last executing test programs: 11.831904848s ago: executing program 2: r0 = openat$drirender128(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r0, 0xc02864c3, &(0x7f0000000300)={0x0}) 10.831182193s ago: executing program 2: socket$inet6(0xa, 0xa, 0x7) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002700)=@base={0xb, 0x8, 0x10001, 0x9, 0x1, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800007f0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @random="b0c942034375", @void, {@ipv4={0x800, @tcp={{0x8, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ssrr={0x89, 0x7, 0xe2, [@dev]}, @timestamp={0x44, 0x4, 0x0, 0x3}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) io_setup(0x8, &(0x7f0000000000)=0x0) io_getevents(r2, 0x2, 0x4, &(0x7f00000004c0)=[{}, {}, {}, {}], &(0x7f0000000300)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xee) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r5, 0x29, 0x6, 0x0, &(0x7f00000004c0)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) syz_open_procfs(0x0, 0x0) 7.173348757s ago: executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) unshare(0x2a020400) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x20) 6.670956836s ago: executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="4dc07f947163300c", 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000003ec0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000001dc0)="e506fbd63308f938b46bd7206fe0b28f2c6daa322f4e35d153e2550bf31d51aa324711de66db2be5a4bc4ee3908a9b741431dacd028f13e2acb5274aec84cdff7c9845503dfb39f66b45f12019c7a62e01381bf8c517546edc2e701a897fce1cd2cb94ddb002c936e02c7f5bc37f97bf2d75ae2ce6400c5b6b14d9840af25d", 0x7f}], 0x1}}], 0x1, 0x0) 6.17709703s ago: executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/profiling', 0x22042, 0x0) write$tun(r0, &(0x7f0000000280)=ANY=[@ANYRESDEC=r0, @ANYRESDEC], 0x15) 5.862252305s ago: executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000d00000000080000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100"], 0x64}}, 0x0) 5.732066735s ago: executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x2, @dev, 'veth1_to_batadv\x00'}}, 0x1e) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x2, @dev, 'team_slave_1\x00'}}, 0x1e) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x2, @dev, 'veth1_to_batadv\x00'}}, 0x1e) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x0, @dev, 'rose0\x00'}}, 0x1e) 5.320417758s ago: executing program 4: bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket(0x25, 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000010000000000000000000000000ff", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @multicast2}, 0x10) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000040)=0x1b3a, 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) recvmsg(r1, 0x0, 0x2000) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000040)=0x3, 0x4) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000100)) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000080)={0xc0008212}) bind$inet6(0xffffffffffffffff, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) epoll_pwait(r2, &(0x7f0000001680)=[{}], 0x1, 0x0, 0x0, 0x0) io_setup(0xdf7, &(0x7f0000000280)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_route(0x10, 0x3, 0x0) r3 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r3, 0x101, 0x5, &(0x7f0000000040)=0x800, 0x4) 4.367977951s ago: executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x84, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x54, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8}, @TCA_CAKE_NAT={0xa}, @TCA_CAKE_WASH={0x8}, @TCA_CAKE_WASH={0x8}, @TCA_CAKE_RAW={0x8}]}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}]}]}, 0x84}}, 0x0) 4.176100992s ago: executing program 3: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/profiling', 0x22042, 0x0) write$tun(r0, &(0x7f0000000280)=ANY=[@ANYRESDEC=r0, @ANYRESDEC], 0x15) 3.771285687s ago: executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f00000008c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x20) 3.748395819s ago: executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) fstat(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioprio_set$uid(0x3, r1, 0x0) 3.709967941s ago: executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x2, 0x3, 0x301, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, 0x0, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x14, 0x3, 0x3, 0x5}, 0x14}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x73) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x8000}, 0x10}, 0x90) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB='&'], 0x0}, 0x90) ioctl$SIOCSIFHWADDR(r5, 0x8946, &(0x7f00000000c0)={'bridge_slave_1\x00', @random='\x00\x00\x00 \x00'}) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00b8"], 0x40}}, 0x0) 3.367915002s ago: executing program 0: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x96) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c80)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0x16}, {0x8}]}}]}]}, 0x3c}}, 0x0) 3.047938917s ago: executing program 1: bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket(0x25, 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000010000000000000000000000000ff", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @multicast2}, 0x10) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000040)=0x1b3a, 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) recvmsg(r1, 0x0, 0x2000) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000040)=0x3, 0x4) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000100)) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000080)={0xc0008212}) bind$inet6(0xffffffffffffffff, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) epoll_pwait(r2, &(0x7f0000001680)=[{}], 0x1, 0x0, 0x0, 0x0) io_setup(0xdf7, &(0x7f0000000280)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_route(0x10, 0x3, 0x0) r3 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r3, 0x101, 0x5, &(0x7f0000000040)=0x800, 0x4) 2.89182428s ago: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newtaction={0x6c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}, @TCA_IFE_METALST={0x6, 0x6, [@IFE_META_TCINDEX={0x8, 0x2}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) 2.448004235s ago: executing program 0: syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f00000000c0)) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 2.393072053s ago: executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x4, 0x3f, 0x40, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r0, &(0x7f0000000580), 0x0}, 0x20) 2.319047762s ago: executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x1, 0x178, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/376]}, 0x1f0) 1.995431206s ago: executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x84, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x54, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8}, @TCA_CAKE_NAT={0xa}, @TCA_CAKE_WASH={0x8}, @TCA_CAKE_WASH={0x8}, @TCA_CAKE_RAW={0x8}]}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}]}]}, 0x84}}, 0x0) 1.911347649s ago: executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/profiling', 0x22042, 0x0) write$tun(r0, &(0x7f0000000280)=ANY=[@ANYRESDEC=r0, @ANYRESDEC], 0x15) 1.481604656s ago: executing program 3: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$sock_ax25_SIOCDELRT(r0, 0x890c, &(0x7f0000000000)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) 1.226382446s ago: executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000d00000000080000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100"], 0x64}}, 0x0) 1.095234506s ago: executing program 0: r0 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_UNLINKAT={0x24, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r3}}) io_uring_enter(r0, 0x5b43, 0x0, 0x0, 0x0, 0x0) 1.055815575s ago: executing program 3: syz_mount_image$udf(&(0x7f00000005c0), &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="005bdefa8134"], 0x1, 0x5bd, &(0x7f0000000680)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) write$cgroup_int(r0, &(0x7f0000000080), 0xb8fe) r2 = creat(&(0x7f0000000240)='./bus\x00', 0x0) pwritev2(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)="ec", 0x1}], 0x1, 0x0, 0x0, 0x2) 846.674001ms ago: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newtaction={0x6c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}, @TCA_IFE_METALST={0x6, 0x6, [@IFE_META_TCINDEX={0x8, 0x2}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) 531.207819ms ago: executing program 1: r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) fchdir(r0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') syz_open_procfs(0x0, &(0x7f0000000080)='net/protocols\x00') syz_mount_image$squashfs(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="003b09b765b040ae4b42889f00ae139228801d870b08000000c7000000d5000000000000", @ANYRES8], 0x1, 0x19c, &(0x7f0000000280)="$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") r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xf, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000000c0)={@map=r3, r4, 0x6, 0x6, 0x7, @prog_id}, 0x20) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) read$ptp(r3, &(0x7f0000000480)=""/102, 0x66) connect$bt_l2cap(r7, &(0x7f0000000240)={0x1f, 0x21, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r5, @ANYBLOB="01e5c300000000fb04003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) 484.21176ms ago: executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000eb0000000001000000940000930600003e5f0000000000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10) r1 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000002d80)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xc, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x3}]}}]}, 0x3c}}, 0x0) 364.144834ms ago: executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) fstat(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioprio_set$uid(0x3, r1, 0x0) 0s ago: executing program 3: mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r0, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000002300)={0x50, 0x0, r1, {0x7, 0x9}}, 0x50) read$FUSE(r0, &(0x7f0000006580)={0x2020, 0x0, 0x0}, 0x2020) truncate(&(0x7f0000000080)='./file0\x00', 0x0) write$FUSE_INIT(r0, &(0x7f0000002380)={0x50, 0x0, r2}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000b1c0)="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", 0x2000, &(0x7f0000002440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000d540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): a:aa:aa:3e) already exists on: batadv_slave_0 [ 1315.097252][T18795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1315.109107][T18795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1315.120424][T18795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1315.135719][T18795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1315.147936][T18795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1315.158244][T18795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1315.169192][T18795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1315.184988][T18795] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1315.287579][T18795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1315.298557][T18795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1315.308941][T18795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1315.319836][T18795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1315.330124][T18795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1315.348147][T18795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1315.360152][T18795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1315.371030][T18795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1315.381318][T18795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1315.392263][T18795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1315.407853][T18795] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1315.544241][T18795] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1315.554971][T18795] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1315.564231][T18795] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1315.575760][T18795] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1317.428977][T19034] loop1: detected capacity change from 0 to 1024 [ 1317.845166][ T3812] hfsplus: b-tree write err: -5, ino 3 [ 1319.971617][T19076] loop3: detected capacity change from 0 to 1024 [ 1320.115248][T19081] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1320.528065][ T3885] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1320.536826][ T3885] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1320.575951][T13558] hfsplus: b-tree write err: -5, ino 3 [ 1320.725014][ T4057] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1320.733856][ T4057] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1320.801882][T19090] loop0: detected capacity change from 0 to 1024 [ 1320.883738][T19090] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1320.944074][T19090] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 1321.017827][T19090] EXT4-fs (loop0): orphan cleanup on readonly fs [ 1321.295086][T19090] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz-executor.0: bg 0: block 10: padding at end of block bitmap is not set [ 1321.296587][T19090] Quota error (device loop0): write_blk: dquota write failed [ 1321.296697][T19090] Quota error (device loop0): find_free_dqentry: Can't write quota data block 5 [ 1321.297219][T19090] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 1321.297430][T19090] EXT4-fs error (device loop0): ext4_acquire_dquot:6882: comm syz-executor.0: Failed to acquire dquot type 0 [ 1321.307889][T19090] EXT4-fs error (device loop0): ext4_free_blocks:6576: comm syz-executor.0: Freeing blocks not in datazone - block = 0, count = 4096 [ 1321.308879][T19090] EXT4-fs (loop0): 1 truncate cleaned up [ 1321.310522][T19090] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1321.445185][T19097] loop2: detected capacity change from 0 to 1024 [ 1321.458085][T19090] syz-executor.0 (19090) used greatest stack depth: 2368 bytes left [ 1321.519114][T16991] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1321.595587][T19097] hfsplus: request for non-existent node -709361664 in B*Tree [ 1321.608978][T19097] hfsplus: request for non-existent node -709361664 in B*Tree [ 1321.610266][T19097] hfsplus: b-tree write err: -5, ino 8 [ 1321.973115][T14268] Bluetooth: hci3: command 0x0406 tx timeout [ 1322.560036][T19113] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1322.638789][T19112] loop3: detected capacity change from 0 to 1024 [ 1323.160337][T13558] hfsplus: b-tree write err: -5, ino 3 [ 1323.287419][T19126] loop4: detected capacity change from 0 to 1024 [ 1323.388079][T19126] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1323.448659][T19126] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 1323.479779][T19126] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1323.568885][T19126] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz-executor.4: bg 0: block 10: padding at end of block bitmap is not set [ 1323.582692][T19133] loop2: detected capacity change from 0 to 1024 [ 1323.657528][T19126] Quota error (device loop4): write_blk: dquota write failed [ 1323.667503][T19126] Quota error (device loop4): find_free_dqentry: Can't write quota data block 5 [ 1323.670810][T19133] hfsplus: request for non-existent node -709361664 in B*Tree [ 1323.677424][T19126] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 1323.684868][T19133] hfsplus: request for non-existent node -709361664 in B*Tree [ 1323.686024][T19133] hfsplus: b-tree write err: -5, ino 8 [ 1323.695180][T19126] EXT4-fs error (device loop4): ext4_acquire_dquot:6882: comm syz-executor.4: Failed to acquire dquot type 0 [ 1323.814685][T19126] EXT4-fs error (device loop4): ext4_free_blocks:6576: comm syz-executor.4: Freeing blocks not in datazone - block = 0, count = 4096 [ 