last executing test programs: 3m10.34026931s ago: executing program 4 (id=458): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x8}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x5, &(0x7f00000002c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}]) 2m56.399732366s ago: executing program 1 (id=501): syz_mount_image$iso9660(&(0x7f0000000340), &(0x7f0000000d40)='./file0\x00', 0x3200010, &(0x7f0000000080)=ANY=[], 0x1, 0x7e6, &(0x7f0000000d80)="$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") r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000180)='ro\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 2m55.413177892s ago: executing program 1 (id=504): syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000001540)='./file1\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c00a3a2a4e7417e941910c27d130b55ac2d5f7a61e59ec6d5de07239091924c32eeb367d16409d6d3ec1fb755f9a7989ebc4e96918e268f0b7acebf67c07bc4731250f87d27b5e9e61000e70f0c6a4e2432073d0d3e18f864e9ef64637d14e5485f36e53c821cb5898685c055a367ea51b653eff6581710f6c3824bc667bd24219163c60803099f985567be0d978e301b4f6603628606afadb04eee58f42f1853f2e8598a5e250e0f4c9a"], 0x1, 0x14fe, &(0x7f0000002ac0)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) unlinkat(r0, &(0x7f0000002780)='./file1\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fstatfs(r1, 0x0) 2m53.960780354s ago: executing program 1 (id=507): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000000c0)={@cgroup=r2, r0, 0x12, 0x4, 0x0, @void, @value}, 0x10) 2m52.779551323s ago: executing program 1 (id=510): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f000003f4c0)={[{@allow_utime={'allow_utime', 0x3d, 0xc6}}, {@namecase}, {@errors_remount}, {@umask={'umask', 0x3d, 0x10}}, {@fmask={'fmask', 0x3d, 0x5}}, {@iocharset={'iocharset', 0x3d, 'iso8859-14'}}, {@gid}, {@umask={'umask', 0x3d, 0x1ff}}, {@errors_continue}, {}, {@allow_utime={'allow_utime', 0x3d, 0x400000}}]}, 0x1, 0x152a, &(0x7f0000000340)="$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") mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000940)=""/28, 0x1c) getdents(r0, 0x0, 0x5e) 2m51.355956572s ago: executing program 1 (id=514): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000006dcc"], &(0x7f00000001c0)=""/201, 0x8a, 0xc9, 0x1, 0x0, 0x0, @void, @value}, 0x28) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='c 1223'], 0xa) 2m50.60557907s ago: executing program 1 (id=517): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_CAP_MAX_VCPU_ID(r1, 0x4068aea3, &(0x7f00000000c0)={0x80, 0x0, 0xf}) 2m49.624107944s ago: executing program 32 (id=517): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_CAP_MAX_VCPU_ID(r1, 0x4068aea3, &(0x7f00000000c0)={0x80, 0x0, 0xf}) 2m40.638704269s ago: executing program 4 (id=458): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x8}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x5, &(0x7f00000002c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}]) 2m8.988850209s ago: executing program 4 (id=458): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x8}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x5, &(0x7f00000002c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}]) 2m2.187696452s ago: executing program 5 (id=623): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, '\x00', "5171bb672965593497418688ac68cb126474cd3660dab9e2086e246728d7a040", "05e2e505", "12000700"}, 0x38) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e22, 0x78, @local, 0x4}}, 0x0, 0x0, 0x27, 0x0, "cd291ce38470ce05d053a78224b287aaccd91666a9f05d268050bb096510010672071039daf0a878ba051ebf7cb196aca79a83bf7e449ed775a6c1356bc4bc7d809441a880b27a08e42df0f735437507"}, 0xd8) connect$inet6(r0, &(0x7f00000007c0)={0xa, 0x800, 0x0, @loopback}, 0x1c) 2m0.163883567s ago: executing program 5 (id=626): sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000001000/0x4000)=nil) brk(0x80000000007) 1m53.038833336s ago: executing program 5 (id=645): r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) setsockopt$packet_int(r1, 0x107, 0x7, &(0x7f0000000180)=0x8, 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020039000b05d25a806f8c6394f90424fc602f00000008000800053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 1m52.332555157s ago: executing program 5 (id=648): syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x1010d1, 0x0) mount$bind(&(0x7f0000000a00)='./file0/file0\x00', &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x2081c80, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) move_mount(r0, &(0x7f0000008080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x160) 1m51.68812251s ago: executing program 5 (id=651): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000000)=0x10000, 0x4) bind$inet(r0, &(0x7f0000000800)={0x2, 0x4e23, @empty}, 0x10) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 1m50.411728204s ago: executing program 5 (id=658): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000180)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x14) r1 = dup(r0) connect$802154_dgram(r1, &(0x7f0000000080)={0x24, @short}, 0x14) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r1) 1m49.091091336s ago: executing program 33 (id=658): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000180)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x14) r1 = dup(r0) connect$802154_dgram(r1, &(0x7f0000000080)={0x24, @short}, 0x14) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r1) 1m25.255376701s ago: executing program 4 (id=458): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x8}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x5, &(0x7f00000002c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}]) 54.982711075s ago: executing program 4 (id=458): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x8}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x5, &(0x7f00000002c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}]) 21.89737017s ago: executing program 4 (id=458): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x8}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x5, &(0x7f00000002c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}]) 12.541327698s ago: executing program 2 (id=892): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r2}, 0x10) llistxattr(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 11.642052387s ago: executing program 2 (id=896): socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000180)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRES64, @ANYRES16=0x0], 0x1, 0x36e, &(0x7f0000000c00)="$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") r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) io_setup(0x7, &(0x7f00000000c0)=0x0) io_submit(r2, 0x2, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)="96", 0x1}, 0x0]) creat(&(0x7f00000000c0)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, 0x0, 0x0, 0x201000, 0x0) open(&(0x7f0000000a40)='./bus\x00', 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) iopl(0x3) mkdir(&(0x7f00000020c0)='./file0\x00', 0x46) chdir(&(0x7f0000000140)='./file0\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r3, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x4010}, 0x18) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r4 = dup(0xffffffffffffffff) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af25, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) process_madvise(r4, 0x0, 0x0, 0x11, 0xf0ff7f) 10.068429306s ago: executing program 2 (id=902): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x7) syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000005600)='./bus\x00', 0x8000, &(0x7f0000000100), 0x1, 0x559d, &(0x7f0000005680)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x100, 0x0) r1 = fanotify_init(0x202, 0x0) fanotify_mark(r1, 0x1, 0x4800003e, r0, 0x0) dup2(r1, r0) 6.998892861s ago: executing program 6 (id=908): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000400)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000400)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000c40)={{0x0, 0x2, 0x10, 0x3, 0x6}}) 6.162282873s ago: executing program 0 (id=909): r0 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x200, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xa, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x8004}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='/'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 6.073152351s ago: executing program 6 (id=910): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x7fa962bfffff, 0x12, r2, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) 5.934447722s ago: executing program 0 (id=911): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000001640), 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x11a, 0x3, &(0x7f00000000c0), 0x4) 5.931114677s ago: executing program 3 (id=912): socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000180)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRES64, @ANYRES16=0x0], 0x1, 0x36e, &(0x7f0000000c00)="$eJzs3c9rI2UYwPEnaZpMumyTgygK0ge96GVoq2c1yC6IAZfuRtwVhNntREPGpMyESERsPXkVb/4DgsseFzwsqP9AL97WixdP9iIIuog4Mr/SJJ00aTZL0/b7gTZP8r7PzPvmF88byJuD9776uFn3zLrVkayhkhEReSRSlqwkMtFFXlLsycuX/nz4/PWbt96uVKtXtlSvVm68sqmqq2s/fPJZMe72oCD75Q8OxPht/+n9Zw/+u/FRw9OGp612Ry293f61Y912bN1ueE1T9ZpjW56tjZZnu1F7O2qvO+2dnZ5are3LKzuu7XlqtXratHvaaWvH7an1odVoqWmaenklbbjnmDFDTu3u1pZVmfGEd2bMw7z94/v+Mc2uW7GWRMzikZba3Sc6LgAAsJBG6v9vkhqhLNl+QZmJ1wL5MB5eBgT1fxKH9X+wWDis/++98FPn0rv3V+P6/0E+rf5/9Zcof6j+D84+9/r/u5HrRyuiM2/3JJ0fq/7HYlgbfkX+frhijwX1f/Bq6K/ov3j/3noYUP8DAAAAAAAAAAAAAAAAAAAAAHAWPPL9ku/7peQy+Tv8CkF8Pbl23BeNceaMe/wL8Y4C/ecDzqXrN2+JEX5xL7cq4nzZrXVr0WXcnnRcl5L8Gz4fYtGGE3thowbK8qOz260txwlL4f+KiIojtmxIScpD+WF89a3qlQ2NRPnh+Xe7tUxuJcivSyPM35SSPJWev5man5eXXhzIN6UkP9+RtjiyHb+PJfmfb6i++U51JL8Y9kvz+pN9SAAAAAAAmDtT1YiXz+Xh9W+0fjdN1bT2YC0vg+vzo58P9NfX66nr81zpudzpzh0AAAAAgIvCy3/atBzHdr3e2KAok/oU4qONNOVkwpGDIDdFn6HgYRgsH9dnaWCG0x45H/+CxrTDcL2eTD3mJPirIKl3ZrKF61CTkX6vThkk85+is3HSh8D1siefu+16a8F4dKbpDATJx0bj+si1WY88Lkh2zp3U+Zmvv/17tlNk4l17B5teu29MmGkYZEZu2ZvwpP3D9yeOZzn93eL7WX5kBgAAAMCCSIr+opfc8sbpDggAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAtortukjQlOe44AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAovg/AAD//5h69bA=") r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) io_setup(0x7, &(0x7f00000000c0)=0x0) io_submit(r2, 0x2, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)="96", 0x1}, 0x0]) creat(&(0x7f00000000c0)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, 0x0, 0x0, 0x201000, 0x0) open(&(0x7f0000000a40)='./bus\x00', 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) iopl(0x3) mkdir(&(0x7f00000020c0)='./file0\x00', 0x46) chdir(&(0x7f0000000140)='./file0\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r3, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x4010}, 0x18) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r4 = dup(0xffffffffffffffff) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af25, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) process_madvise(r4, 0x0, 0x0, 0x11, 0xf0ff7f) 5.577818071s ago: executing program 2 (id=913): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001440)={{0x12, 0x1, 0x0, 0xab, 0xd1, 0xa0, 0x40, 0x77b, 0x2226, 0xca8b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3a, 0x92, 0xf8}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000140)={0x20, 0xe, 0x6, "e2222105244e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.380551137s ago: executing program 0 (id=914): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x5000, 0x2000, &(0x7f0000fe5000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000000034d564b0000000001"]) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x10, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.554588316s ago: executing program 6 (id=915): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=@newtfilter={0x3c, 0x2c, 0xd27, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {}, {0x1c}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0x2d}]}}]}, 0x3c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4.285613764s ago: executing program 3 (id=916): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r2}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=ANY=[@ANYBLOB="0600000004000000be7000005c00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000200"], 0x48) 4.034060328s ago: executing program 0 (id=917): socket(0x2b, 0x80801, 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x200000a, 0x5d031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) 3.771556103s ago: executing program 6 (id=918): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x2000010, &(0x7f0000000100)=ANY=[], 0x1, 0x6a6, &(0x7f00000007c0)="$eJzs3c9vHGf9B/D3rNeON98qX6dNaISKsBKpIEUkTqwUwgWDEMqhQlU5cLYSp7GycSrHRW6FwAUEJyQO/QMKkm+ckLgHhXO59epjJSQuEYeol0UzO2uvvevYjn8GXq9o/DyzzzPPfPYzz8x411ltgP9Zty6n+ThFbl1+e7lcX1udbq+tTp+qm9tJynojaXaLFAtJ8SSZKduLviV95YBP5m+++/nTtS+6a816qfqPPG+7IYb0XamXTNbjTQ7dcnS3u1ipw8srSW7X5WZjux1rU8cyaZfqEo5dZ8DKXjbfy3kLnDC9u1PRvW8OmEhOJxmvfw9IfXVoHF2Eh2NPVzkAAAB4SX328LgjAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgJdP/f3/Rb006jKTKXrf/z/We6yun0Azu+75+FDjAAAAAAAAAICj8fVneZblnOmtd4rqb/4Xq5Vz+bKT/F8+yKPMZTFXspzZLGUpi7mWZKJvoLHl2aWlxWvrW5aGb3l96JbXj+oZAwAAAAAAAMB/pV+ltfH3fwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOAmKZKRbVMu5usxEGs1stGUl+UeSseOOdw+KYQ8+Pvo4AAAAYF/GX2Cb/3+WZ1nOmd56p6he83+ler08ng+ykKXMZyntzOVO/Rq6fNXfWFudbq+tTj8ol8Fxv/+vPYVRjVi/vzB8zxeqHq3czXz1yJXcroK5k0a1ZS4lF3rxDI/r4zKm4nu1XUbWrNNa7uwP272LcCD2+lbERBlcsp6RqTq2Mhtnuxkoqjdqkq2Z2PHoNLfuKY2Mru/pWhrr7/ycO4Scn67L8vn89lBzvlfrmWikysT13uwrz5nnZyL5xl///NN77YX79+4+unxyntIORrZ5fOucmO7LxOsvdSaae+w/VWXi/Pr6rfwoP8nlTOadLGY+P8tsljKXTt0+W8/n8ufE8zM1s2ntnZ0iGauPS/eY7Samyfywqs3mYrXtmcynyMPcyVzeqv5dz7V8OzdyIzf7jvD5beOunlt11je2nvW9I/23ocFf+mZdaSX5XV0O5GCL7WbnQele+8u8nu3La3fWP13vdbbvPJjqy9KrveyMDh38Ra6Nza/WlXIfv67Lk2GizkR5AvXuEr3oXutmolndiwbn+R875XZpL9xfvDf7/jbjr2xZf7Muy2m1+rXdRjn8UByscr68mvH6SrJ5dpRtr61fZc5uuquO1X9x6bY1BtrOV21F0TtTf5yH1QQYPFPH6t/hBke6XrW9PrRtumq70Ne26fetPEw7d44gfwDs00ROj7X+2fqs9WnrN617rbfHf3DqO6feGMvo30e/25waebPxRvGXfJpfbLz+BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXtyjDz+6P9tuzy0OrzS2b9qhstPIWypF/YU+L7SvE1gZT7Lpkep7jo48jNbWMAYqnV8mR56f3pcIDu/z+7LSzG4GnNmpz8fHPhNOemUkwyfAMV+YgEN3denB+1cfffjRt+YfzL43997cwuiNGzenbt54a/rq3fn23FT353FHCRyGjZv+cUcCAAAAAAAAAAAA7NawDwZcfGWnD43s6jMe/mchAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcCBuXU7zcYpcm7oyVa6vrU63y6VX3+jZTNJoJMXPk+JJMpPukom+4Yr86Uk6Q/bzyfzNdz9/uvbFxljNbv+kUZf7sFIvmUwyUpcHNd7tfY9X/Lv3DMuEfdnpdGb2Fx8cjP8EAAD//97S9ts=") creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpu.stat\x00', 0x26e1, 0x0) write$binfmt_script(r1, &(0x7f0000000140), 0x9) 2.525309093s ago: executing program 0 (id=919): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0) fallocate(r1, 0x10, 0x7, 0x2) fallocate(r0, 0x0, 0x0, 0x10fff9) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0xc, r1}) 2.490602517s ago: executing program 3 (id=920): r0 = socket$inet(0x2, 0x3, 0x7) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(r0, 0x0) r1 = syz_io_uring_setup(0x4169, &(0x7f0000000200)={0x0, 0x0, 0x10100, 0x0, 0x200000}, &(0x7f0000000480), &(0x7f0000000000)=0x0) syz_io_uring_setup(0xa94, &(0x7f0000000280)={0x0, 0x95b0, 0x400}, &(0x7f0000000340)=0x0, &(0x7f00000005c0)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r1, 0x48e9, 0x0, 0x0, 0x0, 0x0) 2.173378511s ago: executing program 2 (id=921): socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) write$tun(r0, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x147cc1, 0x0) 1.66977978s ago: executing program 6 (id=922): r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000100)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r1, 0x80045017, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) write$snddsp(r2, &(0x7f0000000200)="a38d", 0x2) ioctl$SNDCTL_DSP_GETOPTR(r1, 0x800c5012, &(0x7f0000000000)) 1.375953444s ago: executing program 3 (id=923): epoll_create1(0x0) epoll_create1(0x80000) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) openat$vsock(0xffffffffffffff9c, &(0x7f0000005980), 