last executing test programs: 5.052753418s ago: executing program 4: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x10) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'xfrm0\x00', 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r2, &(0x7f0000000180)='`', 0x64, 0x0, &(0x7f0000000240)={0x2f, 0x0, r1, 0x1, 0x0, 0x6, @random="4a99fee2a74d"}, 0x14) 4.97385685s ago: executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r1, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) write(r2, &(0x7f0000000000)="fa", 0xfffffdef) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) write$binfmt_misc(r2, &(0x7f0000000040)=ANY=[], 0xfdef) 3.975428615s ago: executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) bind$inet(0xffffffffffffffff, &(0x7f0000000780)={0x2, 0x4e21, @loopback}, 0x10) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002303100007006000000002000020d3"]) ioctl$USBDEVFS_CONTROL(r0, 0x80045518, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='coredump_filter\x00') writev(r1, &(0x7f00000000c0)=[{0x0}], 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, 0x0) 3.598069573s ago: executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYRES32=0x0], 0x12, 0xa10, &(0x7f00000001c0)="$eJzs3c1vXGe9B/Dv8UviulWStrm9vVGbTNKb1G19Hdu5TW7UxSWxJ4mLX5DtSI1YNKVxUBRDoQWprZBIJWBFBRKIBewqVqwqdUM3qDvYwYoFEuq/UCEWYWV0zoyTsT1jO2lsp+nnY83Mefmd5/mdOS+PZ3x8nrCzLj+y3twba6Ys7V0xtrRUPe5y/OLvPk/qfPGdHf/0gw/fLx/v3ciudOfF4vdJX5Ja0pPkyaR3bHx2ZmqDgq4nl5N8khRJdqfxuimXU/wsLYfBJyl+U9bb0a7NlsxGlvhS2+n9DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7kfF2Pjw8EixKxPTF1+pNSS1NcbGZ2eKLC2tnbO8TMPHVa/fxccb1psU5SN9fctdfT+5//bsJ5LUjuSpxthTVYfk6cu7Dz+x76XHe7qWl++Uzeeye/PFvvXOu9dfW1xceHNLErn/na9PT8zNTEydOV+vTczN1E6fPDl8/MK5udq5icn63KW5+fpUbWy2fmZ+ZrY2MPZcbeT06RO1+tClmYvT58eHJuvLE0/9z+jw8Mnay0Nfq5+ZnZuZPv7y0NzYhYnJyYnp81VMObuMOVXuiF+dmK/N189M1WpXry0unFiVU3dW7b9l0MhGa1IGjW4UNDo8OjoyMjo68l6z9+xbE06+ePrFU8PDPcOrZE3EFu203F8e6ryZ7/1JHO5SV6P9TyYzkelczCuptf0Zy3hmM5OpDvObltv/o8fr69bb2v43W/meltkHyqcjOdic2Neh/e+Qy/b9vJV38m6u57UsZjELeXPHM9ren/OpZzoTmctMJjKVM9WUWnNKLadzMicznFdzIYcyl1rOZSKTqWculzKX+dSrPWoss6nnTOYzk9nUMpCxPJdaRnI6p3MitdQzlEuZycVM53zGc6Yq5WquVe/7iXVyvBU0spmg0XWC1jTmd9z+11f/csKXzlacxuGuLDXb/10bhw6MbUdCAAAAwD33X3/Knv2P/fHvSZGnq+/lz01M1od3Oi0AAADgHqou13uqfOkth55O4fM/AAAAPGiKHGx+C9CfQ42h5f+E8iUAAAAAPCCqv/8fTHHo9gSf/wEAAOAB89DyQMd77G94F/5icPn2v7UrjdcrzYjGWNF/bmKyPjQ2M/nSSI5Vdxmo/tNgTWndSdFb/fvB8znciDrc33jtv11iWWdfGTUy9NJIns+RRsSRgWfKl2cG2kSONiKfbUQ+2xrZnRWRJ8pIAHjQHWnfHhebbP97VxQ2eKBq8nsOtGmDh7WsAHC/OFJd/5/kX80uzdp8/m9GHOz0+f9/V33+77mysv1/LFcPNS4pGMrreSOLuZLBNK84ONSu1OXeCBqXIQxu8G1Af/OShb+c6srgmu8D+m6ta2vsQkYz2PYbgZZyi+UcTjTiurdoIwDANjuybju8ufZ/MIONiA6f//tdUggA95VbPdhv4cBOryMAsJJWGgAAAAAAAAAAAAAAAAAAAAAAAAAAAO69Td3A/8/HksXFhWQbOgu4NdB3JxmuP9CVbcp5xwe6k+xU7f+fO16q3Mb3y1v34A38+J+NI+juFt/JsxIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADbpUi6203vSnYnGU5yfPuz2jo3djqBe6W27tz3Os0obuZm3s6erUgJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAODLrHn//640Xh9uTEpPV3I0yeUkX9/pHO+lmzudwI75VvXccv//rqQ3S7nR0+wAougdG5+dmSo3f7G7nP/pBx++Xz42LnttrwplAWUNKzqXaNbQMqV35VKPVkv1jy+8df17b3ynNn622jHPzp+bHJ86P/uV24FPFB81ukBo7QZhOd8fHP3Dz1sm72pW/lF6OuW/ut5zVb3ja+v9z3ZLd6h3E64tLoyWNc3XX5n//revvd0y67EcTp4ZSAZW1vTN8tGhpsOr38+Vis+KnxR78qtcrrZ/+W4US0W5ifZW6//Q1WuLC0Ovv7F45VZOP1yR074cSnIl6VuZ0/Jou5wOVeeTth6uau0tax2ugsqn/Rus47paShzp8L4+Wu0y/WvWYb06a53XobLB+97M6ETbjH7x3cdz7I639LENamyr+Kz4W3Ehf82PWvr/6Cq3/9G0PTrbFFFFtuwprfNWHF5djchqzUdbZ7y6usyORyVb4Kf5Rv7v1vbvWirK97/luNmm81FLje2Pi+TOj4vf7l3TotxWtUj7V7VIzbNPp2Waee5vRHXI8z/yQtJz4I7OKC9scEbZquP/18VA/pEb+v8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADuf0XS3W56V3I0yb4ke8vxWrK0OubGXdTX1V/cTZr3zN3k/MVTdFzR4mZu5u3s2e6MAAAAAAAAANgaZ8c//eDD98tH9ff47vx3V3NOLelJsq/4Ze/Y+OzM1AYF9SaXl/+k33dnOVwunx65Pf5JOfbkBgvt7OUDAPCF9u8AAAD//yjzadA=") ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4138ae84, &(0x7f0000000c40)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.992484467s ago: executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000003c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000840)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x20, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x10, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}]}}}}}}}}, 0x0) 2.954705153s ago: executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x44, 0x14, 0x509, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x8, 0x2, @local}, @IFA_ADDRESS={0x8, 0x1, @local}, @IFA_BROADCAST={0x8, 0x4, @multicast2}, @IFA_LABEL={0x14, 0x3, 'veth1_to_bond\x00'}]}, 0x44}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000800)=@newlink={0x2c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_VFINFO_LIST={0x4}, @IFLA_MTU={0x8}]}, 0x2c}}, 0x0) 2.922267678s ago: executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x80000c, &(0x7f00000001c0)=ANY=[@ANYRES32=r2, @ANYRESHEX, @ANYRES32, @ANYRES64=0x0, @ANYRESOCT=r1, @ANYRESHEX, @ANYBLOB="2c6e03d465636f6d706f73652c6769643d29ab72f4a2f73b811c7fd9bae7ecd520839bd791f81b6637f549a77ac6cb621635f9c08b2615964a3c43b727df50d049dc760465dea7349206240e6fb4756f276c72f20bab7d507fe4853b18ebe583cbf9009044b021249834326e80399ca072639251325e38177eef4f05093acfe76553919ecca99460ea4ebdbcef9c4e0ed3f10f86889116979b7aa52b38442546b806d6b8964f99a04195ad43adb611", @ANYRES16, @ANYRES16], 0x1, 0x708, &(0x7f0000001100)="$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") ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x2}) 2.724617649s ago: executing program 2: r0 = eventfd2(0x0, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup3(r1, r0, 0x0) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000240)={0x1d, r4, 0x0, {0x0, 0x0, 0x4}}, 0x18) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r3, &(0x7f000009de80)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[], 0x4c}}, 0x0) readv(r3, &(0x7f0000000200)=[{&(0x7f00000010c0)=""/171, 0xab}], 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r5, 0x0, &(0x7f0000000080)={{0x77359400}, {0x0, 0x3938700}}, 0x0) syz_mount_image$iso9660(&(0x7f00000001c0), &(0x7f0000000000)='./file0\x00', 0x204019, &(0x7f0000000a00)=ANY=[@ANYBLOB="757466382c63727566742c6d6f64653d3078303000000000303030303030303030352c686964652c636865636b3d72656c617865642c757466382c757466382c0053152aed48361615915e42793eabc63942295c17f855b9194f913b0083895d3f21f26332e5a6f13564306af06cdfa2344b42fedfdd5ce79beeb8f61afcffc13fee258cb8fb53ea7731b38410495eb21e31d87a69770605f8cfd590997f4ffa6fe2ad0c103072a845374178082975e7ddf6a4dfbf046f268aa7665a2002084d090feaaa75fcea864648be7fbf69d6ab4a6db9efb4e441b1ef47035c79e6440018d0cccea0f369b3ad4ece2ebdd5b8b622c8203a863f4465c08e544e2e9b15c86f2bab737d620dd1532af271c88ca8c9747f4d3ad3c594bdf7ab4a91616c42ea88af1743f64791804db3f2213f48ffda85a53948610aac67ee1431964ec370062945553036700f5d630d9b8210f2b148917cd45fc22ee206075ea5591eba54de3ba34fd34c67b416134af439d07c93e06a1fa7a40d465852d70fb58274126b80990db0413186124c844df4f48f731903116863cf239bc1af1d9437d787a60c597d22053a896c9b2e9ea694e9ef0c22c2cde711c6c817e0b5c3a91dcb490f91ae94a817d0c02137022499a4ff87bdbbd25ea3038bee3853dea355d64373f8620ba030a3471cacf840295d07ba4bd925d4a08c906cf36f7548cfde70f51f1cf638afd0ac3e199eec7fb6dec5be1c7c16c70d9ceb7ae3e8046d0a9bc464bd81e43ef4e814be931667eb93032c37bd15e9fb50dc43155f92ab925ffcc2dbffe249000000"], 0x0, 0x534, &(0x7f0000000200)="$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") 2.619044565s ago: executing program 4: r0 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e22, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r0, &(0x7f0000000040)='u', 0xa792a, 0x801, 0x0, 0x0) 2.573195712s ago: executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="180000001600010600"], 0x18}], 0x1}, 0x0) 2.219919857s ago: executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x80000c, &(0x7f00000001c0)=ANY=[@ANYRES32=r2, @ANYRESHEX, @ANYRES32, @ANYRES64=0x0, @ANYRESOCT=r1, @ANYRESHEX, @ANYBLOB="2c6e03d465636f6d706f73652c6769643d29ab72f4a2f73b811c7fd9bae7ecd520839bd791f81b6637f549a77ac6cb621635f9c08b2615964a3c43b727df50d049dc760465dea7349206240e6fb4756f276c72f20bab7d507fe4853b18ebe583cbf9009044b021249834326e80399ca072639251325e38177eef4f05093acfe76553919ecca99460ea4ebdbcef9c4e0ed3f10f86889116979b7aa52b38442546b806d6b8964f99a04195ad43adb611", @ANYRES16, @ANYRES16], 0x1, 0x708, &(0x7f0000001100)="$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") ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x2}) 2.153468157s ago: executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYRES32=0x0], 0x12, 0xa10, &(0x7f00000001c0)="$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") ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4138ae84, &(0x7f0000000c40)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.109263044s ago: executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000080)="05000200010000", 0x7) 2.000122771s ago: executing program 2: syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000240), 0x21, 0x4a6, &(0x7f0000000a40)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cf84ded40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c86e00f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec231fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895012f1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c3405000000000000003871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d37261774cc5a3bf6b466cb72812da518ff602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d50a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a31b16ac5fb73fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953f88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a5fe1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9d66ebbc8bab4ea81232fbef665f6212f875b2a00000000000000aceb111b66a500ca52fd8f848088c67ee65dfdcc4c580e9bc18c1699dca07d019bf1bf9dd3da480d6c155d7e60674ce88ab5ae07a9d16e22792d99986b531ab4e592ab5925da779e700cf20309a2137877690dc5c07956fc82d7b3bb46d3138041af18508938c9be4e5d0a98073463a5cff6c146d020743da474cb81677a6f389f0e00c33b70b7f8bab95435c27167f365a29fb09cbf35bf192f6a65616fa2ad9a6c7ca3a3ecd96aaecd993e8badb40e7eb8a22b0015e70c885cd519e28448168c6d914265998bff74ea1b0e651a6cae9419096248a0e41573827ad60fafce6e6540734c1f23f75337d836c31497e8112969a039d65aa297e2b046b5f4d11116a89f9f65693d4dc3e70fbfe0b2044fdb3f87e887d1daae8e38a0c19f668f776e19a02bb2449ee4384f6536879c85d7e41bc0276ee2b125d41ff358323311703ec01d64a573bdeb75bdcc87d01de38365ab9222713d2d1640a742d62fefb5403b2ed9969c32a0841e8c36b0107bb888eb14ac62e6d4bdfaeb9ee7436b97bf3825a19d6c8997ce285edf1d277ed703f560460417bfe702af833e83c5b987befb6d1fcf765ab7ea537d9dafb622a1ba8686cb9b1c63b84470364942e90d1cf856cead864f5e38c83b9ed86cc5725a20299ce512b165"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000280)={0x0, 0x7}) 1.908963375s ago: executing program 3: r0 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e22, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r0, &(0x7f0000000040)='u', 0xa792a, 0x801, 0x0, 0x0) 1.826259937s ago: executing program 3: creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$USBDEVFS_SUBMITURB(r1, 0x541b, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$autofs(0xffffffffffffff9c, &(0x7f00000007c0), 0x2c8000, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x0, &(0x7f0000000240)={[{@journal_ioprio}, {@dioread_lock}, {@data_err_abort}, {@jqfmt_vfsv1}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@noinit_itable}, {@orlov}, {@bsdgroups}, {@abort}, {@user_xattr}, {@quota}]}, 0x4, 0x54f, &(0x7f0000002200)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbZdnamc8HbnvOvTc995t7v6fn5iQkgKE1kf0oRLwcEd8kEQfbto1GvnFibb/V+1dnsyWJRuPTv5JI8nWt/ZP89/688lJE/PZVxPHCxnZryysLpXI5Xczrk/XKpcna8sqJC5XSfDqfXpyemTn19sz0e+++M7BY3zj7z/ef3P7w1NdHV7/75e6hm0mcjgP5tvY4nsC19spETOTPyVicfmTHqQE0tpMk230A9GUkz/OxyPqAgzGSZz3w//dlRDSAIZXIfxhSrXFA695+QPfBz417H6zdAG2Mf3TttZHY07w32reaPHRnlN3vjg+g/ayNX/+8dTNbYnCvQwBs6dr1iDg5Orqx/0vy/q9/J3vY59E29H/w7NzOxj9vdhr/FNbHP9Fh/LO/Q+72Y+v8L9wdQDNdZeO/9zuOf9cnrcZH8toLzTHfWHL+QjnN+rYXI+JYjO3O6pvN55xavdPotq19/JctWfutsWB+HHdHdz/8mLlSvfQkMbe7dz3ilY7j32T9/Ccdzn/2fJztsY0j6a3Xum3bOv6nq/FTxOsdz/+DGa1k8/nJyeb1MNm6Kjb6+8aR37u1v93xZ+d/3+bxjyft87W1x2/jxz3/pt229Xv970o+a5Z35euulOr1xamIXcnHG9dPP3hsq97aP4v/2NHN+79O1//eiPi8x/hvHP751f7jf7qy+Oce6/w/fuHOR1/80K393s7/W83SsXxNL/1frwf4JM8dAAAAAAAA7DSFiDgQSaG4Xi4UisW193ccjn2FcrVWP36+unRxLpqflR2PsUJrpvtg2/shpvL3w7bq04/UZyLiUER8O7K3WS/OVstz2x08AAAAAAAAAAAAAAAAAAAA7BD7u3z+P/PHyHYfHfDU+cpvGF5b5v8gvukJ2JH8/4fhJf9heMl/GF7yH4aX/IfhJf9heMl/GF7yHwAAAAAAAAAAAAAAAAAAAAAAAAAAAAbq7Jkz2dJYvX91NqvPXV5eWqhePjGX1haKlaXZ4mx18VJxvlqdL6fF2Wplq79XrlYvTU3H0pXJelqrT9aWV85VqksX6+cuVErz6bl07JlEBQAAAAAAAAAAAAAAAAAAAM+X2vLKQqlcThcVFPoqjO6Mw1AYcGG7eyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeOC/AAAA///ktDiZ") r2 = open(&(0x7f00000005c0)='./bus\x00', 0x147842, 0x0) preadv2(r2, &(0x7f0000000040)=[{&(0x7f0000001200)=""/4096, 0xfffffdef}], 0x1, 0x0, 0x0, 0x0) 1.248251237s ago: executing program 0: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{0x0}], 0x1, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)) bind$alg(r1, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r2 = accept$alg(r1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) recvmmsg(r2, &(0x7f0000006100), 0x49f, 0x0, 0x0) 1.140224064s ago: executing program 1: bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x3, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 1.107215049s ago: executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r0}, 0x10) r1 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xc, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x3}]}}]}, 0x3c}}, 0x0) 999.316245ms ago: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x44, 0x14, 0x509, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x8, 0x2, @local}, @IFA_ADDRESS={0x8, 0x1, @local}, @IFA_BROADCAST={0x8, 0x4, @multicast2}, @IFA_LABEL={0x14, 0x3, 'veth1_to_bond\x00'}]}, 0x44}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000800)=@newlink={0x2c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_VFINFO_LIST={0x4}, @IFLA_MTU={0x8}]}, 0x2c}}, 0x0) 896.789341ms ago: executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000017a200000018110000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = inotify_init1(0x0) r3 = inotify_add_watch(r2, &(0x7f0000000200)='.