last executing test programs: 2m48.419215004s ago: executing program 2 (id=101): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0x1}, 0x1c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001040)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88caffff0000000000", 0x0, 0x400000ff, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m46.102611778s ago: executing program 2 (id=105): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1ae8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000850000002300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='jbd2_handle_stats\x00', r1}, 0x10) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000140)={0x0, 0x0}) r4 = syz_open_procfs(r3, &(0x7f0000000600)='fd/4\x00') ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000380)) 52.669865747s ago: executing program 2 (id=106): r0 = socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x100, 0x40, &(0x7f0000000080), 0x8, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x22, &(0x7f00000000c0)=0x7a, 0x4) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(r8, 0x540d, 0x0) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000007c0)={0x0, 0x0, 0x1, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r9, 0xc08c5335, &(0x7f00000001c0)={0x0, 0x80, 0x0, 'queue0\x00'}) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r11, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="0500000000000000000001000000600008802800008024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b3400008004000980080003000200000024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b08000100", @ANYRES32=r13, @ANYBLOB="13f402f65f8d22f0190f16ec4662"], 0x7c}}, 0x0) 46.936800101s ago: executing program 2 (id=211): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000001080), 0x1, 0x4e2, &(0x7f0000000b80)="$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") creat(&(0x7f0000000340)='./bus\x00', 0x109) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0xa, [{}]}]}}, &(0x7f0000000f40)=""/4089, 0x2e, 0xff9, 0x2, 0x0, 0x0, @void, @value}, 0x20) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x0) open(&(0x7f0000000540)='./bus\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = getpid() prlimit64(r0, 0x8, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000600000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00D\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x68, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x3}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x8, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0x4}]}]}, 0x68}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0xb8, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x24, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6}]}]}]}, 0xb8}}, 0x0) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r6, &(0x7f0000000340)="07000000010000", 0x7) 44.735130244s ago: executing program 2 (id=215): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3a616dc4010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000280)={0x0, 0x0, 0x1, "12"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000500)={0x24, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 43.402756665s ago: executing program 2 (id=216): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f0000004280)={0x2020}, 0x2020) chroot(&(0x7f0000000040)='./file0/file0/file0/file0/file0\x00') mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000300)={{}, 0x2c, {'rootmode', 0x3d, 0xc000}}) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) move_mount(r1, &(0x7f0000000000)='./file0/file0/file0/file0/file0\x00', 0xffffffffffffffff, 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r2}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000b800)="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", 0x2000, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)={0x90, 0xfffffffffffffffe, 0x0, {0x0, 0x0, 0x3}}, 0x0, 0x0, 0x0, 0x0}) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 29.668054428s ago: executing program 1 (id=229): getpid() r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqsrc(r0, 0x0, 0x0, &(0x7f0000000000)={@dev={0xac, 0x14, 0x14, 0x3b}, @multicast1, @broadcast}, 0xc) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x8, 0x0, 0x0, &(0x7f0000000200)='syzkaller\x00', 0x9, 0x100b, &(0x7f0000001e40)=""/4107, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009b23fd406d04b8088dee000000410902240001fa0000000904"], 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x50}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x44}}, 0x0) 29.112855713s ago: executing program 0 (id=231): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000002c0)={0x1, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1ff) sendmsg$netlink(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)=ANY=[], 0x10}], 0x1, &(0x7f0000000280), 0x0, 0x4000000}, 0x4000400) 27.903619091s ago: executing program 0 (id=232): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x14d8, 0x0, 0x11, 0x148, 0x0, 0x10, 0x1460, 0x2a8, 0x2a8, 0x1460, 0x2a8, 0x7fffffe, 0x0, {[{{@uncond, 0x10, 0x12d0, 0x1340, 0x1c, {0x6}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x0, 0xff, './cgroup.cpu/syz1\x00'}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x2, './file0\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "3027851d572baec918d14e79584558b361139090a42fe5fdfaacee38e43f6e7bf8a58e41363c09ee585cd87590517c3539bccbf1de93ba4d0b7ca0972c475b6f"}}}, {{@ip={@private, @local, 0x0, 0x0, 'vxcan1\x00', 'veth0_macvtap\x00'}, 0x0, 0xc0, 0x100, 0x0, {}, [@common=@inet=@udp={{0x30}}, @common=@socket0={{0x20}}]}, @common=@SET={0x0, 'SET\x00', 0x0, {{0x3, [0x2, 0x3, 0x5, 0x0, 0x6, 0x1], 0x6, 0x4}, {0x1, [0x1, 0x8, 0x0, 0x3, 0x3], 0x1}}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x158d) 27.095193656s ago: executing program 0 (id=233): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x408e, &(0x7f0000000240), 0x3, 0x43a, &(0x7f0000000340)="$eJzs28tvG0UYAPBv13FKXySU8ugDCBRExCNp0gI9cAGBxAEkJDiUY0jSqtRtUBMkWlUQECpHVIk74ojEX8AJLgg4IXGFO6pUoVxaOBmtvZs4jp0mwY5L/ftJm8zsjjPzeXbs2Z1sAH1rJPuRROyJiN8jYqieXV1gpP7r5tLl6b+XLk8nUa2+9VdSK3dj6fJ0UbR43e48M5pGpJ8lcahFvfMXL52dqlRmL+T58YVz74/PX7z07JlzU6dnT8+enzxx4vixiReen3yuI3Fmbbpx8KO5wwdee+fqG9Mnr77787dJEX9THB0yst7BJ6rVDlfXW3sb0slADxvCppQiIuuucm38D0UpVjpvKF79tKeNA7qqWq1Wd7c/vFgF7mBJbLTk2fzzArgzFF/02fVvsW3T1OO2cP2l+gVQFvfNfKsfGYg0L1Nuur7tpJGIOLn4z1fZFt25DwEAsMr32fznmVbzvzTubyh3d742NBwR90TEvoi4NyL2R8R9EbWyD0TEg5usv3mRZO38J722pcA2KJv/vZivba2e/xWzvxgu5bm9tfjLyakzldmj+XsyGuUdWX5inTp+eOW3L9oda5z/ZVtWfzEXzNtxbWDH6tfMTC1M/ZeYG13/JOLgQKv4k+WVgCQiDkTEwS3Wceapbw63O9Yu/vJG/nAH1pmqX0c8We//xWiKv5Csvz45fldUZo+OF2fFWr/8euXNdvXfuv+7K+v/XS3P/+X4h5PG9dr5zddx5Y/P217TbPX8H0zerqUH830fTi0sXJiIGExerze6cf/kymuLfFE+i3/0SOvxvy9W3olDEZGdxA9FxMMR8Uje9kcj4rGIOLJO/D+9/Ph7W4+/u7L4ZzbV/yuJwWje0zpROvvjd6sqHd5M/Fn/H6+lRvM9G/n820i7tnY2AwAAwP9PGhF7IknHltNpOjZW/3/5/bErrczNLzx9au6D8zP1ZwSGo5wWd7qGGu6HTuSX9UV+sil/LL9v/GVpZy0/Nj1Xmel18NDndrcZ/5k/S71uHdB1nteC/mX8Q/8y/qF/Gf/Qv1qM/529aAew/Vp9/3/cg3YA269p/Fv2gz7i+h/6l/EP/cv4h740vzNu/ZC8hMSaRKS3RTMkupTo9ScTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAZ/wbAAD//9E940M=") r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0xf800) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000080)=0x10) 26.702720044s ago: executing program 1 (id=234): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x200000, &(0x7f0000000180), 0xfc, 0x57c, &(0x7f00000013c0)="$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") bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_usb_connect$uac1(0x3, 0xa4, &(0x7f0000000040)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05", @ANYRES16=r0], 0x0) 26.396813447s ago: executing program 0 (id=235): preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_mount_image$udf(&(0x7f0000000f00), &(0x7f00000000c0)='./file1\x00', 0x210008, &(0x7f0000001040)=ANY=[@ANYBLOB='uid=', @ANYRESDEC=0x0, @ANYBLOB="2c756e64656c6574652c6e6f7672732c6164696e6963622c766f6c756d653d30303030303030303030303030303030303030322c7569643d666f726765742c6769643d666f726765742c6e6f7374726963742c6e6f7672732c0085f95733019d784ca386da1fd41ffabd4b47acca2b8d488be702157dd8711c31732d"], 0xff, 0xc2d, &(0x7f00000001c0)="$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") creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) r1 = creat(&(0x7f0000003280)='./file0/file0\x00', 0x104) r2 = open(&(0x7f0000000440)='./bus\x00', 0x101002, 0x0) dup3(r2, r1, 0x0) io_setup(0x6, &(0x7f0000000240)=0x0) io_submit(r3, 0x3f0a, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r1, &(0x7f0000000000), 0x200a00}]) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x7a00, 0x0, 0x3) chdir(&(0x7f0000000180)='./file0\x00') creat(&(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) 25.14717879s ago: executing program 3 (id=236): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file2\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001500)={0x2c, r3, 0x1, 0x0, 0x0, {0x17}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}]}]}, 0x2c}}, 0x0) 25.047832421s ago: executing program 0 (id=237): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000fc0)=@mangle={'mangle\x00', 0x64, 0x6, 0x540, 0x2b8, 0x388, 0x2b8, 0x1b8, 0x1b8, 0x470, 0x470, 0x470, 0x470, 0x470, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x8000, 0x3}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@unspec=@connmark={{0x30}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a0) 23.886647588s ago: executing program 0 (id=238): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)}, 0x0) 22.582452288s ago: executing program 1 (id=240): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000002c0)={0x1, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1ff) sendmsg$netlink(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)=ANY=[], 0x10}], 0x1, &(0x7f0000000280), 0x0, 0x4000000}, 0x4000400) 21.383881152s ago: executing program 1 (id=241): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000001080), 0x1, 0x4e2, &(0x7f0000000b80)="$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") creat(&(0x7f0000000340)='./bus\x00', 0x109) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0xa, [{}]}]}}, &(0x7f0000000f40)=""/4089, 0x2e, 0xff9, 0x2, 0x0, 0x0, @void, @value}, 0x20) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x0) open(&(0x7f0000000540)='./bus\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = getpid() prlimit64(r0, 0x8, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000600000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00D\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x68, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x3}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x8, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0x4}]}]}, 0x68}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0xb8, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x24, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6}]}]}]}, 0xb8}}, 0x0) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r5, &(0x7f0000000340)="07000000010000", 0x7) 18.494351201s ago: executing program 3 (id=243): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x408e, &(0x7f0000000240), 0x3, 0x43a, &(0x7f0000000340)="$eJzs28tvG0UYAPBv13FKXySU8ugDCBRExCNp0gI9cAGBxAEkJDiUY0jSqtRtUBMkWlUQECpHVIk74ojEX8AJLgg4IXGFO6pUoVxaOBmtvZs4jp0mwY5L/ftJm8zsjjPzeXbs2Z1sAH1rJPuRROyJiN8jYqieXV1gpP7r5tLl6b+XLk8nUa2+9VdSK3dj6fJ0UbR43e48M5pGpJ8lcahFvfMXL52dqlRmL+T58YVz74/PX7z07JlzU6dnT8+enzxx4vixiReen3yuI3Fmbbpx8KO5wwdee+fqG9Mnr77787dJEX9THB0yst7BJ6rVDlfXW3sb0slADxvCppQiIuuucm38D0UpVjpvKF79tKeNA7qqWq1Wd7c/vFgF7mBJbLTk2fzzArgzFF/02fVvsW3T1OO2cP2l+gVQFvfNfKsfGYg0L1Nuur7tpJGIOLn4z1fZFt25DwEAsMr32fznmVbzvzTubyh3d742NBwR90TEvoi4NyL2R8R9EbWyD0TEg5usv3mRZO38J722pcA2KJv/vZivba2e/xWzvxgu5bm9tfjLyakzldmj+XsyGuUdWX5inTp+eOW3L9oda5z/ZVtWfzEXzNtxbWDH6tfMTC1M/ZeYG13/JOLgQKv4k+WVgCQiDkTEwS3Wceapbw63O9Yu/vJG/nAH1pmqX0c8We//xWiKv5Csvz45fldUZo+OF2fFWr/8euXNdvXfuv+7K+v/XS3P/+X4h5PG9dr5zddx5Y/P217TbPX8H0zerqUH830fTi0sXJiIGExerze6cf/kymuLfFE+i3/0SOvxvy9W3olDEZGdxA9FxMMR8Uje9kcj4rGIOLJO/D+9/Ph7W4+/u7L4ZzbV/yuJwWje0zpROvvjd6sqHd5M/Fn/H6+lRvM9G/n820i7tnY2AwAAwP9PGhF7IknHltNpOjZW/3/5/bErrczNLzx9au6D8zP1ZwSGo5wWd7qGGu6HTuSX9UV+sil/LL9v/GVpZy0/Nj1Xmel18NDndrcZ/5k/S71uHdB1nteC/mX8Q/8y/qF/Gf/Qv1qM/529aAew/Vp9/3/cg3YA269p/Fv2gz7i+h/6l/EP/cv4h740vzNu/ZC8hMSaRKS3RTMkupTo9ScTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAZ/wbAAD//9E940M=") r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0xf800) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000080)=0x10) 16.851620988s ago: executing program 3 (id=245): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{}, &(0x7f0000000580), 0x0}, 0x20) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000001c0001000800ff000000000007000000", @ANYRES32=r1, @ANYBLOB="800094000a000200aaaaaaaaaa1c"], 0x28}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mount(0x0, &(0x7f0000001fc0)='./file0\x00', &(0x7f0000002000)='devtmpfs\x00', 0x0, &(0x7f0000002040)='dirsync') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2, 0xfffffffc}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x10}, @union={0x0, 0x0, 0x0, 0x4}]}}, 0x0, 0x4e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r5, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x1, 0x357, &(0x7f0000000180)="$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") r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r7}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={0x0, r7}, 0x10) 16.368042878s ago: executing program 1 (id=246): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$getregset(0x4204, r0, 0x2, 0x0) 13.658661615s ago: executing program 4 (id=247): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x200000, &(0x7f0000000180), 0xfc, 0x57c, &(0x7f00000013c0)="$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") bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_usb_connect$uac1(0x3, 0xa4, &(0x7f0000000040)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05", @ANYRES32=r0], 0x0) 11.575948337s ago: executing program 3 (id=248): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000040)=0xe, 0x36) setsockopt$inet_int(r0, 0x0, 0x17, 0x0, 0x0) 11.575695161s ago: executing program 1 (id=249): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000007c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x3, 0x0, 0x8, 0x0, 0x0, 0x401, 0x0, 0x0, 0xffff}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 8.586082402s ago: executing program 3 (id=251): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000540)={[{@test_dummy_encryption}]}, 0x1, 0x236, &(0x7f0000000300)="$eJzs3TFoM2UcBvDnLomf/b4gVRdBUEFEtFDqJrjURaEgpYgIKlREXJRWqC1urZOLg84qnVyKuFkdpUtxUQSnqh3qImhxsDjoELlcK9VGFFNz8t3vB5fcJe97//e4e95kOS5Aa00nmU/SSTKTpJekON/grnqZPt3cntpfTgaDx38shu3q7dpZv2tJtpI8mGSvLPJiN9nYffro54NH731jvXfPe7tPTU30IE8dHx0+dvLu4usfLjyw8fmX3y8WmU//D8d1+YoRn3WL5Jb/otj/RNFtegT8E0uvfvBVlftbk9w9zH8vZeqT9+baDXu93P/OX/V964cvbp/kWIHLNxj0qt/ArQHQOmWSfopyNkm9Xpazs/V/+K87V8uXVtdemXlhdX3l+aZnKuCy9JPDRz6+8tG1P+X/u06df+D6VeX/iaWdb6r1k07TowEmqcr/zLOb90X+oXXkH9pL/qG95B/aS/6hveQf2kv+ob3kH9pL/qG95B/a63z+AYB2GVxp+g5koClNzz8AAAAAAAAAAAAAAAAAAMBF21P7y2fLpGp++nZy/HCS7qj6neHziJMbh69XfyqqZr8r6m5jeebOMXcwpvcbvvv6pm+brf/ZHc3W31xJtl5LMtftXrz+itPr79+7+W++7z03ZoExPfRks/V/3Wm2/sJB8kk1/8yNmn/K3DZ8Hz3/9KvzN2b9l38ZcwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABMzG8BAAD//8n0bSk=") syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0xd8f3dccb89506ebe, 0x0, 0x0, 0x0, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x9, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800053, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) 8.517564929s ago: executing program 4 (id=252): getpid() r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqsrc(r0, 0x0, 0x0, &(0x7f0000000000)={@dev={0xac, 0x14, 0x14, 0x3b}, @multicast1, @broadcast}, 0xc) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x8, 0x0, 0x0, &(0x7f0000000200)='syzkaller\x00', 0x9, 0x100b, &(0x7f0000001e40)=""/4107, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) syz_usb_connect(0x0, 0x36, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x50}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x44}}, 0x0) 7.223702273s ago: executing program 4 (id=253): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x408e, &(0x7f0000000240), 0x3, 0x43a, &(0x7f0000000340)="$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") r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0xf800) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000080)=0x10) 6.722676725s ago: executing program 4 (id=254): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000001080), 0x1, 0x4e2, &(0x7f0000000b80)="$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") creat(&(0x7f0000000340)='./bus\x00', 0x109) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0xa, [{}]}]}}, &(0x7f0000000f40)=""/4089, 0x2e, 0xff9, 0x2, 0x0, 0x0, @void, @value}, 0x20) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x0) open(&(0x7f0000000540)='./bus\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = getpid() prlimit64(r0, 0x8, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000600000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00D\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x68, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x3}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x8, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0x4}]}]}, 0x68}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0xb8, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x24, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6}]}]}]}, 0xb8}}, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r5, &(0x7f0000000340)="07000000010000", 0x7) 3.564251727s ago: executing program 3 (id=255): mkdirat(0xffffffffffffffff, 0x0, 0x0) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f00000001c0)='./file0/file0\x00', 0x80000c, &(0x7f0000001540)=ANY=[@ANYBLOB="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", @ANYRESHEX=r0, @ANYRESHEX=r0, @ANYRESDEC=r0, @ANYRES8=r0], 0x1, 0x6ee, &(0x7f0000001e80)="$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") syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mounts\x00') mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f00000002c0)='./file0\x00', 0x3200014, &(0x7f00000006c0)=ANY=[], 0x1, 0x64c, &(0x7f0000001500)="$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") creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1081000, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600016, 0x15) io_setup(0x206, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x1a00001a}]) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00007fd000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00008d7000/0x2000)=nil) madvise(&(0x7f00003c1000/0x1000)=nil, 0xdfc3efff, 0x14) syz_emit_ethernet(0x5e, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaa4ba6224a681808004f0000500000000000069078ac141000ac1e0001830f1000000000ffffffffac1e000144100d0200000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000000)='./file0\x00', 0x101c08a, &(0x7f0000000340)={[{@utf8no}, {@utf8no}, {@fat=@nfs_nostale_ro}, {@uni_xlate}, {@numtail}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp437'}}, {@uni_xlateno}, {@rodir}, {@fat=@tz_utc}, {@shortname_win95}, {@uni_xlate}, {@fat=@nfs_nostale_ro}, {@rodir}, {@fat=@dos1xfloppy}, {@fat=@errors_continue}, {}]}, 0x6, 0x2d2, &(0x7f00000008c0)="$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") syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x80000c, &(0x7f0000000300)={[{@force}, {@nls={'nls', 0x3d, 'cp1251'}}, {@barrier}, {@nodecompose}, {@umask={'umask', 0x3d, 0x6}}, {@force}, {@uid}, {@force}, {@gid}, {}]}, 0x2, 0x6da, &(0x7f0000000580)="$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") openat(0xffffffffffffff9c, 0x0, 0x143042, 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x0, 0x89101a, 0x0) mount$bind(0x0, 0x0, 0x0, 0x12578c2, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x0) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 1.486146898s ago: executing program 4 (id=256): r0 = msgget$private(0x0, 0x214) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) msgsnd(r0, &(0x7f0000000980)=ANY=[@ANYBLOB="03"], 0x401, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000040)={{0x2, 0x0, 0xee00, 0xee01, 0x0, 0x186, 0x2}, 0x0, 0x0, 0x1, 0x5, 0x1, 0x10000, 0x0, 0xfffe, 0x1b}) 0s ago: executing program 4 (id=257): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000a40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_MGMT(r2, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000700)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000005200000008000300", @ANYRES32=r3, @ANYBLOB="04002a000500880000000000060048"], 0x44}}, 0x0) kernel console output (not intermixed with test programs): 582353][ T5187] EXT4-fs error (device loop0): ext4_empty_dir:3096: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 309.635246][ T5187] EXT4-fs error (device loop0): ext4_readdir:261: inode #11: block 32: comm syz-executor: path /14/bus/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 309.706915][ T5187] EXT4-fs error (device loop0): ext4_empty_dir:3096: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 309.760618][ T5187] EXT4-fs error (device loop0): ext4_readdir:261: inode #11: block 32: comm syz-executor: path /14/bus/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 310.547447][ T5231] IPVS: starting estimator thread 0... [ 310.548238][ T5187] EXT4-fs error (device loop0): ext4_empty_dir:3096: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 310.608564][ T5187] EXT4-fs error (device loop0): ext4_readdir:261: inode #11: block 32: comm syz-executor: path /14/bus/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 310.681774][ T5187] EXT4-fs error (device loop0): ext4_empty_dir:3096: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 310.710186][ T5666] IPVS: using max 192 ests per chain, 9600 per kthread [ 311.591679][ T5664] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 311.605180][ T5664] ext4 filesystem being mounted at /23/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 313.098460][ T5187] EXT4-fs error (device loop0): ext4_readdir:261: inode #11: block 32: comm syz-executor: path /14/bus/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 313.102276][ T5256] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 313.163575][ T5187] EXT4-fs error (device loop0): ext4_empty_dir:3096: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 313.209885][ T5187] EXT4-fs error (device loop0): ext4_readdir:261: inode #11: block 32: comm syz-executor: path /14/bus/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 314.623483][ T5256] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 314.634169][ T5256] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 314.643912][ T5256] usb 4-1: New USB device found, idVendor=046a, idProduct=0027, bcdDevice= 0.00 [ 314.653504][ T5256] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.725356][ T5256] usb 4-1: config 0 descriptor?? [ 315.179456][ T5191] EXT4-fs error (device loop2): ext4_ext_check_inode:524: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 315.257581][ T5191] EXT4-fs error (device loop2): ext4_ext_check_inode:524: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 316.089486][ T5188] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 316.133557][ T5188] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 316.179744][ T5188] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 316.259413][ T5188] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 316.276838][ T5188] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 316.291731][ T5188] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 316.850597][ T5256] usb 4-1: USB disconnect, device number 2 [ 317.382500][ T5191] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 317.438670][ T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.647142][ T5187] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 317.673751][ T29] audit: type=1800 audit(1726986638.705:3): pid=5686 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.102" name="/" dev="fuse" ino=1 res=0 errno=0 [ 318.382407][ T5188] Bluetooth: hci5: command tx timeout [ 318.490144][ T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.788973][ T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.049273][ T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.107955][ T5700] netlink: 56 bytes leftover after parsing attributes in process `syz.3.107'. [ 319.117528][ T5700] netlink: 'syz.3.107': attribute type 2 has an invalid length. [ 319.206247][ T5680] chnl_net:caif_netlink_parms(): no params data found [ 319.396865][ T52] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 319.502878][ T52] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 319.565476][ T52] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 319.578872][ T5699] loop4: detected capacity change from 0 to 1024 [ 319.606454][ T52] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 319.618973][ T52] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 319.630384][ T52] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 319.845570][ T5699] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 319.917361][ T13] bridge_slave_1: left allmulticast mode [ 319.923492][ T13] bridge_slave_1: left promiscuous mode [ 319.930690][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.996102][ T5699] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 320.074890][ T13] bridge_slave_0: left allmulticast mode [ 320.081757][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.168972][ T5699] EXT4-fs (loop4): too many log groups per flexible block group [ 320.178714][ T5699] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 320.255833][ T5699] EXT4-fs (loop4): mount failed [ 320.480136][ T5188] Bluetooth: hci5: command tx timeout [ 320.509739][ T5708] loop3: detected capacity change from 0 to 512 [ 320.897507][ T5711] loop4: detected capacity change from 0 to 512 [ 320.904907][ T5231] IPVS: starting estimator thread 0... [ 320.911639][ T5711] EXT4-fs: Ignoring removed nobh option [ 320.946489][ T5711] EXT4-fs (loop4): blocks per group (71) and clusters per group (20800) inconsistent [ 321.053263][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 321.203002][ T5709] IPVS: using max 192 ests per chain, 9600 per kthread [ 321.284395][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 321.297786][ T5708] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 321.311724][ T5708] ext4 filesystem being mounted at /24/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 321.393802][ T13] bond0 (unregistering): Released all slaves [ 321.834051][ T5188] Bluetooth: hci2: command tx timeout [ 322.507633][ T52] Bluetooth: hci5: command tx timeout [ 323.362746][ T13] hsr_slave_0: left promiscuous mode [ 323.439767][ T13] hsr_slave_1: left promiscuous mode [ 323.513123][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 323.521762][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 323.643698][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 323.651693][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 323.885613][ T52] Bluetooth: hci2: command tx timeout [ 323.926082][ T13] veth1_macvtap: left promiscuous mode [ 323.932326][ T13] veth0_macvtap: left promiscuous mode [ 323.938557][ T13] veth1_vlan: left promiscuous mode [ 323.951067][ T13] veth0_vlan: left promiscuous mode [ 324.162219][ T5178] EXT4-fs error (device loop3): ext4_ext_check_inode:524: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 324.475595][ T5178] EXT4-fs error (device loop3): ext4_ext_check_inode:524: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 324.602795][ T52] Bluetooth: hci5: command tx timeout [ 326.080711][ T52] Bluetooth: hci2: command tx timeout [ 326.326863][ T13] team0 (unregistering): Port device team_slave_1 removed [ 327.216188][ T13] team0 (unregistering): Port device team_slave_0 removed [ 328.482361][ T52] Bluetooth: hci2: command tx timeout [ 329.536585][ T5435] coredump: 23(syz.1.27): written to core: VMAs: 34, size 80642048; core: 59937734 bytes, pos 80650240 [ 331.295330][ T5178] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 331.958399][ T5701] chnl_net:caif_netlink_parms(): no params data found [ 331.961665][ T13] IPVS: stop unused estimator thread 0... [ 331.980146][ T5680] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.995572][ T5680] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.003851][ T5680] bridge_slave_0: entered allmulticast mode [ 332.013548][ T5680] bridge_slave_0: entered promiscuous mode [ 332.135730][ T5680] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.143671][ T5680] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.151640][ T5680] bridge_slave_1: entered allmulticast mode [ 332.168137][ T5680] bridge_slave_1: entered promiscuous mode [ 332.452704][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.729286][ T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.028587][ T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.140328][ T5680] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 333.226820][ T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.376333][ T5680] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 333.667809][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.905482][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.979400][ T5680] team0: Port device team_slave_0 added [ 334.086349][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.155065][ T5680] team0: Port device team_slave_1 added [ 334.492582][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.766241][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 334.790717][ T5701] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.798911][ T5701] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.807224][ T5701] bridge_slave_0: entered allmulticast mode [ 334.816586][ T5766] loop1: detected capacity change from 0 to 1024 [ 334.816967][ T5701] bridge_slave_0: entered promiscuous mode [ 334.839046][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 334.842200][ T5680] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 334.857753][ T5680] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 334.885610][ T5680] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 334.903151][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 334.938789][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 334.969602][ T52] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 334.979546][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 334.989527][ T5766] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 335.064056][ T5680] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 335.071311][ T5680] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 335.098212][ T5680] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 335.182869][ T5701] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.190677][ T5701] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.198844][ T5701] bridge_slave_1: entered allmulticast mode [ 335.208504][ T5701] bridge_slave_1: entered promiscuous mode [ 335.253169][ T5766] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 335.305337][ T5766] EXT4-fs (loop1): too many log groups per flexible block group [ 335.314913][ T5766] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 335.386301][ T5766] EXT4-fs (loop1): mount failed [ 336.154247][ T5701] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 336.187753][ T5680] hsr_slave_0: entered promiscuous mode [ 336.193261][ T5782] loop1: detected capacity change from 0 to 512 [ 336.228392][ T5680] hsr_slave_1: entered promiscuous mode [ 336.282743][ T5680] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 336.294934][ T5680] Cannot create hsr debugfs directory [ 336.297676][ T5782] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 336.314293][ T5782] ext4 filesystem being mounted at /22/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 336.545785][ T5701] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 336.960742][ T5701] team0: Port device team_slave_0 added [ 336.970610][ T13] bridge_slave_1: left allmulticast mode [ 336.978758][ T13] bridge_slave_1: left promiscuous mode [ 336.985991][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.019465][ T13] bridge_slave_0: left allmulticast mode [ 337.025806][ T13] bridge_slave_0: left promiscuous mode [ 337.034215][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.057907][ T13] bridge_slave_1: left allmulticast mode [ 337.066559][ T13] bridge_slave_1: left promiscuous mode [ 337.076190][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.184695][ T13] bridge_slave_0: left allmulticast mode [ 337.190657][ T13] bridge_slave_0: left promiscuous mode [ 337.198034][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 338.087774][ T5182] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 339.067836][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 339.124666][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 339.171658][ T13] bond0 (unregistering): Released all slaves [ 339.237057][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 339.294819][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 339.337646][ T13] bond0 (unregistering): Released all slaves [ 339.441826][ T5701] team0: Port device team_slave_1 added [ 339.927598][ T5701] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 339.935056][ T5701] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 339.962241][ T5701] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 340.228857][ T5701] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 340.237301][ T5701] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 340.265599][ T5701] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 340.335391][ T5805] loop1: detected capacity change from 0 to 512 [ 340.346273][ T5805] EXT4-fs (loop1): unable to read superblock [ 341.310961][ T5701] hsr_slave_0: entered promiscuous mode [ 341.470727][ T5810] loop1: detected capacity change from 0 to 1024 [ 341.734928][ T5701] hsr_slave_1: entered promiscuous mode [ 341.792735][ T5701] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 341.800782][ T5701] Cannot create hsr debugfs directory [ 342.155448][ T5767] chnl_net:caif_netlink_parms(): no params data found [ 344.047276][ T13] hsr_slave_0: left promiscuous mode [ 344.088293][ T13] hsr_slave_1: left promiscuous mode [ 344.112701][ T5816] fuse: Bad value for 'fd' [ 344.189488][ T5816] loop1: detected capacity change from 0 to 512 [ 344.189692][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 344.201071][ T5816] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 344.204135][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 344.255940][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 344.264217][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 344.288725][ T5816] EXT4-fs (loop1): 1 truncate cleaned up [ 344.297746][ T5816] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 344.349046][ T13] hsr_slave_0: left promiscuous mode [ 344.367692][ T13] hsr_slave_1: left promiscuous mode [ 344.381061][ T29] audit: type=1804 audit(1726986665.555:4): pid=5816 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.126" name="/newroot/25/bus/bus" dev="loop1" ino=18 res=1 errno=0 [ 344.403526][ T29] audit: type=1800 audit(1726986665.555:5): pid=5816 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.126" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 344.426925][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 344.435712][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 344.448435][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 344.456460][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 344.495854][ T13] veth1_macvtap: left promiscuous mode [ 344.501859][ T13] veth0_macvtap: left promiscuous mode [ 344.508355][ T13] veth1_vlan: left promiscuous mode [ 344.514508][ T13] veth0_vlan: left promiscuous mode [ 344.525336][ T13] veth1_macvtap: left promiscuous mode [ 344.531161][ T13] veth0_macvtap: left promiscuous mode [ 344.537566][ T13] veth1_vlan: left promiscuous mode [ 344.543456][ T13] veth0_vlan: left promiscuous mode [ 344.871142][ T5182] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 345.350063][ T5825] loop1: detected capacity change from 0 to 1024 [ 345.380307][ T5825] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 345.448105][ T5825] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 345.505252][ T5825] EXT4-fs (loop1): too many log groups per flexible block group [ 345.514287][ T5825] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 345.553813][ T5825] EXT4-fs (loop1): mount failed [ 345.703519][ T13] team0 (unregistering): Port device team_slave_1 removed [ 345.739010][ T13] team0 (unregistering): Port device team_slave_0 removed [ 346.461326][ T5829] fuse: Bad value for 'fd' [ 346.575826][ T13] team0 (unregistering): Port device team_slave_1 removed [ 346.603051][ T13] team0 (unregistering): Port device team_slave_0 removed [ 346.992762][ T5831] loop1: detected capacity change from 0 to 512 [ 347.245949][ T5831] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 347.260300][ T5831] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 347.947812][ T5767] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.956023][ T5767] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.966497][ T5767] bridge_slave_0: entered allmulticast mode [ 347.976062][ T5767] bridge_slave_0: entered promiscuous mode [ 347.993885][ T5680] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 348.073169][ T5680] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 348.116080][ T5767] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.124235][ T5767] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.133685][ T5767] bridge_slave_1: entered allmulticast mode [ 348.143481][ T5767] bridge_slave_1: entered promiscuous mode [ 348.199364][ T5839] syz.4.131 uses obsolete (PF_INET,SOCK_PACKET) [ 348.234348][ T5680] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 348.353903][ T5839] syzkaller1: entered promiscuous mode [ 348.360282][ T5839] syzkaller1: entered allmulticast mode [ 348.459013][ T5680] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 348.461648][ T5182] EXT4-fs error (device loop1): ext4_ext_check_inode:524: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 348.490448][ T5182] EXT4-fs error (device loop1): ext4_ext_check_inode:524: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 348.719882][ T5767] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 348.741546][ T5767] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 349.148996][ T5843] loop4: detected capacity change from 0 to 512 [ 349.220547][ T5182] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 349.322441][ T5767] team0: Port device team_slave_0 added [ 349.349234][ T5767] team0: Port device team_slave_1 added [ 349.454462][ T5843] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 349.467959][ T5843] ext4 filesystem being mounted at /30/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 349.709942][ T29] audit: type=1800 audit(1726986670.895:6): pid=5843 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.133" name="bus" dev="loop4" ino=19 res=0 errno=0 [ 349.879327][ T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.098049][ T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.445095][ T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.659414][ T5190] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 350.673933][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 350.681162][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 350.707768][ T5767] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 350.730006][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 350.737844][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 350.765048][ T5767] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 350.788654][ T5188] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 350.893643][ T5188] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 350.903664][ T5188] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 350.989880][ T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.055719][ T5188] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 351.067849][ T5188] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 351.077693][ T5188] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 351.319014][ T5858] loop4: detected capacity change from 0 to 1024 [ 351.467402][ T5858] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 351.567631][ T5858] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 351.594441][ T5858] EXT4-fs (loop4): too many log groups per flexible block group [ 351.603912][ T5858] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 351.611068][ T5858] EXT4-fs (loop4): mount failed [ 351.659450][ T5701] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 351.824211][ T5767] hsr_slave_0: entered promiscuous mode [ 351.870101][ T5767] hsr_slave_1: entered promiscuous mode [ 351.909902][ T5767] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 351.918260][ T5767] Cannot create hsr debugfs directory [ 351.926135][ T5701] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 351.970975][ T5701] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 352.127302][ T1242] ieee802154 phy0 wpan0: encryption failed: -22 [ 352.135432][ T1242] ieee802154 phy1 wpan1: encryption failed: -22 [ 352.148732][ T5701] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 352.238109][ T13] bridge_slave_1: left allmulticast mode [ 352.244608][ T13] bridge_slave_1: left promiscuous mode [ 352.251313][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.326734][ T13] bridge_slave_0: left allmulticast mode [ 352.332985][ T13] bridge_slave_0: left promiscuous mode [ 352.339747][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.046181][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 353.066977][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 353.096760][ T13] bond0 (unregistering): Released all slaves [ 353.179611][ T5680] 8021q: adding VLAN 0 to HW filter on device bond0 [ 353.234803][ T5188] Bluetooth: hci1: command tx timeout [ 353.726105][ T5680] 8021q: adding VLAN 0 to HW filter on device team0 [ 353.934251][ T13] hsr_slave_0: left promiscuous mode [ 353.956574][ T13] hsr_slave_1: left promiscuous mode [ 353.981060][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 353.991013][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 354.006225][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 354.014757][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 354.080023][ T13] veth1_macvtap: left promiscuous mode [ 354.086345][ T13] veth0_macvtap: left promiscuous mode [ 354.092663][ T13] veth1_vlan: left promiscuous mode [ 354.098299][ T13] veth0_vlan: left promiscuous mode [ 354.873303][ T13] team0 (unregistering): Port device team_slave_1 removed [ 354.928266][ T13] team0 (unregistering): Port device team_slave_0 removed [ 355.307411][ T5188] Bluetooth: hci1: command tx timeout [ 355.379625][ T4006] bridge0: port 1(bridge_slave_0) entered blocking state [ 355.387705][ T4006] bridge0: port 1(bridge_slave_0) entered forwarding state [ 355.404840][ T4006] bridge0: port 2(bridge_slave_1) entered blocking state [ 355.412777][ T4006] bridge0: port 2(bridge_slave_1) entered forwarding state [ 355.541530][ T5854] chnl_net:caif_netlink_parms(): no params data found [ 355.634818][ T5885] syzkaller1: entered promiscuous mode [ 355.642161][ T5885] syzkaller1: entered allmulticast mode [ 356.129455][ T13] IPVS: stop unused estimator thread 0... [ 356.448982][ T5680] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 356.461030][ T5680] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 357.328318][ T5701] 8021q: adding VLAN 0 to HW filter on device bond0 [ 357.403119][ T52] Bluetooth: hci1: command tx timeout [ 357.561671][ T5767] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 357.750960][ T5767] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 357.927421][ T5767] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 358.085075][ T5854] bridge0: port 1(bridge_slave_0) entered blocking state [ 358.094570][ T5854] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.105212][ T5854] bridge_slave_0: entered allmulticast mode [ 358.115054][ T5854] bridge_slave_0: entered promiscuous mode [ 358.124133][ T1903] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 358.131638][ T5767] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 358.187660][ T5701] 8021q: adding VLAN 0 to HW filter on device team0 [ 358.235512][ T5854] bridge0: port 2(bridge_slave_1) entered blocking state [ 358.246413][ T5854] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.254750][ T5854] bridge_slave_1: entered allmulticast mode [ 358.264611][ T5854] bridge_slave_1: entered promiscuous mode [ 358.381306][ T1903] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 358.393013][ T1903] usb 5-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 8 [ 358.462272][ T4006] bridge0: port 1(bridge_slave_0) entered blocking state [ 358.470056][ T4006] bridge0: port 1(bridge_slave_0) entered forwarding state [ 358.553560][ T1903] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 358.564502][ T1903] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.573092][ T1903] usb 5-1: Product: syz [ 358.577564][ T1903] usb 5-1: Manufacturer: syz [ 358.582797][ T1903] usb 5-1: SerialNumber: syz [ 358.610206][ T5854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 358.705374][ T4006] bridge0: port 2(bridge_slave_1) entered blocking state [ 358.713289][ T4006] bridge0: port 2(bridge_slave_1) entered forwarding state [ 358.848728][ T5854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 359.222401][ T5680] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 359.307626][ T5854] team0: Port device team_slave_0 added [ 359.388507][ T5854] team0: Port device team_slave_1 added [ 359.401205][ T1903] cdc_ncm 5-1:1.0: failed GET_NTB_PARAMETERS [ 359.407973][ T1903] cdc_ncm 5-1:1.0: bind() failure [ 359.426944][ T1903] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 359.435692][ T1903] cdc_ncm 5-1:1.1: bind() failure [ 359.513195][ T52] Bluetooth: hci1: command tx timeout [ 359.833338][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 359.841780][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 359.870458][ T5854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 359.904522][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 359.911779][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 359.939072][ T5854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 360.301561][ T5680] veth0_vlan: entered promiscuous mode [ 360.345168][ T5854] hsr_slave_0: entered promiscuous mode [ 360.367981][ T5854] hsr_slave_1: entered promiscuous mode [ 360.636203][ T5680] veth1_vlan: entered promiscuous mode [ 360.859541][ T5767] 8021q: adding VLAN 0 to HW filter on device bond0 [ 361.044211][ T5231] usb 5-1: USB disconnect, device number 5 [ 361.279474][ T5680] veth0_macvtap: entered promiscuous mode [ 361.318362][ T5767] 8021q: adding VLAN 0 to HW filter on device team0 [ 361.447730][ T5680] veth1_macvtap: entered promiscuous mode [ 361.561652][ T5924] loop4: detected capacity change from 0 to 1024 [ 361.586131][ T5924] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 361.610321][ T5924] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 361.639999][ T5924] EXT4-fs (loop4): too many log groups per flexible block group [ 361.649261][ T5924] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 361.672800][ T3817] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.680707][ T3817] bridge0: port 1(bridge_slave_0) entered forwarding state [ 361.698974][ T3817] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.706816][ T3817] bridge0: port 2(bridge_slave_1) entered forwarding state [ 361.766928][ T5924] EXT4-fs (loop4): mount failed [ 361.976778][ T5680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 361.990150][ T5680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 362.006217][ T5680] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 362.243037][ T5680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 362.254110][ T5680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 362.269599][ T5680] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 362.476949][ T5701] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 362.506204][ T5680] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.515621][ T5680] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.524930][ T5680] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.534184][ T5680] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.917388][ T5854] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 363.023850][ T5854] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 363.116839][ T5854] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 363.293696][ T5854] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 363.654515][ T5701] veth0_vlan: entered promiscuous mode [ 363.833378][ T5701] veth1_vlan: entered promiscuous mode [ 364.364989][ T5701] veth0_macvtap: entered promiscuous mode [ 364.429871][ T5188] Bluetooth: hci3: command 0x0406 tx timeout [ 364.545093][ T5854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 364.594738][ T5701] veth1_macvtap: entered promiscuous mode [ 364.657405][ T5854] 8021q: adding VLAN 0 to HW filter on device team0 [ 364.788843][ T3817] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.796816][ T3817] bridge0: port 1(bridge_slave_0) entered forwarding state [ 364.978694][ T5701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 364.990024][ T5701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.000318][ T5701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 365.011156][ T5701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.027219][ T5701] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 365.132600][ T3817] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.140393][ T3817] bridge0: port 2(bridge_slave_1) entered forwarding state [ 365.253887][ T5701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 365.266072][ T5701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.276825][ T5701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 365.287728][ T5701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.303662][ T5701] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 365.379282][ T5701] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.388858][ T5701] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.398469][ T5701] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.407716][ T5701] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.353933][ T5767] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 367.685735][ T5767] veth0_vlan: entered promiscuous mode [ 367.934707][ T5767] veth1_vlan: entered promiscuous mode [ 368.775218][ T5767] veth0_macvtap: entered promiscuous mode [ 368.935003][ T5767] veth1_macvtap: entered promiscuous mode [ 369.192298][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 369.203344][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.213692][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 369.224660][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.235044][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 369.246216][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.264520][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 369.553468][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 369.565668][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.577458][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 369.588741][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.598954][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 369.609995][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.632604][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 369.843221][ T5767] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.859473][ T5767] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.870673][ T5767] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.882521][ T5767] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.958759][ T5854] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 370.706005][ T5854] veth0_vlan: entered promiscuous mode [ 370.802096][ T5854] veth1_vlan: entered promiscuous mode [ 371.449978][ T5854] veth0_macvtap: entered promiscuous mode [ 371.615188][ T5854] veth1_macvtap: entered promiscuous mode [ 371.863587][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 371.874525][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.884986][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 371.895939][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.906207][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 371.917155][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.928761][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 371.940173][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.962169][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 372.255822][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 372.270932][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.283200][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 372.294047][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.304457][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 372.315405][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.325665][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 372.337732][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.352788][ T1903] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 372.354306][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 372.614482][ T1903] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 372.627111][ T1903] usb 5-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 8 [ 372.662899][ T5854] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.672599][ T5854] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.681730][ T5854] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.691068][ T5854] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.767344][ T1903] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 372.777792][ T1903] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.786359][ T1903] usb 5-1: Product: syz [ 372.790839][ T1903] usb 5-1: Manufacturer: syz [ 372.795918][ T1903] usb 5-1: SerialNumber: syz [ 373.654123][ T1903] cdc_ncm 5-1:1.0: failed GET_NTB_PARAMETERS [ 373.660576][ T1903] cdc_ncm 5-1:1.0: bind() failure [ 373.681451][ T1903] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 373.688907][ T1903] cdc_ncm 5-1:1.1: bind() failure [ 374.325674][ T5188] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 374.367272][ T5188] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 374.454243][ T5188] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 374.470341][ T5188] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 374.484663][ T5188] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 374.494543][ T5188] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 375.609561][ T5239] usb 5-1: USB disconnect, device number 6 [ 375.775824][ T3036] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.026236][ T3036] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.223203][ T3036] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.378316][ T6038] loop4: detected capacity change from 0 to 1024 [ 376.415826][ T3036] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.469009][ T6038] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 376.523498][ T6038] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 376.594207][ T6038] EXT4-fs (loop4): too many log groups per flexible block group [ 376.603378][ T6038] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 376.641465][ T6038] EXT4-fs (loop4): mount failed [ 376.833666][ T52] Bluetooth: hci4: command tx timeout [ 377.097864][ T3036] bridge_slave_1: left allmulticast mode [ 377.104171][ T3036] bridge_slave_1: left promiscuous mode [ 377.110875][ T3036] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.134463][ T3036] bridge_slave_0: left allmulticast mode [ 377.140453][ T3036] bridge_slave_0: left promiscuous mode [ 377.148937][ T3036] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.162778][ T4006] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 377.170952][ T4006] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 378.228917][ T3036] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 378.255149][ T3036] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 378.281271][ T3036] bond0 (unregistering): Released all slaves [ 378.636521][ T3036] hsr_slave_0: left promiscuous mode [ 378.677648][ T3036] hsr_slave_1: left promiscuous mode [ 378.689877][ T3036] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 378.698641][ T3036] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 378.716633][ T3036] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 378.724725][ T3036] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 378.819443][ T3036] veth1_macvtap: left promiscuous mode [ 378.826085][ T3036] veth0_macvtap: left promiscuous mode [ 378.832590][ T3036] veth1_vlan: left promiscuous mode [ 378.838232][ T3036] veth0_vlan: left promiscuous mode [ 378.927709][ T52] Bluetooth: hci4: command tx timeout [ 380.107666][ T3036] team0 (unregistering): Port device team_slave_1 removed [ 380.159765][ T3036] team0 (unregistering): Port device team_slave_0 removed [ 380.190041][ T5188] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 380.200000][ T5188] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 380.273166][ T5188] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 380.408553][ T5188] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 380.430544][ T5188] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 380.446397][ T5188] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 380.992559][ T5188] Bluetooth: hci4: command tx timeout [ 381.105960][ T6017] chnl_net:caif_netlink_parms(): no params data found [ 381.349003][ T3817] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 381.358258][ T3817] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 381.689603][ T3817] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 381.698190][ T3817] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 382.502551][ T5188] Bluetooth: hci5: command tx timeout [ 382.716204][ T6100] netlink: 'syz.3.118': attribute type 4 has an invalid length. [ 382.867922][ T6103] loop3: detected capacity change from 0 to 8 [ 383.070841][ T5188] Bluetooth: hci4: command tx timeout [ 383.252915][ T6100] x_tables: duplicate underflow at hook 1 [ 383.313031][ T6079] chnl_net:caif_netlink_parms(): no params data found [ 383.350845][ T6100] netlink: 'syz.3.118': attribute type 4 has an invalid length. [ 383.543546][ T6103] loop3: detected capacity change from 0 to 128 [ 383.604977][ T6103] FAT-fs (loop3): bogus number of directory entries (1) [ 383.612655][ T6103] FAT-fs (loop3): Can't find a valid FAT filesystem [ 383.743004][ T6100] capability: warning: `syz.3.118' uses deprecated v2 capabilities in a way that may be insecure [ 384.019611][ T6017] bridge0: port 1(bridge_slave_0) entered blocking state [ 384.028034][ T6017] bridge0: port 1(bridge_slave_0) entered disabled state [ 384.036306][ T6017] bridge_slave_0: entered allmulticast mode [ 384.046072][ T6017] bridge_slave_0: entered promiscuous mode [ 384.143174][ T5239] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 384.277376][ T6017] bridge0: port 2(bridge_slave_1) entered blocking state [ 384.285510][ T6017] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.294208][ T6017] bridge_slave_1: entered allmulticast mode [ 384.304129][ T6017] bridge_slave_1: entered promiscuous mode [ 384.439039][ T5239] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 384.445623][ T3036] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.451555][ T5239] usb 5-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 8 [ 384.583474][ T5188] Bluetooth: hci5: command tx timeout [ 384.651270][ T5239] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 384.661059][ T5239] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.669650][ T5239] usb 5-1: Product: syz [ 384.675495][ T5239] usb 5-1: Manufacturer: syz [ 384.680397][ T5239] usb 5-1: SerialNumber: syz [ 385.010224][ T3036] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.124116][ T6120] loop3: detected capacity change from 0 to 1024 [ 385.151670][ T6120] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 385.220714][ T6017] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 385.244758][ T6120] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 385.265206][ T6120] EXT4-fs (loop3): too many log groups per flexible block group [ 385.274178][ T6120] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 385.341195][ T6120] EXT4-fs (loop3): mount failed [ 385.360603][ T3036] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.468224][ T6017] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 385.588888][ T3036] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.667669][ T5239] cdc_ncm 5-1:1.0: failed GET_NTB_PARAMETERS [ 385.674365][ T5239] cdc_ncm 5-1:1.0: bind() failure [ 385.692936][ T5239] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 385.700073][ T5239] cdc_ncm 5-1:1.1: bind() failure [ 385.761691][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 385.769991][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 386.295196][ T6079] bridge0: port 1(bridge_slave_0) entered blocking state [ 386.303337][ T6079] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.311276][ T6079] bridge_slave_0: entered allmulticast mode [ 386.321108][ T6079] bridge_slave_0: entered promiscuous mode [ 386.344408][ T6017] team0: Port device team_slave_0 added [ 386.367945][ T6079] bridge0: port 2(bridge_slave_1) entered blocking state [ 386.376017][ T6079] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.384284][ T6079] bridge_slave_1: entered allmulticast mode [ 386.391120][ T4006] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 386.394055][ T6079] bridge_slave_1: entered promiscuous mode [ 386.399201][ T4006] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 386.650221][ T6017] team0: Port device team_slave_1 added [ 386.669543][ T5188] Bluetooth: hci5: command tx timeout [ 386.686477][ T6079] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 386.821370][ T1903] usb 5-1: USB disconnect, device number 7 [ 387.008215][ T3036] bridge_slave_1: left allmulticast mode [ 387.014427][ T3036] bridge_slave_1: left promiscuous mode [ 387.021336][ T3036] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.048415][ T3036] bridge_slave_0: left allmulticast mode [ 387.054568][ T3036] bridge_slave_0: left promiscuous mode [ 387.061354][ T3036] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.431349][ T6140] fuse: Bad value for 'fd' [ 387.730593][ T6143] fuse: Bad value for 'fd' [ 387.938873][ T6142] loop1: detected capacity change from 0 to 512 [ 387.978476][ T6142] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 388.143435][ T6142] EXT4-fs (loop1): 1 truncate cleaned up [ 388.151426][ T6142] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 388.294630][ T3036] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 388.383163][ T29] audit: type=1804 audit(1726986709.495:7): pid=6142 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.135" name="/newroot/0/bus/bus" dev="loop1" ino=18 res=1 errno=0 [ 388.405127][ T29] audit: type=1800 audit(1726986709.505:8): pid=6142 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.135" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 388.483096][ T3036] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 388.577132][ T3036] bond0 (unregistering): Released all slaves [ 388.639912][ T6152] loop3: detected capacity change from 0 to 512 [ 388.703387][ T6079] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 388.737537][ T6150] loop4: detected capacity change from 0 to 2048 [ 388.762908][ T5188] Bluetooth: hci5: command tx timeout [ 388.772866][ T6152] EXT4-fs: Ignoring removed mblk_io_submit option [ 388.813078][ T6152] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 388.814285][ T6150] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 388.833304][ T6150] UDF-fs: Scanning with blocksize 512 failed [ 388.872616][ T6017] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 388.893365][ T6017] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 388.922212][ T6017] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 388.980602][ T6150] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 129: 0x7d != 0x7e [ 388.982674][ T5854] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 