Warning: Permanently added '10.128.0.112' (ED25519) to the list of known hosts. 2024/04/09 05:47:42 fuzzer started 2024/04/09 05:47:42 dialing manager at 10.128.0.163:30008 [ 41.377779][ T3503] cgroup: Unknown subsys name 'net' [ 41.502007][ T3503] cgroup: Unknown subsys name 'rlimit' 2024/04/09 05:47:43 syscalls: 3846 2024/04/09 05:47:43 code coverage: enabled 2024/04/09 05:47:43 comparison tracing: enabled 2024/04/09 05:47:43 extra coverage: enabled 2024/04/09 05:47:43 delay kcov mmap: mmap returned an invalid pointer 2024/04/09 05:47:43 setuid sandbox: enabled 2024/04/09 05:47:43 namespace sandbox: enabled 2024/04/09 05:47:43 Android sandbox: /sys/fs/selinux/policy does not exist 2024/04/09 05:47:43 fault injection: enabled 2024/04/09 05:47:43 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2024/04/09 05:47:43 net packet injection: enabled 2024/04/09 05:47:43 net device setup: enabled 2024/04/09 05:47:43 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2024/04/09 05:47:43 devlink PCI setup: PCI device 0000:00:10.0 is not available 2024/04/09 05:47:43 NIC VF setup: PCI device 0000:00:11.0 is not available 2024/04/09 05:47:43 USB emulation: enabled 2024/04/09 05:47:43 hci packet injection: enabled 2024/04/09 05:47:43 wifi device emulation: enabled 2024/04/09 05:47:43 802.15.4 emulation: enabled 2024/04/09 05:47:43 swap file: enabled [ 42.660261][ T3503] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS 2024/04/09 05:47:44 starting 5 executor processes [ 43.681294][ T3519] chnl_net:caif_netlink_parms(): no params data found [ 43.722201][ T3526] chnl_net:caif_netlink_parms(): no params data found [ 43.766398][ T3518] chnl_net:caif_netlink_parms(): no params data found [ 43.803624][ T3522] chnl_net:caif_netlink_parms(): no params data found [ 43.830108][ T3519] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.838150][ T3519] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.846090][ T3519] device bridge_slave_0 entered promiscuous mode [ 43.856546][ T3514] chnl_net:caif_netlink_parms(): no params data found [ 43.895840][ T3519] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.903668][ T3519] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.912157][ T3519] device bridge_slave_1 entered promiscuous mode [ 43.966571][ T3526] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.973654][ T3526] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.982411][ T3526] device bridge_slave_0 entered promiscuous mode [ 44.000056][ T3519] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 44.032908][ T3526] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.040418][ T3526] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.051327][ T3526] device bridge_slave_1 entered promiscuous mode [ 44.060359][ T3519] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 44.116289][ T3522] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.123341][ T3522] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.132226][ T3522] device bridge_slave_0 entered promiscuous mode [ 44.145212][ T3514] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.156750][ T3514] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.164674][ T3514] device bridge_slave_0 entered promiscuous mode [ 44.179970][ T3518] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.188699][ T3518] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.197315][ T3518] device bridge_slave_0 entered promiscuous mode [ 44.204913][ T3522] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.212194][ T3522] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.220788][ T3522] device bridge_slave_1 entered promiscuous mode [ 44.230242][ T3526] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 44.239818][ T3514] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.247342][ T3514] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.255381][ T3514] device bridge_slave_1 entered promiscuous mode [ 44.272277][ T3519] team0: Port device team_slave_0 added [ 44.278322][ T3518] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.285349][ T3518] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.293312][ T3518] device bridge_slave_1 entered promiscuous mode [ 44.310004][ T3526] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 44.325010][ T3519] team0: Port device team_slave_1 added [ 44.348742][ T3514] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 44.376641][ T3522] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 44.395767][ T3518] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 44.414776][ T3514] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 44.427611][ T3522] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 44.438625][ T3526] team0: Port device team_slave_0 added [ 44.446387][ T3518] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 44.456480][ T3519] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 44.463580][ T3519] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.490293][ T3519] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 44.511504][ T3526] team0: Port device team_slave_1 added [ 44.529035][ T3519] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 44.536279][ T3519] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.562728][ T3519] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 44.608208][ T3514] team0: Port device team_slave_0 added [ 44.621254][ T3522] team0: Port device team_slave_0 added [ 44.635230][ T3518] team0: Port device team_slave_0 added [ 44.651049][ T3514] team0: Port device team_slave_1 added [ 44.657413][ T3526] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 44.664495][ T3526] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.691248][ T3526] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 44.703939][ T3522] team0: Port device team_slave_1 added [ 44.710940][ T3518] team0: Port device team_slave_1 added [ 44.719314][ T3519] device hsr_slave_0 entered promiscuous mode [ 44.729225][ T3519] device hsr_slave_1 entered promiscuous mode [ 44.741357][ T3526] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 44.751833][ T3526] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.778431][ T3526] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 44.846479][ T3514] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 44.853753][ T3514] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.880854][ T3514] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 44.901099][ T3522] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 44.908106][ T3522] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.935224][ T3522] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 44.946862][ T3518] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 44.953980][ T3518] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.981061][ T3518] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 44.999186][ T3514] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.006162][ T3514] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.032833][ T3514] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.046823][ T3522] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.054009][ T3522] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.080209][ T3522] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.092498][ T3518] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.099891][ T3518] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.126483][ T3518] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.152678][ T3526] device hsr_slave_0 entered promiscuous mode [ 45.161955][ T3526] device hsr_slave_1 entered promiscuous mode [ 45.169623][ T3526] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 45.177558][ T3526] Cannot create hsr debugfs directory [ 45.244105][ T3514] device hsr_slave_0 entered promiscuous mode [ 45.251219][ T3514] device hsr_slave_1 entered promiscuous mode [ 45.260788][ T3514] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 45.268402][ T3514] Cannot create hsr debugfs directory [ 45.287242][ T3522] device hsr_slave_0 entered promiscuous mode [ 45.293824][ T3522] device hsr_slave_1 entered promiscuous mode [ 45.300633][ T3522] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 45.311351][ T3522] Cannot create hsr debugfs directory [ 45.317568][ T1066] Bluetooth: hci0: command 0x0409 tx timeout [ 45.359567][ T3518] device hsr_slave_0 entered promiscuous mode [ 45.366806][ T3518] device hsr_slave_1 entered promiscuous mode [ 45.373805][ T3518] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 45.381880][ T3518] Cannot create hsr debugfs directory [ 45.396090][ T1066] Bluetooth: hci2: command 0x0409 tx timeout [ 45.396285][ T21] Bluetooth: hci3: command 0x0409 tx timeout [ 45.407516][ T1066] Bluetooth: hci1: command 0x0409 tx timeout [ 45.477229][ T3246] Bluetooth: hci4: command 0x0409 tx timeout [ 45.623930][ T3519] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 45.642030][ T3519] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 45.651731][ T3519] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 45.677342][ T3519] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 45.719921][ T3522] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 45.742778][ T3522] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 45.765591][ T3522] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 45.783291][ T3522] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 45.805447][ T3526] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 45.824319][ T3526] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 45.833263][ T3526] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 45.843380][ T3526] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 45.918610][ T3519] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.937313][ T3514] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 45.975349][ T3521] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 45.984537][ T3521] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 45.993204][ T3514] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 46.029096][ T3514] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 46.041642][ T3519] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.051819][ T3514] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 46.065164][ T3518] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 46.083043][ T3557] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 46.092618][ T3557] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 46.101790][ T3557] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.109276][ T3557] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.120731][ T3518] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 46.133286][ T3518] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 46.156705][ T3557] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 46.164731][ T3557] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 46.174682][ T3557] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 46.183411][ T3557] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.190689][ T3557] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.198858][ T3557] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 46.208120][ T3557] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 46.217115][ T3557] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 46.226358][ T3557] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 46.234877][ T3518] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 46.267045][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 46.274852][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 46.284441][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 46.293780][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 46.302952][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 46.324543][ T3522] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.344863][ T3526] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.360482][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 46.369257][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 46.390713][ T3519] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 46.434771][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 46.443500][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 46.462517][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 46.471426][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 46.485413][ T3522] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.508080][ T3526] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.538228][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 46.547710][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 46.557046][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.564300][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.573012][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 46.582686][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 46.592071][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.599358][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.607816][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 46.617324][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 46.625806][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.633348][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.641596][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 46.650517][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 46.659113][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.667407][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.678426][ T3514] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.694414][ T3518] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.706716][ T3557] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 46.714851][ T3557] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 46.724054][ T3557] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 46.750263][ T3518] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.764079][ T3514] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.773812][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 46.785733][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 46.794765][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 46.804747][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 46.812809][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 46.821354][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 46.840269][ T3519] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.863367][ T3561] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 46.871350][ T3561] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 46.879304][ T3561] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 46.888599][ T3561] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 46.898552][ T3561] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 46.907792][ T3561] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 46.917952][ T3561] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 46.927277][ T3561] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.934800][ T3561] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.942964][ T3561] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 46.951955][ T3561] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 46.961367][ T3561] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.968746][ T3561] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.977439][ T3561] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 46.986656][ T3561] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 47.004986][ T3522] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 47.017412][ T3522] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 47.075607][ T3526] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 47.091490][ T3526] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 47.107226][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 47.116936][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 47.125229][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.134448][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.143059][ T3558] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.150154][ T3558] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.158619][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 47.168800][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 47.177511][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.186101][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.194609][ T3558] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.201682][ T3558] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.210008][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 47.218361][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 47.226923][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 47.235481][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 47.244771][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 47.253596][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 47.262355][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 47.271249][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 47.280078][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 47.289452][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 47.298396][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 47.307189][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 47.315722][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 47.324324][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 47.333682][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 47.342278][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 47.351028][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 47.359887][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 47.398315][ T13] Bluetooth: hci0: command 0x041b tx timeout [ 47.400704][ T3518] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 47.417781][ T3518] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 47.431920][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 47.440932][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 47.449767][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 47.458433][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 47.466682][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 47.474528][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 47.476368][ T13] Bluetooth: hci3: command 0x041b tx timeout [ 47.483806][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 47.494631][ T13] Bluetooth: hci1: command 0x041b tx timeout [ 47.498315][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 47.503456][ T13] Bluetooth: hci2: command 0x041b tx timeout [ 47.513443][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 47.527282][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 47.539513][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 47.549935][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 47.556198][ T13] Bluetooth: hci4: command 0x041b tx timeout [ 47.564219][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 47.572497][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 47.581190][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 47.589625][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 47.598322][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 47.606699][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 47.615237][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 47.632292][ T3519] device veth0_vlan entered promiscuous mode [ 47.649029][ T3514] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 47.662852][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 47.672555][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 47.696968][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 