last executing test programs: 8.423705919s ago: executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000"/36, @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002540)=""/216, 0xd8}}], 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_X86_SETUP_MCE(r3, 0x4008ae9c, &(0x7f0000000240)={0x20, 0x4}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 7.883564943s ago: executing program 2: syz_usb_connect(0x0, 0x35, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x28, 0x22, 0x1a, 0x40, 0x413c, 0x8194, 0xc8b7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x23, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xde, 0x0, 0x1, 0xc5, 0x2d, 0xd7, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x8, 0xb, "06d24900f14d"}]}}]}}]}}]}}, 0x0) 5.320797702s ago: executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000bbdffc)) r1 = eventfd(0x0) r2 = fcntl$dupfd(r1, 0x0, r1) write$FUSE_ATTR(r2, &(0x7f0000000240)={0x78, 0xfffffffffffffffe}, 0x78) write$cgroup_devices(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="01202a3a8a"], 0xfffffde7) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) rt_sigreturn() futex(&(0x7f0000000700)=0x2, 0x0, 0x2, &(0x7f0000000740)={0x0, 0x3938700}, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000140)={{}, {0x0, 0x3938700}}, 0x0) rt_sigreturn() mlockall(0x1) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) getsockopt$IP_VS_SO_GET_VERSION(r3, 0x0, 0x480, 0x0, 0x0) 4.999667201s ago: executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = eventfd(0x0) r2 = fcntl$dupfd(r1, 0x0, r1) write$FUSE_ATTR(r2, &(0x7f0000000240)={0x78, 0xfffffffffffffffe}, 0x78) write$cgroup_devices(r2, &(0x7f0000000080)=ANY=[@ANYRESOCT], 0x8) close(r2) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x8001, 0x0) rt_sigreturn() poll(0x0, 0x0, 0x64) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) rt_sigreturn() mlockall(0x1) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) prctl$PR_GET_PDEATHSIG(0x2, 0x0) 4.739698702s ago: executing program 2: openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2000004) openat$cgroup_netprio_ifpriomap(r0, &(0x7f00000000c0), 0x2, 0x0) 4.601835803s ago: executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x0, 0x801}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x0, 0x3, &(0x7f0000000000)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="1800000056000106000000000000000007"], 0x18}], 0x1}, 0x0) 4.572564908s ago: executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'macvtap0\x00', 0x2}) preadv2(r1, 0x0, 0x0, 0x0, 0x0, 0x0) close(r1) rt_sigreturn() openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) poll(0x0, 0x0, 0x64) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) rt_sigreturn() mlockall(0x1) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r2, 0x541b, 0x0) 3.591155131s ago: executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x77359400}, {0x0, 0x989680}}, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) write$binfmt_script(r2, &(0x7f0000000340), 0xffffff46) dup3(r2, r1, 0x0) sendmsg$netlink(r1, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000380)=ANY=[], 0x10}], 0x1}, 0x0) close(r1) socket$inet_udp(0x2, 0x2, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000001300)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x2, 0x4e21, @multicast2}, 0x10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) rt_sigreturn() mknod(&(0x7f0000000000)='./file0\x00', 0x1000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.log\x00', 0x0, 0x0) 3.316607284s ago: executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000180)=0x1, 0x87c5) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000340), 0x14) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file1'}, 0xb) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000500)=@gcm_256={{0x303}, "2a4001011f891d5b", "11682d84dd05bb63ae661f051e1e79ceafeaa60a5bd1dc83db142ade2bd907fd", "fd6ed24e", "d4e9e1c90d89691c"}, 0x38) close(r0) 3.270494021s ago: executing program 1: r0 = msgget$private(0x0, 0x0) msgrcv(r0, 0x0, 0x0, 0x0, 0x0) futex(0x0, 0x0, 0x0, &(0x7f0000000740)={0x0, 0x3938700}, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r1, &(0x7f0000000340), 0xffffff46) futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000500)={0xa, 0x0, 0x0, @remote}, 0x1c) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x12}, &(0x7f0000000340)) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f0000000300)=0x0) timer_settime(r4, 0x0, &(0x7f00000000c0)={{0x77359400}, {0x0, 0x989680}}, 0x0) rt_sigreturn() timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff}) tee(r6, r5, 0x8, 0x0) futex(&(0x7f0000000700)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ioctl$KDMKTONE(r2, 0x4b30, 0x0) socket$nl_route(0x10, 0x3, 0x0) 3.14934426s ago: executing program 3: socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$inet6(r1, &(0x7f0000000040)=""/85, 0x58, 0x2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00', 0x1}, 0x1c) dup2(r0, r0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r2 = socket$inet6(0xa, 0x80801, 0x0) r3 = dup(r2) shutdown(r3, 0x0) write$binfmt_script(r2, 0x0, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'ipvlan0\x00', 0x2}) preadv2(r5, 0x0, 0x0, 0x0, 0x0, 0x0) close(r5) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x77359400}, {0x0, 0x3938700}}, 0x0) rt_sigreturn() socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$nl_route(0x10, 0x3, 0x0) recvmsg(r7, &(0x7f0000000180)={&(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}, 0x0) close(r8) ioctl$KDGKBDIACR(r6, 0x5451, 0x0) 3.101884007s ago: executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$inet6(r0, &(0x7f0000000040)=""/85, 0x55, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) dup(0xffffffffffffffff) r1 = timerfd_create(0x0, 0x0) ioctl$sock_inet_SIOCSARP(r1, 0x5451, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'ipvlan0\x00', 0x2}) preadv2(r3, 0x0, 0x0, 0x0, 0x0, 0x0) close(r3) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x77359400}, {0x0, 0x3938700}}, 0x0) rt_sigreturn() socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) r4 = socket$nl_route(0x10, 0x3, 0x0) recvmsg(r4, &(0x7f0000000180)={&(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}, 0x0) close(r5) pipe2(0x0, 0x0) 3.072634002s ago: executing program 1: r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) open$dir(&(0x7f0000002300)='./file0\x00', 0x41c1, 0x0) futex(&(0x7f0000000700)=0x2, 0x0, 0x2, &(0x7f0000000740)={0x0, 0x3938700}, 0x0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote}, 0x1c) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) pipe2$9p(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r2, &(0x7f0000000000)={0x7}, 0x69ff9a93bfc25838) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) rt_sigreturn() write$P9_RXATTRWALK(r2, 0x0, 0x0) close(r1) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)=ANY=[], 0x10}], 0x1}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) connect$unix(0xffffffffffffffff, &(0x7f0000000280)=@file={0x1, './file0/file0\x00'}, 0x6e) 3.01720483s ago: executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000"/36, @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002540)=""/216, 0xd8}}], 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_X86_SETUP_MCE(r3, 0x4008ae9c, &(0x7f0000000240)={0x20, 0x4}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.994232454s ago: executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/45, 0x2d}], 0x1}, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r2, &(0x7f0000000000)={0x7}, 0x69ff9a93bfc25838) write$P9_RLERRORu(r2, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) write$binfmt_script(r3, &(0x7f0000000340), 0xffffff46) sendmsg$unix(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000001c0)='D', 0x1}], 0x1}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000640)=[{{&(0x7f0000000200)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) rt_sigreturn() mknod(&(0x7f0000000040)='./file0\x00', 0x1000, 0x0) open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) setregid(0x0, 0x0) 2.963888769s ago: executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x0, 0x801}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x0, 0x3, &(0x7f0000000000)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="1800000056000106000000000000000007"], 0x18}], 0x1}, 0x0) 2.917840666s ago: executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) memfd_create(&(0x7f0000000300)='\xc0\x87:*v\xea>\xeb\x87[\xa0o8\xaaK\xa5\xd3\v\x86\xca<\x7f\xfd6\x8d}\xd8\xf2G\xb8\xeae)\x90\x86\xe3\x96\b\xe0\xfa\xb1\xd8N\xb2W\xcb\x8d}3lm8\xa57\xc9\x00HOA\xc8\x80kR\xfc\xcb%u3\xec\xde%\x00\xb1\x9aF\xe2\xba[\xc7%\x88 \xeeQR\x9f\x81\x8b\xdc\xc7\xdc\xdem\xbe\x7f2\x11)W\x9c\x82\x91\x17\xd8\xda@4\x9f\xc5\xe3\x8d. \x1cR.\xe1\xd1=\xcf\xbf\x81\xb5\x8d%K\x1d\xe7_\xde\x87\xdd\xc1\xf0\x91\x1a!\x9c\xd3\v\xc9\x95d\xe3*\xa9\xfa\x99\x80\x00\x89>\xc9\xf2/\x13{\x1a\x7f\x00\x00\x00\x00+$\xedX\xb7KV\x90\xc3D\x82`\xea\x16\xc6\xcef\xab\x05\x19\x96\xb9_6*-\xf3\x8c\x9a\x15\x9c\xf5\xb4O\x17@d\x81+\xf6\xe6+\xed\r\xd2\xb3\xaa\x9b\x7fC\'\xa2\xf6\x12\xa1\x15Punfo\x7f\x92G\x0e.\xce\xd8h\xb9p2\xccC\xbaH\xc4\xdc\xe2\xa1%)\x85\xc7O]\'9\x92\xad\xfbJ\x02\x1d\x91-\xc99\t&\xbdq\x06`T\xc8\x92\xaf\xad#\xd8b\x90\xeb\x05\x9f\t5\x06\xdd\xaf\x84\xf4\"\x13\xcf\xe5\x93D\xad~F\xe5\x19\xaa\xaa\xb2\xb1\x03m\x82+\x06\x1bF^\xd3n\xc4F\xc1\xc08\x94\xe6\xe5\x1f\xa7\xf6\xcaA\x90T\x1b\xe6\xb9\xe7\xff\xc5H\x04\x8d\xca\xad\x17UlY\x9a}\r4\xac\x93\xac\v2\xc6\xf9\xbe\xfeI\x8b\xd4/`\xab\x1e\xcf\x7f\b\x94 2.{\xc1\xbe\x9bth~\xcb\xb9\x01\x00\x00\x00\x00\x00\x00\x00\xc5\xeb\xb1ux\x94\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdem\xe3+q:3\xfa*\x98o\'f\xbcY\x8e?\xf9\x84y\x89Y\x1c]\xad$\x7fp\xf1\xa3\x99[\xff\x1f\x94\xc2\xdb\xbaG\xa6UD\x88Y6\x11Y\xd4\xd1\xde\x9a{]\xe2\x98W\xb9\x13\x17<\x8b!?\x8e\xbc\xae\xf9\xcc\b\x90n\x15\x7f\xd5WS\xfbN\xec)B\xe7R\xa5\xd7O\x83\x80}\xcc5\x99\xdb\xd6\xbd\x9c\x05l\xfc.\xf4\xbbeF\xa3\xea}\xf1\x86B\xcb\xad\x82\xd9IRV5\xa77\'\x1a\x1c\x89\xef:\xee\x10\xb2\xd6\xc8\xf4\xb5\xdd\xd8c!@JRY\xa3|Pjk\xdc\xa5d\xc2\xecn\xc9X\xfc\xd4D\x13\"\xb2\x06\xbd&\xf86\xddXv\xc9\x1322L\xd6\x99\xf6\t\x9d\xbeZ\x02\xc0\xa41\xf9sNG\x02\x83\xe6Bl\xd2\x02\xfb[\x82\xc0I\xb7\xf6\xe5Z\xa1}\xee}\x8b\x89\x04\x8a\'\xc7J\xca\xdf:\x8ft\xe0\xf8\a', 0x0) r0 = msgget$private(0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/47, 0x2f}], 0x1}, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r3, &(0x7f0000000000)={0x7}, 0x69ff9a93bfc25838) write$P9_RLERRORu(r3, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) write$binfmt_script(r4, &(0x7f0000000340), 0xffffff46) sendmsg$unix(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000001c0)='D', 0x1}], 0x1}, 0x0) rt_sigreturn() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) syz_mount_image$erofs(&(0x7f00000001c0), &(0x7f0000000400)='./file0\x00', 0x80d, &(0x7f00000008c0)=ANY=[@ANYRESOCT, @ANYRES16, @ANYBLOB="74dd171da8179b59d137c43bc7d36b321e1ccf4649d8d61918e2df0ea7ccaa19304b243ab6a57d01e50a780bb46b014305d8c9addd25009b026b4b417a1109f7bb27b50c492662d772ef5c73e725c2eb9aabf92c87426614b1cbd5faf118a2d6015d2087e929e337e3e54927cc32ae7038cf30dc08a00fde6f9b44f8bac29b2507511e7342e11efcadb7d431710b8b07af10ea23d8d4a13e0aed39000f8066f7d64851919777f29074ae0b942f789ac00e5fdebb9fc607b20d1e94eb5c423daddb3c848491822ba1", @ANYRES64, @ANYRES16, @ANYRESDEC, @ANYRES8, @ANYRESOCT, @ANYRESHEX, @ANYRESOCT], 0xff, 0x20e, &(0x7f0000000540)="$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") msgrcv(r0, 0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 2.686445342s ago: executing program 4: open(&(0x7f0000000000)='./file1\x00', 0x0, 0x0) r0 = socket$inet6(0x18, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000000)=',', 0x2000, 0x2, &(0x7f0000000040)={0x18, 0x3}, 0x1c) 2.612064493s ago: executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) utimensat(0xffffffffffffffff, 0x0, &(0x7f0000000500), 0x0) 2.598509016s ago: executing program 4: open(&(0x7f0000000180)='./file0\x00', 0x615, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x81, 0x0) pwritev(r0, &(0x7f0000000380)=[{&(0x7f0000000440)="e9", 0x100000}], 0x1, 0x3fffd, 0x0) 2.50359473s ago: executing program 3: openat(0xffffffffffffff9c, 0x0, 0x0, 0x88) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000380)='./bus\x00', 0x8, &(0x7f0000000040)={[{@barrier}, {@autodefrag}, {@ref_verify}, {@max_inline={'max_inline', 0x3d, [0x54]}}, {@clear_cache}, {@discard}, {@noenospc_debug}, {@barrier}, {@nospace_cache}]}, 0x1, 0x55a3, &(0x7f0000005680)="$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") open(0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x105042, 0x0) r1 = open(&(0x7f0000000180)='./bus\x00', 0xa37e, 0x0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x46342, 0x0) ftruncate(r2, 0x2088002) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8088e3ad122bc192, 0x4002011, r1, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) symlink(0x0, &(0x7f0000001bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00') read(r0, &(0x7f0000000000), 0x2000) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$cgroup_devices(r3, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080), 0x40400, 0x0) 2.482368534s ago: executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000180)=0x1, 0x87c5) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000340), 0x14) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file1'}, 0xb) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000500)=@gcm_256={{0x303}, "2a4001011f891d5b", "11682d84dd05bb63ae661f051e1e79ceafeaa60a5bd1dc83db142ade2bd907fd", "fd6ed24e", "d4e9e1c90d89691c"}, 0x38) close(r0) 2.451808058s ago: executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000001e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c00)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_HASH_SREG={0x8}, @NFTA_HASH_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) 2.300908282s ago: executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) shmget$private(0x0, 0x1000, 0x80, &(0x7f0000ffa000/0x1000)=nil) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x0) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000ff9000/0x2000)=nil) 2.276050876s ago: executing program 4: socket$nl_sock_diag(0x10, 0x3, 0x4) prlimit64(0x0, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005240)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000005200)=""/17, 0x11}}], 0x1, 0x0, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) bind$unix(r3, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2000000, &(0x7f0000000080)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000000)='./file0\x00') pivot_root(&(0x7f0000000040)='./file0/../file0/../file0\x00', &(0x7f0000000200)='./file0/../file0\x00') chroot(&(0x7f00000001c0)='./file0/../file0/../file0\x00') umount2(&(0x7f0000000240)='./file0/../file0/../file0\x00', 0x3) r5 = socket$unix(0x1, 0x0, 0x0) connect$unix(r5, 0x0, 0x0) writev(r5, &(0x7f0000000040)=[{&(0x7f0000000000)="d2", 0x1}], 0x1) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x23, &(0x7f0000000080)=0x6, 0x26) 2.016480186s ago: executing program 1: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="80", @ANYRES16, @ANYBLOB="051d8987f600000000000f00000008"], 0x80}}, 0x4008010) socket$netlink(0x10, 0x3, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x80002, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r1}, 0x8) ioctl$SIOCSIFHWADDR(r0, 0x89f0, &(0x7f0000000900)={'bridge0\x00', @random='\x00\x00\x00 \x00'}) 1.831447975s ago: executing program 1: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305839, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x81, "f06fc539471398450104663ea5b3e92dad434f"}) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) 1.21710847s ago: executing program 0: mknod$loop(0x0, 0x0, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newtaction={0x60, 0x30, 0xffff, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x0) 783.378078ms ago: executing program 1: socket(0x0, 0x0, 