389.032507][ T6152] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b042c118, mo2=0002] [ 389.041304][ T6152] System zones: 1-12 [ 389.041852][ T6150] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 389.189860][ T6152] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.163: corrupted in-inode xattr: e_value size too large [ 389.217055][ T6152] EXT4-fs error (device loop3): ext4_orphan_get:1393: comm syz.3.163: couldn't read orphan inode 15 (err -117) [ 389.264482][ T29] audit: type=1800 audit(1726986710.455:9): pid=6150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.162" name="file1" dev="loop4" ino=838 res=0 errno=0 [ 389.299192][ T6152] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 389.521118][ T6017] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 389.528858][ T6017] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 389.560387][ T6017] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 389.577572][ T6159] loop1: detected capacity change from 0 to 512 [ 389.717094][ T6159] EXT4-fs (loop1): blocks per group (71) and clusters per group (20800) inconsistent [ 389.754366][ T5767] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 389.760411][ T6079] team0: Port device team_slave_0 added [ 389.910092][ T6079] team0: Port device team_slave_1 added [ 390.360948][ T6161] loop4: detected capacity change from 0 to 1024 [ 390.492730][ T6161] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 390.623792][ T6161] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 390.730364][ T6161] EXT4-fs (loop4): too many log groups per flexible block group [ 390.739827][ T6161] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 390.781635][ T6161] EXT4-fs (loop4): mount failed [ 391.669739][ T6079] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 391.677755][ T6079] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 391.708623][ T6079] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 391.873501][ T6017] hsr_slave_0: entered promiscuous mode [ 392.034997][ T6017] hsr_slave_1: entered promiscuous mode [ 392.143266][ T6017] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 392.151127][ T6017] Cannot create hsr debugfs directory [ 392.294728][ T3036] hsr_slave_0: left promiscuous mode [ 392.374063][ T3036] hsr_slave_1: left promiscuous mode [ 392.440649][ T3036] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 392.448838][ T3036] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 392.622044][ T3036] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 392.629940][ T3036] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 392.846516][ T3036] veth1_macvtap: left promiscuous mode [ 392.852836][ T3036] veth0_macvtap: left promiscuous mode [ 392.859025][ T3036] veth1_vlan: left promiscuous mode [ 392.864984][ T3036] veth0_vlan: left promiscuous mode [ 393.677070][ T6178] fuse: Bad value for 'fd' [ 394.674410][ T6186] netlink: 124 bytes leftover after parsing attributes in process `syz.1.170'. [ 394.758958][ T3036] team0 (unregistering): Port device team_slave_1 removed [ 394.997576][ T3036] team0 (unregistering): Port device team_slave_0 removed [ 395.695466][ T6190] fuse: Bad value for 'fd' [ 395.849745][ T6190] loop3: detected capacity change from 0 to 512 [ 395.873572][ T6079] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 395.880928][ T6079] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 395.910020][ T6079] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 396.197533][ T6190] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 396.561860][ T6190] EXT4-fs (loop3): 1 truncate cleaned up [ 396.570030][ T6190] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 396.933208][ T29] audit: type=1804 audit(1726986718.085:10): pid=6190 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.172" name="/newroot/9/bus/bus" dev="loop3" ino=18 res=1 errno=0 [ 396.955123][ T29] audit: type=1800 audit(1726986718.085:11): pid=6190 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.172" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 397.304663][ T6079] hsr_slave_0: entered promiscuous mode [ 397.368932][ T6079] hsr_slave_1: entered promiscuous mode [ 397.403404][ T4808] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 397.410195][ T6079] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 397.423938][ T6079] Cannot create hsr debugfs directory [ 397.663142][ T4808] usb 5-1: Using ep0 maxpacket: 8 [ 397.663375][ T5767] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 397.697307][ T4808] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 397.706352][ T4808] usb 5-1: config 179 has no interface number 0 [ 397.713339][ T4808] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 397.724936][ T4808] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 397.739505][ T4808] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 397.751359][ T4808] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 397.763362][ T4808] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 397.777385][ T4808] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 397.786974][ T4808] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.857070][ T6198] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 399.615837][ T4808] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input8 [ 400.680870][ T6198] loop4: detected capacity change from 0 to 128 [ 400.824312][ T6198] EXT4-fs: Ignoring removed mblk_io_submit option [ 400.832869][ T6198] EXT4-fs: Ignoring removed nomblk_io_submit option [ 401.025197][ T6198] EXT4-fs (loop4): can't mount with journal_checksum, fs mounted w/o journal [ 401.417209][ T6208] tipc: Started in network mode [ 401.424137][ T6208] tipc: Node identity ac1414aa, cluster identity 4711 [ 401.433286][ T6208] tipc: New replicast peer: 100.1.1.1 [ 401.440109][ T6208] tipc: Enabled bearer , priority 10 [ 401.444301][ T1903] usb 5-1: USB disconnect, device number 8 [ 401.444540][ C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 401.461145][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 401.473136][ T1903] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 401.759268][ T6214] loop3: detected capacity change from 0 to 512 [ 401.975347][ T6214] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 401.989087][ T6214] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 402.564407][ T1821] tipc: Node number set to 2886997162 [ 402.837191][ T6226] Zero length message leads to an empty skb [ 402.997374][ T6017] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 403.096571][ T6017] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 403.118923][ T6214] Bluetooth: MGMT ver 1.23 [ 403.241105][ T6017] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 403.413758][ T6017] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 403.615315][ T6232] fuse: Bad value for 'fd' [ 404.038923][ T6079] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 404.139975][ T6079] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 404.300521][ T5767] EXT4-fs error (device loop3): ext4_ext_check_inode:524: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 404.320601][ T6079] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 404.323811][ T5767] EXT4-fs error (device loop3): ext4_ext_check_inode:524: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 404.405154][ T6079] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 405.134137][ T6243] fuse: Bad value for 'fd' [ 405.513255][ T5767] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 405.658995][ T6243] loop4: detected capacity change from 0 to 512 [ 405.943484][ T6243] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 406.217375][ T6243] EXT4-fs (loop4): 1 truncate cleaned up [ 406.227761][ T6243] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 406.279805][ T6017] 8021q: adding VLAN 0 to HW filter on device bond0 [ 406.590012][ T29] audit: type=1804 audit(1726986727.695:12): pid=6243 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.184" name="/newroot/62/bus/bus" dev="loop4" ino=18 res=1 errno=0 [ 406.613873][ T29] audit: type=1800 audit(1726986727.705:13): pid=6243 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.184" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 406.773890][ T6017] 8021q: adding VLAN 0 to HW filter on device team0 [ 406.958700][ T3817] bridge0: port 1(bridge_slave_0) entered blocking state [ 406.966722][ T3817] bridge0: port 1(bridge_slave_0) entered forwarding state [ 407.186281][ T3817] bridge0: port 2(bridge_slave_1) entered blocking state [ 407.194187][ T3817] bridge0: port 2(bridge_slave_1) entered forwarding state [ 407.470025][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.722557][ T5190] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 407.858814][ T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.015934][ T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.253156][ T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.332177][ T6079] 8021q: adding VLAN 0 to HW filter on device bond0 [ 408.484609][ T6251] loop4: detected capacity change from 0 to 1024 [ 408.855459][ T6079] 8021q: adding VLAN 0 to HW filter on device team0 [ 408.957819][ T13] bridge_slave_1: left allmulticast mode [ 408.964012][ T13] bridge_slave_1: left promiscuous mode [ 408.970903][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.030887][ T6251] hfsplus: request for non-existent node 1280 in B*Tree [ 409.039874][ T6251] hfsplus: request for non-existent node 1280 in B*Tree [ 409.186251][ T13] bridge_slave_0: left allmulticast mode [ 409.192477][ T13] bridge_slave_0: left promiscuous mode [ 409.201894][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 410.066711][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 410.110402][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 410.177737][ T13] bond0 (unregistering): Released all slaves [ 410.315506][ T4006] bridge0: port 1(bridge_slave_0) entered blocking state [ 410.323617][ T4006] bridge0: port 1(bridge_slave_0) entered forwarding state [ 410.381899][ T6264] loop4: detected capacity change from 0 to 8 [ 410.489810][ T5236] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 410.518590][ T6264] Filesystem uses "unknown" compression. This is not supported [ 410.544417][ T4006] bridge0: port 2(bridge_slave_1) entered blocking state [ 410.552359][ T4006] bridge0: port 2(bridge_slave_1) entered forwarding state [ 410.728415][ T5236] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 410.744729][ T5236] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 410.758043][ T5236] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 410.771670][ T5236] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 410.781457][ T5236] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.984906][ T5236] usb 2-1: config 0 descriptor?? [ 410.995259][ T6261] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 411.529536][ T13] hsr_slave_0: left promiscuous mode [ 411.541547][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 411.561836][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 411.572689][ T13] hsr_slave_1: left promiscuous mode [ 411.581795][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 411.589803][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 411.598800][ T5236] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 411.601221][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 411.606902][ T5236] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 411.614676][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 411.622405][ T5236] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 411.638299][ T5236] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 411.646430][ T5236] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 411.657774][ T5236] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 411.666516][ T5236] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 411.674621][ T5236] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 411.682568][ T5236] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 411.690350][ T5236] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 411.733599][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 411.757026][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 411.778702][ T52] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 411.786970][ T6269] loop4: detected capacity change from 0 to 512 [ 411.802626][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 411.847955][ T13] veth1_macvtap: left promiscuous mode [ 411.854621][ T13] veth0_macvtap: left promiscuous mode [ 411.863462][ T13] veth1_vlan: left promiscuous mode [ 411.869216][ T13] veth0_vlan: left promiscuous mode [ 411.977376][ T6269] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 411.991237][ T6269] ext4 filesystem being mounted at /65/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 412.149278][ T5236] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 412.420684][ T5236] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 412.456779][ T5236] usb 2-1: USB disconnect, device number 6 [ 413.164742][ T13] team0 (unregistering): Port device team_slave_1 removed [ 413.261390][ T13] team0 (unregistering): Port device team_slave_0 removed [ 413.615874][ T1242] ieee802154 phy0 wpan0: encryption failed: -22 [ 413.622786][ T1242] ieee802154 phy1 wpan1: encryption failed: -22 [ 414.019407][ T52] Bluetooth: hci0: command tx timeout [ 414.313304][ T6269] Bluetooth: MGMT ver 1.23 [ 414.840798][ T6017] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 415.231229][ T6294] loop1: detected capacity change from 0 to 512 [ 415.310591][ T6294] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 415.488420][ T6294] EXT4-fs (loop1): 1 truncate cleaned up [ 415.496609][ T6294] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 415.648353][ T6017] veth0_vlan: entered promiscuous mode [ 415.696701][ T29] audit: type=1804 audit(1726986736.875:14): pid=6294 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.194" name="/newroot/11/bus/bus" dev="loop1" ino=18 res=1 errno=0 [ 415.719187][ T29] audit: type=1800 audit(1726986736.875:15): pid=6294 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.194" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 415.775319][ T6017] veth1_vlan: entered promiscuous mode [ 415.854824][ T6268] chnl_net:caif_netlink_parms(): no params data found [ 415.928514][ T6017] veth0_macvtap: entered promiscuous mode [ 415.959853][ T6017] veth1_macvtap: entered promiscuous mode [ 416.083213][ T6017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 416.098250][ T6017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.109628][ T6017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 416.120488][ T6017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.136278][ T6017] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 416.152821][ T5188] Bluetooth: hci0: command tx timeout [ 416.161209][ T6017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 416.173099][ T6017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.183812][ T6017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 416.194652][ T6017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.210157][ T6017] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 416.254023][ T6017] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.266099][ T6017] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.276387][ T6017] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.285705][ T6017] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.369939][ T52] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 416.554020][ T5190] EXT4-fs error (device loop4): ext4_ext_check_inode:524: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 416.648497][ T5190] EXT4-fs error (device loop4): ext4_ext_check_inode:524: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 416.753891][ T6079] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 416.755658][ T5854] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 416.937405][ T6079] veth0_vlan: entered promiscuous mode [ 416.979527][ T6079] veth1_vlan: entered promiscuous mode [ 417.293815][ T6079] veth0_macvtap: entered promiscuous mode [ 417.729716][ T6079] veth1_macvtap: entered promiscuous mode [ 417.846884][ T5190] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 418.019752][ T3212] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.113438][ T3212] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.155533][ T6079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 418.166717][ T6079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.177992][ T6079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 418.189802][ T52] Bluetooth: hci0: command 0x040f tx timeout [ 418.197877][ T6079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.211300][ T6079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 418.223646][ T6079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.242103][ T6079] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 418.285426][ T6079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 418.296288][ T6079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.306622][ T6079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 418.319615][ T6079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.330671][ T6079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 418.341508][ T6079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.357333][ T6079] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 418.458331][ T3212] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.575073][ T6079] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.584450][ T6079] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.594989][ T6079] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.604385][ T6079] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.769541][ T3212] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.147297][ T6268] bridge0: port 1(bridge_slave_0) entered blocking state [ 419.156993][ T6268] bridge0: port 1(bridge_slave_0) entered disabled state [ 419.165128][ T6268] bridge_slave_0: entered allmulticast mode [ 419.174951][ T6268] bridge_slave_0: entered promiscuous mode [ 419.301203][ T6268] bridge0: port 2(bridge_slave_1) entered blocking state [ 419.316958][ T6268] bridge0: port 2(bridge_slave_1) entered disabled state [ 419.325057][ T6268] bridge_slave_1: entered allmulticast mode [ 419.337838][ T6268] bridge_slave_1: entered promiscuous mode [ 419.690940][ T6268] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 419.855623][ T3212] bridge_slave_1: left allmulticast mode [ 419.861639][ T3212] bridge_slave_1: left promiscuous mode [ 419.872489][ T3212] bridge0: port 2(bridge_slave_1) entered disabled state [ 419.936726][ T3212] bridge_slave_0: left allmulticast mode [ 419.947842][ T3212] bridge_slave_0: left promiscuous mode [ 419.956709][ T3212] bridge0: port 1(bridge_slave_0) entered disabled state [ 420.262360][ T52] Bluetooth: hci0: command 0x040f tx timeout [ 420.580501][ T3212] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 420.643901][ T3212] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 420.675090][ T3212] bond0 (unregistering): Released all slaves [ 420.754458][ T6268] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 421.198243][ T6268] team0: Port device team_slave_0 added [ 421.221373][ T6334] loop1: detected capacity change from 0 to 2048 [ 421.335128][ T6334] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 421.511440][ T6268] team0: Port device team_slave_1 added [ 421.961236][ T6268] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 421.969116][ T6268] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 421.997791][ T6268] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 422.076402][ T5854] EXT4-fs error (device loop1): ext4_readdir:261: inode #2: block 16: comm syz-executor: path /13/file0: bad entry in directory: inode out of bounds - offset=92, inode=32784, rec_len=16, size=2048 fake=0 [ 422.130270][ T3212] hsr_slave_0: left promiscuous mode [ 422.161448][ T3212] hsr_slave_1: left promiscuous mode [ 422.170914][ T5188] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 422.189418][ T5854] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 32: padding at end of block bitmap is not set [ 422.209707][ T5188] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 422.222775][ T3212] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 422.230602][ T3212] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 422.255263][ T5854] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 422.264057][ T3212] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 422.264207][ T3212] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 422.293033][ T5188] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 422.312832][ T3212] veth1_macvtap: left promiscuous mode [ 422.318772][ T3212] veth0_macvtap: left promiscuous mode [ 422.325310][ T3212] veth1_vlan: left promiscuous mode [ 422.330966][ T3212] veth0_vlan: left promiscuous mode [ 422.353118][ T5188] Bluetooth: hci0: command 0x040f tx timeout [ 422.416923][ T5188] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 422.428832][ T5188] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 422.439907][ T5188] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 422.556034][ T5854] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 423.286592][ T3212] team0 (unregistering): Port device team_slave_1 removed [ 423.406597][ T3212] team0 (unregistering): Port device team_slave_0 removed [ 423.716731][ T6351] loop1: detected capacity change from 0 to 2048 [ 423.808090][ T6351] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 423.875316][ T6268] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 423.883283][ T6268] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 423.891288][ T6351] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 423.909832][ T6268] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 424.279608][ T6351] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 424.643135][ T3212] IPVS: stop unused estimator thread 0... [ 424.663941][ T5188] Bluetooth: hci2: command tx timeout [ 424.670549][ T6268] hsr_slave_0: entered promiscuous mode [ 424.778132][ T6268] hsr_slave_1: entered promiscuous mode [ 424.829962][ T6268] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 424.839412][ T6268] Cannot create hsr debugfs directory [ 425.733636][ T6366] loop1: detected capacity change from 0 to 1024 [ 426.536718][ T6345] chnl_net:caif_netlink_parms(): no params data found [ 426.742289][ T5188] Bluetooth: hci2: command tx timeout [ 427.178343][ T3144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 427.186846][ T3144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 427.475477][ T3036] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 427.484591][ T3036] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 427.756620][ T6268] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 427.842890][ T6268] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 427.918816][ T6268] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 428.072836][ T6268] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 428.356281][ T6393] loop1: detected capacity change from 0 to 512 [ 428.382573][ T8] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 428.559718][ T8] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 428.569040][ T8] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 428.579696][ T8] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 428.590198][ T8] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 428.638457][ T8] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 428.648172][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.659338][ T8] usb 1-1: Product: syz [ 428.664958][ T8] usb 1-1: Manufacturer: syz [ 428.669905][ T8] usb 1-1: SerialNumber: syz [ 428.679371][ T6393] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 428.693113][ T6393] ext4 filesystem being mounted at /17/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 428.724775][ T8] cdc_ncm 1-1:1.0: skipping garbage [ 428.730338][ T8] cdc_ncm 1-1:1.0: skipping garbage [ 428.736603][ T8] cdc_ncm 1-1:1.0: invalid descriptor buffer length [ 428.743642][ T8] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 428.750833][ T8] cdc_ncm 1-1:1.0: bind() failure [ 428.895277][ T5188] Bluetooth: hci2: command tx timeout [ 429.495882][ T6268] 8021q: adding VLAN 0 to HW filter on device bond0 [ 429.507639][ T6345] bridge0: port 1(bridge_slave_0) entered blocking state [ 429.518182][ T6345] bridge0: port 1(bridge_slave_0) entered disabled state [ 429.526392][ T6345] bridge_slave_0: entered allmulticast mode [ 429.536138][ T6345] bridge_slave_0: entered promiscuous mode [ 429.691129][ T6345] bridge0: port 2(bridge_slave_1) entered blocking state [ 429.699603][ T6345] bridge0: port 2(bridge_slave_1) entered disabled state [ 429.707884][ T6345] bridge_slave_1: entered allmulticast mode [ 429.717740][ T6345] bridge_slave_1: entered promiscuous mode [ 429.775508][ T6268] 8021q: adding VLAN 0 to HW filter on device team0 [ 429.836054][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 429.844468][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 430.017184][ T5854] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 430.079088][ T6408] loop0: detected capacity change from 0 to 1764 [ 430.318730][ T6345] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 430.398039][ T6408] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 430.422031][ T3144] bridge0: port 1(bridge_slave_0) entered blocking state [ 430.429813][ T3144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 430.447812][ T3144] bridge0: port 2(bridge_slave_1) entered blocking state [ 430.455765][ T3144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 430.504676][ T3817] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 430.512974][ T3817] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 430.568691][ T6345] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 430.682633][ T6411] loop1: detected capacity change from 0 to 1024 [ 430.841382][ T6411] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 430.902345][ T52] Bluetooth: hci2: command tx timeout [ 431.101055][ T6345] team0: Port device team_slave_0 added [ 431.250170][ T6345] team0: Port device team_slave_1 added [ 431.362812][ T4808] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 431.466035][ T52] Bluetooth: hci0: command 0x040f tx timeout [ 431.474409][ T5188] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 431.513086][ T4808] usb 2-1: device descriptor read/64, error -71 [ 431.576819][ T6345] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 431.584485][ T6345] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 431.611010][ T6345] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 431.638125][ T6345] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 431.645651][ T6345] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 431.672439][ T6345] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 431.764084][ T4808] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 431.967477][ T6345] hsr_slave_0: entered promiscuous mode [ 431.976910][ T4808] usb 2-1: device descriptor read/64, error -71 [ 432.004235][ T6345] hsr_slave_1: entered promiscuous mode [ 432.025647][ T6345] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 432.034891][ T6345] Cannot create hsr debugfs directory [ 432.094646][ T4808] usb usb2-port1: attempt power cycle [ 432.318898][ T8] usb 1-1: USB disconnect, device number 2 [ 432.462980][ T4808] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 432.495058][ T4808] usb 2-1: device descriptor read/8, error -71 [ 432.769855][ T4808] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 432.815068][ T4808] usb 2-1: device descriptor read/8, error -71 [ 432.941692][ T4808] usb usb2-port1: unable to enumerate USB device [ 433.814774][ T6424] fuse: Bad value for 'fd' [ 433.893765][ T5854] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 434.357227][ T6345] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 434.406741][ T6345] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 434.458706][ T6268] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 434.565739][ T6345] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 434.633040][ T6345] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 434.986508][ T6268] veth0_vlan: entered promiscuous mode [ 435.142113][ T6268] veth1_vlan: entered promiscuous mode [ 435.450320][ T6434] loop0: detected capacity change from 0 to 512 [ 435.573287][ T6434] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 435.661363][ T6268] veth0_macvtap: entered promiscuous mode [ 435.779307][ T6434] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #16: comm syz.0.208: invalid indirect mapped block 83886080 (level 1) [ 435.883079][ T6268] veth1_macvtap: entered promiscuous mode [ 435.908449][ T6434] EXT4-fs (loop0): 1 orphan inode deleted [ 435.915349][ T6434] EXT4-fs (loop0): 1 truncate cleaned up [ 435.928406][ T6434] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 436.112442][ T6436] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 436.195926][ T6438] loop1: detected capacity change from 0 to 16 [ 436.245392][ T6438] erofs: Unknown parameter '' [ 436.266145][ T6268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 436.277097][ T6268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 436.287494][ T6268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 436.298538][ T6268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 436.308921][ T6268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 436.320078][ T6268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 436.337795][ T6268] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 436.375167][ T6345] 8021q: adding VLAN 0 to HW filter on device bond0 [ 436.604626][ T6268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 436.615675][ T6268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 436.625965][ T6268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 436.643506][ T6268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 436.655434][ T6268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 436.666518][ T6268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 436.682519][ T6268] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 436.706522][ T6268] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.716003][ T6268] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.725443][ T6268] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.734699][ T6268] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.883635][ T6345] 8021q: adding VLAN 0 to HW filter on device team0 [ 436.958674][ T6017] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 437.011399][ T732] bridge0: port 1(bridge_slave_0) entered blocking state [ 437.019456][ T732] bridge0: port 1(bridge_slave_0) entered forwarding state [ 437.026629][ T6441] loop2: detected capacity change from 0 to 512 [ 437.065659][ T732] bridge0: port 2(bridge_slave_1) entered blocking state [ 437.073689][ T732] bridge0: port 2(bridge_slave_1) entered forwarding state [ 437.188705][ T6345] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 437.199832][ T6345] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 437.683425][ T6441] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 437.696988][ T6441] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 438.432607][ T6461] loop1: detected capacity change from 0 to 1024 [ 438.558191][ T5239] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 438.784091][ T6461] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 438.792130][ T5239] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 438.805733][ T5239] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 438.816686][ T5239] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 438.826178][ T5239] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 438.980371][ T6079] EXT4-fs error (device loop2): ext4_ext_check_inode:524: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 439.081297][ T6079] EXT4-fs error (device loop2): ext4_ext_check_inode:524: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 439.128847][ T6345] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 439.242960][ T5239] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 439.252577][ T5239] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.260910][ T5239] usb 1-1: Product: syz [ 