\x00', 0x400) socket$nl_route(0x10, 0x3, 0x0) r4 = dup(r2) read$FUSE(r4, &(0x7f0000002280)={0x2020}, 0x2020) inotify_rm_watch(r4, r3) 793.343607ms ago: executing program 3: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mincore(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000000)={0x0, @initdev, @multicast1}, &(0x7f0000000100)=0xffffffffffffffc1) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080), 0x4) socket(0x3, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE(0x0, 0x0, 0xffffffffffffffc6) r1 = syz_open_dev$tty1(0xc, 0x4, 0x3) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$packet(0x11, 0x2, 0x300) unshare(0x0) epoll_create1(0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000340)=ANY=[], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffa5, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f00000002c0)={0x0, 0x100}) 773.44163ms ago: executing program 0: fchdir(0xffffffffffffffff) getdents64(0xffffffffffffffff, &(0x7f0000000f80)=""/4096, 0x1000) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000000c0), 0x0) ioperm(0x0, 0x5, 0x4000000000000020) msgctl$IPC_SET(0x0, 0x6, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x482, 0x0) close(r0) execveat(r0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000180), &(0x7f00000001c0), 0x0) write(0xffffffffffffffff, &(0x7f0000000240)="01010101", 0x4) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) semtimedop(0x0, &(0x7f0000000400)=[{0x0, 0x6, 0x1000}, {0x4, 0x0, 0x1000}, {0x0, 0x2, 0x1800}, {}], 0x4, &(0x7f0000000680)={0x0, 0x3938700}) 749.617564ms ago: executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x80000c, &(0x7f00000001c0)=ANY=[@ANYRES32=r2, @ANYRESHEX, @ANYRES32, @ANYRES64=0x0, @ANYRESOCT=r1, @ANYRESHEX, @ANYBLOB="2c6e03d465636f6d706f73652c6769643d29ab72f4a2f73b811c7fd9bae7ecd520839bd791f81b6637f549a77ac6cb621635f9c08b2615964a3c43b727df50d049dc760465dea7349206240e6fb4756f276c72f20bab7d507fe4853b18ebe583cbf9009044b021249834326e80399ca072639251325e38177eef4f05093acfe76553919ecca99460ea4ebdbcef9c4e0ed3f10f86889116979b7aa52b38442546b806d6b8964f99a04195ad43adb611", @ANYRES16, @ANYRES16], 0x1, 0x708, &(0x7f0000001100)="$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") ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x2}) 413.463536ms ago: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x2c, 0x28, 0x4ee4e6a52ff56541, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x4}]}, 0x2c}}, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000100), 0xfffffffffffffffd, 0x220000) tee(r1, r0, 0x81, 0x7) sendto$packet(0xffffffffffffffff, &(0x7f0000000180)='\x00', 0x1, 0x0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="bf73b9e561c5"}, 0x14) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f0000000000)=0x10000, 0x4) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) 367.278073ms ago: executing program 1: r0 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e22, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r0, &(0x7f0000000040)='u', 0xa792a, 0x801, 0x0, 0x0) 251.576831ms ago: executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(0xffffffffffffffff) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) close(r2) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x127) r4 = socket$kcm(0x1e, 0x1, 0x0) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000008c0), 0x43) sendmsg$kcm(r4, &(0x7f0000000100)={&(0x7f0000001540)=@tipc, 0x80, 0x0}, 0x0) 248.978081ms ago: executing program 1: socket$nl_netfilter(0x10, 0x3, 0xc) 215.063597ms ago: executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYRES32=0x0], 0x12, 0xa10, &(0x7f00000001c0)="$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") ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 0s ago: executing program 0: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{0x0}], 0x1, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)) bind$alg(r1, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r2 = accept$alg(r1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) recvmmsg(r2, &(0x7f0000006100), 0x49f, 0x0, 0x0) kernel console output (not intermixed with test programs): Filesystem [ 73.888587][ T4255] XFS (loop2): Ending clean mount [ 74.027768][ T4279] loop4: detected capacity change from 0 to 32768 [ 74.063281][ T3758] XFS (loop2): Metadata CRC error detected at xfs_rmapbt_read_verify+0x39/0xc0, xfs_rmapbt block 0x14 [ 74.078841][ T4279] Dev loop4 SGI disklabel: csum bad, label corrupted [ 74.098501][ T3758] XFS (loop2): Unmount and run xfs_repair [ 74.114015][ T3758] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 74.133936][ T2962] Dev loop4 SGI disklabel: csum bad, label corrupted [ 74.146462][ T3758] 00000000: 52 4d 42 33 00 00 00 0c ff ff ff ff ff ff ff ff RMB3............ [ 74.173867][ T3758] 00000010: 00 a7 50 00 00 00 00 14 00 00 00 01 00 00 00 80 ..P............. [ 74.202389][ T3758] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 74.221874][ T3758] 00000030: 00 00 00 00 5b af 3b 1d 00 00 00 00 00 00 00 01 ....[.;......... [ 74.236921][ T4264] loop1: detected capacity change from 0 to 32768 [ 74.243926][ T3758] 00000040: ff ff ff ff ff ff ff fd 00 00 00 00 00 00 00 00 ................ [ 74.263347][ T3758] 00000050: 00 00 00 01 00 00 00 02 ff ff ff ff ff ff ff fb ................ [ 74.286379][ T3758] 00000060: 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 02 ................ [ 74.296049][ T3758] 00000070: ff ff ff ff ff ff ff fa 00 00 00 00 00 00 00 00 ................ [ 74.308191][ T4255] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x26e/0x370" at daddr 0x14 len 4 error 74 [ 74.365425][ T4255] XFS (loop2): Corruption of in-memory data (0x8) detected at xfs_defer_finish_noroll+0x1750/0x1df0 (fs/xfs/libxfs/xfs_defer.c:504). Shutting down filesystem. [ 74.401159][ T4255] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [ 74.420067][ T4264] XFS (loop1): Mounting V5 Filesystem [ 74.474296][ T3528] XFS (loop2): Unmounting Filesystem [ 74.520913][ T4301] loop0: detected capacity change from 0 to 32768 [ 74.594050][ T4264] XFS (loop1): Ending clean mount [ 74.660261][ T4301] XFS (loop0): Mounting V5 Filesystem [ 74.730538][ T3758] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 74.851339][ T4301] XFS (loop0): Ending clean mount [ 74.886749][ T4264] XFS (loop1): Metadata CRC error detected at xfs_rmapbt_read_verify+0x39/0xc0, xfs_rmapbt block 0x14 [ 74.948207][ T4301] XFS (loop0): Metadata CRC error detected at xfs_rmapbt_read_verify+0x39/0xc0, xfs_rmapbt block 0x14 [ 74.967515][ T4264] XFS (loop1): Unmount and run xfs_repair [ 74.973689][ T3758] usb 4-1: Using ep0 maxpacket: 32 [ 74.980711][ T4301] XFS (loop0): Unmount and run xfs_repair [ 74.989887][ T4301] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 74.993450][ T4264] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 75.009898][ T4301] 00000000: 52 4d 42 33 00 00 00 0c ff ff ff ff ff ff ff ff RMB3............ [ 75.035316][ T4264] 00000000: 52 4d 42 33 00 00 00 0c ff ff ff ff ff ff ff ff RMB3............ [ 75.036224][ T4301] 00000010: 00 a7 50 00 00 00 00 14 00 00 00 01 00 00 00 80 ..P............. [ 75.060533][ T4264] 00000010: 00 a7 50 00 00 00 00 14 00 00 00 01 00 00 00 80 ..P............. [ 75.069413][ T4264] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 75.076735][ T4301] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 75.091077][ T3758] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 75.102248][ T4301] 00000030: 00 00 00 00 5b af 3b 1d 00 00 00 00 00 00 00 01 ....[.;......... [ 75.130647][ T3758] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 75.131748][ T4301] 00000040: ff ff ff ff ff ff ff fd 00 00 00 00 00 00 00 00 ................ [ 75.161090][ T3758] usb 4-1: New USB device found, idVendor=0421, idProduct=00a0, bcdDevice=c8.e1 [ 75.170160][ T3758] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.178412][ T4301] 00000050: 00 00 00 01 00 00 00 02 ff ff ff ff ff ff ff fb ................ [ 75.187427][ T4264] 00000030: 00 00 00 00 5b af 3b 1d 00 00 00 00 00 00 00 01 ....[.;......... [ 75.201736][ T4264] 00000040: ff ff ff ff ff ff ff fd 00 00 00 00 00 00 00 00 ................ [ 75.210792][ T4301] 00000060: 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 02 ................ [ 75.223927][ T4264] 00000050: 00 00 00 01 00 00 00 02 ff ff ff ff ff ff ff fb ................ [ 75.234359][ T3758] usb 4-1: config 0 descriptor?? [ 75.252684][ T4264] 00000060: 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 02 ................ [ 75.261886][ T4301] 00000070: ff ff ff ff ff ff ff fa 00 00 00 00 00 00 00 00 ................ [ 75.266883][ T4264] 00000070: ff ff ff ff ff ff ff fa 00 00 00 00 00 00 00 00 ................ [ 75.282720][ T3758] usb 4-1: bad CDC descriptors [ 75.286405][ T4264] XFS (loop1): metadata I/O error in "xfs_btree_read_buf_block+0x26e/0x370" at daddr 0x14 len 4 error 74 [ 75.290928][ T3758] usb 4-1: bad CDC descriptors [ 75.301214][ T4264] XFS (loop1): Corruption of in-memory data (0x8) detected at xfs_defer_finish_noroll+0x1750/0x1df0 (fs/xfs/libxfs/xfs_defer.c:504). Shutting down filesystem. [ 75.311555][ T4301] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x26e/0x370" at daddr 0x14 len 4 error 74 [ 75.334071][ T4264] XFS (loop1): Please unmount the filesystem and rectify the problem(s) [ 75.406929][ T3523] XFS (loop1): Unmounting Filesystem [ 75.418847][ T4301] XFS (loop0): Corruption of in-memory data (0x8) detected at xfs_defer_finish_noroll+0x1750/0x1df0 (fs/xfs/libxfs/xfs_defer.c:504). Shutting down filesystem. [ 75.495437][ T4301] XFS (loop0): Please unmount the filesystem and rectify the problem(s) [ 75.513240][ T3758] usb 4-1: USB disconnect, device number 2 [ 75.540168][ T3535] XFS (loop0): Unmounting Filesystem [ 75.658800][ T4332] device pim6reg1 entered promiscuous mode [ 76.375831][ T4367] device pim6reg1 entered promiscuous mode [ 76.448023][ T4372] input: syz0 as /devices/virtual/input/input9 [ 76.533320][ T21] cfg80211: failed to load regulatory.db [ 76.981849][ T4391] loop1: detected capacity change from 0 to 1024 [ 77.010641][ T3309] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 77.089541][ T4389] loop2: detected capacity change from 0 to 4096 [ 77.270579][ T3309] usb 1-1: Using ep0 maxpacket: 32 [ 77.378235][ T26] audit: type=1800 audit(1717439199.222:7): pid=4389 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=33 res=0 errno=0 [ 77.436413][ T26] audit: type=1804 audit(1717439199.262:8): pid=4389 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3755308614/syzkaller.BsiLod/57/file0/bus" dev="loop2" ino=33 res=1 errno=0 [ 77.470799][ T3309] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 77.499231][ T3309] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 77.537596][ T3309] usb 1-1: New USB device found, idVendor=0421, idProduct=00a0, bcdDevice=c8.e1 [ 77.567452][ T3309] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.604452][ T3309] usb 1-1: config 0 descriptor?? [ 77.708087][ T3309] usb 1-1: bad CDC descriptors [ 77.717304][ T3309] usb 1-1: bad CDC descriptors [ 77.862861][ T4393] loop4: detected capacity change from 0 to 32768 [ 77.897557][ T3309] usb 1-1: USB disconnect, device number 2 [ 77.926395][ T4393] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz-executor.4 (4393) [ 77.989128][ T4393] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 78.021601][ T4393] BTRFS info (device loop4): using free space tree [ 78.044869][ T4393] BTRFS info (device loop4): has skinny extents [ 78.154803][ T4393] BTRFS info (device loop4): enabling ssd optimizations [ 79.376642][ C0] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. [ 79.520501][ T3832] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 79.790531][ T3832] usb 1-1: Using ep0 maxpacket: 32 [ 79.807682][ T4455] loop4: detected capacity change from 0 to 32768 [ 79.863348][ T4455] Dev loop4 SGI disklabel: csum bad, label corrupted [ 79.920895][ T3832] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 79.934102][ T2962] Dev loop4 SGI disklabel: csum bad, label corrupted [ 79.948405][ T3832] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 79.985032][ T3832] usb 1-1: New USB device found, idVendor=0421, idProduct=00a0, bcdDevice=c8.e1 [ 80.020759][ T3832] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.050037][ T3832] usb 1-1: config 0 descriptor?? [ 80.132986][ T3832] usb 1-1: bad CDC descriptors [ 80.139103][ T3832] usb 1-1: bad CDC descriptors [ 80.237411][ T4470] loop1: detected capacity change from 0 to 32768 [ 80.311955][ T4470] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz-executor.1 (4470) [ 80.346383][ T3587] usb 1-1: USB disconnect, device number 3 [ 80.450159][ T4470] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 80.482080][ T4470] BTRFS info (device loop1): using free space tree [ 80.519618][ T4470] BTRFS info (device loop1): has skinny extents [ 80.666472][ T4470] BTRFS info (device loop1): enabling ssd optimizations [ 81.343636][ T4473] loop4: detected capacity change from 0 to 32768 [ 81.498594][ T4482] loop2: detected capacity change from 0 to 32768 [ 81.516173][ T4473] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz-executor.4 (4473) [ 81.597662][ T4473] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 81.628597][ T4473] BTRFS info (device loop4): using free space tree [ 81.635682][ T4482] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz-executor.2 (4482) [ 81.664519][ T4473] BTRFS info (device loop4): has skinny extents [ 81.684508][ T3516] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by udevd (3516) [ 81.835944][ T4499] loop3: detected capacity change from 0 to 32768 [ 81.898541][ T4531] loop2: detected capacity change from 0 to 128 [ 81.928520][ T4499] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by syz-executor.3 (4499) [ 81.985926][ T4087] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by udevd (4087) [ 82.036464][ T4473] BTRFS info (device loop4): enabling ssd optimizations [ 82.205392][ T4499] loop3: detected capacity change from 0 to 2048 [ 82.354872][ T4499] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 83.116411][ T4565] syz-executor.0 (4565) used greatest stack depth: 19320 bytes left [ 83.265626][ T4571] loop0: detected capacity change from 0 to 512 [ 83.353471][ T4571] EXT4-fs (loop0): Ignoring removed bh option [ 83.373550][ T4571] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 83.411165][ T4571] EXT4-fs (loop0): bad geometry: block count 2304 exceeds size of device (256 blocks) [ 83.615611][ T4571] loop0: detected capacity change from 0 to 2048 [ 83.675967][ T4571] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 83.729889][ T4571] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 83.786935][ T4571] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 1)! [ 83.805890][ T4571] EXT4-fs (loop0): group descriptors corrupted! [ 84.250443][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 84.259580][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 84.270456][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 84.283804][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 84.294314][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 84.304794][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 84.319562][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 84.330457][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 84.339793][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 84.350463][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 84.764189][ T26] audit: type=1326 audit(1717439206.612:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4588 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4530fbeee9 code=0x7ffc0000 [ 84.849205][ T4589] loop4: detected capacity change from 0 to 1024 [ 84.858096][ T26] audit: type=1326 audit(1717439206.612:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4588 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4530fbeee9 code=0x7ffc0000 [ 84.901957][ T4574] loop2: detected capacity change from 0 to 32768 [ 84.927943][ T26] audit: type=1326 audit(1717439206.642:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4588 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4530fbeee9 code=0x7ffc0000 [ 84.961828][ T26] audit: type=1326 audit(1717439206.642:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4588 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4530fbeee9 code=0x7ffc0000 [ 84.977210][ T4574] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz-executor.2 (4574) [ 85.066204][ T26] audit: type=1326 audit(1717439206.642:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4588 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4530fbeee9 code=0x7ffc0000 [ 85.148937][ T26] audit: type=1326 audit(1717439206.642:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4588 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4530fbeee9 code=0x7ffc0000 [ 85.190998][ T4574] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 85.230606][ T4574] BTRFS info (device loop2): using free space tree [ 85.264829][ T4574] BTRFS info (device loop2): has skinny extents [ 85.269564][ T26] audit: type=1326 audit(1717439206.642:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4588 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4530fbeee9 code=0x7ffc0000 [ 85.316774][ T26] audit: type=1326 audit(1717439206.642:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4588 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4530fbeee9 code=0x7ffc0000 [ 85.459547][ T4607] loop0: detected capacity change from 0 to 1024 [ 85.510555][ T26] audit: type=1326 audit(1717439206.642:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4588 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f4530fbeee9 code=0x7ffc0000 [ 85.598461][ T4607] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 85.611154][ T4594] loop3: detected capacity change from 0 to 32768 [ 85.651999][ T26] audit: type=1326 audit(1717439206.642:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4588 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f4530fbef23 code=0x7ffc0000 [ 85.721784][ T4594] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by syz-executor.3 (4594) [ 85.739581][ T4607] EXT4-fs error (device loop0): ext4_ext_check_inode:501: inode #11: comm syz-executor.0: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 85.793547][ T3516] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by udevd (3516) [ 85.837955][ T4574] BTRFS info (device