last executing test programs: 1m15.357724627s ago: executing program 4 (id=188): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000080), 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81101) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x262) 1m14.86436517s ago: executing program 4 (id=192): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_usb_connect$sierra_net(0x3, 0x3f, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x6, 0x2, 0x400, 0x2, 0x4, 0x6}, {0x9, 0x5, 0x6, 0x2, 0x3ff, 0x81, 0xfa, 0x4}, {0x9, 0x5, 0xb, 0x3, 0x3ff, 0x1, 0x3, 0xc}}}}}}]}}, 0x0) read$FUSE(r1, &(0x7f0000001740)={0x2020}, 0x2020) 1m11.27755724s ago: executing program 4 (id=214): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000001080), 0x2002, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x6}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000080), 0x2) syz_read_part_table(0x107b, &(0x7f0000000000)="$eJzs0L1NxEAQBeBn34+PKmjlAjIyKIA2nGFqIUa0QEwPRJRAhAANWhaXAJd8XzB6sp5npA0ntR2TYWhpGZIlGZMckvvH/VrZrOG91m7y1EbPXzVV1cvD3e63V228ttG/HJObtqbekuWzdrk9jM9Tsuw3w9XF9WW/2M1rGD+q6tj+bXfmZMq27e5+Kudnf/o0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBvvgMAAP//S7Qi7A==") write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f00000010c0)={0x2, 0x4}, 0x2) 1m9.566407253s ago: executing program 4 (id=222): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000180)={[{@dioread_lock}, {@resgid}, {@mblk_io_submit}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@resgid}, {@errors_remount}, {@grpid}, {@jqfmt_vfsv0}]}, 0xfc, 0x58f, &(0x7f0000002d00)="$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") mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x804800, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000c40)='memory.current\x00', 0x275a, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x1000, &(0x7f0000001dc0)={0xf, 0x0, 0x40000}, 0x20) 1m8.228044117s ago: executing program 4 (id=229): r0 = socket$xdp(0x2c, 0x3, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) 1m7.254783637s ago: executing program 4 (id=233): syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x20, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3813009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ff) removexattr(&(0x7f00000002c0)='./file0/file1\x00', &(0x7f0000000300)=@known='trusted.overlay.origin\x00') 1m4.915295023s ago: executing program 32 (id=233): syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x20, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3813009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ff) removexattr(&(0x7f00000002c0)='./file0/file1\x00', &(0x7f0000000300)=@known='trusted.overlay.origin\x00') 5.233292172s ago: executing program 3 (id=508): r0 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000000200)={0x2020}, 0x2020) mount(&(0x7f0000000300), &(0x7f00000001c0)='.\x00', &(0x7f0000000180)='devtmpfs\x00', 0x3208c9a, 0x0) pread64(r0, &(0x7f0000002240)=""/237, 0xed, 0x4eb) 4.631268468s ago: executing program 3 (id=512): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_pwait(r0, &(0x7f0000000040)=[{}], 0x1, 0x80000001, 0x0, 0x0) epoll_pwait(r0, &(0x7f00000000c0)=[{}], 0x1, 0x299, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0x20000014}) 4.524891714s ago: executing program 5 (id=513): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendto$inet6(r0, &(0x7f0000000100)="15", 0x1, 0x1, &(0x7f0000000140)={0xa, 0x4e23, 0x7ff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="e3", 0x1, 0x20000000, &(0x7f0000000040)={0xa, 0x4e24, 0xaf6, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xffff0001}, 0x1c) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000200), &(0x7f00000000c0)=0x8) 4.260864271s ago: executing program 0 (id=524): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000000c0)={0xdddd0000, 0x111000}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000000340)={0x10004, 0x10000}) 4.084605327s ago: executing program 3 (id=515): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406c256d0000000200000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x2, "19fde941"}]}}, 0x0}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000004c0)={0x24, 0x0, &(0x7f00000016c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) 4.055753623s ago: executing program 1 (id=516): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'geneve0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001540)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0xb, 0x2}}}}]}, 0x40}}, 0xc0) 3.714380579s ago: executing program 0 (id=518): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 3.559190189s ago: executing program 1 (id=519): sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0205fc090900000027bd7000070000000500060000000e000a004e24fffffffdfc01000000000000000000000000000098850000000000000200010004d4"], 0x48}, 0x1, 0x400000000000000}, 0x0) r0 = openat$mice(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x918) read$FUSE(r0, 0x0, 0x0) 3.399209688s ago: executing program 2 (id=520): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000480)={@in6={{0xa, 0x4e21, 0x5, @loopback, 0x3}}, 0x0, 0x0, 0x43, 0x0, "bb353738cb473fc7c9f1cf53b6a7b4e23602a3c364ca41d6e5615445244740bd4c0b42a21d7214bf92594925208a0e2f964e654dc534a6324d4993fcf19b2df3ee818a118a7c49462189316d556d2ccd"}, 0xd8) sendto$inet6(r0, &(0x7f00000000c0)="e9", 0x1, 0x20008055, &(0x7f0000000000)={0xa, 0x2, 0x1000, @empty}, 0x1c) 3.175583591s ago: executing program 5 (id=521): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000f00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r0}, 0x18) timer_create(0x3, 0x0, &(0x7f00000001c0)=0x0) timer_settime(r1, 0x0, &(0x7f0000000340)={{}, {0x0, 0x9}}, 0x0) mlock(&(0x7f0000bff000/0x400000)=nil, 0x400000) 2.982327793s ago: executing program 1 (id=522): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x1}, 0x1c) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x8000) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000002c0)='7', 0x1}], 0x1) 2.977249424s ago: executing program 0 (id=523): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x140942, 0x1) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket(0xa, 0x3, 0x87) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x84, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 2.957550637s ago: executing program 2 (id=525): r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000001980)={'#! ', './file1/../file0', [], 0xa, "008b3d5978e08402783366b29e7b90ca03b6000093e32263377123191833a080046801b072838176570cc550b9e7438e51eedb"}, 0x47) write$UHID_INPUT(r1, &(0x7f00000007c0)={0x8, {"dc5d3b0169633d3eba3eabbc09167be55101d4af4b22a373236464d2dbfaa84399b77bd438a54364a7ebc5bdaab4f9decb7c044318cd59a0af8279bcab35dd7daf7a0ceb381df2c32eff45b13e2c8f40e1895355bf6f165200cb1ca41a155730ee2e9f83183f9fafe029d0401b0770618254a8b2dc87b630072b1e2de160d1afed51b74c14b71ec1b226a324482d14ad586b1a4ce80e458fe45244c01eddeddf3564af838d6d5324f8a77023d6eb7aa14397a0e1413ea1c3dfdf063a35b709e627f36fe403ee3117365be5017682f53595f28543062c740a94a794312f5cebc315044b8ea000a5d0f27812ab0ce149d11e6f6f7620c5f3e250bf67d13a1ca39dbb7b8b5a31e3d7ba7ebe5849a7a09b61fc9f2cfc54b89e9cd0105bca49483ce55e0187ce2ad692a18219d881057c838587b915337169ee054655f26a04df913a658fccbf4def6aad750ca4796b74d322c67e9d4ee6a530a22dcc35db850b424d6ec9f62495b9f9fd2b000feadd57d26dbd505798c208d91eb0aab0fd97537631b8bf81ce0e2241c4272be4ff69b390e4485d574146b76d1fdbf7fc5334906805534cdae1e47240af7761a18fc8bd0a694be47529da98bc0f98eb7db3fc4a74cbb6e486f4de90fbf2452e72c2e1dca44543ad9ad094b8bc861eef1e814662d0b350339e3a510d459c6f83aabd5fd3dcb38224056d761e7df9b482b9905f1e2135c1929be328ecdb69c007a3efd548502c83106f6df1ab1178fac499eda92ad4373155227ec2df150c919d322ecb3ea37e659285f18a3e2f79b59900ca438df3a1381380a12d3ad7678e0a8d3bdfb40651389b4ac8c66138d442d70eafdc2df8b080028006b124e4ebe0d9883ef100f1934e42794146382c1d628fd2ebe5859b6c243824903d056d800975675bb1913142adbc039a9c68c2f146a0e8903447313f5e5549905f397a9b1f21a93b80c4d04a8ea7a29a50fbc5407a9305bba420edf898ea678d6879489c39692c99bb6dacf61f5f97637b94c1031d635b5423b38b9196fafaaf87b2796eadc21466af5a10281e6a808748969d29efb444c99a4cb2111732a792dbca4376a125a68f7cdac065cc6173dc21caafba48c742d9a7df2f771ff2f5725b22c247d4e0c6106f9f5f6929b69929ab37e9a9b326ce618bb702b883b12026f1300f21f2c7440cac8c5f1210a78aa067211d2827f5dcc7578252c2ccc3f67bab9d1bb6939b21b550788ef550acfed4bf50c0b4fb3ca4d2872ee64f95d611a317d9daaf373a10d868680b2226396c95fa2b0ab4d6fce06c3b42cb97d17a7b5089061537fdeb1a53040869f7befca330358fdba86754fc2e46c2113e1484cb37534af8f0408a7ee313778dab49f08229964298f847ea66c4ec319f64b6a12da585bc59e82e0263c507b397d3efee3b4066f4d25566aa1549f6185f6375f84b65fa8945148b90430c86a5b6fdf58d5c812b98d9dc621fd9a3d9f1a577495356516d1cbcf5e8bb8923b54b247225b9c3892b18a9e137f3620c734052af9dc8f1ea36f0d4592d5ee32e35676a84dc891f97456f2ac3a4ab58a42bcdc221a4ac8bb28d428add2fcbe5b110a8afd5d23b31e827bd16167b2d88cae024afc04a722ac0b4d45c52512e6b6f102aac4be21bc89ce246539048370553665b0a4336a6db99d0d19399be6437bf21419304331b4342b2c1db580f0c9bf681fdb8e9fa3e025454197bbc82ef93ee2f385660818ec5127080675a8013766469afe3b1e36e81bf2f04c3a26eaf4517551e734d21ba3bc90e48aea0891792970c39f3f528397e9b7ae190f1760fe5960dc763ee0a17939c60bfcac0a8914be82c749e4fe85d1ac5fa733413468fb8941085e8c4d6e0b6d1e62e20da58440facd640ddbb6c1f694b3ca48757a34c5a11668368711a1d4f3a81d31ac30d71277d7ae77882b6841cfa6289e6cce84a3ad57eeb328f831888ac7d3cfcd3a472a48d903f20cec8c8ae8d0bea04ebf7413ef7693f8ed876e49bd5f89d7e1078208ff62712e330fc0341b9ccf26845578d44b1e0c66d1bebc14742baedfabb8e9a2c8f42730360c72997efe0ce786ff330c2eb6e0ff20896f813c2a515ce76f826c11a1c1588eb369231ddeb4a2f9f9591ecdecc74d20aeb50047beb3ab89a9e4e1b805a20b645c79d0bc5d0247fab8ba46a97a07630b1f1cb69b42b568af746733d2c581f057873d64fe6e659b00b4a26745f5fba1fe7406a86b007936c7cfdac53a4c5b0ea9f6604863c8e3f174eddbb09175f6e13cda9a860cf400ef9ed02b895502ac6e6de6a658249c3c6e8a653517eae2231e56e0f120547923c6549ebc1ed14c623637ce3d96af5c93a32e58e2d9659d8b5b145888b52d9a5b5cb3cdf594eb137bcef2ba068cfd2c6ccf7ab6e5b4ec55e9197bfb91c9b8729f7b50cf0b0326f7ea3e712c77674d48545ca2a86744c3c38f149d69cf811beacf7e5f49c7bfba20f1dcf3d7bc0b9c796016820a46495d244c9606a06fe2e14233eda78d69ae4523ad7b708b0c7ead44d7fd376fed60e3cc2ee25e9600adfbe87ac7c8fb8269aec9459602af0f420becda6120ce7d9626c65ae7f860639e8bf664eb4301ec18add0e436c0356c12ab6b4ca35da2b43c4a8c239fd0b59a2ce94843cdfa1667053165053633b062844dbb0d00070fde74fa3178eb5f1f5fd02e2088d8690379f39ab22c080cdcb29d700bac74fabd8a356fe99afe83a5d99aa5024e9158a299eda6c99b6701e64f1d68e7e2c0c6e88396bb535a02d0948f0a250a6e090041c96d9c9acd6134d44d516fd1010c39e572b86b05bb1326a2a4f23f11181186f9c2a01dc7b58c0129f4b851ca9b1e3dc35db7364e29ef646211796b1651511e041345abce427fa5d6e48b8fb078c8432061a4cc518a8f2a2caf709a5c1473a62112a6650afc64eec12f8f9c08cff1b6fbf7a1209fc8661f62303b7c5d49c1d0b32a9f37e81ed9ab6193816d40995ed49c10b9f5752e04d57535a3d16f06c65d32846c31ec9787ec4a965679eb804e86b45d007f38d8104550770dc6f313bc846e43a14a8c21d0628c744e3e83cb998d1b7acfe996541a8c03852dadf9326444c582b481cae844e4f3fe3d638903b38f24633b63adbad841ac6c4c1169d781a0e271e8a967b1c7e986fcb3a66168e86e3559a44fcfa92452260491da9397659af60453f4cd4be2d15439445ec2b4366a79d3283da912d9d499df1242bd174edc235848caa21d2c997aff0e95c7e5cc0803c90fab84e7be7b37909d0e2f3bc9974e3388acb6800baba183ecc8eea8c71c0d65d669e41f99ceae523b7a6b772f3b8ebba1d2127ccc3ddb7ddcb4ec73cbdc26fc87c3848e258a0b5484d3a13e40ec4e4a65dd92f09e9fe1e3e2f8b96c4e363aa3683860dee62dfcf8823ee4a3593a092e0bd9c4cedacf44a272faa164447b01f46a7795642a40c61b0034a37f0e9b792428a0ddcd144fe8263088eaac8016f8f1cd30b55ac90a8f10d785b7570dd9e639a4a068d3fe98a420b9f72e79de817f676c2a224300d749571ad43f49d1fbe838f4566bc7b5f104c384ad87189213152b644d9fcbdf98bafeee569d640ce9045779f1d90024c023a7480a358dee276fba139c14b4fdb12885240903d0e61dc161659a68f62c92b899007e0f2b65bf0a069e9e57c9b6ae50a3b30dd1003fb0eead73ae2f6010b3b356b4060579a4f29935e1f00c01d12e5f44e8e3163d81dfef7ca8560604240c7e96e4454c6971614df306c768121abb3f628e3f1d2d026f58d1087334c5bdb74d7c949b0ee66a4531ba4e9b922aee3d0f802ed034734507a5913c52966f1f8bd4577840de0253aabc23299dced2a299859c07af9fb0f9c29b6533b9d84d471390d59ab315f5ddb226f6b8dd7889295f0fb1f7bd1adafe4cc520a1e84bf2a59d5b9795aeafc8d6fd66a8228aba8653b98622617ddfeb5d6795c9bd2f35d4a0c386e862675a50e3314c3fbb17aca151c13c7fc8b1d1b72ed0a958537b5ddc9e74bddc2b9571ec3f2b7775b125338d4852a75a63941564c65bb36dfb6bea4aab1ae7a4f285c2177aa98406eb2cc10934aa92d5a9612d4455c84ad200841d289b5c2d5deab0d8e2459598ef183d3dc47f6bad0b9513710600cfa4d69fcd5763cdcc4f2c2b7cd7d4491fd52f4aec82ce846c0988f6f0123e21e900d39c61085e68c9badc350b44004f6c042d64b0d0cbf91ad0592b198f1eeea1e52200bc8e6d62848d6884b10bdde72466039da488be6b340c23148f666f2fe6e032c07dac43586df182aca9116f4600313fa8375c76337ba86bdc391dae6450218f58f047ced64befc6bb5c2a60024669630a6279fedf2fe45e7e19ce582ad96ae0d023eb9b39f5f1e666e73bb038ae38157275be5eb3e7cbc8b05adf53e817646bdc2cfce98e5d162bf7faaca787db8717ab8b27b9e35609c5fb9fe9def07f010df8b43cf5c96851eadfdeff0b7bc5826e7e15490ae9c3d14166ee81bef007070e7981235a673804ad89943ee6b51ac63364f7870e121e6ff23a0c7d179527cd58dd7a4ca37247c2bd9efc79b720bb1ee2d39862e98cb81e93cf5b48d5d02ee8ac737ab504c867a1c49e678300803c94fbe978dea918a1e71b9791ee1e4d30056e86c26a4675a8b090be2365c0b451a13ece52a89a7057fe2052e11c6666eb916d823ea66bf217c320acba3b714910734b2d27c2fa586bd7f7664b0d1422adabad2ce2afc10270057f11940fac1a51d023ce48bd04ea39b7f99381b239fd0ddeea0dce7863ec1f8f61775013b6414ecf86e686a340a3148f87a9d7d60a1f2da53436d16fc88d6a4e7c3d55e0dd004cbecc15a5558eb705d82aacb1862ddc251dd5d9cbf1d78f97900ce6e8dab0ea678cb823bd1e7bbd1e927841af08f5427878c19f4f322228f9b36287fc13e7c1293ea875ae73815e052d6c2ebc40df8f7b9d1f76e0b10e35aa160944983d8e6b790df0d9b13f3460657336d81f7d83c0350324b930ec9c7557ce12887f76372e126f504b0980fea27f31a780c05187b9b5353dafc6b101543b24332b96e15bc26b19062e52fa9f86d260ee3a3bc92a133e328407bb85357ee5c45cb87228f44888b14941b5911b050e9319fe88033f830a8490917a9c0572ebbc5492b4e1083a2e3d77215a34abef947b5b9a950e780662de18873e55899c92db3ad3d437e8407890afa6b0c04ef861b8bc85fbbe1bb67b3d9ef001409f84b8ec4f01d861cecc143a805b981ab5cf5b605057b63cb2c84ec358e510a69cd8c33a8a62fe4680d0c980145cc709157832bfaef261cb0466c237376ca2944ce9affffd4b1dc7cc9511da0b34bffb9ac216fb8cf7c6572d95627787720d1ba67c6512fcdb16f6329e9668681c404efebad559f81f05971b5efb6b4cca97ad0346753cc0a40a877242d8a808c602b03dc962cee38e646cb18abb079c70d357c30738a70f55cd3c5956a83a1bfcd6649dd765f16bfe968066345df7380bbc0c16b3b5af513d6458c791343952f33a051c5d711c1f35af1b47f3db9bbfb5c7c636b3a2b52805d606479879be0b404a28ade5649a3185e0f85a85fc15cd824671c2befdd0da509597c87d869f0bd7ad163ad93ca28fc0c4025eccaafe385ec3fc06c54ebcd7b07b6c7e0197c5b9ef886159a1585ae45248f865be760db6f5bc8f868fc6aefd04e34ecb51159e4cdcc2214b42b1ca9caec13ba3e1b2e7a3c736977b226213d265c2873195122a9b448088c8b50edd549be41c38ab176807b75e7267f86e4", 