0x200, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000059c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b7040000000000008500000033000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000240), &(0x7f00000003c0)=r5}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r1, 0x25, 0x2, @val=@tcx={@void, @value}}, 0x40) syz_emit_ethernet(0x36, &(0x7f0000001a80)={@random="591a1d9a2bdb", @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x3, 0x4, 0x28, 0x65, 0x0, 0x8, 0x6, 0x0, @multicast1, @local}, {{0x4e23, 0x4e23, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x80, 0x3}}}}}}, 0x0) 1.265357559s ago: executing program 0 (id=924): r0 = syz_clone(0x20300000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000180)='oom_score\x00') syz_usb_disconnect(0xffffffffffffffff) syz_fuse_handle_req(r2, &(0x7f0000006cc0)="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", 0x2000, &(0x7f0000009680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.154361646s ago: executing program 6 (id=925): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) write$dsp(r0, &(0x7f0000000000)="81", 0x1) close(r0) r1 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040)) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x100000000080, 0x9, 0x0, 0x2a, 0x401, 0x3}) 1.05337752s ago: executing program 2 (id=926): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x0) readlink(0x0, 0x0, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/partitions\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000023896) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000140)={0x8000, 0x8, 0x973, 0x8, 0x6, "79b9ab45b76576f8beea3fc7d72528bbbf4756"}) 574.362895ms ago: executing program 3 (id=927): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_opts(r1, 0x29, 0x4d, &(0x7f0000000140)=ANY=[@ANYRESDEC], 0x8) recvmsg(r1, &(0x7f00000000c0)={0x0, 0x58, 0x0, 0x0, &(0x7f0000000180)=""/19, 0x13}, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) sendto$inet6(r0, &(0x7f0000000300), 0x5aa, 0x0, 0x0, 0xfffffffffffffdfd) 0s ago: executing program 3 (id=928): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2008002, &(0x7f0000001e80)={[{@inlinecrypt}]}, 0x1, 0x549, &(0x7f0000001800)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2029c1b, 0x0, 0x1, 0x0, &(0x7f0000000080)) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc4242, 0x1d8) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x100) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) kernel console output (not intermixed with test programs): ounting filesystem 00000000-0000-0000-0000-000000000000. [ 359.767048][ T7142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 359.778174][ T7142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.789533][ T7142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 359.800560][ T7142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.815992][ T7142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 359.828318][ T7142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.838622][ T7142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 359.851690][ T7142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.863793][ T7142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 359.875060][ T7142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.890194][ T7142] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 360.002933][ T7142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 360.019979][ T7142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.032733][ T7142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 360.043747][ T7142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.053954][ T7142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 360.064762][ T7142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.074919][ T7142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 360.085687][ T7142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.095900][ T7142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 360.107290][ T7142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.128265][ T7142] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 360.484906][ T7142] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.495168][ T7142] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.504525][ T7142] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.513695][ T7142] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.688751][ T7275] loop3: detected capacity change from 0 to 512 [ 361.436633][ T7264] loop0: detected capacity change from 0 to 32768 [ 361.638740][ T7275] EXT4-fs error (device loop3): ext4_orphan_get:1389: inode #15: comm syz.3.509: casefold flag without casefold feature [ 361.677588][ T7281] loop1: detected capacity change from 0 to 256 [ 361.686938][ T7281] exfat: Deprecated parameter 'namecase' [ 361.714391][ T7275] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.509: couldn't read orphan inode 15 (err -117) [ 361.808842][ T7275] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 361.882348][ T7281] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36bd6320, utbl_chksum : 0xe619d30d) [ 362.249130][ T7290] loop2: detected capacity change from 0 to 128 [ 362.299130][ T7290] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 362.317335][ T7290] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 362.400304][ T5804] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 362.969542][ T3842] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.777866][ T3842] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.278087][ T3842] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.399650][ T10] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 364.558960][ T5807] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 364.593642][ T10] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 364.605680][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 364.619516][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 364.630397][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 364.643814][ T10] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 364.653288][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.668860][ T10] usb 4-1: config 0 descriptor?? [ 364.676519][ T5807] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 364.697943][ T5807] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 364.712877][ T7305] input: syz0 as /devices/virtual/input/input14 [ 364.714981][ T5807] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 364.880962][ T5807] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 364.920185][ T3842] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.934329][ T5807] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 365.136453][ T10] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 365.152355][ T10] plantronics 0003:047F:FFFF.000E: No inputs registered, leaving [ 365.169072][ T10] plantronics 0003:047F:FFFF.000E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 365.467146][ T5883] usb 4-1: USB disconnect, device number 12 [ 365.885686][ T3842] bridge_slave_1: left allmulticast mode [ 365.893478][ T3842] bridge_slave_1: left promiscuous mode [ 365.900212][ T3842] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.921855][ T5864] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 365.977120][ T3842] bridge_slave_0: left allmulticast mode [ 365.983721][ T3842] bridge_slave_0: left promiscuous mode [ 365.990329][ T3842] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.089799][ T5864] usb 3-1: config 0 has no interfaces? [ 366.095841][ T5864] usb 3-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 366.107177][ T5864] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.293842][ T5864] usb 3-1: config 0 descriptor?? [ 366.363840][ T5883] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 366.595437][ T5864] usb 3-1: USB disconnect, device number 9 [ 366.652027][ T5883] usb 1-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 366.661682][ T5883] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.684390][ T5883] usb 1-1: config 0 descriptor?? [ 366.702350][ T3842] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 366.725563][ T5883] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 366.747674][ T3842] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 366.767094][ T3842] bond0 (unregistering): Released all slaves [ 367.087287][ T5805] Bluetooth: hci2: command tx timeout [ 367.164228][ T5883] gp8psk: usb in 128 operation failed. [ 367.192343][ T7324] netlink: 104 bytes leftover after parsing attributes in process `syz.3.524'. [ 367.804289][ T5883] gp8psk: usb in 146 operation failed. [ 367.810014][ T5883] gp8psk: failed to get FW version [ 367.830036][ T5883] gp8psk: FPGA Version = 79 [ 368.042108][ T5883] gp8psk: usb in 138 operation failed. [ 368.047847][ T5883] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 368.059386][ T5883] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 368.145680][ T7334] loop2: detected capacity change from 0 to 1024 [ 368.192003][ T7334] EXT4-fs: Ignoring removed nobh option [ 368.298012][ T5883] usb 1-1: USB disconnect, device number 6 [ 368.364423][ T7334] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 368.481350][ T7303] chnl_net:caif_netlink_parms(): no params data found [ 368.743533][ T3842] hsr_slave_0: left promiscuous mode [ 368.771833][ T3842] hsr_slave_1: left promiscuous mode [ 368.805566][ T3842] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 368.813650][ T3842] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 368.910030][ T3842] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 368.920094][ T3842] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 369.092695][ T5817] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 369.110570][ T3842] veth1_macvtap: left promiscuous mode [ 369.118980][ T3842] veth0_macvtap: left promiscuous mode [ 369.129332][ T3842] veth1_vlan: left promiscuous mode [ 369.135090][ T3842] veth0_vlan: left promiscuous mode [ 369.145689][ T5805] Bluetooth: hci2: command tx timeout [ 369.558375][ T7355] loop2: detected capacity change from 0 to 256 [ 369.815660][ T7355] FAT-fs (loop2): Directory bread(block 64) failed [ 369.823108][ T7355] FAT-fs (loop2): Directory bread(block 65) failed [ 369.830199][ T7355] FAT-fs (loop2): Directory bread(block 66) failed [ 369.837229][ T7355] FAT-fs (loop2): Directory bread(block 67) failed [ 369.848323][ T7355] FAT-fs (loop2): Directory bread(block 68) failed [ 369.855807][ T7355] FAT-fs (loop2): Directory bread(block 69) failed [ 369.863557][ T7355] FAT-fs (loop2): Directory bread(block 70) failed [ 369.870357][ T7355] FAT-fs (loop2): Directory bread(block 71) failed [ 369.877504][ T7355] FAT-fs (loop2): Directory bread(block 72) failed [ 369.884463][ T7355] FAT-fs (loop2): Directory bread(block 73) failed [ 369.970986][ T3842] team0 (unregistering): Port device team_slave_1 removed [ 370.016976][ T3842] team0 (unregistering): Port device team_slave_0 removed [ 370.547024][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 370.555529][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 371.162445][ T7365] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 371.242765][ T5805] Bluetooth: hci2: command tx timeout [ 371.848030][ T4072] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 371.857295][ T4072] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 372.016128][ T7368] loop0: detected capacity change from 0 to 32768 [ 372.625508][ T7374] loop3: detected capacity change from 0 to 2048 [ 372.835215][ T7374] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 373.162556][ T5069] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.344372][ T5805] Bluetooth: hci2: command tx timeout [ 373.638546][ T7374] UDF-fs: warning (device loop3): udf_truncate_tail_extent: Too long extent after EOF in inode 1367: i_size: 4096 lbcount: 4608 extent 65+512 [ 373.689996][ T5069] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.891243][ T7382] loop0: detected capacity change from 0 to 32768 [ 373.908579][ T7303] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.917926][ T7303] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.926077][ T7303] bridge_slave_0: entered allmulticast mode [ 373.941652][ T7303] bridge_slave_0: entered promiscuous mode [ 373.970461][ T7382] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 374.031876][ T5069] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.079675][ T5804] UDF-fs: warning (device loop3): udf_evict_inode: Inode 1367 (mode 100000) has inode size 4096 different from extent length 4608. Filesystem need not be standards compliant. [ 374.147531][ T7303] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.155431][ T7303] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.163480][ T7303] bridge_slave_1: entered allmulticast mode [ 374.172811][ T7303] bridge_slave_1: entered promiscuous mode [ 374.285996][ T5802] ocfs2: Unmounting device (7,0) on (node local) [ 374.298733][ T5069] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.646640][ T7303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 374.714896][ T7392] loop3: detected capacity change from 0 to 128 [ 374.820033][ T7392] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 374.983098][ T7303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 375.058720][ T5069] bridge_slave_1: left allmulticast mode [ 375.067837][ T5069] bridge_slave_1: left promiscuous mode [ 375.074565][ T5069] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.192108][ T5069] bridge_slave_0: left allmulticast mode [ 375.198037][ T5069] bridge_slave_0: left promiscuous mode [ 375.205224][ T5069] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.002814][ T5069] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 376.072894][ T5069] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 376.134099][ T5069] bond0 (unregistering): Released all slaves [ 376.751514][ T7303] team0: Port device team_slave_0 added [ 376.812525][ T7303] team0: Port device team_slave_1 added [ 377.332692][ T5812] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 377.349842][ T5812] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 377.359125][ T5812] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 377.676218][ T5812] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 377.830645][ T5812] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 377.873305][ T5812] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 377.904870][ T5069] hsr_slave_0: left promiscuous mode [ 377.952083][ T5069] hsr_slave_1: left promiscuous mode [ 377.962139][ T5069] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 377.969985][ T5069] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 378.005723][ T5069] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 378.013711][ T5069] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 378.039563][ T5069] veth1_macvtap: left promiscuous mode [ 378.046131][ T5069] veth0_macvtap: left promiscuous mode [ 378.052238][ T5069] veth1_vlan: left promiscuous mode [ 378.057824][ T5069] veth0_vlan: left promiscuous mode [ 378.625667][ T5069] team0 (unregistering): Port device team_slave_1 removed [ 378.667581][ T5069] team0 (unregistering): Port device team_slave_0 removed [ 378.824553][ T7303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 378.840667][ T7303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 378.872120][ T7303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 379.301722][ T5805] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 379.391221][ T7303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 379.398546][ T7303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 379.424981][ T7303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 379.992474][ T5883] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 380.023082][ T5805] Bluetooth: hci5: command tx timeout [ 380.042131][ T7303] hsr_slave_0: entered promiscuous mode [ 380.092899][ T7303] hsr_slave_1: entered promiscuous mode [ 380.158004][ T7303] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 380.167233][ T7303] Cannot create hsr debugfs directory [ 380.206254][ T5883] usb 4-1: Using ep0 maxpacket: 32 [ 380.266214][ T5883] usb 4-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 380.275885][ T5883] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.287919][ T5883] usb 4-1: Product: syz [ 380.293459][ T5883] usb 4-1: Manufacturer: syz [ 380.298393][ T5883] usb 4-1: SerialNumber: syz [ 380.496774][ T5883] usb 4-1: config 0 descriptor?? [ 380.996363][ T5883] airspy 4-1:0.0: Board ID: 00 [ 381.006912][ T5883] airspy 4-1:0.0: Firmware version: [ 381.532778][ T7411] chnl_net:caif_netlink_parms(): no params data found [ 381.673568][ T5883] airspy 4-1:0.0: usb_control_msg() failed -71 request 12 [ 381.742642][ T5883] airspy 4-1:0.0: Registered as swradio24 [ 381.748654][ T5883] airspy 4-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 381.770959][ T5883] usb 4-1: USB disconnect, device number 13 [ 381.962463][ T7303] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 382.058533][ T7303] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 382.107413][ T5805] Bluetooth: hci5: command tx timeout [ 382.136430][ T7303] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 382.187352][ T7303] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 382.864585][ T7467] loop2: detected capacity change from 0 to 64 [ 383.095765][ T7467] syz.2.556: attempt to access beyond end of device [ 383.095765][ T7467] loop2: rw=2049, sector=268435468, nr_sectors = 2 limit=64 [ 383.303008][ T7411] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.310719][ T7411] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.318793][ T7411] bridge_slave_0: entered allmulticast mode [ 383.328028][ T7411] bridge_slave_0: entered promiscuous mode [ 383.422461][ T5883] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 383.456644][ T7411] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.468021][ T7411] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.476568][ T7411] bridge_slave_1: entered allmulticast mode [ 383.485833][ T7411] bridge_slave_1: entered promiscuous mode [ 383.627118][ T5883] usb 1-1: Using ep0 maxpacket: 8 [ 383.711599][ T5883] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 383.720113][ T5883] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 383.730642][ T5883] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 383.740900][ T5883] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 383.752712][ T5883] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 383.770259][ T5883] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 383.780877][ T5883] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.867539][ T7411] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 383.995487][ T7411] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 384.184708][ T5812] Bluetooth: hci5: command tx timeout [ 384.265993][ T5883] usb 1-1: usb_control_msg returned -32 [ 384.272641][ T5883] usbtmc 1-1:16.0: can't read capabilities [ 384.405606][ T7411] team0: Port device team_slave_0 added [ 384.471527][ T7411] team0: Port device team_slave_1 added [ 384.512987][ T7303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 384.649480][ T7483] usbtmc 1-1:16.0: stb usb_control_msg returned -32 [ 384.686695][ T10] usb 1-1: USB disconnect, device number 7 [ 384.933590][ T7411] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 384.940776][ T7411] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 384.967287][ T7411] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 385.053842][ T7303] 8021q: adding VLAN 0 to HW filter on device team0 [ 385.066722][ T5805] Bluetooth: hci4: command 0x0406 tx timeout [ 385.092144][ T7411] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 385.103643][ T7411] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 385.131842][ T7411] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 385.220334][ T4858] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.228131][ T4858] bridge0: port 1(bridge_slave_0) entered forwarding state [ 385.346582][ T3842] bridge0: port 2(bridge_slave_1) entered blocking state [ 385.354387][ T3842] bridge0: port 2(bridge_slave_1) entered forwarding state [ 385.591865][ T7485] loop2: detected capacity change from 0 to 4096 [ 385.643247][ T7485] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 385.768033][ T7411] hsr_slave_0: entered promiscuous mode [ 385.873167][ T7411] hsr_slave_1: entered promiscuous mode [ 385.883976][ T7492] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 385.921726][ T7411] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 385.929548][ T7411] Cannot create hsr debugfs directory [ 386.320794][ T5805] Bluetooth: hci5: command tx timeout [ 386.481005][ T7500] loop0: detected capacity change from 0 to 64 [ 387.815667][ T7516] netlink: 4 bytes leftover after parsing attributes in process `syz.3.568'. [ 388.265191][ T7411] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 388.362985][ T7411] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 388.482185][ T7411] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 388.600687][ T7411] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 389.026705][ T7303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 389.252530][ T7411] 8021q: adding VLAN 0 to HW filter on device bond0 [ 389.263387][ T7531] netlink: 40 bytes leftover after parsing attributes in process `syz.0.571'. [ 389.374597][ T7411] 8021q: adding VLAN 0 to HW filter on device team0 [ 389.493728][ T4683] bridge0: port 1(bridge_slave_0) entered blocking state [ 389.501545][ T4683] bridge0: port 1(bridge_slave_0) entered forwarding state [ 389.616138][ T4683] bridge0: port 2(bridge_slave_1) entered blocking state [ 389.623912][ T4683] bridge0: port 2(bridge_slave_1) entered forwarding state [ 390.087406][ T7411] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 390.098575][ T7411] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 391.828854][ T7303] veth0_vlan: entered promiscuous mode [ 391.949524][ T7303] veth1_vlan: entered promiscuous mode [ 392.185296][ T7303] veth0_macvtap: entered promiscuous mode [ 392.281591][ T7303] veth1_macvtap: entered promiscuous mode [ 392.339574][ T7411] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 392.554465][ T7303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 392.565318][ T7303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.577764][ T7303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 392.589169][ T7303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.599374][ T7303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 392.610140][ T7303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.620318][ T7303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 392.631163][ T7303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.646017][ T7303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 392.822453][ T7560] loop0: detected capacity change from 0 to 4096 [ 392.978632][ T7303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 392.991669][ T7303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.003981][ T7303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 393.015998][ T7303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.026900][ T7303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 393.037655][ T7303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.047796][ T7303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 393.058580][ T7303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.073817][ T7303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 393.308504][ T7303] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.319524][ T7303] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.329988][ T7303] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.339363][ T7303] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.689001][ T7584] loop0: detected capacity change from 0 to 1024 [ 395.364798][ T7411] veth0_vlan: entered promiscuous mode [ 395.525526][ T7411] veth1_vlan: entered promiscuous mode [ 395.842384][ T5069] hfsplus: b-tree write err: -5, ino 4 [ 395.923729][ T7411] veth0_macvtap: entered promiscuous mode [ 395.999653][ T7411] veth1_macvtap: entered promiscuous mode [ 396.230941][ T7606] loop2: detected capacity change from 0 to 256 [ 396.269580][ T7411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 396.282080][ T7411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.293713][ T7411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 396.304576][ T7411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.314830][ T7411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 396.325630][ T7411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.335802][ T7411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 396.348637][ T7411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.358842][ T7411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 396.371859][ T7411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.387036][ T7411] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 396.644926][ T7606] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 396.784192][ T5883] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 396.809357][ T7411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 396.820472][ T7411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.831369][ T7411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 396.842247][ T7411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.852437][ T7411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 396.863319][ T7411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.877995][ T7411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 396.890137][ T7411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.900612][ T7411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 396.915878][ T7411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.930444][ T7411] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 396.942490][ T1951] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 396.963886][ T7411] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.973106][ T7411] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.986876][ T7411] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.997300][ T7411] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.091369][ T5883] usb 1-1: Using ep0 maxpacket: 8 [ 397.110536][ T5883] usb 1-1: config 150 has an invalid interface number: 204 but max is 1 [ 397.119713][ T5883] usb 1-1: config 150 has no interface number 0 [ 397.127561][ T5883] usb 1-1: config 150 interface 204 has no altsetting 0 [ 397.135969][ T5883] usb 1-1: config 150 interface 1 has no altsetting 0 [ 397.147285][ T1951] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 397.158777][ T1951] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 397.169056][ T1951] usb 4-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 397.178484][ T1951] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.294359][ T5883] usb 1-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 397.305080][ T5883] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.313785][ T5883] usb 1-1: Product: syz [ 397.318186][ T5883] usb 1-1: Manufacturer: syz [ 397.323461][ T5883] usb 1-1: SerialNumber: syz [ 397.327078][ T1951] usb 4-1: config 0 descriptor?? [ 397.688062][ T5883] xr_serial 1-1:150.204: xr_serial converter detected [ 397.808425][ T7618] Illegal XDP return value 4294967262 on prog (id 38) dev N/A, expect packet loss! [ 398.214851][ T1951] hid-led 0003:27B8:01ED.000F: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.3-1/input0 [ 398.235850][ T1951] hid-led 0003:27B8:01ED.000F: ThingM blink(1) v1 initialized [ 398.443943][ T1951] usb 4-1: USB disconnect, device number 14 [ 398.529303][ T5883] xr_serial ttyUSB0: Failed to set reg 0x0e: -71 [ 398.538298][ T5883] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 398.672777][ T5883] usb 1-1: USB disconnect, device number 8 [ 398.683273][ T5883] xr_serial 1-1:150.204: device disconnected [ 398.768233][ T6013] udevd[6013]: setting mode of /dev/bus/usb/001/008 to 020664 failed: No such file or directory [ 398.815957][ T6013] udevd[6013]: setting owner of /dev/bus/usb/001/008 to uid=0, gid=0 failed: No such file or directory [ 399.459522][ T7633] loop2: detected capacity change from 0 to 64 [ 399.627483][ T7638] loop3: detected capacity change from 0 to 64 [ 400.774754][ T7658] loop2: detected capacity change from 0 to 256 [ 400.829061][ T7658] exfat: Unknown parameter '00000000000000000000' [ 401.560692][ T3842] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 401.569061][ T3842] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 401.635698][ T4072] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 401.644017][ T4072] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 402.700693][ T7683] loop2: detected capacity change from 0 to 512 [ 402.712896][ T1951] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 402.854922][ T7683] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 402.868243][ T7683] ext4 filesystem being mounted at /134/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 402.940350][ T1951] usb 6-1: Using ep0 maxpacket: 16 [ 402.959136][ T1951] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 402.968234][ T1951] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 402.978823][ T1951] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 403.030714][ T1951] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 403.041012][ T1951] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.049562][ T1951] usb 6-1: Product: syz [ 403.054068][ T1951] usb 6-1: Manufacturer: syz [ 403.058912][ T1951] usb 6-1: SerialNumber: syz [ 403.270058][ T7692] loop0: detected capacity change from 0 to 1024 [ 403.446400][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 403.453512][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 403.756231][ T7683] Process accounting resumed [ 403.783668][ T4858] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 403.791902][ T4858] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 403.897198][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 403.906240][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 403.972488][ T1951] usb 6-1: 0:2 : does not exist [ 404.123632][ T5817] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 404.676230][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.781568][ T1951] usb 6-1: 1:0: failed to get current value for ch 0 (-22) [ 405.070103][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.138318][ T1951] usb 6-1: USB disconnect, device number 2 [ 405.312108][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.794864][ T5864] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 405.863139][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.067776][ T5864] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 406.078421][ T5864] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 406.168754][ T5864] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 406.178956][ T5864] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 406.187579][ T5864] usb 4-1: SerialNumber: syz [ 406.357730][ T6012] udevd[6012]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 406.442259][ T11] bridge_slave_1: left allmulticast mode [ 406.448291][ T11] bridge_slave_1: left promiscuous mode [ 406.455199][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.685526][ T11] bridge_slave_0: left allmulticast mode [ 406.691685][ T11] bridge_slave_0: left promiscuous mode [ 406.698287][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 406.724473][ T5864] usb 4-1: 0:2 : does not exist [ 406.729803][ T5864] usb 4-1: usbmixer: too many channels (61) in unit 5 [ 406.942188][ T7728] loop2: detected capacity change from 0 to 256 [ 407.178797][ T5812] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 407.194655][ T7728] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 407.233063][ T5864] usb 4-1: USB disconnect, device number 15 [ 407.292753][ T5812] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 407.399425][ T5812] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 407.498666][ T5812] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 407.510833][ T5812] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 407.520738][ T5812] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 407.937290][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 