last executing test programs: 12.845807543s ago: executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYRES64], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="00220f0000000b449bab59030d34b68a0b0f4b99cb0f56e137204391381fbd2a82ae7fd8fa64802995325425c0bd8b3a27ebecbaa53391e2fd1d7b1307f8ce061d8f35393ac4e48a01d7f10e"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) preadv(r1, &(0x7f0000002ac0)=[{&(0x7f0000000140)=""/99, 0x63}], 0x1, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 10.945115071s ago: executing program 0: syz_read_part_table(0x5fd, &(0x7f0000001a40)="$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") syz_open_dev$usbfs(0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) write(0xffffffffffffffff, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000500)='./file0\x00', 0x18008, &(0x7f0000000200)=ANY=[@ANYRES8=0x0, @ANYRESDEC], 0xfe, 0x4b1, &(0x7f0000001d00)="$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") 10.143199073s ago: executing program 0: syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000c40), 0x0, 0x4b0, &(0x7f0000000480)="$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") r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000086c0)={0x14, 0x0, 0x301}, 0x14}}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x3, 0x261, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r2}, 0x48) r3 = syz_io_uring_setup(0x1af4, &(0x7f0000000080)={0x0, 0x0, 0x3e00}, &(0x7f0000000000), &(0x7f0000001000)) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r4, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) ppoll(&(0x7f00000002c0)=[{r3}], 0x1, 0x0, 0x0, 0x0) 9.562910418s ago: executing program 2: syz_mount_image$squashfs(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x800000, &(0x7f0000000340)=ANY=[], 0x0, 0x1de, &(0x7f0000000540)="$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") ioperm(0x0, 0x8000, 0xffff) chown(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 8.969827035s ago: executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r5 = dup(r4) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000050000f5150001c0"]) 8.850330863s ago: executing program 2: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x1de) close(r0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000004c0)={@ifindex, 0xffffffffffffffff, 0x33, 0x0, 0xffffffffffffffff, @prog_id=0xffffffffffffffff}, 0x20) r2 = getpid() r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="85000000070000006a0a90ff0000000027000000000010009500000000000000181000008639369f554288e121e7e1479594bd86279600e9d86b86badb115d770e9f9373d833487e40631725e39078674dbf4d5c4778d646d325e315751450f0256f7dab30be2630a78d6bc01c55b75ffbead8448a5be71b71e422c0d318fe451d7837af4126e72e4d62497dd8c12364a0ff321ef76d3598346424988be91535a1b8e0750000000000000305cf94b60f806185f52e0a98465c4c2f60cc5cb38db2861bab4d1bdede246599a061e85ceddc02a73fac764474d28e5c44f8d8c1900e347de81480507f3738d444e122b9f92952f75a49e0b11d43b6db477b87d6e61b9391667351c93f0cbb6c8d0f2e345f71804cf2", @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f00000002c0)={0x35}) syz_pidfd_open(r2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000080), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r4, &(0x7f00000002c0)={&(0x7f0000000000)={0x1d, r5}, 0x10, &(0x7f0000000280)={&(0x7f0000000100)={0x6, 0x0, 0x0, {0x0, 0xea60}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "1d0b6382972f4b8f"}}, 0x48}}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3b, r5}) socket$kcm(0x10, 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) 7.957912381s ago: executing program 2: openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000180), 0x8, 0x2) r2 = syz_io_uring_complete(0x0) ioctl$HIDIOCGUSAGE(r2, 0xc018480b, &(0x7f0000000c80)={0x2, 0x100, 0x6, 0x0, 0x8, 0x8}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r3, &(0x7f0000000bc0)=[{0x0}, {&(0x7f0000000240)=""/39, 0x27}, {0x0}, {&(0x7f00000009c0)=""/49, 0x31}, {&(0x7f0000000a00)=""/214, 0xd6}, {&(0x7f0000000b00)=""/137, 0x89}], 0x6) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x4008, 0x3, 0x2d0, 0x0, 0x32, 0x148, 0x0, 0x148, 0x238, 0x240, 0x240, 0x238, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0xc8, 0xe8, 0x0, {}, [@common=@unspec=@cpu={{0x28}, {0x0, 0x8000001}}, @common=@unspec=@cluster={{0x30}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xe8, 0x150, 0x0, {}, [@common=@osf={{0x50}, {'syz1\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00', 0x2}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000400)={0x2, @pix={0x3, 0x0, 0x34324948, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x7}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket(0x10, 0x1, 0x20000001) connect$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r6, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) sendmsg$xdp(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)="fe", 0x1}, {&(0x7f0000001240)="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", 0x480}], 0x2}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @random="0106002010ff"}) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000080)) 7.810981063s ago: executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES64], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="00220f0000000b449bab59030d34b68a0b0f4b99cb0f56e137204391381fbd2a82ae7fd8fa64802995325425c0bd8b3a27ebecbaa53391e2fd1d7b1307f8ce061d8f35393ac4e48a01d7f10e"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) preadv(r1, &(0x7f0000002ac0)=[{&(0x7f0000000140)=""/99, 0x63}], 0x1, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 6.275057124s ago: executing program 3: ioperm(0x0, 0x8000, 0xffff) chown(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 6.000917019s ago: executing program 3: sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0), 0x10, 0x0}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x275a, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="02"], 0x10}}, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0x12) r2 = socket$key(0xf, 0x3, 0x2) write$binfmt_script(r2, &(0x7f0000000280)={'#! ', './file0'}, 0xb) 5.632131469s ago: executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x26e1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x42, 0x0, 0x0, 0x0, '\x00', 0x0, 0x7c, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='jbd2_update_log_tail\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffefb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000200)='source', &(0x7f00000002c0)='\\/\xe9\x838\x9d<\f\x91\a\xd4$\xae$\x91&6n @\xf4M\xba\xf2<\xd6A\xdb\xd7\xbeY@g\xcc\xca\n@\x06\xa3\xfe%\x02\x96\xb7b\xa7\x15R.\xa3`fd\xdc\x8b\x18rBl{\x82\xda\xbeA\x17\n\f\xcd=\'\x11\x1bZ\x8e\xa1\xc3j$v\xefw\x96/\xff\xa2\xfc\xe3\xb8\xc7\x0f\xaaQ\x98F*T\xd5\xcd4g+\xbd\xd1\xe0R\x9d\x18\x19a:\xa2\xdf\xbe\x8b\x89\x81', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x13, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x1ff, 0x7f, 0x5, 0x440, 0xffffffffffffffff, 0x80000000, '\x00', 0x0, r1, 0x3, 0x1, 0x1}, 0x48) openat$pfkey(0xffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmstat\x00', 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x4004662b, 0x20001412) 5.240070215s ago: executing program 1: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x1de) close(r0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000004c0)={@ifindex, 0xffffffffffffffff, 0x33, 0x0, 0xffffffffffffffff, @prog_id=0xffffffffffffffff}, 0x20) r2 = getpid() r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="85000000070000006a0a90ff0000000027000000000010009500000000000000181000008639369f554288e121e7e1479594bd86279600e9d86b86badb115d770e9f9373d833487e40631725e39078674dbf4d5c4778d646d325e315751450f0256f7dab30be2630a78d6bc01c55b75ffbead8448a5be71b71e422c0d318fe451d7837af4126e72e4d62497dd8c12364a0ff321ef76d3598346424988be91535a1b8e0750000000000000305cf94b60f806185f52e0a98465c4c2f60cc5cb38db2861bab4d1bdede246599a061e85ceddc02a73fac764474d28e5c44f8d8c1900e347de81480507f3738d444e122b9f92952f75a49e0b11d43b6db477b87d6e61b9391667351c93f0cbb6c8d0f2e345f71804cf2", @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f00000002c0)={0x35}) syz_pidfd_open(r2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000080), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r4, &(0x7f00000002c0)={&(0x7f0000000000)={0x1d, r5}, 0x10, &(0x7f0000000280)={&(0x7f0000000100)={0x6, 0x0, 0x0, {0x0, 0xea60}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "1d0b6382972f4b8f"}}, 0x48}}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3b, r5}) socket$kcm(0x10, 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) 4.904799837s ago: executing program 3: r0 = socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)={0x20, 0x3, 0x3, 0x101, 0x0, 0x0, {}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0x2}}]}, 0x20}}, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e22, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='bbr\x00', 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r0, &(0x7f0000000040)='u', 0xa792a, 0x801, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='cdg\x00', 0x4) recvfrom$inet(r0, &(0x7f0000000080)=""/128, 0xfffffce3, 0x0, 0x0, 0x0) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000200)="67a818beb2c030ce59945b", 0xb}, {&(0x7f0000000300), 0x400000}, {0x0}], 0x3) 4.627219694s ago: executing program 2: setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r1, 0xc01c64ae, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x1}) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x1}}]}}]}}, 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r5, 0x0) r6 = socket(0xa, 0x6, 0x0) getsockopt$inet6_mreq(r6, 0x10d, 0xbe, 0x0, &(0x7f0000000080)) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) write$dsp(0xffffffffffffffff, &(0x7f0000002000)='`', 0x88020) 4.480791687s ago: executing program 1: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x45, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x37, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @multicast1}, "04000000000000"}}}}}, 0x0) 4.282266122s ago: executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001700)={0x2c, &(0x7f0000000600)=ANY=[@ANYBLOB="000004000000ba7684"], 0x0, 0x0, 0x0, 0x0}) 4.161387431s ago: executing program 4: socket$kcm(0x2, 0x200000000000001, 0x106) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x894b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = creat(0x0, 0x0) setsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0x10, &(0x7f0000000000)=0x2ab, 0x4) close(r1) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r2 = syz_io_uring_setup(0x3d, 0x0, &(0x7f0000000000)=0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000600)=@IORING_OP_OPENAT={0x12, 0x44, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f00000001c0)='./file0\x00'}) io_uring_enter(r2, 0x5e40, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) preadv(r0, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) r4 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000000)='xfrm0\x00', 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r4, &(0x7f0000000900)=[{{0x0, 0xf00, 0x0}}], 0x40000cf, 0x0) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x8, &(0x7f0000004400), &(0x7f0000004440)=0x4) close(0xffffffffffffffff) socket$igmp(0x2, 0x3, 0x2) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) 4.1100285s ago: executing program 1: ioperm(0x0, 0x8000, 0xffff) chown(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 4.04063394s ago: executing program 3: syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000c40), 0x0, 0x4b0, &(0x7f0000000480)="$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") r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000086c0)={0x14, 0x0, 0x301}, 0x14}}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x3, 0x261, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r2}, 0x48) r3 = syz_io_uring_setup(0x1af4, &(0x7f0000000080)={0x0, 0x0, 0x3e00}, &(0x7f0000000000), &(0x7f0000001000)) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r4, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) ppoll(&(0x7f00000002c0)=[{r3}], 0x1, 0x0, 0x0, 0x0) 3.786098981s ago: executing program 1: sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0), 0x10, 0x0}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x275a, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="02"], 0x10}}, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0x12) r2 = socket$key(0xf, 0x3, 0x2) write$binfmt_script(r2, &(0x7f0000000280)={'#! ', './file0', [], 0xa, '8Si'}, 0xe) 3.47218351s ago: executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_FLAGS={0x8}]}], {0x14}}, 0x64}}, 0x0) 3.159424191s ago: executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) r1 = open(&(0x7f00000004c0)='./bus\x00', 0x0, 0x0) ftruncate(r1, 0x2008002) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000002180)='\xa3\xcb\x04=\x827\xe7\x81S\bD\xd8K| \x8b\xdb\xb1\x03\xd0\x9d2\x9es\x19_=#n_\xeb\xbdR\xfd`U\xa7k\xd0\xd8\xd2\xc0\x91\xc1\x98#\r\xa7\x16\xfd@\xd7V*^\xcf\x9f\b1\xce3\vN\xa6\x01\xb5\xb5\xba\xdc\xc8\xda\xd2\apY\vu\x80\xa9\x14X\xcf!\xd3W\'\xb44#\xf6\x7fHS\xa6l\x17\x97\x80\xea\xc5+T\xe3\"\xda\x14\xfe,\xf3\\\xeb\x1cp\xd6\xc1\b\xec\xe1\x94\xdf\xdb\xa1\xf7=B\xb2\x94o\xd5{\xd2_\x93\xa1)\xdem\'H\\e\x8bu\xbcVw\xaeb\xa1b\xb1\xc1\f\x9f0\x93\x0f\x16,\xeb!Z\xa9\\\xf7B\xf8L\x05\xc7\xf7q\x9d_\xb4\xbb3i[t\xb6\xbc\x824\x7f\xd7\xb7 \xd4\x7fUE\xcb7\xe3\xb4\xb6\xa0\xd8\x1b\a8\xfe$\xa1\x12&\xb2\xfc\xfb\x12U\xb9u\xb4=\xa5\x9e\x1f`\x05q5\xee\xde\xdf\xba\xc4\xc5q\x8bk\xf1\x9c\xc3\xa4w\xf9!^#\x8c', 0x4) ftruncate(r2, 0x200000) preadv(r2, &(0x7f0000002100), 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000002280)=""/102395, 0x18ffb}], 0x1, 0x0, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xfffffffffffffffc, 0x1, 0x0) socketpair(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x9, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x6f, &(0x7f0000000200)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0xbc, 0x8, 0x0, 0x0}}, 0x10) close_range(r0, r5, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) socket$inet(0x2, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_procs(r1, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() 3.020663248s ago: executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x26e1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x42, 0x0, 0x0, 0x0, '\x00', 0x0, 0x7c, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='jbd2_update_log_tail\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffefb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000200)='source', &(0x7f00000002c0)='\\/\xe9\x838\x9d<\f\x91\a\xd4$\xae$\x91&6n @\xf4M\xba\xf2<\xd6A\xdb\xd7\xbeY@g\xcc\xca\n@\x06\xa3\xfe%\x02\x96\xb7b\xa7\x15R.