last executing test programs: 14.07188293s ago: executing program 4 (id=2756): inotify_add_watch(0xffffffffffffffff, 0x0, 0x50007a2) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007ed, &(0x7f0000008400)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0xa89) 13.82739824s ago: executing program 4 (id=2758): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$inet_tcp(0x2, 0x1, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x28, 0x800000000004}, &(0x7f0000bbdffc)) bind$tipc(0xffffffffffffffff, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x20) r3 = add_key$fscrypt_v1(0x0, &(0x7f0000001200)={'fscrypt:', @desc2}, &(0x7f0000001240)={0x0, "395e11d96405de78b3fe92849d38e567229ebd4040a9d2fb8e0567c3f023006b3ef6594d3fa922b77ba398aaec8f9374162bc9b32bae4bd498d4243f33d69422"}, 0x48, 0xffffffffffffffff) keyctl$search(0x4, r3, 0x0, &(0x7f0000001300)={'syz', 0x3}, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000000)='./file1\x00', 0x1000801, &(0x7f0000000140)=ANY=[], 0xff, 0x208, &(0x7f0000000780)="$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") newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x4000) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1000, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r4, 0x0, 0x0) ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0) 12.943845604s ago: executing program 4 (id=2763): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0xec, &(0x7f0000000540)=""/236, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f00000004c0)={0x0, 0x0, 0x20, 0x0, "cbfea29368cc60a1ff856ae471fe261fdfb44a306ea8d6996bbcb8eb45d73158"}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 12.699387375s ago: executing program 4 (id=2767): r0 = syz_usb_connect(0x0, 0x3d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x92, 0xe5, 0x9e, 0x20, 0x108c, 0x169, 0x75b9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xdb, 0x0, 0x2, 0xd, 0xfa, 0x0, 0x3, [], [{{0x9, 0x5, 0x80, 0x0, 0x0, 0x0, 0xfc, 0x0, [@generic={0x7, 0x5, "db224370bf"}]}}, {{0x9, 0x5, 0xb, 0x2, 0x3ff}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000fc0)={0x2c, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0xfffffffffffffe72, 0x3, 0xc0a}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f00000008c0)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x4, @string={0x4, 0x3, 'xD'}}}, 0x0) 11.981387194s ago: executing program 4 (id=2771): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000008c0)="d8000000180081000181f782db4cb904021d0800fe007c05e8fe50a10a000700014002020c600e41b0000900ac000a0501000000160012000a00ff150048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5a02000000ca9ec855eff0eb3f365d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505dba36efab70cdb67e8d1cc5c7b06b1eab31f7b05da962834cedde6fdfcf45add8e51ff159ca9680d0", 0xd8}], 0x1}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 11.802169575s ago: executing program 4 (id=2774): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x40000000000011a, 0x44000) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r7 = epoll_create1(0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000240)={0x40002009}) 8.294428651s ago: executing program 0 (id=2790): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1e7d, 0x31ce, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xb}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000900)=ANY=[@ANYBLOB="0007f0000000f0"], 0x0, 0x0, 0x0, 0x0}, 0x0) 6.805789418s ago: executing program 1 (id=2764): r0 = syz_open_dev$vim2m(&(0x7f0000000280), 0x1002, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x1) 6.731315999s ago: executing program 1 (id=2799): openat$autofs(0xffffff9c, &(0x7f0000000000), 0x200142, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = socket$netlink(0x10, 0x3, 0xc) socket$alg(0x26, 0x5, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x14}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc}, @NFTA_LIMIT_UNIT={0xc}]}}}, {0x14, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd4}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x4b0}}, 0x0) r3 = dup(r0) write$binfmt_misc(r3, 0x0, 0x0) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) socket$inet(0x2, 0x1, 0x0) r4 = syz_open_dev$mouse(&(0x7f0000000100), 0x4, 0x800) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x801) r5 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r5, 0x3) r6 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r6, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r7 = accept4(r5, 0x0, 0x0, 0x0) recvmmsg(r6, &(0x7f0000007940), 0x55, 0x0, 0x0) sendmmsg(r7, &(0x7f0000001500), 0x588, 0x0) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000340)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)={0xc0, 0x2, 0x6, 0x401, 0x0, 0x0, {0x5, 0x0, 0x8}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_DATA={0x3c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0xfffffffd}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x7ff}, @IPSET_ATTR_SIZE={0x8}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xe459}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x5}]}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_DATA={0x3c, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xfff}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x1}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x5}, @IPSET_ATTR_CIDR={0x5, 0x3, 0xb}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0xc0}, 0x1, 0x0, 0x0, 0x20044010}, 0x800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x84, &(0x7f0000000040)={0x0, @in={{0xa}}, 0xffff}, 0x90) munlockall() bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305\x00'}, 0x58) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000012000000080007000000ffff08000800ffffff70180001801400020076657468305f746f5f62617461647600080009"], 0x44}}, 0x0) 5.851485559s ago: executing program 0 (id=2802): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000711205000000000095000000000000000ee0b37c518b39bef1b42bd19cf6e0e6a4b414c1d5197def319ff22e7b0e91fd73654feb3a361e2307549b1c4af7ea34fbec9cb8f0b205d340a5f59b23656acf0269bbdf5024cf3bf8177d40b9a808aff6e628e53c4b894b419b60f83ff6d79c0e825df7b5c237"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xa, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 5.248380429s ago: executing program 1 (id=2804): socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$uac1(0x0, 0x0, 0x0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x20, &(0x7f0000000680)=ANY=[@ANYBLOB="2003a162a8057c983cc48b206ba7e83958361307aac221a037db83269f2d9458"]}]}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r1, &(0x7f0000000180)=ANY=[@ANYRESDEC=r1], 0x12) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, 0x0, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x0, &(0x7f0000000040)=0x2800, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x8, 0x4000010, r2, 0xe1666000) r4 = syz_open_dev$cec(&(0x7f00000006c0), 0x0, 0x0) ioctl$CEC_S_MODE(r4, 0x40046109, &(0x7f0000000700)=0x5) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETRULE(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x28, 0x7, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}]}, 0x28}}, 0x20080080) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000001200)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000f70000000003000000500001800400028038000400200001000a00000000007da8e2a90000000000000000ffff7f000001000000001400020002000000ffffffff00000000000000000e0001006574683a766c616e30"], 0x64}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r7, 0x8982, &(0x7f0000000000)={0x1, 'vlan0\x00'}) 4.96019617s ago: executing program 0 (id=2810): pipe2$9p(0x0, 0x80800) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) dup3(r0, 0xffffffffffffffff, 0x0) 4.128669291s ago: executing program 0 (id=2815): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="120000000b0000000400000002"], 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000240), 0x20000000}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r0, &(0x7f0000000100)}, 0x20) 4.047939474s ago: executing program 0 (id=2816): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r4 = openat$cgroup_devices(r3, 0x0, 0x2, 0x0) write$cgroup_devices(r4, &(0x7f00000003c0)={'b', ' *:* ', 'r\x00'}, 0x8) 4.047318664s ago: executing program 2 (id=2817): syz_mount_image$squashfs(&(0x7f00000001c0), &(0x7f0000000200)='./file1\x00', 0xa, &(0x7f00000002c0)=ANY=[], 0x0, 0x19e, &(0x7f0000000000)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) chdir(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f000000a400)={0x2020, 0x0, 0x0}, 0x2028) syz_fuse_handle_req(r1, &(0x7f0000008400)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000, 0x0, 0x0, 0x0, 0x800}}}, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r1, &(0x7f0000000340)={0x50, 0x0, r2}, 0x50) 3.437764145s ago: executing program 3 (id=2819): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$key(0xf, 0x3, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101801) ioctl$USBDEVFS_CLEAR_HALT(r5, 0x80045515, 0x0) 3.391356123s ago: executing program 2 (id=2820): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000400)='./bus\x00', 0x800, &(0x7f0000000840)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRES64], 0x1, 0x36e, &(0x7f0000000880)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)=ANY=[], 0x50) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000380)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x44}}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x0, &(0x7f0000000200)=0x4) sched_setscheduler(0x0, 0x1, 0x0) getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000540)={0x0, {0x2, 0x4e21, @loopback}, {0x2, 0x4e24, @multicast2}, {0x2, 0x4e23, @remote}, 0x1b8, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x81, 0x5e9e}) sched_setaffinity(0x0, 0x5a, &(0x7f0000000100)=0x400000bce) r2 = syz_open_dev$MSR(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000005c0)=@gettaction={0x50, 0x32, 0x0, 0x0, 0x25dfdbfe, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc}]}, 0x50}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f00000006c0)=""/74, 0x4a}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/144, 0x90}, {&(0x7f0000000300)=""/25, 0x19}], 0x8, &(0x7f0000000900)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000003c0)={'veth1_to_bond\x00', &(0x7f0000000340)=@ethtool_pauseparam={0x13, 0x7f, 0x4, 0x9}}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@mcast2={0xff, 0x5}, 0x0, 0x0, 0x1, 0x3}, 0x20) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000240), 0x208e24b) 3.244712771s ago: executing program 2 (id=2821): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES8=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) chdir(&(0x7f0000000100)='./file0\x00') open(&(0x7f0000000080)='./file2\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket(0x11, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f000000a400)={0x2020, 0x0, 0x0}, 0x2028) pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000040)="c6", 0x1}], 0x1, 0x0, 0x0) syz_fuse_handle_req(r3, &(0x7f0000008400)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000, 0x0, 0x0, 0x0, 0x800}}}, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r3, &(0x7f0000000340)={0x50, 0x0, r4}, 0x50) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x0) ioctl$FIBMAP(r5, 0x401070c9, &(0x7f0000000180)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000580)={'veth1_virt_wifi\x00'}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="24000000040801024000000a00050003e3090f39e8"], 0x24}}, 0x0) 2.288524123s ago: executing program 3 (id=2822): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) 2.239515827s ago: executing program 0 (id=2823): syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r0 = syz_io_uring_setup(0x10e, &(0x7f0000000140), &(0x7f0000000340)=0x0, &(0x7f00000004c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x9}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r3, &(0x7f0000000280)=""/239, 0xef) 2.215355165s ago: executing program 3 (id=2824): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x48, 0x0, 0x0, 0x0, 0xffffffffffffff37, 0x0, 0x8, 0x0, 0x0}}, 0x10) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000d00)={r1}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xffe4, 0xfffffffffffffda0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x940e, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', r3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r4, &(0x7f0000000100)="79a486686f", &(0x7f00000009c0)=""/132}, 0x20) 2.167678816s ago: executing program 3 (id=2825): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000400)='./bus\x00', 0x800, &(0x7f0000000840)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRES64], 0x1, 0x36e, &(0x7f0000000880)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x4, 0x0, 0x0, 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9, @void, @value}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000380)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x44}}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x0, &(0x7f0000000200)=0x4) sched_setscheduler(0x0, 0x1, 0x0) getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000540)={0x0, {0x2, 0x4e21, @loopback}, {0x2, 0x4e24, @multicast2}, {0x2, 0x4e23, @remote}, 0x1b8, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000080)='batadv0\x00', 0x0, 0x81, 0x5e9e}) sched_setaffinity(0x0, 0x5a, &(0x7f0000000100)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000005c0)=@gettaction={0x50, 0x32, 0x0, 0x0, 0x25dfdbfe, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc}]}, 0x50}}, 0x0) getsockopt$inet_buf(r0, 0x0, 0x11, &(0x7f0000000a00)=""/200, &(0x7f0000000000)=0xc8) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f00000006c0)=""/74, 0x4a}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/144, 0x90}, {&(0x7f0000000300)=""/25, 0x19}], 0x8, &(0x7f0000000900)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000003c0)={'veth1_to_bond\x00', &(0x7f0000000340)=@ethtool_pauseparam={0x13, 0x7f, 0x4, 0x9}}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@mcast2={0xff, 0x5}, 0x0, 0x0, 0x1, 0x3}, 0x20) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r5, 0x0) 2.063355362s ago: executing program 2 (id=2826): socket$inet(0x2, 0x4000000000000001, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(0xffffffffffffffff, 0xc080661a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) socket(0x10, 0x2, 0x0) r4 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0xb, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r4, 0xc2604110, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) r5 = openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000140), 0x12) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000800)='./file1\x00', 0x402, &(0x7f00000003c0)=ANY=[], 0x1, 0x271, &(0x7f0000000840)="$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") 1.3348573s ago: executing program 3 (id=2828): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xba98575a95aeb710) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) write$cgroup_devices(r2, 0x0, 0xffdd) 1.333501501s ago: executing program 1 (id=2829): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r0}, 0x38) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, &(0x7f0000000080)=@udp}, 0x20) syz_emit_ethernet(0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1.22513361s ago: executing program 2 (id=2830): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x4a, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd600a843500082f00fe8000000000000000000000000000bbfe8000000000000000000000000000aa000022eb"], 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="034886dd090328fdb100300000006000000001002f0081e949b93897bc3b0000000000007d01ff020000000000000000000000000001"], 0xfdef) 1.052841953s ago: executing program 1 (id=2831): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r2, &(0x7f0000000040), 0x400000000000284, 0x2b, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 761.219809ms ago: executing program 3 (id=2832): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$key(0xf, 0x3, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101801) ioctl$USBDEVFS_CLEAR_HALT(r4, 0x80045515, 0x0) 726.049621ms ago: executing program 2 (id=2833): r0 = openat$dsp(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_io_uring_setup(0x4169, 0x0, &(0x7f0000000480), &(0x7f0000000000)=0x0) syz_io_uring_setup(0xa94, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f00000005c0)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r1, 0x48e9, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000016c0)={0x1, &(0x7f0000001680)=[{0x6}]}) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x6) 0s ago: executing program 1 (id=2834): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup, 0x11, 0x2000000, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) kernel