408.109482][ T7738] loop5: detected capacity change from 0 to 128 [ 408.255146][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 408.324999][ T11] bond0 (unregistering): Released all slaves [ 408.405731][ T7738] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 408.675204][ T5969] udevd[5969]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 408.763356][ T7738] ext4 filesystem being mounted at /3/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 408.994830][ T7741] loop3: detected capacity change from 0 to 16 [ 409.004029][ T7741] erofs: Unknown parameter '' [ 409.277727][ T7738] fscrypt: Error allocating hmac(sha512): -2 [ 409.621427][ T5812] Bluetooth: hci3: command tx timeout [ 409.786769][ T7303] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 409.885308][ T7753] netlink: 'syz.2.614': attribute type 29 has an invalid length. [ 410.209450][ T11] hsr_slave_0: left promiscuous mode [ 410.234176][ T11] hsr_slave_1: left promiscuous mode [ 410.369414][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 410.377465][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 410.484331][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 410.498894][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 410.563676][ T7761] loop5: detected capacity change from 0 to 256 [ 410.668171][ T11] veth1_macvtap: left promiscuous mode [ 410.674348][ T11] veth0_macvtap: left promiscuous mode [ 410.680258][ T11] veth1_vlan: left promiscuous mode [ 410.686090][ T11] veth0_vlan: left promiscuous mode [ 411.013202][ T7761] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe40551cd, utbl_chksum : 0xe619d30d) [ 411.382326][ T7771] loop2: detected capacity change from 0 to 512 [ 411.701493][ T5812] Bluetooth: hci3: command tx timeout [ 411.734605][ T7771] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 411.747875][ T7771] ext4 filesystem being mounted at /140/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 412.037535][ T11] team0 (unregistering): Port device team_slave_1 removed [ 412.037741][ T7771] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 412.103229][ T11] team0 (unregistering): Port device team_slave_0 removed [ 412.121638][ T7771] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 412.136744][ T7771] EXT4-fs (loop2): This should not happen!! Data will be lost [ 412.136744][ T7771] [ 412.147327][ T7771] EXT4-fs (loop2): Total free blocks count 0 [ 412.153756][ T7771] EXT4-fs (loop2): Free/Dirty block details [ 412.159901][ T7771] EXT4-fs (loop2): free_blocks=65280 [ 412.165647][ T7771] EXT4-fs (loop2): dirty_blocks=33 [ 412.171205][ T7771] EXT4-fs (loop2): Block reservation details [ 412.177423][ T7771] EXT4-fs (loop2): i_reserved_data_blocks=33 [ 412.251333][ T1951] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 412.443348][ T1951] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 412.454809][ T1951] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 412.465723][ T1951] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 412.475226][ T1951] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.607845][ T1951] usb 1-1: config 0 descriptor?? [ 412.687235][ T5817] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 413.465017][ T1951] cm6533_jd 0003:0D8C:0022.0010: unknown main item tag 0x0 [ 413.473009][ T1951] cm6533_jd 0003:0D8C:0022.0010: unknown main item tag 0x0 [ 413.611333][ T1951] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0D8C:0022.0010/input/input16 [ 413.830044][ T5812] Bluetooth: hci3: command tx timeout [ 413.916882][ T7784] loop2: detected capacity change from 0 to 16 [ 413.927486][ T7784] erofs: Unknown parameter '' [ 414.327434][ T1951] cm6533_jd 0003:0D8C:0022.0010: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.0-1/input0 [ 414.349664][ T1951] usb 1-1: USB disconnect, device number 9 [ 414.881865][ T7726] chnl_net:caif_netlink_parms(): no params data found [ 415.861435][ T5812] Bluetooth: hci3: command tx timeout [ 415.865063][ T7806] loop3: detected capacity change from 0 to 1024 [ 416.206702][ T7806] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 416.743777][ T7726] bridge0: port 1(bridge_slave_0) entered blocking state [ 416.751795][ T7726] bridge0: port 1(bridge_slave_0) entered disabled state [ 416.759639][ T7726] bridge_slave_0: entered allmulticast mode [ 416.768939][ T7726] bridge_slave_0: entered promiscuous mode [ 416.923558][ T7726] bridge0: port 2(bridge_slave_1) entered blocking state [ 416.932111][ T7726] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.939984][ T7726] bridge_slave_1: entered allmulticast mode [ 416.952078][ T7726] bridge_slave_1: entered promiscuous mode [ 417.350281][ T7726] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 417.408845][ T1951] hid-generic 0005:04F3:FFF9.0011: item fetching failed at offset 0/1 [ 417.440776][ T1951] hid-generic 0005:04F3:FFF9.0011: probe with driver hid-generic failed with error -22 [ 417.520863][ T7726] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 417.719910][ T5804] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 418.125434][ T7726] team0: Port device team_slave_0 added [ 418.162953][ T7830] loop0: detected capacity change from 0 to 32768 [ 418.220258][ T7726] team0: Port device team_slave_1 added [ 418.229370][ T7830] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.636 (7830) [ 418.260877][ T7830] BTRFS info (device loop0): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 418.283213][ T7830] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 418.297259][ T7830] BTRFS info (device loop0): using free-space-tree [ 418.588920][ T7726] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 418.596496][ T7726] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 418.622968][ T7726] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 418.816370][ T7726] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 418.823767][ T7726] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 418.850276][ T7726] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 419.552742][ T7849] loop3: detected capacity change from 0 to 16 [ 419.561594][ T7849] erofs: Unknown parameter '' [ 420.374255][ T7726] hsr_slave_0: entered promiscuous mode [ 420.661375][ T7830] BTRFS warning (device loop0): failed to trim 3 block group(s), last error -512 [ 420.778837][ T7726] hsr_slave_1: entered promiscuous mode [ 420.913586][ T7726] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 420.921534][ T7726] Cannot create hsr debugfs directory [ 421.141462][ T7830] BTRFS warning (device loop0): failed to trim 1 device(s), last error -512 [ 421.170670][ T7870] loop2: detected capacity change from 0 to 64 [ 421.242399][ T5802] BTRFS info (device loop0): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 422.424331][ T5812] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 422.435131][ T5812] CPU: 1 UID: 0 PID: 5812 Comm: kworker/u9:5 Not tainted 6.12.0-syzkaller-09567-g7eef7e306d3c #0 [ 422.445969][ T5812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 422.456327][ T5812] Workqueue: hci1 hci_rx_work [ 422.461375][ T5812] Call Trace: [ 422.464880][ T5812] [ 422.468018][ T5812] dump_stack_lvl+0x216/0x2d0 [ 422.473041][ T5812] dump_stack+0x1e/0x30 [ 422.477510][ T5812] sysfs_create_dir_ns+0x45f/0x4c0 [ 422.482972][ T5812] kobject_add_internal+0xfe7/0x1900 [ 422.488618][ T5812] kobject_add+0x28c/0x3c0 [ 422.493406][ T5812] device_add+0xa90/0x1ba0 [ 422.498164][ T5812] hci_conn_add_sysfs+0x161/0x2c0 [ 422.503541][ T5812] le_conn_complete_evt+0x1adf/0x1fa0 [ 422.509279][ T5812] hci_le_conn_complete_evt+0x15a/0x210 [ 422.515179][ T5812] hci_le_meta_evt+0x600/0x850 [ 422.520267][ T5812] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 422.526691][ T5812] hci_event_packet+0x11df/0x1c20 [ 422.532047][ T5812] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 422.537685][ T5812] hci_rx_work+0x699/0x1260 [ 422.542490][ T5812] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 422.548647][ T5812] ? __pfx_hci_rx_work+0x10/0x10 [ 422.553909][ T5812] ? __pfx_hci_rx_work+0x10/0x10 [ 422.559160][ T5812] process_scheduled_works+0xae0/0x1c40 [ 422.565086][ T5812] worker_thread+0xea7/0x14f0 [ 422.570101][ T5812] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 422.576283][ T5812] kthread+0x3e2/0x540 [ 422.580630][ T5812] ? __pfx_worker_thread+0x10/0x10 [ 422.586098][ T5812] ? __pfx_kthread+0x10/0x10 [ 422.590978][ T5812] ret_from_fork+0x6d/0x90 [ 422.595702][ T5812] ? __pfx_kthread+0x10/0x10 [ 422.600583][ T5812] ret_from_fork_asm+0x1a/0x30 [ 422.605699][ T5812] [ 422.611778][ T5812] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 422.633038][ T5812] Bluetooth: hci1: failed to register connection device [ 423.382125][ T7899] loop2: detected capacity change from 0 to 512 [ 423.460200][ T3842] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.480425][ T7899] EXT4-fs error (device loop2): ext4_orphan_get:1389: inode #15: comm syz.2.653: casefold flag without casefold feature [ 423.560738][ T7899] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.653: couldn't read orphan inode 15 (err -117) [ 423.654540][ T7899] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 423.666645][ T3842] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.838548][ T1951] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 424.326437][ T3842] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.759258][ T3842] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.789281][ T7726] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 424.831832][ T1951] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 424.842449][ T1951] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 424.920416][ T7726] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 425.055427][ T1951] usb 4-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 425.065720][ T1951] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.074192][ T1951] usb 4-1: Product: syz [ 425.078626][ T1951] usb 4-1: Manufacturer: syz [ 425.083582][ T1951] usb 4-1: SerialNumber: syz [ 425.212235][ T1951] usb 4-1: config 0 descriptor?? [ 425.225516][ T7726] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 425.284208][ T5817] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 425.289262][ T5812] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 425.303797][ T5812] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 425.313440][ T5812] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 425.330414][ T5812] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 425.413254][ T7726] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 425.423161][ T5812] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 425.434323][ T5812] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 425.453020][ T5863] usb 4-1: USB disconnect, device number 16 [ 425.692028][ T3842] bridge_slave_1: left allmulticast mode [ 425.698143][ T3842] bridge_slave_1: left promiscuous mode [ 425.706822][ T3842] bridge0: port 2(bridge_slave_1) entered disabled state [ 425.850098][ T3842] bridge_slave_0: left allmulticast mode [ 425.857926][ T3842] bridge_slave_0: left promiscuous mode [ 425.864677][ T3842] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.844677][ T3842] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 426.955200][ T3842] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 426.972355][ T3842] bond0 (unregistering): Released all slaves [ 427.548059][ T5812] Bluetooth: hci2: command tx timeout [ 427.841736][ T5864] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 428.040941][ T7942] loop2: detected capacity change from 0 to 2048 [ 428.087433][ T5864] usb 4-1: config 0 has an invalid interface number: 255 but max is 0 [ 428.096858][ T5864] usb 4-1: config 0 has no interface number 0 [ 428.106083][ T5864] usb 4-1: config 0 interface 255 has no altsetting 0 [ 428.118008][ T5864] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 428.129089][ T5864] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.143431][ T5864] usb 4-1: config 0 descriptor?? [ 428.159297][ T5864] cp210x 4-1:0.255: cp210x converter detected [ 428.522329][ T7942] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 428.688255][ T3842] hsr_slave_0: left promiscuous mode [ 428.763910][ T5864] cp210x 4-1:0.255: failed to get vendor val 0x000e size 3: -32 [ 428.772818][ T3842] hsr_slave_1: left promiscuous mode [ 428.815472][ T3842] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 428.825076][ T3842] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 428.834858][ T5805] Bluetooth: hci1: command 0x0406 tx timeout [ 428.891743][ T3842] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 428.899610][ T3842] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 428.950140][ T3842] veth1_macvtap: left promiscuous mode [ 428.956319][ T3842] veth0_macvtap: left promiscuous mode [ 428.962639][ T3842] veth1_vlan: left promiscuous mode [ 428.968336][ T3842] veth0_vlan: left promiscuous mode [ 428.985941][ T5817] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 429.000140][ T5864] cp210x 4-1:0.255: GPIO initialisation failed: -19 [ 429.183249][ T5864] usb 4-1: cp210x converter now attached to ttyUSB0 [ 429.272463][ T5864] usb 4-1: USB disconnect, device number 17 [ 429.328752][ T5864] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 429.344470][ T5864] cp210x 4-1:0.255: device disconnected [ 429.631605][ T5812] Bluetooth: hci2: command tx timeout [ 429.919987][ T3842] team0 (unregistering): Port device team_slave_1 removed [ 429.959553][ T3842] team0 (unregistering): Port device team_slave_0 removed [ 430.501483][ T5812] Bluetooth: hci0: command 0x0406 tx timeout [ 431.055295][ T7726] 8021q: adding VLAN 0 to HW filter on device bond0 [ 431.107780][ T7726] 8021q: adding VLAN 0 to HW filter on device team0 [ 431.225414][ T7726] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 431.237067][ T7726] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 431.328891][ T4308] bridge0: port 1(bridge_slave_0) entered blocking state [ 431.336672][ T4308] bridge0: port 1(bridge_slave_0) entered forwarding state [ 431.352605][ T4308] bridge0: port 2(bridge_slave_1) entered blocking state [ 431.360302][ T4308] bridge0: port 2(bridge_slave_1) entered forwarding state [ 431.711430][ T5812] Bluetooth: hci2: command tx timeout [ 431.782152][ T7914] chnl_net:caif_netlink_parms(): no params data found [ 432.008901][ T7981] loop0: detected capacity change from 0 to 24 [ 432.076695][ T7981] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 432.388719][ T7977] loop3: detected capacity change from 0 to 4096 [ 432.619722][ T7726] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 432.670662][ T7990] loop2: detected capacity change from 0 to 16 [ 432.973448][ T7990] erofs (device loop2): mounted with root inode @ nid 36. [ 433.324200][ T7996] loop0: detected capacity change from 0 to 1024 [ 433.602855][ T7996] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 433.778880][ T7996] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 433.804696][ T7996] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 4096 with max blocks 1 with error 28 [ 433.817643][ T7996] EXT4-fs (loop0): This should not happen!! Data will be lost [ 433.817643][ T7996] [ 433.827708][ T7996] EXT4-fs (loop0): Total free blocks count 0 [ 433.834683][ T5812] Bluetooth: hci2: command tx timeout [ 433.841717][ T7996] EXT4-fs (loop0): Free/Dirty block details [ 433.847858][ T7996] EXT4-fs (loop0): free_blocks=68451041280 [ 433.854475][ T7996] EXT4-fs (loop0): dirty_blocks=32 [ 433.859824][ T7996] EXT4-fs (loop0): Block reservation details [ 433.868199][ T7996] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 433.966414][ T7996] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 434.158984][ T7914] bridge0: port 1(bridge_slave_0) entered blocking state [ 434.168071][ T7914] bridge0: port 1(bridge_slave_0) entered disabled state [ 434.176090][ T7914] bridge_slave_0: entered allmulticast mode [ 434.185406][ T7914] bridge_slave_0: entered promiscuous mode [ 434.338877][ T7914] bridge0: port 2(bridge_slave_1) entered blocking state [ 434.347482][ T7914] bridge0: port 2(bridge_slave_1) entered disabled state [ 434.356689][ T7914] bridge_slave_1: entered