\xa3`fd\xdc\x8b\x18rBl{\x82\xda\xbeA\x17\n\f\xcd=\'\x11\x1bZ\x8e\xa1\xc3j$v\xefw\x96/\xff\xa2\xfc\xe3\xb8\xc7\x0f\xaaQ\x98F*T\xd5\xcd4g+\xbd\xd1\xe0R\x9d\x18\x19a:\xa2\xdf\xbe\x8b\x89\x81', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x13, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x1ff, 0x7f, 0x5, 0x440, 0xffffffffffffffff, 0x80000000, '\x00', 0x0, r1, 0x3, 0x1, 0x1}, 0x48) faccessat2(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmstat\x00', 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x4004662b, 0x20001412) 2.830346415s ago: executing program 3: openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000180), 0x8, 0x2) r2 = syz_io_uring_complete(0x0) ioctl$HIDIOCGUSAGE(r2, 0xc018480b, &(0x7f0000000c80)={0x2, 0x100, 0x6, 0x0, 0x8, 0x8}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r3, &(0x7f0000000bc0)=[{0x0}, {&(0x7f0000000240)=""/39, 0x27}, {0x0}, {&(0x7f00000009c0)=""/49, 0x31}, {&(0x7f0000000a00)=""/214, 0xd6}, {&(0x7f0000000b00)=""/137, 0x89}], 0x6) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x4008, 0x3, 0x2d0, 0x0, 0x32, 0x148, 0x0, 0x148, 0x238, 0x240, 0x240, 0x238, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0xc8, 0xe8, 0x0, {}, [@common=@unspec=@cpu={{0x28}, {0x0, 0x8000001}}, @common=@unspec=@cluster={{0x30}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xe8, 0x150, 0x0, {}, [@common=@osf={{0x50}, {'syz1\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00', 0x2}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000400)={0x2, @pix={0x3, 0x0, 0x34324948, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x7}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket(0x10, 0x1, 0x20000001) connect$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r6, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) sendmsg$xdp(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)="fe", 0x1}, {&(0x7f0000001240)="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", 0x480}], 0x2}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @random="0106002010ff"}) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000080)) 2.391371779s ago: executing program 4: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x1de) close(r0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000004c0)={@ifindex, 0xffffffffffffffff, 0x33, 0x0, 0xffffffffffffffff, @prog_id=0xffffffffffffffff}, 0x20) r2 = getpid() r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f00000002c0)={0x35}) syz_pidfd_open(r2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000080), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r4, &(0x7f00000002c0)={&(0x7f0000000000)={0x1d, r5}, 0x10, &(0x7f0000000280)={&(0x7f0000000100)={0x6, 0x0, 0x0, {0x0, 0xea60}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "1d0b6382972f4b8f"}}, 0x48}}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3b, r5}) socket$kcm(0x10, 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) 1.856568156s ago: executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES64], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="00220f0000000b449bab59030d34b68a0b0f4b99cb0f56e137204391381fbd2a82ae7fd8fa64802995325425c0bd8b3a27ebecbaa53391e2fd1d7b1307f8ce061d8f35393ac4e48a01d7f10e"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) preadv(r1, &(0x7f0000002ac0)=[{&(0x7f0000000140)=""/99, 0x63}], 0x1, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 1.482241871s ago: executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000050000f5150001c0"]) 891.022107ms ago: executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000001c0)=0x20000008) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) r4 = creat(&(0x7f0000000100)='./bus\x00', 0x0) socket$inet_tcp(0x2, 0x1, 0x0) timerfd_create(0x0, 0x0) userfaultfd(0x801) socket$packet(0x11, 0x3, 0x300) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f00000006c0), &(0x7f0000000700)={0x7f}, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, 0x0) pwritev(r3, &(0x7f00000012c0)=[{&(0x7f0000001200)="d9", 0x1}], 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000500)='tlb_flush\x00', r1}, 0x10) process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x300081a, &(0x7f0000000b00)=ANY=[], 0xf, 0x2a0, &(0x7f0000000840)="$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") r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) getpeername$packet(r4, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r6 = fanotify_init(0x200, 0x0) fanotify_mark(r6, 0x1, 0x4800003e, r5, 0x0) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r5, 0x40047211, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x12, 0x4, &(0x7f0000000740)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x51}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = add_key$keyring(&(0x7f0000000240), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000440)='asymmetric\x00', 0x0, &(0x7f0000000000)="30800202", 0x1001, r7) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000380)={[{@jqfmt_vfsv0}, {@noinit_itable}, {@nombcache}, {@journal_dev={'journal_dev', 0x3d, 0x100000000007}}, {@nombcache}]}, 0x8, 0x602, &(0x7f00000004c0)="$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") r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000002d000100000000000000000007000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000fc"], 0x38}}, 0x0) 841.132704ms ago: executing program 4: r0 = socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)={0x20, 0x3, 0x3, 0x101, 0x0, 0x0, {}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0x2}}]}, 0x20}}, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e22, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='bbr\x00', 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r0, &(0x7f0000000040)='u', 0xa792a, 0x801, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='cdg\x00', 0x4) recvfrom$inet(r0, &(0x7f0000000080)=""/128, 0xfffffce3, 0x0, 0x0, 0x0) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000200)="67a818beb2c030ce59945b", 0xb}, {&(0x7f0000000300), 0x400000}, {0x0}], 0x3) 0s ago: executing program 4: ioperm(0x0, 0x8000, 0xffff) chown(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) kernel console output (not intermixed with test programs): utor.2: Invalid block bitmap block 3 in block_group 0 [ 413.041727][ T6565] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz-executor.2: Invalid block bitmap block 3 in block_group 0 [ 413.229447][ T5083] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 413.727472][ T6570] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 416.189704][ T29] audit: type=1804 audit(1718227066.956:401): pid=6582 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir3213805187/syzkaller.tmylDs/92/bus" dev="sda1" ino=1960 res=1 errno=0 [ 417.512614][ T6603] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 418.405448][ T6606] loop4: detected capacity change from 0 to 4096 [ 418.425180][ T6611] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 419.036323][ T6606] ntfs3: loop4: failed to convert "0080" to macgreek [ 419.043570][ T6606] ntfs3: loop4: failed to convert name for inode 1e. [ 419.067926][ T2471] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.249259][ T2471] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.412113][ T2471] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.587671][ T2471] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.419757][ T29] audit: type=1804 audit(1718227071.216:402): pid=6623 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir2779858887/syzkaller.qnwIxh/93/bus" dev="sda1" ino=1955 res=1 errno=0 [ 420.474005][ T2471] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 420.541567][ T2471] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 420.607809][ T2471] bond0 (unregistering): Released all slaves [ 421.741205][ T2471] hsr_slave_0: left promiscuous mode [ 421.762302][ T2471] hsr_slave_1: left promiscuous mode [ 422.005164][ T2471] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 422.013188][ T2471] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 422.094591][ T2471] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 422.108916][ T2471] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 422.275028][ T2471] veth1_macvtap: left promiscuous mode [ 422.281067][ T2471] veth0_macvtap: left promiscuous mode [ 422.287218][ T2471] veth1_vlan: left promiscuous mode [ 422.293016][ T2471] veth0_vlan: left promiscuous mode [ 422.396854][ T5073] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 422.407015][ T5073] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 422.422408][ T5073] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 422.558283][ T5073] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 422.570868][ T5073] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 422.632800][ T5073] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 422.643545][ T6653] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 422.677444][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 422.695804][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 422.705576][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 422.735017][ T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 422.754211][ T50] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 422.764742][ T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 423.344768][ T2471] team0 (unregistering): Port device team_slave_1 removed [ 423.507005][ T2471] team0 (unregistering): Port device team_slave_0 removed [ 424.028740][ T6667] loop2: detected capacity change from 0 to 512 [ 424.275999][ T6667] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e028, mo2=0002] [ 424.311758][ T6667] System zones: 1-12 [ 424.360974][ T6667] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 424.542639][ T6667] EXT4-fs error (device loop2): ext4_map_blocks:580: inode #2: block 5: comm syz-executor.2: lblock 0 mapped to illegal pblock 5 (length 1) [ 424.672658][ T6667] EXT4-fs (loop2): Remounting filesystem read-only [ 424.680967][ T6667] EXT4-fs warning (device loop2): dx_probe:822: inode #2: lblock 0: comm syz-executor.2: error -117 reading directory block [ 424.861297][ T5073] Bluetooth: hci0: command tx timeout [ 424.893917][ T5083] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 425.161852][ T6646] chnl_net:caif_netlink_parms(): no params data found [ 425.291479][ T29] audit: type=1804 audit(1718227076.016:403): pid=6677 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir1547494852/syzkaller.hnYVf5/83/bus" dev="sda1" ino=1946 res=1 errno=0 [ 426.932881][ T5073] Bluetooth: hci0: command tx timeout [ 427.459315][ T6646] bridge0: port 1(bridge_slave_0) entered blocking state [ 427.467312][ T6646] bridge0: port 1(bridge_slave_0) entered disabled state [ 427.476469][ T6646] bridge_slave_0: entered allmulticast mode [ 427.485899][ T6646] bridge_slave_0: entered promiscuous mode [ 427.537967][ T6700] loop1: detected capacity change from 0 to 132 [ 427.642079][ T6646] bridge0: port 2(bridge_slave_1) entered blocking state [ 427.649800][ T6646] bridge0: port 2(bridge_slave_1) entered disabled state [ 427.657828][ T6646] bridge_slave_1: entered allmulticast mode [ 427.667350][ T6646] bridge_slave_1: entered promiscuous mode [ 428.074570][ T6646] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 428.086222][ T6705] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 428.165138][ T6646] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 428.577248][ T6646] team0: Port device team_slave_0 added [ 428.628343][ T6646] team0: Port device team_slave_1 added [ 428.909262][ T6646] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 428.916934][ T6646] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 428.943550][ T6646] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 429.020074][ T5073] Bluetooth: hci0: command tx timeout [ 429.079765][ T6646] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 429.088864][ T6646] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 429.115405][ T6646] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 429.390422][ T6646] hsr_slave_0: entered promiscuous mode [ 429.422493][ T6646] hsr_slave_1: entered promiscuous mode [ 429.540909][ T29] audit: type=1804 audit(1718227080.286:404): pid=6719 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir1711543270/syzkaller.vm77jZ/88/bus" dev="sda1" ino=1959 res=1 errno=0 [ 430.973074][ T6646] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 431.028074][ T6646] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 431.062340][ T6737] tipc: Can't bind to reserved service type 0 [ 431.096127][ T5073] Bluetooth: hci0: command tx timeout [ 431.105119][ T6646] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 431.242759][ T6646] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 431.389317][ T6743] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 432.267304][ T6756] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 432.720539][ T6760] input: syz0 as /devices/virtual/input/input10 [ 433.049622][ T6646] 8021q: adding VLAN 0 to HW filter on device bond0 [ 433.228279][ T6646] 8021q: adding VLAN 0 to HW filter on device team0 [ 433.333948][ T5124] bridge0: port 1(bridge_slave_0) entered blocking state [ 433.341831][ T5124] bridge0: port 1(bridge_slave_0) entered forwarding state [ 433.450805][ T5124] bridge0: port 2(bridge_slave_1) entered blocking state [ 433.458593][ T5124] bridge0: port 2(bridge_slave_1) entered forwarding state [ 434.012447][ T29] audit: type=1804 audit(1718227084.756:405): pid=6765 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir1547494852/syzkaller.hnYVf5/91/bus" dev="sda1" ino=1959 res=1 errno=0 [ 435.467048][ T6646] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 435.915276][ T6785] loop1: detected capacity change from 0 to 1024 [ 435.954078][ T6785] EXT4-fs: Ignoring removed orlov option [ 435.965340][ T6646] veth0_vlan: entered promiscuous mode [ 435.995908][ T6785] EXT4-fs (loop1): Test dummy encryption mode enabled [ 436.044356][ T6785] EXT4-fs (loop1): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 436.084824][ T6646] veth1_vlan: entered promiscuous mode [ 436.177781][ T6785] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 436.498375][ T6646] veth0_macvtap: entered promiscuous mode [ 436.569663][ T6646] veth1_macvtap: entered promiscuous mode [ 436.619992][ T6785] fscrypt (loop1): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 436.835876][ T6646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 436.849613][ T6646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 436.860430][ T6646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 436.871350][ T6646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 436.881460][ T6646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 436.892221][ T6646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 436.902313][ T6646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 436.913074][ T6646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 436.928131][ T6646] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 437.073806][ T5077] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 437.237416][ T6646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 437.248246][ T6646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.265038][ T6646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 437.277685][ T6646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.288049][ T6646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 437.298857][ T6646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.309078][ T6646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 437.320176][ T6646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.337604][ T6646] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 437.502028][ T6646] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.511167][ T6646] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.520180][ T6646] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.530337][ T6646] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.552537][ T6813] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 441.768942][ T29] audit: type=1804 audit(1718227092.516:406): pid=6831 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir2779858887/syzkaller.qnwIxh/110/bus" dev="sda1" ino=1934 res=1 errno=0 [ 444.557236][ T2795] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 444.565525][ T2795] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 444.811984][ T25] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 444.820064][ T25] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 447.652789][ T6863] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 447.980910][ T5128] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 448.230855][ T5128] usb 2-1: Using ep0 maxpacket: 32 [ 448.381806][ T5128] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 448.393051][ T5128] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 448.403051][ T5128] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 448.412396][ T5128] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.495980][ T5128] usb 2-1: config 0 descriptor?? [ 448.560845][ T5128] hub 2-1:0.0: USB hub found [ 448.785248][ T5128] hub 2-1:0.0: 1 port detected [ 449.471060][ T8] hub 2-1:0.0: activate --> -90 [ 449.701212][ T8] usb 2-1-port1: config error [ 449.923322][ T5128] usb 2-1: USB disconnect, device number 8 [ 451.075851][ T29] audit: type=1804 audit(1718227101.836:407): pid=6872 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir2779858887/syzkaller.qnwIxh/113/bus" dev="sda1" ino=1964 res=1 errno=0 [ 453.673548][ T6898] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 454.582200][ T5128] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 454.920803][ T5128] usb 1-1: Using ep0 maxpacket: 32 [ 455.062188][ T5128] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 455.075692][ T5128] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 455.086130][ T5128] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 455.095497][ T5128] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.138190][ T5128] usb 1-1: config 0 descriptor?? [ 455.193813][ T5128] hub 1-1:0.0: USB hub found [ 455.458383][ T5128] hub 1-1:0.0: 1 port detected [ 455.830952][ T29] audit: type=1804 audit(1718227106.566:408): pid=6911 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir2779858887/syzkaller.qnwIxh/118/bus" dev="sda1" ino=1964 res=1 errno=0 [ 456.081181][ T5128] hub 1-1:0.0: activate --> -90 [ 456.312532][ T5128] usb 1-1-port1: config error [ 456.562673][ T8] usb 1-1: USB disconnect, device number 4 [ 458.583601][ T6933] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 459.203362][ T29] audit: type=1804 audit(1718227109.976:409): pid=6939 