439.266179][ T5239] usb 1-1: Manufacturer: syz [ 439.271090][ T5239] usb 1-1: SerialNumber: syz [ 439.298482][ T5239] cdc_ncm 1-1:1.0: skipping garbage [ 439.306054][ T5239] cdc_ncm 1-1:1.0: skipping garbage [ 439.311572][ T5239] cdc_ncm 1-1:1.0: invalid descriptor buffer length [ 439.319027][ T5239] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 439.326375][ T5239] cdc_ncm 1-1:1.0: bind() failure [ 439.413325][ T1903] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 439.658478][ T1903] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 439.669359][ T1903] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 439.725266][ T1903] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 439.734979][ T1903] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 439.743809][ T1903] usb 2-1: SerialNumber: syz [ 439.953339][ T6079] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 440.100483][ T1903] usb 2-1: 0:2 : does not exist [ 440.116538][ T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.311453][ T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.344598][ T5188] Bluetooth: hci0: command 0x040f tx timeout [ 440.352495][ T52] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 440.363820][ T1903] usb 2-1: USB disconnect, device number 11 [ 440.606690][ T6257] udevd[6257]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 440.629783][ T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.688277][ T6475] loop0: detected capacity change from 0 to 1764 [ 440.862846][ T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.900410][ T6475] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 441.013908][ T5854] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 441.600299][ T13] bridge_slave_1: left allmulticast mode [ 441.606827][ T13] bridge_slave_1: left promiscuous mode [ 441.613764][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 441.734327][ T13] bridge_slave_0: left allmulticast mode [ 441.740307][ T13] bridge_slave_0: left promiscuous mode [ 441.747700][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 442.643798][ T5236] usb 1-1: USB disconnect, device number 3 [ 442.898295][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 443.012940][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 443.104812][ T13] bond0 (unregistering): Released all slaves [ 443.208481][ T5188] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 443.218254][ T5188] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 443.228825][ T5188] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 443.253638][ T5188] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 443.265787][ T5188] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 443.276168][ T5188] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 444.602228][ T29] audit: type=1107 audit(1726986765.775:16): pid=6507 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 444.698731][ T6345] veth0_vlan: entered promiscuous mode [ 444.739879][ T6345] veth1_vlan: entered promiscuous mode [ 445.431085][ T6511] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 445.584279][ T5188] Bluetooth: hci3: command tx timeout [ 445.869632][ T13] hsr_slave_0: left promiscuous mode [ 445.943244][ T13] hsr_slave_1: left promiscuous mode [ 445.999815][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 446.007911][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 446.126452][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 446.135076][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 446.323117][ T13] veth1_macvtap: left promiscuous mode [ 446.329066][ T13] veth0_macvtap: left promiscuous mode [ 446.335216][ T13] veth1_vlan: left promiscuous mode [ 446.340832][ T13] veth0_vlan: left promiscuous mode [ 447.682618][ T5188] Bluetooth: hci3: command tx timeout [ 448.048841][ T6525] loop1: detected capacity change from 0 to 512 [ 448.143177][ T6525] EXT4-fs (loop1): Invalid default hash set in the superblock [ 448.479563][ T13] team0 (unregistering): Port device team_slave_1 removed [ 448.565592][ T13] team0 (unregistering): Port device team_slave_0 removed [ 449.083600][ T6531] loop1: detected capacity change from 0 to 1024 [ 449.360015][ T6345] veth0_macvtap: entered promiscuous mode [ 449.389013][ T6531] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 449.521288][ T6345] veth1_macvtap: entered promiscuous mode [ 449.709192][ T5188] Bluetooth: hci3: command tx timeout [ 449.822354][ T5235] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 450.007808][ T6345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 450.018805][ T6345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.033904][ T6345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 450.046553][ T6345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.060076][ T6345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 450.072052][ T6345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.087592][ T6345] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 450.195609][ T6492] chnl_net:caif_netlink_parms(): no params data found [ 450.204086][ T5235] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 450.213900][ T5235] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 450.224470][ T5235] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 450.233919][ T5235] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 450.324892][ T5235] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 450.334719][ T5235] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.343953][ T5235] usb 1-1: Product: syz [ 450.348450][ T5235] usb 1-1: Manufacturer: syz [ 450.353484][ T5235] usb 1-1: SerialNumber: syz [ 450.431493][ T5235] cdc_ncm 1-1:1.0: skipping garbage [ 450.437600][ T5235] cdc_ncm 1-1:1.0: skipping garbage [ 450.443255][ T5235] cdc_ncm 1-1:1.0: invalid descriptor buffer length [ 450.450155][ T5235] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 450.457461][ T5235] cdc_ncm 1-1:1.0: bind() failure [ 450.503589][ T6345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 450.514534][ T6345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.525155][ T6345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 450.536149][ T6345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.546554][ T6345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 450.557398][ T6345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.574419][ T6345] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 450.595491][ T5239] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 450.775841][ T5239] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 450.787719][ T5239] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 450.848457][ T5239] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 450.858319][ T5239] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 450.860886][ T6345] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.866752][ T5239] usb 2-1: SerialNumber: syz [ 450.885622][ T6345] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.895320][ T6345] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.904623][ T6345] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.182698][ T5239] usb 2-1: 0:2 : does not exist [ 451.366892][ T5239] usb 2-1: USB disconnect, device number 12 [ 451.612367][ T6257] udevd[6257]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 451.783048][ T5188] Bluetooth: hci3: command tx timeout [ 451.977195][ T6492] bridge0: port 1(bridge_slave_0) entered blocking state [ 451.986748][ T6492] bridge0: port 1(bridge_slave_0) entered disabled state [ 451.995279][ T6492] bridge_slave_0: entered allmulticast mode [ 452.009002][ T6492] bridge_slave_0: entered promiscuous mode [ 452.027043][ T6556] loop0: detected capacity change from 0 to 1764 [ 452.060287][ T5854] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 452.064740][ T6492] bridge0: port 2(bridge_slave_1) entered blocking state [ 452.077469][ T6492] bridge0: port 2(bridge_slave_1) entered disabled state [ 452.085578][ T6492] bridge_slave_1: entered allmulticast mode [ 452.095260][ T6492] bridge_slave_1: entered promiscuous mode [ 452.779394][ T6492] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 452.860153][ T6492] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 452.895877][ T4006] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 452.904390][ T4006] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 453.299857][ T6492] team0: Port device team_slave_0 added [ 453.384122][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 453.392424][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 453.410076][ T6492] team0: Port device team_slave_1 added [ 453.835258][ T6492] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 453.846769][ T6492] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 453.874689][ T6492] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 454.117406][ T6492] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 454.124854][ T6492] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 454.155700][ T6492] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 454.401433][ T1903] usb 1-1: USB disconnect, device number 4 [ 454.653189][ T5239] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 454.851767][ T5239] usb 2-1: too many configurations: 65, using maximum allowed: 8 [ 454.907992][ T6492] hsr_slave_0: entered promiscuous mode [ 454.920439][ T5239] usb 2-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 454.978506][ T5239] usb 2-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 454.985023][ T6492] hsr_slave_1: entered promiscuous mode [ 455.053161][ T6492] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 455.053293][ T5239] usb 2-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 455.061132][ T6492] Cannot create hsr debugfs directory [ 455.120033][ T5239] usb 2-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 455.177361][ T5239] usb 2-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 455.212676][ T5239] usb 2-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 455.285228][ T5239] usb 2-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 455.343308][ T5239] usb 2-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 455.354190][ T5239] usb 2-1: New USB device found, idVendor=046d, idProduct=08b8, bcdDevice=ee.8d [ 455.364086][ T5239] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.465007][ T5239] pwc: Logitech QuickCam detected (reserved ID). [ 455.471636][ T5239] pwc: Warning: more than 1 configuration available. [ 455.649947][ T6578] netlink: 4 bytes leftover after parsing attributes in process `syz.1.229'. [ 455.755612][ T5239] pwc: Failed to set LED on/off time (-71) [ 455.773836][ T5239] pwc: send_video_command error -71 [ 455.779458][ T5239] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 455.795203][ T5239] Philips webcam 2-1:250.0: probe with driver Philips webcam failed with error -71 [ 455.937871][ T5239] usb 2-1: USB disconnect, device number 13 [ 456.587875][ T6600] loop0: detected capacity change from 0 to 512 [ 456.645694][ T6600] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 456.740925][ T6600] EXT4-fs (loop0): 1 truncate cleaned up [ 456.750939][ T6600] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 457.305167][ T6017] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 457.640995][ T6608] loop1: detected capacity change from 0 to 1024 [ 457.780191][ T6492] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 457.908865][ T6613] loop0: detected capacity change from 0 to 2048 [ 457.972650][ T6492] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 457.980064][ T6608] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 458.116772][ T6613] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 458.131230][ T6492] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 458.265197][ T6492] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 458.342970][ T1903] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 458.583512][ T1903] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 458.594252][ T1903] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 458.706141][ T6017] UDF-fs: error (device loop0): udf_read_inode: (ino 1317) failed !bh [ 458.707792][ T1903] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 458.724333][ T1903] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 458.732805][ T1903] usb 2-1: SerialNumber: syz [ 458.739387][ T6017] UDF-fs: error (device loop0): udf_read_inode: (ino 1317) failed !bh [ 459.644197][ T4006] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.730064][ T1903] usb 2-1: 0:2 : does not exist [ 460.173354][ T1903] usb 2-1: USB disconnect, device number 14 [ 460.230088][ T4006] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.328778][ T6257] udevd[6257]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 460.419007][ T5854] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 460.451225][ T4006] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.583236][ T3212] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 460.591475][ T3212] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 460.974894][ T4006] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.127991][ T6492] 8021q: adding VLAN 0 to HW filter on device bond0 [ 461.298813][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 461.308363][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 461.343872][ T52] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 461.378096][ T52] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 461.412714][ T52] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 461.454559][ T52] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 461.495035][ T52] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 461.511225][ T6492] 8021q: adding VLAN 0 to HW filter on device team0 [ 461.530862][ T52] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 461.635219][ T3817] bridge0: port 1(bridge_slave_0) entered blocking state [ 461.643097][ T3817] bridge0: port 1(bridge_slave_0) entered forwarding state [ 461.779334][ T3817] bridge0: port 2(bridge_slave_1) entered blocking state [ 461.787258][ T3817] bridge0: port 2(bridge_slave_1) entered forwarding state [ 462.228330][ T4006] bridge_slave_1: left allmulticast mode [ 462.234480][ T4006] bridge_slave_1: left promiscuous mode [ 462.243935][ T4006] bridge0: port 2(bridge_slave_1) entered disabled state [ 462.363005][ T4006] bridge_slave_0: left allmulticast mode [ 462.368999][ T4006] bridge_slave_0: left promiscuous mode [ 462.376231][ T4006] bridge0: port 1(bridge_slave_0) entered disabled state [ 462.682867][ T6639] loop1: detected capacity change from 0 to 512 [ 462.938569][ T6639] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 462.952954][ T6639] ext4 filesystem being mounted at /34/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 463.315621][ T4006] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 463.402779][ T4006] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 463.448232][ T4006] bond0 (unregistering): Released all slaves [ 463.622312][ T52] Bluetooth: hci4: command tx timeout [ 464.335151][ T6644] netlink: 4 bytes leftover after parsing attributes in process `syz.4.242'. [ 465.242569][ T4006] hsr_slave_0: left promiscuous mode [ 465.293310][ T4006] hsr_slave_1: left promiscuous mode [ 465.349020][ T4006] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 465.358113][ T4006] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 465.418285][ T4006] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 465.426534][ T4006] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 465.556532][ T4006] veth1_macvtap: left promiscuous mode [ 465.562589][ T4006] veth0_macvtap: left promiscuous mode [ 465.568285][ T6648] loop3: detected capacity change from 0 to 512 [ 465.575304][ T4006] veth1_vlan: left promiscuous mode [ 465.580940][ T4006] veth0_vlan: left promiscuous mode [ 465.603213][ T6648] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 465.704504][ T52] Bluetooth: hci4: command tx timeout [ 465.745581][ T6651] loop4: detected capacity change from 0 to 512 [ 465.872416][ T6651] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 465.880396][ T6651] UDF-fs: Scanning with blocksize 512 failed [ 465.907839][ T6651] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 