47.707175][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 47.718201][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 47.727231][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 47.738936][ T3519] device veth1_vlan entered promiscuous mode [ 47.767976][ T3526] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.801537][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 47.812810][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 47.842296][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 47.851795][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 47.894985][ T3522] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.928675][ T3561] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 47.942489][ T3561] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 47.951450][ T3561] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 47.969574][ T3561] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 47.989101][ T3514] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.012221][ T3526] device veth0_vlan entered promiscuous mode [ 48.020643][ T3561] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 48.034843][ T3561] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 48.044616][ T3561] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 48.053787][ T3561] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 48.063973][ T3519] device veth0_macvtap entered promiscuous mode [ 48.076584][ T3519] device veth1_macvtap entered promiscuous mode [ 48.091357][ T3561] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 48.102389][ T3561] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 48.111294][ T3561] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 48.122583][ T3561] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 48.131380][ T3561] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 48.139272][ T3561] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 48.154854][ T3526] device veth1_vlan entered promiscuous mode [ 48.186862][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 48.194899][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 48.204874][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 48.213689][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 48.230963][ T3526] device veth0_macvtap entered promiscuous mode [ 48.245773][ T3518] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.261972][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 48.271345][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 48.280173][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 48.289162][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 48.299065][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 48.308821][ T3526] device veth1_macvtap entered promiscuous mode [ 48.320088][ T3519] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.332604][ T3522] device veth0_vlan entered promiscuous mode [ 48.355442][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 48.363926][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 48.373755][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 48.384239][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 48.392831][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 48.402038][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 48.411106][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 48.420941][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 48.429378][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 48.444429][ T3522] device veth1_vlan entered promiscuous mode [ 48.462400][ T3514] device veth0_vlan entered promiscuous mode [ 48.471641][ T3519] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.481243][ T3526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.492451][ T3526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.504768][ T3526] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.514267][ T3561] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 48.523486][ T3561] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 48.532192][ T3561] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 48.540802][ T3561] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 48.550167][ T3561] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 48.559686][ T3561] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 48.568796][ T3561] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 48.578642][ T3561] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 48.586542][ T3561] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 48.599392][ T3514] device veth1_vlan entered promiscuous mode [ 48.617274][ T3526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.628554][ T3526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.643098][ T3526] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.654653][ T3526] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.664287][ T3526] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.675317][ T3526] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.684737][ T3526] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.697385][ T3518] device veth0_vlan entered promiscuous mode [ 48.704064][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 48.712867][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 48.721211][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 48.729792][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 48.738634][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 48.747965][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 48.758699][ T3519] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.772760][ T3519] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.783364][ T3519] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.792685][ T3519] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.828726][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 48.837648][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 48.846531][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 48.854316][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 48.864050][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 48.874694][ T3522] device veth0_macvtap entered promiscuous mode [ 48.900767][ T3514] device veth0_macvtap entered promiscuous mode [ 48.917877][ T3518] device veth1_vlan entered promiscuous mode [ 48.928704][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 48.938264][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 48.947940][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 48.957991][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 48.984841][ T3522] device veth1_macvtap entered promiscuous mode [ 49.013994][ T3514] device veth1_macvtap entered promiscuous mode [ 49.045695][ T3522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.057018][ T3522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.067721][ T3522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.079990][ T3522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.091310][ T3522] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.133767][ T3514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.139637][ T3576] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.147224][ T3514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.159144][ T3576] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.162694][ T3514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.180895][ T3514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.191085][ T3514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.201819][ T3514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.212848][ T3514] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.220818][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 49.229275][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 49.239023][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 49.248155][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 49.255862][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 49.264636][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 49.279065][ T3522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.290422][ T3522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.300903][ T3522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.311851][ T3522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.323713][ T3522] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.347023][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 49.356723][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 49.366943][ T3514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.378762][ T3514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.390420][ T3514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.401774][ T3514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.411849][ T3514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.422672][ T3514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.433876][ T3514] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.448771][ T3522] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.457872][ T3522] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.467962][ T3522] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.477734][ T3556] Bluetooth: hci0: command 0x040f tx timeout [ 49.484336][ T3522] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.503831][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 49.512954][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 49.521817][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 49.531459][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 49.542712][ T3514] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.552299][ T3514] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.561929][ T3557] Bluetooth: hci2: command 0x040f tx timeout [ 49.568926][ T3557] Bluetooth: hci1: command 0x040f tx timeout [ 49.575142][ T3514] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.583933][ T3557] Bluetooth: hci3: command 0x040f tx timeout [ 49.590121][ T3514] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.616421][ T3576] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.624627][ T3576] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.635005][ T3518] device veth0_macvtap entered promiscuous mode [ 49.636751][ T3557] Bluetooth: hci4: command 0x040f tx timeout [ 49.677001][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 49.684982][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 49.717648][ T3518] device veth1_macvtap entered promiscuous mode [ 49.720477][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.724855][ T3576] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.732580][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.776153][ T3576] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.780725][ T3566] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 49.801718][ T3566] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 49.810512][ T3566] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 49.836354][ T3518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.850125][ T3518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.860019][ T3518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.871020][ T3518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.883569][ T3518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.894528][ T3518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.904819][ T3518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.915849][ T3518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 05:47:51 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x6}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000080), &(0x7f0000000200)=r1}, 0x20) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018400110800395032303030"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) lchown(&(0x7f0000000100)='./file0\x00', 0xffffffffffffffff, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) [ 49.930848][ T3518] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.953749][ T3518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.974998][ T3518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.993112][ T3518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.011601][ T3518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.032011][ T3518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 05:47:51 executing program 0: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000300)={[{@noblock_validity}, {}, {@barrier}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x14113e, 0x0) [ 50.060504][ T3518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.074324][ T3518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.096055][ T3518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.113391][ T3518] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.122972][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 50.156740][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 50.165632][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 50.175135][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 05:47:51 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000200000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) [ 50.214634][ T3518] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.260838][ T3518] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 05:47:51 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, [@migrate={0x50, 0x11, [{@in6=@loopback, @in=@broadcast, @in, @in6=@local}]}]}, 0xa0}}, 0x0) [ 50.314902][ T3518] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.316979][ T3598] loop0: detected capacity change from 0 to 1024 [ 50.329782][ T3518] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 05:47:51 executing program 2: r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000001680)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000400)={0x1d, r1, 0x3}, 0x18) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0x28}}, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x14}, 0x14}}, 0x0) [ 50.419127][ T3598] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 50.423417][ T406] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.459429][ T406] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.509468][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.541537][ T3603] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.558332][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 50.575651][ T3603] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.577372][ T3598] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,bsddf,barrier,norecovery,debug_want_extra_isize=0x0000000000000080,lazytime,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 50.593191][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 05:47:51 executing program 0: capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)) delete_module(0x0, 0x0) [ 50.647985][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 50.662431][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 50.685789][ T406] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.703529][ T150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.704876][ T406] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.733528][ T150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 05:47:51 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0x5451, 0x0) [ 50.749885][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 05:47:51 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000e40)={0x34, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x1}]}, 0x34}}, 0x0) [ 50.808338][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 50.864583][ T406] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.885574][ T406] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 05:47:52 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0xfff, 0x7}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000001100007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='block_bio_remap\x00', r3}, 0x10) write$cgroup_type(r2, &(0x7f0000000000), 0x9) 05:47:52 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000001c0)=@framed, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) syz_usb_control_io(r0, &(0x7f0000000940)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7, 0x0, 0x0, 0x0, "c106d96f", "9ab81be8"}}, 0x0}, 0x0) [ 50.916079][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 05:47:52 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x12) r3 = socket(0xa, 0x6, 0x0) getsockopt$inet6_mreq(r3, 0x10d, 0xc5, 0x0, &(0x7f0000000080)) 05:47:52 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], 0x0}, 0x90) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[], &(0x7f0000000240)='syzkaller\x00'}, 0x90) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r1, r0, 0x16, 0x0, @val=@tcx={@prog_fd}}, 0x40) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f00000000c0)=0x3c00, 0x4) 05:47:52 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x6}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000080), &(0x7f0000000200)=r1}, 0x20) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018400110800395032303030"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) lchown(&(0x7f0000000100)='./file0\x00', 0xffffffffffffffff, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) 05:47:52 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000002400007b8af8ff00000000bfa200000000000007020000dfffffffb703000008000000b704000000000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='ext4_ext_rm_leaf\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000100), 0x1001) ioctl$SIOCSIFHWADDR(r2, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc}}) 05:47:52 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000300)={[{@noblock_validity}, {}, {@barrier}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x14113e, 0x0) 05:47:52 executing program 1: syz_mount_image$hfs(&(0x7f0000000100), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='uid=', @ANYRESHEX, @ANYBLOB="2c73657373696f6e3d3078303030303030303030303030303030332c6469725f756d61736b3d30303030303030303030303030303030343030303030302c73657373696f6e3d3078303030303030323030303030303030372c66696c655f756d61736b3d30303030303030303030303030303030303030303036332c747970653d1eb8a5fd2c6469725f756d61736b3d30303030303030303030303030303030303030303031302c6769643d", @ANYRESHEX, @ANYBLOB=',subj_role=net/fiy_trie\x00,fowner=', @ANYRESDEC, @ANYBLOB=',permit_directio,\x00'], 0xfd, 0x2f3, &(0x7f0000000740)="$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") 05:47:52 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000e8ff0000000000ff000044850000000e0000003f0000000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000000)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000002000)='logon\x00', &(0x7f0000001000), &(0x7f0000001000)="2e989cc9f58ec796be4720e6160291a2fb7c6445e84b8e9e349ead029fe38d5810bf992b5d51f406a51cc339021268aed6f767582af42dbc8ea1110e4353fcf30b20f1f27ed3b44bef6444f8ca6a808e34ded636ef55e151c11b4ef7a5384f4a0ceb885759dfeeca5aaa540de461d2130755897533032f5639c4ba79988a49d63084f2cbed0a84e5e733146f15192fdabd0e3a", 0x93, r1) [ 51.218564][ T3627] loop3: detected capacity change from 0 to 1024 05:47:52 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x5ac, 0x219, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x7, {[@local=@item_012={0x1, 0x2, 0xa, "83"}, @local=@item_4={0x3, 0x2, 0x0, "8cbf3f75"}]}}, 0x0}, 0x0) [ 51.301829][ T3627] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 51.309308][ T3629] loop1: detected capacity change from 0 to 64 [ 51.356265][ T3566] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 51.371665][ T3627] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,bsddf,barrier,norecovery,debug_want_extra_isize=0x0000000000000080,lazytime,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. 