last executing test programs: 10.929305105s ago: executing program 2 (id=2075): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x6, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 8.671787472s ago: executing program 4 (id=2101): r0 = creat(&(0x7f0000000340)='./file0\x00', 0x0) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 8.545475622s ago: executing program 4 (id=2102): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000180)={0x0, 0x1, 0x6, @dev}, 0x10) 7.298912464s ago: executing program 0 (id=2114): unshare(0x22020600) socket(0x840000000002, 0x3, 0xff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) 7.257391971s ago: executing program 4 (id=2115): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x0, 0x0}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000003d80)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000580)="838f5edb1dbf110d658ad97e31", 0xd}, {&(0x7f0000001340)="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", 0x41e}], 0x2}}], 0x1, 0x0) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 7.091315846s ago: executing program 4 (id=2117): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x297880, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x201c448, &(0x7f0000000080)=ANY=[@ANYBLOB='map=acorn,utf8,session=0x0000000000000004,session=0x0000000000000056,map=normal,session=0x000000000000003d,unhide,norock,block=0x0000000000000400,map=off,session=0x0000000000000001,uid=', @ANYRESDEC=0x0, @ANYBLOB=',gid=', @ANYRESDEC=0x0, @ANYRESOCT=0x0], 0x1, 0xa78, &(0x7f0000000fc0)="$eJzs3c1vHGf9APDvbGzHdqs2bfNr+4vaZpIqrdsGZ23TRFEPNLHXyRa/INuRGgnUVI2DolgUNSC1EVJTCXGiokIICZAQ6pFTpXKgF5QTcOTEAQn6H6CKU4qAQTO7a+86+5K4azstn0+03pl5vs/bzOw88Xp3nuDzLMuy4rHF9XO/3snGcvc5PfPx+x+8mz/euR5DsSeeT34bMRwRacTAv4tzZXB6ZmlxvkdBVyIuRMSNiCQi9kbtuYORlrULkfwo7t1YvxHJL+LRNtmG77Bz9JTxP223zz8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALgrTc+UyxNJzFUXzr2cdlZMAd4lvVHcR8Ws38lHvapNIpL8EcPDjam+H92/kfxw/uNwPFZbe6w28/dwXLvn4X0vPDRQauTv0qAdcfWta1deXVtbfaO+vjdNB3tm2rvtzbpzQ1vLdqayUF1erM6fOlNJq8uL6cnjx8vHzs4up7PVqCyfX16pzKfTS5VTK4tL6dj0M+nEyZNTaWX8/OK5hTMz43OVxsYTX5osl4+nL41/rXJqaXlx4dhL48vTZ6tzc9WFM0VMnpzHnMhPxK9WV9KVyqn5NL10eW11qlcj86CJtilJa9Bkr5Imy5OTExOTI3H8+ZPPnyiXB+obJicaG8qbxC0Ru3/S0m+/vO3I3/T9+g2fQak+/sdcVGMhzsXLkbb9Nx0zsRSLMd8mLdkorzH+HzlW6Vpv8/jfGOUf3Ug+EMX4/0Rt7YlO43+Htvb+l2W1kreav/HvarwV1+JKvBprsRar8cZnLjGN37euf7o5/V9Zlm2h3DTv7cHmfdCHtp6JSixENZZjMaoxH6eKLWl9Sxon43gcj3K8EmdjNpYjjdmoxlxUYjnOx3KsRKU4o6ZjKSppxEosxlKkMRbT8UykMREnYySmIo1KjMf5WIxzsRBnYiZOFaVcisvFfp/q0sb1oInbCZrsEnTLYP7Zxv/sbvyfINutz1dw2LqsPv4PdQzIGktj0zvWKgAAAKCf/v+Pcd/+B//w14jBeLx4X362Olcp73azAAAAgD4qPq73WP40mEXE45G0+f2/tEuNAwAAAPoiKb5jl0TEaBysLdW+CbUnfAgAAAAAviCKv/8/kT+N5ksHI1m/E8qF3W4bAAAA0B+977HfMyIZjvo9LdOLteeL9Yj6fX5HZ6tzlfHpxbkXJuKp4i4DxTcNbiltT0QyWHz94Nk4VIs6NFp7Hm0tcTiPmhh/YSKejcP1jow9mT89OdYmcrIW+XQt8ukukVN5JAB80R2+dTz+NLvD8f/ZOFqLOHpgYCgiBg60GVnLGyPrwG50FABY13uOndaIt+v5msf/L2/8/j9YT24Z/x+MS//JN67GeLwWr8daXIyjxbcNik8ctNT79ffq7xmsfwyhHEd7vBvQiP3TiVIc7fF+wGjTRC9He7wjUIuNb0RMbe9BAIAddrjDONxp/C8iovHBwdr4f7Tp9/+49ff/9amFVn2lEADuCusz2Pd1IdvTvGW3+wgAtDJKAwAAAAAAAAAAAAAAAAAAAAAAAAAAQP/19bb/w1vM/rf6vH61LVn/5yNovzBS3weNLW/f0d545+pb134cEc1JpbwT29PmoqX9LbnUh3KyiNip47VzC7EvYst7NdolDUXEtjd+pB9VfFpfqL02St0uHue6pgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPA5kETsabe9FLE3IsoRcWznW7V9ru92A3beV5pXkptxM96M+3avOQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAX0z1+/+XovZ8T21TDJQijkTEhYjIdruN/XRztxvQJyNbzNd0///8mEeWxEDtsEcyOD2ztDifH/5i7ofSx+9/8O4jrdn33m49RWBp0+QS9Ro2x/7q3sbSA0Wu0ZnVq1e+8/q305nTUYqhOL0yOzczf2bpxY0sDycfRqRRezTk7c0f3zvyu/fa9PzDvKftba53ttg5M7fW+0i73N3r7eby2upkXtNK5eWV737r8ptNSQ/GoYgnxyLGWmv6Zv7oUNOhGOxWW/JJ8oPkvvhpXCiOf743kizJD9H9Rf9HLl1eWx1/7fW1ix3atC8ORsTFiOGebVrf1QeL60lbxVlXGsxrLRdB+Y/9PfrYXvMcF7USJzr04YHilBmt92GopQ+lDnWmnftQ7PCm/V5qLCTJ5hZN1Vs0FK0teiieanOks70RnffCU92PdHvJJ8lfkrPx5/h+0/wfpfz4H4nOr87WIorIpjOlY2SpFln0fLI54ZXNkX//2W21vu00NdypH7a8eEtN1//6serT9ShLul6Pmmqc6lBj+9fFpho3nxWljh0vRqT9m3LUrz4dM9Xaub8W1aGd/xfPRQwc6HZVvGW0fq7zFaU1/4vtk7f6+v95Mhb/iOvm/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAO5+ScSedttLEUciYl9jPY3I7qDYvZ0SSqPJnTaxr66v//ic21/8LLVse6d3tuRm3Mze3q5GAQAAAAAAALDTTs98/P4H7+aP4u/xe25mWf3v+2nEQETsS34yEjNLi/M9ChqMuBARN/Ll4U5B/8xqWrfm+eLejfUbEdn9W+8SANDDfwMAAP//zlFyiw==") 6.93767768s ago: executing program 4 (id=2119): syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYRES16=0x0, @ANYRESDEC, @ANYRESHEX, @ANYRESDEC, @ANYRES8=0x0, @ANYRES64, @ANYBLOB="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", @ANYRESDEC, @ANYRES32=0x0], 0x1, 0x1f6, &(0x7f0000000680)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 6.561537408s ago: executing program 4 (id=2124): prctl$PR_SET_SECUREBITS(0x1c, 0x1e) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r1) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 6.201781393s ago: executing program 0 (id=2129): syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01020301090224000100000000090400000206d3450009050102100000000009058b0240"], 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, 0x0, 0x0}, 0x90) 4.308409856s ago: executing program 0 (id=2154): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r1, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) connect$unix(r0, &(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(0xffffffffffffffff, &(0x7f0000000000)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK/file0\x00'}, 0x6e) 4.226688348s ago: executing program 0 (id=2155): r0 = socket$inet_udp(0x2, 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) setsockopt$sock_int(r0, 0x1, 0xa, 0x0, 0x0) 3.559504031s ago: executing program 1 (id=2157): mq_open(&(0x7f0000000000)='!!:\'-){\x00', 0x0, 0x0, 0x0) 3.510585089s ago: executing program 1 (id=2158): r0 = socket$inet_udp(0x2, 0x2, 0x0) memfd_create(0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, 0x0, 0x0) 3.289764453s ago: executing program 0 (id=2159): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000ffff00b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) sendmsg$inet(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) 3.122416619s ago: executing program 3 (id=2161): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) r2 = io_uring_setup(0x3eae, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000080)={&(0x7f0000c15000/0x1000)=nil, &(0x7f0000508000/0x4000)=nil, 0x1000}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x15) 3.100652322s ago: executing program 0 (id=2162): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000f80)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)={0x40, 0x13, 0x6, @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001740)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)={0x40, 0x19, 0x2, "b3f0"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000300)={0x2c, &(0x7f0000000180)={0x0, 0x0, 0x1, '\\'}, &(0x7f00000001c0)={0x0, 0xa, 0x1}, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 2.59269659s ago: executing program 2 (id=2076): ioctl$F2FS_IOC_GET_PIN_FILE(0xffffffffffffffff, 0x8004f50e, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x4c, r0, 0x801, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x30, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abee339084eeef16f162471f4"}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}]}, 0x4c}}, 0x0) 2.497804765s ago: executing program 1 (id=2163): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r1, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) connect$unix(r0, &(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(0xffffffffffffffff, &(0x7f0000000000)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK/file0\x00'}, 0x6e) 2.497575855s ago: executing program 1 (id=2164): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@gettclass={0x24, 0x2a, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0x4}}}, 0x24}}, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = gettid() r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400007200000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) getrusage(0x0, 0x0) epoll_pwait(0xffffffffffffffff, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x600000000000000) tkill(r2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) pipe(&(0x7f0000000180)) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001200010aedff7f000000000007000000"], 0x26}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, &(0x7f00000003c0)=ANY=[@ANYBLOB="2003810000008101877016e046aa37f10133fbad2a65b1814a15761682b6a645e58800b2fb2e8ae4c5c373c4e69d5da02bfbca862dc6f6d3852326f4abdce861448fa07494322aa05498b7532c48d68dc1ad40a86df36ff42666c8712714e0624e7f6b6b930e09aa5ec8d37e7a7c49e064686834779f67cdbcd598af1d5fa8", @ANYRES8=0x0, @ANYRES64=r4], &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)={0x0, 0x22, 0x10, {[@global, @global=@item_012={0x2, 0x1, 0x18, "9d6a"}, @global=@item_012={0x0, 0x1, 0xa}, @local=@item_4={0x3, 0x2, 0x1, "70bb0297"}, @main=@item_012={0x2, 0x0, 0xa, "42bf"}, @local=@item_012={0x2, 0x2, 0x7, "ee52"}]}}, &(0x7f00000001c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x0, 0x8, 0x1, {0x22, 0x95c}}}}, &(0x7f00000007c0)={0x2c, &(0x7f00000004c0)=ANY=[@ANYBLOB="400f420000001913d20987ca3b5cd08d275592b8476e26679b166d47d116e2a1b5095e69232c03302ef80a420ba29c9dec532c11139bcbe938e989aad9180280cc6973b417168600"], &(0x7f0000000300)={0x0, 0xa, 0x1}, &(0x7f00000006c0)={0x0, 0x8, 0x1}, &(0x7f0000000700)={0x20, 0x1, 0x63, "0acf91c86440b7ce08ba0284b0c17fc46900068b35f7c3a5c19a41ba7a06102daccdfeeb6e8b3373ee01f7de8693a695e8df8f623bb97252f3e3070a4ff0737c51a058228d2d32cf8c6ab05a99ddeda8862eaf62895595efd6445aff223612fc3206bb"}, &(0x7f0000000780)={0x20, 0x3, 0x1}}) pipe(&(0x7f0000000980)={0xffffffffffffffff}) syz_clone3(&(0x7f00000009c0)={0x384000000, &(0x7f0000000800), &(0x7f0000000840), &(0x7f0000000880), {0x3b}, &(0x7f00000008c0)=""/59, 0x3b, &(0x7f0000000900)=""/51, &(0x7f0000000940)=[0x0, r2], 0x2, {r5}}, 0x58) 2.443021633s ago: executing program 2 (id=2165): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair(0x0, 0x0, 0x0, 0x0) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x0) inotify_init() recvmmsg(0xffffffffffffffff, &(0x7f0000001700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000080)='cubic\x00', 0x5) sendto$inet6(r2, &(0x7f0000000140)='i', 0xffffffc0, 0x49, 0x0, 0x0) flock(0xffffffffffffffff, 0x1) shmat(0x0, &(0x7f0000ffb000/0x3000)=nil, 0x0) 2.213425548s ago: executing program 3 (id=2166): getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x14}}, 0x40800) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYRES32=r0, @ANYBLOB='\b\x00\r\x00', @ANYBLOB="1400e20000000000000000000000ffff640101", @ANYBLOB], 0x11c}], 0x1}, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0), 0x0) syz_open_dev$mouse(0x0, 0x0, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x0) accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000480)) connect$inet(0xffffffffffffffff, &(0x7f00000004c0)={0x2, 0x4e22, @rand_addr=0x64010100}, 0x10) msgget(0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x13) recvmmsg(r2, &(0x7f0000002080)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000020, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, 0x0, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0x3a}, 0x0, 0x0, 0x0, 0x0) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 1.459464495s ago: executing program 2 (id=2167): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x3a, &(0x7f0000002380)={@local, @random="365c4cfb3e29", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data}}}}}, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000340)={@local, @remote, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@generic={0x89, 0x2}]}}, {0x0, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "955aec9ef39911c4e608778212119fd3c62597a2d165de62", "580c5119fb37bf4a8be03c1f77f40bafce6ab79eb3b71dc477351f542ce9232f"}}}}}}, 0x0) 1.353665471s ago: executing program 2 (id=2168): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000200)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000280)=[0x0, 0x0, 0x0], 0x0, 0xcf, &(0x7f0000000380)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0xe5, 0x8, 0x0, 0x0}}, 0x10) r0 = socket$inet(0x2, 0x4000000805, 0x0) listen(r0, 0x7) sendmmsg(r0, &(0x7f0000000e40)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000000300)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[], 0x10}}], 0x2, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x4) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @local}, 0x72) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) unshare(0x0) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) epoll_create(0xff) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) eventfd(0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000080)={@in6={{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x0, 0x0, 0x3, 0x0, "9ecf3315567f14d56a87d134cc409e2a652dbbf6c50480937c6fa85af81bc6fc54b71f03985ac33e31d612d97692efcda8853b8a4430503621f06679995d916cb4361795dd7dbae51d07384b7c2e6949"}, 0xd8) syz_emit_ethernet(0x5e, &(0x7f0000000480)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00@\x00', 0x28, 0x6, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {{0x4e24, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "d4c466b340e28b05c93a072528230718"}]}}}}}}}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) 1.334315474s ago: executing program 2 (id=2169): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402609333340000000000109022400010000000009040000010301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {}, {}, @cond=[{}, {0x0, 0x0, 0x0, 0x4}]}) syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, &(0x7f0000000cc0)=ANY=[@ANYBLOB="0001d2"], 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) preadv(0xffffffffffffffff, &(0x7f0000001880)=[{&(0x7f000001aa80)=""/102399, 0x18fff}], 0x1, 0xfffffffd, 0x5) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB="90050ee7"], 0x120) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="185a00000d0000000000000000000000950000000000000018", @ANYRES32, @ANYRES16=r1, @ANYRES16], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, 0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r2}, 0x10) r3 = syz_open_dev$evdev(&(0x7f0000000880), 0x200000000000002, 0x862b01) write$char_usb(r3, &(0x7f0000000040)="e2", 0x2250) 1.185135577s ago: executing program 3 (id=2170): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = userfaultfd(0x0) r2 = io_uring_setup(0x3eae, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) ioctl$UFFDIO_COPY(r1, 0xc028aa05, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x15) 401.664638ms ago: executing program 1 (id=2171): bind$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x20) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) ptrace(0x8, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) open(&(0x7f00000002c0)='./bus/file0\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) 287.219455ms ago: executing program 3 (id=2172): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000a80)={{0x2, 0x0, @broadcast}, {0x0, @random="ca1597489704"}, 0x0, {0x2, 0x0, @empty}, 'veth0\x00'}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000200)=""/233, 0xe9}], 0x1, 0xfff, 0x0) 72.461119ms ago: executing program 1 (id=2173): socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x0, 0x5df, &(0x7f0000000300)=ANY=[@ANYBLOB="1201100111f625408d0405903d40010203010902cd0501a47a20090904"], 0x0) 5.813579ms ago: executing program 3 (id=2174): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r1, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) connect$unix(r0, &(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r0, 0x0, 0x0) 0s ago: executing program 3 (id=2175): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) r2 = io_uring_setup(0x3eae, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000080)={&(0x7f0000c15000/0x1000)=nil, &(0x7f0000508000/0x4000)=nil, 0x1000}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x15) kernel