1323.878807][T19126] EXT4-fs (loop4): 1 truncate cleaned up [ 1323.885997][T19126] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1324.234124][T18795] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1324.778582][T19146] loop2: detected capacity change from 0 to 1024 [ 1324.874797][T19146] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1324.898293][T19152] sit0: entered allmulticast mode [ 1325.003647][T19152] sit0: entered promiscuous mode [ 1325.037127][ T1230] ieee802154 phy0 wpan0: encryption failed: -22 [ 1325.037385][ T1230] ieee802154 phy1 wpan1: encryption failed: -22 [ 1326.343222][ T43] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 1326.604260][ T43] usb 3-1: Using ep0 maxpacket: 16 [ 1326.725337][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1326.736731][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1326.747187][ T43] usb 3-1: New USB device found, idVendor=1b96, idProduct=000c, bcdDevice= 0.00 [ 1326.756928][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1326.779288][ T43] usb 3-1: config 0 descriptor?? [ 1327.173157][T14268] Bluetooth: hci4: command 0x0406 tx timeout [ 1327.751724][T19182] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1327.785163][T19182] batadv_slave_0: entered allmulticast mode [ 1327.795448][T19182] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 1328.199100][T19188] sit0: entered allmulticast mode [ 1328.417091][T19188] sit0: entered promiscuous mode [ 1328.991967][ T781] IPVS: starting estimator thread 0... [ 1329.093285][T19200] IPVS: using max 240 ests per chain, 12000 per kthread [ 1329.196189][T19201] syzkaller0: entered promiscuous mode [ 1329.201989][T19201] syzkaller0: entered allmulticast mode [ 1330.059358][T19214] loop0: detected capacity change from 0 to 1024 [ 1330.274341][T19214] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1330.783166][ T43] usbhid 3-1:0.0: can't add hid device: -71 [ 1330.789829][ T43] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1330.848804][ T43] usb 3-1: USB disconnect, device number 17 [ 1331.312692][ T43] IPVS: starting estimator thread 0... [ 1331.402750][T19233] IPVS: using max 288 ests per chain, 14400 per kthread [ 1331.475176][T19236] binder: BINDER_SET_CONTEXT_MGR already set [ 1331.481562][T19236] binder: 19234:19236 ioctl 4018620d 20000040 returned -16 [ 1331.703636][T19239] syzkaller0: entered promiscuous mode [ 1331.709371][T19239] syzkaller0: entered allmulticast mode [ 1332.963486][T19253] loop2: detected capacity change from 0 to 4096 [ 1333.017318][ T43] IPVS: starting estimator thread 0... [ 1333.082616][T19253] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512). [ 1333.186362][T19265] IPVS: using max 240 ests per chain, 12000 per kthread [ 1333.428909][T19253] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 1333.433547][T19271] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 1333.445844][T19253] ntfs3: loop2: Failed to load $Extend (-22). [ 1333.452825][T19253] ntfs3: loop2: Failed to initialize $Extend. [ 1333.658143][T19273] input: syz0 as /devices/virtual/input/input36 [ 1334.235067][T19279] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1334.354063][ T29] audit: type=1804 audit(1334.305:599): pid=19279 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir1728237925/syzkaller.3mDSey/124/cgroup.controllers" dev="sda1" ino=1954 res=1 errno=0 [ 1334.398018][T18796] Bluetooth: hci4: unexpected event for opcode 0x1003 [ 1335.076080][ T8071] IPVS: starting estimator thread 0... [ 1335.173979][T19296] IPVS: using max 240 ests per chain, 12000 per kthread [ 1335.548394][T19298] loop3: detected capacity change from 0 to 2048 [ 1335.802525][T19298] loop3: detected capacity change from 0 to 256 [ 1336.694228][T18796] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 1336.703330][T18796] Bluetooth: hci1: Injecting HCI hardware error event [ 1336.711452][T18796] Bluetooth: hci1: hardware error 0x00 [ 1337.389183][T19305] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 1338.150222][T19311] input: syz0 as /devices/virtual/input/input37 [ 1338.223981][T19306] loop1: detected capacity change from 0 to 4096 [ 1338.256746][T19306] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512). [ 1338.466392][T14268] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 1338.484014][T14268] Bluetooth: hci4: Injecting HCI hardware error event [ 1338.491610][T14268] Bluetooth: hci4: hardware error 0x00 [ 1338.653576][T19306] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 1338.701441][T19321] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1338.712535][T19306] ntfs3: loop1: Failed to load $Extend (-22). [ 1338.718855][T19306] ntfs3: loop1: Failed to initialize $Extend. [ 1338.823069][ T29] audit: type=1804 audit(1338.755:600): pid=19321 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir819163895/syzkaller.vYXnLb/485/cgroup.controllers" dev="sda1" ino=1960 res=1 errno=0 [ 1338.863191][T18796] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 1339.059259][T19320] loop4: detected capacity change from 0 to 4096 [ 1339.126938][T19320] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 1339.557990][T19320] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 1339.776967][T19335] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 1340.016295][ T29] audit: type=1800 audit(1339.855:601): pid=19320 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="file0" dev="loop4" ino=0 res=0 errno=0 [ 1340.297608][T19341] loop0: detected capacity change from 0 to 2048 [ 1340.556345][T14268] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 1340.612023][T19343] loop0: detected capacity change from 0 to 256 [ 1341.290503][T19342] loop1: detected capacity change from 0 to 1024 [ 1341.540653][T19342] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1341.742026][T19340] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2847: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 1341.977216][T19340] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1342.116867][T19355] input: syz0 as /devices/virtual/input/input38 [ 1342.559024][T17459] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1343.282446][T19371] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 1343.396178][T19364] loop3: detected capacity change from 0 to 4096 [ 1343.465545][T19368] loop1: detected capacity change from 0 to 4096 [ 1343.482759][T19364] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 1343.532462][T19368] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512). [ 1343.885850][T19380] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1343.889891][T19368] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 1343.920995][T19368] ntfs3: loop1: Failed to load $Extend (-22). [ 1343.928351][T19368] ntfs3: loop1: Failed to initialize $Extend. [ 1344.897579][T19391] input: syz0 as /devices/virtual/input/input39 [ 1345.174270][ T8071] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 1345.412873][ C0] TCP: MD5 Hash failed for 172.20.20.170.20003->172.20.20.170.20003 [.] L3 index 0 [ 1345.423601][ C0] TCP: MD5 Hash failed for 172.20.20.170.20003->172.20.20.170.20003 [P.] L3 index 0 [ 1345.463684][ C0] TCP: MD5 Hash failed for 172.20.20.170.20003->172.20.20.170.20003 [.] L3 index 0 [ 1345.474376][ C0] TCP: MD5 Hash failed for 172.20.20.170.20003->172.20.20.170.20003 [P.] L3 index 0 [ 1345.487063][ C0] TCP: MD5 Hash failed for 172.20.20.170.20003->172.20.20.170.20003 [.] L3 index 0 [ 1345.497692][ C0] TCP: MD5 Hash failed for 172.20.20.170.20003->172.20.20.170.20003 [P.] L3 index 0 [ 1345.525232][ T8071] usb 4-1: Using ep0 maxpacket: 8 [ 1345.648130][ T8071] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1345.658371][ T8071] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1345.668500][ T8071] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 1345.678686][ T8071] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 1345.903236][T19400] loop0: detected capacity change from 0 to 2048 [ 1346.124344][T19400] loop0: detected capacity change from 0 to 256 [ 1346.934362][T19402] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 1348.284668][ T5712] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 1348.345450][ T8071] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=f1.96 [ 1348.354964][ T8071] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1348.413606][ T8071] usb 4-1: config 0 descriptor?? [ 1348.460067][ T8071] usb 4-1: can't set config #0, error -71 [ 1348.513673][ T8071] usb 4-1: USB disconnect, device number 35 [ 1348.578069][T19412] loop4: detected capacity change from 0 to 4096 [ 1348.620396][ T5712] usb 3-1: device descriptor read/all, error -71 [ 1348.658937][T19412] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 1348.901895][T19421] input: syz0 as /devices/virtual/input/input40 [ 1350.167982][T19435] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 1350.178023][T19435] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 1351.139256][T19445] loop3: detected capacity change from 0 to 4096 [ 1351.195240][T19445] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 1352.322668][T19460] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 1352.331566][T19460] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 1352.870667][T18796] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1352.884689][T18796] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1352.894455][T18796] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1352.928269][T18796] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1352.949682][T18796] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1352.960468][T18796] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1353.909065][T19485] loop3: detected capacity change from 0 to 4096 [ 1353.977446][T19485] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 1354.420571][T19499] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 1354.434760][T19470] chnl_net:caif_netlink_parms(): no params data found [ 1355.092644][T18796] Bluetooth: hci2: command tx timeout [ 1356.198576][T19526] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1356.492245][T19470] bridge0: port 1(bridge_slave_0) entered blocking state [ 1356.506479][T19470] bridge0: port 1(bridge_slave_0) entered disabled state [ 1356.514660][T19470] bridge_slave_0: entered allmulticast mode [ 1356.524324][T19470] bridge_slave_0: entered promiscuous mode [ 1356.856354][T19470] bridge0: port 2(bridge_slave_1) entered blocking state [ 1356.864324][T19470] bridge0: port 2(bridge_slave_1) entered disabled state [ 1356.872467][T19470] bridge_slave_1: entered allmulticast mode [ 1356.881907][T19470] bridge_slave_1: entered promiscuous mode [ 1357.175226][T18796] Bluetooth: hci2: command tx timeout [ 1357.556304][T19470] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1357.755161][T19470] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1358.207340][T19470] team0: Port device team_slave_0 added [ 1358.215222][T19542] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 1358.227022][T19542] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 1358.311735][T19470] team0: Port device team_slave_1 added [ 1358.429413][T19470] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1358.438048][T19470] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1358.473733][T19470] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1358.582732][T19470] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1358.590026][T19470] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1358.618381][T19470] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1359.098840][T19470] hsr_slave_0: entered promiscuous mode [ 1359.133457][T19470] hsr_slave_1: entered promiscuous mode [ 1359.150845][T19470] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1359.165866][T19470] Cannot create hsr debugfs directory [ 1359.254047][T18796] Bluetooth: hci2: command tx timeout [ 1360.177993][T19470] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1360.397361][T19470] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1360.621868][T19575] team0: Device macvtap1 is already an upper device of the team interface [ 1360.819203][T19470] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1361.334244][T18796] Bluetooth: hci2: command tx timeout [ 1361.401488][T19470] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1362.500113][T19470] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1362.665980][T19470] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1362.884461][T19470] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1363.086465][T19470] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1363.471217][T19602] loop4: detected capacity change from 0 to 128 [ 1363.539009][T19602] VFS: Found a Xenix FS (block size = 512) on device loop4 [ 1363.923952][T18795] sysv_free_block: trying to free block not in datazone [ 1363.993108][T18795] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 1364.460656][T19470] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1364.609622][T19470] 8021q: adding VLAN 0 to HW filter on device team0 [ 1364.666026][ T8736] bridge0: port 1(bridge_slave_0) entered blocking state [ 1364.673830][ T8736] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1364.802796][ T8736] bridge0: port 2(bridge_slave_1) entered blocking state [ 1364.810515][ T8736] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1366.592951][T19639] loop4: detected capacity change from 0 to 128 [ 1366.710592][T19639] VFS: Found a Xenix FS (block size = 512) on device loop4 [ 1367.488602][T18795] sysv_free_block: trying to free block not in datazone [ 1367.543168][T18795] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 1368.233757][T19649] syz-executor.4: attempt to access beyond end of device [ 1368.233757][T19649] nbd4: rw=0, sector=2, nr_sectors = 2 limit=0 [ 1368.247400][T19649] vxfs: unable to read disk superblock at 1 [ 1368.253914][T19649] syz-executor.4: attempt to access beyond end of device [ 1368.253914][T19649] nbd4: rw=0, sector=16, nr_sectors = 2 limit=0 [ 1368.267524][T19649] vxfs: unable to read disk superblock at 8 [ 1368.278300][T19649] vxfs: can't find superblock. [ 1368.394482][T19653] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1368.468932][T19470] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1368.938705][T19470] veth0_vlan: entered promiscuous mode [ 1368.968053][T19660] trusted_key: encrypted_key: key user:syz not found [ 1369.064459][T19470] veth1_vlan: entered promiscuous mode [ 1369.468932][T19470] veth0_macvtap: entered promiscuous mode [ 1369.539264][T19470] veth1_macvtap: entered promiscuous mode [ 1369.753947][T19470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1369.764750][T19470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1369.775172][T19470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1369.785995][T19470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1369.796283][T19470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1369.809420][T19470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1369.828798][T19470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1369.841850][T19470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1369.853011][T19470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1369.863978][T19470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1369.880283][T19470] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1370.066732][T19470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1370.077675][T19470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1370.087859][T19470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1370.098952][T19470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1370.109205][T19470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1370.125523][T19470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1370.137497][T19470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1370.148305][T19470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1370.158497][T19470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1370.169573][T19470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1370.179749][T19470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1370.190514][T19470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1370.206319][T19470] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1370.336778][T19676] syz-executor.2: attempt to access beyond end of device [ 1370.336778][T19676] nbd2: rw=0, sector=2, nr_sectors = 2 limit=0 [ 1370.350436][T19676] vxfs: unable to read disk superblock at 1 [ 1370.357267][T19676] syz-executor.2: attempt to access beyond end of device [ 1370.357267][T19676] nbd2: rw=0, sector=16, nr_sectors = 2 limit=0 [ 1370.370948][T19676] vxfs: unable to read disk superblock at 8 [ 1370.377314][T19676] vxfs: can't find superblock. [ 1370.685796][T19470] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1370.698902][T19470] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1370.710048][T19470] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1370.719442][T19470] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1371.604464][T19685] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1372.024569][T19689] trusted_key: encrypted_key: key user:syz not found [ 1373.795075][T19716] syz-executor.4: attempt to access beyond end of device [ 1373.795075][T19716] nbd4: rw=0, sector=2, nr_sectors = 2 limit=0 [ 1373.824472][T19716] vxfs: unable to read disk superblock at 1 [ 1373.830876][T19716] syz-executor.4: attempt to access beyond end of device [ 1373.830876][T19716] nbd4: rw=0, sector=16, nr_sectors = 2 limit=0 [ 1373.844961][T19716] vxfs: unable to read disk superblock at 8 [ 1373.851075][T19716] vxfs: can't find superblock. [ 1374.185094][T19719] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1374.673754][ T43] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 1375.814423][ T43] usb 2-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 1375.826461][ T43] usb 2-1: config 9 has 0 interfaces, different from the descriptor's value: 1 [ 1375.836642][ T43] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1375.846248][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1376.653583][ T43] usb 2-1: string descriptor 0 read error: -71 [ 1376.701239][ T43] usb 2-1: USB disconnect, device number 34 [ 1377.768293][T19749] loop3: detected capacity change from 0 to 256 [ 1377.913238][T19749] support for the xor transformation has been removed. [ 1378.357721][T19759] syz-executor.4: attempt to access beyond end of device [ 1378.357721][T19759] nbd4: rw=0, sector=2, nr_sectors = 2 limit=0 [ 1378.371304][T19759] vxfs: unable to read disk superblock at 1 [ 1378.377800][T19759] syz-executor.4: attempt to access beyond end of device [ 1378.377800][T19759] nbd4: rw=0, sector=16, nr_sectors = 2 limit=0 [ 1378.391801][T19759] vxfs: unable to read disk superblock at 8 [ 1378.399011][T19759] vxfs: can't find superblock. [ 1378.524956][T19761] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1378.979366][T19769] loop1: detected capacity change from 0 to 2048 [ 1379.048291][ T3812] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1379.057194][ T3812] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1379.098772][T19769] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 1379.144853][T19769] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 1379.153243][T19769] UDF-fs: Scanning with blocksize 512 failed [ 1379.199849][T13558] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1379.208959][T13558] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1379.255090][T19769] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1379.327035][ T43] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 1379.634727][ T43] usb 4-1: Using ep0 maxpacket: 32 [ 1379.837209][ T43] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1379.855974][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1379.870587][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1379.880860][ T43] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1379.894250][ T43] usb 4-1: New USB device found, idVendor=1b96, idProduct=9f0a, bcdDevice= 0.15 [ 1379.903806][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1379.960698][ T43] usb 4-1: config 0 descriptor?? [ 1380.221336][T19791] usb usb8: check_ctrlrecip: process 19791 (syz-executor.4) requesting ep 01 but needs 81 [ 1380.231941][T19791] usb usb8: usbfs: process 19791 (syz-executor.4) did not claim interface 0 before use [ 1380.492976][ T43] hid-generic 0003:1B96:9F0A.002E: unknown main item tag 0x0 [ 1380.500830][ T43] hid-generic 0003:1B96:9F0A.002E: unknown main item tag 0x0 [ 1380.508746][ T43] hid-generic 0003:1B96:9F0A.002E: unknown main item tag 0x0 [ 1380.518465][ T43] hid-generic 0003:1B96:9F0A.002E: unknown main item tag 0x0 [ 1380.526368][ T43] hid-generic 0003:1B96:9F0A.002E: unknown main item tag 0x0 [ 1380.685006][ T43] hid-generic 0003:1B96:9F0A.002E: hidraw0: USB HID v0.00 Device [HID 1b96:9f0a] on usb-dummy_hcd.3-1/input0 [ 1380.706318][T19796] loop4: detected capacity change from 0 to 2048 [ 1380.798030][T19796] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1380.816628][ T5137] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 1380.861946][T19796] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1380.923032][T19800] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1381.096909][ T43] usb 4-1: USB disconnect, device number 36 [ 1381.239964][ T5137] usb 3-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 1381.250697][ T5137] usb 3-1: config 9 has 0 interfaces, different from the descriptor's value: 1 [ 1381.261268][ T5137] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1381.271395][ T5137] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1381.391177][ T3812] bridge_slave_1: left allmulticast mode [ 1381.400753][ T3812] bridge_slave_1: left promiscuous mode [ 1381.407463][ T3812] bridge0: port 2(bridge_slave_1) entered disabled state [ 1381.449559][ T3812] bridge_slave_0: left allmulticast mode [ 1381.456050][ T3812] bridge_slave_0: left promiscuous mode [ 1381.462930][ T3812] bridge0: port 1(bridge_slave_0) entered disabled state [ 1381.517458][ T3812] bridge_slave_1: left allmulticast mode [ 1381.525174][ T3812] bridge_slave_1: left promiscuous mode [ 1381.531731][ T3812] bridge0: port 2(bridge_slave_1) entered disabled state [ 1381.663391][ T3812] bridge_slave_0: left allmulticast mode [ 1381.669429][ T3812] bridge_slave_0: left promiscuous mode [ 1381.677191][ T3812] bridge0: port 1(bridge_slave_0) entered disabled state [ 1382.883143][ T5137] usb 3-1: string descriptor 0 read error: -71 [ 1382.898043][T19813] loop3: detected capacity change from 0 to 2048 [ 1382.912217][ T5137] usb 3-1: USB disconnect, device number 20 [ 1382.990175][T19813] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 1383.063440][T19813] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 1383.071352][T19813] UDF-fs: Scanning with blocksize 512 failed [ 1383.187915][ T3812] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1383.193658][T19813] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1383.279180][ T3812] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1383.339378][ T3812] bond0 (unregistering): Released all slaves [ 1383.460710][ T3812] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1383.539741][ T3812] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1383.599821][ T3812] bond0 (unregistering): Released all slaves [ 1384.231680][T19835] loop2: detected capacity change from 0 to 2048 [ 1384.271828][T19835] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1384.700217][T19842] loop3: detected capacity change from 0 to 2048 [ 1384.794826][T19842] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1384.878661][T19842] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1385.511609][ T3812] hsr_slave_0: left promiscuous mode [ 1385.568410][ T3812] hsr_slave_1: left promiscuous mode [ 1385.610880][ T3812] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1385.618877][ T3812] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1385.659834][ T3812] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1385.668326][ T3812] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1385.802399][ T3812] hsr_slave_0: left promiscuous mode [ 1385.858419][ T3812] hsr_slave_1: left promiscuous mode [ 1385.881710][ T3812] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1385.894183][ T3812] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1385.946001][ T3812] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1385.954056][ T3812] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1385.957548][T19859] loop4: detected capacity change from 0 to 2048 [ 1386.008138][T19859] UDF-fs: error (device loop4): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 1386.027114][T19859] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 1386.029921][ T3812] veth1_macvtap: left promiscuous mode [ 1386.035476][T19859] UDF-fs: Scanning with blocksize 512 failed [ 1386.040694][ T3812] veth0_macvtap: left promiscuous mode [ 1386.052934][ T3812] veth1_vlan: left promiscuous mode [ 1386.058498][ T3812] veth0_vlan: left promiscuous mode [ 1386.073703][ T3812] veth1_macvtap: left promiscuous mode [ 1386.079894][ T3812] veth0_macvtap: left promiscuous mode [ 1386.086233][ T3812] veth1_vlan: left promiscuous mode [ 1386.098158][ T3812] veth0_vlan: left promiscuous mode [ 1386.217488][T19859] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1386.363082][ T8736] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 1386.489781][ T1230] ieee802154 phy0 wpan0: encryption failed: -22 [ 1386.497570][ T1230] ieee802154 phy1 wpan1: encryption failed: -22 [ 1386.882814][ T8736] usb 4-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 1386.893429][ T8736] usb 4-1: config 9 has 0 interfaces, different from the descriptor's value: 1 [ 1386.903024][ T8736] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1386.917611][ T8736] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1387.419518][ T3812] team0 (unregistering): Port device team_slave_1 removed [ 1387.460853][ T3812] team0 (unregistering): Port device team_slave_0 removed [ 1387.522070][ C1] hrtimer: interrupt took 202107 ns [ 1387.713735][ T8736] usb 4-1: string descriptor 0 read error: -71 [ 1387.768559][ T8736] usb 4-1: USB disconnect, device number 37 [ 1388.093634][ T3812] team0 (unregistering): Port device team_slave_1 removed [ 1388.189062][ T3812] team0 (unregistering): Port device team_slave_0 removed [ 1388.741111][ T29] audit: type=1804 audit(1388.725:602): pid=19876 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir3734271073/syzkaller.geXJON/75/bus" dev="sda1" ino=1954 res=1 errno=0 [ 1388.889732][T19876] nvme_fabrics: unknown parameter or missing value ']' in ctrl creation request [ 1389.422958][ T8071] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 1389.692443][ T8071] usb 3-1: Using ep0 maxpacket: 16 [ 1389.843633][ T8071] usb 3-1: config 0 has an invalid interface descriptor of length 2, skipping [ 1389.853092][ T8071] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1389.862960][ T8071] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1389.873904][ T8071] usb 3-1: Duplicate descriptor for config 0 interface 0 altsetting 0, skipping [ 1390.065336][T19894] loop1: detected capacity change from 0 to 2048 [ 1390.095506][ T8071] usb 3-1: New USB device found, idVendor=0b3c, idProduct=c00b, bcdDevice=5a.83 [ 1390.105506][ T8071] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1390.114154][ T8071] usb 3-1: Product: syz [ 1390.118541][ T8071] usb 3-1: Manufacturer: syz [ 1390.123500][ T8071] usb 3-1: SerialNumber: syz [ 1390.156553][T19894] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 1390.190515][ T8071] usb 3-1: config 0 descriptor?? [ 1390.211773][T19894] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 1390.216429][T19898] xt_TCPMSS: Only works on TCP SYN packets [ 1390.221605][T19894] UDF-fs: Scanning with blocksize 512 failed [ 1390.249114][ T8071] option 3-1:0.0: GSM modem (1-port) converter detected [ 1390.360361][T19894] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1390.531334][ T8736] usb 3-1: USB disconnect, device number 21 [ 1390.541432][ T8736] option 3-1:0.0: device disconnected [ 1391.002342][ T5710] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 1391.412890][ T5710] usb 1-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 1391.427268][ T5710] usb 1-1: config 9 has 0 interfaces, different from the descriptor's value: 1 [ 1391.437812][ T5710] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1391.447292][ T5710] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1391.491476][ T29] audit: type=1804 audit(1391.425:603): pid=19916 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir1728237925/syzkaller.3mDSey/178/bus" dev="sda1" ino=1970 res=1 errno=0 [ 1391.627788][T19916] nvme_fabrics: unknown parameter or missing value ']' in ctrl creation request [ 1392.130692][ T5710] usb 1-1: string descriptor 0 read error: -71 [ 1392.181773][ T5710] usb 1-1: USB disconnect, device number 47 [ 1392.691010][ T3812] IPVS: stop unused estimator thread 0... [ 1393.138236][ T5710] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 1393.401388][ T29] audit: type=1804 audit(1393.345:604): pid=19946 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir1728237925/syzkaller.3mDSey/181/bus" dev="sda1" ino=1973 res=1 errno=0 [ 1393.431918][ T5710] usb 3-1: Using ep0 maxpacket: 16 [ 1393.477741][T19946] nvme_fabrics: unknown parameter or missing value ']' in ctrl creation request [ 1393.562709][ T5710] usb 3-1: config 0 has an invalid interface descriptor of length 2, skipping [ 1393.575460][ T5710] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1393.586253][ T5710] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1393.597187][ T5710] usb 3-1: Duplicate descriptor for config 0 interface 0 altsetting 0, skipping [ 1393.827290][ T5710] usb 3-1: New USB device found, idVendor=0b3c, idProduct=c00b, bcdDevice=5a.83 [ 1393.837883][ T5710] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1393.847091][ T5710] usb 3-1: Product: syz [ 1393.851515][ T5710] usb 3-1: Manufacturer: syz [ 1393.856652][ T5710] usb 3-1: SerialNumber: syz [ 1393.917636][ T5710] usb 3-1: config 0 descriptor?? [ 1393.994340][ T5710] option 3-1:0.0: GSM modem (1-port) converter detected [ 1394.251271][ T5710] usb 3-1: USB disconnect, device number 22 [ 1394.259514][ T5710] option 3-1:0.0: device disconnected [ 1395.017160][ T8071] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 1395.058088][T19976] input: syz0 as /devices/virtual/input/input41 [ 1395.548998][ T8071] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1395.559699][ T8071] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1395.569194][ T8071] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1395.692980][ T8071] usb 4-1: config 0 descriptor?? [ 1397.876931][ T8071] ath6kl: Failed to read usb control message: -71 [ 1397.884297][ T8071] ath6kl: Unable to read the bmi data from the device: -71 [ 1397.891904][ T8071] ath6kl: Unable to recv target info: -71 [ 1397.956962][ T8071] ath6kl: Failed to init ath6kl core: -71 [ 1397.965554][ T8071] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1398.006102][ T8071] usb 4-1: USB disconnect, device number 38 [ 1398.077842][ T29] audit: type=1804 audit(1398.035:605): pid=20005 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir4034180333/syzkaller.RlJ2Vd/18/file1" dev="sda1" ino=1963 res=1 errno=0 [ 1398.632286][ T5710] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 1398.883360][ T5710] usb 2-1: Using ep0 maxpacket: 16 [ 1399.025692][ T5710] usb 2-1: config 0 has an invalid interface descriptor of length 2, skipping [ 1399.036081][ T5710] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1399.045350][ T5710] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1399.056161][ T5710] usb 2-1: Duplicate descriptor for config 0 interface 0 altsetting 0, skipping [ 1399.310470][ T5710] usb 2-1: New USB device found, idVendor=0b3c, idProduct=c00b, bcdDevice=5a.83 [ 1399.320205][ T5710] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1399.328830][ T5710] usb 2-1: Product: syz [ 1399.333380][ T5710] usb 2-1: Manufacturer: syz [ 1399.338226][ T5710] usb 2-1: SerialNumber: syz [ 1399.376441][ T5710] usb 2-1: config 0 descriptor?? [ 1399.449750][ T5710] option 2-1:0.0: GSM modem (1-port) converter detected [ 1399.490618][T20023] input: syz0 as /devices/virtual/input/input42 [ 1399.701535][ T5710] usb 2-1: USB disconnect, device number 35 [ 1399.714253][ T5710] option 2-1:0.0: device disconnected [ 1400.336468][ T29] audit: type=1804 audit(1400.285:606): pid=20037 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2584514474/syzkaller.szJmxT/198/file1" dev="sda1" ino=1969 res=1 errno=0 [ 1400.778252][T20044] loop3: detected capacity change from 0 to 256 [ 1400.819864][T12260] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 1400.930309][T20044] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x1aabf3fb, utbl_chksum : 0xe619d30d) [ 1401.204773][T12260] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1401.215514][T12260] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1401.225278][T12260] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1401.293064][T20055] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1401.303583][T20055] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1401.309294][T12260] usb 2-1: config 0 descriptor?? [ 1401.577640][T20061] loop3: detected capacity change from 0 to 512 [ 1401.635272][T20061] EXT4-fs error (device loop3): __ext4_fill_super:5464: inode #2: comm syz-executor.3: iget: special inode unallocated [ 1401.653503][T20061] EXT4-fs (loop3): get root inode failed [ 1401.665008][T20061] EXT4-fs (loop3): mount failed [ 1402.387948][T20069] loop4: detected capacity change from 0 to 256 [ 1402.447298][ T29] audit: type=1804 audit(1402.425:607): pid=20070 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir819163895/syzkaller.vYXnLb/551/file1" dev="sda1" ino=1971 res=1 errno=0 [ 1402.547477][T20071] input: syz0 as /devices/virtual/input/input43 [ 1402.828777][T20074] loop3: detected capacity change from 0 to 1024 [ 1402.963811][T20074] loop3: detected capacity change from 0 to 164 [ 1403.051424][T20074] fuse: Bad value for 'fd' [ 1404.004708][T12260] ath6kl: Failed to read usb control message: -110 [ 1404.019453][T12260] ath6kl: Unable to read the bmi data from the device: -110 [ 1404.029263][T12260] ath6kl: Unable to recv target info: -110 [ 1404.082657][T12260] ath6kl: Failed to init ath6kl core: -110 [ 1404.090768][T12260] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 1404.131621][T12260] usb 2-1: USB disconnect, device number 36 [ 1404.361234][T20090] loop0: detected capacity change from 0 to 256 [ 1404.504936][T20090] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x1aabf3fb, utbl_chksum : 0xe619d30d) [ 1404.615468][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 1405.190724][T12260] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 1405.233309][ T29] audit: type=1804 audit(1405.155:608): pid=20100 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir819163895/syzkaller.vYXnLb/555/file1" dev="sda1" ino=1966 res=1 errno=0 [ 1405.584318][T12260] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1405.595812][T12260] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1405.606114][T12260] usb 2-1: New USB device found, idVendor=056a, idProduct=0315, bcdDevice= 0.00 [ 1405.615958][T12260] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1405.631687][T12260] usb 2-1: config 0 descriptor?? [ 1405.780492][T20114] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1405.818014][T20117] bridge0: port 3(syz_tun) entered blocking state [ 1405.825915][T20117] bridge0: port 3(syz_tun) entered disabled state [ 1405.833442][T20117] syz_tun: entered allmulticast mode [ 1405.841811][T20117] syz_tun: entered promiscuous mode [ 1405.850607][T20117] bridge0: port 3(syz_tun) entered blocking state [ 1405.857834][T20117] bridge0: port 3(syz_tun) entered forwarding state [ 1405.928282][T20114] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1406.141638][T12260] wacom 0003:056A:0315.002F: unbalanced collection at end of report description [ 1406.237384][T12260] wacom 0003:056A:0315.002F: parse failed [ 1406.245405][T12260] wacom 0003:056A:0315.002F: probe with driver wacom failed with error -22 [ 1406.339053][T20124] loop4: detected capacity change from 0 to 256 [ 1406.383735][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 1406.488858][T20124] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x1aabf3fb, utbl_chksum : 0xe619d30d) [ 1406.788932][T20126] loop2: detected capacity change from 0 to 1024 [ 1406.799803][T20130] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1406.966040][T20126] loop2: detected capacity change from 0 to 164 [ 1407.155355][T20126] fuse: Bad value for 'fd' [ 1407.228864][T20136] loop4: detected capacity change from 0 to 64 [ 1407.296350][T20132] loop3: detected capacity change from 0 to 8192 [ 1407.419466][T12260] usb 2-1: USB disconnect, device number 37 [ 1407.430806][T20139] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1409.675666][T20161] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1409.955302][ T5710] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1410.062905][T12260] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1410.103523][T12260] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1410.201936][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 1410.267101][ T5710] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1410.470147][T20165] loop3: detected capacity change from 0 to 256 [ 1410.483938][ T5710] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1410.568135][ T5710] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1410.616618][T20165] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x1aabf3fb, utbl_chksum : 0xe619d30d) [ 1410.647843][T12260] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1410.657766][T20167] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1410.740407][ T5710] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1410.809259][ T5710] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1410.932999][ T5137] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1411.417100][ T43] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 1411.732409][T20181] loop0: detected capacity change from 0 to 512 [ 1411.758025][T20181] EXT4-fs: Ignoring removed mblk_io_submit option [ 1411.804756][ T43] usb 5-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 1411.814441][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1411.842781][T20181] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 1411.877152][ T43] usb 5-1: config 0 descriptor?? [ 1411.989886][T20181] loop0: detected capacity change from 0 to 256 [ 1412.196407][T20179] loop3: detected capacity change from 0 to 8192 [ 1412.384002][ T43] gs_usb 5-1:0.0: Configuring for 1 interfaces [ 1412.442949][T20185] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1412.851967][ T43] gs_usb 5-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPROTO) [ 1412.866672][ T43] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -71 [ 1412.964525][ T43] usb 5-1: USB disconnect, device number 33 [ 1413.292632][T20194] loop2: detected capacity change from 0 to 1024 [ 1413.587206][T20194] loop2: detected capacity change from 0 to 164 [ 1413.815273][T20194] fuse: Bad value for 'fd' [ 1413.886178][T20201] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1414.130984][T20207] loop4: detected capacity change from 0 to 256 [ 1414.296086][T20207] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x1aabf3fb, utbl_chksum : 0xe619d30d) [ 1414.386626][T20213] loop0: detected capacity change from 0 to 512 [ 1414.580456][T20213] EXT4-fs error (device loop0): ext4_init_orphan_info:586: comm syz-executor.0: inode #0: comm syz-executor.0: iget: illegal inode # [ 1414.654182][T20213] EXT4-fs (loop0): Remounting filesystem read-only [ 1414.667110][T20213] EXT4-fs (loop0): get orphan inode failed [ 1414.690916][T20213] EXT4-fs (loop0): mount failed [ 1414.708756][T20217] loop3: detected capacity change from 0 to 512 [ 1414.744373][T20217] EXT4-fs: Ignoring removed mblk_io_submit option [ 1414.848991][T20217] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 1414.893987][ T29] audit: type=1326 audit(1414.875:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20211 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1386a7cea9 code=0x0 [ 1415.000073][T20217] loop3: detected capacity change from 0 to 256 [ 1415.860935][T12260] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 1417.131537][T12260] usb 5-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 1417.141697][T12260] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1417.199567][T12260] usb 5-1: config 0 descriptor?? [ 1417.908145][T20248] loop1: detected capacity change from 0 to 2048 [ 1418.030360][T20248] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1418.118580][T20246] loop0: detected capacity change from 0 to 32768 [ 1418.166128][T20248] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1418.183917][T12260] gs_usb 5-1:0.0: Configuring for 1 interfaces [ 1418.266452][T20253] loop3: detected capacity change from 0 to 2048 [ 1418.367508][T20256] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1418.387845][T20255] loop2: detected capacity change from 0 to 512 [ 1418.405010][T20255] EXT4-fs: Ignoring removed mblk_io_submit option [ 1418.428041][T20255] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 1418.454350][T12260] gs_usb 5-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPROTO) [ 1418.464595][T12260] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -71 [ 1418.517888][T12260] usb 5-1: USB disconnect, device number 34 [ 1418.545730][T20256] NILFS (loop3): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 1418.563416][T20256] NILFS error (device loop3): nilfs_bmap_propagate: broken bmap (inode number=4) [ 1418.596949][T20256] Remounting filesystem read-only [ 1418.602597][ T3885] NILFS (loop3): discard dirty page: offset=4096, ino=6 [ 1418.609800][ T3885] NILFS (loop3): discard dirty block: blocknr=39, size=1024 [ 1418.617495][ T3885] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1418.626888][ T3885] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1418.636240][ T3885] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1418.669259][T20255] loop2: detected capacity change from 0 to 256 [ 1418.685636][ T3885] NILFS (loop3): discard dirty page: offset=0, ino=2 [ 1418.692887][ T3885] NILFS (loop3): discard dirty block: blocknr=18, size=1024 [ 1418.700617][ T3885] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1418.710607][ T3885] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1418.719935][ T3885] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1418.730487][T20253] NILFS (loop3): mounting fs with errors [ 1418.741576][T20253] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=2) [ 1418.751586][T20253] Remounting filesystem read-only [ 1418.763627][T20253] NILFS error (device loop3): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 1418.937765][T17516] NILFS (loop3): disposed unprocessed dirty file(s) when stopping log writer [ 1418.968100][T17516] NILFS (loop3): discard dirty page: offset=0, ino=6 [ 1418.975290][T17516] NILFS (loop3): discard dirty block: blocknr=35, size=1024 [ 1418.983180][T17516] NILFS (loop3): discard dirty block: blocknr=36, size=1024 [ 1418.990832][T17516] NILFS (loop3): discard dirty block: blocknr=37, size=1024 [ 1418.998610][T17516] NILFS (loop3): discard dirty block: blocknr=38, size=1024 [ 1419.043039][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 1419.055517][T17516] NILFS (loop3): discard dirty page: offset=0, ino=5 [ 1419.068652][T17516] NILFS (loop3): discard dirty block: blocknr=41, size=1024 [ 1419.078434][T17516] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1419.087704][T17516] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1419.097210][T17516] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1419.225740][T17516] NILFS (loop3): discard dirty page: offset=0, ino=4 [ 1419.233031][T17516] NILFS (loop3): discard dirty block: blocknr=40, size=1024 [ 1419.240706][T17516] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1419.250056][T17516] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1419.259358][T17516] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1419.398449][T17516] NILFS (loop3): discard dirty page: offset=0, ino=3 [ 1419.405719][T17516] NILFS (loop3): discard dirty block: blocknr=42, size=1024 [ 1419.413657][T17516] NILFS (loop3): discard dirty block: blocknr=43, size=1024 [ 1419.421210][T17516] NILFS (loop3): discard dirty block: blocknr=44, size=1024 [ 1419.428956][T17516] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1419.438218][T17516] NILFS (loop3): discard dirty page: offset=196608, ino=3 [ 1419.445868][T17516] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1419.455130][T17516] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1419.464712][T17516] NILFS (loop3): discard dirty block: blocknr=49, size=1024 [ 1419.478406][T17516] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1419.934197][T20269] loop0: detected capacity change from 0 to 512 [ 1420.136244][T20269] EXT4-fs error (device loop0): ext4_init_orphan_info:586: comm syz-executor.0: inode #0: comm syz-executor.0: iget: illegal inode # [ 1420.167394][T20269] EXT4-fs (loop0): Remounting filesystem read-only [ 1420.174616][T20269] EXT4-fs (loop0): get orphan inode failed [ 1420.203315][T20269] EXT4-fs (loop0): mount failed [ 1421.227883][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888029da0800: rx timeout, send abort [ 1421.435935][ C1] vxcan0: j1939_xtp_rx_abort_one: 0xffff888029da0800: 0x10000: (3) A timeout occurred and this is the connection abort to close the session. [ 1421.538943][T20282] loop3: detected capacity change from 0 to 32768 [ 1422.097590][T20284] loop1: detected capacity change from 0 to 2048 [ 1422.149638][T20284] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1422.179745][T20284] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1423.291453][T20286] loop2: detected capacity change from 0 to 2048 [ 1423.563376][T12260] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 1423.582613][ T29] audit: type=1800 audit(1423.525:610): pid=20286 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=851 res=0 errno=0 [ 1423.730340][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888029da0c00: rx timeout, send abort [ 1423.963594][T12260] usb 5-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 1423.973687][T12260] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1424.031936][T12260] usb 5-1: config 0 descriptor?? [ 1424.239181][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888029da0c00: abort rx timeout. Force session deactivation [ 1424.328769][T20303] loop3: detected capacity change from 0 to 2048 [ 1424.440371][T20309] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1424.508439][T20309] NILFS (loop3): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 1424.519985][T20309] NILFS error (device loop3): nilfs_bmap_propagate: broken bmap (inode number=4) [ 1424.529131][T12260] gs_usb 5-1:0.0: Configuring for 1 interfaces [ 1424.543569][T20309] Remounting filesystem read-only [ 1424.549007][ T3885] NILFS (loop3): discard dirty page: offset=4096, ino=6 [ 1424.556731][ T3885] NILFS (loop3): discard dirty block: blocknr=39, size=1024 [ 1424.564830][ T3885] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1424.574223][ T3885] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1424.583475][ T3885] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1424.598637][ T3885] NILFS (loop3): discard dirty page: offset=0, ino=2 [ 1424.605807][ T3885] NILFS (loop3): discard dirty block: blocknr=18, size=1024 [ 1424.613607][ T3885] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1424.622977][ T3885] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1424.632232][ T3885] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1424.651474][ T3885] NILFS (loop3): discard dirty page: offset=0, ino=5 [ 1424.658870][ T3885] NILFS (loop3): discard dirty block: blocknr=41, size=1024 [ 1424.666612][ T3885] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1424.675872][ T3885] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1424.685107][ T3885] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1424.699628][ T3885] NILFS (loop3): discard dirty page: offset=0, ino=3 [ 1424.706784][ T3885] NILFS (loop3): discard dirty block: blocknr=42, size=1024 [ 1424.714754][ T3885] NILFS (loop3): discard dirty block: blocknr=43, size=1024 [ 1424.722404][ T3885] NILFS (loop3): discard dirty block: blocknr=44, size=1024 [ 1424.730120][ T3885] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1424.739621][ T3885] NILFS (loop3): discard dirty page: offset=196608, ino=3 [ 1424.747186][ T3885] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1424.756469][ T3885] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1424.765710][ T3885] NILFS (loop3): discard dirty block: blocknr=49, size=1024 [ 1424.773825][ T3885] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1424.807509][ T3885] NILFS (loop3): discard dirty page: offset=0, ino=4 [ 1424.815119][ T3885] NILFS (loop3): discard dirty block: blocknr=40, size=1024 [ 1424.822870][ T3885] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1424.831995][ T3885] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1424.841311][ T3885] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1424.851621][T20303] NILFS (loop3): mounting fs with errors [ 1424.867889][T20303] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=2) [ 1424.877930][T20303] Remounting filesystem read-only [ 1424.894162][T20303] NILFS error (device loop3): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 1424.957894][T12260] gs_usb 5-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPROTO) [ 1424.968395][T12260] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -71 [ 1425.024474][T12260] usb 5-1: USB disconnect, device number 35 [ 1425.243714][T17516] NILFS (loop3): disposed unprocessed dirty file(s) when stopping log writer [ 1425.271674][T17516] NILFS (loop3): discard dirty page: offset=0, ino=6 [ 1425.279168][T17516] NILFS (loop3): discard dirty block: blocknr=35, size=1024 [ 1425.286981][T17516] NILFS (loop3): discard dirty block: blocknr=36, size=1024 [ 1425.294921][T17516] NILFS (loop3): discard dirty block: blocknr=37, size=1024 [ 1425.302577][T17516] NILFS (loop3): discard dirty block: blocknr=38, size=1024 [ 1426.211508][ C0] vxcan0: j1939_tp_rxtimer: 0xffff8880465c8e00: rx timeout, send abort [ 1426.212133][T20324] loop4: detected capacity change from 0 to 2048 [ 1426.414955][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff8880465c8e00: 0x10000: (3) A timeout occurred and this is the connection abort to close the session. [ 1426.610229][ T29] audit: type=1800 audit(1426.475:611): pid=20324 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="loop4" ino=851 res=0 errno=0 [ 1426.879949][T20328] loop2: detected capacity change from 0 to 64 [ 1428.743451][T20344] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1428.753440][T20344] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1429.160053][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88803453aa00: rx timeout, send abort [ 1429.273599][T20353] loop2: detected capacity change from 0 to 2048 [ 1429.577411][T20362] loop1: detected capacity change from 0 to 164 [ 1429.585400][ T29] audit: type=1800 audit(1429.455:612): pid=20353 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=851 res=0 errno=0 [ 1429.668771][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88803453aa00: abort rx timeout. Force session deactivation [ 1430.060776][T20358] loop4: detected capacity change from 0 to 2048 [ 1430.193555][T20358] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1430.249617][T20358] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1430.665842][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88803fb97c00: rx timeout, send abort [ 1430.681304][ C1] vxcan0: j1939_xtp_rx_abort_one: 0xffff88803fb97c00: 0x10000: (3) A timeout occurred and this is the connection abort to close the session. [ 1432.517336][ C1] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1433.274251][ C1] vxcan0: j1939_tp_rxtimer: 0xffff8880347a6800: rx timeout, send abort [ 1433.639317][T20383] loop1: detected capacity change from 0 to 512 [ 1433.782963][ C1] vxcan0: j1939_tp_rxtimer: 0xffff8880347a6800: abort rx timeout. Force session deactivation [ 1433.941541][T20383] EXT4-fs error (device loop1): ext4_init_orphan_info:586: comm syz-executor.1: inode #0: comm syz-executor.1: iget: illegal inode # [ 1434.049254][T20383] EXT4-fs (loop1): Remounting filesystem read-only [ 1434.056928][T20383] EXT4-fs (loop1): get orphan inode failed [ 1434.107997][T20383] EXT4-fs (loop1): mount failed [ 1434.474264][T20387] loop4: detected capacity change from 0 to 32768 [ 1434.497585][T20387] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor.4 (20387) [ 1434.543571][T20387] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1434.554305][T20387] BTRFS info (device loop4): using sha256 (sha256-generic) checksum algorithm [ 1434.565728][T20387] BTRFS info (device loop4): using free-space-tree [ 1434.960046][ T29] audit: type=1326 audit(1434.845:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20382 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f44dbe7cea9 code=0x0 [ 1436.108007][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888045bbd800: rx timeout, send abort [ 1436.317587][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff888045bbd800: 0x10000: (3) A timeout occurred and this is the connection abort to close the session. [ 1436.398058][T18795] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1437.694647][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1438.449422][T20437] loop3: detected capacity change from 0 to 128 [ 1438.456317][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888045bbc400: rx timeout, send abort [ 1438.956488][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888045bbc400: abort rx timeout. Force session deactivation [ 1439.260688][T20444] loop3: detected capacity change from 0 to 1024 [ 1439.460332][T20445] loop2: detected capacity change from 0 to 4096 [ 1439.522497][T20444] loop3: detected capacity change from 0 to 164 [ 1439.601868][T20445] NILFS (loop2): invalid segment: Checksum error in segment payload [ 1439.610724][T20445] NILFS (loop2): trying rollback from an earlier position [ 1439.691953][T20445] NILFS (loop2): recovery complete [ 1439.720619][T20452] fuse: Bad value for 'fd' [ 1439.817481][T20454] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1440.034011][ T29] audit: type=1800 audit(1439.965:614): pid=20445 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=13 res=0 errno=0 [ 1441.563552][ C0] vxcan0: j1939_tp_rxtimer: 0xffff8880345c1e00: rx timeout, send abort [ 1441.629425][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff8880345c1e00: 0x10000: (3) A timeout occurred and this is the connection abort to close the session. [ 1447.193863][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1447.950768][ C0] vxcan0: j1939_tp_rxtimer: 0xffff8880345c1400: rx timeout, send abort [ 1447.953592][ T1230] ieee802154 phy0 wpan0: encryption failed: -22 [ 1447.966077][ T1230] ieee802154 phy1 wpan1: encryption failed: -22 [ 1448.459509][ C0] vxcan0: j1939_tp_rxtimer: 0xffff8880345c1400: abort rx timeout. Force session deactivation [ 1448.580536][T20474] loop3: detected capacity change from 0 to 128 [ 1448.625152][T20477] netlink: 'syz-executor.1': attribute type 22 has an invalid length. [ 1449.535034][T20487] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1449.566162][T20485] loop4: detected capacity change from 0 to 4096 [ 1449.671514][T20485] NILFS (loop4): invalid segment: Checksum error in segment payload [ 1449.684044][T20485] NILFS (loop4): trying rollback from an earlier position [ 1449.819874][T20485] NILFS (loop4): recovery complete [ 1449.826640][T20487] x_tables: duplicate underflow at hook 2 [ 1449.881446][T20494] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1450.119060][ T29] audit: type=1800 audit(1450.065:615): pid=20485 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="loop4" ino=13 res=0 errno=0 [ 1450.533364][T20506] loop1: detected capacity change from 0 to 128 [ 1450.573097][T20507] netlink: 'syz-executor.2': attribute type 22 has an invalid length. [ 1452.324272][T20533] netlink: 'syz-executor.4': attribute type 22 has an invalid length. [ 1452.380621][T20535] loop2: detected capacity change from 0 to 128 [ 1452.597145][T20531] loop3: detected capacity change from 0 to 4096 [ 1452.767608][T20531] NILFS (loop3): invalid segment: Checksum error in segment payload [ 1452.776336][T20531] NILFS (loop3): trying rollback from an earlier position [ 1452.892839][T20531] NILFS (loop3): recovery complete [ 1452.927406][T20542] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1453.093678][ T29] audit: type=1800 audit(1453.055:616): pid=20531 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="loop3" ino=13 res=0 errno=0 [ 1453.712921][ T8736] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 1454.104000][ T8736] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1454.116441][ T8736] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1454.130253][ T8736] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1454.139979][ T8736] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1454.213965][ T8736] usb 2-1: config 0 descriptor?? [ 1454.307582][T20560] netlink: 'syz-executor.4': attribute type 22 has an invalid length. [ 1454.681925][T20565] loop2: detected capacity change from 0 to 128 [ 1454.748556][ T8736] plantronics 0003:047F:FFFF.0030: No inputs registered, leaving [ 1454.780253][ T8736] plantronics 0003:047F:FFFF.0030: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1454.846274][ T29] audit: type=1804 audit(1454.795:617): pid=20568 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2584514474/syzkaller.szJmxT/242/bus" dev="sda1" ino=1979 res=1 errno=0 [ 1454.898752][T20569] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1454.931852][T20569] vlan2: entered promiscuous mode [ 1454.937523][T20569] mac80211_hwsim hwsim63 wlan0: entered promiscuous mode [ 1454.989857][T20569] mac80211_hwsim hwsim63 wlan0: left promiscuous mode [ 1455.034290][T12260] usb 2-1: USB disconnect, device number 38 [ 1455.642592][ T29] audit: type=1800 audit(1455.585:618): pid=20568 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz-executor.3" name="/root/syzkaller-testdir2584514474/syzkaller.szJmxT/242/bus" dev="sda1" ino=1979 res=0 errno=0 [ 1455.669026][ T29] audit: type=1804 audit(1455.585:619): pid=20571 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2584514474/syzkaller.szJmxT/242/bus" dev="sda1" ino=1979 res=1 errno=0 [ 1455.693721][ T29] audit: type=1804 audit(1455.595:620): pid=20573 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2584514474/syzkaller.szJmxT/242/bus" dev="sda1" ino=1979 res=1 errno=0 [ 1456.612622][T20589] loop4: detected capacity change from 0 to 4096 [ 1456.632995][T20596] loop3: detected capacity change from 0 to 8 [ 1456.734708][T20596] SQUASHFS error: Unable to read inode 0x11f [ 1456.786744][T20599] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1457.048034][ T29] audit: type=1800 audit(1456.985:621): pid=20596 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1971 res=0 errno=0 [ 1457.072592][ T29] audit: type=1800 audit(1457.015:622): pid=20596 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1971 res=0 errno=0 [ 1457.387269][ T29] audit: type=1326 audit(1457.325:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20585 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0e27c7cea9 code=0x0 [ 1457.695706][T20608] loop3: detected capacity change from 0 to 1764 [ 1457.759461][ T29] audit: type=1804 audit(1457.715:624): pid=20611 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir1728237925/syzkaller.3mDSey/243/bus" dev="sda1" ino=1979 res=1 errno=0 [ 1457.821061][T20608] input: syz1 as /devices/virtual/input/input44 [ 1457.829916][ T5137] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 1457.967298][T20615] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1458.262750][ T5137] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1458.274289][ T5137] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1458.293476][ T5137] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1458.302989][ T5137] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1458.345183][ T5137] usb 3-1: config 0 descriptor?? [ 1458.611947][ T29] audit: type=1800 audit(1458.535:625): pid=20611 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz-executor.1" name="/root/syzkaller-testdir1728237925/syzkaller.3mDSey/243/bus" dev="sda1" ino=1979 res=0 errno=0 [ 1458.639288][ T29] audit: type=1804 audit(1458.535:626): pid=20613 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir1728237925/syzkaller.3mDSey/243/bus" dev="sda1" ino=1979 res=1 errno=0 [ 1458.664080][ T29] audit: type=1804 audit(1458.545:627): pid=20614 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir1728237925/syzkaller.3mDSey/243/bus" dev="sda1" ino=1979 res=1 errno=0 [ 1458.903938][ T5137] plantronics 0003:047F:FFFF.0031: No inputs registered, leaving [ 1458.983345][ T5137] plantronics 0003:047F:FFFF.0031: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 1459.192484][T12260] usb 3-1: USB disconnect, device number 23 [ 1459.617204][T20630] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 1459.626905][T20630] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 1460.318498][T20637] loop3: detected capacity change from 0 to 8 [ 1460.394659][T20637] SQUASHFS error: Unable to read inode 0x11f [ 1460.586102][ T8071] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 1460.666373][ T29] audit: type=1800 audit(1460.575:628): pid=20637 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1960 res=0 errno=0 [ 1460.687476][ T29] audit: type=1800 audit(1460.605:629): pid=20637 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1960 res=0 errno=0 [ 1460.850462][ T8071] usb 3-1: Using ep0 maxpacket: 32 [ 1460.858643][T14268] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1460.868531][T14268] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1460.878631][T14268] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1460.914506][T14268] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1460.934964][T14268] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1460.955112][T14268] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1461.001377][ T8071] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1461.013795][ T8071] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1461.362963][ T8071] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1461.372614][ T8071] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1461.381247][ T8071] usb 3-1: Product: syz [ 1461.386710][ T8071] usb 3-1: Manufacturer: syz [ 1461.483812][ T8071] hub 3-1:4.0: USB hub found [ 1461.812801][T20646] loop3: detected capacity change from 0 to 4096 [ 1461.858462][T20646] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 1461.879589][T20641] chnl_net:caif_netlink_parms(): no params data found [ 1461.899220][T20646] ntfs3: loop3: Failed to load $Volume (-22). [ 1462.061068][ T8071] hub 3-1:4.0: config failed, can't read hub descriptor (err -22) [ 1462.729226][ T29] audit: type=1804 audit(1462.665:630): pid=20659 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir1728237925/syzkaller.3mDSey/248/bus" dev="sda1" ino=1963 res=1 errno=0 [ 1463.013107][T14268] Bluetooth: hci5: command tx timeout [ 1463.554541][ T29] audit: type=1800 audit(1463.445:631): pid=20659 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz-executor.1" name="/root/syzkaller-testdir1728237925/syzkaller.3mDSey/248/bus" dev="sda1" ino=1963 res=0 errno=0 [ 1463.581862][ T29] audit: type=1804 audit(1463.465:632): pid=20662 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir1728237925/syzkaller.3mDSey/248/bus" dev="sda1" ino=1963 res=1 errno=0 [ 