console output (not intermixed with test programs): team0 (unregistering): Port device team_slave_0 removed [ 971.864197][T17684] loop0: detected capacity change from 0 to 512 [ 972.131035][T17684] EXT4-fs (loop0): Test dummy encryption mode enabled [ 972.163117][T17684] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #12: comm syz.0.2259: corrupted in-inode xattr: invalid ea_ino [ 972.192619][T17684] EXT4-fs error (device loop0): ext4_orphan_get:1393: comm syz.0.2259: couldn't read orphan inode 12 (err -117) [ 972.225840][T17684] EXT4-fs (loop0): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 972.347142][T17585] hsr_slave_0: entered promiscuous mode [ 972.354608][T17585] hsr_slave_1: entered promiscuous mode [ 972.364903][T17585] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 972.392762][T17585] Cannot create hsr debugfs directory [ 972.612154][T17696] loop3: detected capacity change from 0 to 16 [ 972.645528][T17696] erofs: (device loop3): mounted with root inode @ nid 36. [ 972.660807][T17696] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 972.674151][T17696] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -35 in[64, 4032] out[1851] [ 972.685183][T17696] erofs: (device loop3): z_erofs_read_folio: read error -117 @ 43 of nid 36 [ 972.699386][T17696] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 972.710261][T17696] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -35 in[64, 4032] out[1851] [ 972.721253][T17696] erofs: (device loop3): z_erofs_read_folio: read error -117 @ 43 of nid 36 [ 972.740343][T17696] input: syz0 as /devices/virtual/input/input106 [ 972.760620][T15994] Bluetooth: hci0: command tx timeout [ 973.437725][T15983] EXT4-fs (loop0): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 974.033199][T17585] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 974.062477][T17712] kvm: pic: non byte write [ 974.072221][T17585] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 974.092030][T17712] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3832186367 (7664372734 ns) > initial count (4194304 ns). Using initial count to start timer. [ 974.111722][T17585] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 974.161877][T17585] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 974.312267][T17585] 8021q: adding VLAN 0 to HW filter on device bond0 [ 974.350836][T17585] 8021q: adding VLAN 0 to HW filter on device team0 [ 974.365746][ T5930] bridge0: port 1(bridge_slave_0) entered blocking state [ 974.372944][ T5930] bridge0: port 1(bridge_slave_0) entered forwarding state [ 974.457766][T17741] loop4: detected capacity change from 0 to 16 [ 974.475690][T17741] erofs: (device loop4): mounted with root inode @ nid 36. [ 974.489968][T17741] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 974.573065][T17741] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -35 in[64, 4032] out[1851] [ 974.584162][T17741] erofs: (device loop4): z_erofs_read_folio: read error -117 @ 43 of nid 36 [ 974.593473][T17743] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 974.604292][T17743] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -35 in[64, 4032] out[1851] [ 974.615800][T17743] erofs: (device loop4): z_erofs_read_folio: read error -117 @ 43 of nid 36 [ 974.637650][T17741] input: syz0 as /devices/virtual/input/input107 [ 974.780349][T15994] Bluetooth: hci0: command tx timeout [ 974.922333][ T5930] bridge0: port 2(bridge_slave_1) entered blocking state [ 974.929671][ T5930] bridge0: port 2(bridge_slave_1) entered forwarding state [ 975.492895][T17585] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 975.640972][T17585] veth0_vlan: entered promiscuous mode [ 975.702269][T17585] veth1_vlan: entered promiscuous mode [ 975.834790][T17585] veth0_macvtap: entered promiscuous mode [ 975.871169][T17585] veth1_macvtap: entered promiscuous mode [ 975.905758][T17585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 975.983790][T17788] loop2: detected capacity change from 0 to 512 [ 975.985137][T17585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 976.024592][T17585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 976.051484][T17585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 976.075449][T17788] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 976.089198][T17585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 976.101193][T17788] System zones: 0-2, 18-18, 34-34 [ 976.108032][T17585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 976.126476][T17788] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2284: bg 0: block 248: padding at end of block bitmap is not set [ 976.163330][T17585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 976.188355][T17788] Quota error (device loop2): write_blk: dquota write failed [ 976.197367][T17585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 976.210094][T17788] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 976.220308][T17788] EXT4-fs error (device loop2): ext4_acquire_dquot:6879: comm syz.2.2284: Failed to acquire dquot type 1 [ 976.233893][T17585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 976.244887][T17585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 976.256093][T17585] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 976.272306][T17788] EXT4-fs (loop2): 1 truncate cleaned up [ 976.281911][T17788] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 976.316812][T17585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 976.327589][T17788] ext4 filesystem being mounted at /11/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 976.348960][T17585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 976.375221][T17585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 976.429297][T17585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 976.463414][T17585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 976.499375][T17585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 976.524300][T17585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 976.592087][T17806] loop3: detected capacity change from 0 to 16 [ 976.603067][T17806] erofs: (device loop3): mounted with root inode @ nid 36. [ 976.616017][T17806] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 976.627638][T17806] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -35 in[64, 4032] out[1851] [ 976.638662][T17806] erofs: (device loop3): z_erofs_read_folio: read error -117 @ 43 of nid 36 [ 976.652331][T17806] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 976.663145][T17806] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -35 in[64, 4032] out[1851] [ 976.674140][T17806] erofs: (device loop3): z_erofs_read_folio: read error -117 @ 43 of nid 36 [ 976.692294][T17806] input: syz0 as /devices/virtual/input/input108 [ 976.826763][T17585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 977.036360][T17585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 977.201615][T17585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 977.240396][T17585] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 977.262070][T17585] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 977.309579][T17585] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 977.318421][T17585] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 977.362896][T17585] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 977.626452][ T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 977.656034][ T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 977.690378][T17383] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 977.731532][T15153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 977.741950][T15153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 978.038676][T17800] loop0: detected capacity change from 0 to 40427 [ 978.046410][T17800] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 978.075843][T17800] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 978.165421][T17800] F2FS-fs (loop0): Found nat_bits in checkpoint [ 978.268799][T17800] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 978.290009][T17800] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 978.333322][T17800] syz.0.2285: attempt to access beyond end of device [ 978.333322][T17800] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 978.350219][ T46] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 978.411729][T15983] syz-executor: attempt to access beyond end of device [ 978.411729][T15983] loop0: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 978.446325][T15983] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 978.509861][ T46] usb 5-1: Using ep0 maxpacket: 32 [ 978.530339][ T46] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 978.561963][ T46] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 978.599098][ T46] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 978.612568][ T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 978.635944][ T46] usb 5-1: config 0 descriptor?? [ 978.661412][ T46] hub 5-1:0.0: USB hub found [ 978.840175][T17869] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2299'. [ 978.893634][ T46] hub 5-1:0.0: 1 port detected [ 979.599295][T17879] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2302'. [ 979.608530][T17879] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2302'. [ 979.692516][ T5280] hub 5-1:0.0: hub_ext_port_status failed (err = -71) [ 979.704916][ T5280] usb 5-1: USB disconnect, device number 24 [ 979.711181][T12133] usb 5-1: Failed to suspend device, error -19 [ 979.749479][ T5314] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 979.810286][T17885] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2305'. [ 980.154720][T17886] loop3: detected capacity change from 0 to 1024 [ 980.168803][ T5314] usb 1-1: Using ep0 maxpacket: 16 [ 980.176268][ T5314] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 980.188536][ T5314] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 980.202952][ T5314] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 980.219770][ T5314] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 980.230250][T17886] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 980.240051][ T5314] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 980.275128][T17886] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 980.299368][ T5314] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 980.312543][ T5314] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 980.321323][ T5314] usb 1-1: Manufacturer: syz [ 980.327722][ T5314] usb 1-1: config 0 descriptor?? [ 980.423755][T17886] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 980.437439][T17886] EXT4-fs error (device loop3): ext4_ext_check_inode:524: inode #3: comm syz.3.2304: pblk 82 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 980.474466][T17886] EXT4-fs (loop3): no journal found [ 980.485007][T17886] EXT4-fs (loop3): can't get journal size [ 980.562626][T17886] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 980.673354][T17279] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 980.694190][ T5314] rc_core: IR keymap rc-hauppauge not found [ 980.718630][ T5314] Registered IR keymap rc-empty [ 980.749643][ T5314] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 980.832481][ T5314] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 980.966269][ T5314] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 981.030280][ T5314] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input109 [ 981.092989][ T5314] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 981.183940][ T5314] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 981.230963][ T5314] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 981.729768][ T5314] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 981.749760][ T5314] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 981.769524][ T5314] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 981.809802][ T5314] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 981.854812][ T5314] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 981.901803][ T5314] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 981.940692][ T5314] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 981.993981][ T5314] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 982.030474][ T5314] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 982.069591][ T5314] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 982.113231][ T5314] usb 1-1: USB disconnect, device number 23 [ 982.323163][T17922] loop4: detected capacity change from 0 to 512 [ 982.364702][T17922] ext4: Bad value for 'max_batch_time' [ 982.672694][T17926] loop4: detected capacity change from 0 to 16 [ 982.686341][T17926] erofs: (device loop4): mounted with root inode @ nid 36. [ 982.763286][T15994] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 0] out[9000] [ 982.778929][T17926] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 982.790051][T17926] erofs: (device loop4): z_erofs_read_folio: read error -117 @ 0 of nid 89 [ 983.096815][T17901] loop3: detected capacity change from 0 to 40427 [ 983.128383][T17928] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2318'. [ 983.193362][T17901] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 983.202504][T17901] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 983.358853][T17940] loop2: detected capacity change from 0 to 128 [ 983.367354][T17901] F2FS-fs (loop3): Found nat_bits in checkpoint [ 983.516457][T17901] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 983.526392][T17901] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 983.591986][T17945] syzkaller0: entered promiscuous mode [ 983.598187][T17945] syzkaller0: entered allmulticast mode [ 984.114663][T17279] syz-executor: attempt to access beyond end of device [ 984.114663][T17279] loop3: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 984.132310][T17279] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 984.870651][T17963] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2327'. [ 985.236248][T17972] loop0: detected capacity change from 0 to 16 [ 985.382687][T17972] erofs: (device loop0): mounted with root inode @ nid 36. [ 985.397042][T17972] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 985.415464][T17972] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -35 in[64, 4032] out[1851] [ 985.427456][T17972] erofs: (device loop0): z_erofs_read_folio: read error -117 @ 43 of nid 36 [ 985.442206][T17972] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 985.452985][T17972] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -35 in[64, 4032] out[1851] [ 985.463985][T17972] erofs: (device loop0): z_erofs_read_folio: read error -117 @ 43 of nid 36 [ 985.486190][T17972] input: syz0 as /devices/virtual/input/input110 [ 985.808817][T17975] loop4: detected capacity change from 0 to 512 [ 985.867270][T17975] ext4: Bad value for 'max_batch_time' [ 986.000330][T17979] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2331'. [ 986.012085][T17979] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2331'. [ 986.093597][T17980] loop4: detected capacity change from 0 to 16 [ 986.553945][T17980] erofs: (device loop4): mounted with root inode @ nid 36. [ 986.567153][T15994] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 0] out[9000] [ 986.578732][T17977] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 986.591250][T17977] erofs: (device loop4): z_erofs_read_folio: read error -117 @ 0 of nid 89 [ 986.687507][T17986] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2332'. [ 986.700406][T17986] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2332'. [ 986.901737][T17988] syzkaller0: entered promiscuous mode [ 986.917674][T17988] syzkaller0: entered allmulticast mode [ 987.532079][T18008] bridge0: port 3(vlan2) entered blocking state [ 987.589688][T18008] bridge0: port 3(vlan2) entered disabled state [ 987.637810][T18008] vlan2: entered allmulticast mode [ 987.648086][T18008] vlan2: left allmulticast mode [ 987.684493][T17982] loop3: detected capacity change from 0 to 40427 [ 987.721918][T17982] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 987.735862][T17982] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 987.783953][T17982] F2FS-fs (loop3): Found nat_bits in checkpoint [ 987.849478][T12133] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 987.900193][T17982] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 987.927748][T17982] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 988.010828][T12133] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 988.056614][T12133] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 31, changing to 7 [ 988.068388][T12133] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 988.086449][T12133] usb 5-1: string descriptor 0 read error: -22 [ 988.511961][T17279] syz-executor: attempt to access beyond end of device [ 988.511961][T17279] loop3: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 