console output (not intermixed with test programs): g to 1024 [ 301.481461][ T4172] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.491472][ T3548] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 301.510096][ T4172] usb 2-1: config 0 descriptor?? [ 301.518119][ T3548] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 301.535816][ T3548] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 301.557840][ T3548] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 301.569482][ T3548] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.805953][ T3756] logitech 0003:046D:C219.000F: invalid report_size 213086753 [ 301.814083][ T3756] logitech 0003:046D:C219.000F: item 0 4 1 7 parsing failed [ 301.823382][ T3756] logitech 0003:046D:C219.000F: parse failed [ 301.829601][ T3756] logitech: probe of 0003:046D:C219.000F failed with error -22 [ 301.843359][ T3548] usb 1-1: GET_CAPABILITIES returned 0 [ 301.848901][ T3548] usbtmc 1-1:16.0: can't read capabilities [ 301.929225][ T8783] netlink: 'syz.2.1506': attribute type 4 has an invalid length. [ 301.937262][ T8783] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1506'. [ 302.049278][ T3748] usb 5-1: USB disconnect, device number 27 [ 302.162480][ T3756] usb 1-1: USB disconnect, device number 14 [ 304.805978][ T4172] pegasus 2-1:0.0: setup Pegasus II specific registers [ 304.963436][ T3974] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 305.333317][ T4172] pegasus 2-1:0.0: can't locate MII phy, using default [ 305.340588][ T3974] usb 4-1: config 0 has an invalid interface number: 181 but max is 0 [ 305.349320][ T3974] usb 4-1: config 0 has no interface number 0 [ 305.371786][ T4172] pegasus 2-1:0.0: eth1, ELECOM USB Ethernet LD-USB20, 6e:cf:9f:43:9a:83 [ 305.390799][ T3974] usb 4-1: config 0 interface 181 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 305.411087][ T4172] usb 2-1: USB disconnect, device number 5 [ 305.583508][ T3974] usb 4-1: New USB device found, idVendor=1b3d, idProduct=01a4, bcdDevice=7f.41 [ 305.592620][ T3974] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.643225][ T3974] usb 4-1: Product: syz [ 305.647459][ T3974] usb 4-1: Manufacturer: syz [ 305.652073][ T3974] usb 4-1: SerialNumber: syz [ 305.685014][ T3974] usb 4-1: config 0 descriptor?? [ 305.733256][ T3974] usb 4-1: bad CDC descriptors [ 305.744945][ T3974] usb 4-1: bad CDC descriptors [ 305.758293][ T3974] ftdi_sio 4-1:0.181: FTDI USB Serial Device converter detected [ 305.785497][ T3974] usb 4-1: Detected FT-X [ 306.034561][ T3974] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 306.063236][ T3974] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 306.083387][ T3974] ftdi_sio 4-1:0.181: GPIO initialisation failed: -71 [ 306.103790][ T3974] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 306.148376][ T3974] usb 4-1: USB disconnect, device number 14 [ 306.203556][ T3974] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 306.260830][ T3974] ftdi_sio 4-1:0.181: device disconnected [ 306.800319][ T8842] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1528'. [ 307.114424][ T3748] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 307.141068][ T3545] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.145684][ T8853] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1532'. [ 307.242030][ T8868] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1536'. [ 307.260718][ T3545] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.277106][ T8874] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1532'. [ 307.383250][ T3748] usb 1-1: Using ep0 maxpacket: 8 [ 307.530180][ T3748] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 307.557287][ T3748] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 307.574148][ T3545] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.597610][ T8848] chnl_net:caif_netlink_parms(): no params data found [ 307.711327][ T3545] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.733590][ T3748] usb 1-1: New USB device found, idVendor=03f0, idProduct=421d, bcdDevice= e.68 [ 307.748027][ T3748] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.768304][ T3748] usb 1-1: Product: syz [ 307.772626][ T3748] usb 1-1: Manufacturer: syz [ 307.781560][ T3748] usb 1-1: SerialNumber: syz [ 307.820318][ T3748] usb 1-1: config 0 descriptor?? [ 307.847876][ T8848] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.869635][ T8848] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.878606][ T3748] qmi_wwan: probe of 1-1:0.0 failed with error -22 [ 307.911010][ T8848] device bridge_slave_0 entered promiscuous mode [ 307.943889][ T8848] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.963378][ T8848] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.972156][ T8848] device bridge_slave_1 entered promiscuous mode [ 308.068104][ T8848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 308.119508][ T3549] usb 1-1: USB disconnect, device number 15 [ 308.129374][ T8848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 308.267110][ T8914] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1544'. [ 308.330477][ T8848] team0: Port device team_slave_0 added [ 308.361920][ T8848] team0: Port device team_slave_1 added [ 308.425345][ T8848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 308.432352][ T8848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 308.471760][ T8848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 308.492017][ T8848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 308.499268][ T8848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 308.528362][ T8848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 308.643061][ T8848] device hsr_slave_0 entered promiscuous mode [ 308.663884][ T8848] device hsr_slave_1 entered promiscuous mode [ 308.671710][ T8848] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 308.701582][ T8848] Cannot create hsr debugfs directory [ 308.963350][ T3748] Bluetooth: hci3: command 0x0409 tx timeout [ 310.099186][ T8848] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 310.292283][ T8848] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 310.316043][ T8848] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 311.129765][ T8848] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 311.149137][ T8959] netlink: 'syz.3.1560': attribute type 4 has an invalid length. [ 311.238514][ T8965] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1563'. [ 311.264837][ T3549] Bluetooth: hci3: command 0x041b tx timeout [ 311.297320][ T3545] device hsr_slave_0 left promiscuous mode [ 311.312607][ T3545] device hsr_slave_1 left promiscuous mode [ 311.326624][ T3545] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 311.335564][ T3545] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 311.345678][ T3545] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 311.355155][ T3545] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 311.365090][ T3545] bridge0: port 3(team0) entered disabled state [ 311.374868][ T3545] device bridge_slave_1 left promiscuous mode [ 311.387836][ T3545] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.399497][ T3545] device bridge_slave_0 left promiscuous mode [ 311.412489][ T3545] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.424360][ T3545] device veth1_macvtap left promiscuous mode [ 311.430447][ T3545] device veth0_macvtap left promiscuous mode [ 311.437293][ T3545] device veth1_vlan left promiscuous mode [ 311.443232][ T3545] device veth0_vlan left promiscuous mode [ 311.627554][ T3545] device team_slave_1 left promiscuous mode [ 311.642569][ T3545] team0 (unregistering): Port device team_slave_1 removed [ 311.661145][ T3545] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 311.677383][ T3545] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 311.758727][ T3545] bond0 (unregistering): Released all slaves [ 311.812569][ T8969] device team0 entered promiscuous mode [ 311.819017][ T8969] device team_slave_0 entered promiscuous mode [ 311.825855][ T8969] device team_slave_1 entered promiscuous mode [ 311.832852][ T8971] bond0: Device is already in use. [ 311.861644][ T8974] team0: Port device team_slave_0 removed [ 311.953134][ T8962] device team0 left promiscuous mode [ 311.958476][ T8962] device team_slave_1 left promiscuous mode [ 312.118133][ T8848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 312.190616][ T8848] 8021q: adding VLAN 0 to HW filter on device team0 [ 312.233232][ T3974] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 312.275767][ T3975] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 312.288352][ T3975] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 312.296432][ T8998] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 312.328286][ T4172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 312.342822][ T4172] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 312.359346][ T4172] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.366457][ T4172] bridge0: port 1(bridge_slave_0) entered forwarding state [ 312.374565][ T4172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 312.383318][ T4172] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 312.391729][ T4172] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.398831][ T4172] bridge0: port 2(bridge_slave_1) entered forwarding state [ 312.407385][ T4172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 312.432419][ T4172] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 312.441753][ T4172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 312.460485][ T4172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 312.470182][ T4172] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 312.478365][ T3974] usb 1-1: Using ep0 maxpacket: 8 [ 312.499031][ T4172] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 312.508602][ T4172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 312.526405][ T4172] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 312.541261][ T4172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 312.552562][ T4172] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 312.584147][ T4172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 312.602971][ T4172] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 312.611216][ T3974] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 312.627716][ T9015] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1581'. [ 312.628931][ T3974] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 312.648267][ T8848] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 312.660185][ T3974] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 312.661651][ T9017] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1582'. [ 312.670062][ T3974] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 312.670095][ T3974] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 312.670140][ T3974] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 312.670165][ T3974] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.746953][ T9015] device team0 entered promiscuous mode [ 312.752552][ T9015] device team_slave_1 entered promiscuous mode [ 312.791067][ T9014] device team0 left promiscuous mode [ 312.798993][ T9014] device team_slave_1 left promiscuous mode [ 312.902646][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 312.911476][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 312.952115][ T8848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 312.975104][ T3974] usb 1-1: usb_control_msg returned -32 [ 312.990540][ T3974] usbtmc 1-1:16.0: can't read capabilities [ 313.029773][ C1] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. [ 313.337767][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 313.352194][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 313.378847][ T3756] Bluetooth: hci3: command 0x040f tx timeout [ 313.394082][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 313.410452][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 313.421965][ T8848] device veth0_vlan entered promiscuous mode [ 313.440910][ T3756] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 313.455699][ T3756] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 313.474489][ T8848] device veth1_vlan entered promiscuous mode [ 313.533929][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 313.542218][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 313.569358][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 313.588939][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 313.602698][ T8848] device veth0_macvtap entered promiscuous mode [ 313.621315][ T8848] device veth1_macvtap entered promiscuous mode [ 313.659061][ T8848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 313.677901][ T8848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.697994][ T8848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 313.715788][ T8848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.733863][ T8848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 313.767898][ T8848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.784859][ T8848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 313.806600][ T26] audit: type=1326 audit(1719603768.901:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8980 comm="syz.0.1568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff732313b99 code=0x7ffc0000 [ 313.832725][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 313.851903][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 313.860331][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 313.876505][ T26] audit: type=1326 audit(1719603768.931:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8980 comm="syz.0.1568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff732313b99 code=0x7ffc0000 [ 313.902105][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 313.918020][ T8848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 313.937316][ T8848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.953812][ T8848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 313.970761][ T8848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.987196][ T8848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 314.009169][ T8848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.027624][ T8848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 314.043412][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 314.060670][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 314.071961][ T8848] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.090684][ T8848] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.101534][ T8848] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.116460][ T8848] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.264683][ T3790] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 314.294293][ T3790] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 314.331781][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 314.348817][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 314.372295][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 314.407080][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 314.495466][ T9062] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1525'. [ 314.853353][ T1065] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 314.943494][ T3549] usb 1-1: USB disconnect, device number 16 [ 315.244738][ T1065] usb 3-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 315.274464][ T1065] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.324178][ T1065] usb 3-1: config 0 descriptor?? [ 315.443876][ T3549] Bluetooth: hci3: command 0x0419 tx timeout [ 317.642842][ T9137] device syzkaller0 entered promiscuous mode [ 318.013335][ T1065] pegasus 3-1:0.0: setup Pegasus II specific registers [ 318.064738][ T9185] Cannot find add_set index 0 as target [ 318.278270][ T4175] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 318.483233][ T3546] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 318.533552][ T4175] usb 2-1: Using ep0 maxpacket: 32 [ 318.733968][ T1065] pegasus 3-1:0.0: can't locate MII phy, using default [ 318.736093][ T3546] usb 1-1: Using ep0 maxpacket: 32 [ 318.758766][ T1065] pegasus 3-1:0.0: eth1, ELECOM USB Ethernet LD-USB20, 6e:cf:9f:43:9a:83 [ 318.780345][ T1065] usb 3-1: USB disconnect, device number 32 [ 318.813640][ T4175] usb 2-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=5d.c0 [ 318.841632][ T4175] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.859599][ T4175] usb 2-1: Product: syz [ 318.875987][ T4175] usb 2-1: Manufacturer: syz [ 318.880637][ T4175] usb 2-1: SerialNumber: syz [ 318.895276][ T4175] usb 2-1: config 0 descriptor?? [ 318.942555][ T4175] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 318.982674][ T4175] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 319.023534][ T4175] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 319.033685][ T3546] usb 1-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=51.44 [ 319.059399][ T3546] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.067709][ T4175] usb 2-1: media controller created [ 319.083210][ T3546] usb 1-1: Product: syz [ 319.087784][ T3546] usb 1-1: Manufacturer: syz [ 319.106146][ T4175] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 319.115350][ T3546] usb 1-1: SerialNumber: syz [ 319.138969][ T3546] usb 1-1: config 0 descriptor?? [ 319.182870][ T4175] DVB: Unable to find symbol mt352_attach() [ 319.195070][ T3546] legousbtower 1-1:0.0: interrupt endpoints not found [ 319.233845][ T4175] DVB: Unable to find symbol nxt6000_attach() [ 319.247281][ T4175] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 319.304512][ T4175] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input28 [ 319.330754][ T4175] dvb-usb: schedule remote query interval to 1000 msecs. [ 319.348962][ T4175] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 319.373179][ T4175] dvb-usb: bulk message failed: -22 (7/0) [ 319.398223][ T4175] dvb-usb: bulk message failed: -22 (7/0) [ 319.399212][ T1065] usb 1-1: USB disconnect, device number 17 [ 319.423314][ T4175] usb 2-1: USB disconnect, device number 6 [ 319.467473][ T9229] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 319.493951][ T4175] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 319.795437][ T26] audit: type=1800 audit(1719603774.891:144): pid=9239 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1665" name="bus" dev="sda1" ino=2012 res=0 errno=0 [ 319.853360][ T3549] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 320.920066][ T3549] usb 5-1: Using ep0 maxpacket: 8 [ 321.051158][ T3549] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 321.069852][ T3549] usb 5-1: config 179 has no interface number 0 [ 321.077249][ T1065] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 321.107182][ T3549] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 321.929877][ T3549] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 321.941239][ T3549] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 321.952471][ T3549] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 321.968513][ T3549] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 321.983902][ T3549] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 322.001951][ T3549] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.023272][ T3756] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 322.033732][ T3756] Bluetooth: hci2: Injecting HCI hardware error event [ 322.041162][ T3506] Bluetooth: hci2: hardware error 0x00 [ 322.063526][ T9235] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 322.109346][ T9275] loop2: detected capacity change from 0 to 128 [ 322.150092][ T9275] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 322.203410][ T1065] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 322.223191][ T1065] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 322.242934][ T1065] usb 1-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 322.262730][ T1065] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.286355][ T155] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 322.290450][ T1065] usb 1-1: config 0 descriptor?? [ 322.295639][ T3546] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 322.322538][ T3549] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input29 [ 322.423842][ T9277] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 322.516953][ T3549] usb 5-1: USB disconnect, device number 28 [ 322.523253][ C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 322.532286][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 322.543176][ T3546] usb 4-1: Using ep0 maxpacket: 32 [ 322.571061][ T3549] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 322.661701][ T9285] device wlan1 entered promiscuous mode [ 322.761391][ T1065] lg-g15 0003:046D:C222.0010: unknown main item tag 0x0 [ 322.775660][ T1065] lg-g15 0003:046D:C222.0010: item fetching failed at offset 9/11 [ 322.806518][ T1065] lg-g15: probe of 0003:046D:C222.0010 failed with error -22 [ 322.823477][ T3546] usb 4-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=5d.c0 [ 322.832584][ T3546] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.848311][ T3546] usb 4-1: Product: syz [ 322.854773][ T3546] usb 4-1: Manufacturer: syz [ 322.859659][ T3546] usb 4-1: SerialNumber: syz [ 322.884487][ T3546] usb 4-1: config 0 descriptor?? [ 322.925702][ T3546] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 322.950162][ T3546] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 323.016845][ T3546] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 323.026294][ T3546] usb 4-1: media controller created [ 323.047592][ T3546] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 323.067579][ T9292] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1683'. [ 323.100051][ T4175] usb 1-1: USB disconnect, device number 18 [ 323.153535][ T3546] DVB: Unable to find symbol mt352_attach() [ 323.201012][ T3546] DVB: Unable to find symbol nxt6000_attach() [ 323.210863][ T3546] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 323.254502][ T3546] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input30 [ 323.267464][ T3546] dvb-usb: schedule remote query interval to 1000 msecs. [ 323.276806][ T3546] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 323.293239][ T3546] dvb-usb: bulk message failed: -22 (7/0) [ 323.299531][ T3546] dvb-usb: bulk message failed: -22 (7/0) [ 323.312071][ T3546] usb 4-1: USB disconnect, device number 15 [ 323.335714][ T3546] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 323.743900][ T9319] loop2: detected capacity change from 0 to 16 [ 323.914483][ T9319] erofs: (device loop2): mounted with root inode @ nid 36. [ 324.649261][ T9334] loop2: detected capacity change from 0 to 512 [ 324.913313][ T3756] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 324.921644][ T23] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 325.150790][ T9334] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.1698: inode #1: comm syz.2.1698: iget: illegal inode # [ 325.223648][ T23] usb 5-1: Using ep0 maxpacket: 8 [ 325.323938][ T9334] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.1698: error while reading EA inode 1 err=-117 [ 325.352066][ T9334] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 325.373263][ T3756] usb 1-1: config 1 interface 0 altsetting 8 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 325.384508][ T23] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 325.392781][ T23] usb 5-1: config 179 has no interface number 0 [ 325.416306][ T3756] usb 1-1: config 1 interface 0 has no altsetting 0 [ 325.436042][ T23] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 325.443955][ T9334] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.1698: inode #1: comm syz.2.1698: iget: illegal inode # [ 325.460514][ T23] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 325.481560][ T9334] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.1698: error while reading EA inode 1 err=-117 [ 325.493156][ T23] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 325.514210][ T9334] EXT4-fs (loop2): 1 orphan inode deleted [ 325.520000][ T9334] EXT4-fs (loop2): mounted filesystem without journal. Opts: i_version,nogrpid,debug_want_extra_isize=0x000000000000005c,noauto_da_alloc,noauto_da_alloc,grpquota,usrjquota=,,errors=continue. Quota mode: writeback. [ 325.535010][ T23] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 325.565313][ T9334] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.1698: invalid indirect mapped block 234881024 (level 0) [ 325.565510][ T23] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 325.603620][ T23] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 325.632153][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.685457][ T9330] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 325.692840][ T3756] usb 1-1: New USB device found, idVendor=05ac, idProduct=022a, bcdDevice= 0.40 [ 325.713418][ T3756] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.721546][ T3756] usb 1-1: Product: ᘰ [ 325.733217][ T3756] usb 1-1: Manufacturer: 嫅Ø괃쮞ⴂ썫舠帥涱ན⺖紐梺聄詯쵚 [ 325.757275][ T3756] usb 1-1: SerialNumber: В [ 325.783741][ T9331] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 325.823241][ T4175] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 325.900518][ T9368] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1705'. [ 325.965195][ T23] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input31 [ 326.177987][ T23] usb 5-1: USB disconnect, device number 29 [ 326.183460][ T4175] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 326.184079][ C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 326.205023][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 326.205265][ T4175] usb 2-1: New USB device found, idVendor=056a, idProduct=030a, bcdDevice= 0.00 [ 326.224400][ T23] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 326.231530][ T4175] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.251340][ T4175] usb 2-1: config 0 descriptor?? [ 326.295080][ T4175] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 326.353273][ T3756] usbhid 1-1:1.0: can't add hid device: -71 [ 326.359299][ T3756] usbhid: probe of 1-1:1.0 failed with error -71 [ 326.374525][ T3756] usb 1-1: USB disconnect, device number 19 [ 326.703271][ T1065] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 327.003471][ T1065] usb 3-1: Using ep0 maxpacket: 32 [ 327.128849][ T9391] loop4: detected capacity change from 0 to 512 [ 327.314060][ T1065] usb 3-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=5d.c0 [ 327.382799][ T1065] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.400506][ T9391] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.1714: inode #1: comm syz.4.1714: iget: illegal inode # [ 327.480715][ T1065] usb 3-1: Product: syz [ 327.519453][ T1065] usb 3-1: Manufacturer: syz [ 327.539176][ T9391] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.1714: error while reading EA inode 1 err=-117 [ 327.607348][ T1065] usb 3-1: SerialNumber: syz [ 327.627836][ T1065] usb 3-1: config 0 descriptor?? [ 327.640236][ T9391] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.1714: inode #1: comm syz.4.1714: iget: illegal inode # [ 327.695231][ T1065] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 327.718549][ T9391] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.1714: error while reading EA inode 1 err=-117 [ 327.741354][ T1065] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 327.752427][ T9396] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1715'. [ 327.776388][ T9391] EXT4-fs (loop4): 1 orphan inode deleted [ 327.782182][ T9391] EXT4-fs (loop4): mounted filesystem without journal. Opts: i_version,nogrpid,debug_want_extra_isize=0x000000000000005c,noauto_da_alloc,noauto_da_alloc,grpquota,usrjquota=,,errors=continue. Quota mode: writeback. [ 327.813265][ T1065] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 327.830152][ T1065] usb 3-1: media controller created [ 327.877688][ T1065] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 327.940399][ T9391] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.1714: invalid indirect mapped block 234881024 (level 0) [ 327.978478][ T1065] DVB: Unable to find symbol mt352_attach() [ 328.028167][ T1065] DVB: Unable to find symbol nxt6000_attach() [ 328.044314][ T1065] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 328.124644][ T1065] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input32 [ 328.124680][ T9408] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1717'. [ 328.145594][ T1065] dvb-usb: schedule remote query interval to 1000 msecs. [ 328.159646][ T1065] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 328.171485][ T1065] dvb-usb: bulk message failed: -22 (7/0) [ 328.184612][ T1065] dvb-usb: bulk message failed: -22 (7/0) [ 328.204221][ T1065] usb 3-1: USB disconnect, device number 33 [ 328.244311][ T1065] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 328.373515][ T3546] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 328.528589][ T1065] usb 2-1: USB disconnect, device number 7 [ 328.594159][ T9415] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 328.643322][ T3546] usb 4-1: Using ep0 maxpacket: 16 [ 328.763724][ T3546] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 328.933851][ T3546] usb 4-1: New USB device found, idVendor=0458, idProduct=7005, bcdDevice=b4.75 [ 328.949871][ T3546] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.958578][ T3546] usb 4-1: Product: syz [ 328.962923][ T3546] usb 4-1: Manufacturer: syz [ 328.975262][ T3546] usb 4-1: SerialNumber: syz [ 328.982025][ T3546] usb 4-1: config 0 descriptor?? [ 329.045400][ T3546] usb 4-1: Found UVC 0.00 device syz (0458:7005) [ 329.055281][ T3546] usb 4-1: No valid video chain found. [ 329.066425][ T3546] gspca_main: sn9c2028-2.14.0 probing 0458:7005 [ 329.263481][ T3546] gspca_sn9c2028: read1 error 0 [ 329.464604][ T3548] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 330.403309][ T3548] usb 5-1: Using ep0 maxpacket: 8 [ 330.450267][ T3975] usb 4-1: USB disconnect, device number 16 [ 330.696840][ T3548] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 330.708010][ T3548] usb 5-1: config 179 has no interface number 0 [ 330.714511][ T3548] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 330.725668][ T3548] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 330.737242][ T3548] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 330.748457][ T3548] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 331.472536][ T9451] kernel read not supported for file /'- (pid: 9451 comm: syz.3.1734) [ 331.512695][ T26] audit: type=1800 audit(1719603786.601:145): pid=9451 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1734" name="'-" dev="mqueue" ino=56068 res=0 errno=0 [ 331.513849][ T3546] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 331.540377][ T3548] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 331.553592][ T9452] 9pnet: Insufficient options for proto=fd [ 331.554632][ T3548] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 331.568995][ T3548] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.603550][ T9431] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 331.904961][ T3975] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input33 [ 331.923685][ T3546] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 331.957779][ T3546] usb 1-1: New USB device found, idVendor=056a, idProduct=030a, bcdDevice= 0.00 [ 331.990986][ T3546] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.045025][ T3546] usb 1-1: config 0 descriptor?? [ 332.356396][ T3546] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 332.824668][ T3546] usb 5-1: USB disconnect, device number 30 [ 332.843136][ C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 332.851751][ T3546] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 333.650547][ T21] usb 1-1: USB disconnect, device number 20 [ 335.153578][ T21] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 335.453385][ T21] usb 1-1: Using ep0 maxpacket: 16 [ 335.575615][ T21] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 335.803893][ T21] usb 1-1: New USB device found, idVendor=0458, idProduct=7005, bcdDevice=b4.75 [ 335.874911][ T21] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.011767][ T21] usb 1-1: Product: syz [ 336.085855][ T21] usb 1-1: Manufacturer: syz [ 336.167053][ T21] usb 1-1: SerialNumber: syz [ 336.318298][ T21] usb 1-1: config 0 descriptor?? [ 336.486033][ T21] usb 1-1: Found UVC 0.00 device syz (0458:7005) [ 336.543217][ T21] usb 1-1: No valid video chain found. [ 336.567099][ T21] gspca_main: sn9c2028-2.14.0 probing 0458:7005 [ 336.704901][ T21] gspca_sn9c2028: read1 error 0 [ 336.953532][ T3548] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 337.665568][ T21] usb 1-1: USB disconnect, device number 21 [ 337.723433][ T3548] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 337.743697][ T3548] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 337.766521][ T3548] usb 2-1: New USB device found, idVendor=056a, idProduct=030a, bcdDevice= 0.00 [ 337.776676][ T3548] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.789047][ T3548] usb 2-1: config 0 descriptor?? [ 337.836257][ T3548] usbhid 2-1:0.0: can't add hid device: -22 [ 337.844504][ T3548] usbhid: probe of 2-1:0.0 failed with error -22 [ 338.957711][ T3756] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 339.277026][ T9568] kvm: pic: non byte write [ 339.296279][ T9563] kvm: vcpu 0: requested 70 ns lapic timer period limited to 200000 ns [ 339.309635][ T9563] kvm: pic: non byte write [ 339.473655][ T3756] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 339.530660][ T3756] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 339.754661][ T3756] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 339.882183][ T3756] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 339.963518][ T3756] usb 3-1: SerialNumber: syz [ 339.987517][ T1065] usb 2-1: USB disconnect, device number 8 [ 340.266061][ T3756] usb 3-1: 0:2 : does not exist [ 340.313296][ T3756] usb 3-1: USB disconnect, device number 34 [ 340.375264][ T9584] loop4: detected capacity change from 0 to 128 [ 340.456321][ T9584] hpfs: bad mount options. [ 340.849821][ T9590] kvm: pic: non byte write [ 340.932789][ T9592] loop2: detected capacity change from 0 to 2048 [ 341.514658][ T23] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 341.722507][ T9607] kvm: pic: non byte write [ 341.775364][ T9607] kvm: vcpu 0: requested 70 ns lapic timer period limited to 200000 ns [ 341.803200][ T23] usb 3-1: Using ep0 maxpacket: 16 [ 341.835431][ T9603] kvm: pic: non byte write [ 341.943399][ T23] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 341.969761][ T9616] loop3: detected capacity change from 0 to 64 [ 341.992726][ T9612] loop4: detected capacity change from 0 to 2048 [ 342.143607][ T23] usb 3-1: New USB device found, idVendor=0458, idProduct=7005, bcdDevice=b4.75 [ 342.173335][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.202164][ T23] usb 3-1: Product: syz [ 342.213207][ T23] usb 3-1: Manufacturer: syz [ 342.228239][ T9616] loop3: detected capacity change from 0 to 64 [ 342.255180][ T23] usb 3-1: SerialNumber: syz [ 342.288273][ T9612] afs: Unknown parameter 'appraise' [ 342.295833][ T23] usb 3-1: config 0 descriptor?? [ 342.361539][ T23] usb 3-1: Found UVC 0.00 device syz (0458:7005) [ 342.381732][ T23] usb 3-1: No valid video chain found. [ 342.392018][ T23] gspca_main: sn9c2028-2.14.0 probing 0458:7005 [ 342.594651][ T23] gspca_sn9c2028: read1 error 0 [ 342.609537][ T26] audit: type=1804 audit(1719603797.701:146): pid=9629 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1791" name="/root/syzkaller.Lani2v/145/file0/file0" dev="ramfs" ino=57453 res=1 errno=0 [ 342.650965][ T9631] loop4: detected capacity change from 0 to 128 [ 342.716986][ T9631] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 342.728063][ T9631] ext4 filesystem being mounted at /root/syzkaller.vZGy0s/50/mnt supports timestamps until 2038 (0x7fffffff) [ 343.019991][ T9641] kvm: pic: non byte write [ 343.028018][ T9642] kvm: vcpu 0: requested 70 ns lapic timer period limited to 200000 ns [ 343.074923][ T9639] kvm: pic: non byte write [ 343.083531][ T3756] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 343.233718][ T23] usb 3-1: USB disconnect, device number 35 [ 343.264524][ T9656] overlayfs: './file0' not a directory [ 343.333283][ T3756] usb 4-1: Using ep0 maxpacket: 8 [ 343.473366][ T3756] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 343.502546][ T3756] usb 4-1: config 179 has no interface number 0 [ 343.509194][ T3756] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 343.530520][ T3756] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 343.562297][ T3756] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 343.583175][ T3756] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 343.614677][ T3756] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 343.638228][ T3756] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 343.658458][ T3756] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.703600][ T9637] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 343.974741][ T23] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input34 [ 344.170382][ T9675] loop4: detected capacity change from 0 to 64 [ 344.322864][ T3974] usb 4-1: USB disconnect, device number 17 [ 344.333188][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 344.342032][ T3974] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 344.372023][ T9675] loop4: detected capacity change from 0 to 64 [ 345.763372][ T3756] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 345.835128][ T9705] loop3: detected capacity change from 0 to 512 [ 345.900175][ T9705] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.1822: casefold flag without casefold feature [ 345.933823][ T9705] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: inode #2: comm syz.3.1822: missing EA_INODE flag [ 345.956791][ T9705] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.1822: error while reading EA inode 2 err=-117 [ 345.969587][ T9705] EXT4-fs (loop3): 1 orphan inode deleted [ 345.975519][ T9705] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 346.030004][ T9705] EXT4-fs warning (device loop3): ext4_rename_delete:3749: inode #2: comm syz.3.1822: Deleting old file: nlink 5, error=-2 [ 346.054498][ T3756] usb 5-1: Using ep0 maxpacket: 16 [ 346.153883][ T26] audit: type=1800 audit(1719603801.251:147): pid=9715 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1825" name="file1" dev="sda1" ino=2007 res=0 errno=0 [ 346.213526][ T3756] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 346.412510][ T3756] usb 5-1: New USB device found, idVendor=0458, idProduct=7005, bcdDevice=b4.75 [ 346.416321][ T9719] kvm: pic: non byte write [ 346.439465][ T3756] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.470302][ T3756] usb 5-1: Product: syz [ 346.474832][ T3756] usb 5-1: Manufacturer: syz [ 346.479459][ T3756] usb 5-1: SerialNumber: syz [ 346.505166][ T3756] usb 5-1: config 0 descriptor?? [ 346.545242][ T3756] usb 5-1: Found UVC 0.00 device syz (0458:7005) [ 346.551641][ T3756] usb 5-1: No valid video chain found. [ 346.560375][ T3756] gspca_main: sn9c2028-2.14.0 probing 0458:7005 [ 346.693249][ T3548] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 346.773308][ T3756] gspca_sn9c2028: read1 error 0 [ 347.018707][ T9731] loop2: detected capacity change from 0 to 2048 [ 347.063284][ T3548] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 347.074545][ T3548] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 347.088908][ T3548] usb 4-1: New USB device found, idVendor=056a, idProduct=030a, bcdDevice= 0.00 [ 347.098310][ T3548] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.111313][ T3548] usb 4-1: config 0 descriptor?? [ 347.155931][ T3548] usbhid 4-1:0.0: can't add hid device: -22 [ 347.165247][ T3548] usbhid: probe of 4-1:0.0 failed with error -22 [ 347.260496][ T9739] loop2: detected capacity change from 0 to 512 [ 347.304101][ T9739] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #15: comm syz.2.1836: casefold flag without casefold feature [ 347.321653][ T9739] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: inode #2: comm syz.2.1836: missing EA_INODE flag [ 347.336247][ T9739] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.1836: error while reading EA inode 2 err=-117 [ 347.349061][ T9739] EXT4-fs (loop2): 1 orphan inode deleted [ 347.355091][ T9739] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 347.395592][ T9739] EXT4-fs warning (device loop2): ext4_rename_delete:3749: inode #2: comm syz.2.1836: Deleting old file: nlink 5, error=-2 [ 347.446293][ T3548] usb 5-1: USB disconnect, device number 31 [ 347.535421][ T9749] loop2: detected capacity change from 0 to 512 [ 347.748500][ T9749] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 347.965969][ T9749] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #15: comm syz.2.1839: casefold flag without casefold feature [ 348.053736][ T3548] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 348.167812][ T9749] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: inode #12: comm syz.2.1839: missing EA_INODE flag [ 348.277149][ T9749] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.1839: error while reading EA inode 12 err=-117 [ 348.420385][ T9749] EXT4-fs (loop2): 1 orphan inode deleted [ 348.442917][ T9749] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_nolock,journal_dev=0x0000000000000007,quota,noinit_itable,errors=continue,errors=continue,errors=remount-ro,delalloc,auto_da_alloc,norecovery,errors=continue,journal_ioprio=0x0000000000000001,. Quota mode: writeback. [ 348.484574][ T3548] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 348.494920][ T3548] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 348.583290][ T3548] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 348.592392][ T3548] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 348.606828][ T3548] usb 2-1: SerialNumber: syz [ 348.743332][ T9767] smb3: Unknown parameter 'mpol' [ 348.749174][ T9767] smb3: Unknown parameter 'mpol' [ 348.755232][ T9767] 9pnet: Could not find request transport: xen [ 348.883303][ T3974] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 348.895337][ T3548] usb 2-1: 0:2 : does not exist [ 348.912466][ T3548] usb 2-1: USB disconnect, device number 9 [ 349.124548][ T3974] usb 5-1: Using ep0 maxpacket: 8 [ 349.243302][ T3974] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 349.262116][ T3974] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 349.283162][ T3974] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 349.303149][ T3974] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 349.312926][ T3974] usb 5-1: New USB device found, idVendor=05ac, idProduct=0217, bcdDevice=cf.dc [ 349.343198][ T3974] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.364296][ T3974] usb 5-1: config 0 descriptor?? [ 349.404953][ T3974] appletouch 5-1:0.0: Could not find int-in endpoint [ 349.412409][ T3974] appletouch: probe of 5-1:0.0 failed with error -5 [ 349.420922][ T3974] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 349.428681][ T1065] usb 4-1: USB disconnect, device number 18 [ 349.487810][ T9777] loop3: detected capacity change from 0 to 21 [ 349.565691][ T9777] jffs2: Unknown parameter 'smackfsfloor' [ 349.638925][ T3756] usb 5-1: USB disconnect, device number 32 [ 349.791190][ T3501] team0: Port device syz_tun removed [ 349.913311][ T3974] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 350.933346][ T3974] usb 2-1: Using ep0 maxpacket: 32 [ 350.980557][ T9802] chnl_net:caif_netlink_parms(): no params data found [ 351.098385][ T9807] loop4: detected capacity change from 0 to 4096 [ 351.126461][ T3974] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 351.135710][ T3974] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 351.148989][ T3974] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 351.172107][ T3974] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 351.181952][ T3974] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 351.206678][ T9802] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.216482][ T9802] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.225481][ T9802] device bridge_slave_0 entered promiscuous mode [ 351.235582][ T9802] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.242991][ T9802] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.257601][ T9802] device bridge_slave_1 entered promiscuous mode [ 351.299769][ T9802] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 351.312105][ T9816] loop3: detected capacity change from 0 to 128 [ 351.316344][ T9802] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 351.365186][ T3974] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 351.373258][ T9802] team0: Port device team_slave_0 added [ 351.405357][ T3974] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.417938][ T3974] usb 2-1: Product: syz [ 351.422144][ T3974] usb 2-1: Manufacturer: syz [ 351.431572][ T9802] team0: Port device team_slave_1 added [ 351.458290][ T9820] loop4: detected capacity change from 0 to 64 [ 351.459662][ T3974] usb 2-1: SerialNumber: syz [ 351.519756][ T9802] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 351.534452][ T9802] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 351.604879][ T9802] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 351.632080][ T9802] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 351.644098][ T9802] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 351.685585][ T9802] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 351.706794][ T9826] loop3: detected capacity change from 0 to 64 [ 351.757402][ T9802] device hsr_slave_0 entered promiscuous mode [ 351.781240][ T9802] device hsr_slave_1 entered promiscuous mode [ 351.803442][ T3974] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor [ 351.833236][ T3974] usb 2-1: 2:1 : unknown format tag 0x0 is detected. processed as MPEG. [ 351.841713][ T3974] usb 2-1: found format II with max.bitrate = 0, frame size=0 [ 351.863406][ T9832] loop4: detected capacity change from 0 to 8 [ 351.879598][ T3974] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor [ 351.887859][ T3974] usb 2-1: 2:1 : unknown format tag 0x0 is detected. processed as MPEG. [ 351.897214][ T3974] usb 2-1: found format II with max.bitrate = 0, frame size=0 [ 352.062456][ T3974] usb 2-1: USB disconnect, device number 10 [ 352.119007][ T9840] loop4: detected capacity change from 0 to 128 [ 352.199681][ T9840] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 352.275542][ T9845] loop3: detected capacity change from 0 to 64 [ 352.352924][ T9845] hfs: unable to load codepage "isot=mac" [ 352.364550][ T9845] hfs: unable to parse mount options [ 352.390631][ T144] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.413367][ T26] audit: type=1804 audit(1719603807.511:148): pid=9850 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1884" name="/root/syzkaller.EVcke3/84/file0" dev="sda1" ino=2004 res=1 errno=0 [ 352.512627][ T26] audit: type=1804 audit(1719603807.581:149): pid=9850 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1884" name="/root/syzkaller.EVcke3/84/file0" dev="sda1" ino=2004 res=1 errno=0 [ 352.514428][ T144] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.666557][ T144] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.757012][ T144] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.873985][ T3549] Bluetooth: hci0: command 0x0409 tx timeout [ 353.078460][ T9853] loop3: detected capacity change from 0 to 32768 [ 353.124437][ T9802] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 353.148400][ T9853] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.1887 (9853) [ 353.182162][ T9802] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 