1463.610582][ T29] audit: type=1804 audit(1463.465:633): pid=20664 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir1728237925/syzkaller.3mDSey/248/bus" dev="sda1" ino=1963 res=1 errno=0 [ 1463.965078][T20641] bridge0: port 1(bridge_slave_0) entered blocking state [ 1463.973067][T20641] bridge0: port 1(bridge_slave_0) entered disabled state [ 1463.980957][T20641] bridge_slave_0: entered allmulticast mode [ 1463.990806][T20641] bridge_slave_0: entered promiscuous mode [ 1464.104615][T20641] bridge0: port 2(bridge_slave_1) entered blocking state [ 1464.112782][T20641] bridge0: port 2(bridge_slave_1) entered disabled state [ 1464.126002][T20641] bridge_slave_1: entered allmulticast mode [ 1464.135447][T20641] bridge_slave_1: entered promiscuous mode [ 1464.291613][T20641] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1464.332758][T20641] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1464.523346][T20680] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 1464.537567][T20680] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 1464.570871][T20641] team0: Port device team_slave_0 added [ 1464.618560][T20641] team0: Port device team_slave_1 added [ 1464.834288][ T781] usb 3-1: USB disconnect, device number 24 [ 1464.857080][T20641] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1464.864865][T20641] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1464.891442][T20641] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1464.948584][T20641] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1464.957133][T20641] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1464.984513][T20641] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1465.103675][T14268] Bluetooth: hci5: command tx timeout [ 1465.234541][T20641] hsr_slave_0: entered promiscuous mode [ 1465.263355][T20641] hsr_slave_1: entered promiscuous mode [ 1465.276725][T20641] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1465.284681][T20641] Cannot create hsr debugfs directory [ 1465.430908][ T8732] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 1465.804231][T20641] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1465.821552][ T8732] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1465.832953][ T8732] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1465.846341][ T8732] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1465.855917][ T8732] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1465.919253][ T8732] usb 3-1: config 0 descriptor?? [ 1465.992776][T20641] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1466.154550][T20641] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1466.321746][T20641] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1466.437096][ T8732] plantronics 0003:047F:FFFF.0032: No inputs registered, leaving [ 1466.486667][ T8732] plantronics 0003:047F:FFFF.0032: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 1466.751316][ T8732] usb 3-1: USB disconnect, device number 25 [ 1466.770650][T20641] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1466.841144][T20641] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1466.904228][T20641] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1466.949955][T20641] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1467.172579][T14268] Bluetooth: hci5: command tx timeout [ 1467.239267][T20694] loop3: detected capacity change from 0 to 4096 [ 1467.268006][T20694] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 1467.322726][T20694] ntfs3: loop3: Failed to load $Volume (-22). [ 1467.876192][T20641] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1467.970224][T20641] 8021q: adding VLAN 0 to HW filter on device team0 [ 1468.069653][ T5137] bridge0: port 1(bridge_slave_0) entered blocking state [ 1468.077628][ T5137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1468.189749][ T5137] bridge0: port 2(bridge_slave_1) entered blocking state [ 1468.197704][ T5137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1469.043700][ T5137] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 1469.116180][T20709] fuse: Unknown parameter 'f0x0000000000000009' [ 1469.254063][T14268] Bluetooth: hci5: command tx timeout [ 1469.332547][ T5137] usb 4-1: Using ep0 maxpacket: 32 [ 1469.461085][ T5137] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1469.472578][ T5137] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1469.527787][T20641] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1469.643388][T20713] loop2: detected capacity change from 0 to 128 [ 1469.791970][T20713] syz-executor.2: attempt to access beyond end of device [ 1469.791970][T20713] loop2: rw=2051, sector=128, nr_sectors = 913 limit=128 [ 1470.319996][ T5137] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1470.330001][ T5137] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1470.338879][ T5137] usb 4-1: Product: syz [ 1470.408536][T20641] veth0_vlan: entered promiscuous mode [ 1470.453513][ T5137] usb 4-1: can't set config #4, error -71 [ 1470.498384][ T5137] usb 4-1: USB disconnect, device number 39 [ 1470.533665][T20641] veth1_vlan: entered promiscuous mode [ 1471.149956][T20641] veth0_macvtap: entered promiscuous mode [ 1471.315791][T20641] veth1_macvtap: entered promiscuous mode [ 1471.469263][T20722] loop2: detected capacity change from 0 to 40427 [ 1471.542562][T20722] F2FS-fs (loop2): Wrong NAT boundary, start(2560) end(3584) blocks(134218752) [ 1471.551842][T20722] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 1471.565082][T20722] F2FS-fs (loop2): invalid crc value [ 1471.608758][T20641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1471.620955][T20641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1471.633599][T20641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1471.645642][T20641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1471.657901][T20641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1471.669110][T20641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1471.679459][T20641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1471.690334][T20641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1471.713312][T20641] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1471.811962][T20641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1471.823184][T20641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1471.833608][T20641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1471.844938][T20641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1471.855108][T20641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1471.865971][T20641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1471.876180][T20641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1471.886968][T20641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1471.899794][T20641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1471.917169][T20641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1471.936473][T20641] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1471.946718][T20722] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1472.245790][T20641] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1472.255312][T20641] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1472.264503][T20641] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1472.273613][T20641] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1472.331220][T20722] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 1472.338881][T20722] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 1473.324847][T20739] loop3: detected capacity change from 0 to 256 [ 1474.506279][T20752] sock: sock_set_timeout: `syz-executor.3' (pid 20752) tries to set negative timeout [ 1474.593357][T20749] loop2: detected capacity change from 0 to 4096 [ 1474.742854][T20753] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1474.887516][ T29] audit: type=1800 audit(1474.815:634): pid=20749 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 1475.287680][T20759] loop3: detected capacity change from 0 to 128 [ 1475.475093][T20759] syz-executor.3: attempt to access beyond end of device [ 1475.475093][T20759] loop3: rw=2051, sector=128, nr_sectors = 913 limit=128 [ 1475.573991][T18796] Bluetooth: hci2: command 0x0406 tx timeout [ 1475.851859][ T4133] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1475.860197][ T4133] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1476.047225][ T4001] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1476.056061][ T4001] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1476.221151][T20768] loop2: detected capacity change from 0 to 4096 [ 1477.216405][T20781] loop0: detected capacity change from 0 to 2048 [ 1477.389859][T20781] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1477.531291][T20790] sock: sock_set_timeout: `syz-executor.3' (pid 20790) tries to set negative timeout [ 1477.628732][T20780] futex_wake_op: syz-executor.0 tries to shift op by -1; fix this program [ 1477.700069][T20780] fs-verity: sha512 using implementation "sha512-generic" [ 1478.158593][T20641] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1478.199492][T20795] loop3: detected capacity change from 0 to 4096 [ 1478.320949][T20799] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1478.428533][ T29] audit: type=1800 audit(1478.365:635): pid=20795 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 1478.916060][T20809] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1479.706717][T20812] loop3: detected capacity change from 0 to 4096 [ 1479.790157][T20818] sock: sock_set_timeout: `syz-executor.1' (pid 20818) tries to set negative timeout [ 1482.928793][T20864] loop2: detected capacity change from 0 to 4096 [ 1484.433334][T20875] loop1: detected capacity change from 0 to 40427 [ 1484.447740][T20875] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 1484.456606][T20875] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1484.484281][T20875] F2FS-fs (loop1): invalid crc value [ 1484.543386][ T3885] bridge_slave_1: left allmulticast mode [ 1484.549314][ T3885] bridge_slave_1: left promiscuous mode [ 1484.556678][ T3885] bridge0: port 2(bridge_slave_1) entered disabled state [ 1484.630058][T20875] F2FS-fs (loop1): Mismatch valid blocks 0 vs. 2 [ 1484.643898][T20875] F2FS-fs (loop1): Failed to initialize F2FS segment manager (-117) [ 1484.684605][ T3885] bridge_slave_0: left allmulticast mode [ 1484.690535][ T3885] bridge_slave_0: left promiscuous mode [ 1484.698002][ T3885] bridge0: port 1(bridge_slave_0) entered disabled state [ 1486.475836][ T3885] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1486.563892][ T3885] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1486.606481][ T3885] bond0 (unregistering): Released all slaves [ 1486.705524][T20891] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1486.730555][T20901] sock: sock_set_timeout: `syz-executor.1' (pid 20901) tries to set negative timeout [ 1487.610726][ T3885] hsr_slave_0: left promiscuous mode [ 1487.635520][ T3885] hsr_slave_1: left promiscuous mode [ 1487.699573][ T3885] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1487.707733][ T3885] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1487.744333][T20909] loop1: detected capacity change from 0 to 4096 [ 1487.762018][ T3885] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1487.770117][ T3885] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1487.886503][ T3885] veth1_macvtap: left promiscuous mode [ 1487.892783][ T3885] veth0_macvtap: left promiscuous mode [ 1487.898783][ T3885] veth1_vlan: left promiscuous mode [ 1487.905028][ T3885] veth0_vlan: left promiscuous mode [ 1489.464353][T20926] loop2: detected capacity change from 0 to 40427 [ 1489.494837][T20926] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 1489.502873][T20926] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 1489.524093][T20926] F2FS-fs (loop2): invalid crc value [ 1489.559507][T20926] F2FS-fs (loop2): Mismatch valid blocks 0 vs. 2 [ 1489.577133][T20926] F2FS-fs (loop2): Failed to initialize F2FS segment manager (-117) [ 1490.676238][ T3885] team0 (unregistering): Port device team_slave_1 removed [ 1490.825612][ T3885] team0 (unregistering): Port device team_slave_0 removed [ 1491.058766][T20651] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 1491.209972][T20931] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1491.223405][T20936] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1491.465411][T20651] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1491.476629][T20651] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1491.486773][T20651] usb 2-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 1491.496198][T20651] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1491.570746][T20651] usb 2-1: config 0 descriptor?? [ 1492.102950][T20651] usbhid 2-1:0.0: can't add hid device: -71 [ 1492.108244][ T781] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 1492.109494][T20651] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1492.232309][T20651] usb 2-1: USB disconnect, device number 39 [ 1492.283501][T20943] loop2: detected capacity change from 0 to 2048 [ 1492.291535][T20943] udf: Unknown parameter 'utf83*z|y’Í04000000000000000001' [ 1492.390083][ T781] usb 1-1: Using ep0 maxpacket: 32 [ 1492.543178][ T781] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 1492.554825][ T781] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 1492.566835][ T781] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1492.576660][ T781] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1492.662832][ T781] usb 1-1: config 0 descriptor?? [ 1492.696154][T20942] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1492.785169][ T781] hub 1-1:0.0: USB hub found [ 1493.022646][ T781] hub 1-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 1493.290798][T20951] loop1: detected capacity change from 0 to 4096 [ 1493.421991][ T781] hid-generic 0003:046D:C314.0033: item fetching failed at offset 0/1 [ 1493.457799][ T781] hid-generic 0003:046D:C314.0033: probe with driver hid-generic failed with error -22 [ 1493.773095][T20717] usb 1-1: USB disconnect, device number 48 [ 1494.543109][T20966] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1495.014528][T20972] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1495.562898][ T781] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 1495.612775][T20978] loop0: detected capacity change from 0 to 2048 [ 1495.621689][T20978] udf: Unknown parameter 'utf83*z|y’Í04000000000000000001' [ 1495.973505][ T781] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1495.985034][ T781] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1495.995415][ T781] usb 3-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 1496.004933][ T781] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1496.031176][T20985] loop1: detected capacity change from 0 to 256 [ 1496.054537][ T781] usb 3-1: config 0 descriptor?? [ 1496.246008][T20985] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001e4a3, chksum : 0x009ea0b8, utbl_chksum : 0x7319d30d) [ 1496.469216][T20988] loop4: detected capacity change from 0 to 1024 [ 1496.603432][ T781] hid-led 0003:1D34:000A.0034: unknown main item tag 0x0 [ 1496.843523][ T781] hid-led 0003:1D34:000A.0034: hidraw0: USB HID v0.00 Device [HID 1d34:000a] on usb-dummy_hcd.2-1/input0 [ 1496.860568][ T781] hid-led 0003:1D34:000A.0034: Dream Cheeky Webmail Notifier initialized [ 1497.312687][T20651] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 1497.412035][T20997] loop0: detected capacity change from 0 to 16 [ 1497.440930][T20997] erofs: (device loop0): mounted with root inode @ nid 36. [ 1497.462619][T20997] syz-executor.0: attempt to access beyond end of device [ 1497.462619][T20997] loop0: rw=0, sector=40, nr_sectors = 8 limit=16 [ 1497.525143][T21000] erofs: (device loop0): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 36 [ 1497.536513][T21000] syz-executor.0: attempt to access beyond end of device [ 1497.536513][T21000] loop0: rw=0, sector=296, nr_sectors = 8 limit=16 [ 1497.550736][T21000] erofs: (device loop0): z_erofs_read_folio: read error -117 @ 0 of nid 36 [ 1497.560071][T21000] erofs: (device loop0): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 1497.583226][T20651] usb 2-1: Using ep0 maxpacket: 32 [ 1497.746171][T20651] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 1497.758090][T20651] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 1497.769618][T20651] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1497.778992][T20651] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1497.839508][T20651] usb 2-1: config 0 descriptor?? [ 1497.884131][T20994] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1497.958819][T20651] hub 2-1:0.0: USB hub found [ 1498.300931][T20717] usb 3-1: USB disconnect, device number 26 [ 1498.329351][ T781] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 1498.345078][T20651] hub 2-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 1498.646479][T20997] syz-executor.0 (20997): drop_caches: 2 [ 1498.673276][ T781] usb 5-1: Using ep0 maxpacket: 32 [ 1498.722596][T20651] hid-generic 0003:046D:C314.0035: item fetching failed at offset 0/1 [ 1498.793016][ T781] usb 5-1: config 0 has no interfaces? [ 1498.811143][T20651] hid-generic 0003:046D:C314.0035: probe with driver hid-generic failed with error -22 [ 1498.963132][ T781] usb 5-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 1498.972829][ T781] usb 5-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 1498.981470][ T781] usb 5-1: Product: syz [ 1498.986130][ T781] usb 5-1: Manufacturer: syz [ 1498.990979][ T781] usb 5-1: SerialNumber: syz [ 1499.020541][ T781] usb 5-1: config 0 descriptor?? [ 1499.089383][T20651] usb 2-1: USB disconnect, device number 40 [ 1499.558590][T21013] loop0: detected capacity change from 0 to 2048 [ 1499.598028][T21013] udf: Unknown parameter 'utf83*z|y’Í04000000000000000001' [ 1499.628192][T20651] usb 5-1: USB disconnect, device number 36 [ 1499.852348][T21018] loop1: detected capacity change from 0 to 256 [ 1500.017674][T21018] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001e4a3, chksum : 0x009ea0b8, utbl_chksum : 0x7319d30d) [ 1501.617290][T21042] loop1: detected capacity change from 0 to 2048 [ 1501.642558][T21042] udf: Unknown parameter 'utf83*z|y’Í04000000000000000001' [ 1501.733704][T21050] loop0: detected capacity change from 0 to 256 [ 1501.831884][T21050] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001e4a3, chksum : 0x009ea0b8, utbl_chksum : 0x7319d30d) [ 1501.852741][ T781] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 1502.126980][ T781] usb 3-1: Using ep0 maxpacket: 32 [ 1502.252818][ T781] usb 3-1: config 0 has no interfaces? [ 1502.433003][ T781] usb 3-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 1502.443233][ T781] usb 3-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 1502.452349][ T781] usb 3-1: Product: syz [ 1502.456796][ T781] usb 3-1: Manufacturer: syz [ 1502.461640][ T781] usb 3-1: SerialNumber: syz [ 1502.537141][ T781] usb 3-1: config 0 descriptor?? [ 1503.104063][ T781] usb 3-1: USB disconnect, device number 27 [ 1503.703609][T21079] loop1: detected capacity change from 0 to 256 [ 1503.780215][T21079] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001e4a3, chksum : 0x009ea0b8, utbl_chksum : 0x7319d30d) [ 1505.391380][T21112] loop4: detected capacity change from 0 to 256 [ 1505.452633][ T781] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 1505.476690][T21112] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001e4a3, chksum : 0x009ea0b8, utbl_chksum : 0x7319d30d) [ 1505.557795][T21111] loop0: detected capacity change from 0 to 1024 [ 1505.722568][ T781] usb 3-1: Using ep0 maxpacket: 32 [ 1505.872908][ T781] usb 3-1: config 0 has no interfaces? [ 1506.122572][ T781] usb 3-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 1506.132881][ T781] usb 3-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 1506.141527][ T781] usb 3-1: Product: syz [ 1506.146064][ T781] usb 3-1: Manufacturer: syz [ 1506.150543][T21114] loop1: detected capacity change from 0 to 2048 [ 1506.150812][ T781] usb 3-1: SerialNumber: syz [ 1506.191095][T21114] udf: Unknown parameter 'archarset' [ 1506.209822][ T781] usb 3-1: config 0 descriptor?? [ 1506.441944][T21114] loop1: detected capacity change from 0 to 256 [ 1506.491666][T21114] FAT-fs (loop1): Unrecognized mount option "codepagƒ3864" or missing value [ 1506.803993][T21121] sch_tbf: burst 7768 is lower than device lo mtu (65550) ! [ 1507.378662][T21114] loop1: detected capacity change from 0 to 32768 [ 1507.392997][T21114] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor.1 (21114) [ 1507.457790][T20651] usb 3-1: USB disconnect, device number 28 [ 1507.489846][T21114] BTRFS info (device loop1): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 1507.500694][T21114] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 1507.510998][T21114] BTRFS info (device loop1): using free-space-tree [ 1507.598936][T21129] loop4: detected capacity change from 0 to 256 [ 1508.347611][T17459] BTRFS info (device loop1): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 1509.353668][ T1230] ieee802154 phy0 wpan0: encryption failed: -22 [ 1509.360405][ T1230] ieee802154 phy1 wpan1: encryption failed: -22 [ 1510.218708][T20651] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 1510.547110][T20652] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 1510.625639][T20651] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1510.636453][T20651] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1510.759381][T20651] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1510.769845][T20651] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1510.778292][T20651] usb 1-1: SerialNumber: syz [ 1510.782388][ T781] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 1510.839693][T20652] usb 5-1: Using ep0 maxpacket: 32 [ 1510.992644][T20652] usb 5-1: config 0 has no interfaces? [ 1511.032335][ T781] usb 2-1: Using ep0 maxpacket: 16 [ 1511.112497][T20651] usb 1-1: 0:2 : does not exist [ 1511.117720][T20651] usb 1-1: unit 55 not found! [ 1511.155391][ T781] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1511.167201][ T781] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1511.177611][ T781] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1511.190964][ T781] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1511.200425][ T781] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1511.264148][ T781] usb 2-1: config 0 descriptor?? [ 1511.659739][T20651] usb 1-1: USB disconnect, device number 49 [ 1511.673329][T20652] usb 5-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 1511.682833][T20652] usb 5-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 1511.691473][T20652] usb 5-1: Product: syz [ 1511.696396][T20652] usb 5-1: Manufacturer: syz [ 1511.701344][T20652] usb 5-1: SerialNumber: syz [ 1511.725180][T20652] usb 5-1: config 0 descriptor?? [ 1511.884403][ T781] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0036/input/input45 [ 1512.083495][ T781] microsoft 0003:045E:07DA.0036: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 1512.154093][ T781] usb 2-1: USB disconnect, device number 41 [ 1512.332890][T18796] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1512.343698][T18796] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1512.391861][T18796] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1512.409127][ T8069] usb 5-1: USB disconnect, device number 37 [ 1512.444842][T18796] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1512.475888][T18796] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1512.489739][T18796] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1512.540983][T21189] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1512.549736][T21189] netlink: 17 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1513.435652][T21200] loop2: detected capacity change from 0 to 1024 [ 1513.955504][T20652] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 1513.995161][T17869] hfsplus: b-tree write err: -5, ino 4 [ 1514.117435][T21184] chnl_net:caif_netlink_parms(): no params data found [ 1514.383370][T20652] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1514.394052][T20652] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1514.532789][T18796] Bluetooth: hci2: command tx timeout [ 1514.552872][T20652] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1514.562424][T20652] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1514.570711][T20652] usb 2-1: SerialNumber: syz [ 1514.925811][T20652] usb 2-1: 0:2 : does not exist [ 1514.931009][T20652] usb 2-1: unit 55 not found! [ 1514.949224][T21220] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1514.958205][T21220] netlink: 17 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1515.020078][ T8069] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 1515.058432][T20652] usb 2-1: USB disconnect, device number 42 [ 1515.330129][ T8069] usb 1-1: Using ep0 maxpacket: 16 [ 1515.459185][T21184] bridge0: port 1(bridge_slave_0) entered blocking state [ 1515.467608][T21184] bridge0: port 1(bridge_slave_0) entered disabled state [ 1515.476452][T21184] bridge_slave_0: entered allmulticast mode [ 1515.486214][T21184] bridge_slave_0: entered promiscuous mode [ 1515.540441][ T8069] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1515.552570][ T8069] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1515.562869][ T8069] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1515.576212][ T8069] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1515.585786][ T8069] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1515.665042][T21184] bridge0: port 2(bridge_slave_1) entered blocking state [ 1515.673021][T21184] bridge0: port 2(bridge_slave_1) entered disabled state [ 1515.680992][T21184] bridge_slave_1: entered allmulticast mode [ 1515.690418][T21184] bridge_slave_1: entered promiscuous mode [ 1515.703064][ T8069] usb 1-1: config 0 descriptor?? [ 1516.008255][T21184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1516.011975][T21229] loop1: detected capacity change from 0 to 8 [ 1516.050276][T21184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1516.145439][T20652] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 1516.261470][T21184] team0: Port device team_slave_0 added [ 1516.317048][ T8069] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0037/input/input46 [ 1516.360486][T21184] team0: Port device team_slave_1 added [ 1516.427590][T20652] usb 5-1: Using ep0 maxpacket: 32 [ 1516.497411][ T8069] microsoft 0003:045E:07DA.0037: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 1516.528774][ T8069] usb 1-1: USB disconnect, device number 50 [ 1516.562838][T20652] usb 5-1: config 0 has no interfaces? [ 1516.609004][T21184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1516.616401][T21184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1516.628541][T18796] Bluetooth: hci2: command tx timeout [ 1516.644551][T21184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1516.683941][T21184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1516.691213][T21184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1516.718258][T21184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1516.833087][T20652] usb 5-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 1516.842974][T20652] usb 5-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 1516.851620][T20652] usb 5-1: Product: syz [ 1516.861271][T20652] usb 5-1: Manufacturer: syz [ 1516.867979][T20652] usb 5-1: SerialNumber: syz [ 1516.895436][T20652] usb 5-1: config 0 descriptor?? [ 1517.031963][T21184] hsr_slave_0: entered promiscuous mode [ 1517.084203][T21184] hsr_slave_1: entered promiscuous mode [ 1517.097421][T21236] loop2: detected capacity change from 0 to 1024 [ 1517.109106][T21184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1517.117045][T21184] Cannot create hsr debugfs directory [ 1517.467590][ T781] usb 5-1: USB disconnect, device number 38 [ 1517.630530][ T4001] hfsplus: b-tree write err: -5, ino 4 [ 1518.122715][ T29] audit: type=1326 audit(1518.075:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21246 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee30a7cea9 code=0x7ffc0000 [ 1518.146377][ T29] audit: type=1326 audit(1518.075:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21246 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee30a7cea9 code=0x7ffc0000 [ 1518.169454][ T29] audit: type=1326 audit(1518.115:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21246 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fee30a7cea9 code=0x7ffc0000 [ 1518.171144][T21184] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1518.195954][ T29] audit: type=1326 audit(1518.115:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21246 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee30a7cea9 code=0x7ffc0000 [ 1518.196194][ T29] audit: type=1326 audit(1518.115:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21246 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=225 compat=0 ip=0x7fee30a7cea9 code=0x7ffc0000 [ 1518.196413][ T29] audit: type=1326 audit(1518.115:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21246 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee30a7cea9 code=0x7ffc0000 [ 1518.196633][ T29] audit: type=1326 audit(1518.115:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21246 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fee30a7cea9 code=0x7ffc0000 [ 1518.196851][ T29] audit: type=1326 audit(1518.115:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21246 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee30a7cea9 code=0x7ffc0000 [ 1518.197067][ T29] audit: type=1326 audit(1518.115:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21246 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fee30a7cea9 code=0x7ffc0000 [ 1518.197292][ T29] audit: type=1326 audit(1518.135:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21246 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee30a7cea9 code=0x7ffc0000 [ 1518.658109][T21184] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1518.722604][T18796] Bluetooth: hci2: command tx timeout [ 1518.958779][T21184] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1519.203959][T21184] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1519.786926][T21184] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1519.869283][T21184] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1519.943495][ T8069] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 1519.943808][T21184] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1519.990058][T21267] loop0: detected capacity change from 0 to 1024 [ 1520.054720][T21184] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1520.203653][ T8069] usb 2-1: Using ep0 maxpacket: 16 [ 1520.345268][ T8069] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1520.356737][ T8069] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1520.367776][ T8069] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1520.381511][ T8069] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1520.391447][ T8069] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1520.423571][ T3885] hfsplus: b-tree write err: -5, ino 4 [ 1520.454377][ T8069] usb 2-1: config 0 descriptor?? [ 1520.772330][T14268] Bluetooth: hci2: command tx timeout [ 1521.064439][ T8069] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0038/input/input47 [ 1521.193131][ T8069] microsoft 0003:045E:07DA.0038: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 1521.325021][T21184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1521.333679][ T8069] usb 2-1: USB disconnect, device number 43 [ 1521.530422][T21184] 8021q: adding VLAN 0 to HW filter on device team0 [ 1521.618593][ T781] bridge0: port 1(bridge_slave_0) entered blocking state [ 1521.626616][ T781] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1521.755036][ T781] bridge0: port 2(bridge_slave_1) entered blocking state [ 1521.762928][ T781] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1522.096130][T21184] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1522.853157][T14268] Bluetooth: hci2: command 0x0405 tx timeout [ 