0x0) socket(0x0, 0x0, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_read_part_table(0x63d, &(0x7f0000000000)="$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") 0s ago: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x2000000000000089}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) syz_mount_image$f2fs(&(0x7f0000000380), &(0x7f0000000ac0)='./file0\x00', 0x0, &(0x7f00000021c0)=ANY=[@ANYBLOB="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"], 0x1, 0x552e, &(0x7f0000002480)="$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") creat(&(0x7f0000000080)='./bus\x00', 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0x8008f513, 0x0) kernel console output (not intermixed with test programs): 1096.845066][ T3615] appleir 0003:05AC:8243.003D: unknown main item tag 0x0 [ 1096.856199][ T3615] appleir 0003:05AC:8243.003D: No inputs registered, leaving [ 1096.874956][ T3615] appleir 0003:05AC:8243.003D: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 1097.872906][T18010] loop4: detected capacity change from 0 to 1024 [ 1097.937236][T18010] syz-executor.4: attempt to access beyond end of device [ 1097.937236][T18010] loop4: rw=2049, sector=5778, nr_sectors = 2 limit=1024 [ 1097.952953][T18010] Buffer I/O error on dev loop4, logical block 2889, lost async page write [ 1098.123654][T18014] netlink: 16186 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1098.156949][ T9886] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1098.178086][T18013] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1098.180416][ T9886] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1098.313529][ T3615] usb 4-1: reset high-speed USB device number 21 using dummy_hcd [ 1098.543224][ T3615] usb 4-1: device descriptor read/64, error -32 [ 1098.893230][ T3615] usb 4-1: reset high-speed USB device number 21 using dummy_hcd [ 1099.113738][ T3615] usb 4-1: device descriptor read/64, error -71 [ 1099.905984][T18030] loop1: detected capacity change from 0 to 256 [ 1099.979654][T18030] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 1099.989257][T18034] loop4: detected capacity change from 0 to 1024 [ 1100.041986][T18034] syz-executor.4: attempt to access beyond end of device [ 1100.041986][T18034] loop4: rw=2049, sector=5778, nr_sectors = 2 limit=1024 [ 1100.074088][ T4102] usb 4-1: USB disconnect, device number 21 [ 1100.097495][T18034] Buffer I/O error on dev loop4, logical block 2889, lost async page write [ 1100.346272][T18036] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1100.995927][T18052] loop3: detected capacity change from 0 to 128 [ 1101.803451][ T4102] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 1102.233404][ T4102] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1102.246033][ T4102] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1102.257862][ T4102] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1102.268442][ T4102] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1102.373541][ T4102] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1102.391387][ T4102] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1102.497529][ T4102] usb 2-1: Manufacturer: syz [ 1102.506389][ T4102] usb 2-1: config 0 descriptor?? [ 1103.004995][ T4102] appleir 0003:05AC:8243.003E: unknown main item tag 0x0 [ 1103.012604][ T4102] appleir 0003:05AC:8243.003E: No inputs registered, leaving [ 1103.028686][ T4102] appleir 0003:05AC:8243.003E: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 1103.800176][T18113] netlink: 16186 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1104.373428][ T4102] usb 2-1: reset high-speed USB device number 31 using dummy_hcd [ 1104.603309][ T4102] usb 2-1: device descriptor read/64, error -32 [ 1104.884866][ T4102] usb 2-1: reset high-speed USB device number 31 using dummy_hcd [ 1105.083370][ T4102] usb 2-1: device descriptor read/64, error -71 [ 1105.402926][ T3582] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1105.415408][ T3582] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1105.425461][ T3582] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1105.436297][ T3582] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1105.449800][ T3582] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1105.457394][ T3582] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1105.646538][T18139] chnl_net:caif_netlink_parms(): no params data found [ 1105.728310][T18139] bridge0: port 1(bridge_slave_0) entered blocking state [ 1105.735665][T18139] bridge0: port 1(bridge_slave_0) entered disabled state [ 1105.744331][T18139] device bridge_slave_0 entered promiscuous mode [ 1105.755220][T18139] bridge0: port 2(bridge_slave_1) entered blocking state [ 1105.762418][T18139] bridge0: port 2(bridge_slave_1) entered disabled state [ 1105.772087][T18139] device bridge_slave_1 entered promiscuous mode [ 1105.808718][T18139] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1105.830679][T18139] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1105.866346][T18139] team0: Port device team_slave_0 added [ 1105.887788][T18139] team0: Port device team_slave_1 added [ 1105.909108][T18139] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1105.916781][T18139] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1105.943256][T18139] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1105.958772][T18139] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1105.965976][T18139] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1105.992311][T18139] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1106.031184][T18139] device hsr_slave_0 entered promiscuous mode [ 1106.039872][ T3615] usb 2-1: USB disconnect, device number 31 [ 1106.050940][T18139] device hsr_slave_1 entered promiscuous mode [ 1106.057946][T18139] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1106.068421][T18139] Cannot create hsr debugfs directory [ 1106.097034][T18158] loop1: detected capacity change from 0 to 128 [ 1106.417538][T18139] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1106.468788][T18158] netlink: 16186 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1106.551688][T18139] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1106.651462][T18139] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1106.749080][T18139] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1106.963699][T18139] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1106.974818][T18139] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1106.986636][T18139] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1107.001520][T18139] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1107.154186][T18139] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1107.173882][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1107.194096][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1107.207980][T18139] 8021q: adding VLAN 0 to HW filter on device team0 [ 1107.222374][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1107.233594][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1107.242936][ T3613] bridge0: port 1(bridge_slave_0) entered blocking state [ 1107.250114][ T3613] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1107.270947][ T4102] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1107.279190][ T4102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1107.288251][ T4102] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1107.297481][ T4102] bridge0: port 2(bridge_slave_1) entered blocking state [ 1107.304621][ T4102] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1107.312988][ T4102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1107.321960][ T4102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1107.342297][T18139] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1107.354592][T18139] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1107.375237][ T4455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1107.387120][ T4455] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1107.396254][ T4455] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1107.406779][ T4455] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1107.415695][ T4455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1107.424618][ T4455] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1107.444322][ T4455] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1107.453082][ T4455] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1107.462741][ T4455] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1107.471013][ T4455] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1107.513674][T15421] Bluetooth: hci1: command tx timeout [ 1107.743411][ T4455] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1107.750970][ T4455] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1107.766096][T18139] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1107.818058][ T4455] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1107.837384][ T4455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1107.866988][ T4455] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1107.876264][ T4455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1107.889375][T18139] device veth0_vlan entered promiscuous mode [ 1107.898084][ T3754] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1107.906292][ T3754] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1107.919464][T18139] device veth1_vlan entered promiscuous mode [ 1107.957806][ T3754] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1107.970801][ T3754] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1107.985171][T18139] device veth0_macvtap entered promiscuous mode [ 1107.997368][T18139] device veth1_macvtap entered promiscuous mode [ 1108.018113][T18139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1108.029212][T18139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1108.040652][T18139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1108.051221][T18139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1108.084041][T18139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1108.093295][ T4102] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 1108.095796][T18139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1108.112295][T18139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1108.122811][T18139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1108.133358][T18139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1108.144944][T18139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1108.155218][T18139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1108.165781][T18139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1108.178703][T18139] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1108.189319][T18139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1108.199917][T18139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1108.223972][T18139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1108.236169][T18139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1108.246771][T18139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1108.257346][T18139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1108.267608][T18139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1108.278186][T18139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1108.288217][T18139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1108.298731][T18139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1108.308768][T18139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1108.319680][T18139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1108.331906][T18139] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1108.344652][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1108.353012][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1108.361574][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1108.370491][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1108.380096][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1108.388853][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1108.401064][T18139] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1108.417885][T18139] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1108.426890][T18139] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1108.440265][T18139] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1108.465173][ T4102] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1108.607811][ T4102] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1108.619308][ T4102] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1108.629334][ T4102] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1108.843733][ T4102] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1108.853885][ T4102] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1108.862341][ T4102] usb 5-1: Manufacturer: syz [ 1108.949403][ T4102] usb 5-1: config 0 descriptor?? [ 1109.410742][ T9886] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1109.450150][ T9886] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1109.498764][T18215] loop1: detected capacity change from 0 to 128 [ 1109.501717][ T9845] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1109.530940][ T9886] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1109.540363][ T9886] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1109.572392][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1109.593319][T15421] Bluetooth: hci1: command tx timeout [ 1109.725084][ T4102] appleir 0003:05AC:8243.003F: unknown main item tag 0x0 [ 1109.732541][ T4102] appleir 0003:05AC:8243.003F: No inputs registered, leaving [ 1109.771210][ T4102] appleir 0003:05AC:8243.003F: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 1109.951959][T18220] netlink: 16186 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1109.997208][ T120] block nbd2: Possible stuck request ffff88801fac8000: control (read@0,4096B). Runtime 30 seconds [ 1110.617158][T18237] loop3: detected capacity change from 0 to 256 [ 1110.667304][T18237] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xba7df490, utbl_chksum : 0xe619d30d) [ 1111.113650][ T153] usb 5-1: reset high-speed USB device number 24 using dummy_hcd [ 1111.313509][ T153] usb 5-1: device descriptor read/64, error -32 [ 1111.593580][ T153] usb 5-1: reset high-speed USB device number 24 using dummy_hcd [ 1111.673591][T15421] Bluetooth: hci1: command tx timeout [ 1111.803536][ T153] usb 5-1: device descriptor read/64, error -71 [ 1112.043299][ T3615] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 1112.233251][ T3615] usb 2-1: device descriptor read/64, error -71 [ 1112.503402][ T3615] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 1112.713534][ T3615] usb 2-1: device descriptor read/64, error -71 [ 1112.803777][ T4102] usb 5-1: USB disconnect, device number 24 [ 1112.853503][ T3615] usb usb2-port1: attempt power cycle [ 1112.903563][ T3992] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 1113.183637][ T3992] usb 3-1: Using ep0 maxpacket: 16 [ 1113.273505][ T3615] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 1113.313345][ T3992] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1113.324084][ T3992] usb 3-1: config 0 has no interfaces? [ 1113.329852][ T3992] usb 3-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 1113.339252][ T3992] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1113.351351][ T3992] usb 3-1: config 0 descriptor?? [ 1113.373618][ T3615] usb 2-1: device descriptor read/8, error -71 [ 1113.627834][T18289] loop4: detected capacity change from 0 to 128 [ 1113.673537][ T3615] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 1113.753555][T15421] Bluetooth: hci1: command tx timeout [ 1113.783316][ T3615] usb 2-1: device descriptor read/8, error -71 [ 1113.924176][ T3615] usb usb2-port1: unable to enumerate USB device [ 1114.239736][T18290] netlink: 16186 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1114.354734][T18300] serio: Serial port pts0 [ 1114.874804][ T4102] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 1115.273584][ T4102] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1115.285344][ T4102] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1115.369351][ T4102] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1115.382423][ T4102] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1115.473472][ T4102] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1115.485344][ T4102] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1115.493829][ T4102] usb 4-1: Manufacturer: syz [ 1115.506700][ T4102] usb 4-1: config 0 descriptor?? [ 1116.085423][ T4102] appleir 0003:05AC:8243.0040: unknown main item tag 0x0 [ 1116.112198][ T4102] appleir 0003:05AC:8243.0040: No inputs registered, leaving [ 1116.164175][ T4102] appleir 0003:05AC:8243.0040: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 1116.842235][ T3754] usb 3-1: USB disconnect, device number 15 [ 1117.783259][ T3992] usb 4-1: reset high-speed USB device number 22 using dummy_hcd [ 1118.085731][ T3992] usb 4-1: device descriptor read/64, error -32 [ 1118.183361][ T3754] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 1118.383338][ T3992] usb 4-1: reset high-speed USB device number 22 using dummy_hcd [ 1118.593235][ T3992] usb 4-1: device descriptor read/64, error -71 [ 1118.954874][ T3754] usb 2-1: device descriptor read/64, error -71 [ 1119.177163][T18346] loop4: detected capacity change from 0 to 256 [ 1119.631251][ T27] audit: type=1800 audit(1717996515.564:632): pid=18347 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="loop4" ino=1049600 res=0 errno=0 [ 1119.693339][ T3754] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 1119.749371][ T4102] usb 4-1: USB disconnect, device number 22 [ 1119.893480][ T3754] usb 2-1: device descriptor read/64, error -71 [ 1120.023789][ T3754] usb usb2-port1: attempt power cycle [ 1120.483625][ T3754] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 1120.634573][ T3754] usb 2-1: device descriptor read/8, error -71 [ 1120.877394][ T1255] ieee802154 phy0 wpan0: encryption failed: -22 [ 1120.883754][ T1255] ieee802154 phy1 wpan1: encryption failed: -22 [ 1120.923269][ T3754] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 1121.163488][ T3754] usb 2-1: device not accepting address 39, error -71 [ 1121.172348][ T3754] usb usb2-port1: unable to enumerate USB device [ 1121.406500][T18378] 9pnet_fd: Insufficient options for proto=fd [ 1121.845290][T18388] loop1: detected capacity change from 0 to 128 [ 1121.951221][T18391] loop3: detected capacity change from 0 to 256 [ 1122.334786][ T27] audit: type=1800 audit(1717996518.064:633): pid=18391 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="loop3" ino=1049601 res=0 errno=0 [ 1123.023392][ T3992] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 1123.200868][T18388] netlink: 16186 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1123.453619][ T3992] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1123.474016][ T3992] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1123.499956][ T3992] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1123.511454][ T3992] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1123.614029][ T3992] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1123.634909][ T3992] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1123.672691][ T3992] usb 1-1: Manufacturer: syz [ 1123.695351][ T3992] usb 1-1: config 0 descriptor?? [ 1124.033620][ T3620] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 1124.184840][ T3992] appleir 0003:05AC:8243.0041: unknown main item tag 0x0 [ 1124.206583][ T3992] appleir 0003:05AC:8243.0041: No inputs registered, leaving [ 1124.226819][ T3992] appleir 0003:05AC:8243.0041: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 1124.233400][ T3620] usb 5-1: device descriptor read/64, error -71 [ 1124.533360][ T3620] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 1124.733441][ T3620] usb 5-1: device descriptor read/64, error -71 [ 1124.884050][ T3620] usb usb5-port1: attempt power cycle [ 1125.323339][ T3620] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 1125.416735][ T3620] usb 5-1: device descriptor read/8, error -71 [ 1125.643237][T12130] usb 1-1: reset high-speed USB device number 36 using dummy_hcd [ 1125.683544][ T3620] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 1125.748850][T18419] kvm [18418]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x0 [ 1125.773397][ T3620] usb 5-1: device descriptor read/8, error -71 [ 1125.783671][T18419] kvm [18418]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x80 [ 1125.831754][T18419] kvm [18418]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x0 [ 1125.833451][T12130] usb 1-1: device descriptor read/64, error -32 [ 1125.899551][ T3620] usb usb5-port1: unable to enumerate USB device [ 1125.957513][T18419] kvm [18418]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x80 [ 1126.015799][T18419] kvm [18418]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x0 [ 1126.052323][T18419] kvm [18418]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc1 data 0x80 [ 1126.067029][T18419] kvm [18418]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc1 data 0x0 [ 1126.076734][T18419] kvm [18418]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc1 data 0x80 [ 1126.088355][T18419] kvm [18418]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x0 [ 1126.102139][T18419] kvm [18418]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x0 [ 1126.133467][T12130] usb 1-1: reset high-speed USB device number 36 using dummy_hcd [ 1126.746249][T12130] usb 1-1: device descriptor read/64, error -71 [ 1126.942841][ T27] audit: type=1800 audit(1717996522.874:634): pid=18441 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1959 res=0 errno=0 [ 1127.705700][ T3754] usb 1-1: USB disconnect, device number 36 [ 1128.535027][T18457] netlink: 16186 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1129.483922][ T9886] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1129.526241][ T3582] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1129.538070][ T3582] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1129.546757][ T3582] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1129.557369][ T3582] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1129.573524][ T26] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 1129.573987][ T3582] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1129.601820][ T3582] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1129.671960][ T9886] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1129.769052][ T9886] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1129.833724][ T26] usb 2-1: Using ep0 maxpacket: 16 [ 1129.874140][T14503] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 1129.887213][ T9886] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1130.011888][T18482] chnl_net:caif_netlink_parms(): no params data found [ 1130.291640][T18482] bridge0: port 1(bridge_slave_0) entered blocking state [ 1130.304170][T18482] bridge0: port 1(bridge_slave_0) entered disabled state [ 1130.334932][T18482] device bridge_slave_0 entered promiscuous mode [ 1130.380577][T18482] bridge0: port 2(bridge_slave_1) entered blocking state [ 1130.392690][T18482] bridge0: port 2(bridge_slave_1) entered disabled state [ 1130.412458][T18482] device bridge_slave_1 entered promiscuous mode [ 1130.532933][T18482] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1130.563507][ T26] usb 2-1: New USB device found, idVendor=058f, idProduct=3820, bcdDevice=2b.79 [ 1130.581825][ T26] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1130.592056][T18482] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1130.606497][ T26] usb 2-1: Product: syz [ 1130.611114][ T26] usb 2-1: Manufacturer: syz [ 1130.616111][T14503] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1130.648529][ T26] usb 2-1: SerialNumber: syz [ 1130.653886][T14503] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1130.686204][ T26] usb 2-1: config 0 descriptor?? [ 1130.691533][T14503] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1130.701705][T14503] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1130.735281][ T26] usb 2-1: Found UVC 0.00 device syz (058f:3820) [ 1130.811523][ T26] usb 2-1: No valid video chain found. [ 1130.844963][T14503] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1130.845973][T18482] team0: Port device team_slave_0 added [ 1130.862138][T14503] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1130.877513][T14503] usb 4-1: Manufacturer: syz [ 1130.898509][T14503] usb 4-1: config 0 descriptor?? [ 1130.927395][T18482] team0: Port device team_slave_1 added [ 1130.937475][ T26] usb 2-1: USB disconnect, device number 40 [ 1131.052636][T18482] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1131.072017][T18482] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1131.104972][T18482] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1131.140858][T18482] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1131.167062][T18482] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1131.205568][T18482] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1131.262866][T18482] device hsr_slave_0 entered promiscuous mode [ 1131.270109][T18482] device hsr_slave_1 entered promiscuous mode [ 1131.277577][T18482] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1131.285540][T18482] Cannot create hsr debugfs directory [ 1131.384272][T14503] appleir 0003:05AC:8243.0042: unknown main item tag 0x0 [ 1131.402580][T14503] appleir 0003:05AC:8243.0042: No inputs registered, leaving [ 1131.414936][T14503] appleir 0003:05AC:8243.0042: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 1131.581682][ T9886] device hsr_slave_0 left promiscuous mode [ 1131.590919][ T9886] device hsr_slave_1 left promiscuous mode [ 1131.598674][ T9886] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1131.606712][ T9886] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1131.619723][ T9886] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1131.627648][ T9886] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1131.639305][ T9886] device bridge_slave_1 left promiscuous mode [ 1131.646747][ T9886] bridge0: port 2(bridge_slave_1) entered disabled state [ 1131.655971][ T9886] device bridge_slave_0 left promiscuous mode [ 1131.662793][ T9886] bridge0: port 1(bridge_slave_0) entered disabled state [ 1131.673441][T15421] Bluetooth: hci3: command tx timeout [ 1131.683544][ T9886] device veth1_macvtap left promiscuous mode [ 1131.691005][ T9886] device veth0_macvtap left promiscuous mode [ 1131.697403][ T9886] device veth1_vlan left promiscuous mode [ 1131.703481][ T9886] device veth0_vlan left promiscuous mode [ 1132.618909][ T9886] team0 (unregistering): Port device team_slave_1 removed [ 1132.641469][ T9886] team0 (unregistering): Port device team_slave_0 removed [ 1132.667159][ T9886] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1132.698826][ T9886] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1132.833320][T12130] usb 4-1: reset high-speed USB device number 23 using dummy_hcd [ 1132.833596][ T9886] bond0 (unregistering): Released all slaves [ 1133.024758][T12130] usb 4-1: device descriptor read/64, error -32 [ 1133.294109][T12130] usb 4-1: reset high-speed USB device number 23 using dummy_hcd [ 1133.493373][T12130] usb 4-1: device descriptor read/64, error -71 [ 1133.611836][T18522] kvm_set_msr_common: 2 callbacks suppressed [ 1133.611867][T18522] kvm [18521]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x0 [ 1133.646732][T18522] kvm [18521]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x80 [ 1133.655891][T18522] kvm [18521]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x0 [ 1133.711216][T18482] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1133.714226][T18522] kvm [18521]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x80 [ 1133.753378][T15421] Bluetooth: hci3: command tx timeout [ 1133.972748][T18482] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1134.047802][T18482] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1134.073893][ T27] audit: type=1800 audit(1717996529.804:635): pid=18532 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1965 res=0 errno=0 [ 1134.471870][T18482] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1134.616289][T18535] loop1: detected capacity change from 0 to 128 [ 1134.665317][T18482] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1134.684486][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1134.694210][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1134.720308][T18482] 8021q: adding VLAN 0 to HW filter on device team0 [ 1134.753881][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1134.772391][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1134.782844][ T3620] bridge0: port 1(bridge_slave_0) entered blocking state [ 1134.790233][ T3620] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1134.838967][ T4455] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1134.851575][ T4455] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1134.863469][ T3754] usb 4-1: USB disconnect, device number 23 [ 1135.041577][ T4455] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1135.094677][ T4455] bridge0: port 2(bridge_slave_1) entered blocking state [ 1135.101875][ T4455] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1135.195046][ T4455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1135.237862][ T4455] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1135.292216][T12130] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1135.325297][T12130] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1135.336846][T12130] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1135.358567][T12130] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1135.383686][ T26] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 1135.407272][T18482] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1135.434700][T18482] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1135.470798][ T3754] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1135.502307][ T3754] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1135.531346][ T3754] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1135.557853][ T3754] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1135.572488][ T3754] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1135.582406][T18542] netlink: 16186 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1135.609948][ T3754] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1135.673334][ T26] usb 1-1: Using ep0 maxpacket: 16 [ 1135.833512][T15421] Bluetooth: hci3: command tx timeout [ 1135.993668][ T26] usb 1-1: New USB device found, idVendor=058f, idProduct=3820, bcdDevice=2b.79 [ 1136.021857][ T26] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1136.062096][ T26] usb 1-1: Product: syz [ 1136.078114][ T26] usb 1-1: Manufacturer: syz [ 1136.098615][ T26] usb 1-1: SerialNumber: syz [ 1136.123624][ T26] usb 1-1: config 0 descriptor?? [ 1136.175277][ T26] usb 1-1: Found UVC 0.00 device syz (058f:3820) [ 1136.187032][ T26] usb 1-1: No valid video chain found. [ 1136.312177][ T3754] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1136.333990][ T3754] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1136.354792][T18482] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1136.377436][ T26] usb 1-1: USB disconnect, device number 37 [ 1136.973282][ T9845] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 1137.219183][ T27] audit: type=1800 audit(1717996533.144:636): pid=18583 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1946 res=0 errno=0 [ 1137.864102][ T9845] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1137.883329][ T9845] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1137.903496][ T9845] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1137.913750][T15421] Bluetooth: hci3: command tx timeout [ 1137.950234][ T9845] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1138.063652][ T9845] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1138.091297][ T9845] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1138.145315][ T9845] usb 4-1: Manufacturer: syz [ 1138.207946][ T4455] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1138.218215][ T9845] usb 4-1: config 0 descriptor?? [ 1138.226056][ T4455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1138.259399][T10217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1138.277412][T10217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1138.293830][T18482] device veth0_vlan entered promiscuous mode [ 1138.306450][ T4102] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1138.314779][ T4102] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1138.327594][T18482] device veth1_vlan entered promiscuous mode [ 1138.376402][ T4102] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1138.392783][ T4102] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1138.402115][ T4102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1138.418635][ T4102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1138.431230][T18482] device veth0_macvtap entered promiscuous mode [ 1138.455131][T18482] device veth1_macvtap entered promiscuous mode [ 1138.474400][T18482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1138.484903][T18482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1138.494911][T18482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1138.505831][T18482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1138.517010][T18482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1138.527657][T18482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1138.538981][T18482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1138.549664][T18482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1138.559944][T18482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1138.570800][T18482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1138.580704][T18482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1138.591267][T18482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1138.602698][T18482] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1138.612155][T10217] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1138.620939][T10217] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1138.629170][T10217] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1138.639083][T10217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1138.650595][T18482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1138.663831][T18482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1138.674378][T18482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1138.686191][T18482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1138.696185][T18482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1138.706900][T18482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1138.717011][T18482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1138.718319][ T9845] appleir 0003:05AC:8243.0043: unknown main item tag 0x0 [ 1138.728431][T18482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1138.748540][T18482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1138.752971][ T9845] appleir 0003:05AC:8243.0043: No inputs registered, leaving [ 1138.759190][T18482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1138.775315][ T9845] appleir 0003:05AC:8243.0043: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 1138.778986][T18482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1138.799005][T18482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1138.813337][T18482] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1138.824214][ T4102] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1138.839316][ T4102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1138.850579][T18482] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1138.865419][T18482] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1138.876505][T18482] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1138.886902][T18482] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1138.948770][T16151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1138.963953][T16151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1138.988654][T10217] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1139.011877][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1139.022509][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1139.041840][ T9845] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1139.783908][ T3754] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 1140.033381][ T3754] usb 2-1: Using ep0 maxpacket: 16 [ 1140.074294][ T120] block nbd2: Possible stuck request ffff88801fac8000: control (read@0,4096B). Runtime 60 seconds [ 1140.183471][ T3620] usb 4-1: reset high-speed USB device number 24 using dummy_hcd [ 1140.299141][T18632] netlink: 16186 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1140.323492][ T3754] usb 2-1: New USB device found, idVendor=058f, idProduct=3820, bcdDevice=2b.79 [ 1140.340362][ T3754] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1140.352873][ T3754] usb 2-1: Product: syz [ 1140.357851][ T3754] usb 2-1: Manufacturer: syz [ 1140.373280][ T3620] usb 4-1: device descriptor read/64, error -32 [ 1140.388590][ T3754] usb 2-1: SerialNumber: syz [ 1140.411368][ T3754] usb 2-1: config 0 descriptor?? [ 1140.469589][ T3754] usb 2-1: Found UVC 0.00 device syz (058f:3820) [ 1140.480525][ T3754] usb 2-1: No valid video chain found. [ 1140.672523][ T3754] usb 2-1: USB disconnect, device number 41 [ 1140.678693][ T3620] usb 4-1: reset high-speed USB device number 24 using dummy_hcd [ 1140.873431][ T3620] usb 4-1: device descriptor read/64, error -71 [ 1140.957644][T18637] kvm [18636]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc1 data 0x80 [ 1141.164256][T18637] kvm [18636]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc1 data 0x0 [ 1141.224672][T18637] kvm [18636]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc1 data 0x80 [ 1141.252170][T18637] kvm [18636]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc1 data 0x0 [ 1141.816292][T12130] usb 4-1: USB disconnect, device number 24 [ 1142.481428][ T26] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 1142.753345][ T26] usb 3-1: Using ep0 maxpacket: 16 [ 1142.913581][ T26] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1143.053292][T12130] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 1143.123421][ T26] usb 3-1: New USB device found, idVendor=058f, idProduct=3820, bcdDevice=2b.79 [ 1143.146716][ T26] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1143.157697][ T26] usb 3-1: Product: syz [ 1143.161869][ T26] usb 3-1: Manufacturer: syz [ 1143.166719][ T26] usb 3-1: SerialNumber: syz [ 1143.172772][ T26] usb 3-1: config 0 descriptor?? [ 1143.225504][ T26] usb 3-1: Found UVC 0.00 device syz (058f:3820) [ 1143.232008][ T26] usb 3-1: No valid video chain found. [ 1143.413415][T12130] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1143.429165][T12130] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1143.440621][T12130] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1143.451099][T12130] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1143.471605][ T9845] usb 3-1: USB disconnect, device number 16 [ 1143.476158][T18704] kvm [18700]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc1 data 0x80 [ 1143.526111][T18704] kvm [18700]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc1 data 0x0 [ 1143.535377][T18704] kvm [18700]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc1 data 0x80 [ 1143.543532][T12130] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1143.544712][T18704] kvm [18700]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc1 data 0x0 [ 1143.562369][T12130] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1143.571399][T12130] usb 2-1: Manufacturer: syz [ 1143.579345][T12130] usb 2-1: config 0 descriptor?? [ 1143.943106][T18712] netlink: 16186 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1144.064530][T12130] appleir 0003:05AC:8243.0044: unknown main item tag 0x0 [ 1144.095455][T12130] appleir 0003:05AC:8243.0044: No inputs registered, leaving [ 1144.151796][T12130] appleir 0003:05AC:8243.0044: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 1145.515233][ T3754] usb 2-1: reset high-speed USB device number 42 using dummy_hcd [ 1145.755597][ T3754] usb 2-1: device descriptor read/64, error -32 [ 1146.033404][ T3754] usb 2-1: reset high-speed USB device number 42 using dummy_hcd [ 1146.127930][T18739] kvm [18738]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x0 [ 1146.138238][T18739] kvm [18738]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x80 [ 1146.154300][T18739] kvm [18738]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x0 [ 1146.223380][ T3754] usb 2-1: device descriptor read/64, error -71 [ 1146.343321][ T3620] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 1146.634615][ T3620] usb 3-1: Using ep0 maxpacket: 16 [ 1146.934241][ T3620] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1147.113856][ T3620] usb 3-1: New USB device found, idVendor=058f, idProduct=3820, bcdDevice=2b.79 [ 1147.122944][ T3620] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1147.131476][ T3620] usb 3-1: Product: syz [ 1147.135834][ T3620] usb 3-1: Manufacturer: syz [ 1147.141140][ T3620] usb 3-1: SerialNumber: syz [ 1147.154925][ T3620] usb 3-1: config 0 descriptor?? [ 1147.184978][T12130] usb 2-1: USB disconnect, device number 42 [ 1147.205150][ T3620] usb 3-1: Found UVC 0.00 device syz (058f:3820) [ 1147.216669][ T3620] usb 3-1: No valid video chain found. [ 1147.228083][T18777] loop3: detected capacity change from 0 to 128 [ 1147.406979][ T4102] usb 3-1: USB disconnect, device number 17 [ 1147.592426][T18782] netlink: 16186 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1147.966689][T18785] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1149.373300][T10217] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 1149.485241][T18800] kvm [18793]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x0 [ 1149.495034][T18800] kvm [18793]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x80 [ 1149.507579][T18800] kvm [18793]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x0 [ 1149.873580][T10217] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1149.885907][T10217] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1149.897082][T10217] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1149.907442][T10217] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1150.013494][T10217] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1150.026827][T10217] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1150.035048][T10217] usb 5-1: Manufacturer: syz [ 1150.044364][T10217] usb 5-1: config 0 descriptor?? [ 1150.193375][ T3620] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 1150.433457][ T3620] usb 1-1: Using ep0 maxpacket: 8 [ 1150.525154][T10217] appleir 0003:05AC:8243.0045: unknown main item tag 0x0 [ 1150.532775][T10217] appleir 0003:05AC:8243.0045: No inputs registered, leaving [ 1150.553433][ T3620] usb 1-1: config 0 has no interfaces? [ 1150.558960][ T3620] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1150.569756][T10217] appleir 0003:05AC:8243.0045: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 1150.583125][ T3620] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1150.611573][ T3620] usb 1-1: config 0 descriptor?? [ 1150.876540][ T9845] usb 1-1: USB disconnect, device number 38 [ 1150.934774][T18825] loop1: detected capacity change from 0 to 256 [ 1151.083411][ T3620] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 1151.333266][ T3620] usb 4-1: Using ep0 maxpacket: 16 [ 1151.352011][T18836] loop1: detected capacity change from 0 to 1024 [ 1151.453460][ T3620] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1151.648990][ T3620] usb 4-1: New USB device found, idVendor=058f, idProduct=3820, bcdDevice=2b.79 [ 1151.668444][ T3620] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1151.678217][ T3620] usb 4-1: Product: syz [ 1151.682407][ T3620] usb 4-1: Manufacturer: syz [ 1151.688332][ T9845] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 1151.702084][ T3620] usb 4-1: SerialNumber: syz [ 1151.709413][ T3620] usb 4-1: config 0 descriptor?? [ 1151.761177][ T3620] usb 4-1: Found UVC 0.00 device syz (058f:3820) [ 1151.769494][ T3620] usb 4-1: No valid video chain found. [ 1152.144975][ T9845] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 1152.199192][ T9845] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 1152.285380][ T3620] usb 4-1: USB disconnect, device number 25 [ 1152.433488][ T9845] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 1152.444666][ T9845] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1152.453429][ T9845] usb 2-1: Product: syz [ 1152.458014][ T9845] usb 2-1: Manufacturer: syz [ 1152.464435][ T9845] usb 2-1: SerialNumber: syz [ 1152.474322][ T9845] usb 2-1: config 0 descriptor?? [ 1152.489842][T18848] loop4: detected capacity change from 0 to 128 [ 1152.496747][T18836] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1152.505602][T18836] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1152.594275][T10217] usb 5-1: USB disconnect, device number 29 [ 1152.738858][T18836] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1152.759219][T18836] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1152.972584][T18854] netlink: 16186 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1153.034190][ T9845] Error reading MAC address [ 1153.046536][ T9845] usb 2-1: USB disconnect, device number 43 [ 1153.153731][T18850] kvm [18849]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x0 [ 1153.178276][T18850] kvm [18849]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x80 [ 1153.265848][T18850] kvm [18849]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x0 [ 1153.601025][ T36] hfsplus: b-tree write err: -5, ino 4 [ 1155.103525][ T3613] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 1155.143339][ T3617] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 1155.396747][ T3617] usb 3-1: Using ep0 maxpacket: 16 [ 1155.523772][ T3613] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1155.536824][ T3613] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1155.550423][ T3613] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1155.553517][ T3617] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1155.560555][ T3613] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1155.690681][ T3613] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1155.701988][ T3613] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1155.733950][ T3613] usb 1-1: Manufacturer: syz [ 1155.791445][ T3613] usb 1-1: config 0 descriptor?? [ 1155.854662][ T3617] usb 3-1: New USB device found, idVendor=058f, idProduct=3820, bcdDevice=2b.79 [ 1155.941563][ T3617] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1155.980999][ T3617] usb 3-1: Product: syz [ 1155.985268][ T3617] usb 3-1: Manufacturer: syz [ 1155.989854][ T3617] usb 3-1: SerialNumber: syz [ 1156.010533][ T3617] usb 3-1: config 0 descriptor?? [ 1156.062711][ T3617] usb 3-1: Found UVC 0.00 device syz (058f:3820) [ 1156.070431][ T3617] usb 3-1: No valid video chain found. [ 1156.274321][ T4102] usb 3-1: USB disconnect, device number 18 [ 1156.411766][ T3613] appleir 0003:05AC:8243.0046: unknown main item tag 0x0 [ 1156.420853][ T3613] appleir 0003:05AC:8243.0046: No inputs registered, leaving [ 1156.430414][ T3613] appleir 0003:05AC:8243.0046: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 1157.156066][T18920] loop3: detected capacity change from 0 to 1764 [ 1157.510734][T18931] loop4: detected capacity change from 0 to 512 [ 1157.572513][T18931] EXT4-fs error (device loop4): ext4_orphan_get:1396: inode #16: comm syz-executor.4: iget: bad extended attribute block 128 [ 1157.587003][T18931] EXT4-fs error (device loop4): ext4_orphan_get:1401: comm syz-executor.4: couldn't read orphan inode 16 (err -117) [ 1157.602527][T18931] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1157.614214][T18931] ext4 