allmulticast mode [ 434.365977][ T7914] bridge_slave_1: entered promiscuous mode [ 434.856106][ T7914] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 434.952014][ T5863] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 434.954881][ T7914] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 435.186417][ T5863] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 435.197817][ T5863] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 435.208105][ T5863] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 435.217781][ T5863] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.328793][ T8022] loop0: detected capacity change from 0 to 1024 [ 435.347322][ T5863] usb 4-1: config 0 descriptor?? [ 435.382611][ T8025] smc: net device batadv_slave_0 applied user defined pnetid SYZ2 [ 435.410719][ T8026] smc: net device wlan0 applied user defined pnetid SYZ2 [ 435.455795][ T8022] netlink: 20 bytes leftover after parsing attributes in process `syz.0.685'. [ 435.472563][ T7914] team0: Port device team_slave_0 added [ 435.539276][ T7726] veth0_vlan: entered promiscuous mode [ 435.575064][ T7914] team0: Port device team_slave_1 added [ 435.746125][ T7726] veth1_vlan: entered promiscuous mode [ 436.003232][ T7914] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 436.010582][ T7914] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 436.037687][ T7914] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 436.118825][ T5863] usb 4-1: string descriptor 0 read error: -22 [ 436.268972][ T7914] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 436.276893][ T7914] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 436.304578][ T7914] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 436.391522][ T7726] veth0_macvtap: entered promiscuous mode [ 436.443018][ T7726] veth1_macvtap: entered promiscuous mode [ 436.506987][ T5863] uclogic 0003:256C:006D.0012: failed retrieving string descriptor #100: -71 [ 436.516633][ T5863] uclogic 0003:256C:006D.0012: failed retrieving pen parameters: -71 [ 436.525299][ T5863] uclogic 0003:256C:006D.0012: failed probing pen v1 parameters: -71 [ 436.533884][ T5863] uclogic 0003:256C:006D.0012: failed probing parameters: -71 [ 436.542068][ T5863] uclogic 0003:256C:006D.0012: probe with driver uclogic failed with error -71 [ 436.750836][ T5863] usb 4-1: USB disconnect, device number 18 [ 437.012875][ T7726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 437.025743][ T7726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.036364][ T7726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 437.047167][ T7726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.057405][ T7726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 437.069175][ T7726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.079377][ T7726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 437.090236][ T7726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.104973][ T7726] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 437.253116][ T7914] hsr_slave_0: entered promiscuous mode [ 437.282957][ T7914] hsr_slave_1: entered promiscuous mode [ 437.306774][ T7914] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 437.314739][ T7914] Cannot create hsr debugfs directory [ 437.483746][ T7726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 437.495316][ T7726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.505799][ T7726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 437.516706][ T7726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.530709][ T7726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 437.542582][ T7726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.552817][ T7726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 437.563636][ T7726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.578348][ T7726] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 438.116101][ T7726] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.125318][ T7726] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.136060][ T7726] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.150526][ T7726] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.349140][ T8047] loop2: detected capacity change from 0 to 2048 [ 438.572442][ T7914] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 438.616761][ T8047] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 438.650541][ T7914] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 438.697965][ T7914] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 438.739759][ T7914] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 439.354167][ T5817] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 439.606319][ T7914] 8021q: adding VLAN 0 to HW filter on device bond0 [ 439.664712][ T7914] 8021q: adding VLAN 0 to HW filter on device team0 [ 439.696871][ T7932] bridge0: port 1(bridge_slave_0) entered blocking state [ 439.704612][ T7932] bridge0: port 1(bridge_slave_0) entered forwarding state [ 439.838220][ T8065] loop3: detected capacity change from 0 to 4096 [ 439.876146][ T7932] bridge0: port 2(bridge_slave_1) entered blocking state [ 439.883923][ T7932] bridge0: port 2(bridge_slave_1) entered forwarding state [ 439.989993][ T7914] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 440.000832][ T7914] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 440.769750][ T8070] loop0: detected capacity change from 0 to 32768 [ 440.891399][ T8070] ialloc: diAlloc returned -5! [ 441.700211][ T8080] loop2: detected capacity change from 0 to 1024 [ 441.932669][ T8080] netlink: 20 bytes leftover after parsing attributes in process `syz.2.698'. [ 442.732404][ T7914] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 443.265050][ T8090] loop0: detected capacity change from 0 to 2048 [ 443.412774][ T8103] netlink: 'syz.3.703': attribute type 39 has an invalid length. [ 443.468931][ T8103] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.583347][ T8103] bridge_slave_0 (unregistering): left allmulticast mode [ 443.590676][ T8103] bridge_slave_0 (unregistering): left promiscuous mode [ 443.598471][ T8103] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.700527][ T8090] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 444.546697][ T5802] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 444.725319][ T8110] loop2: detected capacity change from 0 to 32768 [ 444.760759][ T8110] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 444.836989][ T8110] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 444.902722][ T29] audit: type=1800 audit(1732672047.198:16): pid=8110 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.704" name="file1" dev="loop2" ino=17058 res=0 errno=0 [ 445.296345][ T5817] ocfs2: Unmounting device (7,2) on (node local) [ 446.195160][ T7914] veth0_vlan: entered promiscuous mode [ 446.586281][ T7914] veth1_vlan: entered promiscuous mode [ 446.782505][ T5069] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 446.790691][ T5069] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 446.935609][ T7914] veth0_macvtap: entered promiscuous mode [ 446.984926][ T7914] veth1_macvtap: entered promiscuous mode [ 447.091755][ T7914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 447.103416][ T7914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.113615][ T7914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 447.124510][ T7914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.134682][ T7914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 447.145539][ T7914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.160406][ T7914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 447.172110][ T7914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.182407][ T7914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 447.193300][ T7914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.207863][ T7914] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 447.266606][ T7914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 447.277579][ T7914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.288197][ T7914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 447.299026][ T7914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.309567][ T7914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 447.320384][ T7914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.330563][ T7914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 447.341462][ T7914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.351663][ T7914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 447.366934][ T7914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.383263][ T7914] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 447.402864][ T7914] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.412288][ T7914] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.421548][ T7914] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.430594][ T7914] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.559858][ T7932] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 447.570542][ T7932] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 447.850521][ T8144] loop2: detected capacity change from 0 to 1024 [ 447.998656][ T8143] netlink: 20 bytes leftover after parsing attributes in process `syz.2.711'. [ 448.396719][ T7932] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.599545][ T7932] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.881842][ T7932] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.145963][ T7932] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.708906][ T7932] bridge_slave_1: left allmulticast mode [ 449.717239][ T7932] bridge_slave_1: left promiscuous mode [ 449.724286][ T7932] bridge0: port 2(bridge_slave_1) entered disabled state [ 449.786879][ T7932] bridge_slave_0: left allmulticast mode [ 449.793092][ T7932] bridge_slave_0: left promiscuous mode [ 449.799699][ T7932] bridge0: port 1(bridge_slave_0) entered disabled state [ 450.368698][ T7932] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 450.421679][ T7932] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 450.457840][ T7932] bond0 (unregistering): Released all slaves [ 451.005148][ T7932] hsr_slave_0: left promiscuous mode [ 451.031471][ T7932] hsr_slave_1: left promiscuous mode [ 451.040104][ T7932] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 451.049183][ T7932] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 451.062509][ T7932] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 451.070228][ T7932] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 451.086696][ T7932] veth1_macvtap: left promiscuous mode [ 451.092928][ T7932] veth0_macvtap: left promiscuous mode [ 451.098716][ T7932] veth1_vlan: left promiscuous mode [ 451.104449][ T7932] veth0_vlan: left promiscuous mode [ 451.876771][ T7932] team0 (unregistering): Port device team_slave_1 removed [ 451.887862][ T5805] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 451.897604][ T5805] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 451.911342][ T5805] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 451.919244][ T7932] team0 (unregistering): Port device team_slave_0 removed [ 451.925692][ T5805] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 452.028508][ T5805] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 452.038717][ T5805] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 453.842910][ T8173] chnl_net:caif_netlink_parms(): no params data found [ 454.162487][ T5883] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 454.344658][ T5812] Bluetooth: hci3: command tx timeout [ 454.352762][ T5883] usb 1-1: Using ep0 maxpacket: 8 [ 454.437663][ T5883] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee [ 454.448215][ T5883] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.456758][ T5883] usb 1-1: Product: syz [ 454.461285][ T5883] usb 1-1: Manufacturer: syz [ 454.466122][ T5883] usb 1-1: SerialNumber: syz [ 454.561494][ T25] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 454.616092][ T5883] usb 1-1: config 0 descriptor?? [ 454.756622][ T25] usb 3-1: unable to get BOS descriptor or descriptor too short [ 454.802531][ T25] usb 3-1: not running at top speed; connect to a high speed hub [ 454.844935][ T25] usb 3-1: config 129 has an invalid interface number: 135 but max is 0 [ 454.853917][ T25] usb 3-1: config 129 has an invalid interface number: 5 but max is 0 [ 454.862973][ T25] usb 3-1: config 129 descriptor has 1 excess byte, ignoring [ 454.870824][ T25] usb 3-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 454.880640][ T25] usb 3-1: config 129 has no interface number 0 [ 454.887592][ T25] usb 3-1: config 129 has no interface number 1 [ 454.894611][ T25] usb 3-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 454.908501][ T25] usb 3-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 454.920068][ T25] usb 3-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 454.937285][ T25] usb 3-1: config 129 interface 135 has no altsetting 0 [ 454.950374][ T25] usb 3-1: config 129 interface 5 has no altsetting 0 [ 455.262783][ T25] usb 3-1: string descriptor 0 read error: -22 [ 455.269970][ T25] usb 3-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.62 [ 455.279770][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.335867][ T8218] loop3: detected capacity change from 0 to 512 [ 455.414229][ T25] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 455.423154][ T25] usb 3-1: MIDIStreaming interface descriptor not found [ 455.442617][ T8218] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 455.644507][ T8218] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 455.742276][ T5883] dvb_usb_rtl28xxu 1-1:0.0: chip type detection failed -110 [ 455.750087][ T5883] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 455.769169][ T25] usb 3-1: USB disconnect, device number 10 [ 455.771807][ T8218] EXT4-fs (loop3): 1 truncate cleaned up [ 455.783160][ T8218] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 455.905981][ T8173] bridge0: port 1(bridge_slave_0) entered blocking state [ 455.913889][ T8173] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.921905][ T8173] bridge_slave_0: entered allmulticast mode [ 455.931203][ T8173] bridge_slave_0: entered promiscuous mode [ 456.025038][ T8173] bridge0: port 2(bridge_slave_1) entered blocking state [ 456.032837][ T8173] bridge0: port 2(bridge_slave_1) entered disabled state [ 456.040664][ T8173] bridge_slave_1: entered allmulticast mode [ 456.050002][ T8173] bridge_slave_1: entered promiscuous mode [ 456.117403][ T10] usb 1-1: USB disconnect, device number 10 [ 456.228632][ T8173] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 456.313503][ T8173] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 456.318577][ T6011] udevd[6011]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:129.5/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 456.441589][ T5812] Bluetooth: hci3: command tx timeout [ 457.005829][ T8173] team0: Port device team_slave_0 added [ 457.050951][ T8173] team0: Port device team_slave_1 added [ 457.283042][ T3807] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 457.292071][ T3807] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 457.503371][ T5804] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 457.554628][ T29] audit: type=1326 audit(1732672059.838:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8243 comm="syz.2.729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e5f97e819 code=0x7ffc0000 [ 457.578435][ T29] audit: type=1326 audit(1732672059.838:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8243 comm="syz.2.729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f3e5f97d0b7 code=0x7ffc0000 [ 457.604577][ T29] audit: type=1326 audit(1732672059.838:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8243 comm="syz.2.729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e5f97e819 code=0x7ffc0000 [ 457.627895][ T29] audit: type=1326 audit(1732672059.838:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8243 comm="syz.2.729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=63 compat=0 ip=0x7f3e5f97e819 code=0x7ffc0000 [ 457.650637][ T29] audit: type=1326 audit(1732672059.838:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8243 