988.540938][T12133] usb 5-1: New USB device found, idVendor=2013, idProduct=0251, bcdDevice=e8.6e [ 988.550256][T12133] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 988.556939][T17279] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 988.567991][T12133] usb 5-1: config 0 descriptor?? [ 988.582789][T12133] em28xx 5-1:0.0: New device @ 480 Mbps (2013:0251, interface 0, class 0) [ 988.596556][T12133] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 988.784997][T18002] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 989.256130][T18033] loop3: detected capacity change from 0 to 16 [ 989.282731][T18033] erofs: (device loop3): mounted with root inode @ nid 36. [ 989.295730][T18033] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 989.308594][T18033] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -35 in[64, 4032] out[1851] [ 989.320170][T18033] erofs: (device loop3): z_erofs_read_folio: read error -117 @ 43 of nid 36 [ 989.337609][T18033] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 989.348429][T18033] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -35 in[64, 4032] out[1851] [ 989.359528][T18033] erofs: (device loop3): z_erofs_read_folio: read error -117 @ 43 of nid 36 [ 989.378357][T18033] input: syz0 as /devices/virtual/input/input111 [ 989.784749][T12133] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 989.799831][T12133] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 989.824327][T12133] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 989.832157][T12133] em28xx 5-1:0.0: No AC97 audio processor [ 989.882603][T12133] usb 5-1: USB disconnect, device number 25 [ 989.889039][T12133] em28xx 5-1:0.0: Disconnecting em28xx [ 989.896492][T12133] em28xx 5-1:0.0: Freeing device [ 989.920369][T18025] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2344'. [ 990.122355][T12087] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 990.140787][T12087] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 990.156383][T12087] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 990.188806][T12087] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 990.235268][T12087] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 990.247813][T18053] loop2: detected capacity change from 0 to 512 [ 990.258178][T12087] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 990.274152][T12087] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 990.350852][T18053] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 990.358931][T18053] System zones: 0-2, 18-18, 34-34 [ 990.365250][T18052] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 990.375836][T12087] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 990.385394][T18052] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 990.394799][T12087] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 990.407007][T18053] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2352: bg 0: block 248: padding at end of block bitmap is not set [ 990.424786][T12087] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 990.432736][T12087] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 990.445224][T18053] Quota error (device loop2): write_blk: dquota write failed [ 990.453185][T18053] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 990.453295][T12087] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 990.463978][T18053] EXT4-fs error (device loop2): ext4_acquire_dquot:6879: comm syz.2.2352: Failed to acquire dquot type 1 [ 990.473583][T12087] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 990.489331][T12087] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 990.490532][T18053] EXT4-fs (loop2): 1 truncate cleaned up [ 990.497136][T12087] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 990.511406][T12087] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 990.513002][T18053] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 990.518893][T12087] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 990.533662][T18053] ext4 filesystem being mounted at /29/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 990.539615][T12087] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 990.557765][T12087] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 990.565279][T12087] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 990.575240][T12087] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 990.582832][T12087] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 990.592645][T12087] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 990.600158][T12087] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 990.607819][T12087] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 990.623072][T12087] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 990.631158][T12087] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 990.638621][T12087] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 990.650343][T12087] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 990.657821][T12087] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 990.667213][T12087] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 990.675681][T12087] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 990.684871][T12087] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 990.693230][T12087] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 990.702564][T12087] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 990.710563][T12087] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 990.718044][T12087] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 990.725611][T12087] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 990.734022][T12087] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 990.741513][T12087] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 990.750310][T12087] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 990.757798][T12087] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 990.765866][T12087] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 990.778030][T12087] hid-generic 0000:0000:0000.0010: hidraw0: HID v0.00 Device [syz0] on syz0 [ 991.268890][T18076] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2360'. [ 991.295206][T17383] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 991.416028][T18085] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 991.430176][T18085] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 991.898426][T18082] loop0: detected capacity change from 0 to 1024 [ 991.934657][T18082] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 991.945939][T18082] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 991.981160][T18082] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 992.016339][T18082] EXT4-fs error (device loop0): ext4_ext_check_inode:524: inode #3: comm syz.0.2362: pblk 82 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 992.052569][T18082] EXT4-fs (loop0): no journal found [ 992.058033][T18082] EXT4-fs (loop0): can't get journal size [ 992.107977][T18082] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 992.374220][T18100] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 992.388929][T18100] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 992.703873][T18109] loop4: detected capacity change from 0 to 512 [ 992.754045][T18109] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 992.783809][T18109] System zones: 0-2, 18-18, 34-34 [ 992.795843][T18109] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2373: bg 0: block 248: padding at end of block bitmap is not set [ 992.812076][T18109] Quota error (device loop4): write_blk: dquota write failed [ 992.820417][T18109] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 992.831052][T18109] EXT4-fs error (device loop4): ext4_acquire_dquot:6879: comm syz.4.2373: Failed to acquire dquot type 1 [ 992.858364][T18109] EXT4-fs (loop4): 1 truncate cleaned up [ 992.866191][T18109] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 992.879084][T18109] ext4 filesystem being mounted at /116/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 993.180649][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.213470][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.249326][T15983] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 993.429474][ T29] audit: type=1326 audit(2000000587.880:849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18126 comm="syz.0.2378" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd5a717dff9 code=0x0 [ 993.450788][T18120] syzkaller0: entered promiscuous mode [ 993.473556][T18120] syzkaller0: entered allmulticast mode [ 993.877423][T15996] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 994.068514][T18139] syz.1.2379: attempt to access beyond end of device [ 994.068514][T18139] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 994.099549][T12087] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 994.264536][T12087] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 994.276016][T12087] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 994.287468][T12087] usb 4-1: Product: syz [ 994.293988][T12087] usb 4-1: Manufacturer: syz [ 994.298810][T12087] usb 4-1: SerialNumber: syz [ 994.309102][T12087] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 994.325344][ T938] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 994.825698][T18135] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 994.832369][T18135] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 994.847798][T18135] vhci_hcd vhci_hcd.0: Device attached [ 994.856031][T18164] vhci_hcd: connection closed [ 994.856289][T15153] vhci_hcd: stop threads [ 994.902647][ T5280] usb 4-1: USB disconnect, device number 29 [ 995.380597][T15153] vhci_hcd: release socket [ 995.409041][T15153] vhci_hcd: disconnect device [ 995.419767][T12087] vhci_hcd: vhci_device speed not set [ 995.427592][ T938] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 995.428184][T18170] loop4: detected capacity change from 0 to 512 [ 995.435398][ T938] ath9k_htc: Failed to initialize the device [ 995.448598][ T5280] usb 4-1: ath9k_htc: USB layer deinitialized [ 995.475023][T18170] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 995.484254][T18170] System zones: 0-2, 18-18, 34-34 [ 995.494350][T18170] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2391: bg 0: block 248: padding at end of block bitmap is not set [ 995.510453][T18170] Quota error (device loop4): write_blk: dquota write failed [ 995.520732][T18170] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 995.533300][T18170] EXT4-fs error (device loop4): ext4_acquire_dquot:6879: comm syz.4.2391: Failed to acquire dquot type 1 [ 995.548873][T18170] EXT4-fs (loop4): 1 truncate cleaned up [ 995.557286][T18170] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 995.598947][T18170] ext4 filesystem being mounted at /118/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 996.483125][T18195] loop0: detected capacity change from 0 to 512 [ 996.502931][T18195] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 996.525460][T18195] EXT4-fs (loop0): 1 truncate cleaned up [ 996.532582][T18195] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 996.621378][T15996] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 996.629626][ T5280] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 996.849668][ T5280] usb 4-1: Using ep0 maxpacket: 32 [ 996.856201][ T5280] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 996.864919][ T5280] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 996.873666][ T5280] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 996.883531][ T5280] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 996.896080][ T5280] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 996.905941][ T5280] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 996.920108][ T5280] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 996.930054][ T5280] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 996.942153][ T5280] usb 4-1: config 0 descriptor?? [ 997.164745][ T5280] usblp 4-1:0.0: usblp1: USB Bidirectional printer dev 30 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 997.444876][T15983] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 998.877018][T18236] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 999.079151][T18242] loop0: detected capacity change from 0 to 1024 [ 999.115377][T18242] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1000.114013][T15983] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1000.293276][T18266] loop4: detected capacity change from 0 to 512 [ 1000.312658][T18266] ext4: Bad value for 'max_batch_time' [ 1000.604891][T18280] loop4: detected capacity change from 0 to 16 [ 1000.628864][T18280] erofs: (device loop4): mounted with root inode @ nid 36. [ 1000.724119][T15994] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 0] out[9000] [ 1000.752591][T18280] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 1000.763745][T18280] erofs: (device loop4): z_erofs_read_folio: read error -117 @ 0 of nid 89 [ 1000.804688][ T938] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 1001.109531][ T938] usb 1-1: Using ep0 maxpacket: 16 [ 1001.193995][ T938] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 1001.203183][ T938] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 1001.213271][ T938] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 1001.223372][ T938] usb 1-1: config 1 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1001.248908][ T938] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1001.264964][ T938] usb 1-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 1001.287911][ T938] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1001.309174][T18287] loop4: detected capacity change from 0 to 1024 [ 1001.327762][ T938] ums-sddr09 1-1:1.0: USB Mass Storage device detected [ 1001.338208][T18287] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1001.359706][T18284] loop2: detected capacity change from 0 to 40427 [ 1001.383558][T18284] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 1001.408721][T18284] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 1001.443659][T18284] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1001.503929][T18284] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 1001.511221][T18284] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1001.524845][T18284] syz.2.2424: attempt to access beyond end of device [ 1001.524845][T18284] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1002.450787][T15996] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1002.493513][T17383] syz-executor: attempt to access beyond end of device [ 1002.493513][T17383] loop2: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 1002.512082][T17383] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 1002.617682][T12087] usb 1-1: USB disconnect, device number 24 [ 1003.040377][T18313] loop2: detected capacity change from 0 to 16 [ 1003.058665][T18313] erofs: (device loop2): erofs_read_inode: negative i_size @ nid 36 [ 1003.236446][T18315] loop4: detected capacity change from 0 to 512 [ 1003.255609][T18315] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1003.297188][T18315] EXT4-fs (loop4): 1 truncate cleaned up [ 1003.310074][T18315] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1003.356557][T18321] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1003.365483][T18321] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1004.062606][T18315] syz.4.2430: attempt to access beyond end of device [ 1004.062606][T18315] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1004.379058][T18336] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2434'. [ 1004.475683][T18337] sch_tbf: burst 88 is lower than device veth3 mtu (1514) ! [ 1004.562597][T15996] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1004.787489][T18338] loop0: detected capacity change from 0 to 512 [ 1004.809028][T18338] ext4: Bad value for 'max_batch_time' [ 1004.845166][T18342] loop4: detected capacity change from 0 to 1024 [ 1005.036194][T18345] loop0: detected capacity change from 0 to 16 [ 1005.064563][T18345] erofs: (device loop0): mounted with root inode @ nid 36. [ 1005.159790][ T4626] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 0] out[9000] [ 1005.181793][T18345] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 1005.193483][T18345] erofs: (device loop0): z_erofs_read_folio: read error -117 @ 0 of nid 89 [ 1005.483405][T18342] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1005.499469][ T4626] Bluetooth: hci2: command 0x0406 tx timeout [ 1005.505574][ T4626] Bluetooth: hci6: command 0x0406 tx timeout [ 1005.679131][T18353] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2440'. [ 1006.622246][T15996] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1007.024884][T18366] syzkaller0: entered promiscuous mode [ 1007.029869][T15995] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1007.032342][T18366] syzkaller0: entered allmulticast