242] usb 4-1: Manufacturer: syz [ 758.794116][ T5242] usb 4-1: SerialNumber: syz [ 758.867261][ T5242] usb 4-1: config 0 descriptor?? [ 759.051031][T10378] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 759.089734][ T8612] usb 4-1: USB disconnect, device number 14 [ 759.125395][ T8579] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 759.319447][ T8579] usb 3-1: Using ep0 maxpacket: 16 [ 759.352909][ T8579] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 759.364477][ T8579] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 759.377787][ T8579] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 759.387302][ T8579] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 759.486732][ T8579] usb 3-1: config 0 descriptor?? [ 759.985341][ T8579] microsoft 0003:045E:07DA.0007: unknown main item tag 0xe [ 760.009289][ T8579] microsoft 0003:045E:07DA.0007: No inputs registered, leaving [ 760.260555][T10382] loop2: detected capacity change from 0 to 64 [ 760.280609][T10382] hfs: unable to parse mount options [ 760.664928][ T8579] microsoft 0003:045E:07DA.0007: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 760.676836][ T8579] microsoft 0003:045E:07DA.0007: no inputs found [ 760.683971][ T8579] microsoft 0003:045E:07DA.0007: could not initialize ff, continuing anyway [ 760.893129][ T8579] usb 3-1: USB disconnect, device number 19 [ 761.259097][ T9382] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 761.267283][ T9382] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 761.592236][ T3085] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 761.600843][ T3085] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 761.620073][ T8579] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 761.828527][ T8579] usb 2-1: Using ep0 maxpacket: 8 [ 761.878987][ T8579] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 761.894949][ T8579] usb 2-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 761.910730][ T8579] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 761.920160][ T8579] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 762.277040][ T8579] usbtmc 2-1:16.0: bulk endpoints not found [ 763.259274][ C1] Unknown status report in ack skb [ 763.343968][T10419] loop3: detected capacity change from 0 to 4096 [ 763.438292][ T5203] Bluetooth: hci4: command 0x0406 tx timeout [ 763.708358][T10427] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 763.791175][T10420] loop2: detected capacity change from 0 to 32768 [ 764.015406][ T29] audit: type=1800 audit(1727574970.342:33): pid=10419 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1128" name="3" dev="loop3" ino=19 res=0 errno=0 [ 764.214921][T10424] loop1: detected capacity change from 0 to 4096 [ 764.307398][ T8579] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 764.424146][T10424] NILFS (loop1): error -4 creating segctord thread [ 764.558333][ T8579] usb 1-1: Using ep0 maxpacket: 16 [ 764.582303][ T8579] usb 1-1: config 0 has no interfaces? [ 764.638226][ T8579] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 764.652494][ T8579] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 764.662308][ T8579] usb 1-1: Product: syz [ 764.666706][ T8579] usb 1-1: Manufacturer: syz [ 764.671746][ T8579] usb 1-1: SerialNumber: syz [ 764.907224][ T5242] usb 2-1: USB disconnect, device number 12 [ 764.982173][ T8579] usb 1-1: config 0 descriptor?? [ 765.062914][T10436] loop2: detected capacity change from 0 to 512 [ 765.252325][T10436] EXT4-fs (loop2): can't mount with data=, fs mounted w/o journal [ 765.656590][ T8579] usb 1-1: USB disconnect, device number 20 [ 765.869840][ T5242] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 766.092087][ T5242] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 766.102679][ T5242] usb 4-1: config 0 has no interfaces? [ 766.108686][ T5242] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 766.118094][ T5242] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 766.134316][ T8612] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 766.204305][ T5242] usb 4-1: config 0 descriptor?? [ 766.290475][T10451] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1138'. [ 766.308046][ T8612] usb 2-1: Using ep0 maxpacket: 16 [ 766.333056][ T8612] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 766.344654][ T8612] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 766.358155][ T8612] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 766.367641][ T8612] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 766.471329][ T4868] usb 4-1: USB disconnect, device number 15 [ 766.581584][ T8612] usb 2-1: config 0 descriptor?? [ 767.100333][ T8612] microsoft 0003:045E:07DA.0008: unknown main item tag 0xe [ 767.163278][ T8612] microsoft 0003:045E:07DA.0008: No inputs registered, leaving [ 767.213243][ T8612] microsoft 0003:045E:07DA.0008: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 