loop2): enabling ssd optimizations [ 85.845804][ T4607] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz-executor.0: couldn't read orphan inode 11 (err -117) [ 85.865002][ T4607] EXT4-fs (loop0): mounted filesystem without journal. Opts: sysvgroups,acl,auto_da_alloc,nojournal_checksum,journal_dev=0x0000000000000004,grpjquota=,auto_da_alloc=0x0000000000000040,nomblk_io_submit,,errors=continue. Quota mode: writeback. [ 86.092934][ T4607] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:476: comm syz-executor.0: Invalid block bitmap block 0 in block_group 0 [ 86.100346][ T4594] loop3: detected capacity change from 0 to 128 [ 86.176180][ T4607] EXT4-fs error (device loop0): ext4_acquire_dquot:6196: comm syz-executor.0: Failed to acquire dquot type 0 [ 86.359530][ T144] EXT4-fs error (device loop0): ext4_release_dquot:6219: comm kworker/u4:1: Failed to release dquot type 0 [ 87.591676][ T4653] loop1: detected capacity change from 0 to 512 [ 87.790202][ T4615] loop4: detected capacity change from 0 to 512 [ 87.806264][ T4653] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 87.821137][ T4653] ext4 filesystem being mounted at /root/syzkaller-testdir1787931066/syzkaller.gsSNw0/63/file0 supports timestamps until 2038 (0x7fffffff) [ 87.953528][ T4615] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 88.092872][ T4615] ext4 filesystem being mounted at /root/syzkaller-testdir2840251641/syzkaller.akBnnh/40/file0 supports timestamps until 2038 (0x7fffffff) [ 89.009119][ T4661] loop2: detected capacity change from 0 to 32768 [ 89.109156][ T4661] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz-executor.2 (4661) [ 89.181852][ T4661] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 89.209893][ T4661] BTRFS info (device loop2): using free space tree [ 89.259968][ T4661] BTRFS info (device loop2): has skinny extents [ 89.419423][ T4677] loop0: detected capacity change from 0 to 32768 [ 89.493413][ T4677] BTRFS warning: duplicate device /dev/loop0 devid 1 generation 8 scanned by syz-executor.0 (4677) [ 90.243397][ T4087] BTRFS warning: duplicate device /dev/loop0 devid 1 generation 8 scanned by udevd (4087) [ 90.400612][ T4661] BTRFS info (device loop2): enabling ssd optimizations [ 90.447482][ T4722] capability: warning: `syz-executor.4' uses 32-bit capabilities (legacy support in use) [ 90.495392][ T4677] loop0: detected capacity change from 0 to 128 [ 90.830493][ T4564] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 91.130570][ T4564] usb 5-1: Using ep0 maxpacket: 8 [ 91.270711][ T4564] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 91.279724][ T4564] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 91.290893][ T4564] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 92.120899][ T4564] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 92.131691][ T4564] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.139702][ T4564] usb 5-1: Product: syz [ 92.144438][ T4564] usb 5-1: Manufacturer: syz [ 92.149041][ T4564] usb 5-1: SerialNumber: syz [ 92.256182][ T4731] loop3: detected capacity change from 0 to 32768 [ 92.328766][ T4731] XFS (loop3): Mounting V5 Filesystem [ 92.347536][ T4762] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 92.386922][ T4762] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 92.494294][ T4731] XFS (loop3): Ending clean mount [ 92.510846][ T4564] usb 5-1: 0:2 : does not exist [ 92.552067][ T4731] XFS (loop3): Quotacheck needed: Please wait. [ 92.581293][ T4564] usb 5-1: USB disconnect, device number 3 [ 92.687920][ T4731] XFS (loop3): Quotacheck: Done. [ 92.749784][ T4774] loop0: detected capacity change from 0 to 4096 [ 92.834126][ T4755] loop1: detected capacity change from 0 to 40427 [ 92.853372][ T3526] XFS (loop3): Unmounting Filesystem [ 92.915881][ T4755] F2FS-fs (loop1): invalid crc value [ 92.920228][ T4774] overlayfs: upper fs does not support tmpfile. [ 92.949413][ T4774] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 92.995292][ T4755] F2FS-fs (loop1): Found nat_bits in checkpoint [ 93.019898][ T4779] loop4: detected capacity change from 0 to 256 [ 93.039516][ T3535] ntfs3: loop0: failed to convert "0000" to cp950 [ 93.046438][ T3535] ntfs3: loop0: failed to convert name for inode 1e. [ 93.169662][ T4755] F2FS-fs (loop1): Cannot turn on quotas: -2 on 0 [ 93.207955][ T4755] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 93.281857][ T26] kauditd_printk_skb: 24 callbacks suppressed [ 93.281871][ T26] audit: type=1800 audit(1717439215.132:40): pid=4755 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="loop1" ino=10 res=0 errno=0 [ 93.341904][ T26] audit: type=1800 audit(1717439215.182:41): pid=4755 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="loop1" ino=10 res=0 errno=0 [ 93.373493][ T3523] attempt to access beyond end of device [ 93.373493][ T3523] loop1: rw=2049, want=45104, limit=40427 [ 93.440720][ T4510] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 93.560632][ T4509] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 94.435998][ T4509] usb 4-1: Using ep0 maxpacket: 8 [ 94.515087][ T4510] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 94.523942][ T4510] usb 3-1: config 1 has an invalid descriptor of length 110, skipping remainder of the config [ 94.535002][ T4510] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 94.544299][ T4510] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 101, changing to 10 [ 94.555637][ T4510] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 10100, setting to 1024 [ 94.650840][ T4509] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 94.659111][ T4509] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 94.681134][ T4509] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 94.691407][ T4509] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 94.706321][ T4510] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 94.730552][ T4510] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 94.738565][ T4510] usb 3-1: Product: syz [ 94.745302][ T4509] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 94.758648][ T4510] usb 3-1: Manufacturer: syz [ 94.763807][ T4509] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 94.773866][ T4509] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.800793][ T4781] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 94.823838][ T4510] cdc_wdm 3-1:1.0: skipping garbage [ 94.829080][ T4510] cdc_wdm 3-1:1.0: skipping garbage [ 94.855465][ T4510] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 94.863839][ T4510] cdc_wdm 3-1:1.0: Unknown control protocol [ 94.883605][ T4804] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 95.031231][ T4510] usb 3-1: USB disconnect, device number 2 [ 95.060638][ T4509] usb 4-1: GET_CAPABILITIES returned 0 [ 95.066354][ T4509] usbtmc 4-1:16.0: can't read capabilities [ 95.139976][ T4796] chnl_net:caif_netlink_parms(): no params data found [ 95.272233][ T4784] usbtmc 4-1:16.0: usbtmc488_ioctl_trigger returned -90 [ 95.301243][ T4796] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.308325][ T4796] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.312402][ T4510] usb 4-1: USB disconnect, device number 3 [ 95.326795][ T4796] device bridge_slave_0 entered promiscuous mode [ 95.340842][ T4796] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.349068][ T4796] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.368433][ T4796] device bridge_slave_1 entered promiscuous mode [ 95.410208][ T4796] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.423383][ T4796] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.469888][ T4796] team0: Port device team_slave_0 added [ 95.481785][ T4796] team0: Port device team_slave_1 added [ 95.557707][ T4796] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.573659][ T4796] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.627590][ T4796] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.665704][ T4796] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.690286][ T4796] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.788980][ T4796] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.969143][ T4796] device hsr_slave_0 entered promiscuous mode [ 96.006948][ T4796] device hsr_slave_1 entered promiscuous mode [ 96.037677][ T4815] loop2: detected capacity change from 0 to 4096 [ 96.048548][ T4796] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 96.098521][ T4817] loop3: detected capacity change from 0 to 4096 [ 96.108915][ T4796] Cannot create hsr debugfs directory [ 96.120816][ T4807] loop1: detected capacity change from 0 to 32768 [ 96.283567][ T4807] XFS (loop1): Mounting V5 Filesystem [ 96.305106][ T4815] overlayfs: upper fs does not support tmpfile. [ 96.336922][ T4815] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 96.391433][ T4817] overlayfs: upper fs does not support tmpfile. [ 96.450843][ T3528] ntfs3: loop2: failed to convert "0000" to cp950 [ 96.457659][ T3528] ntfs3: loop2: failed to convert name for inode 1e. [ 96.459964][ T4817] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 96.501722][ T4807] XFS (loop1): Ending clean mount [ 96.515255][ T4807] XFS (loop1): Quotacheck needed: Please wait. [ 96.527369][ T4796] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.574018][ T4807] XFS (loop1): Quotacheck: Done. [ 96.628862][ T3526] ntfs3: loop3: failed to convert "0000" to cp950 [ 96.657615][ T3526] ntfs3: loop3: failed to convert name for inode 1e. [ 96.680708][ T3757] Bluetooth: hci4: command 0x0409 tx timeout [ 96.786544][ T3523] XFS (loop1): Unmounting Filesystem [ 96.874884][ T4796] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.107237][ T4796] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.177908][ T4835] loop4: detected capacity change from 0 to 512 [ 97.259260][ T4835] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 97.291207][ T4835] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 97.366246][ T4796] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.391076][ T4835] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 97.452573][ T4835] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2213: inode #15: comm syz-executor.4: corrupted in-inode xattr [ 97.582752][ T4835] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz-executor.4: couldn't read orphan inode 15 (err -117) [ 97.610991][ T4835] EXT4-fs (loop4): mounted filesystem without journal. Opts: noload,mblk_io_submit,lazytime,nogrpid,block_validity,user_xattr,,errors=continue. Quota mode: none. [ 97.772271][ T4796] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 97.803423][ T4796] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 97.835607][ T4796] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 97.901150][ T4796] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 98.082259][ T4855] loop4: detected capacity change from 0 to 4096 [ 98.198323][ T4796] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.313558][ T4855] overlayfs: upper fs does not support tmpfile. [ 98.336545][ T4855] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 98.346379][ T3757] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 98.355826][ T3757] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 98.384433][ T4843] chnl_net:caif_netlink_parms(): no params data found [ 98.397014][ T4796] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.416969][ T3522] ntfs3: loop4: failed to convert "0000" to cp950 [ 98.450278][ T3757] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 98.462684][ T3757] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 98.467700][ T3522] ntfs3: loop4: failed to convert name for inode 1e. [ 98.482075][ T3757] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.489200][ T3757] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.513353][ T3757] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 98.522432][ T3757] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 98.539820][ T3757] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.546974][ T3757] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.613527][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 98.739748][ T3587] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 98.762160][ T3587] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 98.771288][ T3563] Bluetooth: hci4: command 0x041b tx timeout [ 98.804316][ T4843] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.811744][ T4843] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.820027][ T4843] device bridge_slave_0 entered promiscuous mode [ 98.837820][ T4861] loop1: detected capacity change from 0 to 32768 [ 98.840518][ T3587] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 98.854504][ T3587] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 98.864526][ T3587] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 98.873686][ T3587] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 98.882233][ T3587] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 98.892007][ T3587] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 98.900368][ T3587] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 98.911287][ T3587] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 98.932587][ T4843] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.939658][ T4843] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.965963][ T4861] XFS (loop1): Mounting V5 Filesystem [ 98.989221][ T4843] device bridge_slave_1 entered promiscuous mode [ 99.004296][ T3522] syz-executor.4 (3522) used greatest stack depth: 18720 bytes left [ 99.035776][ T3587] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 99.091621][ T4796] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 99.123891][ T4843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.171204][ T4843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.235653][ T4843] team0: Port device team_slave_0 added [ 99.246734][ T4858] chnl_net:caif_netlink_parms(): no params data found [ 99.266674][ T4861] XFS (loop1): Ending clean mount [ 99.284090][ T4843] team0: Port device team_slave_1 added [ 99.312105][ T4861] XFS (loop1): Quotacheck needed: Please wait. [ 99.397646][ T4861] XFS (loop1): Quotacheck: Done. [ 99.441097][ T4843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.448064][ T4843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.486231][ T4843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.506853][ T4843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.518615][ T4843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.545775][ T4843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.560719][ T3563] Bluetooth: hci2: command 0x0409 tx timeout [ 99.610015][ T3523] XFS (loop1): Unmounting Filesystem [ 99.610119][ T3563] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 99.623412][ T3563] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 99.649156][ T4796] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.752197][ T4843] device hsr_slave_0 entered promiscuous mode [ 99.759108][ T4843] device hsr_slave_1 entered promiscuous mode [ 99.779488][ T4843] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 99.790698][ T4843] Cannot create hsr debugfs directory [ 99.811156][ T4858] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.818243][ T4858] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.845586][ T4858] device bridge_slave_0 entered promiscuous mode [ 99.864547][ T4858] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.873210][ T4858] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.881731][ T4858] device bridge_slave_1 entered promiscuous mode [ 99.938166][ T4753] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.997764][ T3758] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 100.018248][ T3758] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 100.062517][ T4753] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.087103][ T4858] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.101630][ T4858] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.138913][ T4796] device veth0_vlan entered promiscuous mode [ 100.185308][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 100.201362][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 100.210084][ T4560] Bluetooth: hci3: command 0x0409 tx timeout [ 100.215305][ T4796] device veth1_vlan entered promiscuous mode [ 100.236034][ T4753] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.275823][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 