mode [ 1007.037817][T15995] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1007.049683][ T5280] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 1007.051617][T15995] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1007.119996][T18378] loop0: detected capacity change from 0 to 16 [ 1007.127276][T18378] erofs: (device loop0): erofs_read_inode: negative i_size @ nid 36 [ 1007.234022][ T5280] usb 5-1: Using ep0 maxpacket: 32 [ 1007.246773][ T5280] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1007.268294][T15995] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1007.275900][T15995] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1007.290697][T15995] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1007.307561][T18380] loop2: detected capacity change from 0 to 512 [ 1007.312932][ T5280] usb 5-1: config 0 has no interfaces? [ 1007.327343][T18380] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1007.341792][ T5280] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1007.363162][T18380] EXT4-fs (loop2): 1 truncate cleaned up [ 1007.374146][ T5280] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1007.382755][T18380] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1007.393438][ T5280] usb 5-1: config 0 descriptor?? [ 1007.496546][T18376] chnl_net:caif_netlink_parms(): no params data found [ 1007.547383][T18380] syz.2.2447: attempt to access beyond end of device [ 1007.547383][T18380] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1008.020715][T18391] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2448'. [ 1008.081037][T18392] sch_tbf: burst 88 is lower than device veth5 mtu (1514) ! [ 1008.082336][ T5280] usb 5-1: USB disconnect, device number 26 [ 1008.151134][T18376] bridge0: port 1(bridge_slave_0) entered blocking state [ 1008.163547][T18376] bridge0: port 1(bridge_slave_0) entered disabled state [ 1008.175451][T18376] bridge_slave_0: entered allmulticast mode [ 1008.182570][T18376] bridge_slave_0: entered promiscuous mode [ 1008.182678][T17383] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1008.191405][T18376] bridge0: port 2(bridge_slave_1) entered blocking state [ 1008.204770][T18376] bridge0: port 2(bridge_slave_1) entered disabled state [ 1008.212286][T18376] bridge_slave_1: entered allmulticast mode [ 1008.219289][T18376] bridge_slave_1: entered promiscuous mode [ 1008.297378][T18398] loop0: detected capacity change from 0 to 16 [ 1008.313680][T18398] erofs: (device loop0): mounted with root inode @ nid 36. [ 1008.327898][T18398] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 1008.340931][T18398] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -35 in[64, 4032] out[1851] [ 1008.351963][T18398] erofs: (device loop0): z_erofs_read_folio: read error -117 @ 43 of nid 36 [ 1008.421128][T18399] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 1008.431945][T18399] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -35 in[64, 4032] out[1851] [ 1008.442935][T18399] erofs: (device loop0): z_erofs_read_folio: read error -117 @ 43 of nid 36 [ 1008.462317][T18399] input: syz0 as /devices/virtual/input/input113 [ 1009.010447][T18376] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1009.053760][T18376] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1009.167044][T18376] team0: Port device team_slave_0 added [ 1009.215723][T18376] team0: Port device team_slave_1 added [ 1009.683153][T15994] Bluetooth: hci4: command tx timeout [ 1009.772875][T18376] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1009.830329][T18376] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1010.155328][T18376] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1010.204174][ T5280] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 1010.214628][T18376] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1010.221802][T18376] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1010.248111][T18376] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1010.321412][T18376] hsr_slave_0: entered promiscuous mode [ 1010.337428][T18376] hsr_slave_1: entered promiscuous mode [ 1010.348156][T18376] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1010.358701][T18376] Cannot create hsr debugfs directory [ 1010.388230][T18430] netlink: 'syz.2.2455': attribute type 10 has an invalid length. [ 1010.418136][T18430] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1010.449481][ T5280] usb 5-1: Using ep0 maxpacket: 32 [ 1010.467561][ T5280] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 1010.476278][ T5280] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1010.496310][ T5280] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1010.506494][T18430] team0: Port device bond0 added [ 1010.549677][ T5280] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1010.659461][ T5280] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1010.669228][ T5280] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1010.682627][ T5280] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1010.691879][ T5280] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1010.701494][ T5280] usb 5-1: config 0 descriptor?? [ 1011.302019][T18376] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1011.547950][T18376] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1011.697306][T18376] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1011.734516][T15994] Bluetooth: hci4: command tx timeout [ 1012.017683][T18376] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1012.179384][T18376] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1012.199318][T18376] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1012.257821][T18376] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1012.274437][T18376] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1012.511494][T18376] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1012.531668][T18376] 8021q: adding VLAN 0 to HW filter on device team0 [ 1012.553730][ T5930] bridge0: port 1(bridge_slave_0) entered blocking state [ 1012.560937][ T5930] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1012.597087][ T5930] bridge0: port 2(bridge_slave_1) entered blocking state [ 1012.604225][ T5930] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1012.894419][T18460] loop0: detected capacity change from 0 to 1024 [ 1013.388948][T18460] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1013.506339][T18376] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1013.573563][T18376] veth0_vlan: entered promiscuous mode [ 1013.590086][T18376] veth1_vlan: entered promiscuous mode [ 1014.346045][T15994] Bluetooth: hci4: command tx timeout [ 1014.535745][T15983] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1014.556144][T18376] veth0_macvtap: entered promiscuous mode [ 1014.568541][T18376] veth1_macvtap: entered promiscuous mode [ 1014.583049][T18376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1014.605842][T18376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1014.632072][T18376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1014.663655][T18376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1014.676385][T18376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1014.687211][T18376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1014.699621][T18376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1014.711063][T18376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1014.721697][T18376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1014.732580][T18376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1014.742998][T18376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1014.755659][T18376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1014.772932][T18376] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1014.831723][T18376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1014.845178][T18376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1014.856806][T18376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1014.870883][T18376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1014.891355][T18376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1014.903690][T18376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1014.923678][T12087] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 1014.956057][T18376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1015.003452][T18376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1015.050117][T18376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1015.094109][T18376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1015.104041][T18376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1015.114650][T18376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1015.127356][T18376] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1015.141280][T18376] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1015.146582][T12087] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1015.150148][T18376] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1015.150183][T18376] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1015.150212][T18376] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1015.194030][T12087] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1015.211354][T12087] usb 1-1: Product: syz [ 1015.216015][T12087] usb 1-1: Manufacturer: syz [ 1015.237600][ T1059] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1015.297758][T12087] usb 1-1: SerialNumber: syz [ 1015.321017][ T1059] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1015.332663][T12087] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1015.348355][T15153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1015.367436][T15153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1015.382059][ T5314] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1015.685567][T18493] netlink: 'syz.1.2472': attribute type 10 has an invalid length. [ 1015.724327][T18493] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1015.744786][T18493] team0: Port device bond0 added [ 1016.023179][ T46] usb 1-1: USB disconnect, device number 25 [ 1016.369716][T15994] Bluetooth: hci4: command tx timeout [ 1016.408369][ T29] audit: type=1326 audit(2000000610.870:850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18500 comm="syz.3.2475" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8506b7dff9 code=0x0 [ 1016.482771][T18503] loop0: detected capacity change from 0 to 7 [ 1016.489812][T18503] Dev loop0: unable to read RDB block 7 [ 1016.495494][T18503] loop0: unable to read partition table [ 1016.501445][T18503] loop0: partition table beyond EOD, truncated [ 1016.507637][T18503] loop_reread_partitions: partition scan of loop0 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 1016.507637][T18503] ) failed (rc=-5) [ 1016.748438][ T5314] usb 1-1: Service connection timeout for: 256 [ 1016.754834][ T5314] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1016.765955][T18509] loop2: detected capacity change from 0 to 128 [ 1016.789511][T18509] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 1017.349809][ T5314] ath9k_htc: Failed to initialize the device [ 1017.636720][T18515] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2481'. [ 1017.646061][T18515] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1017.654064][ T46] usb 1-1: ath9k_htc: USB layer deinitialized [ 1018.489146][T18536] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1018.510581][T18536] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1019.188287][T15995] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1019.196988][T15995] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1019.216340][T15995] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1019.229415][T15995] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1019.238778][T15995] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1019.247201][T15995] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1019.460779][T18550] fuse: Unknown parameter 'group_id00000000000000000000' [ 1021.103328][T18545] chnl_net:caif_netlink_parms(): no params data found [ 1021.162658][T18575] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2498'. [ 1021.269020][T18545] bridge0: port 1(bridge_slave_0) entered blocking state [ 1021.280051][T18582] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1021.288567][T18545] bridge0: port 1(bridge_slave_0) entered disabled state [ 1021.296099][T18545] bridge_slave_0: entered allmulticast mode [ 1021.296099][T18582] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1021.311412][T18545] bridge_slave_0: entered promiscuous mode [ 1021.415827][T18545] bridge0: port 2(bridge_slave_1) entered blocking state [ 1021.444749][T18545] bridge0: port 2(bridge_slave_1) entered disabled state [ 1021.466324][T18545] bridge_slave_1: entered allmulticast mode [ 1021.473287][T18545] bridge_slave_1: entered promiscuous mode [ 1021.661941][T18545] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1021.675803][T18545] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1021.701980][T18545] team0: Port device team_slave_0 added [ 1021.713126][T18545] team0: Port device team_slave_1 added [ 1021.746096][T18545] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1021.757089][T18545] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1021.791255][T18545] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1021.805388][T18545] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1021.818239][T18545] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1021.860475][T18545] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1022.039071][T18598] loop2: detected capacity change from 0 to 128 [ 1022.129520][T18598] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 1022.294269][T15995] Bluetooth: hci5: command tx timeout [ 1022.538307][T18545] hsr_slave_0: entered promiscuous mode [ 1022.540603][T18602] loop0: detected capacity change from 0 to 128 [ 1022.553663][T18545] hsr_slave_1: entered promiscuous mode [ 1022.588464][T18545] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1022.597806][T18545] Cannot create hsr debugfs directory [ 1023.307353][T18545] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1023.703828][T18545] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1024.448893][T15995] Bluetooth: hci5: command tx timeout [ 1024.493308][T18545] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1024.795869][T18545] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1024.925159][T18640] loop2: detected capacity change from 0 to 128 [ 1024.977279][T18640] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 1025.404828][T18545] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1025.414179][T18545] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1025.425127][T18545] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1025.437357][T18545] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1025.498353][T18545] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1025.514327][T18545] 8021q: adding VLAN 0 to HW filter on device team0 [ 1025.527946][ T5930] bridge0: port 1(bridge_slave_0) entered blocking state [ 1025.535112][ T5930] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1025.552395][ T66] bridge0: port 2(bridge_slave_1) entered blocking state [ 1025.559586][ T66] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1025.793289][T18545] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1026.503765][T18545] veth0_vlan: entered promiscuous mode [ 1026.515831][T18545] veth1_vlan: entered promiscuous mode [ 1026.539500][T15995] Bluetooth: hci5: command tx timeout [ 1026.543412][T18545] veth0_macvtap: entered promiscuous mode [ 1026.553983][T18545] veth1_macvtap: entered promiscuous mode [ 1026.613029][T18545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1026.635255][T18545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1026.653717][T18545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1026.665338][T18545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1026.676741][T18654] loop0: detected capacity change from 0 to 40427 [ 1026.686831][T18545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1026.700327][T18545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1026.713458][T18545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1026.724383][T18545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1026.734731][T18654] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 1026.742905][T18545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1026.753497][T18654] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 