filesystem being mounted at /root/syzkaller-testdir2974652197/syzkaller.I3qBxX/20/file1 supports timestamps until 2038 (0x7fffffff) [ 1157.848982][T18931] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz-executor.4: bg 0: block 352: padding at end of block bitmap is not set [ 1157.868747][ T27] audit: type=1326 audit(1717996553.804:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18942 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa3107cf69 code=0x7ffc0000 [ 1157.980995][T18931] EXT4-fs error (device loop4): ext4_xattr_block_set:2191: inode #15: comm syz-executor.4: bad block 19 [ 1158.185326][ T27] audit: type=1326 audit(1717996553.874:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18942 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7faa3107cf69 code=0x7ffc0000 [ 1158.360322][ T27] audit: type=1326 audit(1717996553.884:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18942 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa3107cf69 code=0x7ffc0000 [ 1158.403423][T18482] EXT4-fs (loop4): unmounting filesystem. [ 1158.420751][T16151] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1158.434978][T12130] usb 1-1: USB disconnect, device number 39 [ 1158.470351][ T27] audit: type=1326 audit(1717996553.894:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18942 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7faa3107cf69 code=0x7ffc0000 [ 1158.496722][ T27] audit: type=1326 audit(1717996553.894:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18942 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa3107cf69 code=0x7ffc0000 [ 1158.537756][T16151] EXT4-fs error (device loop4): ext4_release_dquot:6800: comm kworker/u4:4: Failed to release dquot type 1 [ 1158.551499][ T27] audit: type=1326 audit(1717996553.914:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18942 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa3107cf69 code=0x7ffc0000 [ 1158.905842][T18947] netlink: 16186 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1160.363260][ T3992] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 1160.394365][T10217] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 1160.633920][ T3992] usb 2-1: Using ep0 maxpacket: 16 [ 1160.663419][T10217] usb 4-1: Using ep0 maxpacket: 8 [ 1160.763739][ T3992] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1160.783342][T10217] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 1160.792302][T10217] usb 4-1: config 179 has no interface number 0 [ 1160.799416][T10217] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1160.811464][T10217] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1160.838207][T10217] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1160.848974][T18978] kvm [18977]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x0 [ 1160.851333][T10217] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1160.874841][T10217] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1160.887872][T18978] kvm [18977]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x80 [ 1160.888240][T10217] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1160.916777][T18978] kvm [18977]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x0 [ 1160.938034][T18976] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1160.964399][ T3992] usb 2-1: New USB device found, idVendor=058f, idProduct=3820, bcdDevice=2b.79 [ 1160.985721][ T3992] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1161.003041][ T3992] usb 2-1: Product: syz [ 1161.010178][ T3992] usb 2-1: Manufacturer: syz [ 1161.021036][ T3992] usb 2-1: SerialNumber: syz [ 1161.030028][ T3992] usb 2-1: config 0 descriptor?? [ 1161.062657][T18978] kvm [18977]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x80 [ 1161.075600][ T3992] usb 2-1: Found UVC 0.00 device syz (058f:3820) [ 1161.081983][ T3992] usb 2-1: No valid video chain found. [ 1161.191924][T18978] kvm [18977]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x0 [ 1161.192962][ T3992] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input8 [ 1161.268382][T18978] kvm [18977]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc1 data 0x80 [ 1161.277275][ T3992] usb 2-1: USB disconnect, device number 44 [ 1161.399039][ T26] usb 4-1: USB disconnect, device number 26 [ 1161.405221][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1161.405312][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1161.443767][ T26] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 1162.112094][T19000] loop1: detected capacity change from 0 to 2048 [ 1162.143115][T19000] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1162.183373][ T27] audit: type=1800 audit(1717996558.114:643): pid=19000 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="loop1" ino=1357 res=0 errno=0 [ 1162.274724][ T3620] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 1162.658755][ T3620] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1162.907804][ T3620] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1162.941904][ T3620] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1162.967288][ T3620] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1163.058430][ T3620] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1163.090865][ T3620] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1163.137575][ T3620] usb 3-1: Manufacturer: syz [ 1163.168791][ T3620] usb 3-1: config 0 descriptor?? [ 1163.305089][T19029] loop1: detected capacity change from 0 to 128 [ 1163.654377][ T3620] appleir 0003:05AC:8243.0047: unknown main item tag 0x0 [ 1163.679413][ T3620] appleir 0003:05AC:8243.0047: No inputs registered, leaving [ 1163.738840][ T3620] appleir 0003:05AC:8243.0047: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 1163.913585][ T3582] Bluetooth: hci2: command 0x0406 tx timeout [ 1164.154412][T19033] netlink: 16186 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1164.483822][ T3620] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 1164.743330][ T3620] usb 4-1: Using ep0 maxpacket: 16 [ 1164.863467][ T3620] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1164.949919][T19046] kvm [19045]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x0 [ 1164.977533][T19046] kvm [19045]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x80 [ 1164.999446][T19046] kvm [19045]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x0 [ 1165.044501][ T3620] usb 4-1: New USB device found, idVendor=058f, idProduct=3820, bcdDevice=2b.79 [ 1165.063285][ T3620] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1165.095095][ T3620] usb 4-1: Product: syz [ 1165.119680][ T3620] usb 4-1: Manufacturer: syz [ 1165.138354][T19046] kvm [19045]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x80 [ 1165.141461][ T3620] usb 4-1: SerialNumber: syz [ 1165.171458][ T3620] usb 4-1: config 0 descriptor?? [ 1165.225957][ T3620] usb 4-1: Found UVC 0.00 device syz (058f:3820) [ 1165.232353][ T3620] usb 4-1: No valid video chain found. [ 1165.492897][ T3620] usb 4-1: USB disconnect, device number 27 [ 1166.047508][ T27] audit: type=1800 audit(1717996561.984:644): pid=19059 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1953 res=0 errno=0 [ 1166.133394][T12130] usb 3-1: reset high-speed USB device number 19 using dummy_hcd [ 1166.183680][T12130] usb 3-1: device reset changed ep0 maxpacket size! [ 1166.191586][ T3754] usb 3-1: USB disconnect, device number 19 [ 1166.353317][ T3754] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 1166.643839][ T3754] usb 3-1: Using ep0 maxpacket: 8 [ 1166.783439][ T3754] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 1166.791759][ T3754] usb 3-1: config 179 has no interface number 0 [ 1166.803135][ T3754] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1166.866753][T19083] loop3: detected capacity change from 0 to 512 [ 1166.873968][ T3754] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1166.926918][ T3754] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1166.945936][T19083] EXT4-fs: Invalid want_extra_isize 759 [ 1167.075494][ T3754] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1167.218250][ T3754] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1167.231035][ T3754] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1167.249040][T19083] loop3: detected capacity change from 0 to 256 [ 1167.273574][T19056] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1167.459736][T19083] loop3: detected capacity change from 0 to 512 [ 1167.475372][T19083] EXT4-fs: Ignoring removed i_version option [ 1167.482393][T19083] journal_path: Lookup failure for './file0' [ 1167.493538][T19083] EXT4-fs: error: could not find journal device path [ 1167.545282][T19090] loop1: detected capacity change from 0 to 128 [ 1167.559031][ T3754] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input9 [ 1167.746762][T12130] usb 3-1: USB disconnect, device number 20 [ 1167.753292][ C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1167.761620][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1167.777467][T12130] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 1167.844573][ T153] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 1167.905520][T19094] netlink: 16186 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1168.343348][ T153] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1168.372467][ T153] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1168.384461][ T153] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1168.396407][ T153] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1168.503420][ T153] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1168.512640][ T153] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1168.520954][ T153] usb 5-1: Manufacturer: syz [ 1168.530582][ T153] usb 5-1: config 0 descriptor?? [ 1168.773344][ T3620] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 1169.004655][ T153] appleir 0003:05AC:8243.0048: unknown main item tag 0x0 [ 1169.014215][ T153] appleir 0003:05AC:8243.0048: No inputs registered, leaving [ 1169.025230][ T3620] usb 3-1: Using ep0 maxpacket: 16 [ 1169.042758][ T153] appleir 0003:05AC:8243.0048: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 1169.154060][ T3620] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1169.591673][ T3620] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint descriptor of length 2, skipping [ 1169.627338][ T3620] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1169.813545][ T3620] usb 3-1: New USB device found, idVendor=058f, idProduct=3820, bcdDevice=2b.79 [ 1169.830691][ T3620] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1169.874022][ T3620] usb 3-1: Product: syz [ 1169.876272][T19115] loop1: detected capacity change from 0 to 2048 [ 1169.887233][ T3620] usb 3-1: Manufacturer: syz [ 1169.900584][T19115] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1169.903009][ T3620] usb 3-1: SerialNumber: syz [ 1169.929117][ T27] audit: type=1800 audit(1717996565.864:645): pid=19115 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="loop1" ino=1357 res=0 errno=0 [ 1169.933909][ T3620] usb 3-1: config 0 descriptor?? [ 1170.015260][ T3620] usb 3-1: Found UVC 0.00 device syz (058f:3820) [ 1170.021653][ T3620] usb 3-1: No valid video chain found. [ 1170.155184][ T120] block nbd2: Possible stuck request ffff88801fac8000: control (read@0,4096B). Runtime 90 seconds [ 1170.216383][ T3620] usb 3-1: USB disconnect, device number 21 [ 1171.445036][ T3754] usb 5-1: USB disconnect, device number 30 [ 1172.259222][T19152] loop4: detected capacity change from 0 to 256 [ 1172.307080][T19152] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 1172.523435][ T3613] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 1172.643341][T19152] loop4: detected capacity change from 256 to 64 [ 1172.833351][ T3613] usb 4-1: Using ep0 maxpacket: 8 [ 1172.993558][ T3613] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 1173.021402][ T3613] usb 4-1: config 179 has no interface number 0 [ 1173.051781][T18482] exFAT-fs (loop4): error, failed to access to FAT (entry 0x00000005, err:-5) [ 1173.063468][T18482] exFAT-fs (loop4): Filesystem has been set read-only [ 1173.078442][ T3613] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1173.090581][T18482] exFAT-fs (loop4): error, failed to access to FAT (entry 0x00000005, err:-5) [ 1173.094301][ T3613] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1173.111240][ T3613] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1173.125410][ T3613] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1173.141078][ T3613] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1173.141169][T19158] netlink: 16186 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1173.161005][ T3613] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1173.223593][T19151] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1173.506488][ T3613] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input10 [ 1173.616215][T19174] loop1: detected capacity change from 0 to 2048 [ 1173.640845][T19174] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1173.698613][T12130] usb 4-1: USB disconnect, device number 28 [ 1173.713314][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1173.721685][T12130] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 1173.781027][ T27] audit: type=1800 audit(1717996569.714:646): pid=19174 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="loop1" ino=1357 res=0 errno=0 [ 1174.168597][ T3582] Bluetooth: hci0: command 0x0406 tx timeout [ 1174.913299][ T3620] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 1174.943382][ T3754] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 1175.153338][ T3620] usb 2-1: Using ep0 maxpacket: 16 [ 1175.274175][ T3620] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1175.297364][ T3620] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint descriptor of length 2, skipping [ 1175.308870][ T3754] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1175.328957][ T3754] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1175.351620][ T3620] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1175.381686][ T3754] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1175.437063][ T3754] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1175.563516][ T3754] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1175.579690][ T3754] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1175.588297][ T3620] usb 2-1: New USB device found, idVendor=058f, idProduct=3820, bcdDevice=2b.79 [ 1175.609194][ T3620] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1175.617637][ T3754] usb 4-1: Manufacturer: syz [ 1175.622613][ T3620] usb 2-1: Product: syz [ 1175.637468][ T3754] usb 4-1: config 0 descriptor?? [ 1175.643285][ T3620] usb 2-1: Manufacturer: syz [ 1175.652317][ T3620] usb 2-1: SerialNumber: syz [ 1175.664861][ T3620] usb 2-1: config 0 descriptor?? [ 1175.708836][ T3620] usb 2-1: Found UVC 0.00 device syz (058f:3820) [ 1175.735855][ T3620] usb 2-1: No valid video chain found. [ 1175.907080][ T4102] usb 2-1: USB disconnect, device number 45 [ 1176.124457][ T3754] appleir 0003:05AC:8243.0049: unknown main item tag 0x0 [ 1176.137706][ T3754] appleir 0003:05AC:8243.0049: No inputs registered, leaving [ 1176.213792][ T3754] appleir 0003:05AC:8243.0049: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 1177.175408][T19221] loop4: detected capacity change from 0 to 2048 [ 1177.233842][T19221] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1177.233933][ T153] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 1177.290657][ T27] audit: type=1800 audit(1717996573.224:647): pid=19221 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="loop4" ino=1357 res=0 errno=0 [ 1177.524183][ T153] usb 3-1: Using ep0 maxpacket: 8 [ 1177.643634][ T153] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 1177.656962][ T153] usb 3-1: config 179 has no interface number 0 [ 1177.665080][ T153] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1177.677000][ T153] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1177.694147][ T153] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1177.705734][ T153] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1177.719491][ T153] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1177.729057][ T153] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1177.773519][T19218] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1177.858712][T19230] netlink: 16186 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1178.034009][ T153] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input11 [ 1178.230881][ T153] usb 3-1: USB disconnect, device number 22 [ 1178.243205][ C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1178.252029][ T153] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 1178.284450][ T4102] usb 4-1: USB disconnect, device number 29 [ 1178.793460][ T9845] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 1179.043350][ T9845] usb 5-1: Using ep0 maxpacket: 16 [ 1179.163475][ T9845] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1179.190580][ T9845] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint descriptor of length 2, skipping [ 1179.208548][ T9845] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1179.393505][ T9845] usb 5-1: New USB device found, idVendor=058f, idProduct=3820, bcdDevice=2b.79 [ 1179.409229][ T9845] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1179.427568][ T9845] usb 5-1: Product: syz [ 1179.431955][ T9845] usb 5-1: Manufacturer: syz [ 1179.437134][ T9845] usb 5-1: SerialNumber: syz [ 1179.445012][ T9845] usb 5-1: config 0 descriptor?? [ 1179.484923][ T9845] usb 5-1: Found UVC 0.00 device syz (058f:3820) [ 1179.499473][ T9845] usb 5-1: No valid video chain found. [ 1179.697403][ T3617] usb 5-1: USB disconnect, device number 31 [ 1179.703822][T19254] kvm_set_msr_common: 1 callbacks suppressed [ 1179.703836][T19254] kvm [19253]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x0 [ 1179.817198][T19254] kvm [19253]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc1 data 0x0 [ 1179.826294][T19254] kvm [19253]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc1 data 0x80 [ 1179.835999][T19254] kvm [19253]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc1 data 0x0 [ 1180.113397][ T9845] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 1180.412013][T19280] device ip6gretap0 entered promiscuous mode [ 1180.429406][T19280] device batadv_slave_0 entered promiscuous mode [ 1180.450721][T19280] device ip6gretap0 left promiscuous mode [ 1180.460798][T19280] device batadv_slave_0 left promiscuous mode [ 1180.473603][ T9845] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1180.492627][ T9845] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1180.511753][ T9845] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1180.530470][ T9845] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1180.623464][ T9845] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1180.632549][ T9845] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1180.651467][ T9845] usb 4-1: Manufacturer: syz [ 1180.658772][ T9845] usb 4-1: config 0 descriptor?? [ 1181.159990][ T9845] appleir 0003:05AC:8243.004A: unknown main item tag 0x0 [ 1181.184935][ T9845] appleir 0003:05AC:8243.004A: No inputs registered, leaving [ 1181.236734][ T9845] appleir 0003:05AC:8243.004A: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 1181.494420][T19290] netlink: 16186 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1181.653135][T19296] kvm [19295]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x0 [ 1182.009717][T19296] kvm [19295]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc1 data 0x0 [ 1182.050057][T19296] kvm [19295]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc1 data 0x80 [ 1182.085542][T19296] kvm [19295]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc1 data 0x0 [ 1182.326235][ T1255] ieee802154 phy0 wpan0: encryption failed: -22 [ 1182.332552][ T1255] ieee802154 phy1 wpan1: encryption failed: -22 [ 1182.684470][ T153] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 1182.963262][ T153] usb 1-1: Using ep0 maxpacket: 16 [ 1183.093645][ T153] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1183.110671][ T153] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint descriptor of length 5, skipping [ 1183.130612][ T153] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1183.224134][ T4102] usb 4-1: USB disconnect, device number 30 [ 1183.327659][ T153] usb 1-1: New USB device found, idVendor=058f, idProduct=3820, bcdDevice=2b.79 [ 1183.342999][ T153] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1183.378246][ T153] usb 1-1: Product: syz [ 1183.386343][ T153] usb 1-1: Manufacturer: syz [ 1183.391609][ T153] usb 1-1: SerialNumber: syz [ 1183.404282][ T153] usb 1-1: config 0 descriptor?? [ 1183.445138][ T153] usb 1-1: Found UVC 0.00 device syz (058f:3820) [ 1183.451521][ T153] usb 1-1: No valid video chain found. [ 1183.539540][T19323] loop4: detected capacity change from 0 to 4096 [ 1183.648456][ T3754] usb 1-1: USB disconnect, device number 40 [ 1184.256615][T19347] loop4: detected capacity change from 0 to 128 [ 1184.285696][T19343] kvm [19342]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x0 [ 1184.402772][T19343] kvm [19342]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc1 data 0x0 [ 1184.733343][ T9845] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 1185.008400][T19356] netlink: 16186 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1185.113592][ T9845] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1185.139353][ T9845] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1185.172830][ T9845] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1185.176332][T19367] loop1: detected capacity change from 0 to 512 [ 1185.290406][ T9845] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1185.320714][T19367] EXT4-fs error (device loop1): mb_free_blocks:1815: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 1185.356654][T19367] EXT4-fs (loop1): 1 truncate cleaned up [ 1185.362393][T19367] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1185.454826][ T9845] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1185.476626][ T9845] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1185.501592][ T9845] usb 4-1: Manufacturer: syz [ 1185.521871][ T9845] usb 4-1: config 0 descriptor?? [ 1185.950218][T17313] EXT4-fs (loop1): unmounting filesystem. [ 1186.015011][ T9845] appleir 0003:05AC:8243.004B: unknown main item tag 0x0 [ 1186.022813][ T9845] appleir 0003:05AC:8243.004B: No inputs registered, leaving [ 1186.099400][ T9845] appleir 0003:05AC:8243.004B: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 1187.469978][T19393] loop1: detected capacity change from 0 to 512 [ 1187.517783][T19393] EXT4-fs error (device loop1): mb_free_blocks:1815: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 1187.538942][T19393] EXT4-fs (loop1): 1 truncate cleaned up [ 1187.545108][T19393] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1187.693299][ T3617] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 1187.933361][ T3617] usb 5-1: Using ep0 maxpacket: 16 [ 1188.053505][ T3617] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1188.080624][ T3617] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint descriptor of length 5, skipping [ 1188.124636][ T3617] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1188.214022][ T153] usb 4-1: USB disconnect, device number 31 [ 1188.283398][T19404] kvm_set_msr_common: 2 callbacks suppressed [ 1188.283413][T19404] kvm [19402]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc1 data 0x0 [ 1188.299702][T19404] kvm [19402]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x80 [ 1188.318874][T19404] kvm [19402]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc1 data 0x0 [ 1188.328152][T19404] kvm [19402]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x80 [ 1188.333385][ T3617] usb 5-1: New USB device found, idVendor=058f, idProduct=3820, bcdDevice=2b.79 [ 1188.341367][T19404] kvm [19402]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x0 [ 1188.353743][ T3617] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1188.361502][T19404] kvm [19402]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc1 data 0x80 [ 1188.375495][ T3617] usb 5-1: Product: syz [ 1188.376210][T19404] kvm [19402]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc1 data 0x0 [ 1188.385244][ T3617] usb 5-1: Manufacturer: syz [ 1188.398691][ T3617] usb 5-1: SerialNumber: syz [ 1188.414438][T17313] EXT4-fs (loop1): unmounting filesystem. [ 1188.423618][ T3617] usb 5-1: config 0 descriptor?? [ 1188.475432][ T3617] usb 5-1: Found UVC 0.00 device syz (058f:3820) [ 1188.481830][ T3617] usb 5-1: No valid video chain found. [ 1188.677516][ T153] usb 5-1: USB disconnect, device number 32 [ 1188.911207][T19428] loop1: detected capacity change from 0 to 128 [ 1189.343616][T19432] EXT4-fs (sda1): re-mounted. Quota mode: none. [ 1190.968361][ T27] audit: type=1804 audit(1717996586.904:648): pid=19438 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2280245647/syzkaller.9KFyi3/120/file0" dev="sda1" ino=1969 res=1 errno=0 [ 1191.081122][T19440] binder: 19434:19440 ioctl c0306201 20000300 returned -22 [ 1192.303284][ T3754] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 1192.515627][T19445] netlink: 16186 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1192.673526][ T3754] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1192.692936][ T3754] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1192.728571][ T3754] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1192.754421][ T3754] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1192.923563][ T3754] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1192.957979][ T3754] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1192.995644][ T3754] usb 5-1: Manufacturer: syz [ 1193.020066][ T3754] usb 5-1: config 0 descriptor?? [ 1193.258739][T19459] kvm [19458]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc1 data 0x0 [ 1193.291725][T19459] kvm [19458]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x80 [ 1193.352237][T19459] kvm [19458]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc1 data 0x0 [ 1193.380571][T19459] kvm [19458]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x80 [ 1193.405597][T19459] kvm [19458]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x0 [ 1193.459079][T19459] kvm [19458]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc1 data 0x80 [ 1193.514945][ T3754] appleir 0003:05AC:8243.004C: unknown main item tag 0x0 [ 1193.517130][T19459] kvm [19458]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc1 data 0x0 [ 1193.541812][ T3754] appleir 0003:05AC:8243.004C: No inputs registered, leaving [ 1193.563783][T19465] loop3: detected capacity change from 0 to 256 [ 1193.586830][T19465] FAT-fs (loop3): Unrecognized mount option "uid=0x00000000000000000xffffffffffffffff184467440737095516150x0000000000000000" or missing value [ 1193.602045][ T3754] appleir 0003:05AC:8243.004C: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 1194.002395][ T4102] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 1194.050793][T19473] EXT4-fs: error -4 creating inode table initialization thread [ 1194.059007][T19473] EXT4-fs (sda1): re-mounted. Quota mode: none. [ 1194.593713][ T9188] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 1194.601822][ T4102] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1194.632685][ T4102] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1194.680514][ T4102] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1194.724121][ T4102] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1194.786191][ T4102] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1194.863696][ T9188] usb 3-1: Using ep0 maxpacket: 16 [ 1194.879006][ T4102] usb 4-1: config 0 descriptor?? [ 1195.079170][T19483] loop1: detected capacity change from 0 to 512 [ 1195.091904][T19483] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 1195.122543][T19483] EXT4-fs (loop1): warning: maximal mount count reached, running e2fsck is recommended [ 1195.132783][ T9188] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1195.144406][ T9188] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint descriptor of length 5, skipping [ 1195.164534][T19483] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz-executor.1: inode #15: comm syz-executor.1: iget: illegal inode # [ 1195.183761][T19483] EXT4-fs error (device loop1): ext4_orphan_get:1401: comm syz-executor.1: couldn't read orphan inode 15 (err -117) [ 1195.185806][ T9188] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1195.209706][T19483] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1195.383528][ T9188] usb 3-1: New USB device found, idVendor=058f, idProduct=3820, bcdDevice=2b.79 [ 1195.397116][ T9188] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1195.406781][ T9188] usb 3-1: Product: syz [ 1195.412919][ T9188] usb 3-1: Manufacturer: syz [ 1195.418138][ T9188] usb 3-1: SerialNumber: syz [ 1195.425577][T19483] EXT4-fs error (device loop1): ext4_find_dest_de:2112: inode #2: block 3: comm syz-executor.1: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1 [ 1195.583096][T19494] EXT4-fs (sda1): re-mounted. Quota mode: none. [ 1195.851608][ T27] audit: type=1326 audit(2000000004.749:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19489 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5cc527cf69 code=0x0 [ 1195.912159][ T9188] usb 3-1: config 0 descriptor?? [ 1195.994709][ T9188] usb 3-1: Found UVC 0.00 device syz (058f:3820) [ 1196.012942][ T9188] usb 3-1: No valid video chain found. [ 1196.220841][ T153] usb 3-1: USB disconnect, device number 23 [ 1196.230562][T17313] EXT4-fs (loop1): unmounting filesystem. [ 1196.255890][ T4102] plantronics 0003:047F:FFFF.004D: No inputs registered, leaving [ 1196.311229][ T4102] plantronics 0003:047F:FFFF.004D: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1196.714641][ T3620] usb 5-1: USB disconnect, device number 33 [ 1196.858000][T19511] kvm [19510]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc1 data 0x0 [ 1196.878418][T19511] kvm [19510]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x80 [ 1196.930848][T19511] kvm [19510]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc1 data 0x0 [ 1196.965913][T19511] kvm [19510]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x80 [ 1196.992797][ T153] usb 4-1: USB disconnect, device number 32 [ 1197.017691][T19511] kvm [19510]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x0 [ 1197.618325][T19517] netlink: 16186 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1197.933762][T19529] EXT4-fs (sda1): re-mounted. Quota mode: none. [ 1200.014018][T19546] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1200.234776][ T27] audit: type=1326 audit(2000000009.139:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19548 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0d04c7cf69 code=0x0 [ 1200.926082][ T120] block nbd2: Possible stuck request ffff88801fac8000: control (read@0,4096B). Runtime 120 seconds [ 1200.938752][T19554] EXT4-fs: error -4 creating inode table initialization thread [ 1200.946380][T19554] EXT4-fs (sda1): re-mounted. Quota mode: none. [ 1200.982037][T19544] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 1201.123369][ T3620] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 1201.185495][T19546] loop1: detected capacity change from 0 to 512 [ 1201.262640][T19546] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1201.273347][ T3754] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 1201.358301][T19546] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 1201.424434][T19546] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1201.464384][T19544] team0: Port device netdevsim0 added [ 1201.473035][T19546] EXT4-fs warning (device loop1): ext4_enable_quotas:7012: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 1201.490069][ T3620] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1201.502068][ T3620] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1201.502635][T19546] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 1201.513578][ T3620] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1201.513607][ T3620] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1201.563241][ T3754] usb 5-1: Using ep0 maxpacket: 16 [ 1201.582075][T19546] EXT4-fs error (device loop1): ext4_ext_check_inode:520: inode #13: comm syz-executor.1: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 1201.601089][ T3620] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1201.616391][ T3620] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1201.617893][T19546] EXT4-fs error (device loop1): ext4_orphan_get:1401: comm syz-executor.1: couldn't read orphan inode 13 (err -117) [ 1201.633274][ T3620] usb 4-1: Manufacturer: syz [ 1201.649658][ T3620] usb 4-1: config 0 descriptor?? [ 1201.651743][T19546] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1201.693320][ T3754] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1201.712849][ T3754] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint descriptor of length 6, skipping [ 1201.742203][ T3754] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1201.933546][ T3754] usb 5-1: New USB device found, idVendor=058f, idProduct=3820, bcdDevice=2b.79 [ 1201.942669][T12130] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 1201.961388][ T3754] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1201.971666][ T3754] usb 5-1: Product: syz [ 1201.976284][ T3754] usb 5-1: Manufacturer: syz [ 1201.983704][ T3754] usb 5-1: SerialNumber: syz [ 1202.025344][ T3754] usb 5-1: config 0 descriptor?? [ 1202.063539][T19559] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1202.095500][ T3754] usb 5-1: Found UVC 0.00 device syz (058f:3820) [ 1202.113395][ T3754] usb 5-1: No valid video chain found. [ 1202.134275][ T3620] appleir 0003:05AC:8243.004E: unknown main item tag 0x0 [ 1202.147071][ T3620] appleir 0003:05AC:8243.004E: No inputs registered, leaving [ 1202.171006][ T3620] appleir 0003:05AC:8243.004E: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 1202.313984][T12130] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1202.364544][T12130] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1202.376791][T12130] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1202.393208][T12130] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1202.409911][T12130] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1202.423190][ T3620] usb 5-1: USB disconnect, device number 34 [ 1202.430161][T12130] usb 3-1: config 0 descriptor?? [ 1202.725922][T17313] EXT4-fs (loop1): unmounting filesystem. [ 1202.935655][T12130] plantronics 0003:047F:FFFF.004F: No inputs registered, leaving [ 1202.956372][T12130] plantronics 0003:047F:FFFF.004F: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 1203.098430][T19582] EXT4-fs (sda1): re-mounted. Quota mode: none. [ 1204.442151][ T4102] usb 3-1: USB disconnect, device number 24 [ 1204.935995][ T3754] usb 4-1: USB disconnect, device number 33 [ 1204.959413][T19593] loop1: detected capacity change from 0 to 4096 [ 1205.019264][T19602] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1205.128305][T19604] EXT4-fs (sda1): re-mounted. Quota mode: none. [ 1205.146000][ T27] audit: type=1326 audit(2000000014.049:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19597 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faa3107cf69 code=0x0 [ 1206.039616][T19613] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1206.074060][T19618] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1206.142061][T19618] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 1206.362751][T19619] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 1206.520123][T19619] team0: Port device netdevsim0 added [ 1206.524986][T19618] loop1: detected capacity change from 0 to 512 [ 1206.544926][T19618] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1206.568631][T19618] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 1206.628003][T19618] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1206.651169][T19618] EXT4-fs warning (device loop1): ext4_enable_quotas:7012: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 1206.674932][T19618] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 1206.684067][T19618] EXT4-fs error (device loop1): ext4_ext_check_inode:520: inode #13: comm syz-executor.1: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 1206.704524][T19618] EXT4-fs error (device loop1): ext4_orphan_get:1401: comm syz-executor.1: couldn't read orphan inode 13 (err -117) [ 1206.718264][T19618] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1206.733294][ T9845] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 1206.842823][T19590] loop4: detected capacity change from 0 to 40427 [ 1206.920506][T19590] F2FS-fs (loop4): Failed to initialize F2FS segment manager (-4) [ 1206.994229][ T9845] usb 4-1: Using ep0 maxpacket: 16 [ 1207.123520][ T9845] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1207.147947][ T9845] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint descriptor of length 6, skipping [ 1207.191760][ T9845] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1207.403585][ T9845] usb 4-1: New USB device found, idVendor=058f, idProduct=3820, bcdDevice=2b.79 [ 1207.424734][ T9845] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1207.452120][ T9845] usb 4-1: Product: syz [ 1207.466686][ T9845] usb 4-1: Manufacturer: syz [ 1207.488720][ T9845] usb 4-1: SerialNumber: syz [ 1207.522159][ T9845] usb 4-1: config 0 descriptor?? [ 1207.553708][T19624] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1207.574525][ T9845] usb 4-1: Found UVC 0.00 device syz (058f:3820) [ 1207.589013][ T9845] usb 4-1: No valid video chain found. [ 1207.770567][T17313] EXT4-fs (loop1): unmounting filesystem. [ 1207.780425][ T3615] usb 4-1: USB disconnect, device number 34 [ 1207.783243][ T3620] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 1207.885849][T19639] loop1: detected capacity change from 0 to 8 [ 1207.908295][T19639] squashfs image failed sanity check [ 1208.147364][T19641] loop1: detected capacity change from 0 to 4096 [ 1208.163070][T19641] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512) [ 1208.288635][ T3620] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1208.300089][ T3620] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1208.310516][ T3620] usb 5-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 1208.319738][ T3620] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1208.331252][ T3620] usb 5-1: config 0 descriptor?? [ 1208.337510][T19641] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 1208.555650][ T3615] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 1209.389329][ T3620] ntrig 0003:1B96:000A.0050: hidraw0: USB HID v0.00 Device [HID 1b96:000a] on usb-dummy_hcd.4-1/input0 [ 1209.490602][ T3615] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1209.541525][ T3615] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1210.208701][ T3615] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1210.218878][ T3620] usb 5-1: USB disconnect, device number 35 [ 1210.263377][ T3615] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1210.280056][ T3615] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1210.317164][ T3615] usb 1-1: config 0 descriptor?? [ 1210.876715][ T3615] plantronics 0003:047F:FFFF.0051: No inputs registered, leaving [ 1211.011300][ T3615] plantronics 0003:047F:FFFF.0051: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 1211.536738][T19678] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1211.597303][ T9886] ntfs3: loop1: ntfs3_write_inode r=5 failed, -22. [ 1211.622974][T19682] loop3: detected capacity change from 0 to 128 [ 1211.636547][T17313] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22. [ 1211.641846][T19678] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 1212.112222][T19687] netlink: 16186 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1212.215996][ C0] plantronics 0003:047F:FFFF.0051: usb_submit_urb(ctrl) failed: -1 [ 1212.253384][ T3613] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 1212.383470][ T3615] usb 1-1: reset high-speed USB device number 41 using dummy_hcd [ 1212.514176][ T3613] usb 2-1: Using ep0 maxpacket: 16 [ 1212.593455][ T3615] usb 1-1: device descriptor read/64, error -32 [ 1212.667480][ T3613] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1212.683004][ T3613] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint descriptor of length 6, skipping [ 1212.709889][ T3613] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1212.933323][ T3613] usb 2-1: New USB device found, idVendor=058f, idProduct=3820, bcdDevice=2b.79 [ 1212.963627][ T3613] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1212.997209][ T3613] usb 2-1: Product: syz [ 1213.024690][ T3613] usb 2-1: Manufacturer: syz [ 1213.044632][ T3613] usb 2-1: SerialNumber: syz [ 1213.066201][ T3613] usb 2-1: config 0 descriptor?? [ 1213.214171][T19689] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1213.235131][ T3613] usb 2-1: Found UVC 0.00 device syz (058f:3820) [ 1213.241519][ T3613] usb 2-1: No valid video chain found. [ 1214.001269][T19700] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1214.112101][T19703] device ip6tnl0 entered promiscuous mode [ 1214.143540][T19703] device vlan2 entered promiscuous mode [ 1214.158050][T19703] device ip6tnl0 left promiscuous mode [ 1214.169028][ T9188] usb 2-1: USB disconnect, device number 46 [ 1214.184076][ T26] usb 1-1: USB disconnect, device number 41 [ 1214.241069][T19700] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 1214.405950][T19700] team0: Port device netdevsim0 added [ 1215.896832][ T26] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 1215.952417][ T27] audit: type=1326 audit(2000000024.849:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19724 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faa3107cf69 code=0x0 [ 1216.609517][T19727] EXT4-fs: error -4 creating inode table initialization thread [ 1216.617170][T19727] EXT4-fs (sda1): re-mounted. Quota mode: none. [ 1216.859599][T19733] loop3: detected capacity change from 0 to 256 [ 1216.894746][T19733] FAT-fs (loop3): Unrecognized mount option "uid=0x00000000000000000xffffffffffffffff184467440737095516150x0000000000000000" or missing value [ 1217.033548][ T26] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1217.057945][ T26] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1217.072729][T19737] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1217.080729][ T26] usb 2-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 1217.269620][ T26] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1217.288684][ T26] usb 2-1: config 0 descriptor?? [ 1217.493434][ T9188] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 1218.167249][T19745] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1218.223851][T19745] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1218.259878][T19745] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1218.280257][T19746] netlink: 16186 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1218.346149][ T26] ntrig 0003:1B96:000A.0052: hidraw0: USB HID v0.00 Device [HID 1b96:000a] on usb-dummy_hcd.1-1/input0 [ 1218.359471][T19751] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1218.483999][ T9188] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1218.508046][ T9188] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1218.523076][ T9188] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1218.536615][ T9188] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1218.546193][ T9188] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1218.556952][ T26] usb 2-1: USB disconnect, device number 47 [ 1218.578289][ T9188] usb 4-1: config 0 descriptor?? [ 1219.641299][ T9188] plantronics 0003:047F:FFFF.0053: No inputs registered, leaving [ 1219.705216][ T9188] plantronics 0003:047F:FFFF.0053: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1219.799387][T19762] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1219.918878][T19766] bridge0: port 3(erspan0) entered blocking state [ 1219.931878][T19766] bridge0: port 3(erspan0) entered disabled state [ 1219.955763][T19766] device erspan0 entered promiscuous mode [ 1219.983596][ T9845] usb 4-1: USB disconnect, device number 35 [ 1219.992454][T19766] bridge0: port 3(erspan0) entered blocking state [ 1219.998970][T19766] bridge0: port 3(erspan0) entered forwarding state [ 1220.310230][T19784] loop3: detected capacity change from 0 to 1024 [ 1220.514297][T19791] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1221.386515][T19807] loop1: detected capacity change from 0 to 128 [ 1221.737936][T19807] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1222.028562][T19787] loop4: detected capacity change from 0 to 32768 [ 1222.143919][T19807] ext4 filesystem being mounted at /root/syzkaller-testdir3867818678/syzkaller.i9TaRK/141/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 1222.208186][T19787] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz-executor.4 (19787) [ 1222.240307][T19787] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1222.293344][T19787] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 1222.322896][T19787] BTRFS info (device loop4): using free space tree [ 1222.355144][T17313] EXT4-fs (loop1): unmounting filesystem. [ 1222.386426][ T9] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1222.530820][ T9] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1222.580520][T19834] loop1: detected capacity change from 0 to 64 [ 1222.598533][T19787] BTRFS info (device loop4): enabling ssd optimizations [ 1222.661588][ T9] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1222.727794][T19834] MINIX-fs: bad superblock or unable to read bitmaps [ 1222.763945][ T9] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1222.840648][T18482] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1222.996356][ T27] audit: type=1800 audit(2000000031.899:653): pid=19816 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1962 res=0 errno=0 [ 1223.422276][ T3582] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1223.455323][ T3582] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1223.465813][ T3582] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1223.483629][ T3582] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1223.505068][ T3582] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1223.512413][ T3582] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1223.741103][T19847] chnl_net:caif_netlink_parms(): no params data found [ 1224.036984][T19847] bridge0: port 1(bridge_slave_0) entered blocking state [ 1224.109533][T19865] loop4: detected capacity change from 0 to 256 [ 1224.118436][T19865] FAT-fs (loop4): Unrecognized mount option "cÖZ/Vמ/Q¶ÌwÞ¥æheck=normal" or missing value [ 1224.119734][T19847] bridge0: port 1(bridge_slave_0) entered disabled state [ 1224.215044][T19847] device bridge_slave_0 entered promiscuous mode [ 1224.262629][T19847] bridge0: port 2(bridge_slave_1) entered blocking state [ 1224.295383][T19847] bridge0: port 2(bridge_slave_1) entered disabled state [ 1224.336379][T19847] device bridge_slave_1 entered promiscuous mode [ 1224.459748][T19847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1224.524302][T19847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1224.601883][T19861] netlink: 16186 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1224.800889][T19847] team0: Port device team_slave_0 added [ 1224.865325][T19867] loop4: detected capacity change from 0 to 8192 [ 1224.875315][ T9] device hsr_slave_0 left promiscuous mode [ 1224.885741][ T9] device hsr_slave_1 left promiscuous mode [ 1224.901266][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1224.919495][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1224.939982][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1224.958209][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1224.978610][ T9] device bridge_slave_1 