353.195662][ T9848] loop4: detected capacity change from 0 to 32768 [ 353.211086][ T9802] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 353.222878][ T9802] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 353.235059][ T9853] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 353.249099][ T9848] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.1882 (9848) [ 353.254155][ T9853] BTRFS info (device loop3): setting nodatacow, compression disabled [ 353.270267][ T9853] BTRFS info (device loop3): setting datacow [ 353.278639][ T9853] BTRFS info (device loop3): doing ref verification [ 353.293255][ T9853] BTRFS info (device loop3): force clearing of disk cache [ 353.300438][ T9853] BTRFS info (device loop3): turning off barriers [ 353.318764][ T9853] BTRFS info (device loop3): enabling ssd optimizations [ 353.323451][ T9854] chnl_net:caif_netlink_parms(): no params data found [ 353.326042][ T9853] BTRFS info (device loop3): using spread ssd allocation scheme [ 353.340666][ T9853] BTRFS info (device loop3): not using ssd optimizations [ 353.348433][ T9853] BTRFS info (device loop3): not using spread ssd allocation scheme [ 353.354101][ T9848] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 353.365412][ T9853] BTRFS info (device loop3): using free space tree [ 353.379063][ T9853] BTRFS info (device loop3): has skinny extents [ 353.419601][ T9848] BTRFS info (device loop4): setting nodatacow, compression disabled [ 353.438144][ T9853] BTRFS info (device loop3): clearing free space tree [ 353.451976][ T9853] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 353.473340][ T9848] BTRFS info (device loop4): enabling auto defrag [ 353.475064][ T9853] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 353.479848][ T9848] BTRFS info (device loop4): max_inline at 0 [ 353.567262][ T9848] BTRFS info (device loop4): using free space tree [ 353.579791][ T9848] BTRFS info (device loop4): has skinny extents [ 353.587477][ T9853] BTRFS info (device loop3): creating free space tree [ 353.625882][ T9853] BTRFS info (device loop3): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 353.691486][ T9853] BTRFS info (device loop3): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 353.744570][ T9854] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.751661][ T9854] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.777273][ T9854] device bridge_slave_0 entered promiscuous mode [ 353.791952][ T9854] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.813255][ T9854] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.862097][ T9854] device bridge_slave_1 entered promiscuous mode [ 354.387225][ T9854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 354.425165][ T9854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 354.564991][ T9854] team0: Port device team_slave_0 added [ 354.594518][ T9914] loop3: detected capacity change from 0 to 128 [ 354.607145][ T9802] 8021q: adding VLAN 0 to HW filter on device bond0 [ 354.615273][ T26] audit: type=1804 audit(1719603809.711:150): pid=9915 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1894" name="/root/syzkaller.vZGy0s/63/bus" dev="sda1" ino=2004 res=1 errno=0 [ 354.645445][ T9854] team0: Port device team_slave_1 added [ 354.702304][ T9802] 8021q: adding VLAN 0 to HW filter on device team0 [ 354.712225][ T9914] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 354.733280][ T9914] ext4 filesystem being mounted at /root/syzkaller.Lani2v/163/mnt supports timestamps until 2038 (0x7fffffff) [ 354.748074][ T4171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 354.787361][ T4171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 354.807229][ T3521] Bluetooth: hci1: command 0x0409 tx timeout [ 354.828121][ T9919] loop4: detected capacity change from 0 to 2048 [ 354.895873][ T9854] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 354.902961][ T9854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 354.932004][ T9854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 354.951985][ T9919] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv0,errors=remount-ro,. Quota mode: none. [ 354.970769][ T9854] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 354.980836][ T3751] Bluetooth: hci0: command 0x041b tx timeout [ 354.989389][ T9927] loop3: detected capacity change from 0 to 64 [ 354.993264][ T9854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 355.023040][ T9854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 355.044045][ T3972] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 355.044762][ T3972] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 355.045136][ T3972] bridge0: port 1(bridge_slave_0) entered blocking state [ 355.045174][ T3972] bridge0: port 1(bridge_slave_0) entered forwarding state [ 355.045654][ T3972] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 355.046177][ T3972] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 355.046507][ T3972] bridge0: port 2(bridge_slave_1) entered blocking state [ 355.046545][ T3972] bridge0: port 2(bridge_slave_1) entered forwarding state [ 355.092050][ T3515] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 355.153469][ T3515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 355.162478][ T3515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 355.171889][ T3515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 355.181719][ T3515] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 355.269683][ T3515] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 355.280389][ T3515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 355.300041][ T3515] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 355.377898][ T9931] loop3: detected capacity change from 0 to 128 [ 355.386178][ T3973] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 355.423864][ T3973] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 355.448089][ T9802] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 355.465534][ T9802] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 355.472743][ T26] audit: type=1804 audit(1719603810.561:151): pid=9935 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1904" name="/root/syzkaller.EVcke3/94/file0" dev="sda1" ino=2004 res=1 errno=0 [ 355.500903][ T9931] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 355.503302][ T9854] device hsr_slave_0 entered promiscuous mode [ 355.522421][ T9854] device hsr_slave_1 entered promiscuous mode [ 355.529361][ T9854] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 355.531882][ T9938] loop4: detected capacity change from 0 to 512 [ 355.537078][ T9854] Cannot create hsr debugfs directory [ 355.538614][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 355.558354][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 355.566423][ T9931] ext4 filesystem being mounted at /root/syzkaller.Lani2v/165/mnt supports timestamps until 2038 (0x7fffffff) [ 355.671916][ T9938] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 355.702174][ T144] device hsr_slave_0 left promiscuous mode [ 355.720520][ T9938] ext4 filesystem being mounted at /root/syzkaller.vZGy0s/67/file0 supports timestamps until 2038 (0x7fffffff) [ 355.748392][ T144] device hsr_slave_1 left promiscuous mode [ 355.773657][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 355.794939][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 355.847129][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 355.883997][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 355.916147][ T144] device bridge_slave_1 left promiscuous mode [ 355.922501][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.994103][ T144] device bridge_slave_0 left promiscuous mode [ 356.000491][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.038967][ T144] device veth1_macvtap left promiscuous mode [ 356.039733][ T9955] loop4: detected capacity change from 0 to 2048 [ 356.051834][ T144] device veth0_macvtap left promiscuous mode [ 356.061397][ T144] device veth1_vlan left promiscuous mode [ 356.072973][ T144] device veth0_vlan left promiscuous mode [ 356.089907][ T9955] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 356.162545][ T9955] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 356.199977][ T9955] UDF-fs: unknown compression code (0) [ 356.209440][ T9955] UDF-fs: unknown compression code (0) [ 356.479338][ T9969] loop4: detected capacity change from 0 to 4096 [ 356.540934][ T144] team0 (unregistering): Port device team_slave_1 removed [ 356.554554][ T9969] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 356.574244][ T9969] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 356.585332][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 356.594053][ T9969] ntfs3: loop4: Failed to load $LogFile. [ 356.611053][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 356.715308][ T144] bond0 (unregistering): Released all slaves [ 356.752598][ T9977] loop4: detected capacity change from 0 to 2048 [ 356.817849][ T7632] team0: Port device syz_tun removed [ 356.827214][ T9977] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 356.883375][ T3521] Bluetooth: hci1: command 0x041b tx timeout [ 356.978352][ T9981] loop4: detected capacity change from 0 to 128 [ 356.984630][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 356.995587][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 357.030283][ T9981] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 357.038561][ T9802] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 357.044274][ T9981] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 357.053150][ T3521] Bluetooth: hci0: command 0x040f tx timeout [ 357.197203][ T4173] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 357.206831][ T4173] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 357.230655][ T4173] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 357.240682][ T4173] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 357.253288][ T9802] device veth0_vlan entered promiscuous mode [ 357.267084][ T4171] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 357.276297][ T4171] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 357.318878][ T9802] device veth1_vlan entered promiscuous mode [ 357.337827][ T9960] chnl_net:caif_netlink_parms(): no params data found [ 357.346270][ T9985] loop4: detected capacity change from 0 to 4096 [ 357.426398][ T9960] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.446919][ T9960] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.463625][ T9960] device bridge_slave_0 entered promiscuous mode [ 357.468255][ T9991] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 357.484491][ T9960] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.506529][ T9960] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.550018][ T9960] device bridge_slave_1 entered promiscuous mode [ 357.657984][ T9802] device veth0_macvtap entered promiscuous mode [ 357.686834][ T3521] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 357.704166][ T3521] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 357.712507][ T3521] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 357.763110][ T3521] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 357.807933][ T9802] device veth1_macvtap entered promiscuous mode [ 357.826334][T10005] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 357.872210][ T3521] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 357.881153][ T3521] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 357.901925][ T9960] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 357.903304][T10005] CIFS mount error: No usable UNC path provided in device string! [ 357.903304][T10005] [ 357.920840][ T9960] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 357.949212][ T9802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 357.953990][T10005] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 357.972629][ T9802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.990305][ T9802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 358.007611][ T9802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.023502][ T9802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 358.034307][ T9802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.046148][ T9802] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 358.095030][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 358.114606][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 358.135265][ T9802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 358.147252][ T9802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.157402][ T9802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 358.169808][ T9802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.181743][ T9802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 358.199449][ T9802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.211240][ T9802] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 358.230299][ T9960] team0: Port device team_slave_0 added [ 358.236717][ T3751] Bluetooth: hci2: command 0x0409 tx timeout [ 358.255721][ T3756] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 358.274939][ T3756] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 358.296706][ T9802] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.313406][ T9802] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.332442][ T9802] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.352683][ T9802] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.404323][ T9960] team0: Port device team_slave_1 added [ 358.437308][ T9854] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 358.495057][ T9854] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 358.509403][ T9854] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 358.532335][ T9960] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 358.541852][ T9960] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 358.597266][ T9960] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 358.628061][ T9854] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 358.651753][ T9960] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 358.661500][ T9960] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 358.690723][ T9960] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 358.849628][ T9960] device hsr_slave_0 entered promiscuous mode [ 358.856820][T10025] loop4: detected capacity change from 0 to 128 [ 358.864443][ T9960] device hsr_slave_1 entered promiscuous mode [ 358.883680][ T9960] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 358.891395][ T9960] Cannot create hsr debugfs directory [ 358.930073][ T3545] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 358.951574][ T3545] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 358.962739][ T3515] Bluetooth: hci1: command 0x040f tx timeout [ 358.980689][T10025] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 358.993739][ T3756] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 359.010996][T10025] ext4 filesystem being mounted at /root/syzkaller.vZGy0s/77/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 359.114057][ T3545] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 359.122689][ T3545] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 359.130798][ T3973] Bluetooth: hci0: command 0x0419 tx timeout [ 359.190674][ T4171] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 359.225388][ T9854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 359.294792][ T3973] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 359.306057][ T3973] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 359.331521][ T9854] 8021q: adding VLAN 0 to HW filter on device team0 [ 359.400749][ T3973] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 359.410553][ T3973] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 359.428619][ T3973] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.435803][ T3973] bridge0: port 1(bridge_slave_0) entered forwarding state [ 359.457152][ T3973] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 359.472212][ T3973] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 359.491241][ T3973] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.498384][ T3973] bridge0: port 2(bridge_slave_1) entered forwarding state [ 359.533226][ T3756] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 359.549988][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 359.569926][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 359.589328][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 359.602370][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 359.622248][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 359.709048][ T9960] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.751658][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 359.771459][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 359.794677][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 359.833816][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 359.842413][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 359.860947][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 359.872318][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 359.903807][ T9854] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 359.924085][ T9960] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.943460][ T3756] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 359.963351][ T3756] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 359.986117][T10033] loop4: detected capacity change from 0 to 32768 [ 359.993286][ T3756] usb 1-1: New USB device found, idVendor=056a, idProduct=030a, bcdDevice= 0.00 [ 360.016848][ T3756] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.042386][ T9960] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.044215][ T3756] usb 1-1: config 0 descriptor?? [ 360.066803][T10033] BTRFS: device fsid 92aec1fe-fee8-4e05-92dc-790b47b871d9 devid 1 transid 8 /dev/loop4 scanned by syz.4.1943 (10033) [ 360.151451][ T9960] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.172366][T10033] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 360.186165][T10033] BTRFS info (device loop4): using free space tree [ 360.207842][T10033] BTRFS info (device loop4): has skinny extents [ 360.220221][ T3751] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 360.233472][ T3751] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 360.270978][ T9854] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 360.313313][ T3515] Bluetooth: hci2: command 0x041b tx timeout [ 360.334546][ T4171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 360.343958][ T4171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 360.436285][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 360.444315][T10033] BTRFS info (device loop4): enabling ssd optimizations [ 360.452901][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 360.469420][ T9854] device veth0_vlan entered promiscuous mode [ 360.510117][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 360.549714][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 360.580029][ T9854] device veth1_vlan entered promiscuous mode [ 360.613618][ T3756] usbhid 1-1:0.0: can't add hid device: -71 [ 360.619984][ T3756] usbhid: probe of 1-1:0.0 failed with error -71 [ 360.630332][ T9960] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 360.650230][ T3756] usb 1-1: USB disconnect, device number 22 [ 360.677287][ T9960] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 360.963674][ T3756] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 360.982110][ T3756] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 360.992494][ T3756] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 361.011827][ T3756] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 361.032989][ T9960] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 361.033920][ T3563] Bluetooth: hci1: command 0x0419 tx timeout [ 361.066439][ T9854] device veth0_macvtap entered promiscuous mode [ 361.080898][ T3756] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 361.093665][ T9960] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 361.137632][ T9854] device veth1_macvtap entered promiscuous mode [ 361.240329][ T9854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 361.273298][ T9854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.293589][ T26] audit: type=1804 audit(1719603816.391:152): pid=10080 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1948" name="/root/syzkaller.vZGy0s/79/bus" dev="sda1" ino=2005 res=1 errno=0 [ 361.333238][ T9854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 361.358924][ T9854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.403119][ T9854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 361.433814][ T9854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.455930][T10091] afs: Bad value for 'flock' [ 361.473406][ T9854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 361.501046][ T9854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.554781][ T9854] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 361.571762][ T3756] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 361.591632][ T3756] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 361.605567][T10095] overlayfs: missing 'lowerdir' [ 361.636369][ T9854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 361.653785][ T9854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.673123][ T9854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 361.693104][ T9854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.702969][ T9854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 361.733829][ T9854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.753123][ T9854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 361.773112][ T9854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.783667][ T3974] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 361.794753][ T9854] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 361.816739][ T3746] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 361.834022][ T3746] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 361.857083][ T9854] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.882378][ T9854] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.913200][ T9854] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.921951][ T9854] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.005365][T10089] loop4: detected capacity change from 0 to 32768 [ 362.069616][T10089] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.1959 (10089) [ 362.097471][ T9960] 8021q: adding VLAN 0 to HW filter on device bond0 [ 362.143590][T10089] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 362.156228][ T3974] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 362.167335][T10089] BTRFS info (device loop4): setting nodatacow, compression disabled [ 362.175419][ T9960] 8021q: adding VLAN 0 to HW filter on device team0 [ 362.192779][ T3974] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 362.195219][T10089] BTRFS info (device loop4): enabling auto defrag [ 362.208932][ T3974] usb 2-1: New USB device found, idVendor=056a, idProduct=030a, bcdDevice= 0.00 [ 362.209722][ T3756] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 362.222533][ T3974] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.235863][T10089] BTRFS info (device loop4): max_inline at 0 [ 362.241885][T10089] BTRFS info (device loop4): using free space tree [ 362.246051][ T3974] usb 2-1: config 0 descriptor?? [ 362.264145][ T3756] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 362.273123][ T3756] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 362.281535][T10089] BTRFS info (device loop4): has skinny extents [ 362.297914][ T3756] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 362.307782][ T26] audit: type=1804 audit(1719603817.401:153): pid=10112 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1970" name="/root/syzkaller.HyQew3/11/file2" dev="sda1" ino=2013 res=1 errno=0 [ 362.342175][ T3756] bridge0: port 1(bridge_slave_0) entered blocking state [ 362.349421][ T3756] bridge0: port 1(bridge_slave_0) entered forwarding state [ 362.368933][ T3756] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 362.383896][ T3756] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 362.395556][ T3515] Bluetooth: hci2: command 0x040f tx timeout [ 362.404965][ T3756] bridge0: port 2(bridge_slave_1) entered blocking state [ 362.412060][ T3756] bridge0: port 2(bridge_slave_1) entered forwarding state [ 362.492899][ T9960] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 362.506426][ T9960] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 362.525848][ T3751] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 362.540924][ T3751] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 362.560867][ T3751] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 362.594463][ T3751] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 362.625433][ T3751] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 362.662468][ T3751] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 362.696137][ T3751] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 362.705322][ T3751] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 362.714207][ T3751] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 362.722754][ T3751] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 362.731393][ T3751] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 362.751846][ T3751] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 362.760096][ T3751] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 362.803406][ T3974] usbhid 2-1:0.0: can't add hid device: -71 [ 362.809448][ T3974] usbhid: probe of 2-1:0.0 failed with error -71 [ 362.828208][ T3608] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 362.869137][ T3974] usb 2-1: USB disconnect, device number 11 [ 362.881767][ T3608] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 363.202597][ T3515] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 363.224164][ T3790] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 363.271626][ T3790] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 363.302473][ T3759] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 363.386489][ T5791] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 363.411440][ T5791] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 363.454733][ T9960] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 363.464720][T10157] CIFS mount error: No usable UNC path provided in device string! [ 363.464720][T10157] [ 363.503145][T10157] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 363.525632][ T3515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 363.554206][ T3515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 363.583907][T10161] loop2: detected capacity change from 0 to 2048 [ 363.614335][ T3515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 363.622879][ T3515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 363.649877][T10161] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 363.654958][ T9960] device veth0_vlan entered promiscuous mode [ 363.667761][T10167] loop4: detected capacity change from 0 to 256 [ 363.681545][T10161] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 363.693794][ T3563] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 363.711634][ T3563] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 363.737714][ T9960] device veth1_vlan entered promiscuous mode [ 363.750548][T10167] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 363.770430][T10167] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 363.787770][T10167] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 363.852207][T10167] UDF-fs: Scanning with blocksize 512 failed [ 363.877639][ T3563] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 363.889809][T10167] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 363.910415][ T3563] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 363.922922][T10167] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 363.933852][ T3563] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 363.957879][ T3563] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 364.000585][ T9960] device veth0_macvtap entered promiscuous mode [ 364.024485][ T9960] device veth1_macvtap entered promiscuous mode [ 364.030238][T10181] loop2: detected capacity change from 0 to 64 [ 364.089345][ T9960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 364.136867][ T9960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 364.156648][ T9960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 364.166630][T10183] loop4: detected capacity change from 0 to 2048 [ 364.172708][ T9960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 364.210580][ T9960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 364.224127][ T9960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 364.235492][ T9960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 364.247840][ T9960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 364.265531][ T9960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 364.276637][ T9960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 364.304702][ T9960] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 364.320381][ T3974] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 364.331700][ T3974] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 364.345369][ T3974] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 364.355781][ T3974] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 364.405926][T10183] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv0,errors=remount-ro,. Quota mode: none. [ 364.407190][ T9960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 364.449884][ T9960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 364.466756][ T9960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 364.477753][ T4173] Bluetooth: hci2: command 0x0419 tx timeout [ 364.478942][T10201] loop2: detected capacity change from 0 to 128 [ 364.500045][ T9960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 364.516544][ T9960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 364.528264][ T9960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 364.538331][ T9960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 364.548998][ T9960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 364.559376][ T9960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 364.571188][ T9960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 364.587326][ T9960] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 364.596577][ T3974] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 364.612186][ T3974] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 364.681016][T10201] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 364.703284][T10201] ext4 filesystem being mounted at /root/syzkaller.nBPwvB/4/mnt supports timestamps until 2038 (0x7fffffff) [ 364.720084][T10215] loop4: detected capacity change from 0 to 64 [ 364.745164][ T9960] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.760142][ T9960] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.769032][ T9960] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.777823][ T9960] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.834348][ T144] device hsr_slave_0 left promiscuous mode [ 364.851663][ T144] device hsr_slave_1 left promiscuous mode [ 364.888665][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 364.940787][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 364.982648][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 364.991108][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 365.036302][ T144] device bridge_slave_1 left promiscuous mode [ 365.047875][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.091424][ T144] device bridge_slave_0 left promiscuous mode [ 365.110913][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.138766][T10227] loop2: detected capacity change from 0 to 4096 [ 365.158765][ T144] device veth1_macvtap left promiscuous mode [ 365.169657][ T144] device veth0_macvtap left promiscuous mode [ 365.191046][ T144] device veth1_vlan left promiscuous mode [ 365.208570][ T144] device veth0_vlan left promiscuous mode [ 365.239111][T10238] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 365.429006][T10241] loop4: detected capacity change from 0 to 4096 [ 365.524667][T10241] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 365.792603][ T26] audit: type=1804 audit(1719603820.881:154): pid=10252 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2022" name="/root/syzkaller.HyQew3/33/file0" dev="sda1" ino=2016 res=1 errno=0 [ 365.909903][ T144] team0 (unregistering): Port device team_slave_1 removed [ 365.971897][T10265] smb3: Bad value for 'gid' [ 365.988906][ T144] team0 (unregistering): Port device team_slave_0 removed [ 366.059147][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 366.061927][T10269] loop4: detected capacity change from 0 to 256 [ 366.084801][T10270] smb3: Unknown parameter 'm' [ 366.110292][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 366.318216][T10245] loop2: detected capacity change from 0 to 32768 [ 366.360364][ T144] team0 (unregistering): Port device bond0 removed [ 366.447754][ T144] bond0 (unregistering): Released all slaves [ 366.493777][T10245] XFS (loop2): Mounting V5 Filesystem [ 366.657341][T10300] loop4: detected capacity change from 0 to 128 [ 366.691369][T10245] XFS (loop2): Ending clean mount [ 366.718136][ T8328] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 366.750810][ T8328] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 366.775428][T10300] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 366.790652][ T3759] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 366.873569][T10300] ext4 filesystem being mounted at /root/syzkaller.vZGy0s/101/mnt supports timestamps until 2038 (0x7fffffff) [ 366.923373][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 366.931965][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 366.953009][ T9854] XFS (loop2): Unmounting Filesystem [ 366.997254][ T3759] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 367.217833][T10308] loop3: detected capacity change from 0 to 512 [ 367.352195][T10308] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 367.361489][T10308] UDF-fs: Scanning with blocksize 512 failed [ 367.420538][T10308] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 367.473320][T10308] UDF-fs: Scanning with blocksize 1024 failed [ 367.500040][T10308] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 367.521303][T10308] UDF-fs: Scanning with blocksize 2048 failed [ 367.556623][T10308] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 367.601785][T10308] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 368.048424][T10330] syz.3.2051 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 369.095083][T10327] loop2: detected capacity change from 0 to 32768 [ 369.178347][T10327] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.2043 (10327) [ 369.282310][T10327] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 369.317980][T10327] BTRFS info (device loop2): setting nodatacow, compression disabled [ 369.356689][T10327] BTRFS info (device loop2): enabling auto defrag [ 369.386967][T10327] BTRFS info (device loop2): max_inline at 0 [ 369.413119][T10327] BTRFS info (device loop2): using free space tree [ 369.433331][T10327] BTRFS info (device loop2): has skinny extents [ 370.001501][ T26] audit: type=1800 audit(1719603825.091:155): pid=10374 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2063" name="bus" dev="sda1" ino=2018 res=0 errno=0 [ 370.835254][T10385] loop2: detected capacity change from 0 to 512 [ 370.964148][T10385] EXT4-fs (loop2): Ignoring removed orlov option [ 370.973245][T10385] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 371.031628][T10385] EXT4-fs (loop2): warning: maximal mount count reached, running e2fsck is recommended [ 371.097262][T10385] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.2062: inode #15: comm syz.2.2062: iget: illegal inode # [ 371.175080][T10385] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.2062: couldn't read orphan inode 15 (err -117) [ 371.191044][T10385] EXT4-fs (loop2): mounted filesystem without journal. Opts: orlov,noblock_validity,,errors=continue. Quota mode: none. [ 371.216157][T10385] EXT4-fs (loop2): re-mounted. Opts: (null). Quota mode: none. [ 371.255195][ T9854] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 3: comm syz-executor: path /root/syzkaller.nBPwvB/8/bus: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1 [ 371.795306][ T144] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.896069][ T144] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.013585][ T144] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.121237][ T144] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.718743][T10413] loop4: detected capacity change from 0 to 512 [ 372.765657][T10409] chnl_net:caif_netlink_parms(): no params data found [ 372.785695][T10413] EXT4-fs (loop4): Ignoring removed bh option [ 372.829585][T10413] EXT4-fs error (device loop4): __ext4_iget:4861: inode #12: block 2: comm syz.4.2077: invalid block [ 372.862849][T10413] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.2077: couldn't read orphan inode 12 (err -117) [ 372.903372][T10413] EXT4-fs (loop4): mounted filesystem without journal. Opts: bh,,errors=continue. Quota mode: none. [ 373.069777][T10409] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.071524][T10428] loop3: detected capacity change from 0 to 512 [ 373.083982][T10409] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.102780][T10409] device bridge_slave_0 entered promiscuous mode [ 373.141245][T10428] EXT4-fs (loop3): Ignoring removed orlov option [ 373.147557][T10409] bridge0: port 2(bridge_slave_1) entered blocking state [ 373.156240][T10409] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.173850][T10428] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 373.184943][T10409] device bridge_slave_1 entered promiscuous mode [ 373.241933][T10428] EXT4-fs error (device loop3): dx_probe:822: inode #2: comm syz.3.2083: Attempting to read directory block (0) that is past i_size (256) [ 373.322708][T10409] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 373.335018][T10428] EXT4-fs (loop3): Remounting filesystem read-only [ 373.344033][T10428] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 373.348465][T10433] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2082'. [ 373.362934][T10428] EXT4-fs (loop3): mounted filesystem without journal. Opts: sysvgroups,orlov,nogrpid,init_itable,dioread_nolock,grpjquota=.oldalloc,errors=remount-ro,jqfmt=vfsv1,grpid,,. Quota mode: writeback. [ 373.385645][T10433] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2082'. [ 373.405254][T10428] EXT4-fs error (device loop3): dx_probe:822: inode #2: comm syz.3.2083: Attempting to read directory block (0) that is past i_size (256) [ 373.436340][T10409] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 373.483815][T10428] EXT4-fs (loop3): Remounting filesystem read-only [ 373.603899][T10409] team0: Port device team_slave_0 added [ 373.639570][T10409] team0: Port device team_slave_1 added [ 373.646234][T10452] Illegal XDP return value 4294967274, expect packet loss! [ 373.736634][T10409] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 373.751343][T10409] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 373.833957][T10409] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 373.862108][T10463] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2096'. [ 373.878450][T10409] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 373.889063][T10409] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 373.917503][T10409] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 373.953382][ T3563] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 374.069945][T10409] device hsr_slave_0 entered promiscuous mode [ 374.102432][T10409] device hsr_slave_1 entered promiscuous mode [ 374.117114][T10409] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 374.133583][ T26] audit: type=1326 audit(1719603829.231:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10472 comm="syz.3.2100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84f250bb99 code=0x7ffc0000 [ 374.144826][T10409] Cannot create hsr debugfs directory [ 374.193520][ T26] audit: type=1326 audit(1719603829.261:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10472 comm="syz.3.2100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=290 compat=0 ip=0x7f84f250bb99 code=0x7ffc0000 [ 374.221104][ T144] device hsr_slave_0 left promiscuous mode [ 374.231113][ T144] device hsr_slave_1 left promiscuous mode [ 374.241398][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 374.249127][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 374.257766][ T26] audit: type=1326 audit(1719603829.261:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10472 comm="syz.3.2100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84f250bb99 code=0x7ffc0000 [ 374.284281][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 374.291970][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 374.303345][ T26] audit: type=1326 audit(1719603829.261:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10472 comm="syz.3.2100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84f250bb99 code=0x7ffc0000 [ 374.304077][ T144] device bridge_slave_1 left promiscuous mode [ 374.332668][ T1068] Bluetooth: hci1: command 0x0409 tx timeout [ 374.343367][ T3563] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 374.355631][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.366752][ T3563] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 374.380794][ T3563] usb 1-1: New USB device found, idVendor=056a, idProduct=030a, bcdDevice= 0.00 [ 374.391529][ T3563] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.402705][ T3563] usb 1-1: config 0 descriptor?? [ 374.410103][ T144] device bridge_slave_0 left promiscuous mode [ 374.416588][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.439724][ T144] device veth1_macvtap left promiscuous mode [ 374.452237][ T144] device veth0_macvtap left promiscuous mode [ 374.465141][ T144] device veth1_vlan left promiscuous mode [ 374.477667][ T144] device veth0_vlan left promiscuous mode [ 374.865020][T10493] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 374.943388][ T3563] usbhid 1-1:0.0: can't add hid device: -71 [ 374.949924][ T3563] usbhid: probe of 1-1:0.0 failed with error -71 [ 374.971392][ T3563] usb 1-1: USB disconnect, device number 23 [ 374.973233][ T144] team0 (unregistering): Port device team_slave_1 removed [ 375.014259][ T144] team0 (unregistering): Port device team_slave_0 removed [ 375.047570][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 375.101758][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 375.266075][ T26] audit: type=1326 audit(1719603830.361:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10498 comm="syz.3.2112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84f250bb99 code=0x7ffc0000 [ 375.275082][ T144] bond0 (unregistering): Released all slaves [ 375.330455][ T26] audit: type=1326 audit(1719603830.401:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10498 comm="syz.3.2112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84f250bb99 code=0x7ffc0000 [ 375.378191][ T26] audit: type=1326 audit(1719603830.401:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10498 comm="syz.3.2112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=290 compat=0 ip=0x7f84f250bb99 code=0x7ffc0000 [ 375.426383][ T26] audit: type=1326 audit(1719603830.401:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10498 comm="syz.3.2112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84f250bb99 code=0x7ffc0000 [ 375.458550][ T26] audit: type=1326 audit(1719603830.401:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10498 comm="syz.3.2112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84f250bb99 code=0x7ffc0000 [ 375.544533][T10507] loop3: detected capacity change from 0 to 128 [ 375.666617][T10509] loop4: detected capacity change from 0 to 1764 [ 376.069717][ T26] audit: type=1326 audit(1719603831.161:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10516 comm="syz.1.2122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fcbad0b99 code=0x7ffc0000 [ 376.116598][ T26] audit: type=1326 audit(1719603831.191:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10516 comm="syz.1.2122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fcbad0b99 code=0x7ffc0000 [ 376.193910][ T26] audit: type=1326 audit(1719603831.191:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10516 comm="syz.1.2122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=290 compat=0 ip=0x7f5fcbad0b99 code=0x7ffc0000 [ 376.242371][ T26] audit: type=1326 audit(1719603831.191:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10516 comm="syz.1.2122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fcbad0b99 code=0x7ffc0000 [ 376.341089][ T26] audit: type=1326 audit(1719603831.191:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10516 comm="syz.1.2122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fcbad0b99 code=0x7ffc0000 [ 376.379703][T10409] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 376.393301][ T1068] Bluetooth: hci1: command 0x041b tx timeout [ 376.414678][T10409] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 376.453694][T10409] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 376.494300][T10409] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 376.642757][T10409] 8021q: adding VLAN 0 to HW filter on device bond0 [ 376.688037][ T3750] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 376.702991][ T3750] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 376.722633][T10409] 8021q: adding VLAN 0 to HW filter on device team0 [ 376.783412][ T3750] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 376.792222][ T3750] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 376.801478][ T3759] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 376.819058][ T3750] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.826209][ T3750] bridge0: port 1(bridge_slave_0) entered forwarding state [ 376.842595][ T3750] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 376.862103][ T3750] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 376.879560][ T3750] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.886718][ T3750] bridge0: port 2(bridge_slave_1) entered forwarding state [ 376.955440][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 376.966454][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 376.976661][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 376.986017][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 376.997906][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 377.043472][ T3750] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 377.051604][ T3750] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 377.064000][ T3750] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 377.072810][ T3750] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 377.081663][ T3750] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 377.092805][T10549] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:0000 with DS=0xa [ 377.121513][T10409] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 377.148908][T10409] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 377.158129][ T3750] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 377.167584][ T3750] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 377.204470][ T3759] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 377.224234][ T3759] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 377.405873][T10532] chnl_net:caif_netlink_parms(): no