1523.963775][T21184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1524.500841][T21184] veth0_vlan: entered promiscuous mode [ 1524.629827][T21184] veth1_vlan: entered promiscuous mode [ 1524.954636][T14268] Bluetooth: hci2: command 0x0405 tx timeout [ 1525.115015][T21184] veth0_macvtap: entered promiscuous mode [ 1525.214649][T21184] veth1_macvtap: entered promiscuous mode [ 1525.424424][T21184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1525.435408][T21184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1525.445720][T21184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1525.460966][T21184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1525.472426][T21184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1525.483216][T21184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1525.493390][T21184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1525.504289][T21184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1525.519626][T21184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1525.777907][T21184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1525.790401][T21184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1525.800608][T21184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1525.815118][T21184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1525.825815][T21184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1525.836609][T21184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1525.846775][T21184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1525.857606][T21184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1525.871879][T21184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1525.884998][T21184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1525.900091][T21184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1526.028172][T21184] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1526.037540][T21184] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1526.046755][T21184] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1526.056073][T21184] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1527.781695][T21367] loop4: detected capacity change from 0 to 16 [ 1527.854149][T21367] cramfs: bad root offset 4092 [ 1529.093808][T14268] Bluetooth: hci2: command 0x0405 tx timeout [ 1529.849027][T21403] loop0: detected capacity change from 0 to 16 [ 1529.938344][T21403] cramfs: bad root offset 4092 [ 1531.796409][T20847] bridge0: port 3(syz_tun) entered disabled state [ 1531.816866][T14268] Bluetooth: hci2: command 0x0405 tx timeout [ 1531.890963][T20847] syz_tun (unregistering): left allmulticast mode [ 1531.898516][T20847] syz_tun (unregistering): left promiscuous mode [ 1531.905589][T20847] bridge0: port 3(syz_tun) entered disabled state [ 1532.244466][ T4057] bridge_slave_1: left allmulticast mode [ 1532.250717][ T4057] bridge_slave_1: left promiscuous mode [ 1532.257974][ T4057] bridge0: port 2(bridge_slave_1) entered disabled state [ 1532.361263][ T4057] bridge_slave_0: left allmulticast mode [ 1532.367656][ T4057] bridge_slave_0: left promiscuous mode [ 1532.375088][ T4057] bridge0: port 1(bridge_slave_0) entered disabled state [ 1532.736880][T21441] loop4: detected capacity change from 0 to 16 [ 1533.123260][T21441] cramfs: bad root offset 4092 [ 1533.511735][T21442] loop0: detected capacity change from 0 to 32768 [ 1533.536171][ T4057] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1533.588025][ T4057] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1533.621948][ T4057] bond0 (unregistering): Released all slaves [ 1533.940403][ T3688] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1533.948714][ T3688] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1534.283400][ T781] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1534.291480][ T781] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1534.645243][ T4057] hsr_slave_0: left promiscuous mode [ 1534.707520][ T4057] hsr_slave_1: left promiscuous mode [ 1534.735571][ T4057] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1534.743895][ T4057] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1534.787561][ T4057] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1534.795527][ T4057] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1534.886819][ T4057] veth1_macvtap: left promiscuous mode [ 1534.892980][ T4057] veth0_macvtap: left promiscuous mode [ 1534.898904][ T4057] veth1_vlan: left promiscuous mode [ 1534.904669][ T4057] veth0_vlan: left promiscuous mode [ 1536.016373][ T4057] team0 (unregistering): Port device team_slave_1 removed [ 1536.091626][ T4057] team0 (unregistering): Port device team_slave_0 removed [ 1536.536616][T14268] Bluetooth: hci2: command 0x0405 tx timeout [ 1537.414117][T21473] loop3: detected capacity change from 0 to 32768 [ 1540.174386][T21510] dccp_invalid_packet: P.Data Offset(172) too large [ 1541.649544][ T4057] IPVS: stop unused estimator thread 0... [ 1541.820472][T21539] kernel profiling enabled (shift: 25) [ 1542.492817][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 1542.492894][ T29] audit: type=1326 audit(1542.475:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21547 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f44dbe7cea9 code=0x0 [ 1543.663681][T21561] netlink: 'syz-executor.4': attribute type 11 has an invalid length. [ 1543.672346][T21561] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1543.985156][T14268] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1544.009656][T14268] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1544.021189][T14268] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1544.044719][T14268] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1544.068530][T14268] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1544.080995][T14268] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1544.948582][T17869] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1545.133393][T17869] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1545.150092][T21587] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1545.159930][T21587] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1545.310058][T17869] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1545.493156][T17869] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1545.637752][ T29] audit: type=1326 audit(1545.575:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21588 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f56eec7cea9 code=0x0 [ 1545.862980][T17869] bridge_slave_1: left allmulticast mode [ 1545.868897][T17869] bridge_slave_1: left promiscuous mode [ 1545.876289][T17869] bridge0: port 2(bridge_slave_1) entered disabled state [ 1545.955169][T17869] bridge_slave_0: left allmulticast mode [ 1545.961088][T17869] bridge_slave_0: left promiscuous mode [ 1545.968871][T17869] bridge0: port 1(bridge_slave_0) entered disabled state [ 1546.212580][T14268] Bluetooth: hci4: command tx timeout [ 1546.870281][T17869] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1546.932033][T21609] loop3: detected capacity change from 0 to 512 [ 1546.940245][T17869] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1546.970568][T17869] bond0 (unregistering): Released all slaves [ 1546.988682][T21609] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 1546.996974][T21609] UDF-fs: Scanning with blocksize 512 failed [ 1547.012033][T21598] netlink: 'syz-executor.4': attribute type 11 has an invalid length. [ 1547.021111][T21598] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1547.029608][T21609] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 1547.040104][T21609] UDF-fs: Scanning with blocksize 1024 failed [ 1547.083824][T21609] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 1547.091747][T21609] UDF-fs: Scanning with blocksize 2048 failed [ 1547.128663][T21611] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1547.138365][T21611] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1547.176772][T21609] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 1547.201991][T21568] chnl_net:caif_netlink_parms(): no params data found [ 1547.222773][T17869] tipc: Left network mode [ 1547.234573][T21609] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1547.536490][T21614] loop1: detected capacity change from 0 to 8 [ 1547.802110][ C1] ===================================================== [ 1547.809614][ C1] BUG: KMSAN: uninit-value in profile_tick+0x1ae/0x1b0 [ 1547.816660][ C1] profile_tick+0x1ae/0x1b0 [ 1547.821440][ C1] tick_nohz_handler+0x588/0x690 [ 1547.826567][ C1] __hrtimer_run_queues+0x56f/0xe40 [ 1547.831929][ C1] hrtimer_interrupt+0x3ab/0x1490 [ 1547.837123][ C1] __sysvec_apic_timer_interrupt+0xa6/0x3a0 [ 1547.843217][ C1] sysvec_apic_timer_interrupt+0x7e/0x90 [ 1547.849146][ C1] asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 1547.855382][ C1] _raw_spin_unlock_irqrestore+0x33/0x60 [ 1547.861396][ C1] skb_dequeue+0x1c7/0x2a0 [ 1547.866044][ C1] wext_netdev_notifier_call+0x9e/0x260 [ 1547.871932][ C1] raw_notifier_call_chain+0xe8/0x440 [ 1547.877650][ C1] call_netdevice_notifiers_info+0x1be/0x2b0 [ 1547.883886][ C1] __netdev_upper_dev_unlink+0x37e/0x1940 [ 1547.889857][ C1] netdev_upper_dev_unlink+0x47/0x60 [ 1547.895331][ C1] ipvlan_link_delete+0x631/0x750 [ 1547.900574][ C1] default_device_exit_batch+0x12ec/0x15a0 [ 1547.906598][ C1] cleanup_net+0x10f3/0x1c80 [ 1547.911331][ C1] process_scheduled_works+0xa81/0x1bd0 [ 1547.917046][ C1] worker_thread+0xea5/0x1560 [ 1547.921883][ C1] kthread+0x3e2/0x540 [ 1547.926119][ C1] ret_from_fork+0x6d/0x90 [ 1547.930679][ C1] ret_from_fork_asm+0x1a/0x30 [ 1547.935615][ C1] [ 1547.938014][ C1] Local variable layer created at: [ 1547.943203][ C1] caif_device_notify+0x58/0x1ac0 [ 1547.948462][ C1] raw_notifier_call_chain+0xe8/0x440 [ 1547.954194][ C1] [ 1547.956614][ C1] CPU: 1 PID: 17869 Comm: kworker/u8:1 Not tainted 6.9.0-syzkaller-02707-g614da38e2f7a #0 [ 1547.966668][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1547.976944][ C1] Workqueue: netns cleanup_net [ 1547.981876][ C1] ===================================================== [ 1547.988892][ C1] Disabling lock debugging due to kernel taint [ 1547.995228][ C1] Kernel panic - not syncing: kmsan.panic set ... [ 1548.001735][ C1] CPU: 1 PID: 17869 Comm: kworker/u8:1 Tainted: G B 6.9.0-syzkaller-02707-g614da38e2f7a #0 [ 1548.013887][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1548.024079][ C1] Workqueue: netns cleanup_net [ 1548.029005][ C1] Call Trace: [ 1548.032468][ C1] [ 1548.035404][ C1] dump_stack_lvl+0x216/0x2d0 [ 1548.040348][ C1] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1548.046348][ C1] dump_stack+0x1e/0x30 [ 1548.050693][ C1] panic+0x4e2/0xcd0 [ 1548.054858][ C1] ? kmsan_get_metadata+0xf1/0x1d0 [ 1548.060154][ C1] kmsan_report+0x2d5/0x2e0 [ 1548.064826][ C1] ? update_load_avg+0x1a35/0x29b0 [ 1548.070191][ C1] ? kmsan_get_metadata+0x146/0x1d0 [ 1548.075651][ C1] ? __msan_warning+0x95/0x120 [ 1548.080661][ C1] ? profile_tick+0x1ae/0x1b0 [ 1548.085526][ C1] ? tick_nohz_handler+0x588/0x690 [ 1548.090814][ C1] ? __hrtimer_run_queues+0x56f/0xe40 [ 1548.096366][ C1] ? hrtimer_interrupt+0x3ab/0x1490 [ 1548.101735][ C1] ? __sysvec_apic_timer_interrupt+0xa6/0x3a0 [ 1548.108002][ C1] ? sysvec_apic_timer_interrupt+0x7e/0x90 [ 1548.113992][ C1] ? asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 1548.120347][ C1] ? _raw_spin_unlock_irqrestore+0x33/0x60 [ 1548.126324][ C1] ? skb_dequeue+0x1c7/0x2a0 [ 1548.131108][ C1] ? wext_netdev_notifier_call+0x9e/0x260 [ 1548.137014][ C1] ? raw_notifier_call_chain+0xe8/0x440 [ 1548.142737][ C1] ? call_netdevice_notifiers_info+0x1be/0x2b0 [ 1548.149099][ C1] ? __netdev_upper_dev_unlink+0x37e/0x1940 [ 1548.155191][ C1] ? netdev_upper_dev_unlink+0x47/0x60 [ 1548.160840][ C1] ? ipvlan_link_delete+0x631/0x750 [ 1548.166220][ C1] ? default_device_exit_batch+0x12ec/0x15a0 [ 1548.172400][ C1] ? cleanup_net+0x10f3/0x1c80 [ 1548.177313][ C1] ? process_scheduled_works+0xa81/0x1bd0 [ 1548.183199][ C1] ? worker_thread+0xea5/0x1560 [ 1548.188210][ C1] ? kthread+0x3e2/0x540 [ 1548.192624][ C1] ? ret_from_fork+0x6d/0x90 [ 1548.197379][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 1548.202493][ C1] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1548.208480][ C1] ? kmsan_get_metadata+0x146/0x1d0 [ 1548.213841][ C1] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1548.219833][ C1] ? kmsan_get_metadata+0x146/0x1d0 [ 1548.225195][ C1] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1548.231171][ C1] ? kmsan_get_metadata+0x146/0x1d0 [ 1548.236529][ C1] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1548.242506][ C1] __msan_warning+0x95/0x120 [ 1548.247241][ C1] profile_tick+0x1ae/0x1b0 [ 1548.251921][ C1] ? skb_dequeue+0x1c7/0x2a0 [ 1548.256711][ C1] tick_nohz_handler+0x588/0x690 [ 1548.261853][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 1548.267486][ C1] __hrtimer_run_queues+0x56f/0xe40 [ 1548.272894][ C1] hrtimer_interrupt+0x3ab/0x1490 [ 1548.278111][ C1] ? __pfx_hrtimer_interrupt+0x10/0x10 [ 1548.283742][ C1] ? __pfx_hrtimer_interrupt+0x10/0x10 [ 1548.289375][ C1] __sysvec_apic_timer_interrupt+0xa6/0x3a0 [ 1548.295470][ C1] sysvec_apic_timer_interrupt+0x7e/0x90 [ 1548.301291][ C1] [ 1548.304310][ C1] [ 1548.307327][ C1] asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 1548.313521][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x33/0x60 [ 1548.320118][ C1] Code: 56 53 49 89 f6 48 89 fb e8 ca 48 bf f2 48 89 df e8 d2 3a bf f2 c6 00 00 c6 03 00 41 f7 c6 00 02 00 00 74 01 fb be 04 00 00 00 <48> c7 c7 08 5d 0a 00 e8 e1 3c bf f2 65 ff 0d 92 95 85 70 74 09 5b [ 1548.339906][ C1] RSP: 0018:ffff888126a975d8 EFLAGS: 00000206 [ 1548.346119][ C1] RAX: ffff88803d9be84c RBX: ffff88803e1be84c RCX: 000000003ddbe84c [ 1548.354237][ C1] RDX: ffff88803ddbe84c RSI: 0000000000000004 RDI: ffff88803e1be84c [ 1548.362516][ C1] RBP: ffff888126a975e8 R08: ffffea000000000f R09: 0000000000000004 [ 1548.370625][ C1] R10: ffff88803d9be84c R11: 0000000000000004 R12: ffff88803e1be838 [ 1548.378736][ C1] R13: ffff88803e1be84c R14: 0000000000000296 R15: 0000000000000000 [ 1548.386873][ C1] ? _raw_spin_unlock_irqrestore+0x1e/0x60 [ 1548.392869][ C1] skb_dequeue+0x1c7/0x2a0 [ 1548.397488][ C1] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1548.403489][ C1] wext_netdev_notifier_call+0x9e/0x260 [ 1548.409577][ C1] ? __pfx_wext_netdev_notifier_call+0x10/0x10 [ 1548.415920][ C1] ? __pfx_wext_netdev_notifier_call+0x10/0x10 [ 1548.422259][ C1] raw_notifier_call_chain+0xe8/0x440 [ 1548.427833][ C1] call_netdevice_notifiers_info+0x1be/0x2b0 [ 1548.434031][ C1] __netdev_upper_dev_unlink+0x37e/0x1940 [ 1548.439959][ C1] ? filter_irq_stacks+0x60/0x1a0 [ 1548.445189][ C1] ? kmsan_get_metadata+0x146/0x1d0 [ 1548.450553][ C1] ? kmsan_internal_set_shadow_origin+0x66/0xe0 [ 1548.457007][ C1] ? netdev_upper_dev_unlink+0x39/0x60 [ 1548.462661][ C1] ? ipvlan_link_delete+0x631/0x750 [ 1548.468057][ C1] netdev_upper_dev_unlink+0x47/0x60 [ 1548.473631][ C1] ipvlan_link_delete+0x631/0x750 [ 1548.478870][ C1] ? __pfx_ipvlan_link_delete+0x10/0x10 [ 1548.484602][ C1] default_device_exit_batch+0x12ec/0x15a0 [ 1548.490619][ C1] ? kmsan_internal_set_shadow_origin+0x66/0xe0 [ 1548.497090][ C1] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1548.503084][ C1] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1548.509155][ C1] ? __pfx_default_device_exit_batch+0x10/0x10 [ 1548.515518][ C1] ? __pfx_default_device_exit_batch+0x10/0x10 [ 1548.521867][ C1] cleanup_net+0x10f3/0x1c80 [ 1548.526631][ C1] ? __pfx_cleanup_net+0x10/0x10 [ 1548.531719][ C1] process_scheduled_works+0xa81/0x1bd0 [ 1548.537569][ C1] worker_thread+0xea5/0x1560 [ 1548.542431][ C1] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1548.548513][ C1] kthread+0x3e2/0x540 [ 1548.552756][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1548.558048][ C1] ? __pfx_kthread+0x10/0x10 [ 1548.562816][ C1] ret_from_fork+0x6d/0x90 [ 1548.567385][ C1] ? __pfx_kthread+0x10/0x10 [ 1548.572153][ C1] ret_from_fork_asm+0x1a/0x30 [ 1548.577117][ C1] [ 1548.580475][ C1] Kernel Offset: disabled [ 1548.584858][ C1] Rebooting in 86400 seconds..