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir1547494852/syzkaller.hnYVf5/102/bus" dev="sda1" ino=1960 res=1 errno=0 [ 460.491425][ T25] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 460.731880][ T25] usb 1-1: Using ep0 maxpacket: 32 [ 460.869796][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 460.881256][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 460.891522][ T25] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 460.900998][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.972030][ T25] usb 1-1: config 0 descriptor?? [ 461.043614][ T25] hub 1-1:0.0: USB hub found [ 461.265605][ T25] hub 1-1:0.0: 1 port detected [ 461.887518][ T6961] loop1: detected capacity change from 0 to 2048 [ 461.932559][ T25] hub 1-1:0.0: activate --> -90 [ 461.992779][ T6961] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 462.114864][ T6967] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 462.147099][ T25] usb 1-1-port1: config error [ 462.361224][ T8] usb 1-1: USB disconnect, device number 5 [ 462.428284][ T4287] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.606411][ T4287] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.771080][ T5077] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 462.912851][ T4287] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.093305][ T4287] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.200987][ T5128] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 463.684058][ T5128] usb 4-1: Using ep0 maxpacket: 32 [ 463.684174][ T50] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 463.698708][ T50] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 463.708061][ T50] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 463.738151][ T50] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 463.874603][ T50] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 463.893056][ T50] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 463.919241][ T5128] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 463.931495][ T5128] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 463.942910][ T5128] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 463.953100][ T5128] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.041238][ T29] audit: type=1804 audit(1718227114.746:410): pid=6984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir2779858887/syzkaller.qnwIxh/125/bus" dev="sda1" ino=1943 res=1 errno=0 [ 464.162713][ T5128] usb 4-1: config 0 descriptor?? [ 464.227513][ T4287] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 464.239443][ T5128] hub 4-1:0.0: USB hub found [ 464.283632][ T4287] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 464.325587][ T4287] bond0 (unregistering): Released all slaves [ 464.526247][ T5128] hub 4-1:0.0: 1 port detected [ 464.721660][ T5128] hub 4-1:0.0: hub_hub_status failed (err = -71) [ 464.728506][ T5128] hub 4-1:0.0: config failed, can't get hub status (err -71) [ 464.879249][ T1229] ieee802154 phy0 wpan0: encryption failed: -22 [ 464.886035][ T1229] ieee802154 phy1 wpan1: encryption failed: -22 [ 464.953004][ T5128] usbhid 4-1:0.0: can't add hid device: -71 [ 464.959802][ T5128] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 465.065500][ T5128] usb 4-1: USB disconnect, device number 6 [ 465.265529][ T43] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 465.344600][ T4287] hsr_slave_0: left promiscuous mode [ 465.361457][ T4287] hsr_slave_1: left promiscuous mode [ 465.408648][ T4287] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 465.419497][ T4287] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 465.431007][ T5121] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 465.455919][ T4287] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 465.463893][ T4287] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 465.512974][ T4287] veth1_macvtap: left promiscuous mode [ 465.521511][ T4287] veth0_macvtap: left promiscuous mode [ 465.527507][ T4287] veth1_vlan: left promiscuous mode [ 465.533209][ T4287] veth0_vlan: left promiscuous mode [ 465.653011][ T43] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 465.662363][ T43] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 465.672839][ T43] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 465.682324][ T43] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 465.693592][ T43] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 465.909023][ T5121] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 465.918369][ T5121] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 465.933973][ T43] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 465.944940][ T43] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 465.953793][ T43] usb 1-1: Product: syz [ 465.958183][ T43] usb 1-1: Manufacturer: syz [ 466.064782][ T43] cdc_wdm 1-1:1.0: skipping garbage [ 466.070211][ T43] cdc_wdm 1-1:1.0: skipping garbage [ 466.094628][ T43] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 466.101022][ T43] cdc_wdm 1-1:1.0: Unknown control protocol [ 466.111381][ T5121] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 466.121043][ T5121] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 466.129283][ T5121] usb 3-1: Manufacturer: syz [ 466.142347][ T50] Bluetooth: hci1: command tx timeout [ 466.161842][ T779] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 466.172044][ T5121] usb 3-1: config 0 descriptor?? [ 466.255453][ T8] usb 1-1: USB disconnect, device number 6 [ 466.397355][ T4287] team0 (unregistering): Port device team_slave_1 removed [ 466.412327][ T779] usb 4-1: Using ep0 maxpacket: 16 [ 466.460403][ T4287] team0 (unregistering): Port device team_slave_0 removed [ 466.622342][ T29] audit: type=1800 audit(1718227117.376:411): pid=6984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.1" name="bus" dev="sda1" ino=1943 res=0 errno=0 [ 466.710000][ T779] usb 4-1: New USB device found, idVendor=14aa, idProduct=022b, bcdDevice=8e.53 [ 466.719687][ T779] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.728051][ T779] usb 4-1: Product: syz [ 466.732536][ T779] usb 4-1: Manufacturer: syz [ 466.737354][ T779] usb 4-1: SerialNumber: syz [ 466.800212][ T779] usb 4-1: config 0 descriptor?? [ 466.879930][ T5121] rc_core: IR keymap rc-hauppauge not found [ 466.886431][ T5121] Registered IR keymap rc-empty [ 466.892979][ T5121] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 466.905437][ T5121] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input11 [ 467.067744][ T779] dvb-usb: found a 'WideView WT-220U PenType Receiver (based on ZL353)' in warm state. [ 467.077856][ T779] dvb-usb: bulk message failed: -22 (2/0) [ 467.083883][ T779] dvb-usb: will use the device's hardware PID filter (table count: 15). [ 467.136611][ T5121] usb 3-1: USB disconnect, device number 5 [ 467.182875][ T779] dvbdev: DVB: registering new adapter (WideView WT-220U PenType Receiver (based on ZL353)) [ 467.193501][ T779] usb 4-1: media controller created [ 467.254705][ T779] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 467.327046][ T6980] chnl_net:caif_netlink_parms(): no params data found [ 467.329421][ T779] usb 4-1: DVB: registering adapter 1 frontend 0 (WideView USB DVB-T)... [ 467.343952][ T779] dvbdev: dvb_create_media_entity: media entity 'WideView USB DVB-T' registered. [ 467.433286][ T7002] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 467.902248][ T5135] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 467.921724][ T779] rc_core: IR keymap rc-dtt200u not found [ 467.927665][ T779] Registered IR keymap rc-empty [ 467.936360][ T779] rc rc0: WideView WT-220U PenType Receiver (based on ZL353) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 467.950464][ T779] input: WideView WT-220U PenType Receiver (based on ZL353) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input12 [ 468.021666][ T779] dvb-usb: schedule remote query interval to 300 msecs. [ 468.028810][ T779] dvb-usb: WideView WT-220U PenType Receiver (based on ZL353) successfully initialized and connected. [ 468.066149][ T779] usb 4-1: USB disconnect, device number 7 [ 468.171119][ T5135] usb 2-1: Using ep0 maxpacket: 16 [ 468.213868][ T50] Bluetooth: hci1: command tx timeout [ 468.269269][ T779] dvb-usb: WideView WT-220U PenType Receiver (base successfully deinitialized and disconnected. [ 468.325772][ T5135] usb 2-1: config 0 has no interfaces? [ 468.331720][ T5135] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 468.341901][ T5135] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.431855][ T5135] usb 2-1: config 0 descriptor?? [ 468.697678][ T5121] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 468.804996][ T6980] bridge0: port 1(bridge_slave_0) entered blocking state [ 468.816570][ T6980] bridge0: port 1(bridge_slave_0) entered disabled state [ 468.824374][ T6980] bridge_slave_0: entered allmulticast mode [ 468.833431][ T6980] bridge_slave_0: entered promiscuous mode [ 468.880846][ T6980] bridge0: port 2(bridge_slave_1) entered blocking state [ 468.888688][ T6980] bridge0: port 2(bridge_slave_1) entered disabled state [ 468.896537][ T6980] bridge_slave_1: entered allmulticast mode [ 468.908213][ T6980] bridge_slave_1: entered promiscuous mode [ 468.926046][ T7007] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 468.935464][ T7007] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 468.981101][ T5121] usb 3-1: Using ep0 maxpacket: 32 [ 469.016365][ T5135] usb 2-1: USB disconnect, device number 9 [ 469.111769][ T5121] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 469.123251][ T5121] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 469.133404][ T5121] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 469.142867][ T5121] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 469.176677][ T6980] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 469.202323][ T5121] usb 3-1: config 0 descriptor?? [ 469.229494][ T6980] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 469.297293][ T5121] hub 3-1:0.0: USB hub found [ 469.448903][ T6980] team0: Port device team_slave_0 added [ 469.486237][ T5121] hub 3-1:0.0: 1 port detected [ 469.504898][ T6980] team0: Port device team_slave_1 added [ 469.729825][ T6980] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 469.738552][ T6980] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 469.765383][ T6980] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 469.875301][ T6980] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 469.882538][ T6980] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 469.908974][ T6980] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 470.188990][ T43] hub 3-1:0.0: activate --> -90 [ 470.241989][ T7029] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 470.251876][ T7029] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 470.291039][ T50] Bluetooth: hci1: command tx timeout [ 470.324251][ T6980] hsr_slave_0: entered promiscuous mode [ 470.384904][ T6980] hsr_slave_1: entered promiscuous mode [ 470.411418][ T5121] hub 3-1:0.0: hub_ext_port_status failed (err = -71) [ 470.443566][ T5121] usb 3-1: USB disconnect, device number 6 [ 470.450344][ T43] usb 3-1: Failed to suspend device, error -19 [ 470.458595][ T6980] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 470.466582][ T6980] Cannot create hsr debugfs directory [ 471.300546][ T7042] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 471.957800][ T6980] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 471.993679][ T7057] tipc: Started in network mode [ 471.998921][ T7057] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 472.008642][ T7057] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 472.019985][ T7057] tipc: Enabled bearer , priority 10 [ 472.035476][ T6980] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 472.124310][ T6980] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 472.177664][ T6980] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 472.371321][ T50] Bluetooth: hci1: command tx timeout [ 472.562380][ T7065] loop2: detected capacity change from 0 to 1024 [ 472.819366][ T4287] hfsplus: b-tree write err: -5, ino 4 [ 473.141521][ T43] tipc: Node number set to 1 [ 473.161839][ T4516] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 473.206213][ T6980] 8021q: adding VLAN 0 to HW filter on device bond0 [ 473.369027][ T6980] 8021q: adding VLAN 0 to HW filter on device team0 [ 473.428414][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 473.436209][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 473.443960][ T4516] usb 2-1: Using ep0 maxpacket: 32 [ 473.519601][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 473.527351][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 473.559905][ T7074] loop0: detected capacity change from 0 to 2048 [ 473.599062][ T4516] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 473.612989][ T4516] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 473.623683][ T4516] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 473.633193][ T4516] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.684906][ T4516] usb 2-1: config 0 descriptor?? [ 473.685227][ T7074] loop0: p1 < > p4 [ 473.739124][ T7074] loop0: p4 size 8388608 extends beyond EOD, truncated [ 473.762476][ T4516] hub 2-1:0.0: USB hub found [ 473.939085][ T4516] hub 2-1:0.0: 1 port detected [ 474.138019][ T7082] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 474.603908][ T4516] hub 2-1:0.0: activate --> -90 [ 474.840953][ T4516] hub 2-1:0.0: hub_ext_port_status failed (err = -71) [ 474.860502][ T5128] usb 2-1: USB disconnect, device number 10 [ 474.882136][ T4516] usb 2-1: Failed to suspend device, error -19 [ 475.231621][ T6980] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 475.835829][ T7105] syz-executor.3[7105] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 475.836412][ T7105] syz-executor.3[7105] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 477.541986][ T6980] veth0_vlan: entered promiscuous mode [ 477.652176][ T6980] veth1_vlan: entered promiscuous mode [ 477.978652][ T6980] veth0_macvtap: entered promiscuous mode [ 478.039341][ T6980] veth1_macvtap: entered promiscuous mode [ 478.208368][ T6980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 478.223477][ T6980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.234277][ T6980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 478.244977][ T6980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.255121][ T6980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 478.268475][ T6980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.278630][ T6980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 478.289324][ T6980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.304437][ T6980] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 478.339454][ T7136] loop3: detected capacity change from 0 to 128 [ 478.411968][ T6980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 478.425204][ T6980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.435903][ T6980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 478.446714][ T6980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.458985][ T6980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 478.470108][ T6980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.480211][ T6980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 478.491005][ T6980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.506539][ T6980] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 478.588328][ T6980] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.598176][ T6980] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.607285][ T6980] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.619727][ T6980] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.686128][ T5135] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 479.981937][ T5135] usb 3-1: Using ep0 maxpacket: 32 [ 480.122129][ T5135] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 480.133880][ T5135] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 480.144068][ T5135] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 480.153469][ T5135] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.227904][ T5135] usb 3-1: config 0 descriptor?? [ 480.286134][ T5135] hub 3-1:0.0: USB hub found [ 480.534248][ T5135] hub 3-1:0.0: 1 port detected [ 481.218379][ T5135] hub 3-1:0.0: activate --> -90 [ 481.430113][ T4516] usb 3-1: USB disconnect, device number 7 [ 481.442367][ T5135] hub 3-1:0.0: hub_ext_port_status failed (err = -71) [ 483.007232][ T7178] bridge0: entered promiscuous mode [ 483.033376][ T7177] bridge0: left promiscuous mode [ 483.375750][ T29] audit: type=1326 audit(1718227134.126:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7179 