last executing test programs: 29.743638125s ago: executing program 3 (id=3354): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003780)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) r1 = syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2008002, &(0x7f0000000080), 0x1, 0x53d, &(0x7f0000000a80)="$eJzs3c9vHFcdAPDvjH82TesEeoAKSIBCQFF2400bVb20uYBQVQlRcUAcUmNvLJNdr/GuS20s4f4NIIHECf4EDkgckHriwI0jEgeEVA5IASxQjATSopkdO1t7TZbsepd6Px9pMvPmzcz3vWxm39u3m3kBTKyrEbEXEbMR8VZELBT7k2KJ1zpLdtzD/d3lg/3d5STa7Tf/muT52b7oOifzdHHN+Yj42pcjvpWcjNvc3rm/VKtVN4t0uVXfKDe3d26s1ZdWq6vV9Url9uLtmy/feqkytLpeqf/8wZfWXv/6r375yfd/u/fF72XFuljkdddjmDpVnzmKk5mOiNfPItgYTBXr2TGXgyeTRsRHIuIz+f2/EFP5v04A4DxrtxeivdCdBgDOuzQfA0vSUkSkadEJKHXG8J6LC2mt0Wxdv9fYWl/pjJVdipn03lqtevPy3O+/kx88k2TpxTwvz8/TlWPpWxFxOSJ+OPdUni4tN2or4+nyAMDEe7q7/Y+If8ylaanU16k9vtUDAD405sddAABg5LT/ADB5tP8AMHn6aP+LL/v3zrwsAMBo+PwPAJNH+w8Ak0f7DwAT5atvvJEt7YPi+dcrb29v3W+8fWOl2rxfqm8tl5Ybmxul1UZjNX9mT/1x16s1GhuLL8bWO+VWtdkqN7d37tYbW+utu/lzve9WZ0ZSKwDgv7l85b3fJRGx98pT+RJdczloq+F8S8ddAGBspgY5WQcBPtTM9gWTq68mPO8k/ObMywKMR8+Hec/33PygH/8PQfzOCP6vXPt4/+P/5niG88X4P0yuJxv/f3Xo5QBGz/g/TK52Ozk+5//sURYAcC4N8BO+9veH1QkBxupxk3kP5ft/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOGcuRsS3I0lL+VzgafZnWipFPBMRl2ImubdWq96MiGfjSkTMzGXpxXEXGgAYUPrnpJj/69rCCxeP584m/5zL1xHx3Z+8+aN3llqtzcVs/9+O9s8dTh9WeXTeAPMKAgBDlrfflWLd9UH+4f7u8uEyyvI8uBP/LqYiXj7Y382XTs50ZDsj5vO+xIW/JzFdnDMfEc9HxNQQ4u+9GxEf61X/JB8buVTMfNodP4rYz4w0fvqB+Gme11lnna+PDqEsMGneuxMRr/W6/9K4mq973//z+TvU4B7c6Vzs8L3voCv+dBFpqkf87J6/2m+MF3/9lRM72wudvHcjnp/uFT85ip+cEv+FPuP/4ROf+sGrp+S1fxpxLXrH745VbtU3ys3tnRtr9aXV6mp1vVK5vXj75su3XqqU8zHq8uFI9Ul/eeX6s6eVLav/hVPiz/es/+zRuZ/rs/4/+9db3/z0o+Tc8fhf+Gzv1/+5nvE7sjbx833GX7rwi1On787ir5xS/8e9/tf7jP/+n3ZW+jwUABiB5vbO/aVarbo50Eb2KXQY1zmxkRWxv4MPu4uDBf1jnEUtnnBj5qz+Vs98Y/qorzjcK38ju+KIq5MOvRYDbTwcVazxvScBo/Hoph93SQAAAAAAAAAAAAAAgNOM4r8ujbuOAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnF//CQAA//+zi8zo") close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=r1, @ANYBLOB="040000000000800008000000", @ANYRES32=r1, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r0}, 0x10) creat(&(0x7f0000000340)='./file0\x00', 0x0) 26.130537018s ago: executing program 3 (id=3360): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000480)={[{@data_writeback}, {@sysvgroups}, {@init_itable}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x100000}}, {@noblock_validity}], [{@fowner_lt}, {@subj_user={'subj_user', 0x3d, '#! '}}, {@func={'func', 0x3d, 'CREDS_CHECK'}}]}, 0x0, 0x4bb, &(0x7f0000002c40)="$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") ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000280)={0x0, 0xfffffffffffffc98}) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0xfffd) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x22, 0x80000, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000340)=ANY=[], 0x5) 22.640935546s ago: executing program 3 (id=3371): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, 0x0, 0x0, 0x0) syz_mount_image$udf(&(0x7f0000000a40), &(0x7f0000000500)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4400, &(0x7f0000000100)=ANY=[@ANYBLOB="73686f72746164000000006d653d3030303030303030303030303030303030b030342c6e6f6164696e6963622c7569643d00", @ANYRESHEX=0x0, @ANYBLOB=',volume=18446744073709551608,\x00'], 0x1, 0xa3a, &(0x7f0000000a80)="$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") prlimit64(0x0, 0xe, &(0x7f0000000340)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x1f}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0xf, 0x0, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r3 = open_tree(r2, &(0x7f0000000640)='\x00', 0x81000) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', r3, &(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r4, &(0x7f0000000540)=""/239, 0xef) 21.483580617s ago: executing program 3 (id=3376): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS(r0, 0x5402, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x7, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x2778) 19.614661558s ago: executing program 3 (id=3382): openat$null(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x800000000000001, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) shmget(0x3, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x30, 0x0, &(0x7f0000000040)=0xb3) futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) 17.847374479s ago: executing program 3 (id=3387): openat$capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000bc0)={&(0x7f00000003c0)}) socket$nl_generic(0x10, 0x3, 0x10) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000580), 0x121401, 0x0) ioctl$TCSBRKP(r1, 0x5425, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = memfd_create(&(0x7f0000000c40)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x9d\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x922\x8e\xc0\xdf:A\x1cO\xb1\x82\x84\xfee\xaa\xe58\xd6\x10%\f\x10\xf3\xbc\x8c\xf5\xef\x9e\x8b\xb9\xf46\x0f`\xfe9U|P\x0e\xadc\xfeq\x1c\xc1\xa1\\b\xf5=\xb0@U\xf4w#(\xf1M\x9d\xcd\xadZ\xfb\xa9iq\xf5;\x93a\xf6\x1c\x87q\xb7\xf2\xf1\xb6\x92A\xbd\x97\t\xfd\xc7\x1f\xfdU}k/\xfd\xaa\xf3\x90\xe3^\xcd\xa7\x1eC\xabP\xc0\x7f`y~\x9c\x91\xe0\x9d\xa0-L\x01\xab\xb6\x98\v3\xd2#\xe3\xb0\x15\x04)\xbc\xce\x83\xd1\xd4\xc0<\x91\xfcZ\xc9.\xb6<\xc8\xed\xb1^\x97O\xe7\x7f\x8b\xabQ\x11`\x9f1I\x1f\xd6Y\x98X\xd5{\xd2\xf5\xea\'\xd7\x1e8s\x8d\xb1Z\xa7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00fy\x00\xe7D\xb5v\xdf!\xf6@l9\xdc\xc4+\xbd\xda\xe6|\xa7\xec0x0) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r6, r5, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r4, 0xb15, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x40, 0x0, "7a58beca39ed2d5a99bbc4bff0ebd3e9bd5a8e"}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000004c0)) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b40800000400000061108c0000200000a6000000000000009500000000"], &(0x7f0000000200)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000080)={0x1}, 0x10, 0xffffffffffffffff}, 0x90) mkdirat(0xffffffffffffffff, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=@gettaction={0x14, 0x1d, 0x1}, 0x14}}, 0x0) 12.567642961s ago: executing program 0 (id=3406): dup(0xffffffffffffffff) syz_usb_connect(0x6, 0x40, &(0x7f0000000400)=ANY=[], 0x0) r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) r1 = openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x2002, 0x0) write$proc_mixer(r1, &(0x7f0000000180)=ANY=[@ANYBLOB=' '], 0xfffffe7e) dup3(r0, r1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140), 0x200, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000000740)=""/102385, 0x18ff1}], 0x1, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x20082, 0x0) syz_io_uring_setup(0x3b0, &(0x7f0000000280)={0x0, 0x5c7b, 0x20}, &(0x7f0000000200), &(0x7f0000000140)=0x0) syz_io_uring_setup(0x5e2, &(0x7f0000000080)={0x0, 0x98c1, 0x800}, &(0x7f0000000340)=0x0, &(0x7f0000000380)) syz_io_uring_submit(r4, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) write$sequencer(r2, &(0x7f0000000080)=[@t={0x81, 0x1, 0x0, 0x0, @generic=0x40005}], 0x8) ioctl$SNDCTL_SEQ_SYNC(r2, 0x5101) ioctl$SNDCTL_SEQ_PANIC(r2, 0x5111) msgget$private(0x0, 0x0) r5 = msgget$private(0x0, 0x47) r6 = socket$inet_udplite(0x2, 0x2, 0x88) sendto$inet(r6, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) msgctl$MSG_INFO(r5, 0xc, &(0x7f00000000c0)=""/67) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x0, &(0x7f0000000080)=0x474c, 0x4) connect$inet(r7, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) 11.24758597s ago: executing program 2 (id=3410): capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000000)) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0xa02000000000000, 0x60, 0x0, 0x0) 10.965482217s ago: executing program 2 (id=3411): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000077c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x2066012, 0x0, 0x0, 0x8}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000009800)="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", 0x2000, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x150, 0x0, 0x0, [{{0x5, 0x3, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}}, {0x0, 0x0, 0x1, 0x0, '\x00'}}, {{0x5, 0x3, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}}, {0x0, 0x0, 0x1, 0x0, '\x00'}}]}, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r2, 0x0, 0x0) 10.144731491s ago: executing program 0 (id=3412): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f00000001c0), 0x0, 0x0) syz_mount_image$udf(&(0x7f0000000a40), &(0x7f0000000500)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4400, &(0x7f0000000100)=ANY=[@ANYBLOB="73686f72746164000000006d653d3030303030303030303030303030303030b030342c6e6f6164696e6963622c7569643d00", @ANYRESHEX=0x0, @ANYBLOB=',volume=18446744073709551608,\x00'], 0x1, 0xa3a, &(0x7f0000000a80)="$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") prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x1f}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0xf, 0x0, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r3 = open_tree(r2, &(0x7f0000000640)='\x00', 0x81000) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', r3, &(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r4, &(0x7f0000000540)=""/239, 0xef) 9.852842147s ago: executing program 2 (id=3413): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8880}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000023c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) accept4(r1, 0x0, 0x0, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000180)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r2, 0x3ba0, &(0x7f0000000240)={0x48, 0x2, r3}) 9.265573751s ago: executing program 0 (id=3415): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x7, {0x0, 0xda5, 0x8, 0x200}}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f000001aa80)={0xffffffffffffffff, 0x1, 0x18}, 0xc) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000003fc0), 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000f40)="b410a1e8252ce0a1a3be3d593e8bf96f9615aea940ed08d314cbc5", 0x1b) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) preadv(r2, &(0x7f0000000340)=[{&(0x7f0000001a80)=""/102398, 0x18ffe}], 0x1, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000640)='mountinfo\x00') preadv(r3, &(0x7f0000000780)=[{&(0x7f0000000000)=""/65, 0x41}], 0x1, 0x91, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0) setxattr$incfs_metadata(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, 0x0, 0x0) r4 = socket(0x1d, 0x2, 0x6) bind$can_j1939(r2, 0x0, 0x0) r5 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, 0x0) removexattr(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000080)=@known='user.incfs.id\x00') ioctl$SOUND_MIXER_READ_DEVMASK(r1, 0xc0044dff, &(0x7f0000004000)) 9.003675735s ago: executing program 4 (id=3416): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) bind$xdp(0xffffffffffffffff, &(0x7f0000000040)={0x2c, 0x2, 0x0, 0x23, r0}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000002000010000000000000000000a00800000000003fc000000140002", @ANYRES16=r0], 0x30}, 0x1, 0x0, 0x0, 0x20004005}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, &(0x7f0000000180)=0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) shmget(0x3, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil) io_submit(0x0, 0x11, 0x0) mlock2(&(0x7f00000b6000/0x2000)=nil, 0x2000, 0x0) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0) preadv(r3, &(0x7f0000000340)=[{&(0x7f0000000080)=""/82, 0x52}], 0x1, 0x0, 0x0) close(r3) r4 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r4, &(0x7f0000000040)={0x2a, 0xffffffff, 0xfffffffe}, 0xc) write(r4, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101f80, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3}) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) 8.687845446s ago: executing program 2 (id=3417): memfd_create(0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="08000000200000714e1fb33ef60a24b2b6089496bbab41a6a4b3c368b8855d012cbd7000fcdbdf259aa6ffffffffffff1a000000140001000000011400ab63fe80000000000000009059fa2555fe48bdfd80df9ffcd7b6da55ff8187ad3de0363612763ac5193f0cdb801e298be26a28042fa57086240613f6bf4d862d677b8ae2b505bfc2f323d784b3e3497c1a72aeefbcaf0897a54e2211bfef77af0859efd1db5d710b05538aa2e29f86bf28532e"], 0x4c}, 0x1, 0x0, 0x0, 0x400c083}, 0x24009010) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x1, 0x9, 0x5, 0xd00, 0xffffffffffffffff, 0x200, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x3, 0x2}, 0x48) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x9) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x1458c2, 0x0) r1 = openat$random(0xffffffffffffff9c, 0x0, 0x88000, 0x0) sendfile(r0, r1, 0x0, 0x15) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_io_uring_setup(0x114, 0x0, &(0x7f0000000700), &(0x7f0000000340)) r3 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r4 = syz_open_dev$radio(&(0x7f0000000780), 0x2, 0x2) readv(r3, &(0x7f0000000500)=[{&(0x7f0000000180)=""/34, 0x22}], 0x1) ioctl$VIDIOC_LOG_STATUS(r4, 0x5646, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_emit_ethernet(0x1e8, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"/488], &(0x7f0000000080)={0x0, 0x2, [0xf4d, 0x41d, 0x811, 0xa61]}) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x25, &(0x7f00000000c0)={r7, @in6={{0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c) read(r4, &(0x7f0000001e80)=""/96, 0x60) write$6lowpan_enable(r3, &(0x7f0000000740)='1', 0x1) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[], 0x0) r8 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r8, 0x0, 0x0) syz_usb_control_io(r8, 0x0, 0x0) syz_usb_control_io$hid(r8, 0x0, &(0x7f00000009c0)={0x2c, &(0x7f00000005c0)=ANY=[@ANYBLOB="29c9c62cdadf0f6e7b9757585f4b06fd747f7da2c06a97db8c8c1babcce4d4da79a513718b06a20b728f8abe01896ad86bfb70a705629f2d10c9f6a0b6de249067431b6e7fb183ca1803c81b899ecb3a014ade3629abf886a80e86ec52ef866923e65d19a70914670f735494088c66b59db1f7716183354017b716da3f08000000000000002bc7571e5ff6"], 0x0, 0x0, 0x0, 0x0}) 8.111296232s ago: executing program 1 (id=3419): r0 = syz_open_dev$sg(0x0, 0x0, 0x8002) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}], 0x38) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"448cc880fe353ca0f2c2e953"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0xc4) write$sndseq(r1, &(0x7f0000000640)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control={0x6, 0x7fff, 0x8}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time}], 0xc4) write$sndseq(r1, &(0x7f0000002840)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}], 0x54) write$sndseq(r1, &(0x7f0000000300)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @result}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}], 0xc4) write$sndseq(r1, &(0x7f0000000a40)=[{0x0, 0x0, 0x0, 0x0, @time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}], 0x8c) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}], 0x54) write$sndseq(r1, &(0x7f0000000f80)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @addr}, {}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xc4) write$sndseq(r1, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @result}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time}], 0x8c) write$sndseq(r1, &(0x7f0000000740)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @result}], 0x8c) write$sndseq(r1, &(0x7f0000000b00)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @result}, {}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"b5f8fbe8c20c855083221c33"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}], 0xc4) write$sndseq(r1, &(0x7f0000000800)=[{0x0, 0x0, 0x0, 0x0, @time={0xb, 0x3}, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw8={"ce274516c7da5b6da0b16993"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"b134b141793d8609365bda4d"}}, {}], 0xfc) write$sndseq(r1, &(0x7f0000000d00)=[{0x0, 0x0, 0x0, 0x0, @time}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"49cbee45cad57a0372831665"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}], 0x8c) write$sndseq(r1, &(0x7f0000000080)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time={0x0, 0xfffffffc}, {}, {}, @control}], 0x38) write$sndseq(r1, &(0x7f00000005c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}], 0x54) write$sndseq(r1, &(0x7f00000004c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"9f2fb5905835280aeb65e178"}}], 0x54) write$P9_RGETATTR(r1, &(0x7f0000000dc0)={0xa0, 0x19, 0x1, {0x40, {0x1, 0x2, 0x4}, 0x20, 0x0, 0x0, 0x3, 0x6, 0xfffffffffffffff7, 0x3, 0x835, 0xa44a, 0x3, 0xfffffffffffffffa, 0x16, 0x2, 0x6784, 0x3ff, 0x3, 0x3}}, 0xa0) 7.640209775s ago: executing program 4 (id=3421): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) fsetxattr(r0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) sendmsg$alg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x200}], 0x18}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, 0x0, &(0x7f0000000180)) r3 = socket$inet_sctp(0x2, 0x1, 0x84) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r12, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r11, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f00000000c0)={r13}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 7.474385175s ago: executing program 1 (id=3422): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000000)={0x4, 0xffff, 0x7c3, 0x4}) 7.283169381s ago: executing program 0 (id=3423): r0 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x800) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000380)={"1b00", 0x0, 0x5, 0x2, 0x800, 0x0, "f759e10000001040000000fc6300", '\x00', "0300", "e859ad13", ["8bada940edff000a00", "c2006919f0050001ec00", "000000ff0000000000000020", "0000000000000000000100"]}) 6.847317697s ago: executing program 1 (id=3424): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000780)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000000)={'#! ', './file0', [], 0xa, "01ff937eb9250000b4211fe9bd9ea55625e3970000"}, 