0x1000}}, 0x1006) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c781265406c7f306003d8a0f4bd0000000300000000002f59911800"}}) 2.559677128s ago: executing program 0 (id=526): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000003b80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000008001a00020000000800170003000000080013000000000008000300000000030800070000000200080002"], 0x5c}, 0x1, 0x0, 0x0, 0x24004000}, 0x0) 2.3244677s ago: executing program 1 (id=527): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e21, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x27) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000000)={r2, 0x0, 0x2, 0x5, 0x2, 0x61}, 0x14) 2.107706766s ago: executing program 2 (id=528): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x600, 0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f00000000c0)={{@my=0x0, 0x4}, 0x1}) 1.945331433s ago: executing program 5 (id=529): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000200)='GPL\x00', 0xe, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000000)={@cgroup, r2, 0x2f, 0x2034, r2}, 0x20) 1.646927058s ago: executing program 2 (id=530): chdir(0x0) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000000), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) 1.643331293s ago: executing program 0 (id=540): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_DQEVENT(r1, 0x80885659, 0x0) 1.615271139s ago: executing program 5 (id=531): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r0, 0x3) accept4$bt_l2cap(r0, &(0x7f0000000200), 0x0, 0x80800) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="043e130100c900", @ANYRESOCT=r0], 0x16) 1.563756082s ago: executing program 3 (id=532): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000000c0)={0xdddd0000, 0x111000}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000000340)={0x10004, 0x10000}) 1.129410301s ago: executing program 2 (id=533): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f00000001c0)=0x7) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000340)={{0xfffffffe, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x2, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) readv(r0, &(0x7f0000000680)=[{&(0x7f0000001140)=""/4096, 0x1000}], 0x1) 912.544197ms ago: executing program 3 (id=534): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000080)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0x0, 0x0) 716.546219ms ago: executing program 3 (id=535): syz_emit_ethernet(0x2a, &(0x7f0000000000)={@random="8580f83288e1", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x1, 0x5, 0x1c, 0x67, 0x0, 0x0, 0x2, 0x0, @private=0xa010102, @multicast1}, {0x11, 0x81, 0x0, @multicast1}}}}}, 0x0) r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_msfilter(r0, 0x0, 0x23, &(0x7f0000004b00)=ANY=[@ANYBLOB="e0000808ac1414aa"], 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0xa00, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) 693.49811ms ago: executing program 1 (id=536): syz_mount_image$iso9660(&(0x7f0000000380), &(0x7f00000000c0)='./file0\x00', 0x204818, &(0x7f0000000240)={[{@map_off}, {@check_strict}, {@cruft}, {@dmode={'dmode', 0x3d, 0x4}}, {@unhide}, {@iocharset={'iocharset', 0x3d, 'cp437'}}, {@map_off}, {@mode={'mode', 0x3d, 0x483}}]}, 0xff, 0x544, &(0x7f0000001000)="$eJzs3V9v01YfwPGfS/sQ5ZGqRw8TQlWBQ9mkIpXgJBAUceU5J+mBxI5sB7VXqKIpqkhhokxae8O4YZu0vQh2uRexd4T2EjbZTvqHJjHQv6u+nwjOiX3s8zup5Z/cxscCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADEcmu2XbSkabzOkhrNrQV+a/dtf+sDC+TWvmJMvyJW/E9yObmSLrry1e7qy/F/czKbvpuVXFzkZPu/l//34NLkxGD7MQF/lt+/cE+bW9vPV3q97qujCuQMunpx9LqG9kzom5bT0MqEvqpWKvadxXqo6qapw+Uw0i3lBtqJ/EDNu7dUsVotK11Y9jteo+Y09WDh/dsl266oh4W2doLQ9+48LITuomk2jddI2sSr4zb34wPxkYlUpJ2WUmvrvW45awBxo+KnNCplNSrZpVKxWCoVK/eq9+7b9uSBBfZH5ECLozto8e90hGdv4HAm+vlfmmLEk44siRr6cqUmgfjSGrG+b5D/v7mjx/a7N/8PsvyV3dUzkuT/a+m7a6Py/4hYTu61KVuyLc9lRXrSk668OvWITvbVEC2eGAnFFyMtcZIlqr9ESVUqUhFbnsii1CUUJXUx0hQtoSxLKJHo5IhyJRAtjkTiSyBK5sWVW6KkKFWpSlmUaCnIsvjSEU8aUhMn2cuarCefe1mUNSrGnUbFkcPID467rpTGjJb8j8M70vM3cBh/D/I/AAAAAAA4t6zkt+/x9f+UXE1qddPU9mmHBQAAAAAAjlDyl//ZuJiKa1fF4vofAAAAAIDzxkrusbNEJC/X09qaWMntUvwSAAAAAACAcyL5+/+1uEjmQLku1s50KVz/AwAAAABwTvycOcd+2L5o/fmXBMGU9ba99LW1kczN62xcSLe78PEeo/qMNd3fSVJU0mJy0tWzVi5ttDMJ5od+sZYVh7UbgLMTwI+fE8ClSflVbqRtbqym5epgTdpLvm6auuD6zQdFcZzpiUgvRd+/WP9BkuH/4rWmrZys97qFpy97q0ksb+O9vN3oT6B4YB7FMbG8TuZbSO65GDriqeRGjH6/eUvW1ntde+/4J9LNJ/b3+GZ6TJ/vZC5tNdef8Ta/f/y5uM9iYdTo+1EUDznyd3IzbXNz/mZaDImilBVFaW8Uwz+Lw0dRzoqifMgoAOC0rGVkIUsO5N0vOMt9WXaXz8zu72Q+bTM/k5xYJ2eGnNHtrDO6fcjs9seBZyCNyrFxv799lFXfxxu8H9lv2CxZ8Ud44fXGd3J5c2v79vrGyrPus+6LUqlcse/a9r2STCXD6BfkHgDAEHufsWMNzf+ZT+Gx7mZcVf9/5ysFBXkqL6Unq7KQ3G2QfONg6F7ze76GsJBx1ZpP0mT6hJeFMVd1/0nuchjstzS27f4YyifwkwAA4OTMZeThT8n/CxnX3ftz+fir4/yep7UBAIDjoYMPVj76yQoC035SrFaLTrSoVeC7j1Rgag2tjBfpwF10vIZW7cCPfNdvxpXHpqZDFXbabT+IVN0PVNsPzVIyfaDqP/o91C3Hi4wbtpvaCbVyfS9y3EjVTOiqdufbpgkXdZBsHLa1a+rGdSLjeyr0O4GrC0qFWu9paGrai0zdxFVPtQPTcoKceuw3Oy2tajp0A9OO/HSHg76MV/eDVrLbwml/2AAAnBGbW9vPV3q97qtjrAztOHfiQwUAAH0ZWRoAAAAAAAAAAAAAAAAAAAAAAJwBJ3H/H5VzXhlMBX1W4qFyBJXMU8ebYz85AThW/wQAAP//rVVPjw==") r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) r1 = fspick(r0, &(0x7f00000000c0)='.\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r1, 0x0, &(0x7f0000000080)='ro\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) 674.833087ms ago: executing program 5 (id=537): capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8fe00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 432.858287ms ago: executing program 0 (id=538): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010000000000140000006000000000042f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 403.185387ms ago: executing program 2 (id=539): unshare(0x22020600) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 114.00086ms ago: executing program 5 (id=541): madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f0000000580)='1\x00', 0x2) syz_clone(0x104000, 0x0, 0x0, 0x0, 0x0, 0x0) write$sysctl(r0, &(0x7f00000000c0)='2\x00', 0x2) 0s ago: executing program 1 (id=542): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x14) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000480)={{0x7, 0x0, 0xfffc, 0x805}, 'syz0\x00', 0x40}) ioctl$UI_DEV_CREATE(r0, 0x5501) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.6' (ED25519) to the list of known hosts. [ 200.905628][ T5777] cgroup: Unknown subsys name 'net' [ 201.037010][ T5777] cgroup: Unknown subsys name 'cpuset' [ 201.053384][ T5777] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 208.163487][ T5777] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 214.889128][ T5802] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 214.901866][ T5803] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 214.909887][ T5803] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 214.924545][ T5802] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 214.933844][ T5802] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 214.944363][ T5802] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 214.953203][ T5802] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 214.959727][ T5806] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 214.970070][ T5806] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 214.970157][ T5807] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 214.982793][ T5806] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 214.993246][ T5805] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 214.995950][ T5806] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 215.006653][ T5805] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 215.018221][ T5807] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 215.027504][ T5806] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 215.029491][ T5807] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 215.046567][ T5805] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 215.057348][ T5805] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 215.085579][ T5807] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 215.097434][ T5807] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 215.108074][ T5803] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 215.118208][ T5803] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 215.144978][ T5802] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 215.159496][ T5803] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 216.903990][ T5804] chnl_net:caif_netlink_parms(): no params data found [ 217.125779][ T5803] Bluetooth: hci0: command tx timeout [ 217.216756][ T5803] Bluetooth: hci2: command tx timeout [ 217.217290][ T5806] Bluetooth: hci3: command tx timeout [ 217.222358][ T5803] Bluetooth: hci4: command tx timeout [ 217.229579][ T5802] Bluetooth: hci1: command tx timeout [ 217.444466][ T5793] chnl_net:caif_netlink_parms(): no params data found [ 217.519416][ T5798] chnl_net:caif_netlink_parms(): no params data found [ 217.773305][ T5809] chnl_net:caif_netlink_parms(): no params data found [ 217.978324][ T5795] chnl_net:caif_netlink_parms(): no params data found [ 218.324123][ T5804] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.331977][ T5804] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.339981][ T5804] bridge_slave_0: entered allmulticast mode [ 218.350023][ T5804] bridge_slave_0: entered promiscuous mode [ 218.389444][ T5804] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.397220][ T5804] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.404915][ T5804] bridge_slave_1: entered allmulticast mode [ 218.414821][ T5804] bridge_slave_1: entered promiscuous mode [ 218.738841][ T5804] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 218.951618][ T5804] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 218.961815][ T5793] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.970340][ T5793] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.978196][ T5793] bridge_slave_0: entered allmulticast mode [ 218.987966][ T5793] bridge_slave_0: entered promiscuous mode [ 219.094980][ T5798] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.102806][ T5798] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.111221][ T5798] bridge_slave_0: entered allmulticast mode [ 219.120896][ T5798] bridge_slave_0: entered promiscuous mode [ 219.133651][ T5793] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.144725][ T5793] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.152691][ T5793] bridge_slave_1: entered allmulticast mode [ 219.161480][ T5793] bridge_slave_1: entered promiscuous mode [ 219.225670][ T5806] Bluetooth: hci0: command tx timeout [ 219.243807][ T5798] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.251654][ T5798] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.259655][ T5798] bridge_slave_1: entered allmulticast mode [ 219.268700][ T5798] bridge_slave_1: entered promiscuous mode [ 219.313503][ T5806] Bluetooth: hci3: command tx timeout [ 219.313629][ T5802] Bluetooth: hci4: command tx timeout [ 219.319316][ T5806] Bluetooth: hci1: command tx timeout [ 219.319423][ T5806] Bluetooth: hci2: command tx timeout [ 219.381904][ T5804] team0: Port device team_slave_0 added [ 219.543054][ T5804] team0: Port device team_slave_1 added [ 219.562163][ T5793] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 219.572215][ T5809] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.583600][ T5809] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.591969][ T5809] bridge_slave_0: entered allmulticast mode [ 219.600839][ T5809] bridge_slave_0: entered promiscuous mode [ 219.651884][ T5795] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.659717][ T5795] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.667570][ T5795] bridge_slave_0: entered allmulticast mode [ 219.677544][ T5795] bridge_slave_0: entered promiscuous mode [ 219.711993][ T5793] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 219.762898][ T5809] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.773530][ T5809] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.781348][ T5809] bridge_slave_1: entered allmulticast mode [ 219.790171][ T5809] bridge_slave_1: entered promiscuous mode [ 219.811123][ T5798] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 219.861245][ T5795] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.870867][ T5795] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.878929][ T5795] bridge_slave_1: entered allmulticast mode [ 219.888106][ T5795] bridge_slave_1: entered promiscuous mode [ 219.973811][ T5798] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 220.093890][ T5804] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 220.101983][ T5804] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 220.128323][ T5804] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 220.189319][ T5809] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 220.241606][ T5793] team0: Port device team_slave_0 added [ 220.260927][ T5795] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 220.272915][ T5804] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 220.280263][ T5804] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 220.306794][ T5804] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 220.359667][ T5809] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 220.418026][ T5793] team0: Port device team_slave_1 added [ 220.436740][ T5795] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 220.474725][ T5798] team0: Port device team_slave_0 added [ 220.598532][ T5798] team0: Port device team_slave_1 added [ 220.614707][ T5809] team0: Port device team_slave_0 added [ 220.752899][ T5795] team0: Port device team_slave_0 added [ 220.768390][ T5809] team0: Port device team_slave_1 added [ 220.819281][ T5793] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 220.826641][ T5793] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 220.853089][ T5793] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 220.867599][ T5798] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 220.874868][ T5798] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 220.901745][ T5798] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 220.945403][ T5795] team0: Port device team_slave_1 added [ 221.020089][ T5793] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 221.027372][ T5793] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 221.053756][ T5793] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 221.070206][ T5798] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 221.077646][ T5798] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 221.104014][ T5798] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 221.251569][ T5809] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 221.258924][ T5809] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 221.285462][ T5809] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 221.298565][ T5802] Bluetooth: hci0: command tx timeout [ 221.318950][ T5809] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 221.328970][ T5809] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 221.355400][ T5809] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 221.368463][ T5802] Bluetooth: hci4: command tx timeout [ 221.375470][ T5802] Bluetooth: hci2: command tx timeout [ 221.381105][ T5802] Bluetooth: hci1: command tx timeout [ 221.386864][ T5802] Bluetooth: hci3: command tx timeout [ 221.422974][ T5804] hsr_slave_0: entered promiscuous mode [ 221.432345][ T5804] hsr_slave_1: entered promiscuous mode [ 221.514619][ T5795] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 221.522021][ T5795] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 221.548472][ T5795] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 221.685398][ T5795] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 221.692544][ T5795] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 221.719086][ T5795] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 221.823582][ T5809] hsr_slave_0: entered promiscuous mode [ 221.834119][ T5809] hsr_slave_1: entered promiscuous mode [ 221.843231][ T5809] debugfs: 'hsr0' already exists in 'hsr' [ 221.849418][ T5809] Cannot create hsr debugfs directory [ 221.872072][ T5793] hsr_slave_0: entered promiscuous mode [ 221.882411][ T5793] hsr_slave_1: entered promiscuous mode [ 221.891320][ T5793] debugfs: 'hsr0' already exists in 'hsr' [ 221.897340][ T5793] Cannot create hsr debugfs directory [ 221.946992][ T5798] hsr_slave_0: entered promiscuous mode [ 221.956892][ T5798] hsr_slave_1: entered promiscuous mode [ 221.964851][ T5798] debugfs: 'hsr0' already exists in 'hsr' [ 221.970909][ T5798] Cannot create hsr debugfs directory [ 222.323339][ T5795] hsr_slave_0: entered promiscuous mode [ 222.333959][ T5795] hsr_slave_1: entered promiscuous mode [ 222.343201][ T5795] debugfs: 'hsr0' already exists in 'hsr' [ 222.349255][ T5795] Cannot create hsr debugfs directory [ 223.379685][ T5807] Bluetooth: hci0: command tx timeout [ 223.450349][ T5807] Bluetooth: hci3: command tx timeout [ 223.456352][ T5802] Bluetooth: hci1: command tx timeout [ 223.462204][ T5802] Bluetooth: hci2: command tx timeout [ 223.468253][ T5807] Bluetooth: hci4: command tx timeout [ 223.730945][ T5804] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 223.752820][ T5804] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 223.816934][ T5804] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 223.871551][ T5804] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 224.033778][ T5793] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 224.057014][ T5793] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 224.124712][ T5793] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 224.182859][ T5793] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 224.235858][ T5798] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 224.307140][ T5798] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 224.345479][ T5798] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 224.394953][ T5798] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 224.609421][ T5809] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 224.684444][ T5809] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 224.722959][ T5809] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 224.800193][ T5809] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 224.944418][ T5795] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 225.050437][ T5795] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 225.084703][ T5795] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 225.146956][ T5795] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 225.335487][ T5804] 8021q: adding VLAN 0 to HW filter on device bond0 [ 225.524144][ T5804] 8021q: adding VLAN 0 to HW filter on device team0 [ 225.619986][ T3787] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.627627][ T3787] bridge0: port 1(bridge_slave_0) entered forwarding state [ 225.742588][ T3787] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.750374][ T3787] bridge0: port 2(bridge_slave_1) entered forwarding state [ 225.864400][ T5793] 8021q: adding VLAN 0 to HW filter on device bond0 [ 226.121402][ T5798] 8021q: adding VLAN 0 to HW filter on device bond0 [ 226.143679][ T5809] 8021q: adding VLAN 0 to HW filter on device bond0 [ 226.199894][ T5793] 8021q: adding VLAN 0 to HW filter on device team0 [ 226.319569][ T3787] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.327239][ T3787] bridge0: port 1(bridge_slave_0) entered forwarding state [ 226.349871][ T5809] 8021q: adding VLAN 0 to HW filter on device team0 [ 226.411965][ T3787] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.419653][ T3787] bridge0: port 2(bridge_slave_1) entered forwarding state [ 226.467647][ T5798] 8021q: adding VLAN 0 to HW filter on device team0 [ 226.537969][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.545645][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 226.591915][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.599587][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 226.698782][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.706514][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 226.853824][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.861512][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 226.913380][ T5795] 8021q: adding VLAN 0 to HW filter on device bond0 [ 227.322261][ T5795] 8021q: adding VLAN 0 to HW filter on device team0 [ 227.439745][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.447523][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 227.543906][ T4797] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.551623][ T4797] bridge0: port 2(bridge_slave_1) entered forwarding state [ 228.087358][ T5804] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 228.689389][ T5804] veth0_vlan: entered promiscuous mode [ 228.793349][ T5804] veth1_vlan: entered promiscuous mode [ 229.185186][ T5804] veth0_macvtap: entered promiscuous mode [ 229.220376][ T5798] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 229.269233][ T5793] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 229.283575][ T5804] veth1_macvtap: entered promiscuous mode [ 229.432105][ T5809] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 229.558067][ T5804] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 229.699685][ T5804] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 229.880877][ T5793] veth0_vlan: entered promiscuous mode [ 229.894693][ T4797] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.929775][ T4797] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.031798][ T5809] veth0_vlan: entered promiscuous mode [ 230.039069][ T4797] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.076432][ T5793] veth1_vlan: entered promiscuous mode [ 230.109140][ T4207] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.190970][ T5795] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 230.204579][ T5809] veth1_vlan: entered promiscuous mode [ 230.532566][ T5793] veth0_macvtap: entered promiscuous mode [ 230.619410][ T5793] veth1_macvtap: entered promiscuous mode [ 230.681855][ T5809] veth0_macvtap: entered promiscuous mode [ 230.724161][ T5809] veth1_macvtap: entered promiscuous mode [ 230.853317][ T5795] veth0_vlan: entered promiscuous mode [ 230.940335][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 230.969351][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 230.999265][ T5795] veth1_vlan: entered promiscuous mode [ 231.069464][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 231.108244][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 231.233983][ T3787] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.291834][ T3787] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.350338][ T3787] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.435845][ T3787] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.475634][ T3787] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.490905][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.536286][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.560167][ T5795] veth0_macvtap: entered promiscuous mode [ 231.576070][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.642571][ T5795] veth1_macvtap: entered promiscuous mode [ 231.830482][ T5795] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 231.933522][ T5795] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 232.048854][ T4672] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.106731][ T4672] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.118968][ T4672] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.178681][ T4797] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.307806][ T5798] veth0_vlan: entered promiscuous mode [ 232.444070][ T5798] veth1_vlan: entered promiscuous mode [ 232.849419][ T5798] veth0_macvtap: entered promiscuous mode [ 232.933286][ T5798] veth1_macvtap: entered promiscuous mode [ 233.140921][ T5798] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 233.235529][ T5798] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 233.341551][ T56] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.391067][ T56] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.460802][ T56] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.532038][ T56] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.159131][ T3787] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.167510][ T3787] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.297912][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 237.304596][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 237.428735][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.438409][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.840530][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.866713][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.868540][ T5804] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 238.143640][ T5047] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 238.151908][ T5047] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 238.280697][ T5047] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 238.289793][ T5047] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 238.691828][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 238.703998][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.082463][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 239.091779][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.421015][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 239.429333][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.536003][ T5979] mmap: syz.3.4 (5979) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 239.957965][ T5986] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3'. [ 240.252166][ T4672] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 240.260525][ T4672] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 240.648334][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 240.656934][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 240.863860][ T5995] ======================================================= [ 240.863860][ T5995] WARNING: The mand mount option has been deprecated and [ 240.863860][ T5995] and is ignored by this kernel. Remove the mand [ 240.863860][ T5995] option from the mount to silence this warning. [ 240.863860][ T5995] ======================================================= [ 241.249195][ T5806] Bluetooth: hci0: unexpected event 0x06 length: 4 > 3 [ 241.943430][ T6005] syz.1.10 uses obsolete (PF_INET,SOCK_PACKET) [ 242.285791][ T1867] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 242.355613][ T5858] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 242.357817][ T6014] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14'. [ 242.396609][ T6009] loop2: detected capacity change from 0 to 2048 [ 242.579215][ T1867] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 242.593066][ T5858] usb 4-1: Using ep0 maxpacket: 16 [ 242.638498][ T6009] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 242.654755][ T6009] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 242.681207][ T5858] usb 4-1: config 0 interface 0 altsetting 65 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 242.692835][ T5858] usb 4-1: config 0 interface 0 altsetting 65 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 242.706308][ T5858] usb 4-1: config 0 interface 0 has no altsetting 0 [ 242.713221][ T5858] usb 4-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 242.722705][ T5858] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.785860][ T1867] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 242.795725][ T1867] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.803965][ T1867] usb 1-1: Product: syz [ 242.808742][ T1867] usb 1-1: Manufacturer: syz [ 242.813593][ T1867] usb 1-1: SerialNumber: syz [ 242.839730][ T5858] usb 4-1: config 0 descriptor?? [ 243.203056][ T5809] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.473519][ T5856] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 243.483470][ T5858] aquacomputer_d5next 0003:0C70:F0B6.0001: unknown main item tag 0x0 [ 243.492535][ T5858] aquacomputer_d5next 0003:0C70:F0B6.0001: unknown main item tag 0x0 [ 243.503289][ T5858] aquacomputer_d5next 0003:0C70:F0B6.0001: unknown main item tag 0x0 [ 243.512505][ T5858] aquacomputer_d5next 0003:0C70:F0B6.0001: unknown main item tag 0x0 [ 243.521269][ T5858] aquacomputer_d5next 0003:0C70:F0B6.0001: unknown main item tag 0x0 [ 243.657554][ T5858] aquacomputer_d5next 0003:0C70:F0B6.0001: hidraw0: USB HID v0.05 Device [HID 0c70:f0b6] on usb-dummy_hcd.3-1/input0 [ 243.699264][ T5856] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 243.711177][ T5856] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 243.721513][ T5856] usb 2-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 243.731132][ T5856] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.830564][ T5858] usb 4-1: USB disconnect, device number 2 [ 243.914681][ T5856] usb 2-1: config 0 descriptor?? [ 244.043799][ T1867] cdc_ncm 1-1:1.0: failed to get mac address [ 244.084599][ T1867] cdc_ncm 1-1:1.0: bind() failure [ 244.213349][ T1867] cdc_ncm 1-1:1.1: probe with driver cdc_ncm failed with error -71 [ 244.290185][ T1867] cdc_mbim 1-1:1.1: probe with driver cdc_mbim failed with error -71 [ 244.352891][ T1867] usbtest 1-1:1.1: probe with driver usbtest failed with error -71 [ 244.497142][ T1867] usb 1-1: USB disconnect, device number 2 [ 244.916904][ T5856] hid-led 0003:27B8:01ED.0002: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.1-1/input0 [ 244.946447][ T5856] hid-led 0003:27B8:01ED.0002: ThingM blink(1) initialized [ 245.177133][ T5856] usb 2-1: USB disconnect, device number 2 [ 245.428407][ T6031] fido_id[6031]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 245.918954][ T6040] netlink: 4 bytes leftover after parsing attributes in process `syz.2.21'. [ 246.316548][ T6043] Illegal XDP return value 4294967274 on prog (id 4) dev syz_tun, expect packet loss! [ 246.721127][ T6041] fido_id[6041]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 247.786642][ T6058] warning: `syz.0.27' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 247.896649][ T6057] netlink: 'syz.4.28': attribute type 178 has an invalid length. [ 248.563481][ T6067] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 248.672822][ T6071] loop2: detected capacity change from 0 to 128 [ 248.748983][ T1867] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 248.762246][ T6071] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 248.807166][ T6071] hpfs: filesystem error: improperly stopped [ 248.813805][ T6071] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 248.822032][ T6071] hpfs: You really don't want any checks? You are crazy... [ 248.854354][ T6071] hpfs: hpfs_map_sector(): read error [ 248.860326][ T6071] hpfs: code page support is disabled [ 248.877120][ T6071] hpfs: hpfs_map_4sectors(): unaligned read [ 248.884122][ T6071] hpfs: hpfs_map_4sectors(): unaligned read [ 248.891129][ T6071] hpfs: filesystem error: unable to find root dir [ 248.955595][ T1867] usb 2-1: Using ep0 maxpacket: 16 [ 249.045622][ T1867] usb 2-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 249.055209][ T1867] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.063474][ T1867] usb 2-1: Product: syz [ 249.068058][ T1867] usb 2-1: Manufacturer: syz [ 249.072866][ T1867] usb 2-1: SerialNumber: syz [ 249.188613][ T1867] usb 2-1: config 0 descriptor?? [ 249.244550][ T1867] ums-onetouch 2-1:0.0: USB Mass Storage device detected [ 249.467747][ T1867] usb 2-1: USB disconnect, device number 3 [ 249.785623][ T5856] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 250.042091][ T5856] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 250.053863][ T5856] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 250.064182][ T5856] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 250.235458][ T5856] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 250.244950][ T5856] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.253862][ T5856] usb 5-1: Product: syz [ 250.258438][ T5856] usb 5-1: Manufacturer: syz [ 250.263269][ T5856] usb 5-1: SerialNumber: syz [ 250.371718][ T5856] hub 5-1:1.0: bad descriptor, ignoring hub [ 250.378458][ T5856] hub 5-1:1.0: probe with driver hub failed with error -5 [ 250.620265][ T5856] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 250.935695][ T5856] usb 5-1: reset high-speed USB device number 2 using dummy_hcd [ 251.296199][ T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 251.543343][ T9] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 251.552749][ T9] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 251.567943][ T9] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 251.580741][ T9] usb 2-1: config 220 has no interface number 2 [ 251.587498][ T9] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 251.601115][ T9] usb 2-1: config 220 interface 0 has no altsetting 0 [ 251.608873][ T9] usb 2-1: config 220 interface 76 has no altsetting 0 [ 251.616138][ T9] usb 2-1: config 220 interface 1 has no altsetting 0 [ 251.696106][ T1867] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 251.747384][ T5856] usb 5-1: USB disconnect, device number 2 [ 251.788478][ T5856] usblp0: removed [ 251.841755][ T9] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 251.853353][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.862684][ T9] usb 2-1: Product: syz [ 251.874209][ T9] usb 2-1: Manufacturer: syz [ 251.881784][ T9] usb 2-1: SerialNumber: syz [ 251.896301][ T1867] usb 1-1: Using ep0 maxpacket: 8 [ 251.955444][ T1867] usb 1-1: config 254 has an invalid interface number: 240 but max is 0 [ 251.967439][ T1867] usb 1-1: config 254 has an invalid descriptor of length 112, skipping remainder of the config [ 251.979756][ T1867] usb 1-1: config 254 has no interface number 0 [ 251.986405][ T1867] usb 1-1: config 254 interface 240 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 252.215538][ T1867] usb 1-1: New USB device found, idVendor=17ef, idProduct=3069, bcdDevice=3e.9b [ 252.225385][ T1867] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.226906][ T9] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 252.233597][ T1867] usb 1-1: Product: syz [ 252.233710][ T1867] usb 1-1: Manufacturer: syz [ 252.241345][ T9] uvcvideo 2-1:220.0: No valid video chain found. [ 252.241656][ T9] usb 2-1: selecting invalid altsetting 0 [ 252.245839][ T1867] usb 1-1: SerialNumber: syz [ 252.381435][ T1867] r8152-cfgselector 1-1: Unknown version 0x0000 [ 252.441585][ T9] usb 2-1: selecting invalid altsetting 0 [ 252.447815][ T9] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 252.620183][ T9] usb 2-1: USB disconnect, device number 4 [ 252.724538][ T1867] r8152-cfgselector 1-1: USB disconnect, device number 3 [ 252.800849][ T6030] udevd[6030]: setting owner of /dev/bus/usb/001/003 to uid=0, gid=0 failed: No such file or directory [ 253.974953][ T6115] loop2: detected capacity change from 0 to 16 [ 254.046031][ T6115] erofs (device loop2): mounted with root inode @ nid 36. [ 254.114160][ T6115] erofs (device loop2): readahead error at folio 2 @ nid 89 [ 254.138692][ T5806] erofs (device loop2): failed to decompress 7514 in[4096, 0] out[8192] [ 254.156541][ T6115] erofs (device loop2): failed to decompress 7514 in[4096, 0] out[8192] [ 254.209430][ T6115] erofs (device loop2): read error -117 @ 1 of nid 89 [ 254.236117][ T30] audit: type=1800 audit(1762878572.744:2): pid=6115 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.52" name="file3" dev="loop2" ino=89 res=0 errno=0 [ 254.355378][ T1867] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 254.567829][ T1867] usb 5-1: unable to get BOS descriptor or descriptor too short [ 254.598283][ T1867] usb 5-1: config 6 has an invalid interface number: 200 but max is 0 [ 254.607581][ T1867] usb 5-1: config 6 has no interface number 0 [ 254.614001][ T1867] usb 5-1: config 6 interface 200 altsetting 8 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 254.625459][ T1867] usb 5-1: config 6 interface 200 has no altsetting 0 [ 254.748961][ T1867] usb 5-1: string descriptor 0 read error: -22 [ 254.756117][ T1867] usb 5-1: New USB device found, idVendor=05d8, idProduct=810c, bcdDevice=18.5f [ 254.765619][ T1867] usb 5-1: New USB device strings: Mfr=9, Product=2, SerialNumber=3 [ 254.866023][ T1867] dvb-usb: found a 'Artec T14 - USB2.0 DVB-T' in warm state. [ 255.221191][ T1867] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 255.297948][ T1867] dvbdev: DVB: registering new adapter (Artec T14 - USB2.0 DVB-T) [ 255.307390][ T1867] usb 5-1: media controller created [ 255.394209][ T1867] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 255.619767][ T1867] dvb-usb: bulk message failed: -71 (6/0) [ 255.640553][ T1867] dvb-usb: bulk message failed: -71 (6/0) [ 255.647212][ T1867] dvb-usb: no frontend was attached by 'Artec T14 - USB2.0 DVB-T' [ 255.757385][ T1867] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input5 [ 255.876423][ T6132] syzkaller1: entered promiscuous mode [ 255.882425][ T6132] syzkaller1: entered allmulticast mode [ 255.914385][ T1867] dvb-usb: schedule remote query interval to 150 msecs. [ 255.922350][ T1867] dvb-usb: Artec T14 - USB2.0 DVB-T successfully initialized and connected. [ 256.053130][ T1867] usb 5-1: USB disconnect, device number 3 [ 256.715367][ T1867] dvb-usb: Artec T14 - USB2.0 DVB-T successfully deinitialized and disconnected. [ 256.802382][ T5858] kernel write not supported for file bpf-prog (pid: 5858 comm: kworker/1:3) [ 257.134418][ T6145] netlink: 4 bytes leftover after parsing attributes in process `syz.3.65'. [ 257.185933][ T6144] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 257.217327][ T6145] netlink: 4 bytes leftover after parsing attributes in process `syz.3.65'. [ 257.386212][ T6149] loop1: detected capacity change from 0 to 128 [ 257.414064][ T6151] capability: warning: `syz.2.67' uses deprecated v2 capabilities in a way that may be insecure [ 258.517538][ T9] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 258.770954][ T9] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 258.782623][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 258.794266][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 258.804798][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 259.049616][ T9] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 259.059386][ T9] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 259.068070][ T9] usb 2-1: Manufacturer: syz [ 259.139737][ T9] usb 2-1: config 0 descriptor?? [ 259.640733][ T9] appleir 0003:05AC:8243.0003: unknown main item tag 0x0 [ 259.742760][ T9] appleir 0003:05AC:8243.0003: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 259.984038][ T1867] usb 2-1: USB disconnect, device number 5 [ 260.377176][ T6173] input: syz1 as /devices/virtual/input/input6 [ 260.425765][ T6176] netlink: 51 bytes leftover after parsing attributes in process `syz.4.78'. [ 260.449104][ T6177] binder: 6175:6177 ioctl c0306201 80000480 returned -22 [ 262.142045][ T9] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 262.195375][ T5856] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 262.429289][ T9] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 262.439201][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.452177][ T5856] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 262.463679][ T5856] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 262.474099][ T5856] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 262.483905][ T5856] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.533891][ T9] usb 1-1: config 0 descriptor?? [ 262.591315][ T5856] usb 2-1: config 0 descriptor?? [ 262.980642][ T9] [drm:udl_init] *ERROR* Selecting channel failed [ 263.040238][ T56] Bluetooth: hci5: Frame reassembly failed (-84) [ 263.055343][ T9] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2 [ 263.062425][ T9] [drm] Initialized udl on minor 2 [ 263.072583][ T6204] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 263.090598][ T5856] cm6533_jd 0003:0D8C:0022.0004: unknown main item tag 0x0 [ 263.098614][ T5856] cm6533_jd 0003:0D8C:0022.0004: unknown main item tag 0x0 [ 263.116058][ T9] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 263.126565][ T9] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 263.154662][ T11] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 263.164782][ T11] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 263.173587][ T11] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 263.199156][ T5856] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0D8C:0022.0004/input/input7 [ 263.215292][ T9] usb 1-1: USB disconnect, device number 4 [ 263.240685][ T6206] loop4: detected capacity change from 0 to 1024 [ 263.282295][ T5856] cm6533_jd 0003:0D8C:0022.0004: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.1-1/input0 [ 263.364267][ T6206] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 263.396135][ T1867] usb 2-1: USB disconnect, device number 6 [ 263.483121][ T6206] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4193: comm syz.4.90: Allocating blocks 385-513 which overlap fs metadata [ 263.567326][ T6206] EXT4-fs (loop4): pa ffff8881205aa310: logic 16, phys. 129, len 24 [ 263.576235][ T6206] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 8 [ 263.659896][ T6206] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 15: block 337:freeing already freed block (bit 21); block bitmap corrupt. [ 263.871166][ T5798] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.365396][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 264.373007][ T6224] Bluetooth: MGMT ver 1.23 [ 264.578703][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 264.590284][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 264.600647][ T9] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 264.610083][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.644276][ T9] usb 4-1: config 0 descriptor?? [ 264.877324][ T1867] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 265.055418][ T5802] Bluetooth: hci5: command 0x1003 tx timeout [ 265.057577][ T5806] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 