767.225197][ T8612] microsoft 0003:045E:07DA.0008: no inputs found [ 767.232362][ T8612] microsoft 0003:045E:07DA.0008: could not initialize ff, continuing anyway [ 767.383092][T10447] loop1: detected capacity change from 0 to 64 [ 767.791149][T10447] hfs: unable to parse mount options [ 768.090162][ T5242] usb 2-1: USB disconnect, device number 13 [ 768.244932][ T11] ===================================================== [ 768.252300][ T11] BUG: KMSAN: uninit-value in netfs_clear_buffer+0x216/0x4e0 [ 768.260135][ T11] netfs_clear_buffer+0x216/0x4e0 [ 768.265384][ T11] netfs_free_request+0x51f/0x890 [ 768.270877][ T11] netfs_put_request+0x161/0x360 [ 768.276047][ T11] netfs_write_collection_worker+0x7337/0x7c20 [ 768.282740][ T11] process_scheduled_works+0xae0/0x1c40 [ 768.288647][ T11] worker_thread+0xea7/0x14f0 [ 768.293518][ T11] kthread+0x3e2/0x540 [ 768.297984][ T11] ret_from_fork+0x6d/0x90 [ 768.302588][ T11] ret_from_fork_asm+0x1a/0x30 [ 768.307685][ T11] [ 768.310101][ T11] Uninit was created at: [ 768.314588][ T11] __kmalloc_cache_noprof+0x4f0/0xb00 [ 768.316149][ T5198] Bluetooth: hci2: Unknown advertising packet type: 0x74 [ 768.320232][ T11] netfs_buffer_make_space+0x243/0x750 [ 768.320387][ T11] netfs_buffer_append_folio+0xd4/0x3d0 [ 768.320525][ T11] netfs_write_folio+0x1120/0x3050 [ 768.327866][ T5198] Bluetooth: hci2: adv larger than maximum supported [ 768.338288][ T11] netfs_writepages+0xe60/0x1670 [ 768.342939][ T5198] Bluetooth: hci2: Malformed LE Event: 0x0d [ 768.350036][ T11] do_writepages+0x427/0xc30 [ 768.369819][ T11] filemap_fdatawrite_wbc+0x1d8/0x270 [ 768.375382][ T11] filemap_fdatawrite+0xbf/0xf0 [ 768.380762][ T11] v9fs_dir_release+0x1f2/0x810 [ 768.385825][ T11] __fput+0x32c/0x1120 [ 768.391925][ T11] ____fput+0x25/0x30 [ 768.396187][ T11] task_work_run+0x268/0x310 [ 768.401385][ T11] syscall_exit_to_user_mode+0xce/0x170 [ 768.407498][ T11] do_syscall_64+0xda/0x1e0 [ 768.412194][ T11] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 768.418408][ T11] [ 768.420844][ T11] CPU: 1 UID: 0 PID: 11 Comm: kworker/u8:0 Not tainted 6.11.0-syzkaller-11993-g3efc57369a0c #0 [ 768.431477][ T11] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 768.447144][ T11] Workqueue: events_unbound netfs_write_collection_worker [ 768.454482][ T11] ===================================================== [ 768.463202][ T11] Disabling lock debugging due to kernel taint [ 768.469702][ T11] Kernel panic - not syncing: kmsan.panic set ... [ 768.476255][ T11] CPU: 1 UID: 0 PID: 11 Comm: kworker/u8:0 Tainted: G B 6.11.0-syzkaller-11993-g3efc57369a0c #0 [ 768.488276][ T11] Tainted: [B]=BAD_PAGE [ 768.492535][ T11] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 768.502734][ T11] Workqueue: events_unbound netfs_write_collection_worker [ 768.510050][ T11] Call Trace: [ 768.513437][ T11] [ 768.516467][ T11] dump_stack_lvl+0x216/0x2d0 [ 768.521327][ T11] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 768.527303][ T11] dump_stack+0x1e/0x30 [ 768.531625][ T11] panic+0x4e2/0xcf0 [ 768.535684][ T11] ? kmsan_get_metadata+0xf1/0x1c0 [ 768.540963][ T11] kmsan_report+0x2c7/0x2d0 [ 768.545681][ T11] ? __msan_warning+0x95/0x120 [ 768.550632][ T11] ? netfs_clear_buffer+0x216/0x4e0 [ 768.556035][ T11] ? netfs_free_request+0x51f/0x890 [ 768.561432][ T11] ? netfs_put_request+0x161/0x360 [ 768.566738][ T11] ? netfs_write_collection_worker+0x7337/0x7c20 [ 768.573238][ T11] ? process_scheduled_works+0xae0/0x1c40 [ 768.579142][ T11] ? worker_thread+0xea7/0x14f0 [ 768.584171][ T11] ? kthread+0x3e2/0x540 [ 768.588600][ T11] ? ret_from_fork+0x6d/0x90 [ 768.593344][ T11] ? ret_from_fork_asm+0x1a/0x30 [ 768.598481][ T11] ? p9_fid_destroy+0xf2/0x2d0 [ 768.603402][ T11] ? kfree+0x622/0xdb0 [ 768.607638][ T11] ? p9_fid_destroy+0xf2/0x2d0 [ 768.612573][ T11] ? p9_fid_destroy+0xf2/0x2d0 [ 768.617488][ T11] ? kmsan_get_metadata+0x13e/0x1c0 [ 768.622841][ T11] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 768.628812][ T11] __msan_warning+0x95/0x120 [ 768.633595][ T11] netfs_clear_buffer+0x216/0x4e0 [ 768.638833][ T11] netfs_free_request+0x51f/0x890 [ 768.644070][ T11] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 768.650615][ T11] netfs_put_request+0x161/0x360 [ 768.655762][ T11] netfs_write_collection_worker+0x7337/0x7c20 [ 768.662147][ T11] ? __pfx_netfs_write_collection_worker+0x10/0x10 [ 768.668821][ T11] process_scheduled_works+0xae0/0x1c40 [ 768.674594][ T11] worker_thread+0xea7/0x14f0 [ 768.679472][ T11] kthread+0x3e2/0x540 [ 768.683727][ T11] ? __pfx_worker_thread+0x10/0x10 [ 768.689025][ T11] ? __pfx_kthread+0x10/0x10 [ 768.693808][ T11] ret_from_fork+0x6d/0x90 [ 768.698378][ T11] ? __pfx_kthread+0x10/0x10 [ 768.703157][ T11] ret_from_fork_asm+0x1a/0x30 [ 768.708123][ T11] [ 768.711533][ T11] Kernel Offset: disabled [ 768.715913][ T11] Rebooting in 86400 seconds..