0x20) recvmmsg(r1, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000480)=""/13, 0xd}, {&(0x7f0000000040)=""/112, 0x70}], 0x2, 0x0, 0x0, 0x2000000}}], 0x1, 0x10000, 0x0) sendmsg$inet(r1, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002780)=[{&(0x7f00000010c0)='{', 0x1}], 0x1}, 0x40091) 6.052550045s ago: executing program 4 (id=3425): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f00000001c0), 0x0, 0x0) syz_mount_image$udf(&(0x7f0000000a40), &(0x7f0000000500)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4400, &(0x7f0000000100)=ANY=[@ANYBLOB="73686f72746164000000006d653d3030303030303030303030303030303030b030342c6e6f6164696e6963622c7569643d00", @ANYRESHEX=0x0, @ANYBLOB=',volume=18446744073709551608,\x00'], 0x1, 0xa3a, &(0x7f0000000a80)="$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") prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x1f}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0xf, 0x0, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r3 = open_tree(r2, &(0x7f0000000640)='\x00', 0x81000) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', r3, &(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r4, &(0x7f0000000540)=""/239, 0xef) 5.956268503s ago: executing program 0 (id=3426): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000400), 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x80089203) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000068000000000000000000000002000000000000177f15ed00000000000c000880"], 0x2c}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00222200000096231306e53f070c0000002a9000070d00be0083"], 0x0}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r2 = userfaultfd(0x1) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) r3 = io_uring_setup(0x3eab, &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) setpriority(0x0, 0x0, 0x9) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa05, 0x0) madvise(&(0x7f00003c1000/0x1000)=nil, 0xdfc3efff, 0x19) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NETID(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)={0x24, 0x0, 0x1, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8916, &(0x7f0000000040)={'ip6gretap0\x00', @random="0200ff7fdfff"}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r7, 0x4008af00, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, 0x0) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) 5.780397847s ago: executing program 1 (id=3427): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000180)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000240)={0x48, 0x2, r1}) 5.071888609s ago: executing program 1 (id=3428): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000001c0001000800ff000000000007000000", @ANYRES32=r2, @ANYBLOB="800094000a000200"], 0x28}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000003c0)={'bridge0\x00'}) ioctl$sock_SIOCBRDELBR(r3, 0x89a1, &(0x7f0000000080)='bridge0\x00') 4.172183228s ago: executing program 4 (id=3429): r0 = socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='bbr\x00', 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r0, &(0x7f0000000040)='u', 0xa792a, 0x801, 0x0, 0x0) socket(0x0, 0x2, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/128, 0xfffffce3, 0x0, 0x0, 0x0) 3.302133109s ago: executing program 1 (id=3430): openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000950000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) pipe(0x0) writev(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000280)=0x40) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000002300)=ANY=[@ANYBLOB="2d68756765746c62202b6e65745f636c73202b6e65745f636c73202d667265657a6572202bff0f72665f6576656e74202d626c6b696f20"], 0x37) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') read$FUSE(r5, &(0x7f00000002c0)={0x2020}, 0x2020) 3.260089331s ago: executing program 2 (id=3431): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, 0x0, 0x0) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"448cc880fe353ca0f2c2e953"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0xc4) write$sndseq(r1, &(0x7f0000000640)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control={0x6, 0x7fff, 0x8}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time}], 0xc4) write$sndseq(r1, &(0x7f0000002840)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}], 0x54) write$sndseq(r1, &(0x7f0000000300)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @result}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}], 0xc4) write$sndseq(r1, &(0x7f0000000a40)=[{0x0, 0x0, 0x0, 0x0, @time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}], 0x8c) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}], 0x54) write$sndseq(r1, &(0x7f0000000f80)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @addr}, {}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xc4) write$sndseq(r1, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @result}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time}], 0x8c) write$sndseq(r1, &(0x7f0000000740)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @result}], 0x8c) write$sndseq(r1, &(0x7f0000000b00)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @result}, {}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"b5f8fbe8c20c855083221c33"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}], 0xc4) write$sndseq(r1, &(0x7f0000000800)=[{0x0, 0x0, 0x0, 0x0, @time={0xb, 0x3}, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw8={"ce274516c7da5b6da0b16993"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"b134b141793d8609365bda4d"}}, {}], 0xfc) write$sndseq(r1, &(0x7f0000000d00)=[{0x0, 0x0, 0x0, 0x0, @time}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"49cbee45cad57a0372831665"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}], 0x8c) write$sndseq(r1, &(0x7f0000000080)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time={0x0, 0xfffffffc}, {}, {}, @control}], 0x38) write$sndseq(r1, &(0x7f00000005c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}], 0x54) write$sndseq(r1, &(0x7f00000004c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"9f2fb5905835280aeb65e178"}}], 0x54) write$P9_RGETATTR(r1, &(0x7f0000000dc0)={0xa0, 0x19, 0x1, {0x40, {0x1, 0x2, 0x4}, 0x20, 0x0, 0x0, 0x3, 0x6, 0xfffffffffffffff7, 0x3, 0x835, 0xa44a, 0x3, 0xfffffffffffffffa, 0x16, 0x2, 0x6784, 0x3ff, 0x3, 0x3}}, 0xa0) 2.314110715s ago: executing program 4 (id=3432): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x7, {0x0, 0xda5, 0x8, 0x200}}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f000001aa80)={0xffffffffffffffff, 0x1, 0x18}, 0xc) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000003fc0), 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000f40)="b410a1e8252ce0a1a3be3d593e8bf96f9615aea940ed08d314cbc5", 0x1b) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r3 = syz_open_procfs(0x0, &(0x7f0000000640)='mountinfo\x00') preadv(r3, &(0x7f0000000780)=[{&(0x7f0000000000)=""/65, 0x41}], 0x1, 0x91, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0) setxattr$incfs_metadata(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, 0x0, 0x0) r4 = socket(0x1d, 0x2, 0x6) bind$can_j1939(r2, 0x0, 0x0) r5 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, 0x0) removexattr(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000080)=@known='user.incfs.id\x00') ioctl$SOUND_MIXER_READ_DEVMASK(r1, 0xc0044dff, &(0x7f0000004000)) 2.194191247s ago: executing program 2 (id=3433): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000ac0)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001e40)={0x2c, &(0x7f0000001c00)={0x0, 0x0, 0x1, 'i'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000200)={0x40, 0x17}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000009c0)={0x44, &(0x7f0000000b40)={0x20, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000001300)={0x34, &(0x7f0000001080), 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000e80)={0x44, &(0x7f0000000bc0)={0x40, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000600)={0x34, &(0x7f0000000ac0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) 603.498713ms ago: executing program 4 (id=3434): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) execve(0x0, 0x0, 0x0) mlockall(0x1) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) socket(0x2, 0x3, 0x6) getpriority(0x1, r1) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$TUNSETDEBUG(r2, 0x5450, 0x0) 0s ago: executing program 0 (id=3435): open_tree(0xffffffffffffff9c, 0x0, 0x0) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4}, @l2cap_cid_signaling={{0x0, 0x2}}}, 0x9) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) kernel console output (not intermixed with test programs): d in-inode xattr: invalid ea_ino [ 2139.526577][T14867] bridge_slave_0: left promiscuous mode [ 2139.547429][T14867] bridge0: port 1(bridge_slave_0) entered disabled state [ 2139.568523][T18480] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.3099: couldn't read orphan inode 15 (err -117) [ 2139.593811][T10901] usb 1-1: Using ep0 maxpacket: 8 [ 2139.612801][T10901] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 2139.620806][T10901] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 2139.631569][T18480] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2139.633334][T10901] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2139.656748][T10901] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2139.668383][T10901] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2139.684698][T10901] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 2139.692735][T10901] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 2139.704681][T10901] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2139.716940][T10901] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2139.728492][T10901] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2139.746105][T10901] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 2139.754323][T10901] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 2139.766223][T10901] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2139.779103][T10901] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2139.794659][T10901] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2139.819805][T10901] usb 1-1: string descriptor 0 read error: -22 [ 2139.826781][T10901] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 2139.836708][T10901] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2139.866145][T10901] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 2140.171117][T18032] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2140.227048][T14867] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2140.321583][T10901] usb 1-1: USB disconnect, device number 39 [ 2140.325786][T14867] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2140.366194][T14867] bond0 (unregistering): Released all slaves [ 2140.494649][T18437] bridge0: port 1(bridge_slave_0) entered blocking state [ 2140.502711][T18437] bridge0: port 1(bridge_slave_0) entered disabled state [ 2140.512890][T18437] bridge_slave_0: entered allmulticast mode [ 2140.521384][T18437] bridge_slave_0: entered promiscuous mode [ 2140.600276][ T5200] Bluetooth: hci1: command tx timeout [ 2140.614843][T15033] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2140.623690][T15033] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2140.695793][T18437] bridge0: port 2(bridge_slave_1) entered blocking state [ 2140.704623][T18437] bridge0: port 2(bridge_slave_1) entered disabled state [ 2140.714025][T18437] bridge_slave_1: entered allmulticast mode [ 2140.723512][T18437] bridge_slave_1: entered promiscuous mode [ 2140.953908][T18437] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2141.082625][T18437] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2141.391758][T14867] hsr_slave_0: left promiscuous mode [ 2141.411655][T14867] hsr_slave_1: left promiscuous mode [ 2141.440087][T14867] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2141.447917][T14867] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2141.541880][T14867] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2141.549887][T14867] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2141.627949][T14867] veth1_macvtap: left promiscuous mode [ 2141.634302][T14867] veth0_macvtap: left promiscuous mode [ 2141.640327][T14867] veth1_vlan: left promiscuous mode [ 2141.645784][T14867] veth0_vlan: left promiscuous mode [ 2142.624231][T14867] team0 (unregistering): Port device team_slave_1 removed [ 2142.669025][ T5200] Bluetooth: hci1: command tx timeout [ 2142.712948][T14867] team0 (unregistering): Port device team_slave_0 removed [ 2143.101974][T18437] team0: Port device team_slave_0 added [ 2143.297950][T18437] team0: Port device team_slave_1 added [ 2143.497452][T18437] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2143.504684][T18437] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2143.531577][T18437] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2143.641600][T18437] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2143.649072][T18437] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2143.676162][T18437] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2143.959383][T18373] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2144.272623][T18437] hsr_slave_0: entered promiscuous mode [ 2144.330029][T18437] hsr_slave_1: entered promiscuous mode [ 2144.350325][T18437] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2144.358280][T18437] Cannot create hsr debugfs directory [ 2144.460134][T18373] 8021q: adding VLAN 0 to HW filter on device team0 [ 2144.610285][T14883] bridge0: port 1(bridge_slave_0) entered blocking state [ 2144.618055][T14883] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2144.715118][T14883] bridge0: port 2(bridge_slave_1) entered blocking state [ 2144.722766][T14883] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2146.126819][T18515] loop4: detected capacity change from 0 to 512 [ 2146.186219][T18515] EXT4-fs: Ignoring removed mblk_io_submit option [ 2146.342001][T18515] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.3108: corrupted in-inode xattr: invalid ea_ino [ 2146.410692][T18515] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.3108: couldn't read orphan inode 15 (err -117) [ 2146.476540][T18437] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2146.489571][T18515] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2146.710304][T18437] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2146.740956][T18437] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2146.802746][T18032] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2146.828532][T18437] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2146.874266][T18373] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2147.476260][T18373] veth0_vlan: entered promiscuous mode [ 2147.600764][T18373] veth1_vlan: entered promiscuous mode [ 2148.033513][T18373] veth0_macvtap: entered promiscuous mode [ 2148.082432][T18373] veth1_macvtap: entered promiscuous mode [ 2148.254625][T18437] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2148.310373][T18437] 8021q: adding VLAN 0 to HW filter on device team0 [ 2148.378471][T15033] bridge0: port 1(bridge_slave_0) entered blocking state [ 2148.386355][T15033] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2148.410001][T18373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2148.420962][T18373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2148.431233][T18373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2148.443402][T18373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2148.454121][T18373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2148.465200][T18373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2148.475400][T18373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2148.486397][T18373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2148.501858][T18373] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2148.551802][T15033] bridge0: port 2(bridge_slave_1) entered blocking state [ 2148.559577][T15033] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2148.619847][T18373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2148.631813][T18373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2148.643094][T18373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2148.654387][T18373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2148.665104][T18373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2148.675962][T18373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2148.686155][T18373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2148.697169][T18373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2148.712471][T18373] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2148.948353][T18437] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2149.029153][T18373] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2149.038322][T18373] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2149.049843][T18373] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2149.060205][T18373] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2150.934630][T18437] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2151.466762][T18437] veth0_vlan: entered promiscuous mode [ 2151.607199][T18437] veth1_vlan: entered promiscuous mode [ 2151.666826][T18555] usb usb8: usbfs: process 18555 (syz.4.3117) did not claim interface 0 before use [ 2152.046937][T18437] veth0_macvtap: entered promiscuous mode [ 2152.124237][T18437] veth1_macvtap: entered promiscuous mode [ 