left promiscuous mode [ 1224.993805][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 1225.012975][ T9] device bridge_slave_0 left promiscuous mode [ 1225.029103][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 1225.055254][ T9] device veth1_macvtap left promiscuous mode [ 1225.068901][T19867] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 1225.091305][ T9] device veth0_macvtap left promiscuous mode [ 1225.113435][ T9] device veth1_vlan left promiscuous mode [ 1225.190492][ T9] device veth0_vlan left promiscuous mode [ 1225.593379][T15421] Bluetooth: hci2: command tx timeout [ 1225.919647][ T9] team0 (unregistering): Port device team_slave_1 removed [ 1225.966377][ T9] team0 (unregistering): Port device team_slave_0 removed [ 1226.020256][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1226.060843][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1226.321702][T19870] loop1: detected capacity change from 0 to 32768 [ 1226.349159][T19870] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz-executor.1 (19870) [ 1226.402425][ T9] bond0 (unregistering): Released all slaves [ 1226.528499][T19882] /dev/loop0: Can't open blockdev [ 1226.864081][T19847] team0: Port device team_slave_1 added [ 1227.086563][T19870] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1227.104913][T19847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1227.127371][T19847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1227.158183][T19870] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 1227.203760][T19870] BTRFS info (device loop1): using free space tree [ 1227.243642][T19847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1227.277775][T19847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1227.311903][T19847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1227.376720][T19870] BTRFS info (device loop1): enabling ssd optimizations [ 1227.393483][T19847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1227.465707][T19847] device hsr_slave_0 entered promiscuous mode [ 1227.485020][T19847] device hsr_slave_1 entered promiscuous mode [ 1227.519559][T19847] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1227.530944][T19847] Cannot create hsr debugfs directory [ 1227.644399][T17313] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1227.673551][ T3582] Bluetooth: hci2: command tx timeout [ 1227.962465][T19892] loop4: detected capacity change from 0 to 32768 [ 1227.980521][T19892] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz-executor.4 (19892) [ 1228.037529][T19892] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1228.083589][T19892] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 1228.102253][T19892] BTRFS info (device loop4): using free space tree [ 1228.466149][T19938] loop1: detected capacity change from 0 to 128 [ 1228.485049][T19892] BTRFS info (device loop4): enabling ssd optimizations [ 1228.654394][ T27] audit: type=1800 audit(2000000037.559:654): pid=19893 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1941 res=0 errno=0 [ 1228.707244][T19944] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1228.717182][T18482] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1228.791438][T19944] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 1229.272238][T19943] netlink: 16186 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1229.370325][T19847] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1229.460464][T19847] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1229.566764][T19847] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1229.734179][T19847] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1229.753857][T15421] Bluetooth: hci2: command tx timeout [ 1230.118615][T19962] /dev/loop0: Can't open blockdev [ 1230.150809][T19847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1230.229779][ T3993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1230.250131][ T3993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1230.288974][T19847] 8021q: adding VLAN 0 to HW filter on device team0 [ 1230.342786][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1230.358576][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1230.404408][ T153] bridge0: port 1(bridge_slave_0) entered blocking state [ 1230.411569][ T153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1230.472184][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1230.473342][T15421] Bluetooth: hci1: command 0x0406 tx timeout [ 1230.507158][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1230.640044][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1230.649224][ T3613] bridge0: port 2(bridge_slave_1) entered blocking state [ 1230.656368][ T3613] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1230.664498][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1230.673714][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1230.687675][T12130] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1231.428417][T12130] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1231.474753][T12128] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1231.491960][T12128] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1231.564270][T12128] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1231.572868][T12128] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1231.621658][T12128] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1231.647179][T12128] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1231.702402][T12128] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1231.734320][T19847] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1231.750581][T19557] block nbd2: Possible stuck request ffff88801fac8000: control (read@0,4096B). Runtime 150 seconds [ 1231.833329][T15421] Bluetooth: hci2: command tx timeout [ 1231.851921][T19960] loop4: detected capacity change from 0 to 32768 [ 1231.863751][T19960] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz-executor.4 (19960) [ 1231.884238][T19960] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1231.896130][T19960] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 1231.910271][T19960] BTRFS info (device loop4): using free space tree [ 1232.168014][T19960] BTRFS info (device loop4): enabling ssd optimizations [ 1232.241627][T19847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1232.252750][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1232.264300][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1232.341685][T12130] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1232.359221][T12130] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1232.409251][T12128] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 1232.443701][ T9845] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1232.458084][ T9845] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1232.487696][T19847] device veth0_vlan entered promiscuous mode [ 1232.504265][ T3754] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1232.521268][ T3754] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1232.554255][T19847] device veth1_vlan entered promiscuous mode [ 1232.623300][T20024] /dev/loop0: Can't open blockdev [ 1232.634682][ T3754] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1232.651954][ T3754] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1232.761749][T19847] device veth0_macvtap entered promiscuous mode [ 1232.778151][T19847] device veth1_macvtap entered promiscuous mode [ 1232.806052][T19847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1232.841614][T19847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1232.851990][T12128] usb 3-1: config 0 has an invalid interface number: 222 but max is 0 [ 1232.878980][T12128] usb 3-1: config 0 has no interface number 0 [ 1232.893842][T19847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1232.921536][T12128] usb 3-1: config 0 interface 222 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1232.954620][T19847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1233.005659][T19847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1233.055539][T19847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1233.119660][T19847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1233.133613][T12128] usb 3-1: New USB device found, idVendor=413c, idProduct=8194, bcdDevice=c8.b7 [ 1233.145896][T12128] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1233.173992][T19847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1233.187300][T12128] usb 3-1: Product: syz [ 1233.196873][T12128] usb 3-1: Manufacturer: syz [ 1233.205792][T19847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1233.218654][T12128] usb 3-1: SerialNumber: syz [ 1233.237751][T19847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1233.252841][T19847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1233.267355][T12128] usb 3-1: config 0 descriptor?? [ 1233.284432][T19847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1233.299863][T19847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1233.312967][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1234.068955][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1234.131011][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1234.182202][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1234.230351][T19847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1234.260958][ T3993] usb 3-1: USB disconnect, device number 25 [ 1234.295986][T19847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1234.327656][T19847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1234.338718][T19847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1234.349633][T19847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1234.361039][T19847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1234.371248][T19847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1234.384666][T19847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1234.395531][T19847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1234.407039][T19847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1234.417298][T19847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1234.428067][T19847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1234.449399][T19847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1234.463072][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1234.494536][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1234.528250][T19847] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1234.547945][T19847] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1234.559856][T19847] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1234.570081][T19847] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1234.809091][ T3859] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1234.851760][ T3859] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1234.891015][T12130] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1234.951599][ T3859] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1234.976349][ T3859] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1235.039435][T18482] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1235.056053][T12130] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1235.090565][T20061] netlink: 16186 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1238.211808][T20167] loop3: detected capacity change from 0 to 32768 [ 1238.346991][T20167] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz-executor.3 (20167) [ 1238.462936][T20167] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1238.475328][T20167] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 1238.488526][T20167] BTRFS info (device loop3): enabling auto defrag [ 1238.495886][T20167] BTRFS info (device loop3): doing ref verification [ 1238.502746][T20167] BTRFS info (device loop3): max_inline at 0 [ 1238.509605][T20167] BTRFS info (device loop3): force clearing of disk cache [ 1238.517033][T20167] BTRFS info (device loop3): turning on sync discard [ 1238.525073][T20167] BTRFS info (device loop3): disabling free space tree [ 1238.783343][T20167] BTRFS info (device loop3): enabling ssd optimizations [ 1238.792235][T20167] BTRFS info (device loop3): rebuilding free space tree [ 1238.947867][T20167] BTRFS info (device loop3): disabling free space tree [ 1238.955257][T20167] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1238.965211][T20167] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1239.943897][ T28] INFO: task syz-executor.2:17733 blocked for more than 143 seconds. [ 1239.952014][ T28] Not tainted 6.1.92-syzkaller #0 2033/05/18 03:34:08 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 1240.003223][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1240.092199][ T28] task:syz-executor.2 state:D stack:24480 pid:17733 ppid:17082 flags:0x00004002 [ 1240.145519][ T28] Call Trace: [ 1240.148841][ T28] [ 1240.151788][ T28] __schedule+0x142d/0x4550 [ 1240.166500][T20210] loop1: detected capacity change from 0 to 2048 [ 1240.203312][ T28] ? __sched_text_start+0x8/0x8 [ 1240.208223][ T28] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 1240.233457][ T28] ? print_irqtrace_events+0x210/0x210 [ 1240.238967][ T28] ? _raw_spin_lock_irq+0xdb/0x110 [ 1240.273270][ T28] schedule+0xbf/0x180 [ 1240.277411][ T28] io_schedule+0x88/0x100 [ 1240.281763][ T28] folio_wait_bit_common+0x878/0x1290 [ 1240.314587][ T28] ? folio_wait_bit+0x20/0x20 [ 1240.333339][ T28] ? migration_entry_wait_on_locked+0x1160/0x1160 [ 1240.344312][ T28] __filemap_get_folio+0x47c/0xe80 [ 1240.357379][ T28] ? __filemap_get_folio+0x150/0xe80 [ 1240.373300][ T28] ? page_cache_prev_miss+0x500/0x500 [ 1240.396713][ T28] ? smp_call_function_many+0x30/0x30 [ 1240.414403][ T28] truncate_inode_pages_range+0x598/0x1340 [ 1240.433502][ T28] ? mapping_evict_folio+0x5b0/0x5b0 [ 1240.455829][ T28] ? xas_next_entry+0x3d0/0x3d0 [ 1240.471745][ T28] ? filemap_write_and_wait_range+0x217/0x290 [ 1240.491342][ T28] ? invalidate_bh_lrus+0x30/0x30 [ 1240.506446][ T28] ? __bread_gfp+0x370/0x370 [ 1240.521997][ T28] ? invalidate_bh_lrus+0x30/0x30 [ 1240.532939][ T28] blkdev_flush_mapping+0x154/0x2b0 [ 1240.544993][ T28] blkdev_put+0x4c0/0x750 [ 1240.558459][ T28] ? task_work_run+0x1fc/0x300 [ 1240.579839][ T28] blkdev_close+0x56/0x80 [ 1240.603267][ T28] ? blkdev_open+0x2e0/0x2e0 [ 1240.632754][ T28] __fput+0x3b7/0x890 [ 1240.650247][ T28] task_work_run+0x246/0x300 [ 1240.670708][ T28] ? task_work_cancel+0x2b0/0x2b0 [ 1240.687036][ T28] ? exit_task_namespaces+0xdd/0xf0 [ 1240.702426][ T28] do_exit+0xa73/0x26a0 [ 1240.716690][ T28] ? put_task_struct+0x80/0x80 [ 1240.731836][ T28] ? get_signal+0x137e/0x17d0 [ 1240.763292][ T28] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 1240.769344][ T28] ? print_irqtrace_events+0x210/0x210 [ 1240.786744][ T28] ? _raw_spin_lock_irq+0xdb/0x110 [ 1240.791912][ T28] do_group_exit+0x202/0x2b0 [ 1240.813370][ T28] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1240.818649][ T28] ? lockdep_hardirqs_on+0x94/0x130 [ 1240.834248][ T28] get_signal+0x16f7/0x17d0 [ 1240.838824][ T28] ? ptrace_notify+0x370/0x370 [ 1240.870199][ T28] ? print_irqtrace_events+0x210/0x210 [ 1240.875849][ T28] arch_do_signal_or_restart+0xb0/0x1a10 [ 1240.881509][ T28] ? kmem_cache_free+0x292/0x510 [ 1240.895064][ T28] ? do_sys_openat2+0x42b/0x500 [ 1240.899962][ T28] ? do_sys_openat2+0x42b/0x500 [ 1240.911619][ T28] ? get_sigframe_size+0x10/0x10 [ 1240.918194][ T28] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 1240.930331][ T28] ? __x64_sys_openat+0x243/0x290 [ 1240.937034][ T28] ? exit_to_user_mode_loop+0x39/0x100 [ 1240.942526][ T28] exit_to_user_mode_loop+0x6a/0x100 [ 1240.955394][ T28] exit_to_user_mode_prepare+0xb1/0x140 [ 1240.960979][ T28] syscall_exit_to_user_mode+0x60/0x270 [ 1240.972371][ T28] do_syscall_64+0x47/0xb0 [ 1240.979106][ T28] ? clear_bhb_loop+0x45/0xa0 [ 1240.989203][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1240.997506][ T28] RIP: 0033:0x7f017d87bb60 [ 1241.001989][ T28] RSP: 002b:00007f017e541c00 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1241.020023][ T28] RAX: 0000