465.915896][ T6651] UDF-fs: Scanning with blocksize 1024 failed [ 465.936884][ T6651] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 465.945953][ T6651] UDF-fs: Scanning with blocksize 2048 failed [ 465.953577][ T6648] EXT4-fs (loop3): 1 truncate cleaned up [ 465.961202][ T6651] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 465.961329][ T6648] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 465.981293][ T6651] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 467.022860][ T6268] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 467.296325][ T5854] EXT4-fs error (device loop1): ext4_ext_check_inode:524: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 467.453025][ T5854] EXT4-fs error (device loop1): ext4_ext_check_inode:524: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 467.711219][ T4006] team0 (unregistering): Port device team_slave_1 removed [ 467.754971][ T4006] team0 (unregistering): Port device team_slave_0 removed [ 467.824449][ T52] Bluetooth: hci4: command tx timeout [ 469.481732][ T6660] loop3: detected capacity change from 0 to 128 [ 469.869140][ T52] Bluetooth: hci4: command tx timeout [ 471.152242][ T5854] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 471.617424][ T6666] loop4: detected capacity change from 0 to 1024 [ 471.804915][ T6631] chnl_net:caif_netlink_parms(): no params data found [ 471.944969][ T6666] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 472.118941][ T4006] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.348436][ T4006] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.372742][ T6671] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 472.442470][ T5235] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 472.676263][ T5235] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 472.679932][ T4006] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.691002][ T5235] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 472.816011][ T5235] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 472.825852][ T5235] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 472.834647][ T5235] usb 5-1: SerialNumber: syz [ 472.948759][ T6492] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 473.058353][ T4006] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.256171][ T5235] usb 5-1: 0:2 : does not exist [ 473.507526][ T5235] usb 5-1: USB disconnect, device number 9 [ 473.827970][ T4006] bridge_slave_1: left allmulticast mode [ 473.834378][ T4006] bridge_slave_1: left promiscuous mode [ 473.841198][ T4006] bridge0: port 2(bridge_slave_1) entered disabled state [ 473.856899][ T6257] udevd[6257]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 473.906249][ T4006] bridge_slave_0: left allmulticast mode [ 473.915039][ T4006] bridge_slave_0: left promiscuous mode [ 473.921828][ T4006] bridge0: port 1(bridge_slave_0) entered disabled state [ 474.306606][ T6345] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 474.452930][ T4006] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 474.513633][ T4006] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 474.578042][ T4006] bond0 (unregistering): Released all slaves [ 474.859987][ T6492] veth0_vlan: entered promiscuous mode [ 474.870393][ T4006] tipc: Disabling bearer [ 474.878686][ T4006] tipc: Left network mode [ 475.003907][ T1242] ieee802154 phy0 wpan0: encryption failed: -22 [ 475.011014][ T1242] ieee802154 phy1 wpan1: encryption failed: -22 [ 475.208341][ T6492] veth1_vlan: entered promiscuous mode [ 475.226982][ T6686] loop3: detected capacity change from 0 to 128 [ 475.470515][ T5188] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 475.505850][ T5188] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 475.522534][ T5188] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 475.630662][ T5188] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 475.649734][ T5188] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 475.659124][ T6689] netlink: 4 bytes leftover after parsing attributes in process `syz.4.252'. [ 475.665768][ T6631] bridge0: port 1(bridge_slave_0) entered blocking state [ 475.676384][ T6631] bridge0: port 1(bridge_slave_0) entered disabled state [ 475.684419][ T6631] bridge_slave_0: entered allmulticast mode [ 475.693729][ T6631] bridge_slave_0: entered promiscuous mode [ 475.716825][ T5188] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 475.763098][ T4006] hsr_slave_0: left promiscuous mode [ 475.824617][ T4006] hsr_slave_1: left promiscuous mode [ 475.847171][ T4006] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 475.855121][ T4006] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 475.881605][ T4006] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 475.889955][ T4006] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 475.930285][ T4006] veth1_macvtap: left promiscuous mode [ 475.931232][ T6686] EXT4-fs (loop3): Test dummy encryption mode enabled [ 475.936808][ T4006] veth0_macvtap: left promiscuous mode [ 475.937162][ T4006] veth1_vlan: left promiscuous mode [ 475.937409][ T4006] veth0_vlan: left promiscuous mode [ 475.978764][ T6686] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 476.001581][ T6686] ext4 filesystem being mounted at /6/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 476.645025][ T6699] loop4: detected capacity change from 0 to 512 [ 476.707316][ T6699] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 476.731479][ T6686] fscrypt: AES-256-CBC-CTS using implementation "cts(cbc(ecb(aes-fixed-time)))" [ 476.739066][ T6699] EXT4-fs (loop4): 1 truncate cleaned up [ 476.751856][ T6699] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 476.996147][ T4006] team0 (unregistering): Port device team_slave_1 removed [ 477.112567][ T6345] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 477.213976][ T4006] team0 (unregistering): Port device team_slave_0 removed [ 477.907439][ T6631] bridge0: port 2(bridge_slave_1) entered blocking state [ 477.915850][ T6631] bridge0: port 2(bridge_slave_1) entered disabled state [ 477.923874][ T6631] bridge_slave_1: entered allmulticast mode [ 477.933333][ T6631] bridge_slave_1: entered promiscuous mode [ 478.173362][ T5188] Bluetooth: hci1: command tx timeout [ 478.275473][ T6492] veth0_macvtap: entered promiscuous mode [ 478.445300][ T6492] veth1_macvtap: entered promiscuous mode [ 478.489949][ T6631] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 478.772690][ T6707] loop4: detected capacity change from 0 to 512 [ 478.988356][ T6631] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 479.026712][ T6707] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 479.041659][ T6707] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 479.438202][ T6492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 479.450406][ T6492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 479.461069][ T6492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 479.472036][ T6492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 479.488440][ T6492] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 479.747070][ T6631] team0: Port device team_slave_0 added [ 479.831064][ T6492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 479.842615][ T6492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 479.854052][ T6492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 479.865332][ T6492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 479.880802][ T6492] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 479.935074][ T6631] team0: Port device team_slave_1 added [ 480.185846][ T5188] Bluetooth: hci1: command tx timeout [ 480.189842][ T6268] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 480.283179][ T6631] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 480.290728][ T6631] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 480.317465][ T6631] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 480.357796][ T6631] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 480.368215][ T6631] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 480.395718][ T6631] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 480.519479][ T6492] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.528797][ T6492] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.538308][ T6492] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.547590][ T6492] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.099532][ T6690] chnl_net:caif_netlink_parms(): no params data found [ 481.350130][ T6631] hsr_slave_0: entered promiscuous mode [ 481.419911][ T6631] hsr_slave_1: entered promiscuous mode [ 481.664713][ T6722] loop3: detected capacity change from 0 to 1024 [ 482.172324][ T6345] EXT4-fs error (device loop4): ext4_ext_check_inode:524: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 482.233459][ T6345] EXT4-fs error (device loop4): ext4_ext_check_inode:524: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 482.247772][ T6726] loop3: detected capacity change from 0 to 1024 [ 482.262297][ T52] Bluetooth: hci1: command tx timeout [ 483.303917][ T5188] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 483.311283][ T5188] Bluetooth: hci0: command 0x040f tx timeout [ 483.346279][ T3817] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.377546][ T6345] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 483.649203][ T3817] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.064634][ T3817] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.129902][ T6690] bridge0: port 1(bridge_slave_0) entered blocking state [ 484.138065][ T6690] bridge0: port 1(bridge_slave_0) entered disabled state [ 484.145947][ T6690] bridge_slave_0: entered allmulticast mode [ 484.156352][ T6690] bridge_slave_0: entered promiscuous mode [ 484.271482][ T3817] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.342250][ T5188] Bluetooth: hci1: command tx timeout [ 484.401414][ T6690] bridge0: port 2(bridge_slave_1) entered blocking state [ 484.409631][ T6690] bridge0: port 2(bridge_slave_1) entered disabled state [ 484.417617][ T6690] bridge_slave_1: entered allmulticast mode [ 484.426254][ T6690] bridge_slave_1: entered promiscuous mode [ 485.015076][ T6690] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 485.026688][ T6631] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 485.112180][ T3817] bridge_slave_1: left allmulticast mode [ 485.118239][ T3817] bridge_slave_1: left promiscuous mode [ 485.126527][ T3817] bridge0: port 2(bridge_slave_1) entered disabled state [ 485.206766][ T3817] bridge_slave_0: left allmulticast mode [ 485.213479][ T3817] bridge_slave_0: left promiscuous mode [ 485.220277][ T3817] bridge0: port 1(bridge_slave_0) entered disabled state [ 485.357385][ T6268] ===================================================== [ 485.366145][ T6268] BUG: KMSAN: uninit-value in hfsplus_uni2asc+0x821/0x2350 [ 485.374274][ T6268] hfsplus_uni2asc+0x821/0x2350 [ 485.382417][ T6268] hfsplus_readdir+0xbd7/0x18d0 [ 485.387522][ T6268] iterate_dir+0x5b3/0x9e0 [ 485.394304][ T6268] __se_sys_getdents64+0x169/0x530 [ 485.399699][ T6268] __x64_sys_getdents64+0x96/0xe0 [ 485.406319][ T6268] x64_sys_call+0x3430/0x3ba0 [ 485.411281][ T6268] do_syscall_64+0xcd/0x1e0 [ 485.417273][ T6268] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.424670][ T6268] [ 485.427127][ T6268] Uninit was created at: [ 485.431668][ T6268] __kmalloc_noprof+0x661/0xf30 [ 485.437979][ T6268] hfsplus_find_init+0x95/0x1d0 [ 485.444278][ T6268] hfsplus_readdir+0x1da/0x18d0 [ 485.449363][ T6268] iterate_dir+0x5b3/0x9e0 [ 485.455348][ T6268] __se_sys_getdents64+0x169/0x530 [ 485.460707][ T6268] __x64_sys_getdents64+0x96/0xe0 [ 485.467247][ T6268] x64_sys_call+0x3430/0x3ba0 [ 485.472867][ T6268] do_syscall_64+0xcd/0x1e0 [ 485.477602][ T6268] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.486737][ T6268] [ 485.489224][ T6268] CPU: 0 UID: 0 PID: 6268 Comm: syz-executor Not tainted 6.11.0-syzkaller-08481-g88264981f208 #0 [ 485.501252][ T6268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 485.511781][ T6268] ===================================================== [ 485.519067][ T6268] Disabling lock debugging due to kernel taint [ 485.525540][ T6268] Kernel panic - not syncing: kmsan.panic set ... [ 485.532141][ T6268] CPU: 0 UID: 0 PID: 6268 Comm: syz-executor Tainted: G B 6.11.0-syzkaller-08481-g88264981f208 #0 [ 485.544417][ T6268] Tainted: [B]=BAD_PAGE [ 485.548724][ T6268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 485.558978][ T6268] Call Trace: [ 485.562424][ T6268] [ 485.565484][ T6268] dump_stack_lvl+0x216/0x2d0 [ 485.570371][ T6268] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 485.576461][ T6268] dump_stack+0x1e/0x30 [ 485.580835][ T6268] panic+0x4e2/0xcf0 [ 485.584996][ T6268] ? kmsan_get_metadata+0x91/0x1c0 [ 485.590401][ T6268] kmsan_report+0x2c7/0x2d0 [ 485.595149][ T6268] ? kmsan_get_metadata+0x13e/0x1c0 [ 485.600695][ T6268] ? kmsan_get_metadata+0x13e/0x1c0 [ 485.606144][ T6268] ? __msan_warning+0x95/0x120 [ 485.611136][ T6268] ? hfsplus_uni2asc+0x821/0x2350 [ 485.616549][ T6268] ? hfsplus_readdir+0xbd7/0x18d0 [ 485.621772][ T6268] ? iterate_dir+0x5b3/0x9e0 [ 485.626560][ T6268] ? __se_sys_getdents64+0x169/0x530 [ 485.632154][ T6268] ? __x64_sys_getdents64+0x96/0xe0 [ 485.637569][ T6268] ? x64_sys_call+0x3430/0x3ba0 [ 485.642651][ T6268] ? do_syscall_64+0xcd/0x1e0 [ 485.647508][ T6268] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.653834][ T6268] ? filter_irq_stacks+0x60/0x1a0 [ 485.659105][ T6268] ? kmsan_get_metadata+0x13e/0x1c0 [ 485.664544][ T6268] ? kmsan_get_metadata+0x13e/0x1c0 [ 485.669983][ T6268] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 485.676034][ T6268] ? hfsplus_bnode_read_u16+0x3e/0x2b0 [ 485.681706][ T6268] ? filter_irq_stacks+0x60/0x1a0 [ 485.686983][ T6268] ? kmsan_get_metadata+0x13e/0x1c0 [ 485.692441][ T6268] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 485.698505][ T6268] ? utf32_to_utf8+0x4b1/0x4e0 [ 485.703514][ T6268] ? kmsan_get_metadata+0x13e/0x1c0 [ 485.709223][ T6268] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 485.715286][ T6268] __msan_warning+0x95/0x120 [ 485.720264][ T6268] hfsplus_uni2asc+0x821/0x2350 [ 485.725507][ T6268] ? __msan_memcpy+0x108/0x1c0 [ 485.730494][ T6268] ? kmsan_get_metadata+0x13e/0x1c0 [ 485.735952][ T6268] ? __msan_memcpy+0x108/0x1c0 [ 485.740951][ T6268] hfsplus_readdir+0xbd7/0x18d0 [ 485.746027][ T6268] ? __rcu_read_unlock+0x7b/0xe0 [ 485.751181][ T6268] ? aa_file_perm+0x3de/0x1780 [ 485.756188][ T6268] ? filter_irq_stacks+0x60/0x1a0 [ 485.761460][ T6268] ? kmsan_get_metadata+0x13e/0x1c0 [ 485.766909][ T6268] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 485.773473][ T6268] ? kmsan_get_metadata+0x13e/0x1c0 [ 485.778914][ T6268] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 485.785004][ T6268] ? __pfx_hfsplus_readdir+0x10/0x10 [ 485.790666][ T6268] iterate_dir+0x5b3/0x9e0 [ 485.795282][ T6268] ? __pfx_hfsplus_readdir+0x10/0x10 [ 485.800786][ T6268] ? mutex_lock+0x38/0x60 [ 485.805367][ T6268] __se_sys_getdents64+0x169/0x530 [ 485.810694][ T6268] ? kmsan_get_metadata+0x13e/0x1c0 [ 485.816133][ T6268] ? __pfx_filldir64+0x10/0x10 [ 485.821120][ T6268] __x64_sys_getdents64+0x96/0xe0 [ 485.826368][ T6268] x64_sys_call+0x3430/0x3ba0 [ 485.831274][ T6268] do_syscall_64+0xcd/0x1e0 [ 485.835964][ T6268] ? clear_bhb_loop+0x25/0x80 [ 485.840862][ T6268] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.846993][ T6268] RIP: 0033:0x7efeea9b0093 [ 485.851565][ T6268] Code: c1 66 0f 1f 44 00 00 48 83 c4 08 48 89 ef 5b 5d e9 62 43 f8 ff 66 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 a8 ff ff ff f7 d8 [ 485.871412][ T6268] RSP: 002b:00007ffcaab22438 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 485.880044][ T6268] RAX: ffffffffffffffda RBX: 00005555652cc640 RCX: 00007efeea9b0093 [ 485.888365][ T6268] RDX: 0000000000008000 RSI: 00005555652cc640 RDI: 0000000000000006 [ 485.896603][ T6268] RBP: 00005555652cc614 R08: 0000000000000000 R09: 0000000000000000 [ 485.904739][ T6268] R10: 0000000000001000 R11: 0000000000000293 R12: ffffffffffffffa8 [ 485.912909][ T6268] R13: 0000000000000016 R14: 00005555652cc610 R15: 00007ffcaab257d0 [ 485.921093][ T6268] [ 485.924546][ T6268] Kernel Offset: disabled [ 485.928961][ T6268] Rebooting in 86400 seconds..