comm="syz.2.729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e5f97e819 code=0x7ffc0000 [ 457.685005][ T8173] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 457.692530][ T8173] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 457.720327][ T8173] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 457.829810][ T8173] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 457.837317][ T8173] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 457.864093][ T8173] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 458.040448][ T3842] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 458.048977][ T3842] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 458.507439][ T5812] Bluetooth: hci3: command tx timeout [ 458.655174][ T8173] hsr_slave_0: entered promiscuous mode [ 458.708932][ T8173] hsr_slave_1: entered promiscuous mode [ 458.842200][ T8173] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 458.850066][ T8173] Cannot create hsr debugfs directory [ 458.871394][ T8258] netlink: 'syz.0.736': attribute type 29 has an invalid length. [ 458.883348][ T8259] netlink: 'syz.0.736': attribute type 29 has an invalid length. [ 458.897677][ T8258] netlink: 500 bytes leftover after parsing attributes in process `syz.0.736'. [ 458.907791][ T8258] unsupported nla_type 40 [ 459.380614][ T8262] loop0: detected capacity change from 0 to 164 [ 459.899593][ T8271] loop3: detected capacity change from 0 to 128 [ 460.112445][ T29] audit: type=1800 audit(1732672062.348:22): pid=8271 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.738" name="bus" dev="loop3" ino=1048667 res=0 errno=0 [ 460.245924][ T8273] loop2: detected capacity change from 0 to 2048 [ 460.260915][ T8278] loop0: detected capacity change from 0 to 64 [ 460.407885][ T8273] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 460.584621][ T5812] Bluetooth: hci3: command tx timeout [ 461.014275][ T29] audit: type=1804 audit(1732672063.258:23): pid=8281 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.738" name="/newroot/175/file0/bus" dev="loop3" ino=1048667 res=1 errno=0 [ 461.357368][ T8173] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 461.493210][ T8173] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 461.575964][ T8173] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 461.659484][ T8173] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 462.000899][ T8292] syz.3.744 (8292) used greatest stack depth: 4440 bytes left [ 462.178480][ T8289] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 462.185165][ T8289] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 462.366684][ T8289] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 462.373282][ T8289] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 462.447370][ T8289] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 462.466463][ T8289] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 462.473192][ T8289] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 462.529137][ T8289] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 462.535772][ T8289] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 462.645664][ T8173] 8021q: adding VLAN 0 to HW filter on device bond0 [ 462.667126][ T8289] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 462.724295][ T8289] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 462.730900][ T8289] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 462.741363][ T8289] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 462.884022][ T8173] 8021q: adding VLAN 0 to HW filter on device team0 [ 463.105899][ T4683] bridge0: port 1(bridge_slave_0) entered blocking state [ 463.113707][ T4683] bridge0: port 1(bridge_slave_0) entered forwarding state [ 463.135038][ T4683] bridge0: port 2(bridge_slave_1) entered blocking state [ 463.142838][ T4683] bridge0: port 2(bridge_slave_1) entered forwarding state [ 463.338931][ T8173] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 463.350743][ T8173] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 463.624170][ T25] IPVS: starting estimator thread 0... [ 463.654049][ T8314] IPVS: sh: TCP 172.20.20.170:0 - no destination available [ 463.733544][ T8318] IPVS: using max 240 ests per chain, 12000 per kthread [ 463.932042][ T5812] Bluetooth: hci0: command 0x0c1a tx timeout [ 464.423108][ T5812] Bluetooth: hci1: command 0x0406 tx timeout [ 464.501648][ T5812] Bluetooth: hci4: command 0x0406 tx timeout [ 464.583297][ T5812] Bluetooth: hci2: command 0x0c1a tx timeout [ 464.819561][ T5812] Bluetooth: hci3: command 0x0c1a tx timeout [ 464.947177][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 464.953995][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 465.376630][ T8333] loop3: detected capacity change from 0 to 1764 [ 465.387720][ T8333] iso9660: Unknown parameter '01777777777777777777777' [ 465.563409][ T1951] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 466.009188][ T5812] Bluetooth: hci0: command 0x0c1a tx timeout [ 466.118246][ T1951] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 466.129731][ T1951] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 466.141228][ T1951] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 466.151380][ T1951] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 466.203348][ T1951] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 466.212971][ T1951] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 466.221422][ T1951] usb 1-1: Manufacturer: syz [ 466.262053][ T8173] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 466.286213][ T1951] usb 1-1: config 0 descriptor?? [ 466.563023][ T5812] Bluetooth: hci1: command 0x0406 tx timeout [ 466.584823][ T5812] Bluetooth: hci4: command 0x0406 tx timeout [ 466.696387][ T5812] Bluetooth: hci2: command 0x0c1a tx timeout [ 466.838535][ T8352] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 466.908396][ T5812] Bluetooth: hci3: command 0x0c1a tx timeout [ 467.055435][ T1951] appleir 0003:05AC:8243.0013: unknown main item tag 0x0 [ 467.079800][ T1951] appleir 0003:05AC:8243.0013: No inputs registered, leaving [ 467.244870][ T1951] appleir 0003:05AC:8243.0013: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 467.519287][ T1951] usb 1-1: USB disconnect, device number 11 [ 468.407265][ T8173] veth0_vlan: entered promiscuous mode [ 468.440805][ T8173] veth1_vlan: entered promiscuous mode [ 468.530191][ T8173] veth0_macvtap: entered promiscuous mode [ 468.552735][ T8173] veth1_macvtap: entered promiscuous mode [ 468.585054][ T5812] Bluetooth: hci1: command 0x0406 tx timeout [ 468.605827][ T8173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 468.616673][ T8173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 468.628109][ T8173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 468.639233][ T8173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 468.649370][ T8173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 468.662130][ T8173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 468.675905][ T8173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 468.687181][ T8173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 468.697379][ T8173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 468.708176][ T8173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 468.722906][ T8173] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 468.740825][ T8173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 468.744932][ T5812] Bluetooth: hci2: command 0x0c1a tx timeout [ 468.751619][ T8173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 468.771891][ T8173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 468.782667][ T8173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 468.792862][ T8173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 468.803754][ T8173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 468.813897][ T8173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 468.825632][ T8173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 468.835798][ T8173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 468.846570][ T8173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 468.864423][ T8173] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 468.918353][ T8372] input: syz1 as /devices/virtual/input/input19 [ 468.996074][ T8173] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.007427][ T8173] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.018508][ T8173] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.029055][ T8173] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.075618][ T5812] Bluetooth: hci3: command 0x0c1a tx timeout [ 470.241813][ T8378] loop2: detected capacity change from 0 to 32768 [ 471.212157][ T10] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 471.431417][ T5864] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 471.483319][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 471.494070][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 471.587533][ T10] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 471.597637][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.606118][ T10] usb 4-1: Product: syz [ 471.610528][ T10] usb 4-1: Manufacturer: syz [ 471.615497][ T10] usb 4-1: SerialNumber: syz [ 471.632722][ T5864] usb 3-1: Using ep0 maxpacket: 16 [ 471.751649][ T5864] usb 3-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice=a7.38 [ 471.762643][ T5864] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.770941][ T5864] usb 3-1: Product: syz [ 471.775814][ T5864] usb 3-1: Manufacturer: syz [ 471.780651][ T5864] usb 3-1: SerialNumber: syz [ 472.049028][ T8400] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 472.315299][ T5864] usb 3-1: config 0 descriptor?? [ 472.505061][ T5864] usb 3-1: selecting invalid altsetting 1 [ 472.777362][ T5864] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 472.799169][ T10] usb 4-1: 0:2 : does not exist [ 473.027416][ T10] usb 4-1: USB disconnect, device number 19 [ 473.145565][ T8404] loop0: detected capacity change from 0 to 4096 [ 473.296877][ T6012] udevd[6012]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 473.391843][ T8404] ntfs3(loop0): Different NTFS sector size (1024) and media sector size (512). [ 473.656043][ T6197] udevd[6197]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 473.867434][ T29] audit: type=1800 audit(1732672076.158:24): pid=8404 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.768" name="bus" dev="loop0" ino=34 res=0 errno=0 [ 474.265381][ T10] usb 3-1: USB disconnect, device number 11 [ 475.835540][ T8454] syzkaller1: entered promiscuous mode [ 475.841397][ T8454] syzkaller1: entered allmulticast mode [ 475.954051][ T8453] loop0: detected capacity change from 0 to 256 [ 475.974976][ T8453] exfat: Deprecated parameter 'utf8' [ 475.980732][ T8453] exfat: Deprecated parameter 'namecase' [ 475.987314][ T8453] exfat: Deprecated parameter 'utf8' [ 476.309250][ T8453] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 476.358462][ T8453] exFAT-fs (loop0): hint_cluster is invalid (1), rewind to the first cluster [ 476.482178][ T8453] exFAT-fs (loop0): error, invalid access to FAT (entry 0x00000000) [ 476.521547][ T29] audit: type=1800 audit(1732672078.808:25): pid=8453 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.773" name="file1" dev="loop0" ino=1048669 res=0 errno=0 [ 476.553357][ T8453] exFAT-fs (loop0): error, invalid access to exfat cache (entry 0x00000000) [ 476.562663][ T8453] exFAT-fs (loop0): error, failed to bmap (inode : ffff8880130dca70 iblock : 0, err : -5) [ 477.739741][ T4858] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 477.748052][ T4858] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 478.003038][ T7932] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 478.011991][ T7932] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 479.300608][ T7932] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.514545][ T7932] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.618769][ T7932] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.652900][ T8485] loop2: detected capacity change from 0 to 4096 [ 479.737080][ T8485] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512). [ 479.799462][ T7932] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.518550][ T7932] bridge_slave_1: left allmulticast mode [ 480.525002][ T7932] bridge_slave_1: left promiscuous mode [ 480.531901][ T7932] bridge0: port 2(bridge_slave_1) entered disabled state [ 480.551484][ T1951] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 480.682133][ T7932] bridge_slave_0: left allmulticast mode [ 480.688054][ T7932] bridge_slave_0: left promiscuous mode [ 480.695071][ T7932] bridge0: port 1(bridge_slave_0) entered disabled state [ 480.882465][ T1951] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 480.894871][ T1951] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 480.905559][ T1951] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 480.915535][ T1951] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.949592][ T8502] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 480.969940][ T1951] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 481.521173][ T1951] usb 1-1: USB disconnect, device number 12 [ 481.979973][ T5805] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 482.017727][ T7932] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 482.028652][ T5805] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 482.050837][ T7932] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 482.110367][ T5805] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 482.139223][ T5805] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 482.191802][ T5805] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 482.202314][ T5805] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 482.204126][ T7932] bond0 (unregistering): Released all slaves [ 482.302987][ T6011] udevd[6011]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 483.556463][ T8540] loop0: detected capacity change from 0 to 1024 [ 483.643700][ T8540] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 483.759065][ T8513] chnl_net:caif_netlink_parms(): no params data found [ 483.950039][ T8540] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.800: Invalid block bitmap block 0 in block_group 0 [ 483.989636][ T8540] Quota error (device loop0): write_blk: dquota write failed [ 483.998618][ T8540] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 484.009169][ T8540] EXT4-fs error (device loop0): ext4_acquire_dquot:6938: comm syz.0.800: Failed to acquire dquot type 0 [ 484.076379][ T8540] EXT4-fs error (device loop0): ext4_free_blocks:6589: comm syz.0.800: Freeing blocks not in datazone - block = 0, count = 4096 [ 484.106302][ T7932] hsr_slave_0: left promiscuous mode [ 484.107315][ T8540] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.800: Invalid inode bitmap blk 0 in block_group 0 [ 484.136300][ T58] Quota error (device loop0): do_check_range: Getting block 0 out of range 1-8 [ 484.145859][ T58] EXT4-fs error (device loop0): ext4_release_dquot:6961: comm kworker/u8:3: Failed to release dquot type 0 [ 484.182204][ T7932] hsr_slave_1: left promiscuous mode [ 484.184176][ T8540] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem [ 484.205342][ T8540] EXT4-fs (loop0): 1 orphan inode deleted [ 484.213765][ T8540] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 484.214617][ T7932] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 484.239576][ T7932] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 484.394021][ T5805] Bluetooth: hci3: command tx timeout [ 484.396151][ T7932] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 484.407486][ T7932] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 484.562571][ T7932] veth1_macvtap: left promiscuous mode [ 484.568362][ T7932] veth0_macvtap: left promiscuous mode [ 484.574595][ T7932] veth1_vlan: left promiscuous mode [ 484.580202][ T7932] veth0_vlan: left promiscuous mode [ 484.679658][ T8558] loop6: detected capacity change from 0 to 256 [ 484.772546][ T8540] EXT4-fs error (device loop0): ext4_readdir:261: inode #2: block 16: comm syz.0.800: path /182/file2: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 484.871560][ T5864] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 485.007075][ T8540] EXT4-fs error (device loop0): ext4_search_dir:1505: inode #2: block 16: comm syz.0.800: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 485.208691][ T5864] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 485.220580][ T5864] usb 3-1: New USB device found, idVendor=056a, idProduct=0314, bcdDevice= 0.00 [ 485.230690][ T5864] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.470854][ T8540] syz.0.800 (8540) used greatest stack depth: 4312 bytes left [ 485.594950][ T5802] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 485.810737][ T5864] usb 3-1: config 0 descriptor?? [ 485.884269][ T8558] FAT-fs (loop6): Directory bread(block 64) failed [ 485.892742][ T8558] FAT-fs (loop6): Directory bread(block 65) failed [ 485.899679][ T8558] FAT-fs (loop6): Directory bread(block 66) failed [ 485.907743][ T8558] FAT-fs (loop6): Directory bread(block 67) failed [ 485.916278][ T8558] FAT-fs (loop6): Directory bread(block 68) failed [ 485.924208][ T8558] FAT-fs (loop6): Directory bread(block 69) failed [ 485.932711][ T8558] FAT-fs (loop6): Directory bread(block 70) failed [ 485.939513][ T8558] FAT-fs (loop6): Directory bread(block 71) failed [ 485.947882][ T8558] FAT-fs (loop6): Directory bread(block 72) failed [ 485.955794][ T8558] FAT-fs (loop6): Directory bread(block 73) failed [ 485.982278][ T8562] loop3: detected capacity change from 0 to 128 [ 486.192555][ T29] audit: type=1800 audit(1732672088.448:26): pid=8562 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.804" name="bus" dev="loop3" ino=1048674 res=0 errno=0 [ 486.264252][ T5864] wacom 0003:056A:0314.0014: unknown main item tag 0x0 [ 486.278332][ T5864] wacom 0003:056A:0314.0014: unknown main item tag 0x0 [ 486.287012][ T5864] wacom 0003:056A:0314.0014: unknown main item tag 0x0 [ 486.294466][ T5864] wacom 0003:056A:0314.0014: unknown main item tag 0x0 [ 486.301778][ T5864] wacom 0003:056A:0314.0014: unknown main item tag 0x0 [ 486.309020][ T5864] wacom 0003:056A:0314.0014: unknown main item tag 0x0 [ 486.316416][ T5864] wacom 0003:056A:0314.0014: unknown main item tag 0x0 [ 486.427116][ T7932] team0 (unregistering): Port device team_slave_1 removed [ 486.431805][ T5805] Bluetooth: hci3: command tx timeout [ 486.487282][ T5864] wacom 0003:056A:0314.0014: Unknown device_type for 'HID 056a:0314'. Assuming pen. [ 486.519667][ T7932] team0 (unregistering): Port device team_slave_0 removed [ 486.636360][ T5864] wacom 0003:056A:0314.0014: hidraw0: USB HID v0.00 Device [HID 056a:0314] on usb-dummy_hcd.2-1/input0 [ 486.653379][ T5864] input: Wacom Intuos Pro S Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:0314.0014/input/input20 [ 486.664875][ T8566] loop0: detected capacity change from 0 to 2048 [ 486.982079][ T5864] usb 3-1: USB disconnect, device number 12 [ 486.997298][ T29] audit: type=1804 audit(1732672089.288:27): pid=8563 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.804" name="/newroot/195/file0/bus" dev="loop3" ino=1048674 res=1 errno=0 [ 487.183559][ T8566] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 487.198538][ T8566] ext4 filesystem being mounted at /183/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 487.294177][ T8566] fs-verity: sha512 using implementation "sha512-generic" [ 487.819456][ T8513] bridge0: port 1(bridge_slave_0) entered blocking state [ 487.827481][ T8513] bridge0: port 1(bridge_slave_0) entered disabled state [ 487.835585][ T8513] bridge_slave_0: entered allmulticast mode [ 487.845001][ T8513] bridge_slave_0: entered promiscuous mode [ 488.144446][ T8575] loop6: detected capacity change from 0 to 32768 [ 488.159740][ T8513] bridge0: port 2(bridge_slave_1) entered blocking state [ 488.167827][ T8513] bridge0: port 2(bridge_slave_1) entered disabled state [ 488.175790][ T8513] bridge_slave_1: entered allmulticast mode [ 488.185218][ T8513] bridge_slave_1: entered promiscuous mode [ 488.254219][ T5802] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 488.465093][ T8513] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 488.506455][ T5805] Bluetooth: hci3: command tx timeout [ 488.572734][ T8513] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 488.601906][ T8575] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 489.196981][ T8513] team0: Port device team_slave_0 added [ 489.283330][ T8513] team0: Port device team_slave_1 added [ 489.521597][ T8583] loop2: detected capacity change from 0 to 32768 [ 489.539771][ T8585] loop3: detected capacity change from 0 to 2048 [ 489.778710][ T8583] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present! [ 489.800420][ T8585] EXT4-fs error (device loop3): ext4_orphan_get:1415: comm syz.3.811: bad orphan inode 8192 [ 489.815882][ T8513] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 489.819124][ T7914] ocfs2: Unmounting device (7,6) on (node local) [ 489.824561][ T8513] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 489.861927][ T8513] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 489.886740][ T8513] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 489.890424][ T8585] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 489.894073][ T8513] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 489.894234][ T8513] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 490.051307][ T8583] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 490.374554][ T8583] (syz.2.809,8583,1):ocfs2_remove_inode_range:1794 ERROR: status = -22 [ 490.383400][ T8583] (syz.2.809,8583,1):__ocfs2_change_file_space:2045 ERROR: status = -22 [ 490.529835][ T29] audit: type=1800 audit(1732672092.828:28): pid=8585 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.811" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 490.596693][ T5805] Bluetooth: hci3: command tx timeout [ 490.733429][ T8513] hsr_slave_0: entered promiscuous mode [ 490.779268][ T5804] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 490.804636][ T8513] hsr_slave_1: entered promiscuous mode [ 490.822557][ T5817] ocfs2: Unmounting device (7,2) on (node local) [ 490.872144][ T8513] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 490.881926][ T8513] Cannot create hsr debugfs directory [ 490.936733][ T8596] loop6: detected capacity change from 0 to 1024 [ 491.051838][ T8596] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 491.132114][ T8596] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 491.141812][ T8596] EXT4-fs (loop6): orphan cleanup on readonly fs [ 491.171444][ T8596] EXT4-fs error (device loop6): ext4_free_blocks:6589: comm syz.6.812: Freeing blocks not in datazone - block = 0, count = 4096 [ 491.272407][ T8596] EXT4-fs (loop6): 1 orphan inode deleted [ 491.280134][ T8596] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 491.892370][ T7914] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 492.882037][ T1951] psmouse serio4: Failed to reset mouse on : -5 [ 493.024554][ T8619] loop6: detected capacity change from 0 to 128 [ 493.106477][ T29] audit: type=1800 audit(1732672095.408:29): pid=8619 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.819" name="bus" dev="loop6" ino=1048677 res=0 errno=0 [ 493.372681][ T8513] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 493.449670][ T8513] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 493.523169][ T8513] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 493.572359][ T8513] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 493.805057][ T29] audit: type=1804 audit(1732672096.108:30): pid=8626 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.819" name="/newroot/23/file0/bus" dev="loop6" ino=1048677 res=1 errno=0 [ 493.849305][ T8628] loop2: detected capacity change from 0 to 512 [ 493.945788][ T8628] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 493.977107][ T8628] System zones: 0-2, 18-18, 34-34 [ 494.145659][ T8628] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.821: bg 0: block 248: padding at end of block bitmap is not set [ 494.200467][ T8628] Quota error (device loop2): write_blk: dquota write failed [ 494.208661][ T8628] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 494.219427][ T8628] EXT4-fs error (device loop2): ext4_acquire_dquot:6938: comm syz.2.821: Failed to acquire dquot type 1 [ 494.353268][ T8513] 8021q: adding VLAN 0 to HW filter on device bond0 [ 494.456476][ T8513] 8021q: adding VLAN 0 to HW filter on device team0 [ 494.493849][ T8628] EXT4-fs (loop2): 1 truncate cleaned up [ 494.503094][ T8628] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 494.516300][ T8628] ext4 filesystem being mounted at /200/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 494.572717][ T5069] bridge0: port 1(bridge_slave_0) entered blocking state [ 494.580374][ T5069] bridge0: port 1(bridge_slave_0) entered forwarding state [ 494.684673][ T5069] bridge0: port 2(bridge_slave_1) entered blocking state [ 494.692477][ T5069] bridge0: port 2(bridge_slave_1) entered forwarding state [ 495.089573][ T8636] loop6: detected capacity change from 0 to 512 [ 495.277168][ T8636] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 495.324813][ T5817] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 495.373740][ T8636] EXT4-fs (loop6): 1 truncate cleaned up [ 495.382236][ T8636] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 495.928662][ T7914] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 496.052709][ T5857] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 496.319597][ T5857] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 496.329303][ T5857] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.400078][ T5857] usb 3-1: config 0 descriptor?? [ 497.237594][ T8653] loop6: detected capacity change from 0 to 32768 [ 497.373474][ T8513] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 497.413860][ T8653] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 497.451435][ T1951] misc userio: Buffer overflowed, userio client isn't keeping up [ 497.622152][ T7914] ocfs2: Unmounting device (7,6) on (node local) [ 497.870950][ T5857] usb 3-1: Cannot set autoneg [ 497.879047][ T5857] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 497.927788][ T5857] usb 3-1: USB disconnect, device number 13 [ 498.554539][ T1951] input: PS/2 Generic Mouse as /devices/serio4/input/input23 [ 498.828031][ T1951] psmouse serio4: Failed to enable mouse on [ 499.694946][ T8513] veth0_vlan: entered promiscuous mode [ 499.726037][ T8513] veth1_vlan: entered promiscuous mode [ 499.772655][ T8693] loop6: detected capacity change from 0 to 1 [ 499.812004][ T8513] veth0_macvtap: entered promiscuous mode [ 499.833030][ T8513] veth1_macvtap: entered promiscuous mode [ 499.884352][ T8513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 499.897058][ T8513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.907972][ T8513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 499.918782][ T8513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.929003][ T8513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 499.939757][ T8513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.951621][ T8513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 499.963171][ T8513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.973409][ T8513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 499.984219][ T8513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 500.001263][ T8513] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 500.019258][ T8513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 500.031611][ T8513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 500.041859][ T8513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 500.052659][ T8513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 500.063243][ T8513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 500.074021][ T8513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 500.084141][ T8513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 500.097388][ T8513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 500.108865][ T8513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 500.120087][ T8513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 500.134921][ T8513] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 500.225259][ T8513] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.234507][ T8513] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.244054][ T8513] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.253264][ T8513] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.381792][ T8693] Dev loop6: unable to read RDB block 1 [ 500.388022][ T8693] loop6: unable to read partition table [ 500.425425][ T8693] loop6: partition table beyond EOD, truncated [ 500.432966][ T8693] loop_reread_partitions: partition scan of loop6 (被xڬdƤݡ [ 500.432966][ T8693] ) failed (rc=-5) [ 500.461876][ T8694] block nbd6: shutting down sockets [ 500.471876][ T5162] Dev loop6: unable to read RDB block 1 [ 500.477896][ T5162] loop6: unable to read partition table [ 500.513713][ T5162] loop6: partition table beyond EOD, truncated [ 501.316838][ T8708] loop2: detected capacity change from 0 to 512 [ 501.561804][ T8708] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 501.574839][ T8708] EXT4-fs warning (device loop2): dx_probe:881: Enable large directory feature to access it [ 501.585470][ T8708] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.837: Corrupt directory, running e2fsck is recommended [ 501.780297][ T8708] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 501.826201][ T8708] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.837: corrupted in-inode xattr: invalid ea_ino [ 501.865809][ T8722] loop6: detected capacity change from 0 to 256 [ 501.920234][ T8708] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.837: couldn't read orphan inode 15 (err -117) [ 502.160250][ T8722] FAT-fs (loop6): Directory bread(block 1285) failed [ 502.271730][ T8708] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 502.375486][ T8708] EXT4-fs error (device loop2): __ext4_remount:6749: comm syz.2.837: Abort forced by user [ 502.482761][ T8708] EXT4-fs (loop2): Remounting filesystem read-only [ 502.489573][ T8708] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 502.544590][ T8730] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 502.996727][ T5817] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 503.837611][ T8743] loop6: detected capacity change from 0 to 1 [ 504.050676][ T8743] Dev loop6: unable to read RDB block 1 [ 504.057845][ T8743] loop6: AHDI p2 p3 p4 [ 504.063725][ T8743] loop6: partition table partially beyond EOD, truncated [ 504.073632][ T8743] loop6: p2 start 3702082535 is beyond EOD, truncated [ 504.080717][ T8743] loop6: p3 start 1792975548 is beyond EOD, truncated [ 505.129654][ T8760] sctp: [Deprecated]: syz.6.848 (pid 8760) Use of struct sctp_assoc_value in delayed_ack socket option. [ 505.129654][ T8760] Use struct sctp_sack_info instead [ 505.200984][ T1951] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 505.490492][ T1951] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 505.503032][ T1951] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 505.513022][ T1951] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 505.664431][ T1951] usb 4-1: config 0 descriptor?? [ 505.981968][ T1951] usbhid 4-1:0.0: can't add hid device: -71 [ 505.988936][ T1951] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 506.116688][ T1951] usb 4-1: USB disconnect, device number 20 [ 506.588323][ T1951] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 506.802531][ T1951] usb 4-1: Using ep0 maxpacket: 16 [ 506.861955][ T1951] usb 4-1: config 0 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 506.873519][ T1951] usb 4-1: config 0 interface 0 has no altsetting 0 [ 506.880468][ T1951] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b34, bcdDevice= 0.00 [ 506.890063][ T1951] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 506.976335][ T10] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 507.032266][ T1951] usb 4-1: config 0 descriptor?? [ 507.183319][ T10] usb 7-1: Using ep0 maxpacket: 16 [ 507.242026][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 507.254293][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 