265.076988][ T1867] usb 1-1: Using ep0 maxpacket: 8 [ 265.098280][ T9] pyra 0003:1E7D:2CF6.0005: unknown main item tag 0x2 [ 265.105635][ T9] pyra 0003:1E7D:2CF6.0005: unknown main item tag 0x0 [ 265.112707][ T9] pyra 0003:1E7D:2CF6.0005: unexpected long global item [ 265.158622][ T1867] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 265.168204][ T1867] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.179809][ T1867] usb 1-1: Product: syz [ 265.184194][ T1867] usb 1-1: Manufacturer: syz [ 265.189993][ T1867] usb 1-1: SerialNumber: syz [ 265.200733][ T1867] usb 1-1: config 0 descriptor?? [ 265.244096][ T9] pyra 0003:1E7D:2CF6.0005: parse failed [ 265.251613][ T9] pyra 0003:1E7D:2CF6.0005: probe with driver pyra failed with error -22 [ 265.406757][ T9] usb 4-1: USB disconnect, device number 3 [ 265.466486][ T1867] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 266.279358][ T1867] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 266.326935][ T1867] usb 1-1: USB disconnect, device number 5 [ 266.456085][ T6250] netlink: 28 bytes leftover after parsing attributes in process `syz.1.107'. [ 266.465696][ T6250] netlink: 'syz.1.107': attribute type 7 has an invalid length. [ 266.473543][ T6250] netlink: 'syz.1.107': attribute type 8 has an invalid length. [ 266.481587][ T6250] netlink: 4 bytes leftover after parsing attributes in process `syz.1.107'. [ 266.512558][ T6250] erspan0: entered promiscuous mode [ 266.523903][ T6250] gretap0: entered promiscuous mode [ 266.530723][ T30] audit: type=1326 audit(1762878585.054:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6247 comm="syz.3.106" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6539 code=0x7ffc0000 [ 266.585697][ T6250] erspan0: left promiscuous mode [ 266.641273][ T30] audit: type=1326 audit(1762878585.144:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6247 comm="syz.3.106" exe="/root/syz-executor" sig=0 arch=40000003 syscall=310 compat=1 ip=0xf7fa6539 code=0x7ffc0000 [ 266.664548][ T30] audit: type=1326 audit(1762878585.164:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6247 comm="syz.3.106" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6539 code=0x7ffc0000 [ 266.687261][ T30] audit: type=1326 audit(1762878585.164:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6247 comm="syz.3.106" exe="/root/syz-executor" sig=0 arch=40000003 syscall=399 compat=1 ip=0xf7fa6539 code=0x7ffc0000 [ 266.715985][ T30] audit: type=1326 audit(1762878585.164:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6247 comm="syz.3.106" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6539 code=0x7ffc0000 [ 266.740136][ T30] audit: type=1326 audit(1762878585.194:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6247 comm="syz.3.106" exe="/root/syz-executor" sig=0 arch=40000003 syscall=400 compat=1 ip=0xf7fa6539 code=0x7ffc0000 [ 266.762523][ T30] audit: type=1326 audit(1762878585.194:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6247 comm="syz.3.106" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6539 code=0x7ffc0000 [ 266.784915][ T30] audit: type=1326 audit(1762878585.194:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6247 comm="syz.3.106" exe="/root/syz-executor" sig=0 arch=40000003 syscall=401 compat=1 ip=0xf7fa6539 code=0x7ffc0000 [ 266.798728][ T6250] gretap0: left promiscuous mode [ 266.808133][ T30] audit: type=1326 audit(1762878585.194:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6247 comm="syz.3.106" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6539 code=0x7ffc0000 [ 267.468802][ T6261] loop4: detected capacity change from 0 to 64 [ 267.682718][ T30] audit: type=1804 audit(1762878586.204:12): pid=6261 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.111" name="/newroot/21/file0/file1" dev="loop4" ino=1 res=1 errno=0 [ 267.996638][ T6266] loop2: detected capacity change from 0 to 256 [ 268.288070][ T6266] FAT-fs (loop2): Directory bread(block 64) failed [ 268.295276][ T6266] FAT-fs (loop2): Directory bread(block 65) failed [ 268.302244][ T6266] FAT-fs (loop2): Directory bread(block 66) failed [ 268.309276][ T6266] FAT-fs (loop2): Directory bread(block 67) failed [ 268.316384][ T6266] FAT-fs (loop2): Directory bread(block 68) failed [ 268.323115][ T6266] FAT-fs (loop2): Directory bread(block 69) failed [ 268.330276][ T6266] FAT-fs (loop2): Directory bread(block 70) failed [ 268.337195][ T6266] FAT-fs (loop2): Directory bread(block 71) failed [ 268.344085][ T6266] FAT-fs (loop2): Directory bread(block 72) failed [ 268.358553][ T6266] FAT-fs (loop2): Directory bread(block 73) failed [ 268.776208][ T6279] netlink: 8 bytes leftover after parsing attributes in process `syz.0.120'. [ 268.808054][ T6279] netlink: 8 bytes leftover after parsing attributes in process `syz.0.120'. [ 268.958095][ T6280] kvm: apic: phys broadcast and lowest prio [ 269.004434][ T6282] loop4: detected capacity change from 0 to 256 [ 269.042845][ T6282] exfat: Deprecated parameter 'utf8' [ 269.225509][ T6282] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe3865569, utbl_chksum : 0xe619d30d) [ 269.324552][ T6286] netlink: 4 bytes leftover after parsing attributes in process `syz.0.124'. [ 269.386404][ T6286] netlink: 173 bytes leftover after parsing attributes in process `syz.0.124'. [ 269.603627][ T6290] syzkaller1: entered promiscuous mode [ 269.609767][ T6290] syzkaller1: entered allmulticast mode [ 269.715537][ T5858] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 269.900683][ T5858] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 269.914787][ T5858] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 269.926291][ T5858] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 269.939709][ T5858] usb 4-1: New USB device found, idVendor=28bd, idProduct=0078, bcdDevice= 0.00 [ 269.949233][ T5858] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.108540][ T5858] usb 4-1: config 0 descriptor?? [ 270.119061][ T6288] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 270.162705][ T6288] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 270.389161][ T6299] netlink: 8 bytes leftover after parsing attributes in process `syz.2.131'. [ 270.636267][ T5858] uclogic 0003:28BD:0078.0006: interface is invalid, ignoring [ 270.781509][ T6305] dummy0: entered promiscuous mode [ 270.793317][ T6305] bond_slave_0: entered promiscuous mode [ 270.800708][ T6305] bond_slave_0: left promiscuous mode [ 270.861501][ T5858] usb 4-1: USB disconnect, device number 4 [ 270.876411][ T6305] dummy0: left promiscuous mode [ 271.299024][ T6309] IPVS: Scheduler module ip_vs_sip not found [ 272.269922][ T6326] process 'syz.0.142' launched './file0' with NULL argv: empty string added [ 273.627361][ T6349] netlink: 4 bytes leftover after parsing attributes in process `syz.0.152'. [ 273.636741][ T6349] netlink: 4 bytes leftover after parsing attributes in process `syz.0.152'. [ 274.817491][ T9] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 275.015719][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 275.046749][ T9] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 275.055564][ T9] usb 1-1: config 0 has no interface number 0 [ 275.061892][ T9] usb 1-1: config 0 interface 85 has no altsetting 0 [ 275.130134][ T9] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 275.139854][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.148849][ T9] usb 1-1: Product: syz [ 275.153300][ T9] usb 1-1: Manufacturer: syz [ 275.158356][ T9] usb 1-1: SerialNumber: syz [ 275.218190][ T9] usb 1-1: config 0 descriptor?? [ 275.228279][ T5858] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 275.245767][ T9] appletouch 1-1:0.85: Could not find int-in endpoint [ 275.252959][ T9] appletouch 1-1:0.85: probe with driver appletouch failed with error -5 [ 275.264516][ T9] usbhid 1-1:0.85: couldn't find an input interrupt endpoint [ 275.453077][ T5858] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 275.463807][ T5858] usb 4-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 275.473413][ T5858] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.539941][ T5858] usb 4-1: config 0 descriptor?? [ 276.125473][ T5858] hid-picolcd 0003:04D8:C002.0007: No report with id 0x11 found [ 276.264028][ T5858] usb 4-1: USB disconnect, device number 5 [ 276.707909][ T6369] loop4: detected capacity change from 0 to 128 [ 276.719308][ T6369] gfs2: gfs2 mount does not exist [ 277.940623][ T5858] usb 1-1: USB disconnect, device number 6 [ 278.829634][ T6402] netlink: 20 bytes leftover after parsing attributes in process `syz.1.176'. [ 279.016414][ T6408] netlink: 20 bytes leftover after parsing attributes in process `syz.1.176'. [ 279.025906][ T6408] nbd: device at index 64 is going down [ 279.135575][ T5858] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 279.339325][ T5858] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 279.350868][ T5858] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 279.360352][ T5858] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.428097][ T5858] usb 1-1: config 0 descriptor?? [ 279.761599][ T6418] loop3: detected capacity change from 0 to 512 [ 279.788032][ T6418] EXT4-fs: Ignoring removed nobh option [ 279.869592][ T6418] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.180: iget: bad i_size value: 38620345925642 [ 279.892668][ T5858] keytouch 0003:0926:3333.0008: fixing up Keytouch IEC report descriptor [ 279.937281][ T5858] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0008/input/input8 [ 279.946522][ T6418] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.180: couldn't read orphan inode 15 (err -117) [ 280.039836][ T5858] keytouch 0003:0926:3333.0008: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 280.054521][ T6418] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 280.263962][ T6406] loop0: detected capacity change from 0 to 512 [ 280.338318][ T6406] EXT4-fs: Ignoring removed mblk_io_submit option [ 280.346061][ T6406] EXT4-fs: Ignoring removed mblk_io_submit option [ 280.394040][ T6406] EXT4-fs: Mount option(s) incompatible with ext3 [ 280.684433][ T5804] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 281.219172][ T9] usb 1-1: USB disconnect, device number 7 [ 281.842569][ T6446] IPv6: Can't replace route, no match found [ 282.676132][ T9] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 282.875920][ T9] usb 5-1: config 1 has an invalid interface number: 7 but max is 0 [ 282.884413][ T9] usb 5-1: config 1 has no interface number 0 [ 282.897884][ T9] usb 5-1: config 1 interface 7 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1024 [ 282.910407][ T9] usb 5-1: config 1 interface 7 altsetting 0 has a duplicate endpoint with address 0x6, skipping [ 283.135801][ T9] usb 5-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 283.145350][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.153691][ T9] usb 5-1: Product: syz [ 283.158318][ T9] usb 5-1: Manufacturer: syz [ 283.163251][ T9] usb 5-1: SerialNumber: syz [ 283.203056][ T6455] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 283.256826][ T6455] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 283.326607][ T9] usb 5-1: Expected 3 endpoints, found: 2 [ 283.766155][ T1867] usb 5-1: USB disconnect, device number 4 [ 284.004864][ T6475] netlink: 4 bytes leftover after parsing attributes in process `syz.0.203'. [ 284.998256][ T6489] sctp: [Deprecated]: syz.0.208 (pid 6489) Use of int in max_burst socket option. [ 284.998256][ T6489] Use struct sctp_assoc_value instead [ 285.048255][ T6491] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 285.945572][ T6503] misc userio: No port type given on /dev/userio [ 286.271497][ T6504] misc userio: The device must be registered before sending interrupts [ 286.655799][ T6503] loop4: detected capacity change from 0 to 8192 [ 286.747161][ T6503] Dev loop4: RDB in block 1 has bad checksum [ 286.753866][ T6503] Dev loop4: unable to read RDB block 8 [ 286.760559][ T6503] loop4: unable to read partition table [ 286.798840][ T6503] loop_reread_partitions: partition scan of loop4 () failed (rc=-5) [ 287.265994][ T6519] loop2: detected capacity change from 0 to 2048 [ 287.444050][ T6519] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 287.735879][ T6519] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 287.841129][ T6519] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 94 with error 28 [ 287.854257][ T6519] EXT4-fs (loop2): This should not happen!! Data will be lost [ 287.854257][ T6519] [ 287.864496][ T6519] EXT4-fs (loop2): Total free blocks count 0 [ 287.870864][ T6519] EXT4-fs (loop2): Free/Dirty block details [ 287.877087][ T6519] EXT4-fs (loop2): free_blocks=2415919104 [ 287.883085][ T6519] EXT4-fs (loop2): dirty_blocks=96 [ 287.888552][ T6519] EXT4-fs (loop2): Block reservation details [ 287.894730][ T6519] EXT4-fs (loop2): i_reserved_data_blocks=6 [ 287.971590][ T6528] loop4: detected capacity change from 0 to 1024 [ 288.012738][ T6528] EXT4-fs: Ignoring removed mblk_io_submit option [ 288.155312][ T6528] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 288.453304][ T6530] loop0: detected capacity change from 0 to 4096 [ 288.469740][ T6537] loop1: detected capacity change from 0 to 512 [ 288.495951][ T6537] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.227: inode has both inline data and extents flags [ 288.534945][ T6530] ntfs3(loop0): Different NTFS sector size (2048) and media sector size (512). [ 288.545904][ T6537] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.227: couldn't read orphan inode 15 (err -117) [ 288.572612][ T5809] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 288.583693][ T5798] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2853: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 288.599905][ T6537] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 288.850022][ T6530] ntfs3(loop0): MFT: r=18, expect seq=1 instead of 0! [ 288.857549][ T6530] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 288.882585][ T6530] ntfs3(loop0): Failed to initialize $Extend/$ObjId. [ 289.016427][ T5795] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.071570][ T6530] netlink: zone id is out of range [ 289.078774][ T6530] netlink: zone id is out of range [ 289.084645][ T6530] netlink: zone id is out of range [ 289.090178][ T6530] netlink: zone id is out of range [ 289.095743][ T6530] netlink: zone id is out of range [ 289.101014][ T6530] netlink: zone id is out of range [ 289.106803][ T6530] netlink: zone id is out of range [ 289.112167][ T6530] netlink: zone id is out of range [ 289.117964][ T6530] netlink: zone id is out of range [ 289.261758][ T2902] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.297760][ T5798] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.393260][ T2902] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.425432][ T1867] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 289.542665][ T2902] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.651597][ T1867] usb 3-1: Using ep0 maxpacket: 16 [ 289.762656][ T2902] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.785792][ T1867] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 289.795307][ T1867] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.803531][ T1867] usb 3-1: Product: syz [ 289.808045][ T1867] usb 3-1: Manufacturer: syz [ 289.812872][ T1867] usb 3-1: SerialNumber: syz [ 289.917419][ T1867] usb 3-1: config 0 descriptor?? [ 290.256299][ T2902] bridge_slave_1: left allmulticast mode [ 290.270696][ T2902] bridge_slave_1: left promiscuous mode [ 290.279169][ T2902] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.362360][ T1867] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 290.381538][ T2902] bridge_slave_0: left allmulticast mode [ 290.388257][ T2902] bridge_slave_0: left promiscuous mode [ 290.395099][ T2902] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.403385][ T1867] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 290.447848][ T1867] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 290.456476][ T1867] usb 3-1: media controller created [ 290.476863][ T5858] IPVS: starting estimator thread 0... [ 290.494736][ T6550] net_ratelimit: 5 callbacks suppressed [ 290.494871][ T6550] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 290.533685][ T1867] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 290.617063][ T6552] IPVS: using max 192 ests per chain, 9600 per kthread [ 290.867213][ T1867] zl10353_read_register: readreg error (reg=127, ret==0) [ 290.874773][ T1867] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 290.887517][ T1867] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 290.948879][ T1867] usb 3-1: USB disconnect, device number 2 [ 291.255372][ T1867] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 291.295976][ T2902] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 291.337217][ T2902] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 291.361359][ T2902] bond0 (unregistering): Released all slaves [ 291.972934][ T2902] hsr_slave_0: left promiscuous mode [ 291.981461][ T2902] hsr_slave_1: left promiscuous mode [ 291.989925][ T2902] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 291.997673][ T2902] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 292.086615][ T2902] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 292.094322][ T2902] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 292.185084][ T2902] veth1_macvtap: left promiscuous mode [ 292.190975][ T2902] veth0_macvtap: left promiscuous mode [ 292.197192][ T2902] veth1_vlan: left promiscuous mode [ 292.202770][ T2902] veth0_vlan: left promiscuous mode [ 293.213828][ T2902] team0 (unregistering): Port device team_slave_1 removed [ 293.248123][ T5802] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 293.249446][ T2902] team0 (unregistering): Port device team_slave_0 removed [ 293.331529][ T6571] loop0: detected capacity change from 0 to 128 [ 293.495728][ T5802] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 293.516387][ T5802] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 293.547825][ T5802] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 293.559823][ T5802] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 293.862276][ T6571] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 293.976311][ T6571] ext4 filesystem being mounted at /43/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 294.682113][ T5793] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 294.796412][ T6566] chnl_net:caif_netlink_parms(): no params data found [ 295.605730][ T5806] Bluetooth: hci2: command tx timeout [ 296.114028][ T6566] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.128234][ T6566] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.140997][ T6566] bridge_slave_0: entered allmulticast mode [ 296.150977][ T6566] bridge_slave_0: entered promiscuous mode [ 296.183146][ T6566] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.192208][ T6566] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.204713][ T6566] bridge_slave_1: entered allmulticast mode [ 296.222701][ T6566] bridge_slave_1: entered promiscuous mode [ 296.472813][ T6566] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 296.527772][ T6566] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 296.609471][ T6610] loop1: detected capacity change from 0 to 256 [ 296.808323][ T6610] exFAT-fs (loop1): start_clu is invalid cluster(0x400) [ 296.927865][ T6566] team0: Port device team_slave_0 added [ 296.995242][ T6566] team0: Port device team_slave_1 added [ 297.259353][ T6566] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 297.266755][ T6566] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 297.293419][ T6566] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 297.401198][ T6566] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 297.408736][ T6566] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 297.440467][ T6566] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 297.478876][ T1867] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 297.646474][ T1867] usb 1-1: Using ep0 maxpacket: 32 [ 297.674014][ T1867] usb 1-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 297.684468][ T1867] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.695439][ T5806] Bluetooth: hci2: command tx timeout [ 297.731576][ T1867] usb 1-1: config 0 descriptor?? [ 297.761603][ T6624] loop2: detected capacity change from 0 to 64 [ 297.775607][ T6624] hfs: Bad value for 'gid' [ 297.807348][ T6566] hsr_slave_0: entered promiscuous mode [ 297.809057][ T1867] gspca_main: sunplus-2.14.0 probing 041e:400b [ 297.819348][ T6566] hsr_slave_1: entered promiscuous mode [ 297.823099][ T6566] debugfs: 'hsr0' already exists in 'hsr' [ 297.831209][ T6566] Cannot create hsr debugfs directory [ 298.038326][ T30] audit: type=1326 audit(1762878616.554:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6614 comm="syz.3.260" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6539 code=0x7fc00000 [ 298.676267][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 298.684107][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 298.971381][ T1867] gspca_sunplus: reg_r err -110 [ 298.977091][ T1867] sunplus 1-1:0.0: probe with driver sunplus failed with error -110 [ 299.040449][ T6566] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 299.076156][ T6566] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 299.089554][ T6634] loop1: detected capacity change from 0 to 512 [ 299.114513][ T6566] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 299.146562][ T6566] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 299.155890][ T6634] EXT4-fs (loop1): Test dummy encryption mode enabled [ 299.162886][ T6634] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 299.181408][ T6634] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 299.238186][ T6634] EXT4-fs error (device loop1): ext4_orphan_get:1418: comm syz.1.266: bad orphan inode 131083 [ 299.281990][ T6634] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 299.298257][ T6639] loop3: detected capacity change from 0 to 128 [ 299.318673][ T1867] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 299.360817][ T6639] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 299.367451][ T5856] usb 1-1: USB disconnect, device number 8 [ 299.405497][ T6639] ext4 filesystem being mounted at /56/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 299.502289][ T1867] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 299.514548][ T1867] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 299.524830][ T1867] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 299.539363][ T1867] usb 3-1: New USB device found, idVendor=0eef, idProduct=72d0, bcdDevice= 0.00 [ 299.548839][ T1867] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.584859][ T1867] usb 3-1: config 0 descriptor?? [ 299.765930][ T5806] Bluetooth: hci2: command tx timeout [ 300.003389][ T6645] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 300.118791][ T5804] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 300.143041][ T6634] fscrypt: AES-256-CBC-CTS using implementation "cts(cbc(ecb(aes-fixed-time)))" [ 300.249754][ T6646] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 300.304437][ T1867] hid-multitouch 0003:0EEF:72D0.0009: hidraw0: USB HID v0.00 Device [HID 0eef:72d0] on usb-dummy_hcd.2-1/input0 [ 300.366858][ T1867] usb 3-1: USB disconnect, device number 3 [ 300.386056][ T6646] Zero length message leads to an empty skb [ 300.577225][ T5795] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.684352][ T6566] 8021q: adding VLAN 0 to HW filter on device bond0 [ 300.771789][ T6566] 8021q: adding VLAN 0 to HW filter on device team0 [ 300.833759][ T5047] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.841406][ T5047] bridge0: port 1(bridge_slave_0) entered forwarding state [ 300.920561][ T5047] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.928310][ T5047] bridge0: port 2(bridge_slave_1) entered forwarding state [ 301.845838][ T5806] Bluetooth: hci2: command tx timeout [ 301.917172][ T5856] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 302.117049][ T5856] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 302.125680][ T5856] usb 3-1: config 0 has no interface number 0 [ 302.132014][ T5856] usb 3-1: config 0 interface 41 has no altsetting 0 [ 302.249261][ T5856] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 302.260511][ T5856] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.269116][ T5856] usb 3-1: Product: syz [ 302.273507][ T5856] usb 3-1: Manufacturer: syz [ 302.281832][ T5856] usb 3-1: SerialNumber: syz [ 302.353090][ T5856] usb 3-1: config 0 descriptor?? [ 302.388568][ T6667] loop0: detected capacity change from 0 to 4096 [ 302.410716][ T6667] ntfs3(loop0): Different NTFS sector size (1024) and media sector size (512). [ 302.669546][ T6667] ntfs3(loop0): ino=1a, mi_enum_attr [ 302.676161][ T6667] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 302.747491][ T6566] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 302.848151][ T11] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 302.855279][ T6667] ntfs3(loop0): ino=1e, "file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" ntfs_sync_inode failed, -22. [ 302.923491][ T30] audit: type=1804 audit(1762878621.444:14): pid=6674 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.276" name="/newroot/50/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop0" ino=30 res=1 errno=0 [ 303.056936][ T6674] ntfs3(loop0): ino=1e, "file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" ntfs_sync_inode failed, -22. [ 303.117120][ T11] usb 4-1: config index 0 descriptor too short (expected 45, got 36) [ 303.128730][ T11] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 303.141555][ T11] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 303.153000][ T11] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 303.169152][ T11] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 303.184563][ T11] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 303.194166][ T11] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.364070][ T11] usb 4-1: config 0 descriptor?? [ 303.380265][ T6671] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 303.488954][ T5856] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -71 [ 303.516980][ T5856] usb 3-1: USB disconnect, device number 4 [ 303.517012][ T5047] ntfs3(loop0): ino=1e, ntfs3_write_inode failed, -22. [ 303.999506][ T11] plantronics 0003:047F:FFFF.000A: reserved main item tag 0xd [ 304.220831][ T11] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 304.307944][ T11] usb 4-1: USB disconnect, device number 6 [ 305.035409][ T6566] veth0_vlan: entered promiscuous mode [ 305.104054][ T6689] loop0: detected capacity change from 0 to 512 [ 305.148258][ T6566] veth1_vlan: entered promiscuous mode [ 305.240463][ T6689] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002] [ 305.270263][ T6689] System zones: 0-2, 18-18, 34-35 [ 305.333338][ T6689] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 305.347860][ T6689] ext4 filesystem being mounted at /52/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 305.377880][ T6566] veth0_macvtap: entered promiscuous mode [ 305.437314][ T6566] veth1_macvtap: entered promiscuous mode [ 305.555978][ T6566] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 305.582771][ T6698] loop2: detected capacity change from 0 to 128 [ 305.649027][ T6566] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 305.767793][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.787607][ T5047] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.823499][ T6698] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 305.839091][ T6698] FAT-fs (loop2): Filesystem has been set read-only [ 305.840661][ T5047] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.883441][ T5793] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 305.892208][ T5047] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.461656][ T6705] loop0: detected capacity change from 0 to 1024 [ 307.026171][ T4672] hfsplus: b-tree write err: -5, ino 4 [ 309.531919][ T5858] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 309.590596][ T6751] loop2: detected capacity change from 0 to 1024 [ 309.627083][ T6751] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 309.660243][ T6751] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 309.707075][ T6751] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 309.716995][ T6751] EXT4-fs (loop2): orphan cleanup on readonly fs [ 309.728488][ T5858] usb 