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7439579 code=0x7ffc0000 [ 483.398712][ T29] audit: type=1326 audit(1718227134.146:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7179 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=40000003 syscall=218 compat=1 ip=0xf7439579 code=0x7ffc0000 [ 483.422415][ T29] audit: type=1326 audit(1718227134.146:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7179 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7439579 code=0x7ffc0000 [ 483.447545][ T29] audit: type=1326 audit(1718227134.146:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7179 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7439579 code=0x7ffc0000 [ 483.470865][ T29] audit: type=1326 audit(1718227134.156:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7179 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7439579 code=0x7ffc0000 [ 483.471087][ T29] audit: type=1326 audit(1718227134.156:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7179 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7439579 code=0x7ffc0000 [ 483.471299][ T29] audit: type=1326 audit(1718227134.156:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7179 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7439579 code=0x7ffc0000 [ 483.471519][ T29] audit: type=1326 audit(1718227134.166:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7179 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7439579 code=0x7ffc0000 [ 483.471738][ T29] audit: type=1326 audit(1718227134.166:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7179 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7439579 code=0x7ffc0000 [ 483.471955][ T29] audit: type=1326 audit(1718227134.176:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7179 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf7439579 code=0x7ffc0000 [ 483.518852][ T5135] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 483.619597][ T5135] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 483.674453][ T7183] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 483.897895][ T5135] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 483.906247][ T5135] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 486.383151][ T7210] loop4: detected capacity change from 0 to 4096 [ 486.647600][ T7212] loop1: detected capacity change from 0 to 8 [ 486.723439][ T7212] squashfs image failed sanity check [ 486.915096][ T7210] overlayfs: upper fs does not support tmpfile. [ 486.967697][ T7210] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 487.237836][ T6980] ntfs3: loop4: failed to convert name for inode 1e. [ 487.791326][ T5124] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 487.976747][ T2795] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.061244][ T5124] usb 1-1: Using ep0 maxpacket: 8 [ 488.109250][ T2795] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.183274][ T5124] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 488.191899][ T5124] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 488.202612][ T5124] usb 1-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 488.217809][ T5124] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 488.227604][ T5124] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 488.266913][ T2795] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.324612][ T5124] usbtmc 1-1:16.0: bulk endpoints not found [ 488.465603][ T2795] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.818794][ T2795] bridge_slave_1: left allmulticast mode [ 488.825074][ T2795] bridge_slave_1: left promiscuous mode [ 488.831785][ T2795] bridge0: port 2(bridge_slave_1) entered disabled state [ 488.902513][ T2795] bridge_slave_0: left allmulticast mode [ 488.908532][ T2795] bridge_slave_0: left promiscuous mode [ 488.915224][ T2795] bridge0: port 1(bridge_slave_0) entered disabled state [ 489.712754][ T2795] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 489.794100][ T2795] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 489.857363][ T2795] bond0 (unregistering): Released all slaves [ 490.555239][ T5124] usb 1-1: USB disconnect, device number 7 [ 490.870951][ T2795] hsr_slave_0: left promiscuous mode [ 490.949865][ T7237] loop0: detected capacity change from 0 to 8 [ 490.959761][ T2795] hsr_slave_1: left promiscuous mode [ 490.997577][ T2795] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 491.005565][ T2795] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 491.033388][ T7237] squashfs image failed sanity check [ 491.056130][ T2795] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 491.064213][ T2795] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 491.198933][ T2795] veth1_macvtap: left promiscuous mode [ 491.204726][ T2795] veth0_macvtap: left promiscuous mode [ 491.210452][ T2795] veth1_vlan: left promiscuous mode [ 491.216023][ T2795] veth0_vlan: left promiscuous mode [ 491.581898][ T5073] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 491.618373][ T5073] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 491.638722][ T5073] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 491.705762][ T5073] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 491.757082][ T5073] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 491.767039][ T5073] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 491.900266][ T7244] loop2: detected capacity change from 0 to 4096 [ 492.183757][ T2795] team0 (unregistering): Port device team_slave_1 removed [ 492.258559][ T2795] team0 (unregistering): Port device team_slave_0 removed [ 492.567090][ T7244] overlayfs: upper fs does not support tmpfile. [ 492.673413][ T7244] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 493.056073][ T5083] ntfs3: loop2: failed to convert name for inode 1e. [ 493.670291][ T7263] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 493.900027][ T5073] Bluetooth: hci1: command tx timeout [ 494.141966][ T7243] chnl_net:caif_netlink_parms(): no params data found [ 495.506252][ T7284] loop0: detected capacity change from 0 to 8 [ 495.714337][ T7284] squashfs image failed sanity check [ 495.723431][ T7243] bridge0: port 1(bridge_slave_0) entered blocking state [ 495.742915][ T7243] bridge0: port 1(bridge_slave_0) entered disabled state [ 495.750733][ T7243] bridge_slave_0: entered allmulticast mode [ 495.759648][ T7243] bridge_slave_0: entered promiscuous mode [ 495.869179][ T7243] bridge0: port 2(bridge_slave_1) entered blocking state [ 495.877023][ T7243] bridge0: port 2(bridge_slave_1) entered disabled state [ 495.885726][ T7243] bridge_slave_1: entered allmulticast mode [ 495.894922][ T7243] bridge_slave_1: entered promiscuous mode [ 495.981325][ T5073] Bluetooth: hci1: command tx timeout [ 496.025485][ T7283] loop1: detected capacity change from 0 to 4096 [ 496.196535][ T7243] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 496.286688][ T7243] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 496.577845][ T7243] team0: Port device team_slave_0 added [ 496.676961][ T7243] team0: Port device team_slave_1 added [ 497.036403][ T7243] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 497.044028][ T7243] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 497.078218][ T7243] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 497.222302][ T7283] overlayfs: upper fs does not support tmpfile. [ 497.245608][ T7243] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 497.254176][ T7243] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 497.273997][ T7283] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 497.286399][ T7243] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 497.606900][ T5077] ntfs3: loop1: failed to convert name for inode 1e. [ 497.634146][ T7243] hsr_slave_0: entered promiscuous mode [ 497.649496][ T7243] hsr_slave_1: entered promiscuous mode [ 497.679716][ T7243] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 497.687628][ T7243] Cannot create hsr debugfs directory [ 497.751498][ T50] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 497.761490][ T50] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 497.790406][ T50] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 497.803578][ T2795] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.831911][ T50] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 497.843571][ T50] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 497.853373][ T50] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 498.052654][ T50] Bluetooth: hci1: command tx timeout [ 498.107572][ T2795] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.362269][ T2795] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.535623][ T2795] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.264208][ T2795] bridge_slave_1: left allmulticast mode [ 499.270084][ T2795] bridge_slave_1: left promiscuous mode [ 499.276852][ T2795] bridge0: port 2(bridge_slave_1) entered disabled state [ 499.330492][ T2795] bridge_slave_0: left allmulticast mode [ 499.336635][ T2795] bridge_slave_0: left promiscuous mode [ 499.342954][ T2795] bridge0: port 1(bridge_slave_0) entered disabled state [ 499.786904][ T2795] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 499.848724][ T2795] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 499.874689][ T2795] bond0 (unregistering): Released all slaves [ 499.895537][ T50] Bluetooth: hci3: command tx timeout [ 500.138095][ T50] Bluetooth: hci1: command tx timeout [ 500.473803][ T7297] chnl_net:caif_netlink_parms(): no params data found [ 500.738291][ T7243] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 500.858121][ T7243] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 501.017388][ T2795] hsr_slave_0: left promiscuous mode [ 501.078470][ T2795] hsr_slave_1: left promiscuous mode [ 501.126585][ T2795] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 501.134669][ T2795] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 501.205221][ T2795] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 501.212997][ T2795] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 501.270530][ T7324] loop3: detected capacity change from 0 to 512 [ 501.291318][ T2795] veth0_macvtap: left promiscuous mode [ 501.297261][ T2795] veth1_vlan: left promiscuous mode [ 501.303104][ T2795] veth0_vlan: left promiscuous mode [ 501.373485][ T7324] EXT4-fs error (device loop3): ext4_orphan_get:1420: comm syz-executor.3: bad orphan inode 13 [ 501.399200][ T5073] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 501.415573][ T5073] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 501.425501][ T5073] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 501.442935][ T5073] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 501.463490][ T5073] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 501.475117][ T5073] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 501.481903][ T5124] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 501.485786][ T7324] ext4_test_bit(bit=12, block=4) = 1 [ 501.495453][ T7324] is_bad_inode(inode)=0 [ 501.499869][ T7324] NEXT_ORPHAN(inode)=0 [ 501.504271][ T7324] max_ino=32 [ 501.507637][ T7324] i_nlink=1 [ 501.511686][ T7324] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 501.912505][ T2795] team0 (unregistering): Port device team_slave_1 removed [ 501.935697][ T5124] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 501.947334][ T5124] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 501.958862][ T5124] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 501.972307][ T5124] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 501.985609][ T5124] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.007282][ T5073] Bluetooth: hci3: command tx timeout [ 502.017139][ T2795] team0 (unregistering): Port device team_slave_0 removed [ 502.029402][ T5124] usb 1-1: config 0 descriptor?? [ 502.052451][ T7322] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 502.259647][ T7243] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 502.323125][ T7243] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 502.546188][ T5124] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 502.563776][ T5086] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 502.598257][ T5124] plantronics 0003:047F:FFFF.0008: No inputs registered, leaving [ 502.709137][ T5124] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 502.952133][ T7297] bridge0: port 1(bridge_slave_0) entered blocking state [ 502.959867][ T7297] bridge0: port 1(bridge_slave_0) entered disabled state [ 502.965374][ T5128] usb 1-1: USB disconnect, device number 8 [ 502.968737][ T7297] bridge_slave_0: entered allmulticast mode [ 502.982222][ T7297] bridge_slave_0: entered promiscuous mode [ 503.098114][ T7297] bridge0: port 2(bridge_slave_1) entered blocking state [ 503.113718][ T7297] bridge0: port 2(bridge_slave_1) entered disabled state [ 503.121584][ T7297] bridge_slave_1: entered allmulticast mode [ 503.130492][ T7297] bridge_slave_1: entered promiscuous mode [ 503.437053][ T7297] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 503.571439][ T7297] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 503.574492][ T5073] Bluetooth: hci2: command tx timeout [ 503.765119][ T7297] team0: Port device team_slave_0 added [ 503.778489][ T7341] veth0_vlan: entered allmulticast mode [ 503.892568][ T7297] team0: Port device team_slave_1 added [ 504.042667][ T7342] veth0_vlan: left promiscuous mode [ 504.051131][ T5073] Bluetooth: hci3: command tx timeout [ 504.054414][ T7342] veth0_vlan: entered promiscuous mode [ 504.311551][ T7297] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 504.318786][ T7297] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 504.346278][ T7297] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 504.358848][ T7326] chnl_net:caif_netlink_parms(): no params data found [ 504.518001][ T7297] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 504.525657][ T7297] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 504.553076][ T7297] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 504.708119][ T7243] 8021q: adding VLAN 0 to HW filter on device bond0 [ 504.975537][ T7297] hsr_slave_0: entered promiscuous mode [ 505.021855][ T7297] hsr_slave_1: entered promiscuous mode [ 505.050751][ T7297] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 505.058517][ T7297] Cannot create hsr debugfs directory [ 505.084174][ T7243] 8021q: adding VLAN 0 to HW filter on device team0 [ 505.291665][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 505.299479][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 505.442393][ T7344] bridge0: port 2(bridge_slave_1) entered blocking state [ 505.450044][ T7344] bridge0: port 2(bridge_slave_1) entered forwarding state [ 505.652921][ T5073] Bluetooth: hci2: command tx timeout [ 505.900835][ T7326] bridge0: port 1(bridge_slave_0) entered blocking state [ 505.908549][ T7326] bridge0: port 1(bridge_slave_0) entered disabled state [ 505.916460][ T7326] bridge_slave_0: entered allmulticast mode [ 505.925616][ T7326] bridge_slave_0: entered promiscuous mode [ 506.046066][ T7326] bridge0: port 2(bridge_slave_1) entered blocking state [ 506.054255][ T7326] bridge0: port 2(bridge_slave_1) entered disabled state [ 506.062376][ T7326] bridge_slave_1: entered allmulticast mode [ 506.078089][ T7326] bridge_slave_1: entered promiscuous mode [ 506.141796][ T5073] Bluetooth: hci3: command tx timeout [ 506.489775][ T7326] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 506.599276][ T7326] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 506.984308][ T7326] team0: Port device team_slave_0 added [ 507.062707][ T7326] team0: Port device team_slave_1 added [ 507.134451][ T2795] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.391625][ T2795] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.505747][ T7326] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 507.513069][ T7326] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 507.539519][ T7326] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 507.673675][ T2795] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.731642][ T5073] Bluetooth: hci2: command tx timeout [ 507.768766][ T7326] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 507.776023][ T7326] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 507.802568][ T7326] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 507.886216][ T2795] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.937237][ T7297] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 508.007499][ T7297] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 508.092371][ T7297] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 508.311558][ T7297] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 508.475678][ T7326] hsr_slave_0: entered promiscuous mode [ 508.518443][ T7326] hsr_slave_1: entered promiscuous mode [ 508.553347][ T7326] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 508.562171][ T7326] Cannot create hsr debugfs directory [ 508.587576][ T2795] bridge_slave_1: left allmulticast mode [ 508.593522][ T2795] bridge_slave_1: left promiscuous mode [ 508.600052][ T2795] bridge0: port 2(bridge_slave_1) entered disabled state [ 508.681337][ T2795] bridge_slave_0: left allmulticast mode [ 508.687230][ T2795] bridge_slave_0: left promiscuous mode [ 508.693953][ T2795] bridge0: port 1(bridge_slave_0) entered disabled state [ 509.234534][ T2795] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 509.286895][ T2795] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 509.332512][ T2795] bond0 (unregistering): Released all slaves [ 509.583142][ T7243] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 509.814242][ T5073] Bluetooth: hci2: command tx timeout [ 510.227880][ T2795] hsr_slave_0: left promiscuous mode [ 510.243203][ T2795] hsr_slave_1: left promiscuous mode [ 510.277496][ T2795] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 510.285353][ T2795] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 510.304246][ T2795] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 510.312521][ T2795] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 510.361151][ T2795] veth1_macvtap: left promiscuous mode [ 510.366891][ T2795] veth0_macvtap: left promiscuous mode [ 510.376179][ T2795] veth1_vlan: left promiscuous mode [ 510.381887][ T2795] veth0_vlan: left promiscuous mode [ 510.529860][ T7380] loop0: detected capacity change from 0 to 512 [ 510.762047][ T7380] EXT4-fs error (device loop0): ext4_orphan_get:1420: comm syz-executor.0: bad orphan inode 13 [ 510.767165][ T7384] loop3: detected capacity change from 0 to 8 [ 510.796269][ T7380] ext4_test_bit(bit=12, block=4) = 1 [ 510.801908][ T7380] is_bad_inode(inode)=0 [ 510.806322][ T7380] NEXT_ORPHAN(inode)=0 [ 510.811218][ T7380] max_ino=32 [ 510.814484][ T7384] squashfs image failed sanity check [ 510.819967][ T7380] i_nlink=1 [ 510.823566][ T7380] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 511.047914][ T7382] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1216: group 0, block bitmap and bg descriptor inconsistent: 216 vs 220 free clusters [ 511.080494][ T2795] team0 (unregistering): Port device team_slave_1 removed [ 511.125922][ T2795] team0 (unregistering): Port device team_slave_0 removed [ 511.727467][ T6646] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 512.191947][ T7297] 8021q: adding VLAN 0 to HW filter on device bond0 [ 512.488745][ T7297] 8021q: adding VLAN 0 to HW filter on device team0 [ 512.523599][ T25] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 512.656176][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 512.663970][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 512.680271][ T7326] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 512.884127][ T7326] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 512.927026][ T7399] veth0_vlan: left promiscuous mode [ 512.940118][ T7399] veth0_vlan: entered promiscuous mode [ 512.971298][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 512.983018][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 512.994677][ T25] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 512.997262][ T7326] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 513.008247][ T25] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 513.024182][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.118805][ T5121] bridge0: port 2(bridge_slave_1) entered blocking state [ 513.126603][ T5121] bridge0: port 2(bridge_slave_1) entered forwarding state [ 513.149642][ T25] usb 1-1: config 0 descriptor?? [ 513.177178][ T7394] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 513.217890][ T7326] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 513.527310][ T7243] veth0_vlan: entered promiscuous mode [ 513.679580][ T7243] veth1_vlan: entered promiscuous mode [ 513.706699][ T25] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 513.742309][ T25] plantronics 0003:047F:FFFF.0009: No inputs registered, leaving [ 513.826090][ T25] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 514.043465][ T779] usb 1-1: USB disconnect, device number 9 [ 514.125041][ T7243] veth0_macvtap: entered promiscuous mode [ 514.157403][ T7243] veth1_macvtap: entered promiscuous mode [ 514.276020][ T7243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 514.287473][ T7243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 514.299978][ T7243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 514.311205][ T7243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 514.326059][ T7243] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 514.513446][ T7243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 514.524309][ T7243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 514.534634][ T7243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 514.545360][ T7243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 514.560131][ T7243] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 514.652334][ T7243] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.661500][ T7243] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.673981][ T7243] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.684123][ T7243] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.761469][ T7326] 8021q: adding VLAN 0 to HW filter on device bond0 [ 514.959216][ T7326] 8021q: adding VLAN 0 to HW filter on device team0 [ 515.064061][ T779] bridge0: port 1(bridge_slave_0) entered blocking state [ 515.071864][ T779] bridge0: port 1(bridge_slave_0) entered forwarding state [ 515.155042][ T779] bridge0: port 2(bridge_slave_1) entered blocking state [ 515.162792][ T779] bridge0: port 2(bridge_slave_1) entered forwarding state [ 515.472953][ T7297] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 516.163568][ T7297] veth0_vlan: entered promiscuous mode [ 516.298281][ T7297] veth1_vlan: entered promiscuous mode [ 516.647478][ T7297] veth0_macvtap: entered promiscuous mode [ 516.755477][ T7297] veth1_macvtap: entered promiscuous mode [ 516.928870][ T7297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 516.939823][ T7297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 516.950966][ T7297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 516.963019][ T7297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 516.973142][ T7297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 516.983911][ T7297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 516.998635][ T7297] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 517.197557][ T7297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 517.209926][ T7297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 517.221043][ T7297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 517.234994][ T7297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 517.245936][ T7297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 517.256704][ T7297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 517.271543][ T7297] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 517.316380][ T7297] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.327011][ T7297] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.344361][ T7297] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.355271][ T7297] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.495545][ T7326] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 518.014584][ T7326] veth0_vlan: entered promiscuous mode [ 518.121730][ T7326] veth1_vlan: entered promiscuous mode [ 518.413993][ T7439] loop3: detected capacity change from 0 to 512 [ 518.466833][ T7326] veth0_macvtap: entered promiscuous mode [ 518.509967][ T7326] veth1_macvtap: entered promiscuous mode [ 518.591702][ T7439] EXT4-fs error (device loop3): ext4_orphan_get:1420: comm syz-executor.3: bad orphan inode 13 [ 518.710921][ T7439] ext4_test_bit(bit=12, block=4) = 1 [ 518.716523][ T7439] is_bad_inode(inode)=0 [ 518.721031][ T7439] NEXT_ORPHAN(inode)=0 [ 518.725275][ T7439] max_ino=32 [ 518.728645][ T7439] i_nlink=1 [ 518.732117][ T7439] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 518.755184][ T7326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 518.767258][ T7326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 518.779303][ T7326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 518.790467][ T7326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 518.800709][ T7326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 518.811404][ T7326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 518.821472][ T7326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 518.832187][ T7326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 518.847032][ T7326] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 519.060348][ T7326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 519.071977][ T7326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 519.085342][ T7326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 519.097710][ T7326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 519.108247][ T7326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 519.119336][ T7326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 519.129452][ T7326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 519.141570][ T7326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 519.157164][ T7326] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 519.233398][ T7326] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.244022][ T7326] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.259555][ T7326] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.271178][ T7326] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.545855][ T5086] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 520.031186][ T7456] loop3: detected capacity change from 0 to 8 [ 520.117896][ T7456] squashfs image failed sanity check [ 521.393151][ T3155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 521.401363][ T3155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 521.542181][ T3155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 521.550223][ T3155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 521.671606][ T7344] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 522.062064][ T7344] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 522.073703][ T7344] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 522.085229][ T7344] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 522.098601][ T7344] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 522.108030][ T7344] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 522.182755][ T7344] usb 4-1: config 0 descriptor?? [ 522.205648][ T7471] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 522.419139][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 522.419220][ T29] audit: type=1804 audit(1718227173.226:435): pid=7482 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2522868898/syzkaller.8QuSZh/0/bus" dev="sda1" ino=1954 res=1 errno=0 [ 522.747806][ T7344] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 522.789960][ T7344] plantronics 0003:047F:FFFF.000A: No inputs registered, leaving [ 522.845793][ T7344] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 523.110421][ T25] usb 4-1: USB disconnect, device number 8 [ 523.330389][ T2795] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 523.339837][ T2795] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 523.486330][ T2795] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 523.495648][ T2795] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 523.823123][ T7497] veth0_vlan: entered allmulticast mode [ 524.099322][ T7500] veth0_vlan: left promiscuous mode [ 524.111324][ T7500] veth0_vlan: entered promiscuous mode [ 525.022631][ T7344] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 525.030895][ T7344] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 525.248606][ T3048] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 525.257033][ T3048] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 525.431988][ T7523] loop3: detected capacity change from 0 to 512 [ 525.473325][ T7525] loop2: detected capacity change from 0 to 8 [ 525.515471][ T7523] EXT4-fs error (device loop3): ext4_orphan_get:1420: comm syz-executor.3: bad orphan inode 13 [ 525.516430][ T7525] squashfs image failed sanity check [ 525.604292][ T7523] ext4_test_bit(bit=12, block=4) = 1 [ 525.609893][ T7523] is_bad_inode(inode)=0 [ 525.614493][ T7523] NEXT_ORPHAN(inode)=0 [ 525.618830][ T7523] max_ino=32 [ 525.622373][ T7523] i_nlink=1 [ 525.625716][ T7523] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 525.856687][ T7532] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 526.160984][ T29] audit: type=1804 audit(1718227176.966:436): pid=7534 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3916882442/syzkaller.pgcCXD/3/bus" dev="sda1" ino=1965 res=1 errno=0 [ 526.316206][ T1229] ieee802154 phy0 wpan0: encryption failed: -22 [ 526.323075][ T1229] ieee802154 phy1 wpan1: encryption failed: -22 [ 526.392833][ T5086] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 527.281796][ T6968] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 527.679866][ T6968] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 527.691901][ T6968] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 527.703430][ T6968] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 527.716772][ T6968] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 527.726274][ T6968] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 527.805402][ T6968] usb 4-1: config 0 descriptor?? [ 527.832859][ T7543] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 528.225135][ T7561] loop1: detected capacity change from 0 to 8 [ 528.272193][ T7561] squashfs image failed sanity check [ 528.307017][ T6968] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 528.373541][ T6968] plantronics 0003:047F:FFFF.000B: No inputs registered, leaving [ 528.422267][ T6968] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 528.659535][ T7343] usb 4-1: USB disconnect, device number 9 [ 528.863213][ T7567] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 528.973694][ T7570] loop2: detected capacity change from 0 to 512 [ 529.027945][ T7570] EXT4-fs error (device loop2): ext4_orphan_get:1420: comm syz-executor.2: bad orphan inode 13 [ 529.031034][ T7573] veth0_vlan: entered allmulticast mode [ 529.057868][ T7570] ext4_test_bit(bit=12, block=4) = 1 [ 529.063795][ T7570] is_bad_inode(inode)=0 [ 529.068217][ T7570] NEXT_ORPHAN(inode)=0 [ 529.072695][ T7570] max_ino=32 [ 529.076056][ T7570] i_nlink=1 [ 529.079396][ T7570] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 529.238603][ T7574] veth0_vlan: left promiscuous mode [ 529.247362][ T7574] veth0_vlan: entered promiscuous mode [ 529.494853][ T29] audit: type=1804 audit(1718227180.246:437): pid=7578 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2522868898/syzkaller.8QuSZh/6/bus" dev="sda1" ino=1966 res=1 errno=0 [ 530.039388][ T7297] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 531.461477][ T7602] loop2: detected capacity change from 0 to 8 [ 531.496789][ T7602] squashfs image failed sanity check [ 531.624563][ T7606] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 531.827379][ T7609] loop0: detected capacity change from 0 to 512 [ 531.905186][ T7609] EXT4-fs error (device loop0): ext4_orphan_get:1420: comm syz-executor.0: bad orphan inode 13 [ 531.922134][ T6968] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 531.961795][ T7609] ext4_test_bit(bit=12, block=4) = 1 [ 531.967303][ T7609] is_bad_inode(inode)=0 [ 531.971913][ T7609] NEXT_ORPHAN(inode)=0 [ 531.979128][ T7609] max_ino=32 [ 531.983132][ T7609] i_nlink=1 [ 531.986474][ T7609] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 532.189939][ T29] audit: type=1804 audit(1718227182.966:438): pid=7615 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir1547494852/syzkaller.hnYVf5/170/bus" dev="sda1" ino=1948 res=1 errno=0 [ 532.311946][ T6968] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 532.323774][ T6968] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 532.335926][ T6968] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 532.349429][ T6968] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 532.358783][ T6968] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 532.419332][ T6968] usb 5-1: config 0 descriptor?? [ 532.442302][ T7607] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 532.803434][ T6646] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 532.919896][ T6968] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 532.977179][ T6968] plantronics 0003:047F:FFFF.000C: No inputs registered, leaving [ 533.038717][ T6968] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 533.272286][ T6968] usb 5-1: USB disconnect, device number 7 [ 533.673468][ T7643] loop2: detected capacity change from 0 to 8 [ 533.714521][ T7643] squashfs image failed sanity check [ 533.945180][ T7645] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 534.554177][ T7655] veth0_vlan: entered allmulticast mode [ 534.598360][ T7656] loop3: detected capacity change from 0 to 512 [ 534.730894][ T7659] veth0_vlan: left promiscuous mode [ 534.743740][ T7659] veth0_vlan: entered promiscuous mode [ 534.752550][ T29] audit: type=1804 audit(1718227185.476:439): pid=7657 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir2169981171/syzkaller.a28WyI/9/bus" dev="sda1" ino=1964 res=1 errno=0 [ 534.876617][ T7656] EXT4-fs error (device loop3): ext4_orphan_get:1420: comm syz-executor.3: bad orphan inode 13 [ 534.899124][ T7656] ext4_test_bit(bit=12, block=4) = 1 [ 534.904885][ T7656] is_bad_inode(inode)=0 [ 534.909217][ T7656] NEXT_ORPHAN(inode)=0 [ 534.913625][ T7656] max_ino=32 [ 534.917003][ T7656] i_nlink=1 [ 534.920348][ T7656] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 535.583511][ T5086] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 535.671258][ T43] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 535.920843][ T43] usb 5-1: Using ep0 maxpacket: 32 [ 536.066509][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 536.081311][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 536.091515][ T43] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 536.101031][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 536.133880][ T43] usb 5-1: config 0 descriptor?? [ 536.202041][ T43] hub 5-1:0.0: USB hub found [ 536.417925][ T43] hub 5-1:0.0: 1 port detected [ 536.815392][ T7679] loop1: detected capacity change from 0 to 8 [ 536.878494][ T7679] squashfs image failed sanity check [ 537.296221][ T43] hub 5-1:0.0: activate --> -90 [ 537.302388][ T5135] usb 5-1: USB disconnect, device number 8 [ 537.485092][ T7684] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 537.754606][ T43] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 538.201825][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 538.213662][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 538.227474][ T43] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 538.241423][ T43] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 538.250976][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 538.323426][ T43] usb 2-1: config 0 descriptor?? [ 538.355882][ T7683] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 538.386098][ T7692] loop0: detected capacity change from 0 to 512 [ 538.471289][ T29] audit: type=1804 audit(1718227189.246:440): pid=7694 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir1547494852/syzkaller.hnYVf5/178/bus" dev="sda1" ino=1964 res=1 errno=0 [ 538.581889][ T7692] EXT4-fs error (device loop0): ext4_orphan_get:1420: comm syz-executor.0: bad orphan inode 13 [ 538.635760][ T7692] ext4_test_bit(bit=12, block=4) = 1 [ 538.641582][ T7692] is_bad_inode(inode)=0 [ 538.646156][ T7692] NEXT_ORPHAN(inode)=0 [ 538.650400][ T7692] max_ino=32 [ 538.654041][ T7692] i_nlink=1 [ 538.657393][ T7692] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 538.827429][ T43] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 538.898822][ T43] plantronics 0003:047F:FFFF.000D: No inputs registered, leaving [ 538.958355][ T43] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 539.136071][ T7710] loop2: detected capacity change from 0 to 8 [ 539.185809][ T43] usb 2-1: USB disconnect, device number 11 [ 539.233732][ T7710] squashfs image failed sanity check [ 539.335375][ T6646] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 539.822143][ T7722] veth0_vlan: left promiscuous mode [ 539.834023][ T7722] veth0_vlan: entered promiscuous mode [ 539.953301][ T7724] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 541.518701][ T7737] loop4: detected capacity change from 0 to 512 [ 541.675315][ T7737] EXT4-fs error (device loop4): ext4_orphan_get:1420: comm syz-executor.4: bad orphan inode 13 [ 541.711468][ T7737] ext4_test_bit(bit=12, block=4) = 1 [ 541.717063][ T7737] is_bad_inode(inode)=0 [ 541.721679][ T7737] NEXT_ORPHAN(inode)=0 [ 541.725938][ T7737] max_ino=32 [ 541.729311][ T7737] i_nlink=1 [ 541.732811][ T7737] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 541.830201][ T7745] loop1: detected capacity change from 0 to 8 [ 541.865306][ T29] audit: type=1804 audit(1718227192.636:441): pid=7743 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1890952879/syzkaller.r9sijk/59/bus" dev="sda1" ino=1958 res=1 errno=0 [ 541.918921][ T7745] squashfs image failed sanity check [ 542.504484][ T7243] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 543.065704][ T7760] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 543.223086][ T4516] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 543.641884][ T4516] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 543.654847][ T4516] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 543.666739][ T4516] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 543.680026][ T4516] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 543.689445][ T4516] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 543.793244][ T4516] usb 5-1: config 0 descriptor?? [ 543.821252][ T7754] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 544.290154][ T4516] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 544.325450][ T4516] plantronics 0003:047F:FFFF.000E: No inputs registered, leaving [ 544.381591][ T43] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 544.382234][ T4516] plantronics 0003:047F:FFFF.000E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 544.640882][ T43] usb 4-1: Using ep0 maxpacket: 32 [ 544.664840][ T5133] usb 5-1: USB disconnect, device number 9 [ 544.680822][ T7774] loop1: detected capacity change from 0 to 8 [ 544.764456][ T7774] squashfs image failed sanity check [ 544.773076][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 544.784953][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 544.796200][ T43] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 544.805628][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 544.832884][ T43] usb 4-1: config 0 descriptor?? [ 544.898713][ T43] hub 4-1:0.0: USB hub found [ 544.943651][ T7776] loop2: detected capacity change from 0 to 512 [ 545.028261][ T7776] EXT4-fs error (device loop2): ext4_orphan_get:1420: comm syz-executor.2: bad orphan inode 13 [ 545.057108][ T7776] ext4_test_bit(bit=12, block=4) = 1 [ 545.063364][ T7776] is_bad_inode(inode)=0 [ 545.067703][ T7776] NEXT_ORPHAN(inode)=0 [ 545.072080][ T7776] max_ino=32 [ 545.075465][ T7776] i_nlink=1 [ 545.078812][ T7776] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 545.105742][ T7780] veth0_vlan: entered allmulticast mode [ 545.125737][ T43] hub 4-1:0.0: 1 port detected [ 545.258411][ T29] audit: type=1804 audit(1718227196.056:442): pid=7782 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir2169981171/syzkaller.a28WyI/24/bus" dev="sda1" ino=1949 res=1 errno=0 [ 545.260496][ T7780] veth0_vlan: left promiscuous mode [ 545.293798][ T7780] veth0_vlan: entered promiscuous mode [ 545.922279][ T7297] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 545.991499][ T4516] usb 4-1: USB disconnect, device number 10 [ 546.005518][ T779] hub 4-1:0.0: activate --> -19 [ 546.198874][ T7794] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 547.324550][ T7815] loop2: detected capacity change from 0 to 8 [ 547.422345][ T7815] squashfs image failed sanity check [ 547.687448][ T7819] loop3: detected capacity change from 0 to 512 [ 547.795779][ T7819] EXT4-fs error (device loop3): ext4_orphan_get:1420: comm syz-executor.3: bad orphan inode 13 [ 547.862076][ T7819] ext4_test_bit(bit=12, block=4) = 1 [ 547.867582][ T7819] is_bad_inode(inode)=0 [ 547.872239][ T7819] NEXT_ORPHAN(inode)=0 [ 547.876485][ T7819] max_ino=32 [ 547.879852][ T7819] i_nlink=1 [ 547.883313][ T7819] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 547.901823][ T780] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 548.071200][ T29] audit: type=1804 audit(1718227198.836:443): pid=7824 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3916882442/syzkaller.pgcCXD/26/bus" dev="sda1" ino=1965 res=1 errno=0 [ 548.301277][ T780] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 548.312863][ T780] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 548.324493][ T780] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 548.337915][ T780] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 548.347315][ T780] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 548.432507][ T780] usb 5-1: config 0 descriptor?? [ 548.452180][ T7817] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 548.699011][ T7742] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1216: group 0, block bitmap and bg descriptor inconsistent: 216 vs 220 free clusters [ 548.719943][ T5086] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 548.852256][ T50] Bluetooth: hci0: command 0x0406 tx timeout [ 548.907527][ T780] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 549.010197][ T780] plantronics 0003:047F:FFFF.000F: No inputs registered, leaving [ 549.074555][ T780] plantronics 0003:047F:FFFF.000F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 549.196016][ T7837] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 549.287839][ T779] usb 5-1: USB disconnect, device number 10 [ 549.454920][ T5133] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 549.770830][ T5133] usb 1-1: Using ep0 maxpacket: 32 [ 549.891143][ T5133] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 549.903726][ T5133] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 549.913916][ T5133] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 549.923358][ T5133] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 550.003495][ T5133] usb 1-1: config 0 descriptor?? [ 550.061116][ T5133] hub 1-1:0.0: USB hub found [ 550.265722][ T5133] hub 1-1:0.0: 1 port detected [ 550.303716][ T7849] loop4: detected capacity change from 0 to 8 [ 550.341698][ T7849] squashfs image failed sanity check [ 550.848146][ T7857] loop4: detected capacity change from 0 to 512 [ 550.904327][ T7857] EXT4-fs error (device loop4): ext4_orphan_get:1420: comm syz-executor.4: bad orphan inode 13 [ 550.920323][ T7857] ext4_test_bit(bit=12, block=4) = 1 [ 550.926189][ T7857] is_bad_inode(inode)=0 [ 550.931058][ T7857] NEXT_ORPHAN(inode)=0 [ 550.935305][ T7857] max_ino=32 [ 550.938667][ T7857] i_nlink=1 [ 550.942142][ T7857] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 551.084499][ T7860] veth0_vlan: left promiscuous mode [ 551.096829][ T7860] veth0_vlan: entered promiscuous mode [ 551.192213][ T5133] hub 1-1:0.0: activate --> -90 [ 551.199674][ T7343] usb 1-1: USB disconnect, device number 10 [ 551.629995][ T29] audit: type=1804 audit(1718227202.436:444): pid=7868 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir2169981171/syzkaller.a28WyI/27/bus" dev="sda1" ino=1945 res=1 errno=0 [ 551.755615][ T7243] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 552.311647][ T7879] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 553.055915][ T7891] loop0: detected capacity change from 0 to 8 [ 553.125046][ T7891] squashfs image failed sanity check [ 553.529569][ T7897] loop3: detected capacity change from 0 to 512 [ 553.579141][ T7897] EXT4-fs error (device loop3): ext4_orphan_get:1420: comm syz-executor.3: bad orphan inode 13 [ 553.609645][ T7897] ext4_test_bit(bit=12, block=4) = 1 [ 553.615261][ T7897] is_bad_inode(inode)=0 [ 553.619596][ T7897] NEXT_ORPHAN(inode)=0 [ 553.624176][ T7897] max_ino=32 [ 553.627559][ T7897] i_nlink=1 [ 553.630989][ T7897] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 553.766568][ T29] audit: type=1804 audit(1718227204.576:445): pid=7903 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2522868898/syzkaller.8QuSZh/29/bus" dev="sda1" ino=1965 res=1 errno=0 [ 553.972021][ T43] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 554.211105][ T43] usb 2-1: Using ep0 maxpacket: 32 [ 554.341150][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 554.352928][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 554.363118][ T43] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 554.372613][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 554.420460][ T43] usb 2-1: config 0 descriptor?? [ 554.506415][ T5086] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 554.523582][ T43] hub 2-1:0.0: USB hub found [ 554.697075][ T43] hub 2-1:0.0: 1 port detected [ 555.386879][ T7928] loop4: detected capacity change from 0 to 8 [ 555.436243][ T7928] squashfs image failed sanity check [ 555.608518][ T5127] usb 2-1: USB disconnect, device number 12 [ 555.615536][ T43] hub 2-1:0.0: activate --> -19 [ 556.049964][ T7937] veth0_vlan: left promiscuous mode [ 556.058471][ T7937] veth0_vlan: entered promiscuous mode [ 556.345641][ T7942] loop0: detected capacity change from 0 to 512 [ 556.475308][ T7942] EXT4-fs error (device loop0): ext4_orphan_get:1420: comm syz-executor.0: bad orphan inode 13 [ 556.537146][ T7942] ext4_test_bit(bit=12, block=4) = 1 [ 556.543024][ T7942] is_bad_inode(inode)=0 [ 556.547443][ T7942] NEXT_ORPHAN(inode)=0 [ 556.553200][ T7942] max_ino=32 [ 556.556575][ T7942] i_nlink=1 [ 556.559928][ T7942] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 556.611799][ T29] audit: type=1804 audit(1718227207.406:446): pid=7950 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir2169981171/syzkaller.a28WyI/30/bus" dev="sda1" ino=1965 res=1 errno=0 [ 557.263357][ T6646] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 557.619528][ T7962] loop2: detected capacity change from 0 to 8 [ 557.704313][ T7962] squashfs image failed sanity check [ 558.463242][ T4516] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 558.721485][ T4516] usb 3-1: Using ep0 maxpacket: 32 [ 558.871215][ T4516] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 558.882574][ T4516] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 558.892772][ T4516] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 558.905404][ T4516] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 558.972197][ T4516] usb 3-1: config 0 descriptor?? [ 559.030357][ T4516] hub 3-1:0.0: USB hub found [ 559.113305][ T7983] loop3: detected capacity change from 0 to 512 [ 559.228876][ T7983] EXT4-fs error (device loop3): ext4_orphan_get:1420: comm syz-executor.3: bad orphan inode 13 [ 559.276316][ T4516] hub 3-1:0.0: 1 port detected [ 559.286928][ T7983] ext4_test_bit(bit=12, block=4) = 1 [ 559.292714][ T7983] is_bad_inode(inode)=0 [ 559.297131][ T7983] NEXT_ORPHAN(inode)=0 [ 559.302238][ T7983] max_ino=32 [ 559.305622][ T7983] i_nlink=1 [ 559.308975][ T7983] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 559.536886][ T29] audit: type=1804 audit(1718227210.316:447): pid=7989 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2522868898/syzkaller.8QuSZh/34/bus" dev="sda1" ino=1959 res=1 errno=0 [ 559.814996][ T7999] loop1: detected capacity change from 0 to 8 [ 559.925443][ T7999] squashfs image failed sanity check [ 559.966179][ T10] hub 3-1:0.0: hub_ext_port_status failed (err = -71) [ 559.983664][ T4516] usb 3-1: USB disconnect, device number 8 [ 560.072963][ T5086] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 561.110423][ T10] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 561.188235][ T8016] veth0_vlan: left promiscuous mode [ 561.197009][ T8016] veth0_vlan: entered promiscuous mode [ 561.502248][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 561.512474][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 561.525875][ T10] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 561.535306][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 561.598904][ T10] usb 4-1: config 0 descriptor?? [ 561.688158][ T10] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 562.186541][ T8031] loop4: detected capacity change from 0 to 512 [ 562.254886][ T8036] loop1: detected capacity change from 0 to 8 [ 562.267183][ T8031] EXT4-fs error (device loop4): ext4_orphan_get:1420: comm syz-executor.4: bad orphan inode 13 [ 562.295589][ T8031] ext4_test_bit(bit=12, block=4) = 1 [ 562.301425][ T8031] is_bad_inode(inode)=0 [ 562.305952][ T8031] NEXT_ORPHAN(inode)=0 [ 562.310204][ T8031] max_ino=32 [ 562.313722][ T8031] i_nlink=1 [ 562.317074][ T8031] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 562.348275][ T8036] squashfs image failed sanity check [ 562.466444][ T29] audit: type=1804 audit(1718227213.246:448): pid=8038 