507.267022][ T10] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 507.281748][ T10] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 507.291324][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 507.500220][ T1951] corsair 0003:1B1C:1B34.0015: unknown main item tag 0x0 [ 507.508202][ T1951] corsair 0003:1B1C:1B34.0015: unknown main item tag 0x0 [ 507.516155][ T1951] corsair 0003:1B1C:1B34.0015: unknown main item tag 0x0 [ 507.523620][ T1951] corsair 0003:1B1C:1B34.0015: unknown main item tag 0x0 [ 507.531004][ T1951] corsair 0003:1B1C:1B34.0015: unknown main item tag 0x0 [ 507.586104][ T10] usb 7-1: config 0 descriptor?? [ 507.714111][ T1951] corsair 0003:1B1C:1B34.0015: hidraw0: USB HID v0.05 Device [HID 1b1c:1b34] on usb-dummy_hcd.3-1/input0 [ 507.960331][ T1951] usb 4-1: USB disconnect, device number 21 [ 508.086671][ T10] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 508.206720][ T10] input: HID 045e:07da as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:045E:07DA.0016/input/input24 [ 508.402657][ T7932] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 508.410767][ T7932] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 508.519989][ T5069] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 508.529098][ T5069] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 508.722699][ T10] microsoft 0003:045E:07DA.0016: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.6-1/input0 [ 508.907054][ T10] usb 7-1: USB disconnect, device number 2 [ 509.983791][ T8809] loop6: detected capacity change from 0 to 1024 [ 510.002768][ T8809] hfsplus: Unknown parameter 'decompose' [ 510.055082][ T8805] loop2: detected capacity change from 0 to 32768 [ 510.076308][ T8806] loop3: detected capacity change from 0 to 128 [ 510.413831][ T29] audit: type=1800 audit(1732672112.718:31): pid=8818 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.859" name="bus" dev="loop3" ino=1048683 res=0 errno=0 [ 510.782788][ T8805] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 511.240534][ T8827] loop0: detected capacity change from 0 to 256 [ 511.244489][ T5817] ocfs2: Unmounting device (7,2) on (node local) [ 511.272745][ T29] audit: type=1804 audit(1732672113.558:32): pid=8818 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.859" name="/newroot/205/file0/bus" dev="loop3" ino=1048683 res=1 errno=0 [ 512.269371][ T8827] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 512.413395][ T5069] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.573774][ T8827] syz.0.864: attempt to access beyond end of device [ 512.573774][ T8827] loop0: rw=524288, sector=280, nr_sectors = 128 limit=256 [ 513.033188][ T5069] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.051574][ T29] audit: type=1800 audit(1732672115.328:33): pid=8827 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.864" name="file1" dev="loop0" ino=1048685 res=0 errno=0 [ 514.060639][ T5812] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 514.076595][ T5812] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 514.105704][ T5812] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 514.234047][ T5812] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 514.264785][ T5812] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 514.275052][ T5812] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 514.289743][ T5069] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.916584][ T5069] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.625896][ T8880] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 515.633176][ T8880] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 515.639937][ T8880] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 515.647643][ T8880] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 515.654445][ T8880] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 515.667574][ T8880] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 515.801009][ T8880] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 515.921615][ T5069] bridge_slave_1: left allmulticast mode [ 515.927737][ T5069] bridge_slave_1: left promiscuous mode [ 515.934631][ T5069] bridge0: port 2(bridge_slave_1) entered disabled state [ 516.130372][ T5069] bridge_slave_0: left allmulticast mode [ 516.136549][ T5069] bridge_slave_0: left promiscuous mode [ 516.143925][ T5069] bridge0: port 1(bridge_slave_0) entered disabled state [ 516.706763][ T8890] loop3: detected capacity change from 0 to 128 [ 517.257795][ T29] audit: type=1800 audit(1732672119.558:34): pid=8890 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.879" name="bus" dev="loop3" ino=1048689 res=0 errno=0 [ 517.374883][ T5069] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 517.434203][ T5069] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 517.514829][ T5069] bond0 (unregistering): Released all slaves [ 517.791343][ T5812] Bluetooth: hci3: command 0x041b tx timeout [ 517.797725][ T5812] Bluetooth: hci2: command 0x0c1a tx timeout [ 517.804156][ T5812] Bluetooth: hci4: command 0x0406 tx timeout [ 517.812015][ T5812] Bluetooth: hci1: command 0x0406 tx timeout [ 517.818298][ T5812] Bluetooth: hci0: command 0x0c1a tx timeout [ 518.001427][ T29] audit: type=1804 audit(1732672120.298:35): pid=8900 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.879" name="/newroot/209/file0/bus" dev="loop3" ino=1048689 res=1 errno=0 [ 518.922508][ T5069] hsr_slave_0: left promiscuous mode [ 518.975233][ T5069] hsr_slave_1: left promiscuous mode [ 519.083459][ T5069] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 519.091657][ T5069] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 519.157477][ T5069] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 519.165659][ T5069] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 519.298259][ T5069] veth1_macvtap: left promiscuous mode [ 519.306413][ T5069] veth0_macvtap: left promiscuous mode [ 519.312584][ T5069] veth1_vlan: left promiscuous mode [ 519.318192][ T5069] veth0_vlan: left promiscuous mode [ 519.917609][ T5805] Bluetooth: hci3: command 0x041b tx timeout [ 520.460415][ T5069] team0 (unregistering): Port device team_slave_1 removed [ 520.505053][ T5069] team0 (unregistering): Port device team_slave_0 removed [ 520.888904][ T8853] chnl_net:caif_netlink_parms(): no params data found [ 521.941401][ T5805] Bluetooth: hci3: command 0x041b tx timeout [ 522.383906][ T8957] loop2: detected capacity change from 0 to 128 [ 522.502137][ T29] audit: type=1800 audit(1732672124.798:36): pid=8957 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.896" name="bus" dev="loop2" ino=1048691 res=0 errno=0 [ 523.044880][ T29] audit: type=1804 audit(1732672125.308:37): pid=8966 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.896" name="/newroot/220/file0/bus" dev="loop2" ino=1048691 res=1 errno=0 [ 523.100204][ T8853] bridge0: port 1(bridge_slave_0) entered blocking state [ 523.108075][ T8853] bridge0: port 1(bridge_slave_0) entered disabled state [ 523.116379][ T8853] bridge_slave_0: entered allmulticast mode [ 523.125757][ T8853] bridge_slave_0: entered promiscuous mode [ 523.271708][ T8853] bridge0: port 2(bridge_slave_1) entered blocking state [ 523.279426][ T8853] bridge0: port 2(bridge_slave_1) entered disabled state [ 523.287498][ T8853] bridge_slave_1: entered allmulticast mode [ 523.296609][ T8853] bridge_slave_1: entered promiscuous mode [ 523.660811][ T1951] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 523.713410][ T8853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 523.774718][ T8853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 523.875474][ T1951] usb 4-1: Using ep0 maxpacket: 8 [ 523.964752][ T1951] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 523.974472][ T1951] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 523.982948][ T1951] usb 4-1: Product: syz [ 523.987365][ T1951] usb 4-1: Manufacturer: syz [ 523.992412][ T1951] usb 4-1: SerialNumber: syz [ 524.025877][ T5805] Bluetooth: hci3: command 0x041b tx timeout [ 524.060356][ T1951] usb 4-1: config 0 descriptor?? [ 524.311303][ T1951] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 524.345071][ T8853] team0: Port device team_slave_0 added [ 524.430085][ T8853] team0: Port device team_slave_1 added [ 524.738280][ T8853] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 524.747001][ T8853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 524.775327][ T8853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 524.814258][ T8853] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 524.822556][ T8853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 524.849142][ T8853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 525.242424][ T8853] hsr_slave_0: entered promiscuous mode [ 525.313792][ T8853] hsr_slave_1: entered promiscuous mode [ 525.333836][ T1951] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 525.372805][ T1951] usb 4-1: USB disconnect, device number 22 [ 525.428215][ T8853] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 525.436220][ T8853] Cannot create hsr debugfs directory [ 526.103613][ T5805] Bluetooth: hci3: command 0x041b tx timeout [ 526.285539][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 526.292838][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 526.566789][ T9001] tls_set_device_offload_rx: netdev not found [ 527.515544][ T8853] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 527.724188][ T8853] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 528.181482][ T5805] Bluetooth: hci3: command 0x041b tx timeout [ 528.188661][ T8853] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 528.313694][ T8853] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 528.337347][ T9028] loop3: detected capacity change from 0 to 128 [ 528.430739][ T29] audit: type=1800 audit(1732672130.718:38): pid=9028 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.912" name="bus" dev="loop3" ino=1048694 res=0 errno=0 [ 528.713079][ T5864] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 528.880092][ T29] audit: type=1804 audit(1732672131.168:39): pid=9028 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.912" name="/newroot/215/file0/bus" dev="loop3" ino=1048694 res=1 errno=0 [ 529.014744][ T5864] usb 3-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b [ 529.025138][ T5864] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 529.105988][ T5864] usb 3-1: config 0 descriptor?? [ 529.983804][ T8853] 8021q: adding VLAN 0 to HW filter on device bond0 [ 530.312422][ T8853] 8021q: adding VLAN 0 to HW filter on device team0 [ 530.395193][ T4858] bridge0: port 1(bridge_slave_0) entered blocking state [ 530.402973][ T4858] bridge0: port 1(bridge_slave_0) entered forwarding state [ 530.467118][ T5864] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 530.477647][ T5864] asix 3-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 530.488932][ T5864] asix 3-1:0.0: probe with driver asix failed with error -71 [ 530.579964][ T9048] loop6: detected capacity change from 0 to 1024 [ 530.619124][ T4858] bridge0: port 2(bridge_slave_1) entered blocking state [ 530.626922][ T4858] bridge0: port 2(bridge_slave_1) entered forwarding state [ 530.662853][ T5864] usb 3-1: USB disconnect, device number 14 [ 530.923855][ T9048] hfsplus: xattr searching failed [ 531.022154][ T9048] hfsplus: b-tree write err: -5, ino 3 [ 531.606793][ T9056] loop0: detected capacity change from 0 to 128 [ 531.903392][ T9056] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 531.954553][ T5069] hfsplus: b-tree write err: -5, ino 3 [ 532.012330][ T9056] ext4 filesystem being mounted at /216/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 532.607012][ T5802] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 533.703342][ T4683] ===================================================== [ 533.710989][ T4683] BUG: KMSAN: uninit-value in n_tty_lookahead_flow_ctrl+0x2cd/0x300 [ 533.719511][ T4683] n_tty_lookahead_flow_ctrl+0x2cd/0x300 [ 533.725558][ T4683] tty_port_default_lookahead_buf+0x144/0x210 [ 533.732121][ T4683] flush_to_ldisc+0x8ec/0xdb0 [ 533.736985][ T4683] process_scheduled_works+0xae0/0x1c40 [ 533.742925][ T4683] worker_thread+0xea7/0x14f0 [ 533.747828][ T4683] kthread+0x3e2/0x540 [ 533.752398][ T4683] ret_from_fork+0x6d/0x90 [ 533.757463][ T4683] ret_from_fork_asm+0x1a/0x30 [ 533.763014][ T4683] [ 533.765454][ T4683] Uninit was created at: [ 533.769947][ T4683] __kmalloc_noprof+0x923/0x1230 [ 533.775346][ T4683] __tty_buffer_request_room+0x36e/0x6d0 [ 533.781383][ T4683] __tty_insert_flip_string_flags+0x140/0x570 [ 533.794422][ T4683] uart_insert_char+0x39e/0xa10 [ 533.799628][ T4683] serial8250_read_char+0x1a7/0x5d0 [ 533.806463][ T4683] serial8250_handle_irq+0x970/0x1130 [ 533.812380][ T4683] serial8250_default_handle_irq+0x120/0x2b0 [ 533.818581][ T4683] serial8250_interrupt+0xc5/0x360 [ 533.824122][ T4683] __handle_irq_event_percpu+0x118/0xca0 [ 533.829995][ T4683] handle_irq_event+0xef/0x2c0 [ 533.835120][ T4683] handle_edge_irq+0x340/0xfb0 [ 533.840093][ T4683] __common_interrupt+0x97/0x1f0 [ 533.845421][ T4683] common_interrupt+0x92/0xb0 [ 533.850293][ T4683] asm_common_interrupt+0x2b/0x40 [ 533.855713][ T4683] [ 533.858158][ T4683] CPU: 1 UID: 0 PID: 4683 Comm: kworker/u8:25 Not tainted 6.12.0-syzkaller-09567-g7eef7e306d3c #0 [ 533.870722][ T4683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 533.881515][ T4683] Workqueue: events_unbound flush_to_ldisc [ 533.891999][ T4683] ===================================================== [ 533.899076][ T4683] Disabling lock debugging due to kernel taint [ 533.906502][ T4683] Kernel panic - not syncing: kmsan.panic set ... [ 533.913091][ T4683] CPU: 1 UID: 0 PID: 4683 Comm: kworker/u8:25 Tainted: G B 6.12.0-syzkaller-09567-g7eef7e306d3c #0 [ 533.925411][ T4683] Tainted: [B]=BAD_PAGE [ 533.929699][ T4683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 533.939933][ T4683] Workqueue: events_unbound flush_to_ldisc [ 533.945984][ T4683] Call Trace: [ 533.949382][ T4683] [ 533.952429][ T4683] dump_stack_lvl+0x216/0x2d0 [ 533.957446][ T4683] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 533.963513][ T4683] dump_stack+0x1e/0x30 [ 533.967889][ T4683] panic+0x4e2/0xcf0 [ 533.972000][ T4683] ? kmsan_get_metadata+0x51/0x1c0 [ 533.977366][ T4683] kmsan_report+0x2c7/0x2d0 [ 533.982103][ T4683] ? up_read+0x74/0x1e0 [ 533.986486][ T4683] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 533.992551][ T4683] ? __msan_warning+0x95/0x120 [ 533.997562][ T4683] ? n_tty_lookahead_flow_ctrl+0x2cd/0x300 [ 534.003607][ T4683] ? tty_port_default_lookahead_buf+0x144/0x210 [ 534.010064][ T4683] ? flush_to_ldisc+0x8ec/0xdb0 [ 534.015107][ T4683] ? process_scheduled_works+0xae0/0x1c40 [ 534.021051][ T4683] ? worker_thread+0xea7/0x14f0 [ 534.026128][ T4683] ? kthread+0x3e2/0x540 [ 534.030546][ T4683] ? ret_from_fork+0x6d/0x90 [ 534.035333][ T4683] ? ret_from_fork_asm+0x1a/0x30 [ 534.040679][ T4683] ? check_preempt_wakeup_fair+0x11a8/0x1720 [ 534.046898][ T4683] ? kmsan_get_metadata+0x13e/0x1c0 [ 534.052344][ T4683] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 534.058391][ T4683] ? kmsan_get_metadata+0x13e/0x1c0 [ 534.063811][ T4683] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 534.069847][ T4683] __msan_warning+0x95/0x120 [ 534.074634][ T4683] n_tty_lookahead_flow_ctrl+0x2cd/0x300 [ 534.080489][ T4683] ? __pfx_n_tty_lookahead_flow_ctrl+0x10/0x10 [ 534.086875][ T4683] tty_port_default_lookahead_buf+0x144/0x210 [ 534.093236][ T4683] ? __pfx_tty_port_default_lookahead_buf+0x10/0x10 [ 534.100211][ T4683] flush_to_ldisc+0x8ec/0xdb0 [ 534.105075][ T4683] ? __pfx_tty_port_default_lookahead_buf+0x10/0x10 [ 534.111884][ T4683] ? __pfx_flush_to_ldisc+0x10/0x10 [ 534.117265][ T4683] process_scheduled_works+0xae0/0x1c40 [ 534.123057][ T4683] worker_thread+0xea7/0x14f0 [ 534.127958][ T4683] kthread+0x3e2/0x540 [ 534.132185][ T4683] ? __pfx_worker_thread+0x10/0x10 [ 534.137509][ T4683] ? __pfx_kthread+0x10/0x10 [ 534.142261][ T4683] ret_from_fork+0x6d/0x90 [ 534.146934][ T4683] ? __pfx_kthread+0x10/0x10 [ 534.151688][ T4683] ret_from_fork_asm+0x1a/0x30 [ 534.156666][ T4683] [ 534.160076][ T4683] Kernel Offset: disabled [ 534.164493][ T4683] Rebooting in 86400 seconds..