1026.764144][T18545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1026.795838][T18545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1026.807417][T18545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1026.818885][T18545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1026.832505][T18545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1026.867715][T18545] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1027.047006][T18674] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1027.115802][T18654] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1027.171349][T18674] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1027.171939][T18545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1027.190228][T18545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1027.200964][T18545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1027.211583][T18545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1027.221437][T18545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1027.229097][T18674] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1027.232144][T18545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1027.250502][T18545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1027.260977][T18545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1027.273602][T18545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1027.284105][T18545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1027.294034][T18545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1027.305166][T18545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1027.305802][T18654] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 1027.315036][T18545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1027.315057][T18545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1027.316258][T18545] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1027.326370][T18674] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1027.333813][T18654] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1027.367215][T18545] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1027.370396][T18674] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1027.376426][T18545] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1027.395050][T18545] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1027.403831][T18545] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1027.473107][ T2921] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1027.531446][ T2921] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1027.548598][T18674] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1027.567418][ T2921] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1027.579512][ T2921] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1027.957648][T15983] syz-executor: attempt to access beyond end of device [ 1027.957648][T15983] loop0: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 1028.032873][T15983] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 1028.209033][T18687] loop2: detected capacity change from 0 to 128 [ 1028.328067][T18687] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 1028.641626][T15995] Bluetooth: hci5: command tx timeout [ 1028.751884][T18692] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2532'. [ 1030.654091][T18733] tipc: Started in network mode [ 1030.664605][T18733] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 1030.715806][T18733] tipc: Enabled bearer , priority 10 [ 1030.937404][T18737] tipc: Resetting bearer [ 1031.145182][T18737] tipc: Disabling bearer [ 1031.360497][T18742] loop2: detected capacity change from 0 to 16 [ 1031.378728][T18742] erofs: (device loop2): mounted with root inode @ nid 36. [ 1031.391652][T18742] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 1031.407046][T18742] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -35 in[64, 4032] out[1851] [ 1031.418484][T18742] erofs: (device loop2): z_erofs_read_folio: read error -117 @ 43 of nid 36 [ 1031.432422][T18742] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 1031.443241][T18742] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -35 in[64, 4032] out[1851] [ 1031.454269][T18742] erofs: (device loop2): z_erofs_read_folio: read error -117 @ 43 of nid 36 [ 1031.619458][T18742] input: syz0 as /devices/virtual/input/input114 [ 1031.951623][T18744] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2548'. [ 1032.272807][T15994] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1032.284776][T15994] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1032.292717][T15994] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1032.374793][T15994] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1032.401553][T15994] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 1032.408943][T15994] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1032.562634][T18768] loop4: detected capacity change from 0 to 1024 [ 1032.611036][T18768] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1033.290203][T18756] chnl_net:caif_netlink_parms(): no params data found [ 1033.420987][T18545] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1033.649251][T18794] loop4: detected capacity change from 0 to 16 [ 1033.680465][T18794] erofs: (device loop4): mounted with root inode @ nid 36. [ 1033.695336][T18794] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 1033.706987][T18794] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -35 in[64, 4032] out[1851] [ 1033.717981][T18794] erofs: (device loop4): z_erofs_read_folio: read error -117 @ 43 of nid 36 [ 1033.783143][T18715] syz.0.2538 (18715): drop_caches: 1 [ 1033.789682][T18796] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 1033.800871][T18796] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -35 in[64, 4032] out[1851] [ 1033.811894][T18796] erofs: (device loop4): z_erofs_read_folio: read error -117 @ 43 of nid 36 [ 1033.881479][T18796] input: syz0 as /devices/virtual/input/input115 [ 1034.039118][T18756] bridge0: port 1(bridge_slave_0) entered blocking state [ 1034.178143][T18756] bridge0: port 1(bridge_slave_0) entered disabled state [ 1034.188149][T18756] bridge_slave_0: entered allmulticast mode [ 1034.195304][T18756] bridge_slave_0: entered promiscuous mode [ 1034.217347][T18756] bridge0: port 2(bridge_slave_1) entered blocking state [ 1034.247876][T18756] bridge0: port 2(bridge_slave_1) entered disabled state [ 1034.276262][T18756] bridge_slave_1: entered allmulticast mode [ 1034.293427][T18756] bridge_slave_1: entered promiscuous mode [ 1034.295866][T18799] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1034.317187][ T66] bridge_slave_1: left allmulticast mode [ 1034.323645][T18799] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1034.325007][ T66] bridge_slave_1: left promiscuous mode [ 1034.340740][ T66] bridge0: port 2(bridge_slave_1) entered disabled state [ 1034.350006][ T66] bridge_slave_0: left allmulticast mode [ 1034.360295][ T66] bridge_slave_0: left promiscuous mode [ 1034.371198][ T66] bridge0: port 1(bridge_slave_0) entered disabled state [ 1034.449696][T15994] Bluetooth: hci7: command tx timeout [ 1034.615024][ T66] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1034.627954][ T66] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1034.638659][ T66] bond0 (unregistering): Released all slaves [ 1034.673242][T18756] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1034.689112][T18756] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1034.736971][T18815] loop0: detected capacity change from 0 to 1024 [ 1034.747219][T18756] team0: Port device team_slave_0 added [ 1034.758594][T18756] team0: Port device team_slave_1 added [ 1034.780999][T18815] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1035.274258][T18756] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1035.282204][T18756] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1035.340144][T18756] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1035.377975][T18756] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1035.385227][T18756] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1035.413108][T18756] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1035.476463][T18756] hsr_slave_0: entered promiscuous mode [ 1035.488915][T18756] hsr_slave_1: entered promiscuous mode [ 1035.508271][T18756] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1035.516294][T18756] Cannot create hsr debugfs directory [ 1035.530306][ T66] hsr_slave_0: left promiscuous mode [ 1035.536356][ T66] hsr_slave_1: left promiscuous mode [ 1035.553044][ T66] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1035.568192][ T66] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1035.580732][ T66] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1035.588312][ T66] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1035.624349][ T66] veth1_macvtap: left promiscuous mode [ 1035.648169][ T66] veth0_macvtap: left promiscuous mode [ 1035.665833][ T66] veth1_vlan: left promiscuous mode [ 1035.690398][ T66] veth0_vlan: left promiscuous mode [ 1035.708263][T15983] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1036.695711][T18844] loop0: detected capacity change from 0 to 16 [ 1036.712998][T15994] Bluetooth: hci7: command tx timeout [ 1036.785090][T18844] erofs: (device loop0): mounted with root inode @ nid 36. [ 1036.801053][T18844] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 1036.815046][T18844] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -35 in[64, 4032] out[1851] [ 1036.826502][T18844] erofs: (device loop0): z_erofs_read_folio: read error -117 @ 43 of nid 36 [ 1036.897638][T18845] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 1036.908568][T18845] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -35 in[64, 4032] out[1851] [ 1036.919610][T18845] erofs: (device loop0): z_erofs_read_folio: read error -117 @ 43 of nid 36 [ 1036.940449][T18845] input: syz0 as /devices/virtual/input/input116 [ 1037.126552][T18834] syz.4.2575 (18834): drop_caches: 1 [ 1037.247207][ T66] team0 (unregistering): Port device team_slave_1 removed [ 1037.262959][ T66] team0 (unregistering): Port device team_slave_0 removed [ 1037.439563][T12133] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 1037.498823][T18756] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1037.591678][T12133] usb 3-1: Using ep0 maxpacket: 16 [ 1037.600998][T12133] usb 3-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 1037.617853][T12133] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1037.637692][T12133] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 12336, setting to 1024 [ 1037.643019][T18756] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1037.649259][T12133] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 1037.669934][T12133] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1037.693909][T12133] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1037.703157][T12133] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1037.713936][T12133] usb 3-1: Manufacturer: syz [ 1037.730088][T12133] usb 3-1: config 0 descriptor?? [ 1037.733345][T18867] loop4: detected capacity change from 0 to 1024 [ 1037.767474][T18756] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1037.785991][T18867] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1038.535828][T18756] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1038.603162][T18876] sd 0:0:1:0: PR command failed: 1026 [ 1038.609010][T18876] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1038.617624][T18876] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1038.634103][T18876] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2586'. [ 1038.762452][T18545] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1038.858348][T15995] Bluetooth: hci7: command tx timeout [ 1038.889463][T12133] rc_core: IR keymap rc-hauppauge not found [ 1038.895657][T12133] Registered IR keymap rc-empty [ 1038.901578][T12133] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 1038.954508][T12133] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 1039.152141][T12133] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 1039.165342][T12133] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input117 [ 1039.174376][T18756] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1039.189718][T12133] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 1039.203040][T18756] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1039.214609][T12133] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 1039.250262][T12133] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 1039.375945][T18756] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1039.391466][T12133] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 1039.502447][T18756] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1039.525015][T12133] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 1039.682086][T12133] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 1039.726896][T12133] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 1039.774599][T12133] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 1039.799686][T12133] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 1039.817014][T18756] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1039.824962][T12133] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 1039.847271][T18756] 8021q: adding VLAN 0 to HW filter on device team0 [ 1039.903504][T12133] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 1039.919866][T12133] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1039.931428][T12133] usb 3-1: USB disconnect, device number 24 [ 1039.970752][T15152] bridge0: port 1(bridge_slave_0) entered blocking state [ 1039.977838][T15152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1040.070427][T15153] bridge0: port 2(bridge_slave_1) entered blocking state [ 1040.077598][T15153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1040.127027][T18902] tipc: Started in network mode [ 1040.132714][T18902] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 1040.166511][T18902] tipc: Enabled bearer , priority 10 [ 1040.223354][T18756] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1040.237677][T18756] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1040.303652][T18902] tipc: Resetting bearer [ 1040.359177][T18911] loop4: detected capacity change from 0 to 1024 [ 1040.365924][T18902] tipc: Disabling bearer [ 1040.387469][T18911] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1040.961013][T15995] Bluetooth: hci7: command tx timeout [ 1041.240107][T18545] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1041.476373][T18756] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1042.044992][T18756] veth0_vlan: entered promiscuous mode [ 1042.073910][T18756] veth1_vlan: entered promiscuous mode [ 1042.096179][T18931] sd 0:0:1:0: PR command failed: 1026 [ 1042.101781][T18931] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1042.108788][T18931] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1042.121442][T18931] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2599'. [ 1042.297284][T18756] veth0_macvtap: entered promiscuous mode [ 1042.305788][T18756] veth1_macvtap: entered promiscuous mode [ 1042.322282][T18756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1042.332814][T18756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1042.342713][T18756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1042.353319][T18756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1042.363676][T18756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1042.374636][T18756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1042.384619][T18756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1042.395099][T18756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1042.405023][T18756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1042.415613][T18756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1042.425546][T18756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1042.436370][T18756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1042.446546][T18756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1042.457053][T18756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1042.469513][T18756] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1042.480616][T18756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1042.491165][T18756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1042.501568][T18756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1042.512067][T18756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1042.522259][T18756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1042.532919][T18756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1042.542824][T18756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1042.553294][T18756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1042.563727][T18756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1042.574834][T18756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1042.584943][T18756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1042.595785][T18756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1042.605850][T18756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1042.616637][T18756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1042.627771][T18756] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1042.679785][T18756] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1042.688543][T18756] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1042.697549][T18756] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1042.706791][T18756] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1042.769767][T15995] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 