100.284385][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 100.292494][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 100.314967][ T4858] team0: Port device team_slave_0 added [ 100.358088][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 100.369992][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 100.378804][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 100.388718][ T4858] team0: Port device team_slave_1 added [ 100.403759][ T4796] device veth0_macvtap entered promiscuous mode [ 100.416350][ T4753] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.487081][ T4796] device veth1_macvtap entered promiscuous mode [ 100.508463][ T4879] chnl_net:caif_netlink_parms(): no params data found [ 100.519587][ T4858] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.527853][ T4858] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.554112][ T4858] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.577950][ T4858] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.585913][ T4858] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.612461][ T4858] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.639799][ T4796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.650890][ T4796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.660841][ T4796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.671439][ T4796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.688019][ T4796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.699049][ T4796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.714573][ T4796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.726671][ T4796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.737257][ T4796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.748204][ T4796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.761298][ T4796] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.769867][ T3758] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 100.792122][ T4566] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 100.800367][ T4566] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 100.809334][ T4566] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 100.820901][ T4796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.832945][ T4796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.843333][ T4560] Bluetooth: hci4: command 0x040f tx timeout [ 100.850182][ T4796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.860992][ T4796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.870967][ T4796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.881614][ T4796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.891596][ T4796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.902965][ T4796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.912897][ T4796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.923915][ T4796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.935910][ T4796] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.959303][ T4560] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 100.968171][ T4560] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 100.979883][ T4858] device hsr_slave_0 entered promiscuous mode [ 100.987041][ T4858] device hsr_slave_1 entered promiscuous mode [ 100.994154][ T4858] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 101.002637][ T4858] Cannot create hsr debugfs directory [ 101.010743][ T4796] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.019437][ T4796] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.028913][ T4796] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.038261][ T4796] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.143963][ T4879] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.151451][ T3758] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 101.169538][ T3758] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.178784][ T4879] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.189309][ T4879] device bridge_slave_0 entered promiscuous mode [ 101.190596][ T3758] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 101.198046][ T4879] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.212588][ T4879] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.217732][ T3758] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 101.220832][ T4879] device bridge_slave_1 entered promiscuous mode [ 101.311910][ T3758] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 101.321701][ T3758] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 101.332093][ T3758] usb 2-1: Manufacturer: syz [ 101.346961][ T3758] usb 2-1: config 0 descriptor?? [ 101.363553][ T4753] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.406376][ T4879] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.415948][ T4560] Bluetooth: hci0: command 0x0409 tx timeout [ 101.432733][ T790] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.446897][ T790] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.451416][ T4753] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.482597][ T4879] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.510002][ T4560] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 101.577351][ T4754] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.586433][ T4754] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.597829][ T4753] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.625867][ T4879] team0: Port device team_slave_0 added [ 101.634419][ T4564] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 101.643587][ T4564] Bluetooth: hci2: command 0x041b tx timeout [ 101.662450][ T4879] team0: Port device team_slave_1 added [ 101.723120][ T4879] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.733524][ T4879] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.771997][ T4879] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.789201][ T4753] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.832753][ T4879] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.834685][ T3758] appleir 0003:05AC:8243.0001: unknown main item tag 0x0 [ 101.839711][ T4879] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.839734][ T4879] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.873442][ T3758] appleir 0003:05AC:8243.0001: No inputs registered, leaving [ 101.941207][ T3758] appleir 0003:05AC:8243.0001: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 102.026524][ T4879] device hsr_slave_0 entered promiscuous mode [ 102.039458][ T4879] device hsr_slave_1 entered promiscuous mode [ 102.068371][ T4879] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 102.078317][ T4879] Cannot create hsr debugfs directory [ 102.134731][ T3758] usb 2-1: USB disconnect, device number 2 [ 102.167978][ T4843] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.193031][ T4925] loop0: detected capacity change from 0 to 512 [ 102.258201][ T4925] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 102.291659][ T4564] Bluetooth: hci3: command 0x041b tx timeout [ 102.291928][ T4925] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 102.366436][ T4925] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2213: inode #15: comm syz-executor.0: corrupted in-inode xattr [ 102.380031][ T4925] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz-executor.0: couldn't read orphan inode 15 (err -117) [ 102.397887][ T4843] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.401007][ T4925] EXT4-fs (loop0): mounted filesystem without journal. Opts: noload,mblk_io_submit,lazytime,nogrpid,block_validity,user_xattr,,errors=continue. Quota mode: none. [ 102.505500][ T4843] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.821565][ T4843] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.932219][ T3833] Bluetooth: hci4: command 0x0419 tx timeout [ 103.481705][ T3833] Bluetooth: hci0: command 0x041b tx timeout [ 103.731118][ T3833] Bluetooth: hci2: command 0x040f tx timeout [ 104.362936][ T3833] Bluetooth: hci3: command 0x040f tx timeout [ 104.580591][ T3563] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 104.963912][ T4970] loop1: detected capacity change from 0 to 32768 [ 104.990761][ T3563] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 105.009661][ T3563] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 105.029923][ T3563] usb 1-1: config 1 interface 0 has no altsetting 0 [ 105.094680][ T4843] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 105.103509][ T4970] XFS (loop1): Mounting V5 Filesystem [ 105.195096][ T4843] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 105.228073][ T4843] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 105.251500][ T4858] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 105.251817][ T3563] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 105.273718][ T3563] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.281856][ T4843] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 105.288882][ T3563] usb 1-1: Product: syz [ 105.293259][ T3563] usb 1-1: Manufacturer: syz [ 105.297868][ T3563] usb 1-1: SerialNumber: syz [ 105.312650][ T4970] XFS (loop1): Ending clean mount [ 105.350056][ T4858] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 105.393113][ T3523] XFS (loop1): Unmounting Filesystem [ 105.403566][ T4858] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 105.434708][ T4858] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 105.555302][ T4879] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 105.571175][ T3563] Bluetooth: hci0: command 0x040f tx timeout [ 105.591613][ T4509] usb 1-1: USB disconnect, device number 4 [ 105.644977][ T4879] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 105.664194][ T4879] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 105.737886][ T4879] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 105.800724][ T1065] Bluetooth: hci2: command 0x0419 tx timeout [ 105.864245][ T4843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.910819][ T4858] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.974828][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 105.983331][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 106.012892][ T4858] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.022450][ T4843] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.038218][ T3575] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 106.053451][ T3575] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 106.093198][ T4879] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.159756][ T5007] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.1'. [ 106.160339][ T3563] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 106.195211][ T3563] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 106.212290][ T3563] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.219430][ T3563] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.245639][ T3563] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 106.254922][ T3563] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 106.265567][ T3563] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.272712][ T3563] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.288439][ T3563] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 106.299668][ T3563] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 106.309830][ T3563] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.316997][ T3563] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.335422][ T3563] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 106.420377][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 106.434617][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 106.444370][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 106.453715][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 106.463076][ T1065] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.470146][ T1065] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.478103][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 106.486045][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 106.494332][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 106.503445][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 106.514906][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 106.525301][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 106.537801][ T4879] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.544958][ T3587] Bluetooth: hci3: command 0x0419 tx timeout [ 106.610263][ T3575] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 106.636565][ T3575] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 106.656021][ T3575] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 106.665280][ T3575] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 106.675398][ T3575] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 106.699001][ T3575] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 106.710735][ T3833] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 106.733755][ T5021] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 106.760011][ T4843] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 106.787588][ T4843] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 106.931326][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 106.940097][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 106.984035][ T1065] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.991300][ T1065] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.790248][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 107.799710][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 107.809117][ T1065] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.816231][ T1065] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.824453][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 107.833620][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 107.842642][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 107.851164][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 107.859377][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 107.867489][ T3833] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 107.879465][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 107.887954][ T3833] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 107.899760][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 107.907757][ T3833] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 107.918350][ T3833] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 107.933422][ T3563] Bluetooth: hci0: command 0x0419 tx timeout [ 107.970172][ T4858] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 108.007980][ T4858] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 108.040263][ T3587] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 108.060603][ T3833] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 108.069669][ T3833] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 108.079093][ T3587] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 108.087422][ T3587] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 108.095605][ T3833] usb 2-1: Manufacturer: syz [ 108.102012][ T3587] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 108.113080][ T3833] usb 2-1: config 0 descriptor?? [ 108.118447][ T3587] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 108.127260][ T3587] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 108.137992][ T3587] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 108.146156][ T3587] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 108.165084][ T4753] device hsr_slave_0 left promiscuous mode [ 108.172179][ T4753] device hsr_slave_1 left promiscuous mode [ 108.178689][ T4753] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 108.186545][ T4753] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 108.197239][ T4753] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 108.204853][ T4753] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 108.214507][ T4753] device bridge_slave_1 left promiscuous mode [ 108.223393][ T4753] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.239154][ T4753] device bridge_slave_0 left promiscuous mode [ 108.248038][ T4753] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.269801][ T4753] device hsr_slave_0 left promiscuous mode [ 108.276159][ T4753] device hsr_slave_1 left promiscuous mode [ 108.283884][ T4753] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 