last executing test programs: 4.452486111s ago: executing program 4: r0 = io_uring_setup(0x336b, &(0x7f00000000c0)) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="73c8"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x1d9) syz_mount_image$udf(&(0x7f00000005c0), &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000640), 0x1, 0x59d, &(0x7f0000000680)="$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") close_range(r0, 0xffffffffffffffff, 0x0) 4.165434044s ago: executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f0000000440)={{0x12, 0x1, 0x0, 0xab, 0xbe, 0x67, 0x40, 0x17e9, 0x8b4e, 0x9c08, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff}}]}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, 0x0, 0x0) 2.581003836s ago: executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r1}, 0x10) close(r0) 2.418733361s ago: executing program 2: bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800", @ANYRES32, @ANYBLOB="0000000000000000b702000001000000850000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x4, 0x0, 0x0, 0x1}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000004000000bca30000000000002403000040feffff720af0ff0000000071a4f0ff000000001f030000000000002e0a0200000000002600000000ff000e61141800000000001d430000000000007a0a00fe00581c1f6114140000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f30002af51efd601b6bf01c8e8b1fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7d06a59ff616236fd9aa58f0177184b6a89adaf17b0a6041bdef728f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566de74e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48b936e6f9e0fcda88fe4413537528fdb6153baae244e7bf573eac34b781337ad5901a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0b4a26b602396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb1188883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcc536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d648532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2654026c6ea08b83b123145ab5703dad844ceb201efeb6dc5f6a9037d2283c42efc54dd84323afc4c10eff46248843187f1dd48ef0900000000000000ff0f4000000000f00700003c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fcdb4c1011e32f808890205f0e6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963442aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2869291b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e637d4219ef7ec61261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ecab5d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addbc4b3093c91b8068c5adfcb0d7fd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf699b3746979f99f6a1527f004f37e84fb478199dc1020f4beb98b8074bf7df8b5e783637daf121f175a81cffff4ac55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae543d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80aba439772bf60a1db18c472dafc5569adc2c406f39f82928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a4a274000000000000000000000000000000000000000000000009dd14b38f2f5426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4120260ffcd030000006d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb3928143be1c1023a375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10b0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d3b332240d450fdb0a9a69f432e277f3a0386eb2bd1305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07e18b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e8c0a0d213c3ffad44d2a376def42e41e9fc3167a257e040fa7cf32c221aaac6cfdeb33c27500001a0000000000000000000017350000c11ae694b0c69c2c03f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d10522a7a945b93fb705b95b6aae27a8fab1e6984c8bdc12360627137ab6737b68ab08a1a4b94cb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481ffe46a4ce86be0b1f8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0b74903580ac98708007c80d6c7d0de4614195e40d797c0348dd70f36a220e8b3710fb5358c27e90793bcb9ee6319342c4b239ca8cbc6fc83d32e6eb62ad92e43991f2447be9c2a1ae1119eafb901a43d57e885116d19aa152bfb89f8d0b2516f80120a1cddff771657f3d0288ec3899f1e3ba0151c4037148fb479de703fc52b6573349c28d1b107d859b4961324c17756dde99de1924a1d2b7095d34a55060f47f4407d89acf9f1d2156befec432e8e993c79027b7ef285b20c2e6b3d0491d0d3591b0d94713332b6b79c8297