1042.778412][T15995] Bluetooth: hci3: Injecting HCI hardware error event [ 1042.787276][T15995] Bluetooth: hci3: hardware error 0x00 [ 1042.858020][T15152] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1042.868099][T15153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1042.876832][T15153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1042.993357][T18961] netlink: 'syz.4.2609': attribute type 10 has an invalid length. [ 1043.453112][T15152] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1043.585031][T18961] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1043.651976][T18961] team0: Port device bond0 added [ 1043.840284][T18969] loop2: detected capacity change from 0 to 256 [ 1043.847331][T18969] vfat: Unknown parameter 'sh' [ 1045.211986][T15995] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 1045.747584][T18996] loop3: detected capacity change from 0 to 8 [ 1045.765452][T18996] SQUASHFS error: lzo decompression failed, data probably corrupt [ 1045.816504][T18996] SQUASHFS error: Failed to read block 0x91: -5 [ 1045.858331][T18996] SQUASHFS error: Unable to read metadata cache entry [8f] [ 1045.869731][T18996] SQUASHFS error: Unable to read inode 0x11f [ 1046.044023][T19004] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2622'. [ 1046.059726][T16157] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 1046.232053][T16157] usb 1-1: Using ep0 maxpacket: 8 [ 1046.238935][T16157] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1046.256891][T19007] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1046.282819][T16157] usb 1-1: config 16 has 0 interfaces, different from the descriptor's value: 1 [ 1046.381674][T16157] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1046.401530][T19007] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1046.418677][T16157] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1046.658412][T16157] usb 1-1: USB disconnect, device number 26 [ 1047.712672][T19037] netlink: 'syz.0.2635': attribute type 27 has an invalid length. [ 1047.876410][T19037] gre0: left allmulticast mode [ 1047.959302][T19044] loop3: detected capacity change from 0 to 8 [ 1048.477479][T19044] SQUASHFS error: lzo decompression failed, data probably corrupt [ 1048.491649][T19044] SQUASHFS error: Failed to read block 0x91: -5 [ 1048.508305][T19044] SQUASHFS error: Unable to read metadata cache entry [8f] [ 1048.568477][T19044] SQUASHFS error: Unable to read inode 0x11f [ 1048.575220][ T5245] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 1048.719139][T19037] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1048.756806][ T5245] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1048.781210][ T5245] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1048.803333][T19037] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1048.896226][ T5245] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1048.905509][ T5245] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1048.914278][ T5245] usb 1-1: Product: syz [ 1048.918472][ T5245] usb 1-1: Manufacturer: syz [ 1048.923624][ T5245] usb 1-1: SerialNumber: syz [ 1048.999532][ T5245] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 1049.058812][T19065] use of bytesused == 0 is deprecated and will be removed in the future, [ 1049.084801][T19065] use the actual size instead. [ 1049.232348][T19037] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1049.265112][T19037] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1049.284012][T19037] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1049.312586][T19037] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1049.481914][T19039] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1049.530839][T19039] 8021q: adding VLAN 0 to HW filter on device team0 [ 1049.580975][T19039] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1049.719633][T19058] usb 1-1: USB disconnect, device number 27 [ 1050.542290][T15995] Bluetooth: hci2: unexpected event for opcode 0x1405 [ 1050.960919][T19103] loop4: detected capacity change from 0 to 16 [ 1050.974078][T19103] erofs: (device loop4): mounted with root inode @ nid 36. [ 1050.982902][T19103] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 1050.994485][T19103] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -35 in[64, 4032] out[1851] [ 1051.006531][T19103] erofs: (device loop4): z_erofs_read_folio: read error -117 @ 43 of nid 36 [ 1051.016667][T19103] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 1051.027540][T19103] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -35 in[64, 4032] out[1851] [ 1051.038773][T19103] erofs: (device loop4): z_erofs_read_folio: read error -117 @ 43 of nid 36 [ 1051.050369][T19103] input: syz0 as /devices/virtual/input/input118 [ 1051.067074][T19105] loop2: detected capacity change from 0 to 8 [ 1051.087231][T19105] SQUASHFS error: lzo decompression failed, data probably corrupt [ 1051.096223][T19105] SQUASHFS error: Failed to read block 0x91: -5 [ 1051.175060][T19105] SQUASHFS error: Unable to read metadata cache entry [8f] [ 1051.227635][T19105] SQUASHFS error: Unable to read inode 0x11f [ 1051.259029][T19111] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1051.314829][T19111] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1051.966014][T19125] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2656'. [ 1052.949441][T12142] usb 1-1: new full-speed USB device number 28 using dummy_hcd [ 1053.157566][T19153] loop4: detected capacity change from 0 to 512 [ 1053.165006][T19153] ext4: Bad value for 'max_batch_time' [ 1053.245026][T12142] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1053.291042][T12142] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 1053.312474][T12142] usb 1-1: can't read configurations, error -71 [ 1053.599346][T19163] loop4: detected capacity change from 0 to 16 [ 1053.637657][T19163] erofs: (device loop4): mounted with root inode @ nid 36. [ 1053.683839][T15995] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 0] out[9000] [ 1053.695374][T19163] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 1053.752500][T19163] erofs: (device loop4): z_erofs_read_folio: read error -117 @ 0 of nid 89 [ 1054.188737][T19180] loop0: detected capacity change from 0 to 1024 [ 1054.670684][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.678125][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.729920][T19180] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1054.871470][T19190] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1054.881963][T19190] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1055.222662][T19200] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2682'. [ 1055.348985][T19204] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1055.376610][T19204] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1056.068447][T19215] kvm: pic: non byte write [ 1056.082358][T19215] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3832186367 (7664372734 ns) > initial count (4194304 ns). Using initial count to start timer. [ 1057.347834][T15983] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1057.539485][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1058.132252][T19233] loop4: detected capacity change from 0 to 40427 [ 1058.142815][T19233] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 1058.164143][T19233] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1058.183174][T19233] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1058.235090][T19233] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 1058.242612][T19233] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1058.256819][T19233] syz.4.2692: attempt to access beyond end of device [ 1058.256819][T19233] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1058.386308][ T29] audit: type=1800 audit(2000000652.850:851): pid=19230 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2689" name="/" dev="fuse" ino=0 res=0 errno=0 [ 1058.808268][T19242] netlink: 'syz.3.2694': attribute type 27 has an invalid length. [ 1058.870069][T18545] syz-executor: attempt to access beyond end of device [ 1058.870069][T18545] loop4: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 1058.888485][T18545] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 1058.916031][T19248] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1058.950291][T19248] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1059.053917][T19242] bridge0: port 2(bridge_slave_1) entered disabled state [ 1059.061490][T19242] bridge0: port 1(bridge_slave_0) entered disabled state [ 1059.209863][T19242] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1059.224022][T19242] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1059.328326][T19260] loop0: detected capacity change from 0 to 1024 [ 1059.385250][T19260] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1059.491717][T19242] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1059.508793][T19242] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1059.527804][T19242] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1059.541735][T19242] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1059.691320][T19245] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2695'. [ 1060.389971][T19275] sd 0:0:1:0: PR command failed: 1026 [ 1060.396125][T19275] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1060.589771][T19275] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1060.663950][T19275] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2703'. [ 1060.872569][T19286] netdevsim netdevsim3 netdevsim2: entered promiscuous mode [ 1060.880985][T19286] netdevsim netdevsim3 netdevsim3: entered promiscuous mode [ 1060.888985][T19286] hsr1: Slave A (netdevsim2) is not up; please bring it up to get a fully working HSR network [ 1060.919520][T19286] hsr1: Slave B (netdevsim3) is not up; please bring it up to get a fully working HSR network [ 1060.933965][T15983] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1061.092652][T19298] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2712'. [ 1061.236976][T19306] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1061.296970][T19306] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1061.470183][T19301] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3832186367 (7664372734 ns) > initial count (4194304 ns). Using initial count to start timer. [ 1061.882718][T19316] sd 0:0:1:0: PR command failed: 1026 [ 1061.888443][T19316] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1061.895443][T19316] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1061.930000][T19316] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2718'. [ 1062.052529][T19319] loop4: detected capacity change from 0 to 1024 [ 1062.069854][T19319] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1062.283355][T19328] netdevsim netdevsim0 netdevsim2: entered promiscuous mode [ 1062.301115][T19328] netdevsim netdevsim0 netdevsim3: entered promiscuous mode [ 1062.321163][T19328] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 1062.341791][T19328] Cannot create hsr debugfs directory [ 1062.347579][T19328] hsr1: Slave A (netdevsim2) is not up; please bring it up to get a fully working HSR network [ 1062.361510][T19328] hsr1: Slave B (netdevsim3) is not up; please bring it up to get a fully working HSR network [ 1062.491512][T19334] loop0: detected capacity change from 0 to 512 [ 1062.498559][T19334] ext4: Bad value for 'max_batch_time' [ 1063.325493][T15994] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1063.333606][T15994] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1063.340949][T15994] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1063.349797][ T29] audit: type=1326 audit(2000000657.800:852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19337 comm="syz.3.2726" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2833b7dff9 code=0x0 [ 1063.371776][T15994] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1063.379270][T15994] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 1063.387237][T15994] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1063.438017][T18545] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1063.502340][T19344] loop0: detected capacity change from 0 to 16 [ 1063.510063][T19344] erofs: (device loop0): mounted with root inode @ nid 36. [ 1063.519922][T15994] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 0] out[9000] [ 1063.531104][T19344] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 1063.542108][T19344] erofs: (device loop0): z_erofs_read_folio: read error -117 @ 0 of nid 89 [ 1063.784168][T19351] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2728'. [ 1063.865432][T19339] chnl_net:caif_netlink_parms(): no params data found [ 1064.102475][T19356] sd 0:0:1:0: PR command failed: 1026 [ 1064.108176][T19356] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1064.115282][T19356] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1064.163133][T19356] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2730'. [ 1064.395352][T19339] bridge0: port 1(bridge_slave_0) entered blocking state [ 1064.402904][T19339] bridge0: port 1(bridge_slave_0) entered disabled state [ 1064.410497][T19339] bridge_slave_0: entered allmulticast mode [ 1064.417391][T19339] bridge_slave_0: entered promiscuous mode [ 1064.449116][T19339] bridge0: port 2(bridge_slave_1) entered blocking state [ 1064.456738][T19339] bridge0: port 2(bridge_slave_1) entered disabled state [ 1064.464765][T19339] bridge_slave_1: entered allmulticast mode [ 1064.474544][T19339] bridge_slave_1: entered promiscuous mode [ 1064.502401][T19339] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1064.515814][T19339] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1064.578415][T19339] team0: Port device team_slave_0 added [ 1064.627693][T19369] syzkaller0: entered promiscuous mode [ 1064.633540][T19369] syzkaller0: entered allmulticast mode [ 1064.646016][T19339] team0: Port device team_slave_1 added [ 1064.663322][T19371] netlink: 'syz.0.2732': attribute type 10 has an invalid length. [ 1064.685872][T15152] syzkaller0: tun_net_xmit 48 [ 1064.804371][T19339] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1064.811802][T19339] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1064.839487][T19339] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1064.854227][T19339] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1064.861581][T19339] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1064.890338][T19339] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1064.955888][T19339] hsr_slave_0: entered promiscuous mode [ 1064.963329][T19339] hsr_slave_1: entered promiscuous mode [ 1064.973929][T19339] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1064.985148][T19339] Cannot create hsr debugfs directory [ 1065.165960][T19339] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1065.251533][T19339] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1065.409488][T15995] Bluetooth: hci8: command tx timeout [ 1065.491252][T19386] fuse: Bad value for 'rootmode' [ 1065.921694][T19339] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1065.990389][T19339] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1066.076905][ T29] audit: type=1326 audit(2000000660.540:853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19389 comm="syz.4.2740" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8d4a17dff9 code=0x0 [ 1066.202425][T19339] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1066.238055][T19339] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1066.249827][T19339] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1066.261489][T19339] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1066.457255][T19397] sd 0:0:1:0: PR command failed: 1026 [ 1066.463855][T19397] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1066.471469][T19397] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1066.539563][T19397] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2742'. [ 1066.738316][T19400] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2743'. [ 1066.817733][T19339] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1066.867722][T19402] syzkaller0: entered promiscuous mode [ 1066.877591][T19402] syzkaller0: entered allmulticast mode [ 1066.886313][T15155] syzkaller0: tun_net_xmit 48 [ 1066.899039][T19339] 8021q: adding VLAN 0 to HW filter on device team0 [ 1066.913819][ T1059] bridge0: port 1(bridge_slave_0) entered blocking state [ 1066.920982][ T1059] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1066.943028][T19402] syzkaller0: create flow: hash 1597566520 index 1 [ 1066.960278][T19401] syzkaller0: delete flow: hash 1597566520 index 1 [ 1067.053988][T19412] loop4: detected capacity change from 0 to 16 [ 1067.071364][T19412] erofs: (device loop4): mounted with root inode @ nid 36. [ 1067.092369][T19412] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 1067.106976][T19412] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -35 in[64, 4032] out[1851] [ 1067.118037][T19412] erofs: (device loop4): z_erofs_read_folio: read error -117 @ 43 of nid 36 [ 1067.133650][T19412] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 1067.144931][T19412] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -35 in[64, 4032] out[1851] [ 1067.156256][T19412] erofs: (device loop4): z_erofs_read_folio: read error -117 @ 43 of nid 36 [ 1067.504653][T15995] Bluetooth: hci8: command tx timeout [ 1067.588538][ T1059] bridge0: port 2(bridge_slave_1) entered blocking state [ 1067.595718][ T1059] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1067.756119][T19339] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1067.831815][T19339] veth0_vlan: entered promiscuous mode [ 1067.850686][T19339] veth1_vlan: entered promiscuous mode [ 1067.881875][T19339] veth0_macvtap: entered promiscuous mode [ 1067.968575][T19339] veth1_macvtap: entered promiscuous mode [ 1068.048490][T19339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1068.061574][T19339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1068.071820][T19339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1068.082668][T19339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1068.092814][T19339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1068.103620][T19339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1068.113724][T19339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1068.128915][T19339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1068.139828][T19339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1068.150621][T19339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1068.161377][T19339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1068.172245][T19339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1068.188452][T19339] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1068.241740][T19430] fuse: Unknown parameter 'use00000000000000000000' [ 1068.271841][T19339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1068.354039][T19339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1068.448602][T19339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1068.546802][T19339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1068.607061][T19339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1068.617853][T19339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1068.627832][T19339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1068.638327][T19339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1068.648453][T19339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1068.662345][T19339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1068.679581][T19339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1068.690107][T19339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1068.697568][T19432] loop0: detected capacity change from 0 to 512 [ 1068.707599][T19339] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1068.736622][T19339] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1068.741193][T19432] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1068.753410][T19339] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1068.775103][T19339] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1068.785361][T19339] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1068.790412][T19436] loop4: detected capacity change from 0 to 128 [ 1068.798172][T19432] EXT4-fs (loop0): 1 truncate cleaned up [ 1068.807029][T19432] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1069.463775][T15152] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1069.483215][T15152] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1069.589604][T15995] Bluetooth: hci8: command tx timeout [ 1069.687574][T19446] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1069.886112][T19444] netdevsim netdevsim4 netdevsim1: entered promiscuous mode [ 1069.893817][T19446] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1069.908338][T19444] netdevsim netdevsim4 netdevsim2: entered promiscuous mode [ 1069.928953][T19444] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 1069.937101][T19444] Cannot create hsr debugfs directory [ 1069.963224][T15152] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1070.003957][T15152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1070.294741][T19454] syzkaller0: entered promiscuous mode [ 1070.300450][T19454] syzkaller0: entered allmulticast mode [ 1070.375542][T19459] loop4: detected capacity change from 0 to 16 [ 1070.501493][T19459] erofs: (device loop4): mounted with root inode @ nid 36. [ 1070.515851][T19459] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 1070.577027][T19459] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -35 in[64, 4032] out[1851] [ 1070.588082][T19459] erofs: (device loop4): z_erofs_read_folio: read error -117 @ 43 of nid 36 [ 1070.597587][T19461] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 1070.608452][T19461] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -35 in[64, 4032] out[1851] [ 1070.620273][T19461] erofs: (device loop4): z_erofs_read_folio: read error -117 @ 43 of nid 36 [ 1070.860743][T15152] syzkaller0: tun_net_xmit 48 [ 1070.884802][T19454] syzkaller0: create flow: hash 1597566520 index 1 [ 1070.893796][T19453] syzkaller0: delete flow: hash 1597566520 index 1 [ 1071.056588][T15983] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1071.352755][T19480] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1071.372866][T19480] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1071.452609][T19486] netlink: 'syz.2.2765': attribute type 10 has an invalid length. [ 1071.543035][T15994] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1071.545274][T19486] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1071.563922][T19486] team0: Port device bond0 added [ 1071.579167][T15994] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1071.586930][T15994] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1071.595254][T15994] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1071.602988][T15994] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 1071.610585][T15994] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1071.652384][T15994] Bluetooth: hci8: command tx timeout [ 1072.229883][T19487] chnl_net:caif_netlink_parms(): no params data found [ 1072.306618][T19506] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1072.349502][ T938] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 1072.367345][T19506] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1072.700065][ T938] usb 1-1: Using ep0 maxpacket: 16 [ 1072.719106][ T938] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1072.746105][ T938] usb 1-1: New USB device found, idVendor=046d, idProduct=0821, bcdDevice=57.47 [ 1072.760514][ T938] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1072.785425][ T938] usb 1-1: Product: syz [ 1072.798603][T19513] syzkaller0: entered promiscuous mode [ 1072.807451][ T938] usb 1-1: Manufacturer: syz [ 1072.815373][T19513] syzkaller0: entered allmulticast mode [ 1072.821184][ T938] usb 1-1: SerialNumber: syz [ 1072.833298][ T938] usb 1-1: config 0 descriptor?? [ 1072.851648][ T1059] syzkaller0: tun_net_xmit 48 [ 1072.981215][T19487] bridge0: port 1(bridge_slave_0) entered blocking state [ 1072.988412][T19487] bridge0: port 1(bridge_slave_0) entered disabled state [ 1072.996070][T19487] bridge_slave_0: entered allmulticast mode [ 1073.003664][T19487] bridge_slave_0: entered promiscuous mode [ 1073.012297][T19487] bridge0: port 2(bridge_slave_1) entered blocking state [ 1073.019601][T19487] bridge0: port 2(bridge_slave_1) entered disabled state [ 1073.026909][T19487] bridge_slave_1: entered allmulticast mode [ 1073.034144][T19487] bridge_slave_1: entered promiscuous mode [ 1073.063662][ T938] usb 1-1: USB disconnect, device number 30 [ 1073.108654][T19522] loop3: detected capacity change from 0 to 512 [ 1073.109197][T19487] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1073.122299][T19522] ext4: Bad value for 'max_batch_time' [ 1073.144108][T19487] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1073.277116][T19487] team0: Port device team_slave_0 added [ 1073.287069][T19487] team0: Port device team_slave_1 added [ 1073.360843][T19526] loop3: detected capacity change from 0 to 16 [ 1073.447913][T19526] erofs: (device loop3): mounted with root inode @ nid 36. [ 1073.482869][T15994] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 0] out[9000] [ 1073.504047][T19526] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 1073.515172][T19526] erofs: (device loop3): z_erofs_read_folio: read error -117 @ 0 of nid 89 [ 1073.650340][T15994] Bluetooth: hci9: command tx timeout [ 1073.840299][T19487] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1073.847358][T19487] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1073.875505][T19487] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1073.887705][T19487] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1073.896573][T19487] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1073.923108][T19487] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1073.971939][T19487] hsr_slave_0: entered promiscuous mode [ 1073.978482][T19487] hsr_slave_1: entered promiscuous mode [ 1073.989977][T19487] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1073.998134][T19487] Cannot create hsr debugfs directory [ 1074.055685][T19531] loop3: detected capacity change from 0 to 256 [ 1074.067911][T19531] vfat: Unknown parameter 'sh' [ 1074.447478][T19487] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1074.772587][T19487] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1074.865872][T19487] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1075.045093][T19487] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1075.245419][T19553] syzkaller0: entered promiscuous mode [ 1075.251487][T19553] syzkaller0: entered allmulticast mode [ 1075.259814][T19487] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1075.281156][ T5426] syzkaller0: tun_net_xmit 48 [ 1075.288556][T19553] syzkaller0: create flow: hash 4173343951 index 1 [ 1075.296757][T19487] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1075.312098][T19552] syzkaller0: delete flow: hash 4173343951 index 1 [ 1075.414547][T19487] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1075.431309][T19487] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1075.542328][T19487] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1075.562523][T19487] 8021q: adding VLAN 0 to HW filter on device team0 [ 1075.572264][ T5426] bridge0: port 1(bridge_slave_0) entered blocking state [ 1075.579420][ T5426] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1075.622060][ T5426] bridge0: port 2(bridge_slave_1) entered blocking state [ 1075.629240][ T5426] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1075.725715][T15995] Bluetooth: hci2: unexpected event for opcode 0x2005 [ 1075.741227][T15995] Bluetooth: hci9: command tx timeout [ 1075.882054][T19487] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1075.923846][T19487] veth0_vlan: entered promiscuous mode [ 1075.936345][T19487] veth1_vlan: entered promiscuous mode [ 1075.974815][T19487] veth0_macvtap: entered promiscuous mode [ 1075.988278][T19487] veth1_macvtap: entered promiscuous mode [ 1076.015679][T19487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1076.033384][T19487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1076.036296][T19569] loop3: detected capacity change from 0 to 8 [ 1076.045554][T19487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1076.061085][T19487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1076.065525][T19569] SQUASHFS error: lzo decompression failed, data probably corrupt [ 1076.079223][T19569] SQUASHFS error: Failed to read block 0x91: -5 [ 1076.082518][T19487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1076.086004][T19569] SQUASHFS error: Unable to read metadata cache entry [8f] [ 1076.096232][ T5314] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 1076.105219][T19569] SQUASHFS error: Unable to read inode 0x11f [ 1076.135282][T19487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1076.160140][T19487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1076.170763][T19487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1076.183849][T19487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1076.194494][T19487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1076.206658][T19487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1076.218457][T19487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1076.229263][T19487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1076.241676][T19487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1076.306904][T19487] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1076.307055][ T5314] usb 1-1: Using ep0 maxpacket: 16 [ 1076.431248][ T5314] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1076.439513][T19487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1076.442299][ T5314] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1076.517320][T19487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1076.534451][T19487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1076.545874][ T5314] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1076.546858][T19487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1076.575830][T19487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1076.590730][T19487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1076.603784][T19487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1076.630271][T19487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1076.643393][T19487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1076.712368][T19487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1076.794225][T19487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1076.819916][T19487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1076.843474][T19487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1076.848053][ T5314] usb 1-1: New USB device found, idVendor=1e7d, idProduct=31ce, bcdDevice= 0.00 [ 1076.855519][T19487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1076.880506][T19487] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1076.894369][T19487] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1076.938741][T19487] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1076.947779][ T5314] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1076.972253][T19487] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1076.977523][ T5314] usb 1-1: config 0 descriptor?? [ 1076.997747][T19487] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1077.105890][T14288] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1077.122290][T14288] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1077.170823][ T2921] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1077.182164][T15995] Bluetooth: hci1: command 0x0406 tx timeout [ 1077.189747][ T2921] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1077.296579][T19586] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2799'. [ 1077.382836][T19588] loop2: detected capacity change from 0 to 16 [ 1077.471621][ T5314] ryos 0003:1E7D:31CE.0011: unexpected long global item [ 1077.801319][ T29] audit: type=1326 audit(2000000672.260:854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19583 comm="syz.3.2798" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2833b7dff9 code=0x0 [ 1077.823265][T15994] Bluetooth: hci9: command tx timeout [ 1077.833200][T19588] erofs: (device loop2): mounted with root inode @ nid 36. [ 1077.844393][T19587] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 1077.855540][T19587] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -35 in[64, 4032] out[1851] [ 1077.866479][T19587] erofs: (device loop2): z_erofs_read_folio: read error -117 @ 43 of nid 36 [ 1077.876167][T19587] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 1077.886917][T19587] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -35 in[64, 4032] out[1851] [ 1077.898505][T19587] erofs: (device loop2): z_erofs_read_folio: read error -117 @ 43 of nid 36 [ 1077.908043][ T5314] ryos 0003:1E7D:31CE.0011: parse failed [ 1077.914169][ T5314] ryos 0003:1E7D:31CE.0011: probe with driver ryos failed with error -22 [ 1077.926813][ T5314] usb 1-1: USB disconnect, device number 31 [ 1078.529884][T19602] netlink: 'syz.3.2803': attribute type 27 has an invalid