params data found [ 377.453797][ T3759] usb 1-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 377.462923][ T3759] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.512833][ T3759] usb 1-1: Product: syz [ 377.520193][ T3759] usb 1-1: Manufacturer: syz [ 377.533001][ T3759] usb 1-1: SerialNumber: syz [ 377.547091][ T3759] usb 1-1: config 0 descriptor?? [ 377.573490][T10529] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 377.576190][ T5790] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 377.580814][T10529] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 377.589101][ T5790] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 377.630693][T10409] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 377.657412][T10570] netlink: 'syz.3.2144': attribute type 5 has an invalid length. [ 377.693270][T10570] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2144'. [ 377.716637][T10570] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2144'. [ 377.750350][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 377.760235][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 377.772633][T10532] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.779986][T10532] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.797771][T10532] device bridge_slave_0 entered promiscuous mode [ 377.827053][T10532] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.853690][T10532] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.863375][ T3759] dm9601: probe of 1-1:0.0 failed with error -71 [ 377.877404][ T3759] usb 1-1: USB disconnect, device number 24 [ 377.885190][T10532] device bridge_slave_1 entered promiscuous mode [ 377.898725][T10409] device veth0_vlan entered promiscuous mode [ 377.921358][ T5790] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 377.931635][ T5790] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 378.010854][T10409] device veth1_vlan entered promiscuous mode [ 378.027605][ T3750] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 378.044862][ T3750] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 378.067418][ T3750] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 378.089612][T10532] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 378.126311][T10532] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 378.180592][T10409] device veth0_macvtap entered promiscuous mode [ 378.204189][ T3759] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 378.214703][ T3759] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 378.233765][ T3759] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 378.269313][T10409] device veth1_macvtap entered promiscuous mode [ 378.282712][ T3759] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 378.293643][ T3759] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 378.318941][T10532] team0: Port device team_slave_0 added [ 378.357028][T10532] team0: Port device team_slave_1 added [ 378.384613][T10409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 378.439011][T10409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.468822][T10409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 378.480040][ T3515] Bluetooth: hci1: command 0x040f tx timeout [ 378.501069][T10409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.521412][T10409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 378.541760][T10409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.552473][T10409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 378.590997][T10409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.622816][T10409] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 378.667544][ T5790] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 378.692003][ T5790] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 378.726220][T10409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 378.728360][ T3759] Bluetooth: hci3: command 0x0409 tx timeout [ 378.752095][T10409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.780771][T10409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 378.814411][T10409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.844776][T10409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 378.878342][T10409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.912719][T10409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 378.963179][T10409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.003343][T10409] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 379.044293][ T5790] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 379.064182][ T5790] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 379.101454][T10409] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.146526][T10409] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.171281][T10409] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.213300][T10409] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.245367][T10532] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 379.257965][T10532] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 379.349387][T10532] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 379.414461][T10532] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 379.443910][T10532] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 379.508483][T10611] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 379.519424][T10532] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 379.702385][T10532] device hsr_slave_0 entered promiscuous mode [ 379.731616][T10532] device hsr_slave_1 entered promiscuous mode [ 379.751017][T10532] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 379.793167][T10532] Cannot create hsr debugfs directory [ 379.820540][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 379.841855][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 379.902087][ T3515] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 379.940658][ T3608] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 379.963283][ T3750] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 379.978102][ T3608] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 380.032756][ T5790] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 380.108375][ T144] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.226804][ T144] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.237587][ T3750] usb 1-1: Using ep0 maxpacket: 8 [ 380.319826][ T144] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.383507][ T3750] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 380.404164][ T3750] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.427659][ T3750] usb 1-1: config 0 descriptor?? [ 380.457392][ T144] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.523280][ T3563] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 380.553363][ T3515] Bluetooth: hci1: command 0x0419 tx timeout [ 380.793428][ T3515] Bluetooth: hci3: command 0x041b tx timeout [ 380.893439][ T3563] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 380.920062][ T3563] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 380.949435][ T3563] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 380.989455][ T3563] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.008926][ T3563] usb 2-1: config 0 descriptor?? [ 381.287095][T10633] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 381.488286][T10631] syz.3.2166 (10631): drop_caches: 2 [ 381.506927][ T3563] hid (null): report_id 27293 is invalid [ 381.540693][ T144] device hsr_slave_0 left promiscuous mode [ 381.547486][ T144] device hsr_slave_1 left promiscuous mode [ 381.554427][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 381.562061][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 381.572605][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 381.582419][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 381.605449][ T144] device bridge_slave_1 left promiscuous mode [ 381.623162][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.644143][T10640] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 381.658605][ T144] device bridge_slave_0 left promiscuous mode [ 381.666852][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.685027][ T144] device veth1_macvtap left promiscuous mode [ 381.705263][ T144] device veth0_macvtap left promiscuous mode [ 381.708387][T10147] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 381.720421][ T144] device veth1_vlan left promiscuous mode [ 381.738583][ T144] device veth0_vlan left promiscuous mode [ 381.773286][ T3563] usb 2-1: string descriptor 0 read error: -71 [ 381.813327][ T3563] uclogic 0003:256C:006D.0011: failed retrieving string descriptor #200: -71 [ 381.832199][ T3563] uclogic 0003:256C:006D.0011: failed retrieving pen parameters: -71 [ 381.840811][ T3563] uclogic 0003:256C:006D.0011: failed probing pen v2 parameters: -71 [ 381.849478][ T3563] uclogic 0003:256C:006D.0011: failed probing parameters: -71 [ 381.857241][ T3563] uclogic: probe of 0003:256C:006D.0011 failed with error -71 [ 381.873599][ T3563] usb 2-1: USB disconnect, device number 12 [ 382.125213][T10147] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 382.152704][T10147] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 382.182859][T10147] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 382.206820][T10147] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.236876][T10147] usb 3-1: config 0 descriptor?? [ 382.358751][ T144] team0 (unregistering): Port device team_slave_1 removed [ 382.419755][ T144] team0 (unregistering): Port device team_slave_0 removed [ 382.452758][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 382.475960][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 382.578856][ T144] bond0 (unregistering): Released all slaves [ 382.676909][T10532] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 382.692633][T10532] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 382.707161][T10532] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 382.724630][T10147] keytouch 0003:0926:3333.0012: fixing up Keytouch IEC report descriptor [ 382.733595][ T3750] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 382.747090][ T3750] asix: probe of 1-1:0.0 failed with error -32 [ 382.760579][T10147] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0012/input/input35 [ 382.784425][T10532] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 382.873190][ T3580] Bluetooth: hci3: command 0x040f tx timeout [ 382.925197][ T3580] keytouch 0003:0926:3333.0012: implement() called with too large value 12 (n: 1)! (kworker/0:10) [ 382.925716][T10147] keytouch 0003:0926:3333.0012: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 382.937136][ T3580] ------------[ cut here ]------------ [ 382.954310][ T3580] WARNING: CPU: 0 PID: 3580 at drivers/hid/hid-core.c:1449 hid_output_report+0x541/0x750 [ 382.964154][ T3580] Modules linked in: [ 382.968096][ T3580] CPU: 0 PID: 3580 Comm: kworker/0:10 Not tainted 5.15.161-syzkaller #0 [ 382.976448][ T3580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 382.986529][ T3580] Workqueue: events hidinput_led_worker [ 382.992100][ T3580] RIP: 0010:hid_output_report+0x541/0x750 [ 382.997831][ T3580] Code: c1 c0 08 00 00 48 8b 44 24 40 48 8d b8 38 19 00 00 48 c7 c6 a0 a6 64 8b 48 c7 c2 a2 f2 2c 8c 44 89 f1 45 89 e8 e8 df 49 70 02 <0f> 0b 44 23 74 24 18 e9 bb fd ff ff 89 d9 80 e1 07 80 c1 03 38 c1 [ 383.017441][ T3580] RSP: 0018:ffffc90003117b30 EFLAGS: 00010046 [ 383.023506][ T3580] RAX: 78129466c0115f00 RBX: 0000000000000001 RCX: 78129466c0115f00 [ 383.031487][ T3580] RDX: 0000000000000000 RSI: 0000000080000001 RDI: 0000000000000000 [ 383.039449][ T3580] RBP: 0000000000000000 R08: ffffffff8166835c R09: fffffbfff1bc8d86 [ 383.047414][ T3580] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000 [ 383.055383][ T3580] R13: 0000000000000001 R14: 000000000000000c R15: 0000000000000000 [ 383.063455][ T3580] FS: 0000000000000000(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000 [ 383.072382][ T3580] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 383.079073][ T3580] CR2: 000000110c3ce7f2 CR3: 0000000068711000 CR4: 00000000003506f0 [ 383.087039][ T3580] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 383.095012][ T3580] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 383.102997][ T3580] Call Trace: [ 383.106288][ T3580] [ 383.109210][ T3580] ? __warn+0x15b/0x300 [ 383.113458][ T3580] ? hid_output_report+0x541/0x750 [ 383.118691][ T3580] ? report_bug+0x1b7/0x2e0 [ 383.123210][ T3580] ? handle_bug+0x3d/0x70 [ 383.127556][ T3580] ? exc_invalid_op+0x16/0x40 [ 383.132226][ T3580] ? asm_exc_invalid_op+0x16/0x20 [ 383.137242][ T3580] ? __wake_up_klogd+0xcc/0x100 [ 383.142103][ T3580] ? hid_output_report+0x541/0x750 [ 383.147234][ T3580] usbhid_submit_report+0x43d/0x9e0 [ 383.152533][ T3580] process_one_work+0x8a1/0x10c0 [ 383.157753][ T3580] ? worker_detach_from_pool+0x260/0x260 [ 383.163388][ T3580] ? _raw_spin_lock_irqsave+0x120/0x120 [ 383.168929][ T3580] ? kthread_data+0x4e/0xc0 [ 383.173456][ T3580] ? wq_worker_running+0x97/0x170 [ 383.178500][ T3580] worker_thread+0xaca/0x1280 [ 383.183205][ T3580] kthread+0x3f6/0x4f0 [ 383.187265][ T3580] ? rcu_lock_release+0x20/0x20 [ 383.192122][ T3580] ? kthread_blkcg+0xd0/0xd0 [ 383.196742][ T3580] ret_from_fork+0x1f/0x30 [ 383.201167][ T3580] [ 383.204190][ T3580] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 383.211456][ T3580] CPU: 0 PID: 3580 Comm: kworker/0:10 Not tainted 5.15.161-syzkaller #0 [ 383.219767][ T3580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 383.229840][ T3580] Workqueue: events hidinput_led_worker [ 383.235401][ T3580] Call Trace: [ 383.238703][ T3580] [ 383.241647][ T3580] dump_stack_lvl+0x1e3/0x2d0 [ 383.246340][ T3580] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 383.252184][ T3580] ? panic+0x860/0x860 [ 383.256279][ T3580] ? hid_output_report+0x500/0x750 [ 383.261756][ T3580] ? hid_output_report+0x500/0x750 [ 383.266895][ T3580] panic+0x318/0x860 [ 383.270799][ T3580] ? __warn+0x16a/0x300 [ 383.274963][ T3580] ? fb_is_primary_device+0xd0/0xd0 [ 383.280179][ T3580] ? ret_from_fork+0x1f/0x30 [ 383.284787][ T3580] ? hid_output_report+0x541/0x750 [ 383.289917][ T3580] __warn+0x2b2/0x300 [ 383.293912][ T3580] ? hid_output_report+0x541/0x750 [ 383.299026][ T3580] report_bug+0x1b7/0x2e0 [ 383.303363][ T3580] handle_bug+0x3d/0x70 [ 383.307622][ T3580] exc_invalid_op+0x16/0x40 [ 383.312148][ T3580] asm_exc_invalid_op+0x16/0x20 [ 383.317009][ T3580] RIP: 0010:hid_output_report+0x541/0x750 [ 383.322741][ T3580] Code: c1 c0 08 00 00 48 8b 44 24 40 48 8d b8 38 19 00 00 48 c7 c6 a0 a6 64 8b 48 c7 c2 a2 f2 2c 8c 44 89 f1 45 89 e8 e8 df 49 70 02 <0f> 0b 44 23 74 24 18 e9 bb fd ff ff 89 d9 80 e1 07 80 c1 03 38 c1 [ 383.342556][ T3580] RSP: 0018:ffffc90003117b30 EFLAGS: 00010046 [ 383.348730][ T3580] RAX: 78129466c0115f00 RBX: 0000000000000001 RCX: 78129466c0115f00 [ 383.356716][ T3580] RDX: 0000000000000000 RSI: 0000000080000001 RDI: 0000000000000000 [ 383.364697][ T3580] RBP: 0000000000000000 R08: ffffffff8166835c R09: fffffbfff1bc8d86 [ 383.372679][ T3580] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000 [ 383.380654][ T3580] R13: 0000000000000001 R14: 000000000000000c R15: 0000000000000000 [ 383.388625][ T3580] ? __wake_up_klogd+0xcc/0x100 [ 383.393492][ T3580] usbhid_submit_report+0x43d/0x9e0 [ 383.398693][ T3580] process_one_work+0x8a1/0x10c0 [ 383.403637][ T3580] ? worker_detach_from_pool+0x260/0x260 [ 383.409279][ T3580] ? _raw_spin_lock_irqsave+0x120/0x120 [ 383.414821][ T3580] ? kthread_data+0x4e/0xc0 [ 383.419318][ T3580] ? wq_worker_running+0x97/0x170 [ 383.424449][ T3580] worker_thread+0xaca/0x1280 [ 383.429178][ T3580] kthread+0x3f6/0x4f0 [ 383.433266][ T3580] ? rcu_lock_release+0x20/0x20 [ 383.438148][ T3580] ? kthread_blkcg+0xd0/0xd0 [ 383.442769][ T3580] ret_from_fork+0x1f/0x30 [ 383.447199][ T3580] [ 384.549415][ T3580] Shutting down cpus with NMI [ 384.554486][ T3580] Kernel Offset: disabled [ 384.559232][ T3580] Rebooting in 86400 seconds..