108.291930][ T4753] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 108.301803][ T4753] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 108.309280][ T4753] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 108.317909][ T4753] device bridge_slave_1 left promiscuous mode [ 108.325906][ T4753] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.335478][ T4753] device bridge_slave_0 left promiscuous mode [ 108.342076][ T4753] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.357174][ T4753] device hsr_slave_0 left promiscuous mode [ 108.363724][ T4753] device hsr_slave_1 left promiscuous mode [ 108.370068][ T4753] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 108.377675][ T4753] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 108.387331][ T4753] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 108.395305][ T4753] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 108.404657][ T4753] device bridge_slave_1 left promiscuous mode [ 108.410938][ T4753] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.419714][ T4753] device bridge_slave_0 left promiscuous mode [ 108.426745][ T4753] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.439838][ T4753] device hsr_slave_0 left promiscuous mode [ 108.446721][ T4753] device hsr_slave_1 left promiscuous mode [ 108.453352][ T4753] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 108.461146][ T4753] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 108.470263][ T4753] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 108.478072][ T4753] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 108.486713][ T4753] device bridge_slave_1 left promiscuous mode [ 108.493611][ T4753] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.502359][ T4753] device bridge_slave_0 left promiscuous mode [ 108.508527][ T4753] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.538275][ T4753] device veth1_macvtap left promiscuous mode [ 108.546511][ T4753] device veth0_macvtap left promiscuous mode [ 108.553036][ T4753] device veth1_vlan left promiscuous mode [ 108.559150][ T4753] device veth0_vlan left promiscuous mode [ 108.570545][ T4753] device veth1_macvtap left promiscuous mode [ 108.576606][ T4753] device veth0_macvtap left promiscuous mode [ 108.582977][ T4753] device veth1_vlan left promiscuous mode [ 108.588974][ T4753] device veth0_vlan left promiscuous mode [ 108.596138][ T4753] device veth1_macvtap left promiscuous mode [ 108.602388][ T3833] appleir 0003:05AC:8243.0002: unknown main item tag 0x0 [ 108.603095][ T4753] device veth0_macvtap left promiscuous mode [ 108.610133][ T3833] appleir 0003:05AC:8243.0002: No inputs registered, leaving [ 108.616015][ T4753] device veth1_vlan left promiscuous mode [ 108.631691][ T4753] device veth0_vlan left promiscuous mode [ 108.642634][ T4753] device veth1_macvtap left promiscuous mode [ 108.649058][ T4753] device veth0_macvtap left promiscuous mode [ 108.650122][ T3833] appleir 0003:05AC:8243.0002: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 108.660200][ T4753] device veth1_vlan left promiscuous mode [ 108.672954][ T4753] device veth0_vlan left promiscuous mode [ 108.916742][ T4566] usb 2-1: USB disconnect, device number 3 [ 109.181978][ T4753] team0 (unregistering): Port device team_slave_1 removed [ 109.196216][ T4753] team0 (unregistering): Port device team_slave_0 removed [ 109.213779][ T4753] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 109.232362][ T4753] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 109.294954][ T4753] bond0 (unregistering): Released all slaves [ 109.435110][ T4753] team0 (unregistering): Port device team_slave_1 removed [ 109.453665][ T4753] team0 (unregistering): Port device team_slave_0 removed [ 109.486789][ T4753] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 109.528804][ T4753] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 109.673379][ T4753] bond0 (unregistering): Released all slaves [ 109.916447][ T4753] team0 (unregistering): Port device team_slave_1 removed [ 109.932608][ T4753] team0 (unregistering): Port device team_slave_0 removed [ 109.966485][ T4753] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 109.990048][ T4753] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 110.053553][ T4753] bond0 (unregistering): Released all slaves [ 110.207393][ T4753] team0 (unregistering): Port device team_slave_1 removed [ 110.222133][ T4753] team0 (unregistering): Port device team_slave_0 removed [ 110.234845][ T4753] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 110.249379][ T4753] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 110.270615][ T4566] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 110.320678][ T4753] bond0 (unregistering): Released all slaves [ 110.410795][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 110.433141][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 110.461566][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 110.473781][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 110.491266][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 110.499742][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 110.518353][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 110.551286][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 110.568185][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 110.587170][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 110.612035][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 110.622178][ T4879] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 110.646078][ T4843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.690611][ T4566] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 110.719011][ T4566] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 110.745384][ T4566] usb 2-1: config 1 interface 0 has no altsetting 0 [ 110.794928][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 110.806914][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 110.831979][ T4843] device veth0_vlan entered promiscuous mode [ 110.873560][ T3562] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 110.886480][ T3562] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 110.907312][ T3562] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 110.926364][ T3562] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 110.940761][ T4566] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 110.942858][ T3562] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 110.976157][ T3562] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 110.990542][ T4566] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.002177][ T4566] usb 2-1: Product: syz [ 111.003947][ T4843] device veth1_vlan entered promiscuous mode [ 111.008222][ T4566] usb 2-1: Manufacturer: syz [ 111.024340][ T4566] usb 2-1: SerialNumber: syz [ 111.028175][ T4858] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.148932][ T4843] device veth0_macvtap entered promiscuous mode [ 111.247292][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 111.258825][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 111.267503][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 111.277027][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 111.286255][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 111.296791][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 111.339284][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 111.509527][ T4566] usb 2-1: USB disconnect, device number 4 [ 112.203577][ T4843] device veth1_macvtap entered promiscuous mode [ 112.282207][ T4879] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.299497][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 112.308571][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 112.316162][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 112.379117][ T4566] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 112.409724][ T4566] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 112.447015][ T4858] device veth0_vlan entered promiscuous mode [ 112.463131][ T4843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.530445][ T4843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.540286][ T4843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.619394][ T4843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.640023][ T4843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.666526][ T3563] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 112.682092][ T3563] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 112.701578][ T3563] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 112.718558][ T3563] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 112.744682][ T4843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.776391][ T4843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.806518][ T4843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.828625][ T4843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.854786][ T4843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.878687][ T4858] device veth1_vlan entered promiscuous mode [ 112.891400][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 112.899567][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 112.909745][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 112.921574][ T4843] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.930294][ T4843] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.954096][ T4843] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.968194][ T4843] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.073074][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 113.083824][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 113.101806][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 113.119354][ T4858] device veth0_macvtap entered promiscuous mode [ 113.166981][ T4566] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 113.189207][ T4566] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 113.223887][ T4566] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 113.270676][ T4858] device veth1_macvtap entered promiscuous mode [ 113.316309][ T4566] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 113.366295][ T4858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.413054][ T4858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.439247][ T4858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.467298][ T4858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.521859][ T4858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.551319][ T4858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.606867][ T4858] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 113.628896][ T4879] device veth0_vlan entered promiscuous mode [ 113.636086][ T1448] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.663862][ T3833] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 113.682307][ T3833] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 113.702341][ T1448] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.711078][ T3833] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 113.719604][ T3833] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 113.762452][ T4858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.788939][ T4858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.807616][ T4858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.826019][ T4858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.844340][ T4858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.863060][ T4858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.885336][ T4858] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.920747][ T4879] device veth1_vlan entered promiscuous mode [ 113.963187][ T3833] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 113.973283][ T3833] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 113.989320][ T3833] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 113.999783][ T3833] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 114.009040][ T3833] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 114.024946][ T3833] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 114.053745][ T4858] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.085547][ T4858] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.103893][ T4858] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.126879][ T4858] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.178970][ T3941] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.250659][ T3941] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.286404][ T4879] device veth0_macvtap entered promiscuous mode [ 114.372335][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 114.384264][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 114.411211][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 114.432525][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 114.482609][ T4879] device veth1_macvtap entered promiscuous mode [ 114.546589][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 114.546603][ T3941] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.619420][ T4879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.646055][ T3941] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.664916][ T4879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.708164][ T4879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.744928][ T4879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.765543][ T4879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.789700][ T4879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.807399][ T4879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.834228][ T4879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.872117][ T4879] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 114.916776][ T3833] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 114.939685][ T3833] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 114.979500][ T3833] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 115.007100][ T3941] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.017502][ T4879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.035995][ T3941] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.052441][ T4879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.096900][ T4879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.125158][ T4879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.155475][ T4879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.196871][ T4879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.229331][ T4879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.265569][ T4879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.366581][ T4879] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.413357][ T4566] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 115.428908][ T4566] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 115.459654][ T4566] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 115.506533][ T4879] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.530355][ T4879] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.570563][ T4879] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.606187][ T4879] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.810635][ T4510] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 115.915001][ T3941] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.961948][ T3941] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.046352][ T1448] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.054968][ T4566] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 116.080166][ T1448] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.080618][ T4510] usb 1-1: Using ep0 maxpacket: 8 [ 116.160305][ T4566] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 116.301911][ T5229] loop4: detected capacity change from 0 to 256 [ 116.410694][ T4510] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0038, bcdDevice=7d.78 [ 116.439701][ T4510] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.513044][ T4510] usb 1-1: Product: syz [ 116.533557][ T4510] usb 1-1: Manufacturer: syz [ 116.607470][ C1] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. [ 116.634795][ T4510] usb 1-1: SerialNumber: syz [ 116.664958][ T4510] usb 1-1: config 0 descriptor?? [ 116.736628][ T4510] dvb-usb: found a 'TerraTec/qanu USB2.0 Highspeed DVB-T Receiver' in warm state. [ 116.757841][ T4510] dvb-usb: bulk message failed: -22 (2/0) [ 116.794922][ T4510] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 116.853671][ T4510] dvbdev: DVB: registering new adapter (TerraTec/qanu USB2.0 Highspeed DVB-T Receiver) [ 116.957747][ T4510] usb 1-1: media controller created [ 117.065879][ T4510] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 117.104569][ T26] audit: type=1326 audit(1717439238.952:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5246 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4a7c90ee9 code=0x7ffc0000 [ 117.150143][ T4510] dvb-usb: bulk message failed: -22 (1/0) [ 117.170943][ T4510] dvb-usb: no frontend was attached by 'TerraTec/qanu USB2.0 Highspeed DVB-T Receiver' [ 117.195572][ T26] audit: type=1326 audit(1717439238.952:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5246 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe4a7c92c67 code=0x7ffc0000 [ 117.254554][ T26] audit: type=1326 audit(1717439238.952:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5246 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4a7c90ee9 code=0x7ffc0000 [ 117.280103][ T4510] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input10 [ 117.299663][ T4510] dvb-usb: schedule remote query interval to 50 msecs. [ 117.307336][ T26] audit: type=1326 audit(1717439238.952:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5246 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fe4a7c90ee9 code=0x7ffc0000 [ 117.332809][ T4510] dvb-usb: bulk message failed: -22 (2/0) [ 117.338755][ T4510] dvb-usb: TerraTec/qanu USB2.0 Highspeed DVB-T Receiver successfully initialized and connected. [ 117.353177][ T4510] usb 1-1: USB disconnect, device number 5 [ 117.368646][ T26] audit: type=1326 audit(1717439238.952:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5246 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4a7c90ee9 code=0x7ffc0000 [ 117.400783][ T3757] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 117.401189][ T3833] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 117.435357][ T26] audit: type=1326 audit(1717439238.952:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5246 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4a7c90ee9 code=0x7ffc0000 [ 117.512732][ T4510] dvb-usb: TerraTec/qanu USB2.0 Highspeed DVB-T Re successfully deinitialized and disconnected. [ 117.590708][ T4566] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 117.623466][ T26] audit: type=1800 audit(1717439239.472:48): pid=5258 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=1965 res=0 errno=0 [ 117.710909][ T3833] usb 3-1: Using ep0 maxpacket: 32 [ 117.716059][ T5261] loop3: detected capacity change from 0 to 256 [ 117.810595][ T3757] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.827530][ T3757] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 117.848185][ T3757] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 117.870883][ T3833] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.873011][ T3757] usb 5-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.10 [ 117.892131][ T3833] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 117.908319][ T3757] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.920387][ T3757] usb 5-1: config 0 descriptor?? [ 117.929931][ T3833] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 117.960090][ T3833] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.989831][ T3833] usb 3-1: config 0 descriptor?? [ 118.000745][ T4566] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.019275][ T4566] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.041576][ T3833] hub 3-1:0.0: USB hub found [ 118.058913][ T4566] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 118.110059][ T4566] usb 2-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.10 [ 118.149639][ T4566] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.210898][ T4566] usb 2-1: config 0 descriptor?? [ 118.260697][ T3833] hub 3-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 118.412749][ T3757] prodikeys 0003:041E:2801.0003: unexpected long global item [ 118.435092][ T3757] prodikeys 0003:041E:2801.0003: hid parse failed [ 118.468781][ T3757] prodikeys: probe of 0003:041E:2801.0003 failed with error -22 [ 118.621203][ T3757] usb 5-1: USB disconnect, device number 4 [ 118.660734][ T3833] usbhid 3-1:0.0: can't add hid device: -71 [ 118.673793][ T3833] usbhid: probe of 3-1:0.0 failed with error -71 [ 118.702635][ T4566] prodikeys 0003:041E:2801.0004: unexpected long global item [ 118.724908][ T4566] prodikeys 0003:041E:2801.0004: hid parse failed [ 118.744692][ T4566] prodikeys: probe of 0003:041E:2801.0004 failed with error -22 [ 118.754797][ T3833] usb 3-1: USB disconnect, device number 3 [ 118.903276][ T1065] usb 2-1: USB disconnect, device number 5 [ 119.220545][ T3563] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 120.301597][ T3563] usb 1-1: Using ep0 maxpacket: 32 [ 120.620682][ T1065] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 120.629687][ T3563] usb 1-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 120.650727][ T3563] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.692599][ T3563] usb 1-1: Product: syz [ 120.720581][ T3563] usb 1-1: Manufacturer: syz [ 120.725245][ T3563] usb 1-1: SerialNumber: syz [ 120.753687][ T3563] usb 1-1: config 0 descriptor?? [ 120.890576][ T1065] usb 3-1: Using ep0 maxpacket: 16 [ 121.030965][ T1065] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 121.070457][ T1065] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 121.097364][ T1065] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 121.150531][ T1065] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 121.177210][ T1065] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.217205][ T1065] usb 3-1: config 0 descriptor?? [ 121.427279][ T5297] input: syz1 as /devices/virtual/input/input11 [ 121.481313][ T3563] rtl8150 1-1:0.0: eth1: rtl8150 is detected [ 121.671649][ T3563] usb 1-1: USB disconnect, device number 6 [ 121.702576][ T1065] microsoft 0003:045E:07DA.0005: unknown main item tag 0x7 [ 121.709877][ T1065] microsoft 0003:045E:07DA.0005: unknown main item tag 0x3 [ 121.743917][ T26] audit: type=1326 audit(1717439243.592:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5303 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe966220ee9 code=0x7ffc0000 [ 121.759906][ T1065] microsoft 0003:045E:07DA.0005: unknown main item tag 0x7 [ 121.814796][ T1065] microsoft 0003:045E:07DA.0005: item fetching failed at offset 31/34 [ 121.836597][ T26] audit: type=1326 audit(1717439243.592:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5303 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe966220ee9 code=0x7ffc0000 [ 121.859421][ C1] vkms_vblank_simulate: vblank timer overrun [ 121.869556][ T1065] microsoft 0003:045E:07DA.0005: parse failed [ 121.888010][ T1065] microsoft: probe of 0003:045E:07DA.0005 failed with error -22 [ 121.949450][ T26] audit: type=1326 audit(1717439243.622:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5303 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe966220ee9 code=0x7ffc0000 [ 121.996086][ T3757] usb 3-1: USB disconnect, device number 4 [ 122.041431][ T5307] overlayfs: failed to resolve './file1': -2 [ 122.532329][ T3563] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 122.595299][ T26] kauditd_printk_skb: 5 callbacks suppressed [ 122.595313][ T26] audit: type=1804 audit(1717439244.432:57): pid=5340 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir820813398/syzkaller.RiXThD/10/bus" dev="sda1" ino=1951 res=1 errno=0 [ 122.626624][ C1] vkms_vblank_simulate: vblank timer overrun [ 122.952707][ T26] audit: type=1800 audit(1717439244.482:58): pid=5340 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1951 res=0 errno=0 [ 123.040715][ T3563] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.070527][ T3563] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 123.095839][ T3563] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 123.119772][ T4753] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.179581][ T3563] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.189836][ T3563] usb 2-1: config 0 descriptor?? [ 123.288403][ T4753] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.431909][ T4753] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.635942][ T4753] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.008636][ T5357] chnl_net:caif_netlink_parms(): no params data found [ 124.140607][ T3563] usb 2-1: string descriptor 0 read error: -71 [ 124.160565][ T3563] uclogic 0003:256C:006D.0006: failed retrieving string descriptor #200: -71 [ 124.207084][ T3563] uclogic 0003:256C:006D.0006: failed retrieving pen parameters: -71 [ 124.245108][ T3563] uclogic 0003:256C:006D.0006: failed probing pen v2 parameters: -71 [ 124.286213][ T3563] uclogic 0003:256C:006D.0006: failed probing parameters: -71 [ 124.310755][ T3563] uclogic: probe of 0003:256C:006D.0006 failed with error -71 [ 124.358526][ T3563] usb 2-1: USB disconnect, device number 6 [ 124.552946][ T5357] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.560115][ T5357] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.569012][ T5357] device bridge_slave_0 entered promiscuous mode [ 124.578028][ T5357] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.596490][ T5357] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.674116][ T5357] device bridge_slave_1 entered promiscuous mode [ 124.815517][ T5357] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 124.824933][ T4564] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 124.898527][ T5357] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 124.964962][ T5357] team0: Port device team_slave_0 added [ 124.981450][ T5357] team0: Port device team_slave_1 added [ 125.069000][ T5357] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 125.080995][ T5357] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 125.133903][ T5357] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 125.182229][ T5357] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 125.190697][ T4510] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 125.197088][ T5357] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 125.238038][ T5357] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 125.240834][ T3757] Bluetooth: hci0: command 0x0409 tx timeout [ 125.249534][ T4564] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.275736][ T4564] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 125.313439][ T4564] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 125.335492][ T4564] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.356590][ T4564] usb 4-1: config 0 descriptor?? [ 125.416086][ T5357] device hsr_slave_0 entered promiscuous mode [ 125.429370][ T5357] device hsr_slave_1 entered promiscuous mode [ 125.450617][ T4510] usb 1-1: Using ep0 maxpacket: 32 [ 125.730817][ T4510] usb 1-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 125.739890][ T4510] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.764958][ T4510] usb 1-1: Product: syz [ 125.769158][ T4510] usb 1-1: Manufacturer: syz [ 125.778956][ T4510] usb 1-1: SerialNumber: syz [ 125.824862][ T4510] usb 1-1: config 0 descriptor?? [ 125.857812][ T4753] device hsr_slave_0 left promiscuous mode [ 125.876615][ T4753] device hsr_slave_1 left promiscuous mode [ 125.903257][ T4753] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 125.931311][ T4753] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 125.953920][ T4753] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 125.985032][ T4753] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 126.026662][ T4753] device bridge_slave_1 left promiscuous mode [ 126.033505][ T4753] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.069578][ T4753] device bridge_slave_0 left promiscuous mode [ 126.080125][ T4753] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.149640][ T4753] device veth1_macvtap left promiscuous mode [ 126.169106][ T4753] device veth0_macvtap left promiscuous mode [ 126.212941][ T4753] device veth1_vlan left promiscuous mode [ 126.224099][ T4753] device veth0_vlan left promiscuous mode [ 126.492450][ T4753] team0 (unregistering): Port device team_slave_1 removed [ 126.507056][ T4753] team0 (unregistering): Port device team_slave_0 removed [ 126.525280][ T4753] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 126.544050][ T4753] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 126.613987][ T4753] bond0 (unregistering): Released all slaves [ 126.700592][ T4564] uclogic 0003:256C:006D.0007: failed retrieving string descriptor #100: -71 [ 126.704833][ T4510] rtl8150 1-1:0.0: eth3: rtl8150 is detected [ 126.718317][ T4564] uclogic 0003:256C:006D.0007: failed retrieving pen parameters: -71 [ 126.730196][ T4564] uclogic 0003:256C:006D.0007: failed probing pen v1 parameters: -71 [ 126.757323][ T4564] uclogic 0003:256C:006D.0007: failed probing parameters: -71 [ 126.769458][ T4510] usb 1-1: USB disconnect, device number 7 [ 126.780610][ T4564] uclogic: probe of 0003:256C:006D.0007 failed with error -71 [ 126.807304][ T4564] usb 4-1: USB disconnect, device number 4 [ 127.212940][ T3757] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 127.244069][ T5357] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 127.320841][ T4510] Bluetooth: hci0: command 0x041b tx timeout [ 127.328085][ T5357] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 127.379221][ T5357] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 127.421444][ T5357] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 127.600808][ T3757] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.636419][ T3757] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.690188][ T3757] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 127.717939][ T5484] loop0: detected capacity change from 0 to 256 [ 127.760239][ T3757] usb 3-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.10 [ 127.790262][ T5357] 8021q: adding VLAN 0 to HW filter on device bond0 [ 127.801441][ T3757] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.814139][ T3757] usb 3-1: config 0 descriptor?? [ 127.867686][ T3833] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 127.884637][ T3833] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 127.902627][ T5484] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 127.910273][ T5357] 8021q: adding VLAN 0 to HW filter on device team0 [ 127.942351][ T5495] loop3: detected capacity change from 0 to 16 [ 127.963732][ T3587] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 127.982064][ T3587] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 128.009714][ T3587] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.016901][ T3587] bridge0: port 1(bridge_slave_0) entered forwarding state [ 128.069588][ T4566] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 128.077267][ T3833] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 128.090109][ T5495] erofs: (device loop3): mounted with root inode @ nid 36. [ 128.106690][ T4566] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 128.133409][ T4566] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 128.159346][ T4566] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.166508][ T4566] bridge0: port 2(bridge_slave_1) entered forwarding state [ 128.193013][ T4566] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 128.212661][ T4566] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 128.259293][ T3563] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 128.279601][ T3563] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 128.296020][ T3563] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 128.305094][ T3563] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 128.314059][ T3563] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 128.315441][ T3757] prodikeys 0003:041E:2801.0008: unexpected long global item [ 128.324801][ T3563] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 128.339312][ T4566] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 128.350943][ T3757] prodikeys 0003:041E:2801.0008: hid parse failed [ 128.354696][ T5357] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 128.357429][ T3757] prodikeys: probe of 0003:041E:2801.0008 failed with error -22 [ 128.381737][ T5357] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 128.392707][ T3563] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 128.421699][ T3563] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 128.501350][ T3833] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 128.501377][ T3833] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 128.530730][ T1065] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 128.551726][ T3758] usb 3-1: USB disconnect, device number 5 [ 128.691306][ T3833] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 128.713565][ T3833] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.729890][ T3833] usb 2-1: Product: syz [ 128.736935][ T3833] usb 2-1: Manufacturer: syz [ 128.747319][ T3833] usb 2-1: SerialNumber: syz [ 128.749718][ T5357] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 128.775344][ T3757] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 128.790732][ T3757] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 128.810659][ T1065] usb 1-1: Using ep0 maxpacket: 32 [ 129.114518][ T3833] usb 2-1: USB disconnect, device number 7 [ 129.140824][ T1065] usb 1-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 129.155574][ T1065] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.213409][ T1065] usb 1-1: Product: syz [ 129.238447][ T1065] usb 1-1: Manufacturer: syz [ 129.255250][ T1065] usb 1-1: SerialNumber: syz [ 129.285623][ T1065] usb 1-1: config 0 descriptor?? [ 129.291594][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 129.310245][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 129.366362][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 129.389187][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 129.432885][ T5357] device veth0_vlan entered promiscuous mode [ 129.446247][ T3757] Bluetooth: hci0: command 0x040f tx timeout [ 129.467302][ T3757] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 129.487532][ T3757] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 129.519363][ T5357] device veth1_vlan entered promiscuous mode [ 129.608591][ T3757] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 129.610651][ T3563] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 129.631429][ T3757] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 129.669173][ T3757] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 129.695987][ T3757] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 129.745315][ T5357] device veth0_macvtap entered promiscuous mode [ 129.777434][ T5357] device veth1_macvtap entered promiscuous mode [ 129.816518][ T5357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.839084][ T5357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.870155][ T5357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.897187][ T5357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.907435][ T3563] usb 4-1: Using ep0 maxpacket: 32 [ 129.934293][ T5357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.958324][ T5357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.987513][ T5357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.016727][ T5357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.051680][ T5357] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 130.076408][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 130.094112][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 130.120172][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 130.157722][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 130.208455][ T1065] rtl8150 1-1:0.0: eth1: rtl8150 is detected [ 130.215989][ T5357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.262849][ T1065] usb 1-1: USB disconnect, device number 8 [ 130.264941][ T5357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.289604][ T3563] usb 4-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 130.315564][ T3563] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.321207][ T5357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.344141][ T3563] usb 4-1: Product: syz [ 130.354261][ T3563] usb 4-1: Manufacturer: syz [ 130.370620][ T5357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.373436][ T3563] usb 4-1: SerialNumber: syz [ 130.406688][ T3563] usb 4-1: config 0 descriptor?? [ 130.412765][ T5357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.454425][ T5357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.487697][ T5357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.521050][ T5357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.556421][ T5357] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 130.610640][ T3757] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 130.619217][ T3757] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 130.686821][ T5357] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.704417][ T5357] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.757400][ T5357] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.799863][ T5357] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.961353][ T5597] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 131.014275][ T5597] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 131.111322][ T4754] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.119538][ T4754] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.127888][ T3563] (unnamed net_device) (uninitialized): Assigned a random MAC address: 3e:fb:b0:2e:af:93 [ 131.202275][ T3563] rtl8150 4-1:0.0: eth1: rtl8150 is detected [ 131.210668][ T3757] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 131.240565][ T1065] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 131.250053][ T3563] usb 4-1: USB disconnect, device number 5 [ 131.314571][ T4754] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.356944][ T4754] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.400928][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 131.480696][ T4510] Bluetooth: hci0: command 0x0419 tx timeout [ 131.680930][ T1065] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.710122][ T1065] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 131.776499][ T1065] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 131.835060][ T5632] loop1: detected capacity change from 0 to 512 [ 131.869541][ T1065] usb 1-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.10 [ 131.917191][ T5638] loop2: detected capacity change from 0 to 512 [ 131.918248][ T1065] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.991706][ T1065] usb 1-1: config 0 descriptor?? [ 132.052594][ T5638] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 132.124425][ T5638] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz-executor.2: inode #1: comm syz-executor.2: iget: illegal inode # [ 132.147971][ T5632] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 132.185464][ T5644] loop3: detected capacity change from 0 to 1764 [ 132.194554][ T5632] ext4 filesystem being mounted at /root/syzkaller-testdir1787931066/syzkaller.gsSNw0/129/file0 supports timestamps until 2038 (0x7fffffff) [ 132.238353][ T5638] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz-executor.2: error while reading EA inode 1 err=-117 [ 132.264561][ T5638] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 132.289505][ T5638] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz-executor.2: inode #1: comm syz-executor.2: iget: illegal inode # [ 132.314556][ T5638] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz-executor.2: error while reading EA inode 1 err=-117 [ 132.355847][ T5644] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 132.430160][ T5644] ISOFS: unable to read i-node block [ 132.442011][ T5644] isofs_fill_super: get root inode failed [ 132.448545][ T5638] EXT4-fs (loop2): 1 orphan inode deleted [ 132.464140][ T5638] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,journal_dev=0x0000000000008000,debug_want_extra_isize=0x000000000000004c,minixdf,resgid=0x0000000000000000,nomblk_io_submit,usrjquota=,,errors=continue. Quota mode: none. [ 132.493844][ T1065] prodikeys 0003:041E:2801.0009: unexpected long global item [ 132.518287][ T1065] prodikeys 0003:041E:2801.0009: hid parse failed [ 132.535142][ T1065] prodikeys: probe of 0003:041E:2801.0009 failed with error -22 [ 132.696259][ T5644] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=4091629214 (65466067424 ns) > initial count (185248 ns). Using initial count to start timer. [ 132.750362][ T26] audit: type=1804 audit(1717439254.592:59): pid=5638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir1567903055/syzkaller.9l8apX/30/file0/file0/bus" dev="loop2" ino=15 res=1 errno=0 [ 132.781490][ T4504] usb 1-1: USB disconnect, device number 9 [ 132.842256][ T1374] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.848624][ T1374] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.218545][ T5664] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 133.505801][ T5666] loop2: detected capacity change from 0 to 2048 [ 133.655818][ T5666] Alternate GPT is invalid, using primary GPT. [ 133.681353][ T5666] loop2: p1 p2 p3 [ 133.720564][ T4509] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 133.913092][ T5682] loop4: detected capacity change from 0 to 512 [ 133.970659][ T4509] usb 1-1: Using ep0 maxpacket: 32 [ 134.035188][ T5682] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 134.060775][ T5682] ext4 filesystem being mounted at /root/syzkaller-testdir3016624180/syzkaller.aMLxbZ/2/file0 supports timestamps until 2038 (0x7fffffff) [ 134.081976][ T5688] loop3: detected capacity change from 0 to 512 [ 134.136194][ T5695] loop2: detected capacity change from 0 to 1764 [ 134.194555][ T5688] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 134.218042][ T5695] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 134.256673][ T4509] usb 1-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 134.273015][ T4509] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.277947][ T5695] ISOFS: unable to read i-node block [ 134.286590][ T5695] isofs_fill_super: get root inode failed [ 134.298817][ T5688] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz-executor.3: inode #1: comm syz-executor.3: iget: illegal inode # [ 134.324085][ T4509] usb 1-1: Product: syz [ 134.355859][ T5688] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz-executor.3: error while reading EA inode 1 err=-117 [ 134.360352][ T4509] usb 1-1: Manufacturer: syz [ 134.374512][ T5688] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz-executor.3: inode #1: comm syz-executor.3: iget: illegal inode # [ 134.404768][ T5688] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz-executor.3: error while reading EA inode 1 err=-117 [ 134.430800][ T5688] EXT4-fs (loop3): 1 orphan inode deleted [ 134.461887][ T3516] udevd[3516]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 134.464082][ T5688] EXT4-fs (loop3): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,journal_dev=0x0000000000008000,debug_want_extra_isize=0x000000000000004c,minixdf,resgid=0x0000000000000000,nomblk_io_submit,usrjquota=,,errors=continue. Quota mode: none. [ 134.501000][ T4509] usb 1-1: SerialNumber: syz [ 134.527475][ T4509] usb 1-1: config 0 descriptor?? [ 134.557078][ T26] audit: type=1804 audit(1717439256.402:60): pid=5688 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir820813398/syzkaller.RiXThD/33/file0/file0/bus" dev="loop3" ino=15 res=1 errno=0 [ 134.604549][ T5705] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 134.632539][ T5692] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=4091629214 (65466067424 ns) > initial count (185248 ns). Using initial count to start timer. [ 134.761022][ T4566] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 134.811450][ T5710] loop2: detected capacity change from 0 to 1024 [ 134.859437][ T26] audit: type=1800 audit(1717439256.702:61): pid=5713 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=1964 res=0 errno=0 [ 134.882890][ T5710] hfsplus: unable to parse mount options [ 134.897335][ T5710] Disabled LAPIC found during irq injection [ 135.000200][ T5716] loop2: detected capacity change from 0 to 256 [ 135.010736][ T4510] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 135.098737][ T5716] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 135.190598][ T4566] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 135.201826][ T4566] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 135.212561][ T4566] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 135.226016][ T4566] usb 5-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.10 [ 135.250587][ T4509] (unnamed net_device) (uninitialized): Assigned a random MAC address: 1e:8d:01:b2:2e:a0 [ 135.256868][ T4566] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.260631][ T4510] usb 4-1: Using ep0 maxpacket: 32 [ 135.281808][ T4566] usb 5-1: config 0 descriptor?? [ 135.296394][ T4509] rtl8150 1-1:0.0: eth1: rtl8150 is detected [ 135.313122][ T4509] usb 1-1: USB disconnect, device number 10 [ 135.570762][ T4510] usb 4-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 135.579853][ T4510] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.607353][ T4510] usb 4-1: Product: syz [ 135.614592][ T4510] usb 4-1: Manufacturer: syz [ 135.619264][ T4510] usb 4-1: SerialNumber: syz [ 135.633522][ T4510] usb 4-1: config 0 descriptor?? [ 135.772272][ T4566] prodikeys 0003:041E:2801.000A: unexpected long global item [ 135.780041][ T4566] prodikeys 0003:041E:2801.000A: hid parse failed [ 135.810510][ T26] audit: type=1326 audit(1717439257.652:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5721 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4a7c90ee9 code=0x7ffc0000 [ 135.850774][ T4566] prodikeys: probe of 0003:041E:2801.000A failed with error -22 [ 135.877477][ T26] audit: type=1326 audit(1717439257.702:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5721 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe4a7c90ee9 code=0x7ffc0000 [ 135.885006][ T5724] loop0: detected capacity change from 0 to 512 [ 135.907988][ T26] audit: type=1326 audit(1717439257.712:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5721 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4a7c90ee9 code=0x7ffc0000 [ 135.939990][ T26] audit: type=1326 audit(1717439257.712:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5721 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fe4a7c90ee9 code=0x7ffc0000 [ 136.000705][ T3833] usb 5-1: USB disconnect, device number 5 [ 136.036414][ T26] audit: type=1326 audit(1717439257.712:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5721 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4a7c90ee9 code=0x7ffc0000 [ 136.117504][ T5724] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 136.159061][ T5724] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 136.199501][ T5724] EXT4-fs (loop0): 1 truncate cleaned up [ 136.218161][ T5724] EXT4-fs (loop0): mounted filesystem without journal. Opts: noload,mblk_io_submit,debug_want_extra_isize=0x000000000000002e,auto_da_alloc,block_validity,nobarrier,,errors=continue. Quota mode: none. [ 136.311262][ T26] audit: type=1804 audit(1717439258.162:67): pid=5724 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1480745875/syzkaller.fyOg7T/40/bus/bus" dev="loop0" ino=18 res=1 errno=0 [ 136.369011][ T4510] rtl8150 4-1:0.0: eth1: rtl8150 is detected [ 136.561856][ T3833] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 136.577496][ T4509] usb 4-1: USB disconnect, device number 6 [ 136.991627][ T3833] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 137.011311][ T5757] loop4: detected capacity change from 0 to 512 [ 137.023909][ T3833] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 137.180824][ T5757] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 137.202228][ T5757] ext4 filesystem being mounted at /root/syzkaller-testdir3016624180/syzkaller.aMLxbZ/7/file0 supports timestamps until 2038 (0x7fffffff) [ 137.231010][ T3833] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 137.274682][ T3833] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.351031][ T3833] usb 2-1: Product: syz [ 137.355237][ T3833] usb 2-1: Manufacturer: syz [ 137.359853][ T3833] usb 2-1: SerialNumber: syz [ 137.634003][ T26] audit: type=1800 audit(1717439259.482:68): pid=5783 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=1965 res=0 errno=0 [ 137.851681][ T3833] usb 2-1: USB disconnect, device number 8 [ 137.977354][ T3516] udevd[3516]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 