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1890952879/syzkaller.r9sijk/83/bus" dev="sda1" ino=1966 res=1 errno=0 [ 562.612071][ T8035] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1216: group 0, block bitmap and bg descriptor inconsistent: 216 vs 220 free clusters [ 563.169786][ T7243] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 563.807539][ T43] usb 4-1: USB disconnect, device number 11 [ 564.567179][ T50] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 564.588794][ T50] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 564.600032][ T50] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 564.623445][ T50] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 564.653468][ T50] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 564.668945][ T50] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 565.737411][ T8075] loop3: detected capacity change from 0 to 8 [ 565.790139][ T8074] loop2: detected capacity change from 0 to 512 [ 565.829558][ T8075] squashfs image failed sanity check [ 565.949718][ T8059] chnl_net:caif_netlink_parms(): no params data found [ 565.981644][ T8074] EXT4-fs error (device loop2): ext4_orphan_get:1420: comm syz-executor.2: bad orphan inode 13 [ 566.031657][ T8074] ext4_test_bit(bit=12, block=4) = 1 [ 566.037240][ T8074] is_bad_inode(inode)=0 [ 566.041830][ T8074] NEXT_ORPHAN(inode)=0 [ 566.046065][ T8074] max_ino=32 [ 566.049553][ T8074] i_nlink=1 [ 566.053107][ T8074] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 566.243288][ T4191] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.317511][ T29] audit: type=1804 audit(1718227217.106:449): pid=8081 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2522868898/syzkaller.8QuSZh/41/bus" dev="sda1" ino=1939 res=1 errno=0 [ 566.425023][ T4191] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.607097][ T4191] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.690838][ T5073] Bluetooth: hci5: command tx timeout [ 566.720133][ T7297] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 566.829553][ T4191] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.034202][ T8092] veth0_vlan: left promiscuous mode [ 567.047046][ T8092] veth0_vlan: entered promiscuous mode [ 567.221441][ T4191] bridge_slave_1: left allmulticast mode [ 567.227316][ T4191] bridge_slave_1: left promiscuous mode [ 567.233585][ T4191] bridge0: port 2(bridge_slave_1) entered disabled state [ 567.269780][ T7343] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 567.341901][ T4191] bridge_slave_0: left allmulticast mode [ 567.347997][ T4191] bridge_slave_0: left promiscuous mode [ 567.354758][ T4191] bridge0: port 1(bridge_slave_0) entered disabled state [ 567.631473][ T7343] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 567.642064][ T7343] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 567.655413][ T7343] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 567.664827][ T7343] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 567.772839][ T7343] usb 1-1: config 0 descriptor?? [ 567.834219][ T7343] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 567.914986][ T4191] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 567.945727][ T4191] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 568.005799][ T4191] bond0 (unregistering): Released all slaves [ 568.238258][ T8059] bridge0: port 1(bridge_slave_0) entered blocking state [ 568.247751][ T8059] bridge0: port 1(bridge_slave_0) entered disabled state [ 568.255550][ T8059] bridge_slave_0: entered allmulticast mode [ 568.264701][ T8059] bridge_slave_0: entered promiscuous mode [ 568.319527][ T8059] bridge0: port 2(bridge_slave_1) entered blocking state [ 568.329534][ T8059] bridge0: port 2(bridge_slave_1) entered disabled state [ 568.337481][ T8059] bridge_slave_1: entered allmulticast mode [ 568.346468][ T8059] bridge_slave_1: entered promiscuous mode [ 568.596438][ T8059] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 568.771227][ T5073] Bluetooth: hci5: command tx timeout [ 568.773136][ T8059] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 568.881775][ T4191] hsr_slave_0: left promiscuous mode [ 568.914387][ T4191] hsr_slave_1: left promiscuous mode [ 568.938749][ T4191] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 568.947793][ T4191] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 568.961789][ T4191] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 568.969612][ T4191] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 569.002870][ T4191] veth1_macvtap: left promiscuous mode [ 569.008657][ T4191] veth0_macvtap: left promiscuous mode [ 569.015076][ T4191] veth1_vlan: left promiscuous mode [ 569.021364][ T4191] veth0_vlan: left promiscuous mode [ 569.794599][ T43] usb 1-1: USB disconnect, device number 11 [ 569.832453][ T4191] team0 (unregistering): Port device team_slave_1 removed [ 569.862142][ T4191] team0 (unregistering): Port device team_slave_0 removed [ 570.150172][ T8117] loop3: detected capacity change from 0 to 8 [ 570.279900][ T8117] squashfs image failed sanity check [ 570.489611][ T8119] loop0: detected capacity change from 0 to 512 [ 570.543221][ T8059] team0: Port device team_slave_0 added [ 570.579507][ T8059] team0: Port device team_slave_1 added [ 570.671095][ T8119] EXT4-fs error (device loop0): ext4_orphan_get:1420: comm syz-executor.0: bad orphan inode 13 [ 570.776230][ T8119] ext4_test_bit(bit=12, block=4) = 1 [ 570.781937][ T8119] is_bad_inode(inode)=0 [ 570.787330][ T8119] NEXT_ORPHAN(inode)=0 [ 570.791696][ T8119] max_ino=32 [ 570.795051][ T8119] i_nlink=1 [ 570.798387][ T8119] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 570.844898][ T8059] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 570.853183][ T8059] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 570.861369][ T5073] Bluetooth: hci5: command tx timeout [ 570.879382][ T8059] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 570.918957][ T8059] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 570.926444][ T8059] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 570.952874][ T8059] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 571.235741][ T29] audit: type=1804 audit(1718227221.986:450): pid=8125 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir1547494852/syzkaller.hnYVf5/211/bus" dev="sda1" ino=1939 res=1 errno=0 [ 571.236405][ T8059] hsr_slave_0: entered promiscuous mode [ 571.300476][ T8059] hsr_slave_1: entered promiscuous mode [ 571.317989][ T8059] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 571.326000][ T8059] Cannot create hsr debugfs directory [ 571.504060][ T8121] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1216: group 0, block bitmap and bg descriptor inconsistent: 216 vs 220 free clusters [ 571.554479][ T6646] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 572.747423][ T8147] loop0: detected capacity change from 0 to 8 [ 572.755673][ T8145] veth0_vlan: left promiscuous mode [ 572.767970][ T8145] veth0_vlan: entered promiscuous mode [ 572.861644][ T8147] squashfs image failed sanity check [ 572.951547][ T5073] Bluetooth: hci5: command tx timeout [ 573.060794][ T43] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 573.136116][ T8059] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 573.222587][ T8059] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 573.312463][ T8059] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 573.351555][ T8059] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 573.462081][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 573.472475][ T43] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 573.486115][ T43] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 573.499845][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 573.554408][ T43] usb 3-1: config 0 descriptor?? [ 573.608553][ T43] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 574.172375][ T8059] 8021q: adding VLAN 0 to HW filter on device bond0 [ 574.314370][ T8059] 8021q: adding VLAN 0 to HW filter on device team0 [ 574.426719][ T4516] bridge0: port 1(bridge_slave_0) entered blocking state [ 574.434510][ T4516] bridge0: port 1(bridge_slave_0) entered forwarding state [ 574.540406][ T4516] bridge0: port 2(bridge_slave_1) entered blocking state [ 574.548160][ T4516] bridge0: port 2(bridge_slave_1) entered forwarding state [ 574.616200][ T8163] loop3: detected capacity change from 0 to 512 [ 574.736474][ T8163] EXT4-fs error (device loop3): ext4_orphan_get:1420: comm syz-executor.3: bad orphan inode 13 [ 574.798868][ T8163] ext4_test_bit(bit=12, block=4) = 1 [ 574.804603][ T8163] is_bad_inode(inode)=0 [ 574.809010][ T8163] NEXT_ORPHAN(inode)=0 [ 574.813427][ T8163] max_ino=32 [ 574.816796][ T8163] i_nlink=1 [ 574.820136][ T8163] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 575.441668][ T29] audit: type=1804 audit(1718227226.206:451): pid=8174 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1890952879/syzkaller.r9sijk/93/bus" dev="sda1" ino=1960 res=1 errno=0 [ 575.561870][ T5086] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 575.725789][ T4516] usb 3-1: USB disconnect, device number 9 [ 576.175092][ T8059] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 576.747907][ T8188] loop0: detected capacity change from 0 to 8 [ 576.759055][ T8059] veth0_vlan: entered promiscuous mode [ 576.830921][ T8188] squashfs image failed sanity check [ 576.868433][ T8059] veth1_vlan: entered promiscuous mode [ 577.173317][ T8059] veth0_macvtap: entered promiscuous mode [ 577.242051][ T8059] veth1_macvtap: entered promiscuous mode [ 577.411443][ T8059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 577.423244][ T8059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 577.433425][ T8059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 577.445460][ T8059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 577.455611][ T8059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 577.466335][ T8059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 577.476425][ T8059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 577.487344][ T8059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 577.507901][ T8059] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 577.580190][ T8059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 577.585463][ T8201] loop4: detected capacity change from 0 to 512 [ 577.591056][ T8059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 577.607771][ T8059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 577.618497][ T8059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 577.628823][ T8059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 577.640058][ T8059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 577.651549][ T8059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 577.668043][ T8059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 577.684075][ T8059] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 577.733786][ T8059] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 577.742913][ T8059] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 577.753320][ T8059] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 577.762457][ T8059] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 577.856492][ T8201] EXT4-fs error (device loop4): ext4_orphan_get:1420: comm syz-executor.4: bad orphan inode 13 [ 577.876535][ T8201] ext4_test_bit(bit=12, block=4) = 1 [ 577.883326][ T8201] is_bad_inode(inode)=0 [ 577.887663][ T8201] NEXT_ORPHAN(inode)=0 [ 577.892174][ T8201] max_ino=32 [ 577.895554][ T8201] i_nlink=1 [ 577.898909][ T8201] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 577.995429][ T8166] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1216: group 0, block bitmap and bg descriptor inconsistent: 216 vs 220 free clusters [ 578.232916][ T8212] veth0_vlan: left promiscuous mode [ 578.244724][ T8212] veth0_vlan: entered promiscuous mode [ 578.485516][ T7243] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 578.552758][ T7344] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 578.778424][ T7344] usb 4-1: device descriptor read/64, error -71 [ 578.945182][ T29] audit: type=1804 audit(1718227229.706:452): pid=8219 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2522868898/syzkaller.8QuSZh/52/bus" dev="sda1" ino=1943 res=1 errno=0 [ 579.092743][ T7344] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 579.344364][ T7344] usb 4-1: device descriptor read/64, error -71 [ 579.493190][ T7344] usb usb4-port1: attempt power cycle [ 579.961965][ T7344] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 580.079500][ T7344] usb 4-1: device descriptor read/8, error -71 [ 580.275132][ T8238] loop2: detected capacity change from 0 to 8 [ 580.344961][ T8238] squashfs image failed sanity check [ 580.390912][ T7344] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 580.491904][ T7344] usb 4-1: device descriptor read/8, error -71 [ 580.641416][ T7344] usb usb4-port1: unable to enumerate USB device [ 581.466611][ T8257] loop0: detected capacity change from 0 to 512 [ 581.571585][ T8257] EXT4-fs error (device loop0): ext4_orphan_get:1420: comm syz-executor.0: bad orphan inode 13 [ 581.665436][ T8257] ext4_test_bit(bit=12, block=4) = 1 [ 581.671364][ T8257] is_bad_inode(inode)=0 [ 581.675786][ T8257] NEXT_ORPHAN(inode)=0 [ 581.680024][ T8257] max_ino=32 [ 581.683501][ T8257] i_nlink=1 [ 581.686836][ T8257] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 582.107377][ T29] audit: type=1804 audit(1718227232.906:453): pid=8270 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3916882442/syzkaller.pgcCXD/58/bus" dev="sda1" ino=1958 res=1 errno=0 [ 582.536811][ T6646] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 582.914678][ T8282] loop3: detected capacity change from 0 to 8 [ 583.061192][ T8282] squashfs image failed sanity check [ 583.229042][ T4516] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 583.237276][ T4516] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 583.367955][ T7344] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 583.376409][ T7344] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 583.717128][ T8292] veth0_vlan: left promiscuous mode [ 583.729124][ T8292] veth0_vlan: entered promiscuous mode [ 583.897065][ T6968] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 584.102123][ T6968] usb 4-1: device descriptor read/64, error -71 [ 584.210973][ T4516] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 584.391838][ T6968] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 584.460968][ T4516] usb 2-1: Using ep0 maxpacket: 32 [ 584.581170][ T6968] usb 4-1: device descriptor read/64, error -71 [ 584.591859][ T4516] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 584.603603][ T4516] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 584.615558][ T4516] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 584.625492][ T4516] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 584.677267][ T4516] usb 2-1: config 0 descriptor?? [ 584.709689][ T6968] usb usb4-port1: attempt power cycle [ 584.728215][ T4516] hub 2-1:0.0: USB hub found [ 584.934479][ T4516] hub 2-1:0.0: 1 port detected [ 585.152152][ T6968] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 585.287071][ T6968] usb 4-1: device descriptor read/8, error -71 [ 585.316516][ T8313] loop4: detected capacity change from 0 to 512 [ 585.401907][ T8313] EXT4-fs error (device loop4): ext4_orphan_get:1420: comm syz-executor.4: bad orphan inode 13 [ 585.429614][ T8313] ext4_test_bit(bit=12, block=4) = 1 [ 585.435940][ T8313] is_bad_inode(inode)=0 [ 585.440412][ T8313] NEXT_ORPHAN(inode)=0 [ 585.444802][ T8313] max_ino=32 [ 585.448174][ T8313] i_nlink=1 [ 585.451622][ T8313] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 585.571114][ T6968] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 585.698711][ T29] audit: type=1804 audit(1718227236.506:454): pid=8320 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1890952879/syzkaller.r9sijk/103/bus" dev="sda1" ino=1965 res=1 errno=0 [ 585.733985][ T7504] usb 2-1: USB disconnect, device number 13 [ 585.741688][ T6968] usb 4-1: device descriptor read/8, error -71 [ 585.764797][ T4516] hub 2-1:0.0: hub_ext_port_status failed (err = -71) [ 585.880089][ T6968] usb usb4-port1: unable to enumerate USB device [ 586.187288][ T7243] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 586.537353][ T8327] loop4: detected capacity change from 0 to 8 [ 586.611687][ T8327] squashfs image failed sanity check [ 587.100511][ T8333] loop0: detected capacity change from 0 to 2048 [ 587.199968][ T8333] loop0: p1 < > p4 [ 587.212937][ T8338] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 587.221480][ T8333] loop0: p4 size 8388608 extends beyond EOD, [ 587.239597][ T8338] CIFS: Unable to determine destination address [ 587.253494][ T8333] truncated [ 587.466851][ T8333] loop0: detected capacity change from 0 to 128 [ 587.763818][ T1229] ieee802154 phy0 wpan0: encryption failed: -22 [ 587.770623][ T1229] ieee802154 phy1 wpan1: encryption failed: -22 [ 588.270196][ T8356] loop0: detected capacity change from 0 to 512 [ 588.329222][ T8356] EXT4-fs error (device loop0): ext4_orphan_get:1420: comm syz-executor.0: bad orphan inode 13 [ 588.358263][ T8356] ext4_test_bit(bit=12, block=4) = 1 [ 588.364125][ T8356] is_bad_inode(inode)=0 [ 588.368455][ T8356] NEXT_ORPHAN(inode)=0 [ 588.375167][ T8356] max_ino=32 [ 588.378547][ T8356] i_nlink=1 [ 588.384773][ T8356] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 588.640903][ T5129] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 588.682588][ T29] audit: type=1804 audit(1718227239.486:455): pid=8364 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir3050260979/syzkaller.YjzwCt/4/bus" dev="sda1" ino=1965 res=1 errno=0 [ 588.845739][ T8367] veth0_vlan: left promiscuous mode [ 588.854395][ T8367] veth0_vlan: entered promiscuous mode [ 588.932235][ T5129] usb 4-1: Using ep0 maxpacket: 32 [ 588.952102][ T6968] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 589.072239][ T5129] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 589.083380][ T5129] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 589.093498][ T5129] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 589.102767][ T5129] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 589.158016][ T5129] usb 4-1: config 0 descriptor?? [ 589.209306][ T6646] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 589.222871][ T6968] usb 3-1: device descriptor read/64, error -71 [ 589.261656][ T5129] hub 4-1:0.0: USB hub found [ 589.461520][ T5129] hub 4-1:0.0: 1 port detected [ 589.541362][ T6968] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 589.751598][ T6968] usb 3-1: device descriptor read/64, error -71 [ 589.772365][ T8377] loop1: detected capacity change from 0 to 8 [ 589.801434][ T8377] squashfs image failed sanity check [ 589.873630][ T6968] usb usb3-port1: attempt power cycle [ 590.119609][ T5129] usb 4-1: USB disconnect, device number 20 [ 590.126365][ T780] hub 4-1:0.0: hub_ext_port_status failed (err = -71) [ 590.137492][ T8384] CIFS: Unable to determine destination address [ 590.309817][ T6968] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 590.416873][ T6968] usb 3-1: device descriptor read/8, error -71 [ 590.614657][ T8389] loop0: detected capacity change from 0 to 2048 [ 590.669299][ T8389] loop0: p1 < > p4 [ 590.681470][ T8389] loop0: p4 size 8388608 extends beyond EOD, truncated [ 590.740931][ T6968] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 590.816662][ T8389] __loop_clr_fd: partition scan of loop0 failed (rc=-16) [ 590.852294][ T6968] usb 3-1: device descriptor read/8, error -71 [ 590.880696][ T8394] loop0: detected capacity change from 0 to 128 [ 590.918230][ T8394] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 590.994252][ T6968] usb usb3-port1: unable to enumerate USB device [ 591.395591][ T8399] loop0: detected capacity change from 0 to 512 [ 591.463060][ T8399] EXT4-fs error (device loop0): ext4_orphan_get:1420: comm syz-executor.0: bad orphan inode 13 [ 591.548501][ T8399] ext4_test_bit(bit=12, block=4) = 1 [ 591.554318][ T8399] is_bad_inode(inode)=0 [ 591.558734][ T8399] NEXT_ORPHAN(inode)=0 [ 591.563155][ T8399] max_ino=32 [ 591.577741][ T8399] i_nlink=1 [ 591.583596][ T8399] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 591.824679][ T29] audit: type=1804 audit(1718227242.576:456): pid=8405 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir1547494852/syzkaller.hnYVf5/225/bus" dev="sda1" ino=1954 res=1 errno=0 [ 592.113473][ T8414] loop2: detected capacity change from 0 to 8 [ 592.155797][ T8414] squashfs image failed sanity check [ 592.350925][ T6646] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 592.842105][ T8419] CIFS: Unable to determine destination address [ 593.290956][ T6968] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 593.465977][ T8433] loop4: detected capacity change from 0 to 2048 [ 593.562280][ T8433] loop4: p1 < > p4 [ 593.601050][ T6968] usb 4-1: Using ep0 maxpacket: 32 [ 593.624131][ T8433] loop4: p4 size 8388608 extends beyond EOD, truncated [ 593.732793][ T6968] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 593.744234][ T6968] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 593.754389][ T6968] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 593.763893][ T6968] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 593.782880][ T6968] usb 4-1: config 0 descriptor?? [ 593.809960][ T8439] veth0_vlan: left promiscuous mode [ 593.818705][ T8439] veth0_vlan: entered promiscuous mode [ 593.862527][ T6968] hub 4-1:0.0: USB hub found [ 594.161178][ T6968] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 594.161271][ T5129] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 594.390915][ T5129] usb 1-1: device descriptor read/64, error -71 [ 594.502060][ T6968] usbhid 4-1:0.0: can't add hid device: -71 [ 594.511968][ T6968] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 594.561628][ T8450] loop1: detected capacity change from 0 to 512 [ 594.595128][ T6968] usb 4-1: USB disconnect, device number 21 [ 594.617884][ T8450] EXT4-fs error (device loop1): ext4_orphan_get:1420: comm syz-executor.1: bad orphan inode 13 [ 594.652205][ T8450] ext4_test_bit(bit=12, block=4) = 1 [ 594.657732][ T8450] is_bad_inode(inode)=0 [ 594.664042][ T8450] NEXT_ORPHAN(inode)=0 [ 594.671168][ T8450] max_ino=32 [ 594.672047][ T5129] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 594.674446][ T8450] i_nlink=1 [ 594.674561][ T8450] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 594.876678][ T5129] usb 1-1: device descriptor read/64, error -71 [ 595.008186][ T5129] usb usb1-port1: attempt power cycle [ 595.443564][ T8059] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 595.453119][ T5129] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 595.514477][ T29] audit: type=1804 audit(1718227246.286:457): pid=8456 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2522868898/syzkaller.8QuSZh/71/bus" dev="sda1" ino=1940 res=1 errno=0 [ 595.541483][ T5129] usb 1-1: device descriptor read/8, error -71 [ 595.841163][ T5129] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 595.972931][ T5129] usb 1-1: device descriptor read/8, error -71 [ 596.139247][ T5129] usb usb1-port1: unable to enumerate USB device [ 596.162539][ T8467] CIFS: Unable to determine destination address [ 597.381618][ T5129] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 597.532087][ T8489] loop3: detected capacity change from 0 to 512 [ 597.569891][ T8489] EXT4-fs error (device loop3): ext4_orphan_get:1420: comm syz-executor.3: bad orphan inode 13 [ 597.582903][ T8489] ext4_test_bit(bit=12, block=4) = 1 [ 597.588475][ T8489] is_bad_inode(inode)=0 [ 597.593851][ T8489] NEXT_ORPHAN(inode)=0 [ 597.598102][ T8489] max_ino=32 [ 597.601864][ T8489] i_nlink=1 [ 597.605303][ T8489] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 597.630789][ T7502] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 597.761848][ T5129] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 597.912994][ T7502] usb 1-1: Using ep0 maxpacket: 32 [ 597.969440][ T5129] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 597.979141][ T5129] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 597.987516][ T5129] usb 3-1: Product: syz [ 597.991979][ T5129] usb 3-1: Manufacturer: syz [ 597.996802][ T5129] usb 3-1: SerialNumber: syz [ 598.062347][ T7502] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 598.073953][ T7502] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 598.084224][ T7502] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 598.093842][ T7502] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 598.134885][ T7502] usb 1-1: config 0 descriptor?? [ 598.212542][ T7502] hub 1-1:0.0: USB hub found [ 598.451124][ T29] audit: type=1804 audit(1718227249.206:458): pid=8497 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir3050260979/syzkaller.YjzwCt/20/bus" dev="sda1" ino=1949 res=1 errno=0 [ 598.505608][ T5086] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 598.571823][ T7502] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 598.615193][ T8500] CIFS: Unable to determine destination address [ 598.911607][ T7502] usbhid 1-1:0.0: can't add hid device: -71 [ 598.918391][ T7502] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 599.008797][ T7502] usb 1-1: USB disconnect, device number 16 [ 599.294467][ T8506] veth0_vlan: left promiscuous mode [ 599.303033][ T8506] veth0_vlan: entered promiscuous mode [ 600.101518][ T7503] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 600.300932][ T7503] usb 1-1: device descriptor read/64, error -71 [ 600.351904][ T5133] usb 3-1: USB disconnect, device number 14 [ 600.581240][ T7503] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 600.837552][ T7503] usb 1-1: device descriptor read/64, error -71 [ 601.021305][ T7503] usb usb1-port1: attempt power cycle [ 601.550976][ T7503] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 601.762096][ T7503] usb 1-1: device descriptor read/8, error -71 [ 601.781903][ T54] ===================================================== [ 601.789186][ T54] BUG: KMSAN: uninit-value in virtqueue_add+0x1e86/0x65c0 [ 601.796491][ T54] virtqueue_add+0x1e86/0x65c0 [ 601.801435][ T54] virtqueue_add_sgs+0x186/0x1b0 [ 601.806539][ T54] virtscsi_add_cmd+0x838/0xad0 [ 601.811555][ T54] virtscsi_queuecommand+0x898/0xa60 [ 601.817019][ T54] scsi_queue_rq+0x4cc7/0x5a80 [ 601.821951][ T54] blk_mq_dispatch_rq_list+0x79b/0x3440 [ 601.827692][ T54] __blk_mq_sched_dispatch_requests+0x11b7/0x26e0 [ 601.834312][ T54] blk_mq_sched_dispatch_requests+0x12f/0x270 [ 601.840569][ T54] blk_mq_run_work_fn+0xd0/0x280 [ 601.845659][ T54] process_scheduled_works+0xa81/0x1bd0 [ 601.851366][ T54] worker_thread+0xea5/0x1560 [ 601.856199][ T54] kthread+0x3e2/0x540 [ 601.860429][ T54] ret_from_fork+0x6d/0x90 [ 601.864990][ T54] ret_from_fork_asm+0x1a/0x30 [ 601.869933][ T54] [ 601.872327][ T54] Uninit was stored to memory at: [ 601.877644][ T54] copy_page_from_iter_atomic+0x12b7/0x2ae0 [ 601.883731][ T54] generic_perform_write+0x4c1/0xc60 [ 601.889204][ T54] ext4_buffered_write_iter+0x564/0xaa0 [ 601.894907][ T54] ext4_file_write_iter+0x208/0x3450 [ 601.900342][ T54] __kernel_write_iter+0x64d/0xc80 [ 601.905632][ T54] dump_user_range+0x8dc/0xee0 [ 601.910565][ T54] elf_core_dump+0x59f5/0x5d50 [ 601.915522][ T54] do_coredump+0x32d5/0x4920 [ 601.920278][ T54] get_signal+0x267e/0x2d00 [ 601.924941][ T54] arch_do_signal_or_restart+0x53/0xcb0 [ 601.930692][ T54] syscall_exit_to_user_mode+0x5d/0x160 [ 601.936427][ T54] __do_fast_syscall_32+0xc4/0x120 [ 601.941719][ T54] do_fast_syscall_32+0x38/0x80 [ 601.946740][ T54] do_SYSENTER_32+0x1f/0x30 [ 601.951418][ T54] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 601.957949][ T54] [ 601.960339][ T54] Uninit was created at: [ 601.964772][ T54] __alloc_pages+0x9d6/0xe70 [ 601.969501][ T54] alloc_pages_mpol+0x299/0x990 [ 601.974509][ T54] alloc_pages+0x1bf/0x1e0 [ 601.979075][ T54] dump_user_range+0x4a/0xee0 [ 601.983923][ T54] elf_core_dump+0x59f5/0x5d50 [ 601.988863][ T54] do_coredump+0x32d5/0x4920 [ 601.993612][ T54] get_signal+0x267e/0x2d00 [ 601.998264][ T54] arch_do_signal_or_restart+0x53/0xcb0 [ 602.004008][ T54] syscall_exit_to_user_mode+0x5d/0x160 [ 602.009723][ T54] __do_fast_syscall_32+0xc4/0x120 [ 602.015014][ T54] do_fast_syscall_32+0x38/0x80 [ 602.020039][ T54] do_SYSENTER_32+0x1f/0x30 [ 602.024712][ T54] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 602.031254][ T54] [ 602.033652][ T54] Bytes 0-4095 of 4096 are uninitialized [ 602.039375][ T54] Memory access of size 4096 starts at ffff88804c662000 [ 602.046412][ T54] [ 602.048821][ T54] CPU: 1 PID: 54 Comm: kworker/1:1H Not tainted 6.9.0-syzkaller-02339-g101b7a97143a #0 [ 602.058603][ T54] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 602.068787][ T54] Workqueue: kblockd blk_mq_run_work_fn [ 602.074507][ T54] ===================================================== [ 602.081519][ T54] Disabling lock debugging due to kernel taint [ 602.087761][ T54] Kernel panic - not syncing: kmsan.panic set ... [ 602.094277][ T54] CPU: 1 PID: 54 Comm: kworker/1:1H Tainted: G B 6.9.0-syzkaller-02339-g101b7a97143a #0 [ 602.105548][ T54] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 602.115733][ T54] Workqueue: kblockd blk_mq_run_work_fn [ 602.121470][ T54] Call Trace: [ 602.124846][ T54] [ 602.127868][ T54] dump_stack_lvl+0x216/0x2d0 [ 602.132790][ T54] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 602.138774][ T54] dump_stack+0x1e/0x30 [ 602.143109][ T54] panic+0x4e2/0xcd0 [ 602.147178][ T54] ? kmsan_get_metadata+0xf1/0x1d0 [ 602.152459][ T54] kmsan_report+0x2d5/0x2e0 [ 602.157117][ T54] ? kmsan_get_metadata+0x146/0x1d0 [ 602.162474][ T54] ? kmsan_internal_set_shadow_origin+0x66/0xe0 [ 602.168925][ T54] ? kmsan_internal_check_memory+0x48c/0x560 [ 602.175105][ T54] ? kmsan_handle_dma+0xac/0xc0 [ 602.180101][ T54] ? virtqueue_add+0x1e86/0x65c0 [ 602.185213][ T54] ? virtqueue_add_sgs+0x186/0x1b0 [ 602.190495][ T54] ? virtscsi_add_cmd+0x838/0xad0 [ 602.195693][ T54] ? virtscsi_queuecommand+0x898/0xa60 [ 602.201319][ T54] ? scsi_queue_rq+0x4cc7/0x5a80 [ 602.206418][ T54] ? blk_mq_dispatch_rq_list+0x79b/0x3440 [ 602.212336][ T54] ? __blk_mq_sched_dispatch_requests+0x11b7/0x26e0 [ 602.219127][ T54] ? blk_mq_sched_dispatch_requests+0x12f/0x270 [ 602.225565][ T54] ? blk_mq_run_work_fn+0xd0/0x280 [ 602.230839][ T54] ? process_scheduled_works+0xa81/0x1bd0 [ 602.236739][ T54] ? worker_thread+0xea5/0x1560 [ 602.241756][ T54] ? kthread+0x3e2/0x540 [ 602.246172][ T54] ? ret_from_fork+0x6d/0x90 [ 602.250918][ T54] ? ret_from_fork_asm+0x1a/0x30 [ 602.256035][ T54] ? scsi_queue_rq+0x4335/0x5a80 [ 602.261131][ T54] ? blk_mq_dispatch_rq_list+0x79b/0x3440 [ 602.267050][ T54] ? __blk_mq_sched_dispatch_requests+0x11b7/0x26e0 [ 602.273841][ T54] ? blk_mq_sched_dispatch_requests+0x12f/0x270 [ 602.280282][ T54] ? blk_mq_run_work_fn+0xd0/0x280 [ 602.285549][ T54] ? process_scheduled_works+0xa81/0x1bd0 [ 602.291438][ T54] ? worker_thread+0xea5/0x1560 [ 602.296449][ T54] ? kthread+0x3e2/0x540 [ 602.300856][ T54] ? ret_from_fork+0x6d/0x90 [ 602.305599][ T54] ? ret_from_fork_asm+0x1a/0x30 [ 602.310716][ T54] ? kmsan_get_metadata+0x146/0x1d0 [ 602.316075][ T54] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 602.322048][ T54] ? kmsan_get_metadata+0x146/0x1d0 [ 602.327402][ T54] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 602.333381][ T54] ? should_fail_ex+0x4a/0x800 [ 602.338305][ T54] ? kmsan_get_metadata+0x146/0x1d0 [ 602.343663][ T54] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 602.349638][ T54] ? kmsan_get_metadata+0x146/0x1d0 [ 602.354997][ T54] kmsan_internal_check_memory+0x48c/0x560 [ 602.361022][ T54] kmsan_handle_dma+0xac/0xc0 [ 602.365851][ T54] virtqueue_add+0x1e86/0x65c0 [ 602.370797][ T54] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 602.376773][ T54] ? kmsan_get_metadata+0x146/0x1d0 [ 602.382134][ T54] ? kmsan_get_metadata+0x146/0x1d0 [ 602.387498][ T54] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 602.393501][ T54] virtqueue_add_sgs+0x186/0x1b0 [ 602.398627][ T54] virtscsi_add_cmd+0x838/0xad0 [ 602.403687][ T54] virtscsi_queuecommand+0x898/0xa60 [ 602.409158][ T54] ? __pfx_virtscsi_queuecommand+0x10/0x10 [ 602.415135][ T54] scsi_queue_rq+0x4cc7/0x5a80 [ 602.420090][ T54] ? __pfx_scsi_queue_rq+0x10/0x10 [ 602.425362][ T54] blk_mq_dispatch_rq_list+0x79b/0x3440 [ 602.431118][ T54] ? sbitmap_get+0x430/0x670 [ 602.435882][ T54] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 602.441885][ T54] ? dd_dispatch_request+0x9a1/0xa20 [ 602.447363][ T54] __blk_mq_sched_dispatch_requests+0x11b7/0x26e0 [ 602.454005][ T54] ? finish_task_switch+0x1c8/0x8f0 [ 602.459407][ T54] ? __blk_mq_sched_dispatch_requests+0x1031/0x26e0 [ 602.466214][ T54] blk_mq_sched_dispatch_requests+0x12f/0x270 [ 602.472497][ T54] blk_mq_run_work_fn+0xd0/0x280 [ 602.477616][ T54] ? __pfx_blk_mq_run_work_fn+0x10/0x10 [ 602.483331][ T54] process_scheduled_works+0xa81/0x1bd0 [ 602.489083][ T54] worker_thread+0xea5/0x1560 [ 602.493931][ T54] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 602.499924][ T54] kthread+0x3e2/0x540 [ 602.504164][ T54] ? __pfx_worker_thread+0x10/0x10 [ 602.509446][ T54] ? __pfx_kthread+0x10/0x10 [ 602.514208][ T54] ret_from_fork+0x6d/0x90 [ 602.518772][ T54] ? __pfx_kthread+0x10/0x10 [ 602.523538][ T54] ret_from_fork_asm+0x1a/0x30 [ 602.528492][ T54] [ 602.531818][ T54] Kernel Offset: disabled [ 602.536199][ T54] Rebooting in 86400 seconds..