117b0d14eff64e0aca8a4b4aa773d8fba1217e9519952419bb9dd998d0ec870ff00b6d556018602738fbc6cec89d6dd13cf55b96f6fe9a137d2d6a56ad78e52c23ed080000000000002bc261a781fd14126c146a0aac4221839a4b9bbf61e4bba695a41e2109eba8e40c370267cc51ffadbd15cafc97a4d3edfdcb9b5729307c6bdaf7b69325fb05fa8a9869de0600ee477d71bf3e36d1d9019edfa27aae24b632f251df210c86a18fae731ecb8b0d48357378caf2b6789509b1bacfd4fa812dc341875cfa5e798bbf59770000000000000000c8a594ea3c3347962d9113b1fecdfad5a8da641053f02e49456f5d21674521e67a5b18ea451eccf69dd6af928d2d68da9304a296c22fdc0500000000000000b1aade386b113045033a6188d56e675564d8cb8d5b40114b0f5bf15dd64c9ece60b8588ee8777d0ea8f4713b258427c7d90f9e93348e17723ba9ab8ae790f74cc41ae5795835f3cec40dff485d2802c08611454d9ea784a205bcc07ec26f906f3cf45bb37014ab6f22af6213618e242b283ea9d3f0677ee598072ec06f7170009d92bb87d9d12c378dfd3e74ec056ee83eef666423d934fc5908c9ff98715218a5964f1e00000000426ac9588e27aefe307f49662990ee823568bbc2f89596ced7c6c52d76b8096f1848410843b93fd404f535be474f456778b5ef85abb8fc2336abd5ea64a6efea8a5aca0015499b88ae780a7bae4df603bd3c72808cf300440b1b638a6640f7de8d0d82f359ca2f779cd48cd8d3603f4f69e47f386988c9b7b5d6dd3d48a1fdca780049d7c87bea42161a4c0d7cf0125b43dc9d8845f3c05a08acda647e7143d0e0aee2949a45e28488b0522c2288072467d2afe269f589fb7e034b92d3ca245b16b71998711bfe206c9690b6d0eebb06a29349229eb45ff15c63aa2c82c56d7420738cd1b04eb16e87cb524315d7361ea3635d3799bb7fcc56aa5e1dbe031a7a12554dee6754b72f43a6fddf427f32ec3df274a88097725679769beebf1aa6eb09d5154e4900000000000d0f7160a05911d969879953d3d4702b2676c07bb0fd14020a66718378825d5ed789711b77d40dc31e0b8fc651b45559da463f0000000000000000000000000052d42124e9c26aba885015e69d42ecd710342ac597ebea576ae15fdf611356f622e831741ab15549e0d7a2bd0324e2b3b48a10551607492c19eaf58485feb4cab19c303b30ba2ddea0d792d77724c9fa4ed58b93668fc20484f141ee2b6a0029e88fdc853189b4dafd36ff23b11967090e508f45e3f10857038a52ef275cf9e3e4b5d30b12d138dfa70930c603b5e3f4b7be67be3dba3cbd8d4d143195af0697d779445d67dcfbd922d12a8b49f93eac7a72faacf80346b3b669615f2710eb8df39fc8c04d2c9c196fa6facfea613569a35cde6451f2edf55ce25c7d72ec7ea85a92458c0559ca3a94727d495bd4671a55a70bc544d71d8e0257707a31936f1adf224077310a86bf447ec92c650acca8c6b0721020894b06178c32f4472d17174d6eb2b067030c5d2c12583f46d2da7fba42d4083259c7cdc8bf1f4299c248865d3c809356c3ed"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) 2.359373259s ago: executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000002400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r3}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @broadcast}) 2.121667656s ago: executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffff7f850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) close(r0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000de"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='ext4_ext_show_extent\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000000), 0x400000) 2.042320588s ago: executing program 4: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') setxattr(0x0, 0x0, 0x0, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec59acbc0413a1f848100000005e2f0042180000180e000a001400000002800000121f", 0x2e}], 0x1}, 0x0) 1.910570148s ago: executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x0, 0x1c, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000086000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffff09a400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='mm_page_alloc\x00', r1}, 0x10) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x20001400) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x3, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x90) ioctl$TUNSETOFFLOAD(r2, 0x40047451, 0x20000002) 1.790033936s ago: executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x3, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='consume_skb\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) 1.669512165s ago: executing program 4: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) syz_emit_ethernet(0x93, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaafe86dd60014100005d1100fe8000000000000000000000000000bb00000000000000000000ffff"], 0x0) 1.574428819s ago: executing program 