2152.297944][T18437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2152.308887][T18437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2152.318946][T18437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2152.330327][T18437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2152.340927][T18437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2152.351700][T18437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2152.361756][T18437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2152.372429][T18437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2152.382444][T18437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2152.393152][T18437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2152.407047][T18437] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2152.592537][T18437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2152.605225][T18437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2152.615557][T18437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2152.626399][T18437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2152.637722][T18437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2152.649609][T18437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2152.659928][T18437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2152.671559][T18437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2152.682408][T18437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2152.693494][T18437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2152.708915][T18437] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2152.764540][T18437] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2152.774415][T18437] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2152.783669][T18437] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2152.792708][T18437] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2155.160094][T18590] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3124'. [ 2155.786679][T18598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2155.797665][T18598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2155.809199][T18598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2155.821950][T18598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2155.832183][T18598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2155.843029][T18598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2155.854809][T18598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2155.865724][T18598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2155.883207][T18598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2155.897824][T18598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2156.547457][T14867] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2156.556162][T14867] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2156.799209][T14867] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2156.807301][T14867] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2157.016737][T18609] netlink: 'syz.4.3128': attribute type 21 has an invalid length. [ 2157.027929][T18609] netlink: 160 bytes leftover after parsing attributes in process `syz.4.3128'. [ 2157.547298][T18615] netlink: 'syz.2.3080': attribute type 4 has an invalid length. [ 2157.690696][T18615] netlink: 'syz.2.3080': attribute type 4 has an invalid length. [ 2157.724547][T18617] loop4: detected capacity change from 0 to 512 [ 2157.769752][T18617] EXT4-fs: Ignoring removed mblk_io_submit option [ 2157.987206][T18617] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.3130: corrupted in-inode xattr: invalid ea_ino [ 2158.069173][T18617] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.3130: couldn't read orphan inode 15 (err -117) [ 2158.153741][T18617] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2158.647855][T18629] mkiss: ax0: crc mode is auto. [ 2158.852380][T18632] mkiss: ax0: crc mode is auto. [ 2158.862563][T18032] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2159.500290][T11505] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2159.519877][T11505] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2159.562072][T11505] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2159.583060][T11505] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2159.595071][T11505] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 2159.608165][T11505] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2160.423705][T18636] chnl_net:caif_netlink_parms(): no params data found [ 2160.690851][ T4512] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2160.699131][ T4512] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2160.994552][ T4512] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2161.003478][ T4512] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2161.716510][T11505] Bluetooth: hci5: command tx timeout [ 2162.723966][T18636] bridge0: port 1(bridge_slave_0) entered blocking state [ 2162.732221][T18636] bridge0: port 1(bridge_slave_0) entered disabled state [ 2162.740347][T18636] bridge_slave_0: entered allmulticast mode [ 2162.748409][T18636] bridge_slave_0: entered promiscuous mode [ 2162.831907][T18661] netlink: 'syz.0.3140': attribute type 21 has an invalid length. [ 2162.840444][T18661] netlink: 160 bytes leftover after parsing attributes in process `syz.0.3140'. [ 2162.915044][T18636] bridge0: port 2(bridge_slave_1) entered blocking state [ 2162.923153][T18636] bridge0: port 2(bridge_slave_1) entered disabled state [ 2162.931200][T18636] bridge_slave_1: entered allmulticast mode [ 2162.940638][T18636] bridge_slave_1: entered promiscuous mode [ 2163.326556][T18636] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2163.435022][T18636] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2163.801785][T11505] Bluetooth: hci5: command tx timeout [ 2163.927467][T18636] team0: Port device team_slave_0 added [ 2164.012301][T18636] team0: Port device team_slave_1 added [ 2164.382474][T18636] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2164.392550][T18636] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2164.424071][T18636] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2164.606918][T18636] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2164.618888][T18636] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2164.647454][T18636] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2165.365401][T18636] hsr_slave_0: entered promiscuous mode [ 2165.402222][T18636] hsr_slave_1: entered promiscuous mode [ 2165.439533][T18636] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2165.447652][T18636] Cannot create hsr debugfs directory [ 2165.869238][T11505] Bluetooth: hci5: command tx timeout [ 2166.928111][T18636] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2167.133047][T18636] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2167.259499][T18636] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2167.428298][T18636] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2167.949557][T11505] Bluetooth: hci5: command tx timeout [ 2168.189624][T18636] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2168.309351][T18636] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2168.440093][T18636] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2168.581148][T18636] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2170.726875][ T5200] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 2170.740679][ T5200] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 2170.751898][ T5200] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 2170.780763][ T5200] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 2170.792663][ T5200] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 2170.820927][ T5200] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 2171.737302][T18687] netlink: 'syz.0.3150': attribute type 21 has an invalid length. [ 2171.746672][T18687] netlink: 160 bytes leftover after parsing attributes in process `syz.0.3150'. [ 2172.333808][T18636] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2172.742572][T18636] 8021q: adding VLAN 0 to HW filter on device team0 [ 2172.834692][T14883] bridge0: port 1(bridge_slave_0) entered blocking state [ 2172.842335][T14883] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2173.064361][T18683] chnl_net:caif_netlink_parms(): no params data found [ 2173.288874][ T5200] Bluetooth: hci6: command tx timeout [ 2173.432597][T14883] bridge0: port 2(bridge_slave_1) entered blocking state [ 2173.440141][T14883] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2173.694569][T18636] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2173.707184][T18636] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2174.897582][T18705] random: crng reseeded on system resumption [ 2175.340515][T11505] Bluetooth: hci6: command tx timeout [ 2175.360149][T18683] bridge0: port 1(bridge_slave_0) entered blocking state [ 2175.375223][T18683] bridge0: port 1(bridge_slave_0) entered disabled state [ 2175.384921][T18683] bridge_slave_0: entered allmulticast mode [ 2175.394337][T18683] bridge_slave_0: entered promiscuous mode [ 2175.421192][T18683] bridge0: port 2(bridge_slave_1) entered blocking state [ 2175.429376][T18683] bridge0: port 2(bridge_slave_1) entered disabled state [ 2175.437365][T18683] bridge_slave_1: entered allmulticast mode [ 2175.446857][T18683] bridge_slave_1: entered promiscuous mode [ 2175.703560][T18683] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2175.835219][T18683] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2176.318272][T18683] team0: Port device team_slave_0 added [ 2176.470896][T18683] team0: Port device team_slave_1 added [ 2176.733077][T18636] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2176.758144][T18683] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2176.769924][T18683] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2176.798436][T18683] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2177.174285][T18683] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2177.183193][T18683] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2177.213632][T18683] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2177.393550][T11505] Bluetooth: hci6: command tx timeout [ 2177.566979][T18723] loop1: detected capacity change from 0 to 256 [ 2177.681436][T18723] vfat: Unknown parameter 'iocharsetortname' [ 2177.756988][T18722] netlink: 'syz.4.3159': attribute type 21 has an invalid length. [ 2177.767837][T18722] netlink: 160 bytes leftover after parsing attributes in process `syz.4.3159'. [ 2177.872528][T18683] hsr_slave_0: entered promiscuous mode [ 2177.917150][T18683] hsr_slave_1: entered promiscuous mode [ 2177.978790][T18683] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2177.986731][T18683] Cannot create hsr debugfs directory [ 2178.041794][T18636] veth0_vlan: entered promiscuous mode [ 2178.404587][T18636] veth1_vlan: entered promiscuous mode [ 2179.068967][ T5243] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 2179.266427][T18636] veth0_macvtap: entered promiscuous mode [ 2179.291480][ T5243] usb 5-1: Using ep0 maxpacket: 32 [ 2179.305526][ T5243] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2179.317989][ T5243] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2179.330224][ T5243] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 2179.339557][ T5243] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2179.374917][T18636] veth1_macvtap: entered promiscuous mode [ 2179.410090][ T5243] usb 5-1: config 0 descriptor?? [ 2179.474723][T11505] Bluetooth: hci6: command tx timeout [ 2179.486865][ T5243] hub 5-1:0.0: USB hub found [ 2179.867530][T18683] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2180.028068][ T5243] hub 5-1:0.0: 4 ports detected [ 2180.102483][T18636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2180.113673][T18636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2180.124370][T18636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2180.135069][T18636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2180.145151][T18636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2180.156011][T18636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2180.166138][T18636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2180.176888][T18636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2180.190679][T18636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2180.206316][T18636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2180.219076][T18636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2180.230615][T18636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2180.246412][T18636] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2180.382554][ T5243] hub 5-1:0.0: hub_hub_status failed (err = -71) [ 2180.393112][ T5243] hub 5-1:0.0: config failed, can't get hub status (err -71) [ 2180.431927][T18683] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2180.495346][ T5243] usbhid 5-1:0.0: can't add hid device: -71 [ 2180.505941][ T5243] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 2180.544613][T18636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2180.556618][T18636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2180.570320][T18636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2180.581469][T18636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2180.596352][T18636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2180.608408][T18636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2180.622225][T18636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2180.633194][T18636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2180.646168][T18636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2180.657033][T18636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2180.667338][T18636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2180.680904][T18636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2180.699163][T18636] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2180.891827][ T5243] usb 5-1: USB disconnect, device number 26 [ 2181.094280][T18683] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2181.254352][T18636] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2181.264639][T18636] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2181.273818][T18636] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2181.282962][T18636] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2181.379492][T18683] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2182.408010][T18683] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2182.483457][T18740] random: crng reseeded on system resumption [ 2182.650735][T18683] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2182.860526][T18683] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2183.079117][T18683] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2184.644122][T18683] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2184.713026][T18755] netlink: 'syz.4.3170': attribute type 21 has an invalid length. [ 2184.715571][ T1242] ieee802154 phy0 wpan0: encryption failed: -22 [ 2184.721623][T18755] netlink: 160 bytes leftover after parsing attributes in process `syz.4.3170'. [ 2184.727765][ T1242] ieee802154 phy1 wpan1: encryption failed: -22 [ 2185.045360][T18683] 8021q: adding VLAN 0 to HW filter on device team0 [ 2185.191564][ T4512] bridge0: port 1(bridge_slave_0) entered blocking state [ 2185.199300][ T4512] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2185.444533][ T4512] bridge0: port 2(bridge_slave_1) entered blocking state [ 2185.452081][ T4512] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2186.414397][T18763] loop4: detected capacity change from 0 to 1024 [ 2186.525954][T18763] hfsplus: unable to parse mount options [ 2188.052586][T18774] netlink: 'syz.1.3173': attribute type 4 has an invalid length. [ 2188.149621][T18774] netlink: 'syz.1.3173': attribute type 4 has an invalid length. [ 2188.853577][T18683] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2188.934471][T18782] random: crng reseeded on system resumption [ 2189.472490][T18683] veth0_vlan: entered promiscuous mode [ 2189.661458][T18683] veth1_vlan: entered promiscuous mode [ 2190.358735][T18791] netlink: 'syz.4.3179': attribute type 21 has an invalid length. [ 2190.367032][T18791] netlink: 160 bytes leftover after parsing attributes in process `syz.4.3179'. [ 2190.470486][T18683] veth0_macvtap: entered promiscuous mode [ 2190.841120][T18683] veth1_macvtap: entered promiscuous mode [ 2191.178323][T18683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2191.193503][T18683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2191.204879][T18683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2191.219384][T18683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2191.232602][T18683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2191.250074][T18683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2191.262119][T18683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2191.275643][T18683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2191.292538][T18683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2191.304961][T18683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2191.315669][T18683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2191.326483][T18683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2191.338171][T18683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2191.350105][T18683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2191.367443][T18683] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2191.381306][T14883] bridge_slave_1: left allmulticast mode [ 2191.387218][T14883] bridge_slave_1: left promiscuous mode [ 2191.394000][T14883] bridge0: port 2(bridge_slave_1) entered disabled state [ 2191.511128][T14883] bridge_slave_0: left allmulticast mode [ 2191.517056][T14883] bridge_slave_0: left promiscuous mode [ 2191.526619][T14883] bridge0: port 1(bridge_slave_0) entered disabled state [ 2191.611966][ T5200] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2191.633977][ T5200] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2191.645578][ T5200] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2191.668302][ T5200] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2191.846190][ T5200] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 2191.871869][ T5200] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2192.472130][T14883] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2192.558309][T14883] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2192.637382][T14883] bond0 (unregistering): Released all slaves [ 2192.782968][ T4512] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2192.791141][ T4512] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2192.824293][T18683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2192.838049][T18683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2192.850532][T18683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2192.863036][T18683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2192.873046][T18683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2192.885463][T18683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2192.897914][T18683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2192.910585][T18683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2192.922559][T18683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2192.933274][T18683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2192.943391][T18683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2192.955727][T18683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2192.965745][T18683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2192.976359][T18683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2192.995224][T18683] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2193.094170][T18805] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3182'. [ 2193.248335][T18683] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2193.257386][T18683] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2193.268084][T18683] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2193.277117][T18683] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2193.948854][ T5200] Bluetooth: hci4: command tx timeout [ 2194.082393][ T4512] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2194.090688][ T4512] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2194.176927][T14883] hsr_slave_0: left promiscuous mode [ 2194.263929][T14883] hsr_slave_1: left promiscuous mode [ 2194.319464][T14883] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2194.327501][T14883] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2194.441608][T14883] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2194.449694][T14883] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2194.559306][T14883] veth1_macvtap: left promiscuous mode [ 2194.565102][T14883] veth0_macvtap: left promiscuous mode [ 2194.571191][T14883] veth1_vlan: left promiscuous mode [ 2194.576765][T14883] veth0_vlan: left promiscuous mode [ 2194.686201][T18812] loop4: detected capacity change from 0 to 2048 [ 2194.944687][T18812] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2196.054342][T18812] fs-verity (loop4, inode 13): Error -4 reading file data [ 2196.062093][T18812] fs-verity (loop4, inode 13): Error -4 building Merkle tree [ 2196.071533][ T5200] Bluetooth: hci4: command tx timeout [ 2196.434901][T14883] team0 (unregistering): Port device team_slave_1 removed [ 2196.529389][T14883] team0 (unregistering): Port device team_slave_0 removed [ 2197.770210][T18823] netlink: 'syz.1.3187': attribute type 21 has an invalid length. [ 2197.778702][T18823] netlink: 160 bytes leftover after parsing attributes in process `syz.1.3187'. [ 2198.115501][ T5200] Bluetooth: hci4: command tx timeout [ 2198.547021][T14883] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2198.564693][T18032] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2198.757335][T14883] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2198.813110][T18796] chnl_net:caif_netlink_parms(): no params data found [ 2198.952065][T14883] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2199.196314][T14883] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2199.256624][T18833] sctp: [Deprecated]: syz.3.3133 (pid 18833) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2199.256624][T18833] Use struct sctp_sack_info instead [ 2199.597180][T14883] bridge_slave_1: left allmulticast mode [ 2199.603243][T14883] bridge_slave_1: left promiscuous mode [ 2199.609579][T14883] bridge0: port 2(bridge_slave_1) entered disabled state [ 2199.632328][T14883] bridge_slave_0: left allmulticast mode [ 2199.642249][T14883] bridge_slave_0: left promiscuous mode [ 2199.649047][T14883] bridge0: port 1(bridge_slave_0) entered disabled state [ 2200.225551][T11505] Bluetooth: hci4: command tx timeout [ 2200.450378][T14883] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2200.640033][T14883] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2200.817974][T14883] bond0 (unregistering): Released all slaves [ 2201.642437][T14883] hsr_slave_0: left promiscuous mode [ 2201.707597][T14883] hsr_slave_1: left promiscuous mode [ 2201.759410][T14883] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2201.767286][T14883] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2201.862164][T14883] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2201.873405][T14883] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2201.952776][T14883] veth1_macvtap: left promiscuous mode [ 2201.960458][T14883] veth0_macvtap: left promiscuous mode [ 2201.966259][T14883] veth1_vlan: left promiscuous mode [ 2201.971783][T14883] veth0_vlan: left promiscuous mode [ 2202.885046][T14883] team0 (unregistering): Port device team_slave_1 removed [ 2202.964703][T14883] team0 (unregistering): Port device team_slave_0 removed [ 2203.878202][T18796] bridge0: port 1(bridge_slave_0) entered blocking state [ 2203.886626][T18796] bridge0: port 1(bridge_slave_0) entered disabled state [ 2203.894655][T18796] bridge_slave_0: entered allmulticast mode [ 2203.903932][T18796] bridge_slave_0: entered promiscuous mode [ 2204.050273][T18796] bridge0: port 2(bridge_slave_1) entered blocking state [ 2204.058017][T18796] bridge0: port 2(bridge_slave_1) entered disabled state [ 2204.066550][T18796] bridge_slave_1: entered allmulticast mode [ 2204.075923][T18796] bridge_slave_1: entered promiscuous mode [ 2204.649527][T18796] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2204.735182][T18796] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2205.051931][T18868] netlink: 'syz.4.3195': attribute type 21 has an invalid length. [ 2205.064345][T18868] netlink: 160 bytes leftover after parsing attributes in process `syz.4.3195'. [ 2205.083228][T18796] team0: Port device team_slave_0 added [ 2205.125593][T18796] team0: Port device team_slave_1 added [ 2205.128089][T18870] loop1: detected capacity change from 0 to 512 [ 2205.455508][T18796] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2205.463076][T18796] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2205.492910][T18796] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2205.571749][T18870] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2205.668154][T18796] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2205.681147][T18796] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2205.711213][T18796] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2206.332145][T18796] hsr_slave_0: entered promiscuous mode [ 2206.459941][T18796] hsr_slave_1: entered promiscuous mode [ 2206.504541][T18870] loop1: detected capacity change from 512 to 0 [ 2206.508771][T18796] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2206.518922][T18796] Cannot create hsr debugfs directory [ 2207.572886][T18874] ext4lazyinit: attempt to access beyond end of device [ 2207.572886][T18874] loop1: rw=536576, sector=8, nr_sectors = 4 limit=0 [ 2207.586970][T18874] ext4lazyinit: attempt to access beyond end of device [ 2207.586970][T18874] loop1: rw=12288, sector=8, nr_sectors = 4 limit=0 [ 2207.600827][T18874] EXT4-fs error (device loop1): ext4_wait_block_bitmap:584: comm ext4lazyinit: Cannot read block bitmap - block_group = 0, block_bitmap = 2 [ 2207.616144][T18874] ext4lazyinit: attempt to access beyond end of device [ 2207.616144][T18874] loop1: rw=145409, sector=0, nr_sectors = 4 limit=0 [ 2207.633053][T18874] Buffer I/O error on dev loop1, logical block 0, lost sync page write [ 2207.642131][T18874] EXT4-fs (loop1): I/O error while writing superblock [ 2207.710258][ T4512] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2207.721286][ T4512] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2207.837862][T14883] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2207.848945][T14883] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2208.322461][T18437] syz-executor: attempt to access beyond end of device [ 2208.322461][T18437] loop1: rw=12288, sector=12, nr_sectors = 4 limit=0 [ 2208.483453][T18796] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2208.575908][T18796] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2208.677523][T14883] kworker/u8:15: attempt to access beyond end of device [ 2208.677523][T14883] loop1: rw=524288, sector=140, nr_sectors = 4 limit=0 [ 2208.692361][T14883] kworker/u8:15: attempt to access beyond end of device [ 2208.692361][T14883] loop1: rw=524288, sector=144, nr_sectors = 4 limit=0 [ 2208.706580][T14883] kworker/u8:15: attempt to access beyond end of device [ 2208.706580][T14883] loop1: rw=12288, sector=136, nr_sectors = 4 limit=0 [ 2208.720937][T14883] EXT4-fs error (device loop1): __ext4_get_inode_loc_noinmem:4559: inode #15: block 34: comm kworker/u8:15: unable to read itable block [ 2208.735398][T14883] kworker/u8:15: attempt to access beyond end of device [ 2208.735398][T14883] loop1: rw=145409, sector=0, nr_sectors = 4 limit=0 [ 2208.752336][T14883] Buffer I/O error on dev loop1, logical block 0, lost sync page write [ 2208.762611][T14883] EXT4-fs (loop1): I/O error while writing superblock [ 2208.790413][T18796] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2208.872409][T18796] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2208.972789][T18437] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2209.111406][T18437] syz-executor: attempt to access beyond end of device [ 2209.111406][T18437] loop1: rw=145409, sector=0, nr_sectors = 4 limit=0 [ 2209.125470][T18437] Buffer I/O error on dev loop1, logical block 0, lost sync page write [ 2209.134733][T18437] EXT4-fs (loop1): I/O error while writing superblock [ 2209.219335][T18872] kmmpd-loop1: attempt to access beyond end of device [ 2209.219335][T18872] loop1: rw=14337, sector=48, nr_sectors = 4 limit=0 [ 2209.233341][T18872] Buffer I/O error on dev loop1, logical block 12, lost sync page write [ 2209.720093][ T4512] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2209.858197][ T4512] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2210.057177][ T4512] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2210.334388][ T4512] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2210.802967][ T4512] bridge_slave_1: left allmulticast mode [ 2210.811653][ T4512] bridge_slave_1: left promiscuous mode [ 2210.818308][ T4512] bridge0: port 2(bridge_slave_1) entered disabled state [ 2210.939515][ T4512] bridge_slave_0: left allmulticast mode [ 2210.945323][ T4512] bridge_slave_0: left promiscuous mode [ 2210.952376][ T4512] bridge0: port 1(bridge_slave_0) entered disabled state [ 2211.701652][ T4512] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2211.877507][ T4512] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2211.900264][ T4512] bond0 (unregistering): Released all slaves [ 2211.963943][T18796] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2212.482231][T18796] 8021q: adding VLAN 0 to HW filter on device team0 [ 2212.512873][T13876] bridge0: port 1(bridge_slave_0) entered blocking state [ 2212.520412][T13876] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2212.606491][T13876] bridge0: port 2(bridge_slave_1) entered blocking state [ 2212.614034][T13876] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2212.990960][ T4512] hsr_slave_0: left promiscuous mode [ 2213.011412][ T4512] hsr_slave_1: left promiscuous mode [ 2213.062904][ T4512] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2213.071298][ T4512] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2213.106639][ T4512] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2213.114589][ T4512] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2213.191016][ T4512] veth1_macvtap: left promiscuous mode [ 2213.196767][ T4512] veth0_macvtap: left promiscuous mode [ 2213.202784][ T4512] veth1_vlan: left promiscuous mode [ 2213.208205][ T4512] veth0_vlan: left promiscuous mode [ 2214.599706][ T4512] team0 (unregistering): Port device team_slave_1 removed [ 2214.667340][ T4512] team0 (unregistering): Port device team_slave_0 removed [ 2214.991603][T18901] netlink: 'syz.4.3206': attribute type 21 has an invalid length. [ 2215.001988][T18901] netlink: 160 bytes leftover after parsing attributes in process `syz.4.3206'. [ 2215.398943][ T5200] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2215.420990][ T5200] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2215.447146][ T5200] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2215.503608][ T5200] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2215.605615][ T5200] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 2215.634857][ T5200] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2216.480943][T18903] chnl_net:caif_netlink_parms(): no params data found [ 2217.221529][T18796] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2217.301924][T18920] loop2: detected capacity change from 0 to 2048 [ 2217.394434][T18920] loop2: p1 < > p2 p3 p4 < p5 > [ 2217.405207][T18920] loop2: p2 size 458752 extends beyond EOD, truncated [ 2217.414765][T18920] loop2: p3 start 4284289 is beyond EOD, truncated [ 2217.429167][T18920] loop2: p5 size 458752 extends beyond EOD, truncated [ 2217.720482][ T5200] Bluetooth: hci1: command tx timeout [ 2217.780779][T18796] veth0_vlan: entered promiscuous mode [ 2218.016535][T18903] bridge0: port 1(bridge_slave_0) entered blocking state [ 2218.024738][T18903] bridge0: port 1(bridge_slave_0) entered disabled state [ 2218.034531][T18903] bridge_slave_0: entered allmulticast mode [ 2218.043944][T18903] bridge_slave_0: entered promiscuous mode [ 2218.095077][T18796] veth1_vlan: entered promiscuous mode [ 2218.203479][T18903] bridge0: port 2(bridge_slave_1) entered blocking state [ 2218.211681][T18903] bridge0: port 2(bridge_slave_1) entered disabled state [ 2218.219707][T18903] bridge_slave_1: entered allmulticast mode [ 2218.229130][T18903] bridge_slave_1: entered promiscuous mode [ 2218.507536][T18796] veth0_macvtap: entered promiscuous mode [ 2218.530322][T18933] netlink: 'syz.4.3215': attribute type 21 has an invalid length. [ 2218.540889][T18933] netlink: 160 bytes leftover after parsing attributes in process `syz.4.3215'. [ 2218.575144][T18796] veth1_macvtap: entered promiscuous mode [ 2218.624054][T18903] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2218.731210][T18903] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2218.972620][T18903] team0: Port device team_slave_0 added [ 2219.027869][T18796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2219.038800][T18796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2219.051735][T18796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2219.062640][T18796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2219.072860][T18796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2219.086262][T18796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2219.100613][T18796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2219.115407][T18796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2219.126240][T18796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2219.137077][T18796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2219.154955][T18796] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2219.173953][T18903] team0: Port device team_slave_1 added [ 2219.532358][T18796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2219.543305][T18796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2219.553743][T18796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2219.564530][T18796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2219.574676][T18796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2219.585417][T18796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2219.595553][T18796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2219.607592][T18796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2219.618053][T18796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2219.628864][T18796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2219.642770][T18796] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2219.655325][T18903] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2219.662713][T18903] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2219.690147][T18903] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2219.781281][T18903] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2219.789272][T18903] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2219.817812][T18903] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2219.852178][ T5200] Bluetooth: hci1: command tx timeout [ 2220.071845][T18796] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2220.081076][T18796] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2220.090520][T18796] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2220.099665][T18796] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2220.321405][T18903] hsr_slave_0: entered promiscuous mode [ 2220.382403][T18903] hsr_slave_1: entered promiscuous mode [ 2220.411736][T18903] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2220.419863][T18903] Cannot create hsr debugfs directory [ 2221.871253][ T5200] Bluetooth: hci1: command tx timeout [ 2222.363567][T18903] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2222.518973][T18903] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2222.612343][T18903] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2222.701231][T18903] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2222.914872][T18955] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3220'. [ 