4-1: Using ep0 maxpacket: 16 [ 309.735873][ T6751] EXT4-fs error (device loop2): ext4_free_blocks:6706: comm syz.2.305: Freeing blocks not in datazone - block = 0, count = 4096 [ 309.755568][ T5858] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 309.756626][ T6751] EXT4-fs (loop2): Remounting filesystem read-only [ 309.767119][ T5858] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 309.772979][ T6751] EXT4-fs (loop2): 1 orphan inode deleted [ 309.790164][ T6751] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 309.846402][ T5858] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 309.856028][ T5858] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.864268][ T5858] usb 4-1: Product: syz [ 309.868960][ T5858] usb 4-1: Manufacturer: syz [ 309.873773][ T5858] usb 4-1: SerialNumber: syz [ 310.106544][ T5858] usb 4-1: 0:2 : does not exist [ 310.154129][ T5858] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 310.255507][ T1867] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 310.287205][ T5858] usb 4-1: USB disconnect, device number 7 [ 310.442119][ T1867] usb 3-1: Using ep0 maxpacket: 16 [ 310.462211][ T1867] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 310.472845][ T1867] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 310.571464][ T1867] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 310.581025][ T1867] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.589489][ T1867] usb 3-1: Product: syz [ 310.593884][ T1867] usb 3-1: Manufacturer: syz [ 310.598818][ T1867] usb 3-1: SerialNumber: syz [ 310.884365][ T1867] usb 3-1: 0:2 : does not exist [ 310.995810][ T1867] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 311.131105][ T1867] usb 3-1: USB disconnect, device number 5 [ 311.694266][ T5047] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 311.703276][ T5047] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 311.828135][ T4672] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 311.836505][ T4672] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 311.909065][ T5809] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 312.255842][ T1867] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 312.425412][ T1867] usb 2-1: Using ep0 maxpacket: 16 [ 312.434744][ T6780] loop2: detected capacity change from 0 to 2364 [ 312.455722][ T1867] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 312.467228][ T1867] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 312.477396][ T1867] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 312.494135][ T1867] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 312.504853][ T1867] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.542007][ T1867] usb 2-1: config 0 descriptor?? [ 313.000978][ T1867] microsoft 0003:045E:07DA.000B: ignoring exceeding usage max [ 313.041416][ T1867] microsoft 0003:045E:07DA.000B: unsupported Resolution Multiplier 0 [ 313.041428][ T6789] loop3: detected capacity change from 0 to 64 [ 313.084568][ T1867] microsoft 0003:045E:07DA.000B: implement() called with n (152) > 32! (kworker/1:2) [ 313.198656][ T1867] microsoft 0003:045E:07DA.000B: unsupported Resolution Multiplier 0 [ 313.246047][ T1867] microsoft 0003:045E:07DA.000B: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 313.258459][ T1867] microsoft 0003:045E:07DA.000B: no inputs found [ 313.265387][ T1867] microsoft 0003:045E:07DA.000B: could not initialize ff, continuing anyway [ 313.321664][ T6793] af_packet: tpacket_rcv: packet too big, clamped from 32 to 4294967272. macoff=96 [ 313.451358][ T1867] usb 2-1: USB disconnect, device number 7 [ 313.599241][ T5804] hfs: node 4:3 still has 1 user(s)! [ 314.115854][ T11] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 314.337218][ T11] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 314.348629][ T11] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 314.360010][ T11] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 314.370367][ T11] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 314.383920][ T11] usb 1-1: New USB device found, idVendor=056a, idProduct=0015, bcdDevice= 0.00 [ 314.393406][ T11] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.439990][ T6807] loop3: detected capacity change from 0 to 256 [ 314.514199][ T11] usb 1-1: config 0 descriptor?? [ 314.590209][ T6807] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66f6fd, utbl_chksum : 0xe619d30d) [ 315.013710][ T11] wacom 0003:056A:0015.000C: unknown main item tag 0x0 [ 315.021259][ T11] wacom 0003:056A:0015.000C: unknown main item tag 0x0 [ 315.111412][ T11] wacom 0003:056A:0015.000C: Unknown device_type for 'HID 056a:0015'. Assuming pen. [ 315.157256][ T11] wacom 0003:056A:0015.000C: hidraw0: USB HID v0.00 Device [HID 056a:0015] on usb-dummy_hcd.0-1/input0 [ 315.173022][ T11] input: Wacom Graphire4 4x5 Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:056A:0015.000C/input/input10 [ 315.264308][ T11] usb 1-1: USB disconnect, device number 9 [ 315.846076][ T11] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 315.944388][ T6827] block nbd0: Unsupported socket: should be TCP or UNIX. [ 316.034165][ T11] usb 6-1: config 0 has an invalid interface number: 128 but max is 0 [ 316.044868][ T11] usb 6-1: config 0 has no interface number 0 [ 316.081443][ T11] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 316.091810][ T11] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.101881][ T11] usb 6-1: Product: syz [ 316.106454][ T11] usb 6-1: Manufacturer: syz [ 316.111254][ T11] usb 6-1: SerialNumber: syz [ 316.152280][ T11] usb 6-1: config 0 descriptor?? [ 316.635236][ T11] usb 6-1: Firmware version (0.0) predates our first public release. [ 316.643706][ T11] usb 6-1: Please update to version 0.2 or newer [ 316.675503][ T11] usb 6-1: Firmware: build [ 316.906064][ T11] usb 6-1: USB disconnect, device number 2 [ 317.993855][ T6852] netlink: 24 bytes leftover after parsing attributes in process `syz.3.347'. [ 318.264361][ T6856] loop1: detected capacity change from 0 to 256 [ 318.850410][ T6860] delete_channel: no stack [ 319.440402][ T6868] bond1: entered allmulticast mode [ 320.210252][ T6879] loop3: detected capacity change from 0 to 64 [ 320.568419][ T6884] netlink: 4 bytes leftover after parsing attributes in process `syz.1.360'. [ 322.127767][ T6894] loop5: detected capacity change from 0 to 2048 [ 322.145125][ T6894] hpfs: Unknown parameter '00000000000000000003' [ 324.248411][ T6926] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 324.249245][ T6926] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 324.966115][ T6930] loop0: detected capacity change from 0 to 1024 [ 325.114820][ T6932] loop3: detected capacity change from 0 to 256 [ 325.819183][ T6930] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 327.115963][ T5793] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 329.361865][ T6906] Set syz1 is full, maxelem 65536 reached [ 329.397250][ T6959] batadv_slave_0: entered promiscuous mode [ 329.454662][ T6958] batadv_slave_0: left promiscuous mode [ 333.847854][ T7016] netlink: 20 bytes leftover after parsing attributes in process `syz.1.412'. [ 335.018086][ T11] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 335.239189][ T11] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 335.251511][ T11] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 335.261684][ T11] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.332212][ T11] usb 2-1: config 0 descriptor?? [ 335.773086][ T11] keytouch 0003:0926:3333.000D: fixing up Keytouch IEC report descriptor [ 335.811870][ T11] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.000D/input/input13 [ 336.085513][ T11] keytouch 0003:0926:3333.000D: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 336.778496][ T7051] netlink: 49 bytes leftover after parsing attributes in process `syz.5.426'. [ 336.787998][ T7051] netlink: 140 bytes leftover after parsing attributes in process `syz.5.426'. [ 336.798118][ T7051] netlink: 49 bytes leftover after parsing attributes in process `syz.5.426'. [ 337.068050][ T7055] loop0: detected capacity change from 0 to 128 [ 337.239751][ T30] audit: type=1800 audit(1762878655.754:15): pid=7055 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.428" name="bus" dev="loop0" ino=1048620 res=0 errno=0 [ 337.260691][ C0] vkms_vblank_simulate: vblank timer overrun [ 337.513073][ T7057] loop5: detected capacity change from 0 to 256 [ 337.736028][ T7057] exFAT-fs (loop5): start_clu is invalid cluster(0x400) [ 337.800300][ T30] audit: type=1800 audit(1762878656.324:16): pid=7057 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.429" name="file1" dev="loop5" ino=1048624 res=0 errno=0 [ 337.857495][ T1867] kernel write not supported for file bpf-prog (pid: 1867 comm: kworker/1:2) [ 338.208916][ T1867] usb 2-1: USB disconnect, device number 8 [ 338.430286][ T7065] binder: 7064:7065 ioctl c0285700 0 returned -22 [ 338.438961][ T7065] binder: 7064:7065 ioctl c00c6211 0 returned -14 [ 339.463877][ T7077] loop5: detected capacity change from 0 to 4096 [ 339.946890][ T7087] netlink: 'syz.0.442': attribute type 2 has an invalid length. [ 339.954893][ T7087] netlink: 160 bytes leftover after parsing attributes in process `syz.0.442'. [ 340.656554][ T7099] netlink: 20 bytes leftover after parsing attributes in process `syz.5.445'. [ 341.516646][ T7108] loop0: detected capacity change from 0 to 256 [ 341.526059][ T7108] exfat: Unknown parameter '017777777777777777777770x0000000000000000' [ 341.687643][ T5807] Bluetooth: hci3: command 0x0406 tx timeout [ 341.688187][ T5800] Bluetooth: hci0: command 0x0406 tx timeout [ 341.693889][ T5807] Bluetooth: hci1: command 0x0406 tx timeout [ 341.700570][ T5800] Bluetooth: hci4: command 0x0406 tx timeout [ 342.100191][ T7118] netlink: 'syz.5.456': attribute type 2 has an invalid length. [ 342.108915][ T7118] netlink: 160 bytes leftover after parsing attributes in process `syz.5.456'. [ 342.506407][ T7124] loop5: detected capacity change from 0 to 1024 [ 342.527533][ T7124] EXT4-fs: Ignoring removed nomblk_io_submit option [ 342.595361][ T7124] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 342.653999][ T7124] System zones: 0-1, 3-36 [ 342.684266][ T7124] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 342.872272][ T7124] EXT4-fs error (device loop5): ext4_iget_extra_inode:5075: inode #15: comm syz.5.457: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 342.963181][ T7124] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 343.110770][ T7132] loop3: detected capacity change from 0 to 1024 [ 343.154379][ T7132] EXT4-fs (loop3): inodes count not valid: 2 vs 32 [ 343.434233][ T7141] nbd: device at index 1 is going down [ 343.799026][ T6566] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 343.905688][ T7146] loop3: detected capacity change from 0 to 256 [ 343.947657][ T7146] exfat: Deprecated parameter 'namecase' [ 343.954565][ T7146] exfat: Deprecated parameter 'utf8' [ 344.111157][ T7146] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 344.395509][ T11] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 344.525335][ T1867] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 344.587407][ T11] usb 2-1: Using ep0 maxpacket: 16 [ 344.600122][ T7158] loop3: detected capacity change from 0 to 128 [ 344.620025][ T11] usb 2-1: config 0 interface 0 altsetting 65 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 344.631626][ T11] usb 2-1: config 0 interface 0 altsetting 65 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 344.650328][ T11] usb 2-1: config 0 interface 0 has no altsetting 0 [ 344.659241][ T11] usb 2-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 344.668752][ T11] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.697899][ T11] usb 2-1: config 0 descriptor?? [ 344.748058][ T1867] usb 6-1: Using ep0 maxpacket: 32 [ 344.832327][ T30] audit: type=1800 audit(1762878663.344:17): pid=7158 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.472" name="bus" dev="loop3" ino=1048625 res=0 errno=0 [ 344.914050][ T1867] usb 6-1: device descriptor read/all, error -71 [ 344.931619][ T11] usb 2-1: can't set config #0, error -71 [ 344.973848][ T11] usb 2-1: USB disconnect, device number 9 [ 345.380107][ T7169] loop3: detected capacity change from 0 to 256 [ 345.997675][ T7176] nbd5: detected capacity change from 0 to 63 [ 346.009305][ T7178] block nbd5: NBD_DISCONNECT [ 346.014676][ T7178] block nbd5: Disconnected due to user request. [ 346.021480][ T7178] block nbd5: shutting down sockets [ 346.225755][ T7180] loop3: detected capacity change from 0 to 1024 [ 346.286401][ T7180] EXT4-fs: Ignoring removed nomblk_io_submit option [ 346.341623][ T7180] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 346.352973][ T7180] System zones: 0-1, 3-36 [ 346.400309][ T7180] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 346.511175][ T7180] EXT4-fs error (device loop3): ext4_iget_extra_inode:5075: inode #15: comm syz.3.480: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 346.616006][ T7180] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 346.813564][ T7190] loop0: detected capacity change from 0 to 1024 [ 347.113207][ T5047] hfsplus: b-tree write err: -5, ino 4 [ 347.470327][ T5804] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 348.011999][ T5803] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 348.025768][ T5803] CPU: 1 UID: 0 PID: 5803 Comm: kworker/u9:4 Not tainted syzkaller #0 PREEMPT(none) [ 348.026017][ T5803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 348.026165][ T5803] Workqueue: hci3 hci_rx_work [ 348.026353][ T5803] Call Trace: [ 348.026417][ T5803] [ 348.026474][ T5803] __dump_stack+0x26/0x30 [ 348.026674][ T5803] dump_stack_lvl+0x1df/0x270 [ 348.026873][ T5803] dump_stack+0x1e/0x25 [ 348.027038][ T5803] sysfs_create_dir_ns+0x46c/0x540 [ 348.027251][ T5803] kobject_add_internal+0xeed/0x1840 [ 348.027447][ T5803] kobject_add+0x2c1/0x410 [ 348.027626][ T5803] ? kmsan_get_metadata+0xfb/0x160 [ 348.027829][ T5803] device_add+0xa70/0x1c10 [ 348.028050][ T5803] hci_conn_add_sysfs+0x15f/0x2f0 [ 348.028273][ T5803] le_conn_complete_evt+0x1cbe/0x2320 [ 348.028502][ T5803] hci_le_conn_complete_evt+0x157/0x260 [ 348.028727][ T5803] hci_le_meta_evt+0x6eb/0x960 [ 348.028892][ T5803] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 