length. [ 1078.876234][T19602] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1078.884159][T19602] 8021q: adding VLAN 0 to HW filter on device team0 [ 1078.894282][T19602] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1078.911062][T19605] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1078.926573][T19605] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1078.986520][T19611] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2807'. [ 1079.266218][T19623] loop2: detected capacity change from 0 to 16 [ 1079.295986][T19623] erofs: (device loop2): mounted with root inode @ nid 36. [ 1079.312422][T19623] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 1079.342150][T19623] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -35 in[64, 4032] out[1851] [ 1079.353313][T19623] erofs: (device loop2): z_erofs_read_folio: read error -117 @ 43 of nid 36 [ 1079.369514][T19623] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 1079.380491][T19623] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -35 in[64, 4032] out[1851] [ 1079.391499][T19623] erofs: (device loop2): z_erofs_read_folio: read error -117 @ 43 of nid 36 [ 1079.891573][T15994] Bluetooth: hci9: command tx timeout [ 1079.938199][T19629] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2814'. [ 1080.062136][T19637] loop2: detected capacity change from 0 to 8 [ 1080.087767][T19637] SQUASHFS error: lzo decompression failed, data probably corrupt [ 1080.097935][T19637] SQUASHFS error: Failed to read block 0x91: -5 [ 1080.104607][T19637] SQUASHFS error: Unable to read metadata cache entry [8f] [ 1080.112344][T19637] SQUASHFS error: Unable to read inode 0x11f [ 1080.681101][T19645] loop2: detected capacity change from 0 to 128 [ 1081.790007][T19649] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2821'. [ 1081.916922][T19660] loop3: detected capacity change from 0 to 128 [ 1082.080355][T19074] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 1082.309560][T19074] usb 1-1: Using ep0 maxpacket: 8 [ 1082.646753][T19665] loop2: detected capacity change from 0 to 128 [ 1082.654126][T19665] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 1082.670658][T19074] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 1082.701899][T19074] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1082.720264][T19074] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1082.756035][T19074] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1082.799705][T19074] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1082.858623][T19669] syzkaller0: entered promiscuous mode [ 1082.886736][T19669] syzkaller0: entered allmulticast mode [ 1082.916604][ T5426] syzkaller0: tun_net_xmit 48 [ 1082.941845][T19074] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 1082.949478][T19074] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1082.960826][T19074] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1082.972735][T19074] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1082.983999][T19074] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1082.993049][T15995] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1083.005294][T15995] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1083.013984][T15995] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1083.022413][T15995] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1083.029978][T15995] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 1083.037375][T15995] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1083.139559][T19074] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 1083.147037][T19074] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1083.158592][T19074] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1083.170393][T19074] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1083.181589][T19074] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1083.196573][T19074] usb 1-1: string descriptor 0 read error: -22 [ 1083.203555][T19074] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1083.214527][T19074] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1083.399647][ T29] audit: type=1326 audit(2000000677.840:855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19689 comm="syz.2.2833" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9fb117dff9 code=0x0 [ 1083.466930][T19675] chnl_net:caif_netlink_parms(): no params data found [ 1083.513291][T19675] bridge0: port 1(bridge_slave_0) entered blocking state [ 1083.521028][T19675] bridge0: port 1(bridge_slave_0) entered disabled state [ 1083.529467][T19675] bridge_slave_0: entered allmulticast mode [ 1083.604262][T19675] bridge_slave_0: entered promiscuous mode [ 1083.699090][T19675] bridge0: port 2(bridge_slave_1) entered blocking state [ 1083.774165][T19675] bridge0: port 2(bridge_slave_1) entered disabled state [ 1083.874785][T19675] bridge_slave_1: entered allmulticast mode [ 1083.957822][T19675] bridge_slave_1: entered promiscuous mode [ 1083.991259][T19675] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1084.007300][T19675] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1084.044454][T19675] team0: Port device team_slave_0 added [ 1084.058574][T19675] team0: Port device team_slave_1 added [ 1085.200986][T15995] Bluetooth: hci10: command tx timeout [ 1087.269432][T15995] Bluetooth: hci10: command tx timeout [ 1091.225869][T15995] Bluetooth: hci10: command tx timeout [ 1093.309417][T15994] Bluetooth: hci10: command tx timeout [ 1095.769500][T15994] Bluetooth: hci0: command 0x0406 tx timeout [ 1121.119733][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 1121.126097][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 1121.171374][ T30] INFO: task syz.1.2205:17365 blocked for more than 143 seconds. [ 1121.179230][ T30] Not tainted 6.12.0-rc2-next-20241008-syzkaller #0 [ 1121.186453][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1121.200561][ T30] task:syz.1.2205 state:D stack:26352 pid:17365 tgid:17364 ppid:15987 flags:0x00004006 [ 1121.234701][ T30] Call Trace: [ 1121.238042][ T30] [ 1121.309391][ T30] __schedule+0x1895/0x4b30 [ 1121.314061][ T30] ? schedule+0x90/0x320 [ 1121.318336][ T30] ? schedule+0x90/0x320 [ 1121.439385][ T30] ? lock_release+0xbf/0xa30 [ 1121.444049][ T30] ? __pfx___schedule+0x10/0x10 [ 1121.448929][ T30] ? __pfx_lock_release+0x10/0x10 [ 1121.599396][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 1121.605037][ T30] ? mutex_spin_on_owner+0x26c/0x330 [ 1121.749409][ T30] ? schedule+0x90/0x320 [ 1121.753735][ T30] schedule+0x14b/0x320 [ 1121.757911][ T30] schedule_preempt_disabled+0x13/0x30 [ 1121.910444][ T30] __mutex_lock+0x6a7/0xd70 [ 1121.915039][ T30] ? __mutex_lock+0x52a/0xd70 [ 1125.269403][ T30] ? chaoskey_release+0x169/0x2f0 [ 1125.274601][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1125.319398][ T30] ? __pfx___fsnotify_parent+0x10/0x10 [ 1125.325074][ T30] chaoskey_release+0x169/0x2f0 [ 1125.335765][ T30] ? __pfx_chaoskey_release+0x10/0x10 [ 1125.342409][ T30] __fput+0x23f/0x880 [ 1125.346461][ T30] task_work_run+0x24f/0x310 [ 1125.351443][ T30] ? __pfx_task_work_run+0x10/0x10 [ 1125.369510][ T30] ? switch_task_namespaces+0xe4/0x110 [ 1125.375134][ T30] do_exit+0xa2f/0x28e0 [ 1125.384467][ T30] ? rcu_is_watching+0x15/0xb0 [ 1125.389312][ T30] ? __pfx_do_exit+0x10/0x10 [ 1125.393985][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1125.410492][ T30] ? __pfx_lock_release+0x10/0x10 [ 1125.420295][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1125.426683][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 1125.446473][ T30] do_group_exit+0x207/0x2c0 [ 1125.455864][ T30] get_signal+0x16a3/0x1740 [ 1125.460728][ T30] ? __pfx_get_signal+0x10/0x10 [ 1125.465622][ T30] ? __fget_files+0x29/0x470 [ 1125.474779][ T30] arch_do_signal_or_restart+0x96/0x860 [ 1125.480965][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1125.487172][ T30] ? rcu_is_watching+0x15/0xb0 [ 1125.496807][ T30] syscall_exit_to_user_mode+0xc9/0x370 [ 1125.508345][ T30] do_syscall_64+0x100/0x230 [ 1125.517622][ T30] ? clear_bhb_loop+0x35/0x90 SYZFAIL: failed to send rpc fd=3 want=296 sent=0 n=-1 (errno 32: Broken pipe) [ 1125.522640][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1125.528580][ T30] RIP: 0033:0x7f21b3f7dff9 [ 1125.537727][ T30] RSP: 002b:00007f21b4e43038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 1125.546939][ T30] RAX: fffffffffffffe00 RBX: 00007f21b4135f80 RCX: 00007f21b3f7dff9 [ 1125.562700][ T30] RDX: 0000000000000001 RSI: 0000000020000000 RDI: 0000000000000004 [ 1125.589049][ T30] RBP: 00007f21b3ff0296 R08: 0000000000000000 R09: 0000000000000000 [ 1125.601865][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1125.610757][ T30] R13: 0000000000000000 R14: 00007f21b4135f80 R15: 00007fff47a5e708 [ 1125.618773][ T30] [ 1125.622472][ T30] INFO: lockdep is turned off. [ 1125.627268][ T30] NMI backtrace for cpu 1 [ 1125.631608][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc2-next-20241008-syzkaller #0 [ 1125.641615][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1125.651707][ T30] Call Trace: [ 1125.654996][ T30] [ 1125.657921][ T30] dump_stack_lvl+0x241/0x360 [ 1125.662598][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1125.667792][ T30] ? __pfx__printk+0x10/0x10 [ 1125.672376][ T30] ? __pfx_rcu_preempt_deferred_qs_irqrestore+0x10/0x10 [ 1125.679315][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 1125.684287][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1125.687535][ T4626] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1125.689758][ T30] ? _printk+0xd5/0x120 [ 1125.689782][ T30] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 1125.689815][ T30] ? __pfx__printk+0x10/0x10 [ 1125.689836][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1125.689866][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 1125.689895][ T30] watchdog+0xff4/0x1040 [ 1125.689924][ T30] ? watchdog+0x1ea/0x1040 [ 1125.689957][ T30] ? __pfx_watchdog+0x10/0x10 [ 1125.689985][ T30] kthread+0x2f0/0x390 [ 1125.690006][ T30] ? __pfx_watchdog+0x10/0x10 [ 1125.690033][ T30] ? __pfx_kthread+0x10/0x10 [ 1125.690054][ T30] ret_from_fork+0x4b/0x80 [ 1125.690084][ T30] ? __pfx_kthread+0x10/0x10 [ 1125.690104][ T30] ret_from_fork_asm+0x1a/0x30 [ 1125.690141][ T30] [ 1125.690408][ T30] Sending NMI from CPU 1 to CPUs 0: [ 1125.721904][ T4626] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1125.725516][ C0] NMI backtrace for cpu 0 [ 1125.725528][ C0] CPU: 0 UID: 0 PID: 4626 Comm: kworker/u9:1 Not tainted 6.12.0-rc2-next-20241008-syzkaller #0 [ 1125.725551][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1125.725564][ C0] Workqueue: hci11 hci_rx_work [ 1125.725606][ C0] RIP: 0010:io_serial_in+0x76/0xb0 [ 1125.725632][ C0] Code: 00 51 48 fc 89 e9 41 d3 e6 48 83 c3 40 48 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 11 08 b2 fc 44 03 33 44 89 f2 ec <0f> b6 c0 5b 41 5e 41 5f 5d c3 cc cc cc cc 89 e9 80 e1 07 38 c1 7c [ 1125.725648][ C0] RSP: 0018:ffffc9000dcaf178 EFLAGS: 00000006 [ 1125.725663][ C0] RAX: 1ffffffff34e4905 RBX: ffffffff9a724da0 RCX: 0000000000000000 [ 1125.725676][ C0] RDX: 00000000000003f9 RSI: 0000000000000000 RDI: 0000000000000020 [ 1125.725699][ C0] RBP: 0000000000000000 R08: ffffffff854ca346 R09: fffff52001b95e10 [ 1125.725711][ C0] R10: dffffc0000000000 R11: ffffffff854ca300 R12: dffffc0000000000 [ 1125.725724][ C0] R13: 1ffff92001b95e4c R14: 00000000000003f9 R15: dffffc0000000000 [ 1125.725737][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 1125.725751][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1125.725763][ C0] CR2: 000055e39d188220 CR3: 00000000630e0000 CR4: 00000000003526f0 [ 1125.725778][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1125.725792][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1125.725803][ C0] Call Trace: [ 1125.725809][ C0] [ 1125.725816][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 1125.725840][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 1125.725857][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1125.725889][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 1125.725912][ C0] ? nmi_handle+0x14f/0x5a0 [ 1125.725930][ C0] ? nmi_handle+0x2a/0x5a0 [ 1125.725948][ C0] ? io_serial_in+0x76/0xb0 [ 1125.725968][ C0] ? default_do_nmi+0x63/0x160 [ 1125.725992][ C0] ? exc_nmi+0x123/0x1f0 [ 1125.726013][ C0] ? end_repeat_nmi+0xf/0x53 [ 1125.726034][ C0] ? __pfx_io_serial_in+0x10/0x10 [ 1125.726055][ C0] ? io_serial_in+0x46/0xb0 [ 1125.726077][ C0] ? io_serial_in+0x76/0xb0 [ 1125.726099][ C0] ? io_serial_in+0x76/0xb0 [ 1125.726121][ C0] ? io_serial_in+0x76/0xb0 [ 1125.726142][ C0] [ 1125.726147][ C0] [ 1125.726155][ C0] serial8250_console_write+0x4de/0x1ed0 [ 1125.726181][ C0] ? rcu_is_watching+0x15/0xb0 [ 1125.726200][ C0] ? lock_acquire+0xe3/0x550 [ 1125.726217][ C0] ? __pfx_serial8250_console_write+0x10/0x10 [ 1125.726239][ C0] ? __pfx_lock_release+0x10/0x10 [ 1125.726253][ C0] ? do_raw_spin_lock+0x14f/0x370 [ 1125.726279][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1125.726303][ C0] ? console_flush_all+0x1a3/0xeb0 [ 1125.726324][ C0] ? __pfx_univ8250_console_write+0x10/0x10 [ 1125.726342][ C0] console_flush_all+0x869/0xeb0 [ 1125.726366][ C0] ? console_flush_all+0x1a3/0xeb0 [ 1125.726392][ C0] ? __pfx_console_flush_all+0x10/0x10 [ 1125.726421][ C0] ? this_cpu_in_panic+0x4f/0x80 [ 1125.726439][ C0] ? is_printk_legacy_deferred+0x43/0x50 [ 1125.726464][ C0] ? printk_get_console_flush_type+0x1fe/0x4f0 [ 1125.726487][ C0] console_unlock+0x14f/0x3b0 [ 1125.726508][ C0] ? __pfx_console_unlock+0x10/0x10 [ 1125.726529][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1125.726552][ C0] ? vprintk_emit+0x530/0xa10 [ 1125.726571][ C0] ? rcu_is_watching+0x15/0xb0 [ 1125.726590][ C0] ? vprintk_emit+0x530/0xa10 [ 1125.726609][ C0] vprintk_emit+0x730/0xa10 [ 1125.726630][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 1125.726650][ C0] ? skb_clone+0x20c/0x390 [ 1125.726671][ C0] ? stack_depot_save_flags+0x29/0x830 [ 1125.726698][ C0] ? skb_clone+0x20c/0x390 [ 1125.726722][ C0] _printk+0xd5/0x120 [ 1125.726741][ C0] ? __pfx__printk+0x10/0x10 [ 1125.726763][ C0] bt_warn+0x127/0x180 [ 1125.726793][ C0] ? __pfx_bt_warn+0x10/0x10 [ 1125.726817][ C0] ? __mutex_unlock_slowpath+0x21d/0x750 [ 1125.726838][ C0] ? __copy_skb_header+0x437/0x5b0 [ 1125.726859][ C0] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1125.726881][ C0] hci_cmd_complete_evt+0x3ef/0x8b0 [ 1125.726909][ C0] hci_event_packet+0xa55/0x1540 [ 1125.726933][ C0] ? __pfx_hci_cmd_complete_evt+0x10/0x10 [ 1125.726958][ C0] ? __pfx_hci_event_packet+0x10/0x10 [ 1125.726980][ C0] ? kcov_remote_start+0x97/0x7d0 [ 1125.727006][ C0] ? __add_adv_patterns_monitor+0x123/0x220 [ 1125.727030][ C0] ? skb_dequeue+0x113/0x150 [ 1125.727056][ C0] hci_rx_work+0x3fe/0xd80 [ 1125.727082][ C0] ? process_scheduled_works+0x976/0x1850 [ 1125.727106][ C0] process_scheduled_works+0xa63/0x1850 [ 1125.727144][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 1125.727170][ C0] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 1125.727188][ C0] ? assign_work+0x364/0x3d0 [ 1125.727213][ C0] worker_thread+0x870/0xd30 [ 1125.727244][ C0] ? __kthread_parkme+0x169/0x1d0 [ 1125.727271][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1125.727295][ C0] kthread+0x2f0/0x390 [ 1125.727311][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1125.727335][ C0] ? __pfx_kthread+0x10/0x10 [ 1125.727352][ C0] ret_from_fork+0x4b/0x80 [ 1125.727376][ C0] ? __pfx_kthread+0x10/0x10 [ 1125.727393][ C0] ret_from_fork_asm+0x1a/0x30 [ 1125.727424][ C0] [ 1125.727516][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 1125.727532][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc2-next-20241008-syzkaller #0 [ 1125.727560][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1125.727573][ T30] Call Trace: [ 1125.727582][ T30] [ 1125.727592][ T30] dump_stack_lvl+0x241/0x360 [ 1125.727619][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1125.727643][ T30] ? __pfx__printk+0x10/0x10 [ 1125.727669][ T30] ? vscnprintf+0x5d/0x90 [ 1125.727698][ T30] panic+0x349/0x880 [ 1125.727719][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 1125.727749][ T30] ? __pfx_panic+0x10/0x10 [ 1125.727773][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 1125.727795][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 1125.727824][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 1125.727855][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 1125.727904][ T30] watchdog+0x1033/0x1040 [ 1125.727938][ T30] ? watchdog+0x1ea/0x1040 [ 1125.727973][ T30] ? __pfx_watchdog+0x10/0x10 [ 1125.728005][ T30] kthread+0x2f0/0x390 [ 1125.728027][ T30] ? __pfx_watchdog+0x10/0x10 [ 1125.728059][ T30] ? __pfx_kthread+0x10/0x10 [ 1125.728082][ T30] ret_from_fork+0x4b/0x80 [ 1125.728114][ T30] ? __pfx_kthread+0x10/0x10 [ 1125.728138][ T30] ret_from_fork_asm+0x1a/0x30 [ 1125.728179][ T30] [ 1125.732046][ T30] Kernel Offset: disabled