2223.877130][T18903] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2223.953874][ T5200] Bluetooth: hci1: command tx timeout [ 2224.036123][T18903] 8021q: adding VLAN 0 to HW filter on device team0 [ 2224.087900][T14887] bridge0: port 1(bridge_slave_0) entered blocking state [ 2224.095810][T14887] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2224.239951][T14887] bridge0: port 2(bridge_slave_1) entered blocking state [ 2224.247763][T14887] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2224.846613][T18970] netlink: 'syz.2.3224': attribute type 21 has an invalid length. [ 2224.855234][T18970] netlink: 160 bytes leftover after parsing attributes in process `syz.2.3224'. [ 2224.979449][T13876] bridge_slave_1: left allmulticast mode [ 2224.985464][T13876] bridge_slave_1: left promiscuous mode [ 2224.994473][T13876] bridge0: port 2(bridge_slave_1) entered disabled state [ 2225.126497][T13876] bridge_slave_0: left allmulticast mode [ 2225.139229][T13876] bridge_slave_0: left promiscuous mode [ 2225.145828][T13876] bridge0: port 1(bridge_slave_0) entered disabled state [ 2225.834680][T13876] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2225.943170][T13876] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2226.045214][T13876] bond0 (unregistering): Released all slaves [ 2227.143664][T13876] hsr_slave_0: left promiscuous mode [ 2227.186971][T13876] hsr_slave_1: left promiscuous mode [ 2227.207218][T13876] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2227.219937][T13876] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2227.261517][T13876] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2227.272294][T13876] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2227.356127][T13876] veth1_macvtap: left promiscuous mode [ 2227.364919][T13876] veth0_macvtap: left promiscuous mode [ 2227.375944][T13876] veth1_vlan: left promiscuous mode [ 2227.381686][T13876] veth0_vlan: left promiscuous mode [ 2228.402286][T13876] team0 (unregistering): Port device team_slave_1 removed [ 2228.562854][T13876] team0 (unregistering): Port device team_slave_0 removed [ 2228.940998][T18998] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3231'. [ 2229.129214][T18903] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2229.691865][T18903] veth0_vlan: entered promiscuous mode [ 2229.799173][T18903] veth1_vlan: entered promiscuous mode [ 2230.039393][ T2824] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 2230.170771][T15033] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2230.179509][T15033] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2230.203452][T18903] veth0_macvtap: entered promiscuous mode [ 2230.256796][T18903] veth1_macvtap: entered promiscuous mode [ 2230.300773][ T2824] usb 5-1: config 0 has no interfaces? [ 2230.303818][T13876] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2230.306476][ T2824] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 2230.314529][T13876] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2230.331534][ T2824] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2230.414574][T18903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2230.429742][T18903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2230.440093][T18903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2230.441146][ T2824] usb 5-1: config 0 descriptor?? [ 2230.450796][T18903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2230.450896][T18903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2230.482943][T18903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2230.493130][T18903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2230.506621][T18903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2230.518573][T18903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2230.532748][T18903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2230.547991][T18903] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2230.626082][T18903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2230.638121][T18903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2230.648731][T18903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2230.662252][T18903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2230.677388][T18903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2230.689865][T18903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2230.702791][T18903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2230.713629][T18903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2230.723825][T18903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2230.738485][T18903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2230.763035][T18903] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2230.805386][T18903] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2230.815018][T18903] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2230.826903][T18903] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2230.837014][T18903] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2230.951055][T15198] usb 5-1: USB disconnect, device number 27 [ 2232.008032][T19013] netlink: 'syz.4.3234': attribute type 21 has an invalid length. [ 2232.016809][T19013] netlink: 160 bytes leftover after parsing attributes in process `syz.4.3234'. [ 2235.972598][T16185] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 2236.208542][T16185] usb 5-1: Using ep0 maxpacket: 8 [ 2236.248269][T16185] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 2236.256982][T16185] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2236.267150][T16185] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2236.278662][T16185] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2236.289785][T16185] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2236.305011][T16185] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2236.315373][T16185] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2236.419326][T19056] loop3: detected capacity change from 128 to 0 [ 2236.633456][T16185] usb 5-1: GET_CAPABILITIES returned 0 [ 2236.639756][T16185] usbtmc 5-1:16.0: can't read capabilities [ 2236.649286][T16162] syz.3.2627: attempt to access beyond end of device [ 2236.649286][T16162] loop3: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 2236.663219][T16162] syz.3.2627: attempt to access beyond end of device [ 2236.663219][T16162] loop3: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 2236.677184][T16162] syz.3.2627: attempt to access beyond end of device [ 2236.677184][T16162] loop3: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 2236.690941][T16162] syz.3.2627: attempt to access beyond end of device [ 2236.690941][T16162] loop3: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 2236.706958][T16162] syz.3.2627: attempt to access beyond end of device [ 2236.706958][T16162] loop3: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 2236.721397][T16162] syz.3.2627: attempt to access beyond end of device [ 2236.721397][T16162] loop3: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 2236.735289][T16162] syz.3.2627: attempt to access beyond end of device [ 2236.735289][T16162] loop3: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 2236.749104][T16162] syz.3.2627: attempt to access beyond end of device [ 2236.749104][T16162] loop3: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 2236.763083][T16162] syz.3.2627: attempt to access beyond end of device [ 2236.763083][T16162] loop3: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 2236.776833][T16162] syz.3.2627: attempt to access beyond end of device [ 2236.776833][T16162] loop3: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 2236.858918][T13876] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2236.867008][T13876] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2236.876175][T16185] usb 5-1: USB disconnect, device number 28 [ 2236.920383][T13876] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2236.928554][T13876] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2239.733401][T19104] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3262'. [ 2240.196013][T19107] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x1 [ 2241.254197][T19116] random: crng reseeded on system resumption [ 2241.858215][T16162] bio_check_eod: 5278 callbacks suppressed [ 2241.864758][T16162] syz.3.2627: attempt to access beyond end of device [ 2241.864758][T16162] loop3: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 2241.881295][T16162] syz.3.2627: attempt to access beyond end of device [ 2241.881295][T16162] loop3: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 2241.895099][T16162] syz.3.2627: attempt to access beyond end of device [ 2241.895099][T16162] loop3: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 2241.911557][T16162] syz.3.2627: attempt to access beyond end of device [ 2241.911557][T16162] loop3: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 2241.928162][T16162] syz.3.2627: attempt to access beyond end of device [ 2241.928162][T16162] loop3: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 2241.945311][T16162] syz.3.2627: attempt to access beyond end of device [ 2241.945311][T16162] loop3: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 2241.961518][T16162] syz.3.2627: attempt to access beyond end of device [ 2241.961518][T16162] loop3: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 2241.978493][T16162] syz.3.2627: attempt to access beyond end of device [ 2241.978493][T16162] loop3: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 2241.992575][T16162] syz.3.2627: attempt to access beyond end of device [ 2241.992575][T16162] loop3: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 2242.009099][T16162] syz.3.2627: attempt to access beyond end of device [ 2242.009099][T16162] loop3: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 2243.705868][T19146] mkiss: ax0: crc mode is auto. [ 2243.956437][T19149] mkiss: ax0: crc mode is auto. [ 2244.073592][T19147] random: crng reseeded on system resumption [ 2244.728132][T19154] loop1: detected capacity change from 0 to 512 [ 2244.880998][T19154] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.3284: bg 0: block 393: padding at end of block bitmap is not set [ 2244.941172][T19154] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 2244.985988][T19154] EXT4-fs (loop1): 2 truncates cleaned up [ 2244.994839][T19154] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2245.177069][ T29] audit: type=1326 audit(2303.572:2399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19153 comm="syz.1.3284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a0b77cef9 code=0x7ffc0000 [ 2245.203159][ T29] audit: type=1326 audit(2303.572:2400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19153 comm="syz.1.3284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a0b77cef9 code=0x7ffc0000 [ 2245.227796][ T29] audit: type=1326 audit(2303.572:2401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19153 comm="syz.1.3284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9a0b77cef9 code=0x7ffc0000 [ 2245.253415][ T29] audit: type=1326 audit(2303.582:2402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19153 comm="syz.1.3284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a0b77cef9 code=0x7ffc0000 [ 2245.276017][ T29] audit: type=1326 audit(2303.582:2403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19153 comm="syz.1.3284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=90 compat=0 ip=0x7f9a0b77cef9 code=0x7ffc0000 [ 2245.301044][ T29] audit: type=1326 audit(2303.582:2404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19153 comm="syz.1.3284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a0b77cef9 code=0x7ffc0000 [ 2245.461940][T18903] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2246.078149][T16185] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 2246.086429][T16185] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 2246.094296][T16185] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 2246.102152][T16185] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 2246.114119][T16185] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 2246.122764][T16185] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 2246.134759][T16185] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 2246.143882][T16185] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 2246.151772][T16185] hid-generic 0000:0000:0000.0015: unknown main item tag 0x1 [ 2246.159635][T16185] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 2246.167372][T16185] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 2246.175371][T16185] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 2246.183241][T16185] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 2246.188102][ T1242] ieee802154 phy0 wpan0: encryption failed: -22 [ 2246.190989][T16185] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 2246.200183][ T1242] ieee802154 phy1 wpan1: encryption failed: -22 [ 2246.204743][T16185] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 2246.218986][T16185] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 2246.230833][T16185] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 2246.240096][T16185] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 2246.247849][T16185] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 2246.255707][T16185] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 2246.263571][T16185] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 2246.271430][T16185] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 2246.279250][T16185] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 2246.287105][T16185] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 2246.294926][T16185] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 2246.302858][T16185] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 2246.310732][T16185] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 2246.318577][T16185] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 2246.326318][T16185] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 2246.338212][T16185] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 2246.347334][T16185] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 2246.355621][T16185] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 2246.363560][T16185] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 2246.371436][T16185] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 2246.379342][T16185] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 2246.387438][T16185] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 2246.395391][T16185] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 2246.403250][T16185] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 2246.411151][T16185] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 2246.419036][T16185] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 2246.426789][T16185] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 2246.438698][T16185] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 2246.446432][T16185] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 2246.489222][T16185] hid-generic 0000:0000:0000.0015: hidraw0: HID v0.00 Device [syz0] on syz0 [ 2247.197102][T16162] bio_check_eod: 6122 callbacks suppressed [ 2247.197189][T16162] syz.3.2627: attempt to access beyond end of device [ 2247.197189][T16162] loop3: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 2247.217320][T16162] syz.3.2627: attempt to access beyond end of device [ 2247.217320][T16162] loop3: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 2247.234012][T16162] syz.3.2627: attempt to access beyond end of device [ 2247.234012][T16162] loop3: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 2247.247838][T16162] syz.3.2627: attempt to access beyond end of device [ 2247.247838][T16162] loop3: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 2247.267162][T16162] syz.3.2627: attempt to access beyond end of device [ 2247.267162][T16162] loop3: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 2247.281588][T16162] syz.3.2627: attempt to access beyond end of device [ 2247.281588][T16162] loop3: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 2247.298176][T16162] syz.3.2627: attempt to access beyond end of device [ 2247.298176][T16162] loop3: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 2247.312204][T16162] syz.3.2627: attempt to access beyond end of device [ 2247.312204][T16162] loop3: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 2247.328932][T16162] syz.3.2627: attempt to access beyond end of device [ 2247.328932][T16162] loop3: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 2247.342975][T16162] syz.3.2627: attempt to access beyond end of device [ 2247.342975][T16162] loop3: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 2248.431773][T19185] loop4: detected capacity change from 0 to 512 [ 2248.677951][T19186] random: crng reseeded on system resumption [ 2248.874042][T19185] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2249.123527][T19185] EXT4-fs error (device loop4): ext4_do_update_inode:5154: inode #2: comm syz.4.3297: corrupted inode contents [ 2249.177235][T19185] EXT4-fs error (device loop4): ext4_dirty_inode:6014: inode #2: comm syz.4.3297: mark_inode_dirty error [ 2249.191167][T19185] EXT4-fs error (device loop4): ext4_do_update_inode:5154: inode #2: comm syz.4.3297: corrupted inode contents [ 2249.285682][T19192] EXT4-fs error (device loop4): ext4_add_entry:2435: inode #2: comm syz.4.3297: Directory hole found for htree leaf block 0 [ 2249.550802][T18032] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2249.682404][T19195] netlink: 'syz.1.3299': attribute type 6 has an invalid length. [ 2249.895057][T11505] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2249.904805][T11505] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2249.918954][T11505] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2249.943307][T11505] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2249.958995][T11505] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 