348.029095][ T5803] hci_event_packet+0xce2/0x1e40 [ 348.029244][ T5803] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 348.029462][ T5803] hci_rx_work+0x9a8/0x12b0 [ 348.029647][ T5803] ? __pfx_hci_rx_work+0x10/0x10 [ 348.029811][ T5803] process_scheduled_works+0xb91/0x1d80 [ 348.030074][ T5803] worker_thread+0xedf/0x1590 [ 348.030303][ T5803] kthread+0xd5c/0xf00 [ 348.030426][ T5803] ? __pfx_worker_thread+0x10/0x10 [ 348.030640][ T5803] ? __pfx_kthread+0x10/0x10 [ 348.030768][ T5803] ret_from_fork+0x1f5/0x4c0 [ 348.030944][ T5803] ? __pfx_kthread+0x10/0x10 [ 348.031069][ T5803] ret_from_fork_asm+0x1a/0x30 [ 348.031272][ T5803] [ 348.032751][ T5803] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 348.195388][ T7206] input: syz0 as /devices/virtual/input/input14 [ 348.195907][ T5803] Bluetooth: hci3: failed to register connection device [ 349.056192][ T5858] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 349.196050][ T11] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 349.227511][ T1867] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 349.262982][ T5858] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 349.272617][ T5858] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.307933][ T5858] usb 4-1: config 0 descriptor?? [ 349.329196][ T5858] cp210x 4-1:0.0: cp210x converter detected [ 349.395738][ T11] usb 3-1: Using ep0 maxpacket: 32 [ 349.418522][ T11] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 349.430130][ T11] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 349.440356][ T11] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 349.453748][ T1867] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 349.454009][ T1867] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 349.478365][ T11] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.483624][ T1867] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 349.496967][ T1867] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 349.505445][ T1867] usb 6-1: Manufacturer: syz [ 349.505726][ T11] usb 3-1: config 0 descriptor?? [ 349.529102][ T1867] usb 6-1: config 0 descriptor?? [ 349.811731][ T5858] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 350.002064][ T11] savu 0003:1E7D:2D5A.000E: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 350.057448][ T5858] usb 4-1: cp210x converter now attached to ttyUSB0 [ 350.237454][ T11] usb 4-1: USB disconnect, device number 8 [ 350.261829][ T11] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 350.313897][ T11] cp210x 4-1:0.0: device disconnected [ 350.324092][ T5858] usb 3-1: USB disconnect, device number 6 [ 350.351299][ T7233] loop1: detected capacity change from 0 to 256 [ 350.362905][ T7233] exfat: Unknown parameter '017777777777777777777770x0000000000000000' [ 350.424433][ T1867] uclogic 0003:256C:006D.000F: failed retrieving string descriptor #200: -71 [ 350.435675][ T1867] uclogic 0003:256C:006D.000F: failed retrieving pen parameters: -71 [ 350.446003][ T1867] uclogic 0003:256C:006D.000F: failed probing pen v2 parameters: -71 [ 350.454477][ T1867] uclogic 0003:256C:006D.000F: failed probing parameters: -71 [ 350.464691][ T1867] uclogic 0003:256C:006D.000F: probe with driver uclogic failed with error -71 [ 350.570240][ T1867] usb 6-1: USB disconnect, device number 5 [ 350.698448][ T7231] loop0: detected capacity change from 0 to 8192 [ 350.731935][ T30] audit: type=1800 audit(1762878669.254:18): pid=7231 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.501" name="file1" dev="loop0" ino=1048626 res=0 errno=0 [ 353.205786][ T11] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 353.401947][ T11] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 353.414220][ T11] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 353.506707][ T11] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 353.516425][ T11] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 353.524662][ T11] usb 4-1: Manufacturer: syz [ 353.565758][ T11] usb 4-1: config 0 descriptor?? [ 354.148699][ T7287] loop8: detected capacity change from 0 to 8 [ 354.199755][ T7287] Dev loop8: unable to read RDB block 8 [ 354.206476][ T7287] loop8: unable to read partition table [ 354.228724][ T7287] loop8: partition table beyond EOD, truncated [ 354.238869][ T7287] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 354.336150][ T5803] Bluetooth: hci3: command 0x0406 tx timeout [ 354.458916][ T11] uclogic 0003:256C:006D.0010: failed retrieving string descriptor #200: -71 [ 354.476643][ T11] uclogic 0003:256C:006D.0010: failed retrieving pen parameters: -71 [ 354.488456][ T11] uclogic 0003:256C:006D.0010: failed probing pen v2 parameters: -71 [ 354.497069][ T11] uclogic 0003:256C:006D.0010: failed probing parameters: -71 [ 354.505318][ T11] uclogic 0003:256C:006D.0010: probe with driver uclogic failed with error -71 [ 354.616745][ T11] usb 4-1: USB disconnect, device number 9 [ 355.522776][ T5803] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 355.533702][ T5803] CPU: 0 UID: 0 PID: 5803 Comm: kworker/u9:4 Not tainted syzkaller #0 PREEMPT(none) [ 355.533864][ T5803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 355.533991][ T5803] Workqueue: hci2 hci_rx_work [ 355.534170][ T5803] Call Trace: [ 355.534313][ T5803] [ 355.534368][ T5803] __dump_stack+0x26/0x30 [ 355.534545][ T5803] dump_stack_lvl+0x1df/0x270 [ 355.534728][ T5803] dump_stack+0x1e/0x25 [ 355.534898][ T5803] sysfs_create_dir_ns+0x46c/0x540 [ 355.535109][ T5803] kobject_add_internal+0xeed/0x1840 [ 355.535303][ T5803] kobject_add+0x2c1/0x410 [ 355.535479][ T5803] ? kmsan_get_metadata+0xfb/0x160 [ 355.535664][ T5803] device_add+0xa70/0x1c10 [ 355.535887][ T5803] hci_conn_add_sysfs+0x15f/0x2f0 [ 355.536117][ T5803] le_conn_complete_evt+0x1cbe/0x2320 [ 355.536355][ T5803] hci_le_conn_complete_evt+0x157/0x260 [ 355.536558][ T5803] hci_le_meta_evt+0x6eb/0x960 [ 355.536728][ T5803] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 355.536953][ T5803] hci_event_packet+0xce2/0x1e40 [ 355.537105][ T5803] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 355.537323][ T5803] hci_rx_work+0x9a8/0x12b0 [ 355.537503][ T5803] ? __pfx_hci_rx_work+0x10/0x10 [ 355.537661][ T5803] process_scheduled_works+0xb91/0x1d80 [ 355.537936][ T5803] worker_thread+0xedf/0x1590 [ 355.538170][ T5803] kthread+0xd5c/0xf00 [ 355.538311][ T5803] ? __pfx_worker_thread+0x10/0x10 [ 355.538531][ T5803] ? __pfx_kthread+0x10/0x10 [ 355.538667][ T5803] ret_from_fork+0x1f5/0x4c0 [ 355.538873][ T5803] ? __pfx_kthread+0x10/0x10 [ 355.539086][ T5803] ret_from_fork_asm+0x1a/0x30 [ 355.539317][ T5803] [ 355.703444][ T5803] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 355.728331][ T5803] Bluetooth: hci2: failed to register connection device [ 356.420838][ T7317] loop1: detected capacity change from 0 to 164 [ 356.448740][ T7318] netlink: 'syz.3.535': attribute type 10 has an invalid length. [ 356.479905][ T7318] syz_tun: entered promiscuous mode [ 356.512604][ T7318] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 356.856123][ C0] ===================================================== [ 356.863660][ C0] BUG: KMSAN: uninit-value in bpf_prog_run_generic_xdp+0x1465/0x2000 [ 356.872107][ C0] bpf_prog_run_generic_xdp+0x1465/0x2000 [ 356.878174][ C0] do_xdp_generic+0xd52/0x1690 [ 356.883171][ C0] __netif_receive_skb_core+0x2bc2/0x7150 [ 356.889249][ C0] __netif_receive_skb+0xcc/0xac0 [ 356.894515][ C0] process_backlog+0x485/0xa00 [ 356.899571][ C0] __napi_poll+0xdd/0x8a0 [ 356.904141][ C0] net_rx_action+0xbc8/0x1c30 [ 356.909149][ C0] handle_softirqs+0x169/0x6e0 [ 356.914154][ C0] __do_softirq+0x14/0x1b [ 356.918824][ C0] do_softirq+0x99/0x100 [ 356.923331][ C0] __local_bh_enable_ip+0xa1/0xb0 [ 356.928891][ C0] tun_rx_batched+0x889/0x980 [ 356.933784][ C0] tun_get_user+0x5d62/0x6d70 [ 356.938808][ C0] tun_chr_write_iter+0x3e9/0x5c0 [ 356.944045][ C0] vfs_write+0xbe2/0x15d0 [ 356.948661][ C0] __ia32_sys_write+0x1f9/0x4d0 [ 356.953709][ C0] ia32_sys_call+0x35bc/0x4310 [ 356.958843][ C0] __do_fast_syscall_32+0xb0/0x150 [ 356.964192][ C0] do_fast_syscall_32+0x38/0x80 [ 356.969392][ C0] do_SYSENTER_32+0x1f/0x30 [ 356.974129][ C0] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 356.980809][ C0] [ 356.983257][ C0] Uninit was created at: [ 356.987914][ C0] __kmalloc_node_track_caller_noprof+0xb4b/0x1ba0 [ 356.994757][ C0] kmalloc_reserve+0x22f/0x4b0 [ 356.999870][ C0] pskb_expand_head+0x1fc/0x1610 [ 357.005155][ C0] do_xdp_generic+0xa79/0x1690 [ 357.010178][ C0] __netif_receive_skb_core+0x2bc2/0x7150 [ 357.016266][ C0] __netif_receive_skb+0xcc/0xac0 [ 357.021541][ C0] process_backlog+0x485/0xa00 [ 357.026588][ C0] __napi_poll+0xdd/0x8a0 [ 357.031140][ C0] net_rx_action+0xbc8/0x1c30 [ 357.036455][ C0] handle_softirqs+0x169/0x6e0 [ 357.041479][ C0] __do_softirq+0x14/0x1b [ 357.046137][ C0] [ 357.048576][ C0] CPU: 0 UID: 0 PID: 7321 Comm: syz.0.538 Not tainted syzkaller #0 PREEMPT(none) [ 357.058095][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 357.068404][ C0] ===================================================== [ 357.075561][ C0] Disabling lock debugging due to kernel taint [ 357.081865][ C0] Kernel panic - not syncing: kmsan.panic set ... [ 357.088438][ C0] CPU: 0 UID: 0 PID: 7321 Comm: syz.0.538 Tainted: G B syzkaller #0 PREEMPT(none) [ 357.099387][ C0] Tainted: [B]=BAD_PAGE [ 357.103630][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 357.113803][ C0] Call Trace: [ 357.117170][ C0] [ 357.120099][ C0] __dump_stack+0x26/0x30 [ 357.124602][ C0] dump_stack_lvl+0x53/0x270 [ 357.129377][ C0] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 357.135391][ C0] dump_stack+0x1e/0x25 [ 357.139736][ C0] vpanic+0x435/0xd30 [ 357.143921][ C0] panic+0x15d/0x160 [ 357.148035][ C0] kmsan_report+0x31c/0x320 [ 357.152728][ C0] ? __msan_warning+0x1b/0x30 [ 357.157543][ C0] ? bpf_prog_run_generic_xdp+0x1465/0x2000 [ 357.163731][ C0] ? do_xdp_generic+0xd52/0x1690 [ 357.168859][ C0] ? __netif_receive_skb_core+0x2bc2/0x7150 [ 357.174977][ C0] ? __netif_receive_skb+0xcc/0xac0 [ 357.180627][ C0] ? process_backlog+0x485/0xa00 [ 357.185720][ C0] ? __napi_poll+0xdd/0x8a0 [ 357.190507][ C0] ? net_rx_action+0xbc8/0x1c30 [ 357.195507][ C0] ? handle_softirqs+0x169/0x6e0 [ 357.200660][ C0] ? __do_softirq+0x14/0x1b [ 357.205343][ C0] ? do_softirq+0x99/0x100 [ 357.209957][ C0] ? __local_bh_enable_ip+0xa1/0xb0 [ 357.215438][ C0] ? tun_rx_batched+0x889/0x980 [ 357.220462][ C0] ? tun_get_user+0x5d62/0x6d70 [ 357.225479][ C0] ? tun_chr_write_iter+0x3e9/0x5c0 [ 357.230849][ C0] ? vfs_write+0xbe2/0x15d0 [ 357.235496][ C0] ? __ia32_sys_write+0x1f9/0x4d0 [ 357.240724][ C0] ? ia32_sys_call+0x35bc/0x4310 [ 357.245877][ C0] ? __do_fast_syscall_32+0xb0/0x150 [ 357.251466][ C0] ? do_fast_syscall_32+0x38/0x80 [ 357.256697][ C0] ? do_SYSENTER_32+0x1f/0x30 [ 357.261596][ C0] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 357.268310][ C0] ? kmsan_get_metadata+0xfb/0x160 [ 357.273588][ C0] ? kmsan_get_metadata+0xfb/0x160 [ 357.278883][ C0] ? __bpf_prog_run32+0xc2/0xf0 [ 357.283902][ C0] ? kmem_cache_free+0x53a/0x1490 [ 357.289113][ C0] ? skb_free_head+0x13c/0x3a0 [ 357.294091][ C0] ? kmsan_get_metadata+0xfb/0x160 [ 357.299378][ C0] __msan_warning+0x1b/0x30 [ 357.304196][ C0] bpf_prog_run_generic_xdp+0x1465/0x2000 [ 357.310183][ C0] do_xdp_generic+0xd52/0x1690 [ 357.315143][ C0] ? qdisc_run_end+0xa1/0x120 [ 357.320013][ C0] ? filter_irq_stacks+0x49/0x190 [ 357.325301][ C0] __netif_receive_skb_core+0x2bc2/0x7150 [ 357.331222][ C0] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 357.337209][ C0] ? kmsan_get_metadata+0xfb/0x160 [ 357.342507][ C0] ? process_backlog+0x485/0xa00 [ 357.347602][ C0] ? process_backlog+0x485/0xa00 [ 357.352744][ C0] ? filter_irq_stacks+0x12c/0x190 [ 357.358096][ C0] ? kmsan_get_metadata+0xfb/0x160 [ 357.363445][ C0] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 357.369446][ C0] __netif_receive_skb+0xcc/0xac0 [ 357.374691][ C0] ? kmsan_get_metadata+0xfb/0x160 [ 357.379994][ C0] process_backlog+0x485/0xa00 [ 357.384942][ C0] ? __pfx_process_backlog+0x10/0x10 [ 357.390393][ C0] __napi_poll+0xdd/0x8a0 [ 357.394923][ C0] ? kmsan_get_metadata+0xfb/0x160 [ 357.400215][ C0] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 357.406205][ C0] net_rx_action+0xbc8/0x1c30 [ 357.411041][ C0] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 357.417028][ C0] ? __run_timer_base+0x109/0xd90 [ 357.422322][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 357.427648][ C0] handle_softirqs+0x169/0x6e0 [ 357.432667][ C0] __do_softirq+0x14/0x1b [ 357.437185][ C0] do_softirq+0x99/0x100 [ 357.441648][ C0] [ 357.444675][ C0] [ 357.447729][ C0] __local_bh_enable_ip+0xa1/0xb0 [ 357.452962][ C0] ? tun_rx_batched+0x16c/0x980 [ 357.457995][ C0] tun_rx_batched+0x889/0x980 [ 357.462866][ C0] ? kmsan_get_metadata+0xfb/0x160 [ 357.468163][ C0] tun_get_user+0x5d62/0x6d70 [ 357.473027][ C0] ? stack_depot_save_flags+0x35/0x7b0 [ 357.478650][ C0] ? kmsan_get_metadata+0xfb/0x160 [ 357.483926][ C0] ? kmsan_get_metadata+0xfb/0x160 [ 357.489377][ C0] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 357.495935][ C0] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 357.502291][ C0] tun_chr_write_iter+0x3e9/0x5c0 [ 357.507529][ C0] vfs_write+0xbe2/0x15d0 [ 357.512044][ C0] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 357.517785][ C0] __ia32_sys_write+0x1f9/0x4d0 [ 357.522826][ C0] ia32_sys_call+0x35bc/0x4310 [ 357.527797][ C0] __do_fast_syscall_32+0xb0/0x150 [ 357.533136][ C0] do_fast_syscall_32+0x38/0x80 [ 357.538181][ C0] do_SYSENTER_32+0x1f/0x30 [ 357.542896][ C0] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 357.549431][ C0] RIP: 0023:0xf7fd6539 [ 357.553889][ C0] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 357.573722][ C0] RSP: 002b:00000000f54c655c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 357.582352][ C0] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040 [ 357.590466][ C0] RDX: 000000000000fdef RSI: 0000000000000000 RDI: 0000000000000000 [ 357.598561][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 357.606653][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 357.614744][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 357.622868][ C0] [ 357.626376][ C0] Kernel Offset: disabled [ 357.630807][ C0] Rebooting in 86400 seconds..