05:47:52 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000004100), 0x109242) write$FUSE_INIT(r1, &(0x7f0000002100)={0x50}, 0x50) [ 51.410288][ T3629] hfs: invalid uid -1 [ 51.426997][ T3629] hfs: unable to parse mount options 05:47:52 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000180)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x0) 05:47:52 executing program 1: r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1404}}, 0x0, 0x0, 0x0}, 0x0) 05:47:52 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x577}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000001c0)='ext4_da_reserve_space\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r2, &(0x7f0000000180), 0x40010) [ 51.563909][ T3555] Bluetooth: hci0: command 0x0419 tx timeout 05:47:52 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x6}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000080), &(0x7f0000000200)=r1}, 0x20) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018400110800395032303030"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) lchown(&(0x7f0000000100)='./file0\x00', 0xffffffffffffffff, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) [ 51.637031][ T3555] Bluetooth: hci3: command 0x0419 tx timeout [ 51.649790][ T3555] Bluetooth: hci1: command 0x0419 tx timeout [ 51.666003][ T3558] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 51.670132][ T3555] Bluetooth: hci2: command 0x0419 tx timeout [ 51.675783][ T3566] usb 1-1: Using ep0 maxpacket: 32 05:47:52 executing program 4: syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa00010, &(0x7f0000001040)={[{@iocharset={'iocharset', 0x3d, 'iso8859-1'}}, {@nostrict}, {@lastblock={'lastblock', 0x3d, 0x22}}, {@gid_forget}, {@unhide}, {@lastblock={'lastblock', 0x3d, 0x4}}, {@undelete}, {@unhide}, {@unhide}]}, 0x1, 0xc43, &(0x7f00000001c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_time\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000080), 0x12) [ 51.717184][ T3555] Bluetooth: hci4: command 0x0419 tx timeout 05:47:52 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000300)={[{@noblock_validity}, {}, {@barrier}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x14113e, 0x0) [ 51.806241][ T3648] loop4: detected capacity change from 0 to 2048 [ 51.816485][ T3566] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 51.853558][ T3566] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 51.865045][ T3566] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 51.880942][ T3566] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.890871][ T3648] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 51.893771][ T3566] usb 1-1: config 0 descriptor?? 05:47:53 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000240)=""/190, 0xbe}], 0x1) ioctl$FS_IOC_GETFLAGS(r0, 0x5437, 0x0) [ 51.959684][ T3566] hub 1-1:0.0: USB hub found [ 51.965982][ T3556] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 51.967905][ T3558] usb 3-1: Using ep0 maxpacket: 32 [ 52.019326][ T3650] loop3: detected capacity change from 0 to 1024 [ 52.061177][ T3650] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 52.094342][ T3650] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,bsddf,barrier,norecovery,debug_want_extra_isize=0x0000000000000080,lazytime,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 52.146708][ T3558] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 05:47:53 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000001000000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) 05:47:53 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50}, 0x50) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000000c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d24070000030769dc000049c40c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05"], 0x0) [ 52.169204][ T3558] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 52.179652][ T3566] hub 1-1:0.0: 7 ports detected [ 52.216169][ T3566] hub 1-1:0.0: insufficient power available to use all downstream ports [ 52.238083][ T3558] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice= 0.00 [ 52.247839][ T3558] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.259597][ T3558] usb 3-1: config 0 descriptor?? 05:47:53 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000004100), 0x109242) write$FUSE_INIT(r1, &(0x7f0000002100)={0x50}, 0x50) [ 52.356516][ T3556] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 05:47:53 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x105042, 0x0) ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0) [ 52.401757][ T3566] hub 1-1:0.0: hub_hub_status failed (err = -71) [ 52.410934][ T3566] hub 1-1:0.0: config failed, can't get hub status (err -71) 05:47:53 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) listen(r0, 0x1f) [ 52.449356][ T26] audit: type=1800 audit(1712641673.522:2): pid=3664 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1963 res=0 errno=0 [ 52.470872][ T3556] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 52.481114][ T3556] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 52.506989][ T3556] usb 2-1: SerialNumber: syz 05:47:53 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x28, &(0x7f0000000280)={0x1, [0x0]}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xe, &(0x7f0000000080), &(0x7f00000000c0)=0x8) [ 52.536158][ T3566] usbhid 1-1:0.0: can't add hid device: -71 [ 52.544529][ T3566] usbhid: probe of 1-1:0.0 failed with error -71 [ 52.566352][ T3521] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 52.577834][ T3566] usb 1-1: USB disconnect, device number 2 05:47:53 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000300)={[{@noblock_validity}, {}, {@barrier}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x14113e, 0x0) [ 52.664461][ T3671] loop3: detected capacity change from 0 to 1024 [ 52.698419][ T3671] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 52.719916][ T3671] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,bsddf,barrier,norecovery,debug_want_extra_isize=0x0000000000000080,lazytime,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 52.758043][ T3558] apple 0003:05AC:0219.0001: unbalanced delimiter at end of report description 05:47:53 executing program 3: mount$9p_tcp(0x0, 0x0, 0x0, 0x30000, 0x0) [ 52.773460][ T3558] apple 0003:05AC:0219.0001: parse failed [ 52.783110][ T3558] apple: probe of 0003:05AC:0219.0001 failed with error -22 05:47:53 executing program 0: socket(0x1c, 0x20000001, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f00000000c0)={0x10, 0x2}, 0x10) 05:47:54 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000004100), 0x109242) write$FUSE_INIT(r1, &(0x7f0000002100)={0x50}, 0x50) 05:47:54 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ffffffb}]}) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 52.960303][ T3566] usb 3-1: USB disconnect, device number 2 [ 52.991679][ T3521] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config 05:47:54 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x2}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x9d, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001400)={{r2}, &(0x7f0000001380), &(0x7f00000013c0)='%-010d \x00'}, 0x20) 05:47:54 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x7) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x9e7) listen(r0, 0x0) epoll_create1(0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000140)=0x10000) write$char_usb(r1, &(0x7f0000000040)="e2", 0x2778) [ 53.015047][ T3521] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 05:47:54 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r0, 0x942e, 0x0) 05:47:54 executing program 3: syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @empty, @val, {@ipv4}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0xffff, 0x1000, &(0x7f0000000000)=0x7, 0x4) bind$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) connect$unix(0xffffffffffffffff, &(0x7f0000000040)=@abs={0x1}, 0x8) [ 53.116506][ T3521] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 53.126182][ T3521] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 53.134397][ T3521] usb 5-1: SerialNumber: syz 05:47:54 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402609333340000000000109022400010000000009040000010301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000012c0)={0x2c, &(0x7f0000001040)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 05:47:54 executing program 0: sendto$unix(0xffffffffffffffff, &(0x7f00000000c0)="b1", 0x1, 0x0, 0x0, 0x0) open$dir(0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_emit_ethernet(0x66, &(0x7f00000000c0)={@broadcast, @random="2cbf38174634", @val, {@ipv6}}, 0x0) [ 53.202335][ T3689] binder: 3687:3689 ioctl 942e 0 returned -22 [ 53.221599][ T3556] cdc_ether: probe of 2-1:1.0 failed with error -22 05:47:54 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = dup3(r0, r1, 0x0) write$P9_RFLUSH(r2, 0x0, 0x0) 05:47:54 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000004100), 0x109242) write$FUSE_INIT(r1, &(0x7f0000002100)={0x50}, 0x50) 05:47:54 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000029c0), 0x0, 0x0) sendmsg$nl_route_sched_retired(r0, 0x0, 0x0) 05:47:54 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x7) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x9e7) listen(r0, 0x0) epoll_create1(0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000140)=0x10000) write$char_usb(r1, &(0x7f0000000040)="e2", 0x2778) 05:47:54 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r0, 0x560d, 0x0) 05:47:54 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x3000092, &(0x7f0000000000)={[{@max_batch_time={'max_batch_time', 0x3d, 0x1000}}, {@errors_remount}]}, 0x1, 0x4ee, &(0x7f00000000c0)="$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") mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0) [ 53.423109][ T3557] usb 2-1: USB disconnect, device number 2 [ 53.450757][ T3521] usb 5-1: 0:2 : does not exist 05:47:54 executing program 0: write$P9_RAUTH(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cgroup.controllers\x00', 0x0, 0x0) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x5, 0x5}) mq_open(&(0x7f0000003e40)=':\xd1=FL\f\xc3\x9e(\xb3\x9b', 0x40, 0x44, &(0x7f0000000040)={0x5, 0x11, 0x6, 0x2005}) [ 53.516064][ T3566] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 53.539439][ T3521] usb 5-1: USB disconnect, device number 2 05:47:54 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='contention_end\x00', r1}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) r4 = getpid() write$cgroup_pid(r3, &(0x7f0000000380)=r4, 0x12) 05:47:54 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000069000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="180800000006", @ANYBLOB="0000000000b70214001400000700000000000000008500000083000000bf090041"], 0x0}, 0x90) add_key$fscrypt_v1(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x89f1, &(0x7f0000000900)={'ip6gre0\x00', @random="0600002000"}) [ 53.566353][ T3706] loop2: detected capacity change from 0 to 512 [ 53.691316][ T3706] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 53.708985][ T3706] EXT4-fs (loop2): orphan cleanup on readonly fs [ 53.723431][ T3706] EXT4-fs error (device loop2): ext4_find_extent:929: inode #4: comm syz-executor.2: pblk 2 bad header/extent: invalid magic - magic 3fff, entries 12, max 508(0), depth 0(0) [ 53.752163][ T3706] EXT4-fs (loop2): Remounting filesystem read-only [ 53.759280][ T3706] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=-117 [ 53.770053][ T3706] EXT4-fs warning (device loop2): ext4_enable_quotas:6411: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 53.786435][ T3706] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 53.793321][ T3706] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_batch_time=0x0000000000001000,errors=remount-ro,. Quota mode: writeback. [ 53.823908][ T3706] EXT4-fs error (device loop2): ext4_lookup:1852: inode #2: comm syz-executor.2: 'file0' linked to parent dir 05:47:55 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1c916, &(0x7f0000000180)=ANY=[@ANYBLOB='nobarrier,noblock_validity,discard,grpquota,noinit_itable,resgid=', @ANYRESHEX=0xee01, @ANYBLOB=',jqfmt=vfsold,noauto_da_alloc,resgid=', @ANYRESDEC=r0, @ANYBLOB="3200ff97274c68d17b7c16f8461797323c26897387cd742fcba87ce2acbcd1e4fb5706fa2c", @ANYRES64], 0x1b, 0x4da, &(0x7f0000000a40)="$eJzs3d1rW+cZAPDnHFtZPpzZYbvIAsvCkmGHLZIdL4kZLNtgbFeBbdnF7jLPlo2xbBlLTmITNof9AYMR2kKvetWbQv+AQsldb0tLoL0vbWkpbdJe9KKNir7SxJH8QWQrWL8fHOs9H/LzvBJ6dd73vOgE0LNORcT5iHhYqVTORsRgY3vaWO4eiYj1+nEP7t+aqi5JVCpXP08iaWyrHj/y2P9sPCUORsTf/hzxr+TpuKXVtfnJQiG/3FjPlReWcqXVtXNzC5Oz+dn84vj42MWJSxMXJkY7Us+BiLj8x49f+N+rf7r85q9ufHDt05F/V9P6bWN/sx6dVq96pvZaNPVHxPJuBOuCvkZ9Mt1OBACAbWme5/88Is7GYPTVzuYAAACA/aTyu4H4JomoAAAAAPtWWpsbm6TZxjyAgUjTbLY+h/fHcTgtFEvlX84UVxan63NohyKTzswV8qONucJDkUmq62O18vfr5zesj0fEsYi4M3iotp6dKhamuz34AQAAAD3iyIb+/1eD9f4/AAAAsM8MdTsBAAAAYNfp/wMAAMD+16L//49u5AEAAADsir9cuVJdKs37X09fX12ZL14/N50vzWcXVqayU8XlpexssThb+82+ha3+X6FYXPp1LK7czJXzpXKutLp2baG4sli+NvfELbABAACAPXTsZ3ffTyJi/TeHakvVgW4nBeyJ/p0c/NHu5QHsvb5uJwB0zY6+/4F9JdPtBICuS7bY33byztudzwUAANgdwz9pff0/2XJsYD3doxSBXWL8D3qX6//Qu1z/h96Vib7QkYfetvvX/yuVHSUEAAB03EBtSdJsRG0cYCDSNJuNOFq7LUAmmZkr5Ecj4ocR8d5g5gfV9bHaM5Mt+wwAAAAAAAAAAAAAAAAAAAAAAAAAQF2lkkQFAAAA2Nci0k+Sxv2/hgfPDGwcHziQfD1Ye4yIGy9fffHmZLm8PFbd/sWj7eWXGtvPd2MEAwAAANio2U9v9uMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoJMe3L811Vz2Mu5nf4iIoVbx++Ng7fFgZCLi8JdJ9D/2vCQi+joQf/12RBxvFT+pphVDjSxaxT/UxfhpRBzpQHzoZXer7c/vW33+0jhVe2z9+btYa6GeXfv2L33U/vW1aX+ObjPGiXuv59rGvx1xor91+9OMn7SJf3qb8f/597W1dvsqr0QMt/z+SZ6IlSsvLOVKq2vn5hYmZ/Oz+cXx8bGLE5cmLkyM5mbmCvnG3xYRDsT/f/rGw83qfzjutG1/N6v/mW3W/9t7N+//qF7MtIo/crr1+3+8Tfy08d33i0a5un+4WV6vlx938rV3Tka8+1a7+k+3ef23ev9Htln/s3/974fbPBQA2AOl1bX5yUIhv9zThWd6NaqnRc9FLRR2WvjP85HGc1nobrsEAAB03tN94Cd14ho7AAAAAAAAAAAAAAAAAAAAsLm9/HW9pvXuVBUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYFPfBQAA//9z7Ner") symlink(&(0x7f0000000280)='.\x02\x00', &(0x7f00000002c0)='.\x02\x00') 05:47:55 executing program 0: madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) 05:47:55 executing program 2: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x7) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x9e7) listen(r0, 0x0) epoll_create1(0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000140)=0x10000) write$char_usb(r1, &(0x7f0000000040)="e2", 0x2778) 05:47:55 executing program 4: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_int(r0, 0x0, 0x0, 0x0, 0x0) [ 53.946160][ T3566] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 53.981169][ T3566] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 05:47:55 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) 05:47:55 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) chdir(&(0x7f0000000080)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r4}, 0x10) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) [ 54.021301][ T3720] loop1: detected capacity change from 0 to 512 [ 54.028302][ T3566] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 54.047275][ T3566] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.069008][ T3566] usb 4-1: config 0 descriptor?? 05:47:55 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, 0x0, 0x0) [ 54.092677][ T3720] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 54.115128][ T3720] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! 05:47:55 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50}, 0x50) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000000c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d24070000030769dc000049c40c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05"], 0x0) 05:47:55 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x3000092, &(0x7f0000000000)={[{@max_batch_time={'max_batch_time', 0x3d, 0x1000}}, {@errors_remount}]}, 0x1, 0x4ee, &(0x7f00000000c0)="$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") mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0) [ 54.166598][ T3720] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 54.246993][ T3720] [EXT4 FS bs=4096, gc=1, bpg=3008, ipg=32, mo=4015e018, mo2=0000] [ 54.271373][ T3735] loop2: detected capacity change from 0 to 512 05:47:55 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002480)={0xffffffffffffffff}) ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0x4010942a, 0x0) [ 54.296180][ T3720] EXT4-fs (loop1): 1 truncate cleaned up [ 54.301949][ T3720] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobarrier,noblock_validity,discard,grpquota,noinit_itable,resgid=0x000000000000ee01,jqfmt=vfsold,noauto_da_alloc,resgid=000000000000000000032,errors=continue. Quota mode: writeback. 05:47:55 executing program 1: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x7) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x9e7) listen(r0, 0x0) epoll_create1(0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000140)=0x10000) write$char_usb(r1, &(0x7f0000000040)="e2", 0x2778) [ 54.426088][ T3735] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 54.435190][ T3735] EXT4-fs (loop2): orphan cleanup on readonly fs [ 54.459462][ T3735] EXT4-fs error (device loop2): ext4_find_extent:929: inode #4: comm syz-executor.2: pblk 2 bad header/extent: invalid magic - magic 3fff, entries 12, max 508(0), depth 0(0) [ 54.496572][ T3735] EXT4-fs (loop2): Remounting filesystem read-only [ 54.503395][ T3735] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=-117 [ 54.513954][ T3735] EXT4-fs warning (device loop2): ext4_enable_quotas:6411: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 54.530425][ T3558] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 54.538809][ T3735] EXT4-fs (loop2): Cannot turn on quotas: error -22 05:47:55 executing program 1: r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000001840), 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x5450, 0x0) [ 54.546946][ T3735] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_batch_time=0x0000000000001000,errors=remount-ro,. Quota mode: writeback. [ 54.578696][ T3566] keytouch 0003:0926:3333.0002: fixing up Keytouch IEC report descriptor [ 54.600373][ T3566] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0002/input/input6 05:47:55 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000680)={'gre0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000040)={'gre0\x00', &(0x7f00000002c0)=ANY=[]}) 05:47:55 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) chdir(&(0x7f0000000080)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r4}, 0x10) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) [ 54.645299][ T3735] EXT4-fs error (device loop2): ext4_lookup:1852: inode #2: comm syz-executor.2: 'file0' linked to parent dir [ 54.735160][ T3566] keytouch 0003:0926:3333.0002: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 05:47:55 executing program 2: r0 = open(&(0x7f0000000080)='./bus\x00', 0x105042, 0x0) setrlimit(0x1, &(0x7f0000000100)={0xffffffff, 0xffffffffffffffff}) fallocate(r0, 0x0, 0x0, 0x7ffffffb) utime(&(0x7f00000003c0)='./bus\x00', 0x0) setxattr$incfs_metadata(&(0x7f00000001c0)='./bus\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) 05:47:55 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000006d0000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000a40)='tlb_flush\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x0) 05:47:55 executing program 1: socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000000700)={&(0x7f0000000380)=@name, 0x10, 0x0}, 0x0) 05:47:56 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@func]}, {0x0, [0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x2a}, 0x20) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 54.883180][ T26] audit: type=1800 