2249.968451][T11505] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2250.462312][T19196] mkiss: ax0: crc mode is auto. [ 2250.704324][T19208] mkiss: ax0: crc mode is auto. [ 2252.029539][T11505] Bluetooth: hci2: command tx timeout [ 2252.070958][T14867] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2252.206843][T14867] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2252.358837][T14867] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2252.418158][T19197] chnl_net:caif_netlink_parms(): no params data found [ 2252.494174][T16162] bio_check_eod: 5882 callbacks suppressed [ 2252.494255][T16162] syz.3.2627: attempt to access beyond end of device [ 2252.494255][T16162] loop3: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 2252.519331][T16162] syz.3.2627: attempt to access beyond end of device [ 2252.519331][T16162] loop3: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 2252.533273][T16162] syz.3.2627: attempt to access beyond end of device [ 2252.533273][T16162] loop3: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 2252.549745][T16162] syz.3.2627: attempt to access beyond end of device [ 2252.549745][T16162] loop3: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 2252.563817][T16162] syz.3.2627: attempt to access beyond end of device [ 2252.563817][T16162] loop3: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 2252.580230][T16162] syz.3.2627: attempt to access beyond end of device [ 2252.580230][T16162] loop3: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 2252.597502][T16162] syz.3.2627: attempt to access beyond end of device [ 2252.597502][T16162] loop3: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 2252.611337][T16162] syz.3.2627: attempt to access beyond end of device [ 2252.611337][T16162] loop3: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 2252.627909][T16162] syz.3.2627: attempt to access beyond end of device [ 2252.627909][T16162] loop3: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 2252.641832][T16162] syz.3.2627: attempt to access beyond end of device [ 2252.641832][T16162] loop3: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 2252.746000][T14867] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2253.164222][T19230] loop4: detected capacity change from 0 to 512 [ 2253.183888][T14867] bridge_slave_1: left allmulticast mode [ 2253.195767][T14867] bridge_slave_1: left promiscuous mode [ 2253.202453][T14867] bridge0: port 2(bridge_slave_1) entered disabled state [ 2253.230532][T14867] bridge_slave_0: left allmulticast mode [ 2253.236452][T14867] bridge_slave_0: left promiscuous mode [ 2253.243239][T14867] bridge0: port 1(bridge_slave_0) entered disabled state [ 2253.534241][T19230] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2253.639751][T19230] EXT4-fs error (device loop4): ext4_do_update_inode:5154: inode #2: comm syz.4.3309: corrupted inode contents [ 2253.709964][T19230] EXT4-fs error (device loop4): ext4_dirty_inode:6014: inode #2: comm syz.4.3309: mark_inode_dirty error [ 2253.763863][T19230] EXT4-fs error (device loop4): ext4_do_update_inode:5154: inode #2: comm syz.4.3309: corrupted inode contents [ 2253.893273][T19238] EXT4-fs error (device loop4): ext4_add_entry:2435: inode #2: comm syz.4.3309: Directory hole found for htree leaf block 0 [ 2254.015427][T14867] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2254.086813][T14867] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2254.109885][T11505] Bluetooth: hci2: command tx timeout [ 2254.171862][T14867] bond0 (unregistering): Released all slaves [ 2254.451496][T18032] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2254.792834][T19239] random: crng reseeded on system resumption [ 2255.398019][T19248] mkiss: ax0: crc mode is auto. [ 2255.401281][T19197] bridge0: port 1(bridge_slave_0) entered blocking state [ 2255.412615][T19197] bridge0: port 1(bridge_slave_0) entered disabled state [ 2255.420660][T19197] bridge_slave_0: entered allmulticast mode [ 2255.432633][T19197] bridge_slave_0: entered promiscuous mode [ 2255.593438][T14867] hsr_slave_0: left promiscuous mode [ 2255.631460][T14867] hsr_slave_1: left promiscuous mode [ 2255.676704][T14867] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2255.684820][T14867] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2255.740787][T14867] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2255.752381][T14867] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2255.878673][T14867] veth1_macvtap: left promiscuous mode [ 2255.884622][T14867] veth0_macvtap: left promiscuous mode [ 2255.892518][T14867] veth1_vlan: left promiscuous mode [ 2255.898180][T14867] veth0_vlan: left promiscuous mode [ 2256.192385][T11505] Bluetooth: hci2: command tx timeout [ 2256.963023][T14867] team0 (unregistering): Port device team_slave_1 removed [ 2257.010696][T14867] team0 (unregistering): Port device team_slave_0 removed [ 2257.375228][T18174] usb 5-1: new full-speed USB device number 29 using dummy_hcd [ 2257.418073][T19197] bridge0: port 2(bridge_slave_1) entered blocking state [ 2257.428717][T19197] bridge0: port 2(bridge_slave_1) entered disabled state [ 2257.436582][T19197] bridge_slave_1: entered allmulticast mode [ 2257.445952][T19197] bridge_slave_1: entered promiscuous mode [ 2257.467985][T19253] mkiss: ax0: crc mode is auto. [ 2257.551458][T16162] bio_check_eod: 5954 callbacks suppressed [ 2257.551539][T16162] syz.3.2627: attempt to access beyond end of device [ 2257.551539][T16162] loop3: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 2257.574304][T16162] syz.3.2627: attempt to access beyond end of device [ 2257.574304][T16162] loop3: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 2257.588913][T16162] syz.3.2627: attempt to access beyond end of device [ 2257.588913][T16162] loop3: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 2257.606698][T16162] syz.3.2627: attempt to access beyond end of device [ 2257.606698][T16162] loop3: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 2257.622727][T16162] syz.3.2627: attempt to access beyond end of device [ 2257.622727][T16162] loop3: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 2257.636675][T16162] syz.3.2627: attempt to access beyond end of device [ 2257.636675][T16162] loop3: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 2257.650573][T16162] syz.3.2627: attempt to access beyond end of device [ 2257.650573][T16162] loop3: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 2257.664390][T16162] syz.3.2627: attempt to access beyond end of device [ 2257.664390][T16162] loop3: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 2257.666395][ T5200] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 2257.678375][T16162] syz.3.2627: attempt to access beyond end of device [ 2257.678375][T16162] loop3: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 2257.678549][T16162] syz.3.2627: attempt to access beyond end of device [ 2257.678549][T16162] loop3: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 2257.772023][T18174] usb 5-1: config 1 interface 0 has no altsetting 0 [ 2257.817004][ T5200] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 2257.833609][ T5200] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 2257.844260][T18174] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2257.853752][T18174] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2257.862183][T18174] usb 5-1: Product: syz [ 2257.866588][T18174] usb 5-1: Manufacturer: syz [ 2257.874246][T18174] usb 5-1: SerialNumber: syz [ 2257.966003][ T5200] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 2257.992949][ T5200] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 2258.006947][ T5200] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 2258.160443][T19197] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2258.296501][T11505] Bluetooth: hci2: command tx timeout [ 2258.340050][T19197] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2258.737516][T18174] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 29 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 2258.812390][T19197] team0: Port device team_slave_0 added [ 2258.867841][T19197] team0: Port device team_slave_1 added [ 2259.206507][T19197] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2259.214051][T19197] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2259.246973][T19197] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2259.364815][T19267] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2259.385687][T19267] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2259.485741][T19267] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2259.501252][T19197] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2259.511673][T19197] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2259.540152][T19197] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2259.649297][T19267] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2260.044457][T19197] hsr_slave_0: entered promiscuous mode [ 2260.109066][ T5200] Bluetooth: hci6: command tx timeout [ 2260.123799][T19197] hsr_slave_1: entered promiscuous mode [ 2260.138093][T19197] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2260.145968][T19197] Cannot create hsr debugfs directory [ 2260.633798][T19259] chnl_net:caif_netlink_parms(): no params data found [ 2260.765810][T15033] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2260.942456][T15033] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2260.994890][ T5251] usb 5-1: USB disconnect, device number 29 [ 2261.070342][ T5251] usblp0: removed [ 2261.235060][T15033] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2261.478696][T15033] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2261.991662][T15033] bridge_slave_1: left allmulticast mode [ 2262.000420][T15033] bridge_slave_1: left promiscuous mode [ 2262.007026][T15033] bridge0: port 2(bridge_slave_1) entered disabled state [ 2262.034546][T15033] bridge_slave_0: left allmulticast mode [ 2262.040976][T15033] bridge_slave_0: left promiscuous mode [ 2262.047552][T15033] bridge0: port 1(bridge_slave_0) entered disabled state [ 2262.215013][ T5200] Bluetooth: hci6: command tx timeout [ 2262.894784][T15033] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2262.955199][T16162] bio_check_eod: 6218 callbacks suppressed [ 2262.955282][T16162] syz.3.2627: attempt to access beyond end of device [ 2262.955282][T16162] loop3: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 2262.975483][T16162] syz.3.2627: attempt to access beyond end of device [ 2262.975483][T16162] loop3: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 2262.989306][T16162] syz.3.2627: attempt to access beyond end of device [ 2262.989306][T16162] loop3: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 2263.003063][T16162] syz.3.2627: attempt to access beyond end of device [ 2263.003063][T16162] loop3: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 2263.016962][T16162] syz.3.2627: attempt to access beyond end of device [ 2263.016962][T16162] loop3: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 2263.034714][T16162] syz.3.2627: attempt to access beyond end of device [ 2263.034714][T16162] loop3: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 2263.049639][T16162] syz.3.2627: attempt to access beyond end of device [ 2263.049639][T16162] loop3: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 2263.063442][T16162] syz.3.2627: attempt to access beyond end of device [ 2263.063442][T16162] loop3: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 2263.077394][T16162] syz.3.2627: attempt to access beyond end of device [ 2263.077394][T16162] loop3: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 2263.092483][T16162] syz.3.2627: attempt to access beyond end of device [ 2263.092483][T16162] loop3: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 2263.170816][T15033] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2263.215195][T15033] bond0 (unregistering): Released all slaves [ 2264.089289][T19259] bridge0: port 1(bridge_slave_0) entered blocking state [ 2264.097024][T19259] bridge0: port 1(bridge_slave_0) entered disabled state [ 2264.105164][T19259] bridge_slave_0: entered allmulticast mode [ 2264.117354][T19259] bridge_slave_0: entered promiscuous mode [ 2264.234432][T19259] bridge0: port 2(bridge_slave_1) entered blocking state [ 2264.242358][T19259] bridge0: port 2(bridge_slave_1) entered disabled state [ 2264.252115][T19259] bridge_slave_1: entered allmulticast mode [ 2264.263917][T19259] bridge_slave_1: entered promiscuous mode [ 2264.275677][ T5200] Bluetooth: hci6: command tx timeout [ 2264.341258][T15033] hsr_slave_0: left promiscuous mode [ 2264.375545][T15033] hsr_slave_1: left promiscuous mode [ 2264.476062][T15033] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2264.484030][T15033] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2264.515996][T15033] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2264.524007][T15033] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2264.566525][T15033] veth1_macvtap: left promiscuous mode [ 2264.572505][T15033] veth0_macvtap: left promiscuous mode [ 2264.578986][T15033] veth1_vlan: left promiscuous mode [ 2264.584585][T15033] veth0_vlan: left promiscuous mode [ 2265.423058][T15033] team0 (unregistering): Port device team_slave_1 removed [ 2265.472156][T15033] team0 (unregistering): Port device team_slave_0 removed [ 2266.233401][T19197] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2266.362430][T19259] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2266.372121][T19197] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2266.438558][ T5200] Bluetooth: hci6: command tx timeout [ 2266.456811][T19259] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2266.480196][T19197] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2266.617111][T19197] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2266.975708][T19301] veth1_to_bridge: entered allmulticast mode [ 2267.031544][T19301] veth1_to_bridge: left allmulticast mode [ 2267.056503][T19259] team0: Port device team_slave_0 added [ 2267.105330][T19259] team0: Port device team_slave_1 added [ 2267.466580][T19259] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2267.474112][T19259] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2267.503209][T19259] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2267.556079][T19259] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2267.567492][T19259] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2267.597306][T19259] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2268.036607][T19259] hsr_slave_0: entered promiscuous mode [ 2268.085174][T16162] bio_check_eod: 5314 callbacks suppressed [ 2268.085255][T16162] syz.3.2627: attempt to access beyond end of device [ 2268.085255][T16162] loop3: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 2268.088092][T19259] hsr_slave_1: entered promiscuous mode [ 2268.091521][T16162] syz.3.2627: attempt to access beyond end of device [ 2268.091521][T16162] loop3: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 2268.124545][T16162] syz.3.2627: attempt to access beyond end of device [ 2268.124545][T16162] loop3: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 2268.138598][T16162] syz.3.2627: attempt to access beyond end of device [ 2268.138598][T16162] loop3: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 2268.155697][T16162] syz.3.2627: attempt to access beyond end of device [ 2268.155697][T16162] loop3: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 2268.170352][T16162] syz.3.2627: attempt to access beyond end of device [ 2268.170352][T16162] loop3: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 2268.184270][T16162] syz.3.2627: attempt to access beyond end of device [ 2268.184270][T16162] loop3: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 2268.198115][T16162] syz.3.2627: attempt to access beyond end of device [ 2268.198115][T16162] loop3: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 2268.212227][T16162] syz.3.2627: attempt to access beyond end of device [ 2268.212227][T16162] loop3: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 2268.226044][T16162] syz.3.2627: attempt to access beyond end of device [ 2268.226044][T16162] loop3: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 2268.251586][T19259] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2268.260030][T19259] Cannot create hsr debugfs directory [ 2268.582379][T19197] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2269.055714][T19197] 8021q: adding VLAN 0 to HW filter on device team0 [ 2269.177444][T14883] bridge0: port 1(bridge_slave_0) entered blocking state [ 2269.185278][T14883] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2269.316261][T14883] bridge0: port 2(bridge_slave_1) entered blocking state [ 2269.322111][T19311] loop4: detected capacity change from 0 to 512 [ 2269.323975][T14883] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2269.513942][T19311] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2269.655559][T19311] EXT4-fs error (device loop4): ext4_do_update_inode:5154: inode #2: comm syz.4.3332: corrupted inode contents [ 2269.735798][T19311] EXT4-fs error (device loop4): ext4_dirty_inode:6014: inode #2: comm syz.4.3332: mark_inode_dirty error [ 2269.783629][T19311] EXT4-fs error (device loop4): ext4_do_update_inode:5154: inode #2: comm syz.4.3332: corrupted inode contents [ 2269.900526][T19318] EXT4-fs error (device loop4): ext4_add_entry:2435: inode #2: comm syz.4.3332: Directory hole found for htree leaf block 0 [ 2270.385875][T19259] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2270.514296][T18032] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2270.551982][T19259] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2270.607185][T19259] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2270.684842][T19324] mkiss: ax0: crc