138.231641][ T5788] loop2: detected capacity change from 0 to 1764 [ 138.305706][ T5788] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 138.366810][ T5788] ISOFS: unable to read i-node block [ 138.389855][ T5788] isofs_fill_super: get root inode failed [ 138.669037][ T5788] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=4091629214 (65466067424 ns) > initial count (185248 ns). Using initial count to start timer. [ 138.727737][ T5796] loop3: detected capacity change from 0 to 512 [ 138.790819][ T5796] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 138.804958][ T5800] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 138.838967][ T5796] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 138.905555][ T5796] EXT4-fs (loop3): 1 truncate cleaned up [ 138.911567][ T5796] EXT4-fs (loop3): mounted filesystem without journal. Opts: noload,mblk_io_submit,debug_want_extra_isize=0x000000000000002e,auto_da_alloc,block_validity,nobarrier,,errors=continue. Quota mode: none. [ 138.942909][ T26] audit: type=1804 audit(1717439260.792:69): pid=5796 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir820813398/syzkaller.RiXThD/37/bus/bus" dev="loop3" ino=18 res=1 errno=0 [ 139.049713][ T5809] loop1: detected capacity change from 0 to 1024 [ 139.110351][ T26] audit: type=1326 audit(1717439260.952:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5813 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9e9787ee9 code=0x7ffc0000 [ 139.137456][ T5809] hfsplus: unable to parse mount options [ 139.256495][ T5809] Disabled LAPIC found during irq injection [ 139.307729][ T26] audit: type=1326 audit(1717439260.962:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5813 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7ff9e9787ee9 code=0x7ffc0000 [ 139.499721][ T26] audit: type=1326 audit(1717439260.962:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5813 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9e9787ee9 code=0x7ffc0000 [ 139.580702][ T4509] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 139.646856][ T26] audit: type=1326 audit(1717439260.962:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5813 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7ff9e9787ee9 code=0x7ffc0000 [ 139.785532][ T26] audit: type=1326 audit(1717439260.962:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5813 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9e9787ee9 code=0x7ffc0000 [ 139.865577][ T5831] loop1: detected capacity change from 0 to 1764 [ 139.877941][ T5835] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 139.924852][ T26] audit: type=1326 audit(1717439260.962:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5813 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff9e9787ee9 code=0x7ffc0000 [ 139.961900][ T4509] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 139.972267][ T5831] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 139.983649][ T4509] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 139.995651][ T5831] ISOFS: unable to read i-node block [ 140.004743][ T5831] isofs_fill_super: get root inode failed [ 140.020137][ T26] audit: type=1326 audit(1717439260.982:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5813 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9e9787ee9 code=0x7ffc0000 [ 140.043449][ T26] audit: type=1326 audit(1717439260.982:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5813 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9e9787ee9 code=0x7ffc0000 [ 140.068595][ T26] audit: type=1326 audit(1717439261.002:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5813 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff9e9787ee9 code=0x7ffc0000 [ 140.170798][ T4509] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 140.188814][ T4509] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.220562][ T4509] usb 1-1: Product: syz [ 140.237552][ T4509] usb 1-1: Manufacturer: syz [ 140.286674][ T4509] usb 1-1: SerialNumber: syz [ 140.634708][ T4509] usb 1-1: USB disconnect, device number 11 [ 140.696116][ T5858] loop3: detected capacity change from 0 to 512 [ 140.845381][ T5858] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 140.868436][ T5858] ext4 filesystem being mounted at /root/syzkaller-testdir820813398/syzkaller.RiXThD/43/file0 supports timestamps until 2038 (0x7fffffff) [ 141.067765][ T5870] loop1: detected capacity change from 0 to 1024 [ 141.224961][ T5870] hfsplus: unable to parse mount options [ 141.404306][ T5867] Disabled LAPIC found during irq injection [ 141.551779][ T5878] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 142.054543][ T5891] loop4: detected capacity change from 0 to 1764 [ 142.195364][ T5891] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 142.221637][ T5891] ISOFS: unable to read i-node block [ 142.234872][ T5891] isofs_fill_super: get root inode failed [ 142.576314][ T5908] loop2: detected capacity change from 0 to 1024 [ 142.600534][ T4504] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 142.659814][ T5908] hfsplus: unable to parse mount options [ 142.765836][ T5914] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 142.835837][ T5917] loop2: detected capacity change from 0 to 164 [ 142.960986][ T4504] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 142.973295][ T4504] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 143.150733][ T4504] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 143.169618][ T4504] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.190915][ T4504] usb 1-1: Product: syz [ 143.197966][ T4504] usb 1-1: Manufacturer: syz [ 143.202916][ T4504] usb 1-1: SerialNumber: syz [ 143.307552][ T5938] loop3: detected capacity change from 0 to 1024 [ 143.386872][ T5941] loop1: detected capacity change from 0 to 1764 [ 143.404125][ T5938] hfsplus: unable to parse mount options [ 143.460090][ T5941] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 143.519307][ T5941] ISOFS: unable to read i-node block [ 143.536738][ T4504] usb 1-1: USB disconnect, device number 12 [ 143.548978][ T5946] loop2: detected capacity change from 0 to 512 [ 143.557461][ T5941] isofs_fill_super: get root inode failed [ 143.652247][ T5951] loop3: detected capacity change from 0 to 1024 [ 143.700065][ T5946] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 143.741207][ T5951] EXT4-fs (loop3): Ignoring removed orlov option [ 143.750655][ T5946] ext4 filesystem being mounted at /root/syzkaller-testdir1567903055/syzkaller.9l8apX/48/file0 supports timestamps until 2038 (0x7fffffff) [ 143.814972][ T5951] EXT4-fs (loop3): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000000,dioread_lock,data_err=abort,jqfmt=vfsv1,debug_want_extra_isize=0x0000000000000080,noinit_itable,orlov,bsdgroups,abort,user_xattr,quota,,errors=continue. Quota mode: writeback. [ 143.973870][ T3513] udevd[3513]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 144.212620][ T26] kauditd_printk_skb: 61 callbacks suppressed [ 144.212640][ T26] audit: type=1800 audit(1717439266.062:140): pid=5951 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 144.396597][ T5965] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 144.474622][ T5965] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 144.749833][ T26] audit: type=1326 audit(1717439266.592:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5975 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9e9787ee9 code=0x7ffc0000 [ 144.827541][ T26] audit: type=1326 audit(1717439266.592:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5975 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9e9787ee9 code=0x7ffc0000 [ 144.861363][ T5979] loop1: detected capacity change from 0 to 1024 [ 144.895749][ T5979] hfsplus: unable to parse mount options [ 144.902940][ T26] audit: type=1326 audit(1717439266.622:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5975 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff9e9787ee9 code=0x7ffc0000 [ 144.902965][ T26] audit: type=1326 audit(1717439266.622:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5975 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9e9787ee9 code=0x7ffc0000 [ 144.902982][ T26] audit: type=1326 audit(1717439266.622:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5975 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9e9787ee9 code=0x7ffc0000 [ 144.903001][ T26] audit: type=1326 audit(1717439266.632:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5975 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff9e9787ee9 code=0x7ffc0000 [ 144.903018][ T26] audit: type=1326 audit(1717439266.632:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5975 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9e9787ee9 code=0x7ffc0000 [ 144.903035][ T26] audit: type=1326 audit(1717439266.632:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5975 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9e9787ee9 code=0x7ffc0000 [ 144.903052][ T26] audit: type=1326 audit(1717439266.632:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5975 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=27 compat=0 ip=0x7ff9e9787ee9 code=0x7ffc0000 [ 145.139122][ T5985] netlink: 'syz-executor.0': attribute type 14 has an invalid length. [ 145.332662][ T5990] loop1: detected capacity change from 0 to 1764 [ 145.354262][ T5990] ISO 9660 Extensions: Microsoft Joliet Level 3 [ 145.354998][ T5990] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 145.355006][ T5990] ISOFS: changing to secondary root [ 145.355085][ T5990] ISOFS: unable to read i-node block [ 145.355106][ T5990] isofs_fill_super: get root inode failed [ 145.478888][ T5990] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=4091629214 (65466067424 ns) > initial count (185248 ns). Using initial count to start timer. [ 145.479195][ T5990] ------------[ cut here ]------------ [ 145.479206][ T5990] WARNING: CPU: 0 PID: 5990 at arch/x86/kvm/x86.c:10347 kvm_arch_vcpu_ioctl_run+0x1d63/0x1f80 [ 145.479247][ T5990] Modules linked in: [ 145.479264][ T5990] CPU: 0 PID: 5990 Comm: syz-executor.1 Not tainted 5.15.160-syzkaller #0 [ 145.479282][ T5990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 145.479298][ T5990] RIP: 0010:kvm_arch_vcpu_ioctl_run+0x1d63/0x1f80 [ 145.479318][ T5990] Code: df e8 41 84 ba 00 e9 e5 fa ff ff 89 d9 80 e1 07 38 c1 0f 8c 26 fb ff ff 48 89 df e8 27 84 ba 00 e9 19 fb ff ff e8 3d b6 70 00 <0f> 0b e9 e0 fb ff ff 89 d9 80 e1 07 38 c1 0f 8c 63 fb ff ff 48 89 [ 145.479335][ T5990] RSP: 0018:ffffc9000155fc60 EFLAGS: 00010287 [ 145.479352][ T5990] RAX: ffffffff810fa683 RBX: 0000000000000000 RCX: 0000000000040000 [ 145.479366][ T5990] RDX: ffffc900038fc000 RSI: 00000000000003ed RDI: 00000000000003ee [ 145.479380][ T5990] RBP: dffffc0000000000 R08: ffffffff8116c472 R09: fffffbfff1bc8cce [ 145.479394][ T5990] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff88807de11dc0 [ 145.479407][ T5990] R13: ffff888021654000 R14: ffff8880216540f0 R15: ffff8880157cb000 [ 145.479422][ T5990] FS: 00007fe4a62046c0(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000 [ 145.479438][ T5990] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 145.479453][ T5990] CR2: 0000001b2f92c000 CR3: 0000000021652000 CR4: 00000000003526f0 [ 145.479470][ T5990] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 145.479482][ T5990] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 145.479495][ T5990] Call Trace: [ 145.479502][ T5990] [ 145.479511][ T5990] ? __warn+0x15b/0x300 [ 145.479535][ T5990] ? kvm_arch_vcpu_ioctl_run+0x1d63/0x1f80 [ 145.479553][ T5990] ? report_bug+0x1b7/0x2e0 [ 145.479580][ T5990] ? handle_bug+0x3d/0x70 [ 145.479600][ T5990] ? exc_invalid_op+0x16/0x40 [ 145.479619][ T5990] ? asm_exc_invalid_op+0x16/0x20 [ 145.479641][ T5990] ? kvm_lapic_hv_timer_in_use+0x62/0xc0 [ 145.479660][ T5990] ? kvm_arch_vcpu_ioctl_run+0x1d63/0x1f80 [ 145.479682][ T5990] ? kvm_arch_vcpu_ioctl_run+0x1d63/0x1f80 [ 145.479721][ T5990] kvm_vcpu_ioctl+0x7f0/0xcf0 [ 145.479747][ T5990] ? kvm_clear_stat_per_vcpu+0x1e0/0x1e0 [ 145.480007][ T5990] ? __fget_files+0x413/0x480 [ 145.480042][ T5990] ? bpf_lsm_file_ioctl+0x5/0x10 [ 145.480063][ T5990] ? security_file_ioctl+0x7d/0xa0 [ 145.480083][ T5990] ? kvm_clear_stat_per_vcpu+0x1e0/0x1e0 [ 145.480107][ T5990] __se_sys_ioctl+0xf1/0x160 [ 145.480130][ T5990] do_syscall_64+0x3b/0xb0 [ 145.480148][ T5990] ? clear_bhb_loop+0x15/0x70 [ 145.480168][ T5990] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 145.480194][ T5990] RIP: 0033:0x7fe4a7c90ee9 [ 145.480213][ T5990] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 145.480230][ T5990] RSP: 002b:00007fe4a62040c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 145.480253][ T5990] RAX: ffffffffffffffda RBX: 00007fe4a7dc7fa0 RCX: 00007fe4a7c90ee9 [ 145.480268][ T5990] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 145.480281][ T5990] RBP: 00007fe4a7cdd47f R08: 0000000000000000 R09: 0000000000000000 [ 145.480293][ T5990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 145.480305][ T5990] R13: 000000000000000b R14: 00007fe4a7dc7fa0 R15: 00007ffc58b72558 [ 145.480334][ T5990] [ 145.480352][ T5990] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 145.480363][ T5990] CPU: 0 PID: 5990 Comm: syz-executor.1 Not tainted 5.15.160-syzkaller #0 [ 145.480382][ T5990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 145.480393][ T5990] Call Trace: [ 145.480403][ T5990] [ 145.480410][ T5990] dump_stack_lvl+0x1e3/0x2d0 [ 145.480429][ T5990] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 145.480446][ T5990] ? panic+0x860/0x860 [ 145.480471][ T5990] ? kvm_arch_vcpu_ioctl_run+0x1ce0/0x1f80 [ 145.480490][ T5990] ? kvm_arch_vcpu_ioctl_run+0x1ce0/0x1f80 [ 145.480508][ T5990] panic+0x318/0x860 [ 145.480529][ T5990] ? __warn+0x16a/0x300 [ 145.480547][ T5990] ? fb_is_primary_device+0xd0/0xd0 [ 145.480580][ T5990] ? kvm_arch_vcpu_ioctl_run+0x1d63/0x1f80 [ 145.480599][ T5990] __warn+0x2b2/0x300 [ 145.480621][ T5990] ? kvm_arch_vcpu_ioctl_run+0x1d63/0x1f80 [ 145.480637][ T5990] report_bug+0x1b7/0x2e0 [ 145.480662][ T5990] handle_bug+0x3d/0x70 [ 145.480680][ T5990] exc_invalid_op+0x16/0x40 [ 145.480698][ T5990] asm_exc_invalid_op+0x16/0x20 [ 145.480714][ T5990] RIP: 0010:kvm_arch_vcpu_ioctl_run+0x1d63/0x1f80 [ 145.480733][ T5990] Code: df e8 41 84 ba 00 e9 e5 fa ff ff 89 d9 80 e1 07 38 c1 0f 8c 26 fb ff ff 48 89 df e8 27 84 ba 00 e9 19 fb ff ff e8 3d b6 70 00 <0f> 0b e9 e0 fb ff ff 89 d9 80 e1 07 38 c1 0f 8c 63 fb ff ff 48 89 [ 145.480747][ T5990] RSP: 0018:ffffc9000155fc60 EFLAGS: 00010287 [ 145.480764][ T5990] RAX: ffffffff810fa683 RBX: 0000000000000000 RCX: 0000000000040000 [ 145.480777][ T5990] RDX: ffffc900038fc000 RSI: 00000000000003ed RDI: 00000000000003ee [ 145.480790][ T5990] RBP: dffffc0000000000 R08: ffffffff8116c472 R09: fffffbfff1bc8cce [ 145.480804][ T5990] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff88807de11dc0 [ 145.480817][ T5990] R13: ffff888021654000 R14: ffff8880216540f0 R15: ffff8880157cb000 [ 145.480838][ T5990] ? kvm_lapic_hv_timer_in_use+0x62/0xc0 [ 145.480856][ T5990] ? kvm_arch_vcpu_ioctl_run+0x1d63/0x1f80 [ 145.480894][ T5990] kvm_vcpu_ioctl+0x7f0/0xcf0 [ 145.480921][ T5990] ? kvm_clear_stat_per_vcpu+0x1e0/0x1e0 [ 145.480950][ T5990] ? __fget_files+0x413/0x480 [ 145.480973][ T5990] ? bpf_lsm_file_ioctl+0x5/0x10 [ 145.480989][ T5990] ? security_file_ioctl+0x7d/0xa0 [ 145.481007][ T5990] ? kvm_clear_stat_per_vcpu+0x1e0/0x1e0 [ 145.481029][ T5990] __se_sys_ioctl+0xf1/0x160 [ 145.481050][ T5990] do_syscall_64+0x3b/0xb0 [ 145.481065][ T5990] ? clear_bhb_loop+0x15/0x70 [ 145.481082][ T5990] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 145.481097][ T5990] RIP: 0033:0x7fe4a7c90ee9 [ 145.481113][ T5990] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 145.481126][ T5990] RSP: 002b:00007fe4a62040c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 145.481146][ T5990] RAX: ffffffffffffffda RBX: 00007fe4a7dc7fa0 RCX: 00007fe4a7c90ee9 [ 145.481160][ T5990] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 145.481173][ T5990] RBP: 00007fe4a7cdd47f R08: 0000000000000000 R09: 0000000000000000 [ 145.481193][ T5990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 145.481205][ T5990] R13: 000000000000000b R14: 00007fe4a7dc7fa0 R15: 00007ffc58b72558 [ 145.481232][ T5990] [ 145.481466][ T5990] Kernel Offset: disabled [ 146.233775][ T5990] Rebooting in 86400 seconds..