audit(1712641675.952:3): pid=3751 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1956 res=0 errno=0 [ 54.966670][ T3558] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 54.989056][ T3558] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 05:47:56 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x404041, 0x0) write$P9_RAUTH(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet(0x2, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x22, &(0x7f00000022c0)=""/4152, &(0x7f0000000440)=0x1038) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$GIO_SCRNMAP(r2, 0x5421, &(0x7f0000000000)=""/230) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0) r3 = mq_open(&(0x7f0000000040)='io.pressure\x00', 0x40, 0x0, 0x0) fcntl$F_SET_RW_HINT(r3, 0x3, 0x0) getsockname(r0, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000000)=0x80) getsockname$netlink(r4, 0x0, &(0x7f0000000140)) renameat(0xffffffffffffffff, &(0x7f0000000000)='mnt/encrypted_dir/file0\x00', 0xffffffffffffff9c, &(0x7f0000000080)='mnt/encrypted_dir\x00') 05:47:56 executing program 1: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x3000092, &(0x7f0000000000)={[{@max_batch_time={'max_batch_time', 0x3d, 0x1000}}, {@errors_remount}]}, 0x1, 0x4ee, &(0x7f00000000c0)="$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") mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0) [ 55.026829][ T3757] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 55.086531][ T3558] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 55.100846][ T3558] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 55.127971][ T3763] loop1: detected capacity change from 0 to 512 [ 55.134971][ T3558] usb 5-1: SerialNumber: syz 05:47:56 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) r2 = dup3(r0, r1, 0x0) creat(0x0, 0x0) fsetxattr(r2, &(0x7f0000000540)=@random={'system.', 'veth0_macvtap\x00'}, 0x0, 0x0, 0x0) [ 55.213321][ T3763] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 55.227195][ T3763] EXT4-fs (loop1): orphan cleanup on readonly fs [ 55.270948][ T3763] EXT4-fs error (device loop1): ext4_find_extent:929: inode #4: comm syz-executor.1: pblk 2 bad header/extent: invalid magic - magic 3fff, entries 12, max 508(0), depth 0(0) [ 55.305180][ T3763] EXT4-fs (loop1): Remounting filesystem read-only [ 55.326334][ T3763] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=-117 [ 55.337008][ T3763] EXT4-fs warning (device loop1): ext4_enable_quotas:6411: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 55.352546][ T3763] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 55.360088][ T3763] EXT4-fs (loop1): mounted filesystem without journal. Opts: max_batch_time=0x0000000000001000,errors=remount-ro,. Quota mode: writeback. [ 55.398494][ T3763] EXT4-fs error (device loop1): ext4_lookup:1852: inode #2: comm syz-executor.1: 'file0' linked to parent dir [ 55.454908][ T3558] usb 5-1: 0:2 : does not exist [ 55.534685][ T3558] usb 5-1: USB disconnect, device number 3 [ 55.561882][ T3506] udevd[3506]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 55.806765][ T3566] usb 4-1: reset high-speed USB device number 2 using dummy_hcd 05:47:57 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x105042, 0x0) setrlimit(0x1, &(0x7f0000000100)={0xffffffff, 0xffffffffffffffff}) fallocate(r0, 0x0, 0x0, 0x7ffffffb) utime(&(0x7f00000003c0)='./bus\x00', 0x0) setxattr$incfs_metadata(&(0x7f00000001c0)='./bus\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) 05:47:57 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018400110800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) write$P9_RLINK(r2, &(0x7f0000000400)={0x7}, 0x7) lchown(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 05:47:57 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) chdir(&(0x7f0000000080)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r4}, 0x10) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) 05:47:57 executing program 1: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) pipe2$9p(&(0x7f0000000280), 0x0) write$P9_RSETATTR(0xffffffffffffffff, &(0x7f0000000000)={0x7}, 0x69ff9a93bfc25838) write$P9_RXATTRCREATE(0xffffffffffffffff, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) semctl$GETVAL(r0, 0x0, 0xc, 0x0) 05:47:57 executing program 4: r0 = open(&(0x7f0000000080)='./bus\x00', 0x105042, 0x0) setrlimit(0x1, &(0x7f0000000100)={0xffffffff, 0xffffffffffffffff}) fallocate(r0, 0x0, 0x0, 0x7ffffffb) utime(&(0x7f00000003c0)='./bus\x00', 0x0) setxattr$incfs_metadata(&(0x7f00000001c0)='./bus\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) 05:47:57 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000ef7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='block_bio_remap\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='block_bio_remap\x00', r3}, 0x10) write$cgroup_type(r2, &(0x7f0000000000), 0x9) [ 56.348707][ T26] audit: type=1800 audit(1712641677.422:4): pid=3777 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1954 res=0 errno=0 05:47:57 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='signal_deliver\x00', r0}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) [ 56.432298][ T26] audit: type=1800 audit(1712641677.502:5): pid=3781 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1949 res=0 errno=0 05:47:57 executing program 2: bpf$ENABLE_STATS(0x20, 0x0, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_default\x00', 0x0, 0xfe44, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000001000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000030000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r1, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002302230102090500000010000020d3"]) 05:47:57 executing program 0: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x3000092, &(0x7f0000000000)={[{@max_batch_time={'max_batch_time', 0x3d, 0x1000}}, {@errors_remount}]}, 0x1, 0x4ee, &(0x7f00000000c0)="$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") mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0) 05:47:57 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50}, 0x50) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000000c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d24070000030769dc000049c40c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05"], 0x0) 05:47:57 executing program 2: recvmsg$can_raw(0xffffffffffffffff, 0x0, 0xf224045ae6732b79) [ 56.679335][ T25] usb 4-1: USB disconnect, device number 2 05:47:57 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001800010f000000000000000006"], 0x14}}, 0x0) [ 56.794895][ T3790] loop0: detected capacity change from 0 to 512 [ 56.831798][ T3576] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 05:47:57 executing program 2: r0 = open(&(0x7f0000000080)='./bus\x00', 0x105042, 0x0) setrlimit(0x1, &(0x7f0000000100)={0xffffffff, 0xffffffffffffffff}) fallocate(r0, 0x0, 0x0, 0x7ffffffb) utime(&(0x7f00000003c0)='./bus\x00', 0x0) setxattr$incfs_metadata(&(0x7f00000001c0)='./bus\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) [ 56.907838][ T3790] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 56.939521][ T3790] EXT4-fs (loop0): orphan cleanup on readonly fs [ 56.956670][ T3790] EXT4-fs error (device loop0): ext4_find_extent:929: inode #4: comm syz-executor.0: pblk 2 bad header/extent: invalid magic - magic 3fff, entries 12, max 508(0), depth 0(0) [ 56.974469][ T26] audit: type=1800 audit(1712641678.032:6): pid=3798 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1959 res=0 errno=0 [ 56.998120][ T3576] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.012873][ T3555] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 57.034010][ T3790] EXT4-fs (loop0): Remounting filesystem read-only [ 57.044352][ T3790] Quota error (device loop0): v2_read_header: Failed header read: expected=8 got=-117 05:47:58 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) chdir(&(0x7f0000000080)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r4}, 0x10) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) [ 57.092165][ T3790] EXT4-fs warning (device loop0): ext4_enable_quotas:6411: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 57.114018][ T3790] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 57.133997][ T3790] EXT4-fs (loop0): mounted filesystem without journal. Opts: max_batch_time=0x0000000000001000,errors=remount-ro,. Quota mode: writeback. [ 57.178508][ T3576] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 05:47:58 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018400110800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) write$P9_RLINK(r2, &(0x7f0000000400)={0x7}, 0x7) lchown(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) [ 57.214157][ T3790] EXT4-fs error (device loop0): ext4_lookup:1852: inode #2: comm syz-executor.0: 'file0' linked to parent dir 05:47:58 executing program 0: r0 = open(&(0x7f0000000080)='./bus\x00', 0x105042, 0x0) setrlimit(0x1, &(0x7f0000000100)={0xffffffff, 0xffffffffffffffff}) fallocate(r0, 0x0, 0x0, 0x7ffffffb) utime(&(0x7f00000003c0)='./bus\x00', 0x0) setxattr$incfs_metadata(&(0x7f00000001c0)='./bus\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) [ 57.299154][ T3576] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 05:47:58 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_GET(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000005c0)={0x2c, r1, 0x419, 0x0, 0x0, {0x2}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}]}]}, 0x2c}}, 0x0) [ 57.397262][ T3555] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config 05:47:58 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000340)=ANY=[@ANYRESHEX=0x0, @ANYRESHEX, @ANYBLOB="90799f2e43470f10f1"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 57.455206][ T3555] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 57.486986][ T26] audit: type=1800 audit(1712641678.562:7): pid=3806 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1951 res=0 errno=0 [ 57.596185][ T3555] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 57.617413][ T3555] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 57.644006][ T3555] usb 5-1: SerialNumber: syz [ 57.745727][ T3519] ------------[ cut here ]------------ [ 57.751629][ T3519] WARNING: CPU: 0 PID: 3519 at kernel/softirq.c:363 __local_bh_enable_ip+0x1b3/0x1f0 [ 57.761985][ T3519] Modules linked in: [ 57.765876][ T3519] CPU: 0 PID: 3519 Comm: syz-executor.0 Not tainted 5.15.153-syzkaller #0 [ 57.774630][ T3519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 57.784764][ T3519] RIP: 0010:__local_bh_enable_ip+0x1b3/0x1f0 [ 57.790738][ T3519] Code: 04 25 28 00 00 00 48 3b 44 24 60 75 4a 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 0f 0b e9 d0 fe ff ff e8 3f 00 00 00 eb a2 <0f> 0b e9 02 ff ff ff 48 c7 c1 c4 c8 e3 8d 80 e1 07 80 c1 03 38 c1 [ 57.811027][ T3519] RSP: 0018:ffffc90002dd75e0 EFLAGS: 00010046 [ 57.817268][ T3519] RAX: 0000000000000000 RBX: 1ffff920005baec0 RCX: 0000000000000000 [ 57.825496][ T3519] RDX: 0000000000000000 RSI: 0000000000000201 RDI: ffffffff884eb75b [ 57.834168][ T3519] RBP: ffffc90002dd7698 R08: dffffc0000000000 R09: ffffed1003cbd136 [ 57.843712][ T3519] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 57.851996][ T3519] R13: ffff88801e73ed80 R14: ffffc90002dd7620 R15: 0000000000000201 [ 57.860274][ T3519] FS: 0000555556598480(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000 [ 57.869518][ T3519] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 57.876360][ T3519] CR2: 0000001b2f325000 CR3: 0000000063a59000 CR4: 00000000003526f0 [ 57.885075][ T3519] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 57.893220][ T3519] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 57.901520][ T3519] Call Trace: [ 57.904832][ T3519] [ 57.907842][ T3519] ? __warn+0x15b/0x300 [ 57.912381][ T3519] ? __local_bh_enable_ip+0x1b3/0x1f0 [ 57.918094][ T3519] ? report_bug+0x1b7/0x2e0 [ 57.922614][ T3519] ? handle_bug+0x3d/0x70 [ 57.927072][ T3519] ? exc_invalid_op+0x16/0x40 [ 57.932111][ T3519] ? asm_exc_invalid_op+0x16/0x20 [ 57.937143][ T3519] ? sock_map_delete_elem+0xcb/0x130 [ 57.942516][ T3519] ? __local_bh_enable_ip+0x1b3/0x1f0 [ 57.947965][ T3519] ? sock_map_delete_elem+0xcb/0x130 [ 57.953494][ T3519] ? _local_bh_enable+0xa0/0xa0 [ 57.958420][ T3519] ? do_raw_spin_unlock+0x137/0x8b0 [ 57.963968][ T3519] ? sock_map_delete_elem+0x97/0x130 [ 57.969355][ T3519] sock_map_delete_elem+0xcb/0x130 [ 57.974626][ T3519] bpf_prog_2c29ac5cdc6b1842+0x3a/0xef4 [ 57.980544][ T3519] bpf_trace_run3+0x1d1/0x380 [ 57.985320][ T3519] ? bpf_trace_run2+0x340/0x340 [ 57.990355][ T3519] ? release_task+0x1204/0x1750 [ 57.995311][ T3519] ? release_task+0x1204/0x1750 [ 58.000153][ T3519] __bpf_trace_kmem_cache_free+0x99/0xc0 [ 58.006301][ T3519] ? release_task+0x1204/0x1750 [ 58.011151][ T3519] kmem_cache_free+0x1ce/0x1f0 [ 58.015920][ T3519] ? release_task+0x1204/0x1750 [ 58.020783][ T3519] release_task+0x1204/0x1750 [ 58.025461][ T3519] ? wait_consider_task+0x1994/0x2e50 [ 58.030824][ T3519] ? delayed_put_task_struct+0x260/0x260 [ 58.036451][ T3519] ? do_raw_spin_unlock+0x137/0x8b0 [ 58.041731][ T3519] ? _raw_spin_unlock_irq+0x1f/0x40 [ 58.047044][ T3519] ? lockdep_hardirqs_on+0x94/0x130 [ 58.052401][ T3519] wait_consider_task+0x1994/0x2e50 [ 58.057802][ T3519] ? do_wait+0x30c/0xaf0 [ 58.062126][ T3519] ? child_wait_callback+0x210/0x210 [ 58.067393][ T3519] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 58.073360][ T3519] ? _raw_spin_unlock+0x40/0x40 [ 58.078399][ T3519] ? add_wait_queue+0xc1/0x170 [ 58.083341][ T3519] do_wait+0x30c/0xaf0 [ 58.087430][ T3519] kernel_wait4+0x29e/0x3e0 [ 58.092184][ T3519] ? __ia32_sys_waitid+0xc0/0xc0 [ 58.097223][ T3519] ? kernel_waitid+0x520/0x520 [ 58.102155][ T3519] __x64_sys_wait4+0x130/0x1e0 [ 58.107980][ T3519] ? kernel_wait+0x230/0x230 [ 58.112648][ T3519] ? rcu_is_watching+0x11/0xa0 [ 58.117410][ T3519] ? vtime_user_exit+0x2d1/0x400 [ 58.122533][ T3519] ? syscall_enter_from_user_mode+0x2e/0x230 [ 58.128667][ T3519] ? lockdep_hardirqs_on+0x94/0x130 [ 58.133936][ T3519] ? syscall_enter_from_user_mode+0x2e/0x230 [ 58.139903][ T3519] do_syscall_64+0x3d/0xb0 [ 58.144545][ T3519] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 58.150770][ T3519] RIP: 0033:0x7f511d376897 [ 58.155345][ T3519] Code: 89 7c 24 10 48 89 4c 24 18 e8 d5 a3 02 00 4c 8b 54 24 18 8b 54 24 14 41 89 c0 48 8b 74 24 08 8b 7c 24 10 b8 3d 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 89 44 24 10 e8 25 a4 02 00 8b 44 [ 58.175547][ T3519] RSP: 002b:00007ffe40362940 EFLAGS: 00000293 ORIG_RAX: 000000000000003d [ 58.184033][ T3519] RAX: ffffffffffffffda RBX: 0000000000000031 RCX: 00007f511d376897 [ 58.192247][ T3519] RDX: 0000000040000001 RSI: 00007ffe403629cc RDI: 00000000ffffffff [ 58.200298][ T3519] RBP: 00007ffe403629cc R08: 0000000000000000 R09: 0000000000000010 [ 58.208338][ T3519] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000032 [ 58.216288][ T3519] R13: 000000000000e13e R14: 000000000000e05f R15: 0000000000000005 [ 58.224252][ T3519] [ 58.227259][ T3519] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 58.234606][ T3519] CPU: 0 PID: 3519 Comm: syz-executor.0 Not tainted 5.15.153-syzkaller #0 [ 58.243128][ T3519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 58.253357][ T3519] Call Trace: [ 58.256799][ T3519] [ 58.259714][ T3519] dump_stack_lvl+0x1e3/0x2cb [ 58.264498][ T3519] ? io_uring_drop_tctx_refs+0x19d/0x19d [ 58.270209][ T3519] ? panic+0x84d/0x84d [ 58.274349][ T3519] ? panic+0x84d/0x84d [ 58.278399][ T3519] ? __local_bh_enable_ip+0x180/0x1f0 [ 58.283850][ T3519] ? __local_bh_enable_ip+0x180/0x1f0 [ 58.289293][ T3519] panic+0x318/0x84d [ 58.293348][ T3519] ? __warn+0x16a/0x300 [ 58.297609][ T3519] ? fb_is_primary_device+0xcc/0xcc [ 58.303065][ T3519] ? __local_bh_enable_ip+0x1b3/0x1f0 [ 58.308765][ T3519] __warn+0x2b2/0x300 [ 58.312749][ T3519] ? __local_bh_enable_ip+0x1b3/0x1f0 [ 58.318276][ T3519] report_bug+0x1b7/0x2e0 [ 58.322599][ T3519] handle_bug+0x3d/0x70 [ 58.326745][ T3519] exc_invalid_op+0x16/0x40 [ 58.331325][ T3519] asm_exc_invalid_op+0x16/0x20 [ 58.336250][ T3519] RIP: 0010:__local_bh_enable_ip+0x1b3/0x1f0 [ 58.342212][ T3519] Code: 04 25 28 00 00 00 48 3b 44 24 60 75 4a 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 0f 0b e9 d0 fe ff ff e8 3f 00 00 00 eb a2 <0f> 0b e9 02 ff ff ff 48 c7 c1 c4 c8 e3 8d 80 e1 07 80 c1 03 38 c1 [ 58.362144][ T3519] RSP: 0018:ffffc90002dd75e0 EFLAGS: 00010046 [ 58.368192][ T3519] RAX: 0000000000000000 RBX: 1ffff920005baec0 RCX: 0000000000000000 [ 58.376331][ T3519] RDX: 0000000000000000 RSI: 0000000000000201 RDI: ffffffff884eb75b [ 58.384282][ T3519] RBP: ffffc90002dd7698 R08: dffffc0000000000 R09: ffffed1003cbd136 [ 58.392237][ T3519] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 58.400361][ T3519] R13: ffff88801e73ed80 R14: ffffc90002dd7620 R15: 0000000000000201 [ 58.408331][ T3519] ? sock_map_delete_elem+0xcb/0x130 [ 58.413697][ T3519] ? sock_map_delete_elem+0xcb/0x130 [ 58.418962][ T3519] ? _local_bh_enable+0xa0/0xa0 [ 58.423795][ T3519] ? do_raw_spin_unlock+0x137/0x8b0 [ 58.428981][ T3519] ? sock_map_delete_elem+0x97/0x130 [ 58.434861][ T3519] sock_map_delete_elem+0xcb/0x130 [ 58.440221][ T3519] bpf_prog_2c29ac5cdc6b1842+0x3a/0xef4 [ 58.446027][ T3519] bpf_trace_run3+0x1d1/0x380 [ 58.450765][ T3519] ? bpf_trace_run2+0x340/0x340 [ 58.455598][ T3519] ? release_task+0x1204/0x1750 [ 58.460451][ T3519] ? release_task+0x1204/0x1750 [ 58.465285][ T3519] __bpf_trace_kmem_cache_free+0x99/0xc0 [ 58.470899][ T3519] ? release_task+0x1204/0x1750 [ 58.475761][ T3519] kmem_cache_free+0x1ce/0x1f0 [ 58.480506][ T3519] ? release_task+0x1204/0x1750 [ 58.485438][ T3519] release_task+0x1204/0x1750 [ 58.490199][ T3519] ? wait_consider_task+0x1994/0x2e50 [ 58.495552][ T3519] ? delayed_put_task_struct+0x260/0x260 [ 58.501257][ T3519] ? do_raw_spin_unlock+0x137/0x8b0 [ 58.506440][ T3519] ? _raw_spin_unlock_irq+0x1f/0x40 [ 58.511623][ T3519] ? lockdep_hardirqs_on+0x94/0x130 [ 58.517066][ T3519] wait_consider_task+0x1994/0x2e50 [ 58.522266][ T3519] ? do_wait+0x30c/0xaf0 [ 58.526598][ T3519] ? child_wait_callback+0x210/0x210 [ 58.531904][ T3519] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 58.537884][ T3519] ? _raw_spin_unlock+0x40/0x40 [ 58.542812][ T3519] ? add_wait_queue+0xc1/0x170 [ 58.547561][ T3519] do_wait+0x30c/0xaf0 [ 58.551626][ T3519] kernel_wait4+0x29e/0x3e0 [ 58.556113][ T3519] ? __ia32_sys_waitid+0xc0/0xc0 [ 58.561134][ T3519] ? kernel_waitid+0x520/0x520 [ 58.565888][ T3519] __x64_sys_wait4+0x130/0x1e0 [ 58.570640][ T3519] ? kernel_wait+0x230/0x230 [ 58.575215][ T3519] ? rcu_is_watching+0x11/0xa0 [ 58.579975][ T3519] ? vtime_user_exit+0x2d1/0x400 [ 58.584897][ T3519] ? syscall_enter_from_user_mode+0x2e/0x230 [ 58.590860][ T3519] ? lockdep_hardirqs_on+0x94/0x130 [ 58.596063][ T3519] ? syscall_enter_from_user_mode+0x2e/0x230 [ 58.602036][ T3519] do_syscall_64+0x3d/0xb0 [ 58.606440][ T3519] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 58.612923][ T3519] RIP: 0033:0x7f511d376897 [ 58.617410][ T3519] Code: 89 7c 24 10 48 89 4c 24 18 e8 d5 a3 02 00 4c 8b 54 24 18 8b 54 24 14 41 89 c0 48 8b 74 24 08 8b 7c 24 10 b8 3d 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 89 44 24 10 e8 25 a4 02 00 8b 44 [ 58.637278][ T3519] RSP: 002b:00007ffe40362940 EFLAGS: 00000293 ORIG_RAX: 000000000000003d [ 58.645765][ T3519] RAX: ffffffffffffffda RBX: 0000000000000031 RCX: 00007f511d376897 [ 58.653720][ T3519] RDX: 0000000040000001 RSI: 00007ffe403629cc RDI: 00000000ffffffff [ 58.661853][ T3519] RBP: 00007ffe403629cc R08: 0000000000000000 R09: 0000000000000010 [ 58.669805][ T3519] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000032 [ 58.677843][ T3519] R13: 000000000000e13e R14: 000000000000e05f R15: 0000000000000005 [ 58.685896][ T3519] [ 58.688966][ T3519] Kernel Offset: disabled [ 58.693415][ T3519] Rebooting in 86400 seconds..