mode is auto. [ 2270.689556][T19259] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2270.861777][T19327] mkiss: ax0: crc mode is auto. [ 2271.738447][T19197] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2271.867019][T19259] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2272.067259][T19259] 8021q: adding VLAN 0 to HW filter on device team0 [ 2272.166558][T14920] bridge0: port 1(bridge_slave_0) entered blocking state [ 2272.174563][T14920] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2272.198841][T19197] veth0_vlan: entered promiscuous mode [ 2272.265531][T14920] bridge0: port 2(bridge_slave_1) entered blocking state [ 2272.273377][T14920] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2272.317775][T19197] veth1_vlan: entered promiscuous mode [ 2272.776922][T19197] veth0_macvtap: entered promiscuous mode [ 2272.893230][T19197] veth1_macvtap: entered promiscuous mode [ 2273.051146][T19197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2273.065770][T19197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2273.076456][T19197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2273.087275][T19197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2273.100101][T19197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2273.110923][T19197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2273.121206][T19197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2273.134765][T19197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2273.153761][T19197] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2273.212071][T19197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2273.228092][T19197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2273.239478][T19197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2273.252907][T19197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2273.264262][T19197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2273.275466][T19197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2273.288484][T19197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2273.300009][T19197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2273.315227][T19197] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2273.360840][T19197] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2273.372137][T19197] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2273.384434][T19197] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2273.393822][T19197] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2273.510650][T16162] bio_check_eod: 9126 callbacks suppressed [ 2273.510731][T16162] syz.3.2627: attempt to access beyond end of device [ 2273.510731][T16162] loop3: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 2273.531754][T16162] syz.3.2627: attempt to access beyond end of device [ 2273.531754][T16162] loop3: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 2273.548807][T16162] syz.3.2627: attempt to access beyond end of device [ 2273.548807][T16162] loop3: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 2273.566047][T16162] syz.3.2627: attempt to access beyond end of device [ 2273.566047][T16162] loop3: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 2273.583376][T16162] syz.3.2627: attempt to access beyond end of device [ 2273.583376][T16162] loop3: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 2273.598086][T16162] syz.3.2627: attempt to access beyond end of device [ 2273.598086][T16162] loop3: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 2273.611968][T16162] syz.3.2627: attempt to access beyond end of device [ 2273.611968][T16162] loop3: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 2273.625731][T16162] syz.3.2627: attempt to access beyond end of device [ 2273.625731][T16162] loop3: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 2273.641025][T16162] syz.3.2627: attempt to access beyond end of device [ 2273.641025][T16162] loop3: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 2273.654905][T16162] syz.3.2627: attempt to access beyond end of device [ 2273.654905][T16162] loop3: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 2274.484423][T19351] fuse: Bad value for 'fd' [ 2275.164282][T19259] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2275.675113][T19259] veth0_vlan: entered promiscuous mode [ 2275.842248][T19259] veth1_vlan: entered promiscuous mode [ 2276.186074][T19259] veth0_macvtap: entered promiscuous mode [ 2276.261612][T19364] loop1: detected capacity change from 0 to 512 [ 2276.299914][T19259] veth1_macvtap: entered promiscuous mode [ 2276.400800][T19364] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2276.477288][T19364] EXT4-fs error (device loop1): ext4_do_update_inode:5154: inode #2: comm syz.1.3343: corrupted inode contents [ 2276.570862][T19364] EXT4-fs error (device loop1): ext4_dirty_inode:6014: inode #2: comm syz.1.3343: mark_inode_dirty error [ 2276.580069][T19259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2276.596076][T19259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2276.606258][T19259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2276.617104][T19259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2276.630169][T19259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2276.642788][T19259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2276.653400][T19259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2276.666819][T19259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2276.679387][T19259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2276.693279][T19259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2276.708764][T19259] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2276.754526][T19364] EXT4-fs error (device loop1): ext4_do_update_inode:5154: inode #2: comm syz.1.3343: corrupted inode contents [ 2276.932642][T19259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2276.943846][T19259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2276.957191][T19259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2276.957970][T19371] EXT4-fs error (device loop1): ext4_add_entry:2435: inode #2: comm syz.1.3343: Directory hole found for htree leaf block 0 [ 2276.968891][T19259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2276.969001][T19259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2276.969094][T19259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2276.969180][T19259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2276.969270][T19259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2276.969358][T19259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2276.969445][T19259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2276.974379][T19259] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2277.264536][T19259] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2277.275495][T19259] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2277.285112][T19259] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2277.294086][T19259] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2277.558331][T18903] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2278.069966][T19382] mkiss: ax0: crc mode is auto. [ 2278.653256][T16162] bio_check_eod: 5578 callbacks suppressed [ 2278.653343][T16162] syz.3.2627: attempt to access beyond end of device [ 2278.653343][T16162] loop3: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 2278.674967][T16162] syz.3.2627: attempt to access beyond end of device [ 2278.674967][T16162] loop3: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 2278.692256][T16162] syz.3.2627: attempt to access beyond end of device [ 2278.692256][T16162] loop3: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 2278.706998][T16162] syz.3.2627: attempt to access beyond end of device [ 2278.706998][T16162] loop3: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 2278.720998][T16162] syz.3.2627: attempt to access beyond end of device [ 2278.720998][T16162] loop3: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 2278.735212][T16162] syz.3.2627: attempt to access beyond end of device [ 2278.735212][T16162] loop3: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 2278.750048][T16162] syz.3.2627: attempt to access beyond end of device [ 2278.750048][T16162] loop3: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 2278.764051][T16162] syz.3.2627: attempt to access beyond end of device [ 2278.764051][T16162] loop3: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 2278.775992][T19382] mkiss: ax0: crc mode is auto. [ 2278.777952][T16162] syz.3.2627: attempt to access beyond end of device [ 2278.777952][T16162] loop3: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 2278.800527][T16162] syz.3.2627: attempt to access beyond end of device [ 2278.800527][T16162] loop3: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 2279.874740][T13876] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2279.885836][T13876] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2280.086541][T14920] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2280.094801][T14920] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2283.767710][T16162] bio_check_eod: 4534 callbacks suppressed [ 2283.767795][T16162] syz.3.2627: attempt to access beyond end of device [ 2283.767795][T16162] loop3: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 2283.787849][T16162] syz.3.2627: attempt to access beyond end of device [ 2283.787849][T16162] loop3: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 2283.803593][T16162] syz.3.2627: attempt to access beyond end of device [ 2283.803593][T16162] loop3: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 2283.821584][T16162] syz.3.2627: attempt to access beyond end of device [ 2283.821584][T16162] loop3: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 2283.836530][T19439] mkiss: ax0: crc mode is auto. [ 2283.842374][T16162] syz.3.2627: attempt to access beyond end of device [ 2283.842374][T16162] loop3: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 2283.856501][T16162] syz.3.2627: attempt to access beyond end of device [ 2283.856501][T16162] loop3: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 2283.876905][T16162] syz.3.2627: attempt to access beyond end of device [ 2283.876905][T16162] loop3: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 2283.890761][T16162] syz.3.2627: attempt to access beyond end of device [ 2283.890761][T16162] loop3: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 2283.905116][T16162] syz.3.2627: attempt to access beyond end of device [ 2283.905116][T16162] loop3: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 2283.922709][T16162] syz.3.2627: attempt to access beyond end of device [ 2283.922709][T16162] loop3: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 2284.031028][T11505] Bluetooth: hci5: command 0x0406 tx timeout [ 2284.117773][T19441] mkiss: ax0: crc mode is auto. [ 2286.062996][T13876] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2286.071189][T13876] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2286.317075][T13876] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2286.325680][T13876] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2286.915082][T19471] loop2: detected capacity change from 0 to 512 [ 2287.064198][T19471] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2287.181176][T19479] mkiss: ax0: crc mode is auto. [ 2287.747744][T19471] EXT4-fs error (device loop2): ext4_do_update_inode:5154: inode #2: comm syz.2.3369: corrupted inode contents [ 2287.824421][T19480] mkiss: ax0: crc mode is auto. [ 2287.851322][T19471] EXT4-fs error (device loop2): ext4_dirty_inode:6014: inode #2: comm syz.2.3369: mark_inode_dirty error [ 2287.998310][T19471] EXT4-fs error (device loop2): ext4_do_update_inode:5154: inode #2: comm syz.2.3369: corrupted inode contents [ 2288.129942][T19481] EXT4-fs error (device loop2): ext4_add_entry:2435: inode #2: comm syz.2.3369: Directory hole found for htree leaf block 0 [ 2288.512696][T19197] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2289.204151][T16162] bio_check_eod: 5682 callbacks suppressed [ 2289.204210][T16162] syz.3.2627: attempt to access beyond end of device [ 2289.204210][T16162] loop3: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 2289.224049][T16162] syz.3.2627: attempt to access beyond end of device [ 2289.224049][T16162] loop3: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 2289.241987][T16162] syz.3.2627: attempt to access beyond end of device [ 2289.241987][T16162] loop3: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 2289.258423][T16162] syz.3.2627: attempt to access beyond end of device [ 2289.258423][T16162] loop3: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 2289.275754][T16162] syz.3.2627: attempt to access beyond end of device [ 2289.275754][T16162] loop3: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 2289.289389][T16162] syz.3.2627: attempt to access beyond end of device [ 2289.289389][T16162] loop3: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 2289.304757][T16162] syz.3.2627: attempt to access beyond end of device [ 2289.304757][T16162] loop3: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 2289.318395][T16162] syz.3.2627: attempt to access beyond end of device [ 2289.318395][T16162] loop3: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 2289.333742][T16162] syz.3.2627: attempt to access beyond end of device [ 2289.333742][T16162] loop3: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 2289.349882][T16162] syz.3.2627: attempt to access beyond end of device [ 2289.349882][T16162] loop3: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 2290.227589][T19496] fuse: Bad value for 'fd' [ 2290.384679][T19508] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3379'. [ 2290.479052][ T2824] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 2290.727641][ T2824] usb 2-1: Using ep0 maxpacket: 16 [ 2290.756679][ T2824] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2290.768348][ T2824] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2290.781655][ T2824] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2290.796030][ T2824] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2290.805456][ T2824] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2290.846438][ T2824] usb 2-1: config 0 descriptor?? [ 2291.533274][T19525] mkiss: ax0: crc mode is auto. [ 2291.658773][ T2824] microsoft 0003:045E:07DA.0016: No inputs registered, leaving [ 2291.728299][ T2824] microsoft 0003:045E:07DA.0016: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 2291.740474][ T2824] microsoft 0003:045E:07DA.0016: no inputs found [ 2291.746952][ T2824] microsoft 0003:045E:07DA.0016: could not initialize ff, continuing anyway [ 2291.821802][T19526] mkiss: ax0: crc mode is auto. [ 2291.909675][ T2824] usb 2-1: USB disconnect, device number 35 [ 2292.074094][T19528] loop4: detected capacity change from 0 to 512 [ 2292.183233][T19528] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2292.332767][T19528] EXT4-fs error (device loop4): ext4_do_update_inode:5154: inode #2: comm syz.4.3385: corrupted inode contents [ 2292.406589][T19528] EXT4-fs error (device loop4): ext4_dirty_inode:6014: inode #2: comm syz.4.3385: mark_inode_dirty error [ 2292.484503][T19528] EXT4-fs error (device loop4): ext4_do_update_inode:5154: inode #2: comm syz.4.3385: corrupted inode contents [ 2292.528870][T19532] EXT4-fs error (device loop4): ext4_add_entry:2435: inode #2: comm syz.4.3385: Directory hole found for htree leaf block 0 [ 2292.756411][T18032] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2293.918945][T19552] Cannot find set identified by id 0 to match [ 2294.073269][T19552] kernel profiling enabled (shift: 17) [ 2294.790744][T16162] bio_check_eod: 6150 callbacks suppressed [ 2294.790801][T16162] syz.3.2627: attempt to access beyond end of device [ 2294.790801][T16162] loop3: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 2294.812916][T16162] syz.3.2627: attempt to access beyond end of device [ 2294.812916][T16162] loop3: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 2294.826547][T16162] syz.3.2627: attempt to access beyond end of device [ 2294.826547][T16162] loop3: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 2294.843453][T16162] syz.3.2627: attempt to access beyond end of device [ 2294.843453][T16162] loop3: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 2294.858489][T16162] syz.3.2627: attempt to access beyond end of device [ 2294.858489][T16162] loop3: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 2294.876377][T16162] syz.3.2627: attempt to access beyond end of device [ 2294.876377][T16162] loop3: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 2294.890755][T16162] syz.3.2627: attempt to access beyond end of device [ 2294.890755][T16162] loop3: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 2294.906687][T16162] syz.3.2627: attempt to access beyond end of device [ 2294.906687][T16162] loop3: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 2294.920428][T16162] syz.3.2627: attempt to access beyond end of device [ 2294.920428][T16162] loop3: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 2294.935785][T16162] syz.3.2627: attempt to access beyond end of device [ 2294.935785][T16162] loop3: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 2296.142360][T19580] loop2: detected capacity change from 0 to 512 [ 2296.252474][T19580] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2296.387399][T19583] loop4: detected capacity change from 0 to 1024 [ 2296.454198][T19580] EXT4-fs error (device loop2): ext4_do_update_inode:5154: inode #2: comm syz.2.3399: corrupted inode contents [ 2296.575326][T19583] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 2296.645773][T19580] EXT4-fs error (device loop2): ext4_dirty_inode:6014: inode #2: comm syz.2.3399: mark_inode_dirty error [ 2296.700354][T19580] EXT4-fs error (device loop2): ext4_do_update_inode:5154: inode #2: comm syz.2.3399: corrupted inode contents [ 2296.901565][T19591] EXT4-fs error (device loop2): ext4_add_entry:2435: inode #2: comm syz.2.3399: Directory hole found for htree leaf block 0 [ 2297.387017][T19197] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2299.448794][ T2824] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 2299.700473][ T2824] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2299.747350][ T2824] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 2299.757385][ T2824] usb 5-1: New USB device strings: Mfr=0, Product=162, SerialNumber=123 [ 2299.766129][ T2824] usb 5-1: Product: syz [ 2299.770515][ T2824] usb 5-1: SerialNumber: syz [ 2299.802928][ T2824] usb 5-1: config 0 descriptor?? [ 2299.823020][ T2824] pwc: Askey VC010 type 2 USB webcam detected. [ 2299.951314][T16162] bio_check_eod: 7118 callbacks suppressed [ 2299.951395][T16162] syz.3.2627: attempt to access beyond end of device [ 2299.951395][T16162] loop3: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 2299.974660][T16162] syz.3.2627: attempt to access beyond end of device [ 2299.974660][T16162] loop3: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 2299.992342][T16162] syz.3.2627: attempt to access beyond end of device [ 2299.992342][T16162] loop3: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 2300.009712][T16162] syz.3.2627: attempt to access beyond end of device [ 2300.009712][T16162] loop3: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 2300.023675][T16162] syz.3.2627: attempt to access beyond end of device [ 2300.023675][T16162] loop3: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 2300.037517][T16162] syz.3.2627: attempt to access beyond end of device [ 2300.037517][T16162] loop3: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 2300.053643][T16162] syz.3.2627: attempt to access beyond end of device [ 2300.053643][T16162] loop3: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 2300.067355][T16162] syz.3.2627: attempt to access beyond end of device [ 2300.067355][T16162] loop3: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 2300.083895][T16162] syz.3.2627: attempt to access beyond end of device [ 2300.083895][T16162] loop3: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 2300.101462][T16162] syz.3.2627: attempt to access beyond end of device [ 2300.101462][T16162] loop3: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 2300.319792][ T2824] pwc: send_video_command error -71 [ 2300.325415][ T2824] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 2300.333739][ T2824] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71 [ 2300.347047][ T2824] usb 5-1: USB disconnect, device number 30 [ 2300.753259][T19629] bridge: RTM_NEWNEIGH with invalid ether address [ 2300.767983][T19629] bridge0: port 2(bridge_slave_1) entered disabled state [ 2300.776851][T19629] bridge0: port 1(bridge_slave_0) entered disabled state [ 2300.866853][T19630] bridge_slave_1: left allmulticast mode [ 2300.872817][T19630] bridge_slave_1: left promiscuous mode [ 2300.880882][T19630] bridge0: port 2(bridge_slave_1) entered disabled state [ 2300.984606][T19630] bridge_slave_0: left allmulticast mode [ 2300.991914][T19630] bridge_slave_0: left promiscuous mode [ 2300.998344][T19630] bridge0: port 1(bridge_slave_0) entered disabled state [ 2302.244932][T19643] vivid-000: ================= START STATUS ================= [ 2302.254090][T19643] vivid-000: Radio HW Seek Mode: Bounded [ 2302.260034][T19643] vivid-000: Radio Programmable HW Seek: false [ 2302.266399][T19643] vivid-000: RDS Rx I/O Mode: Block I/O [ 2302.272274][T19643] vivid-000: Generate RBDS Instead of RDS: false [ 2302.278999][T19643] vivid-000: RDS Reception: true [ 2302.284225][T19643] vivid-000: RDS Program Type: 0 inactive [ 2302.290301][T19643] vivid-000: RDS PS Name: inactive [ 2302.295711][T19643] vivid-000: RDS Radio Text: inactive [ 2302.301507][T19643] vivid-000: RDS Traffic Announcement: false inactive [ 2302.308733][T19643] vivid-000: RDS Traffic Program: false inactive [ 2302.315271][T19643] vivid-000: RDS Music: false inactive [ 2302.321138][T19643] vivid-000: ================== END STATUS ================== [ 2302.832638][ T5251] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 2303.079799][ T5251] usb 3-1: Using ep0 maxpacket: 16 [ 2303.172503][ T5251] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 2303.184452][ T5251] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2303.308408][ T5251] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 2303.317736][ T5251] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2303.326036][ T5251] usb 3-1: Product: syz [ 2303.330584][ T5251] usb 3-1: Manufacturer: syz [ 2303.335356][ T5251] usb 3-1: SerialNumber: syz [ 2303.451844][ T5251] usb 3-1: config 0 descriptor?? [ 2303.528617][ T5251] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 2303.538409][ T5251] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 2304.524165][T11505] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2304.536176][ T5251] em28xx 3-1:0.0: chip ID is em2874 [ 2304.546404][T11505] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2304.573864][T11505] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2304.601910][T11505] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2304.616532][T11505] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 2304.632773][T11505] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2304.947407][T19661] loop4: detected capacity change from 0 to 1024 [ 2305.133073][T19661] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 2305.277963][T16162] bio_check_eod: 7382 callbacks suppressed [ 2305.278019][T16162] syz.3.2627: attempt to access beyond end of device [ 2305.278019][T16162] loop3: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 2305.300040][T16162] syz.3.2627: attempt to access beyond end of device [ 2305.300040][T16162] loop3: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 2305.316250][T16162] syz.3.2627: attempt to access beyond end of device [ 2305.316250][T16162] loop3: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 2305.332293][T16162] syz.3.2627: attempt to access beyond end of device [ 2305.332293][T16162] loop3: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 2305.346028][T16162] syz.3.2627: attempt to access beyond end of device [ 2305.346028][T16162] loop3: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 2305.362160][T16162] syz.3.2627: attempt to access beyond end of device [ 2305.362160][T16162] loop3: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 2305.375865][T16162] syz.3.2627: attempt to access beyond end of device [ 2305.375865][T16162] loop3: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 2305.391255][T16162] syz.3.2627: attempt to access beyond end of device [ 2305.391255][T16162] loop3: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 2305.405008][T16162] syz.3.2627: attempt to access beyond end of device [ 2305.405008][T16162] loop3: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 2305.422760][T16162] syz.3.2627: attempt to access beyond end of device [ 2305.422760][T16162] loop3: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 2305.571485][T18174] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 2305.768441][T18174] usb 1-1: Using ep0 maxpacket: 16 [ 2305.783733][T18174] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2305.796252][T18174] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2305.806502][T18174] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2305.821614][T18174] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2305.832876][T18174] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2305.906062][T18174] usb 1-1: config 0 descriptor?? [ 2306.550252][T18174] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 2306.557880][T18174] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 2306.566094][T18174] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 2306.582206][T18174] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 2306.590670][T18174] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 2306.601139][T18174] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 2306.608964][T18174] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 2306.839643][T11505] Bluetooth: hci4: command tx timeout [ 2306.854988][T19660] chnl_net:caif_netlink_parms(): no params data found [ 2306.874742][ T2824] usb 3-1: USB disconnect, device number 20 [ 2306.882338][ T2824] em28xx 3-1:0.0: Disconnecting em28xx [ 2306.889625][T18174] microsoft 0003:045E:07DA.0017: No inputs registered, leaving [ 2306.921754][ T2824] em28xx 3-1:0.0: Freeing device [ 2307.010793][T18174] microsoft 0003:045E:07DA.0017: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 2307.025648][T18174] microsoft 0003:045E:07DA.0017: no inputs found [ 2307.039083][T18174] microsoft 0003:045E:07DA.0017: could not initialize ff, continuing anyway [ 2307.571587][T19687] sg_write: data in/out 1073742069/118 bytes for SCSI command 0x0-- guessing data in; [ 2307.571587][T19687] program syz.2.3431 not setting count and/or reply_len properly [ 2307.605835][ T1242] ieee802154 phy0 wpan0: encryption failed: -22 [ 2307.612822][ T1242] ieee802154 phy1 wpan1: encryption failed: -22 [ 2308.120485][T14592] usb 1-1: USB disconnect, device number 40 [ 2308.374535][T19660] bridge0: port 1(bridge_slave_0) entered blocking state [ 2308.387367][T19660] bridge0: port 1(bridge_slave_0) entered disabled state [ 2308.395837][T19660] bridge_slave_0: entered allmulticast mode [ 2308.405863][T19660] bridge_slave_0: entered promiscuous mode [ 2308.508000][T19660] bridge0: port 2(bridge_slave_1) entered blocking state [ 2308.521262][T19660] bridge0: port 2(bridge_slave_1) entered disabled state [ 2308.529158][T19660] bridge_slave_1: entered allmulticast mode [ 2308.537450][T19660] bridge_slave_1: entered promiscuous mode [ 2308.838432][ T2824] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 2308.855986][T19660] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2308.909913][T11505] Bluetooth: hci4: command tx timeout [ 2308.935028][T19660] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2309.058385][ T2824] usb 3-1: Using ep0 maxpacket: 8 [ 2309.087887][ T2824] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 2309.097477][ T2824] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2309.107863][ T2824] usb 3-1: Product: syz [ 2309.112976][ T2824] usb 3-1: Manufacturer: syz [ 2309.117714][ T2824] usb 3-1: SerialNumber: syz [ 2309.245570][ T2824] usb 3-1: config 0 descriptor?? [ 2309.282245][T19660] team0: Port device team_slave_0 added [ 2309.537510][ T2824] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 2309.576738][T19660] team0: Port device team_slave_1 added [ 2309.864411][T19660] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2309.871989][T19660] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2309.898676][T19660] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2310.088580][T19660] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2310.096089][T19660] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2310.122703][T19660] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2310.286485][T16162] bio_check_eod: 6534 callbacks suppressed [ 2310.286617][T16162] syz.3.2627: attempt to access beyond end of device [ 2310.286617][T16162] loop3: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 2310.307082][T16162] syz.3.2627: attempt to access beyond end of device [ 2310.307082][T16162] loop3: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 2310.321104][T16162] syz.3.2627: attempt to access beyond end of device [ 2310.321104][T16162] loop3: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 2310.342522][T16162] syz.3.2627: attempt to access beyond end of device [ 2310.342522][T16162] loop3: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 2310.356911][T16162] syz.3.2627: attempt to access beyond end of device [ 2310.356911][T16162] loop3: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 2310.371443][T16162] syz.3.2627: attempt to access beyond end of device [ 2310.371443][T16162] loop3: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 2310.385389][T16162] syz.3.2627: attempt to access beyond end of device [ 2310.385389][T16162] loop3: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 2310.399347][T16162] syz.3.2627: attempt to access beyond end of device [ 2310.399347][T16162] loop3: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 2310.413885][T16162] syz.3.2627: attempt to access beyond end of device [ 2310.413885][T16162] loop3: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 2310.427986][T16162] syz.3.2627: attempt to access beyond end of device [ 2310.427986][T16162] loop3: rw=0, sector=6491554, nr_sectors = 2 limit=0 [ 2310.606070][T11505] ===================================================== [ 2310.613770][T11505] BUG: KMSAN: uninit-value in l2cap_recv_frame+0xc9c5/0x18b10 [ 2310.621832][T11505] l2cap_recv_frame+0xc9c5/0x18b10 [ 2310.627287][T11505] l2cap_recv_acldata+0xdd9/0x2ac0 [ 2310.632908][T11505] hci_rx_work+0xb38/0x1130 [ 2310.642980][T11505] process_scheduled_works+0xae0/0x1c40 [ 2310.648995][T11505] worker_thread+0xea7/0x14d0 [ 2310.654953][T11505] kthread+0x3e2/0x540 [ 2310.660788][T11505] ret_from_fork+0x6d/0x90 [ 2310.665498][T11505] ret_from_fork_asm+0x1a/0x30 [ 2310.670822][T11505] [ 2310.673331][T11505] Uninit was created at: [ 2310.678156][T11505] kmem_cache_alloc_node_noprof+0x6bf/0xb80 [ 2310.684371][T11505] kmalloc_reserve+0x13d/0x4a0 [ 2310.689597][T11505] __alloc_skb+0x363/0x7b0 [ 2310.694316][T11505] vhci_write+0x128/0x910 [ 2310.699161][T11505] vfs_write+0xb2f/0x1550 [ 2310.703829][T11505] ksys_write+0x20f/0x4c0 [ 2310.708823][T11505] __x64_sys_write+0x93/0xe0 [ 2310.713689][T11505] x64_sys_call+0x306a/0x3ba0 [ 2310.718684][T11505] do_syscall_64+0xcd/0x1e0 [ 2310.723536][T11505] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2310.730429][T11505] [ 2310.733060][T11505] CPU: 1 UID: 0 PID: 11505 Comm: kworker/u9:0 Not tainted 6.11.0-rc6-syzkaller-00026-g88fac17500f4 #0 [ 2310.749281][T11505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 2310.759684][T11505] Workqueue: hci6 hci_rx_work [ 2310.764494][T11505] ===================================================== [ 2310.771655][T11505] Disabling lock debugging due to kernel taint [ 2310.777887][T11505] Kernel panic - not syncing: kmsan.panic set ... [ 2310.784372][T11505] CPU: 1 UID: 0 PID: 11505 Comm: kworker/u9:0 Tainted: G B 6.11.0-rc6-syzkaller-00026-g88fac17500f4 #0 [ 2310.796904][T11505] Tainted: [B]=BAD_PAGE [ 2310.801283][T11505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 2310.811482][T11505] Workqueue: hci6 hci_rx_work [ 2310.816274][T11505] Call Trace: [ 2310.819617][T11505] [ 2310.822603][T11505] dump_stack_lvl+0x216/0x2d0 [ 2310.827424][T11505] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 2310.833369][T11505] dump_stack+0x1e/0x30 [ 2310.837634][T11505] panic+0x4e2/0xcd0 [ 2310.841666][T11505] ? kmsan_get_metadata+0x101/0x1c0 [ 2310.847086][T11505] kmsan_report+0x2c7/0x2d0 [ 2310.851796][T11505] ? kmsan_get_metadata+0x13e/0x1c0 [ 2310.857115][T11505] ? __msan_warning+0x95/0x120 [ 2310.861982][T11505] ? l2cap_recv_frame+0xc9c5/0x18b10 [ 2310.867392][T11505] ? l2cap_recv_acldata+0xdd9/0x2ac0 [ 2310.872793][T11505] ? hci_rx_work+0xb38/0x1130 [ 2310.877566][T11505] ? process_scheduled_works+0xae0/0x1c40 [ 2310.883394][T11505] ? worker_thread+0xea7/0x14d0 [ 2310.888385][T11505] ? kthread+0x3e2/0x540 [ 2310.892807][T11505] ? ret_from_fork+0x6d/0x90 [ 2310.897503][T11505] ? ret_from_fork_asm+0x1a/0x30 [ 2310.902560][T11505] ? kmsan_get_metadata+0x13e/0x1c0 [ 2310.907877][T11505] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 2310.913805][T11505] ? kmsan_get_metadata+0x13e/0x1c0 [ 2310.919142][T11505] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 2310.925144][T11505] ? kmsan_get_metadata+0x13e/0x1c0 [ 2310.930458][T11505] ? kmsan_get_metadata+0x13e/0x1c0 [ 2310.935773][T11505] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 2310.941786][T11505] ? kmsan_get_metadata+0x13e/0x1c0 [ 2310.947134][T11505] ? kmsan_get_metadata+0x13e/0x1c0 [ 2310.952534][T11505] ? kmsan_get_metadata+0x13e/0x1c0 [ 2310.957852][T11505] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 2310.963785][T11505] ? kmsan_get_metadata+0x13e/0x1c0 [ 2310.969101][T11505] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 2310.975031][T11505] __msan_warning+0x95/0x120 [ 2310.979747][T11505] l2cap_recv_frame+0xc9c5/0x18b10 [ 2310.985062][T11505] ? flat_send_IPI_mask+0x4b/0xd0 [ 2310.990237][T11505] ? filter_irq_stacks+0x60/0x1a0 [ 2310.995357][T11505] ? kmsan_get_metadata+0x13e/0x1c0 [ 2311.000672][T11505] ? kmsan_get_metadata+0x13e/0x1c0 [ 2311.005984][T11505] ? kmsan_get_metadata+0x13e/0x1c0 [ 2311.011300][T11505] ? kmsan_get_metadata+0x13e/0x1c0 [ 2311.016617][T11505] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 2311.022546][T11505] ? kmsan_get_metadata+0x13e/0x1c0 [ 2311.027860][T11505] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 2311.034301][T11505] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 2311.040504][T11505] ? irqentry_enter+0x37/0x60 [ 2311.045372][T11505] ? sysvec_apic_timer_interrupt+0x52/0x90 [ 2311.051384][T11505] ? l2cap_recv_acldata+0xea/0x2ac0 [ 2311.056721][T11505] ? l2cap_recv_acldata+0xdbe/0x2ac0 [ 2311.062133][T11505] l2cap_recv_acldata+0xdd9/0x2ac0 [ 2311.067382][T11505] hci_rx_work+0xb38/0x1130 [ 2311.072014][T11505] ? __pfx_hci_rx_work+0x10/0x10 [ 2311.077058][T11505] process_scheduled_works+0xae0/0x1c40 [ 2311.082761][T11505] worker_thread+0xea7/0x14d0 [ 2311.087590][T11505] kthread+0x3e2/0x540 [ 2311.091774][T11505] ? __pfx_worker_thread+0x10/0x10 [ 2311.097021][T11505] ? __pfx_kthread+0x10/0x10 [ 2311.101758][T11505] ret_from_fork+0x6d/0x90 [ 2311.106284][T11505] ? __pfx_kthread+0x10/0x10 [ 2311.110992][T11505] ret_from_fork_asm+0x1a/0x30 [ 2311.115878][T11505] [ 2311.119124][T11505] Kernel Offset: disabled [ 2311.123537][T11505] Rebooting in 86400 seconds..