4: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) keyctl$reject(0x5e9, 0x0, 0x0, 0x0, 0x0) 1.50454177s ago: executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000002840)=ANY=[@ANYBLOB="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"/3261], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="180000002d000100000000000000000002"], 0x18}}, 0x0) 1.467364876s ago: executing program 3: syz_emit_ethernet(0x66, &(0x7f0000000080)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "0300", 0x30, 0x3a, 0x0, @local, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "8cb02b", 0x0, 0x0, 0x0, @loopback, @local}}}}}}}, 0x0) 1.417841643s ago: executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000002c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="070300000000000000000100000008000300", @ANYRES32=r2], 0x1c}}, 0x0) 1.37248007s ago: executing program 4: r0 = io_uring_setup(0x336b, &(0x7f00000000c0)) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="73c8"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x1d9) syz_mount_image$udf(&(0x7f00000005c0), &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000640), 0x1, 0x59d, &(0x7f0000000680)="$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") close_range(r0, 0xffffffffffffffff, 0x0) 1.292987592s ago: executing program 0: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) socket$packet(0x11, 0x0, 0x300) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, 0x0}, 0x20000011) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000540), 0x40) r1 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r1, &(0x7f0000000180)='`', 0x64, 0x0, &(0x7f0000000240)={0x2f, 0x0, 0x0, 0x1, 0x0, 0x6, @random="4a99fee2a74d"}, 0x14) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@remote, @dev={0xac, 0x14, 0x14, 0x25}}, 0x10) memfd_create(0x0, 0x9) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioperm(0x0, 0x0, 0x4000000001) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 1.228740512s ago: executing program 3: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c0001000004000904000001c6cbea00090587033b"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) write$char_usb(r1, &(0x7f0000000040), 0x0) 1.100370381s ago: executing program 2: syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000003200)='./file2\x00', 0x4204, &(0x7f0000003240)=ANY=[], 0x3, 0x325, &(0x7f0000000b40)="$eJzs3M9LG2kYwPEnMcYkoslh2WUXFl92L7uXQbN7XjYsCssGVtQsq4XCqJM2ZJpIJlhSStVTr6X3ngo9iEdvQus/4KW39tJLb14KPdRD6ZSZzJjfGmNsrH4/UObN+75P5n3zvinPDE4O/390J5+1tKxelmBESUBE5EgkIUHxBbxj0C2Hpd6m/Dr6/tWP84tL/6TS6ek5pWZSC78llVLjE8/v3o963fZG5CBx8/Bd8u3BtwffH35auJ2zVM5ShWJZ6Wq5+KasL5uGWs1ZeU2pWdPQLUPlCpZRqrYXq+1Zs7i2VlF6YXUstlYyLEvphYrKGxVVLqpyqaL0W3quoDRNU2MxwWky23NzeqrH4JU+DwYXpFRK6UMiEm1pyWwPZEAAAGCgmvP/oJPS95T/y7ib/zuda/n/zk/75dH/dse9/H8v3C7///119b0a8v+IiPSS/z+RM+T/rRnR9XKu/B+Xw0S4pSrQ8MrJ/2Pe99e1dWNn0i2Q/wMAAAAAAAAAAAAAAAAAAAAA8DU4su24bdtx/+j/qz1C4L3GldRp/UdEJOKsvs36X2Xzi0sScR/cc9bYfLieWc9Uj16HfRExxZBJictHdz94nLL/5JFyJOSFueHFb6xnhtyWVFZybvyUxCXRHG/bM3+np6dUlRd//JhSrD4+KXH5pn18sjHeO39Yfvm5Ll6TuLxckaKYsuru61r8gyml/vo33RQfdfsBAAAAAHAVaOpY2+t3TevUXv2VkVTWvU3U4f5A9fp6su31eSj+Q2jQswcAAAAA4HqwKvfyumkapRMKUTm9T++FUHedw001wyd1HqqbYbfjCbs3MkTOO6+nXX6qDQX/DykamiJeZW/j8efft/XarK8JShdRoebBTzgV6oxn3/Imclzj3zYKd/icZbb1fYIn7IThvu3n7x4/+9C/L8gfu/4OOL3zVq/nijTvOrcwfNH/7wAAAAD48mpJv1/zZ31zYCCDAgAAAAAAAAAAAAAAAAAAAAAAAAAAAADgmrmQn/RrKgx6jgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBl8TkAAP//3cD3xQ==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./file2\x00', 0x143042, 0x0) creat(&(0x7f0000000080)='./bus\x00', 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) creat(0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) sendfile(r0, r0, 0x0, 0x7a680002) 1.099563512s ago: executing program 0: socket(0x0, 0x0, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x20081e, &(0x7f00000020c0), 0x1, 0x514, &(0x7f0000006ec0)="$eJzs3UFvI1cdAPD/eOPE2abNtvQACGhoixa0WifxtlHVA5QTQqgSokeQtiHxRlHsOIqd0oQ9pN8BiUqc4MgH4NwTdy4IblzKAalABGoqcTCa8Th1s3biNokdxb+fNJp5743n/17W8579vPYLYGItRMRhRExHxNsRMZ/nJ/kWb3S29LyPjx6vHR89Xkui3X7rX0lWnuZFz2NST+XXLEXET34Q8fPkybjN/YOt1VqtuttJzi626juLzf2D+5v11Y3qRnW7UllZXll67cGrlUtr6wv16fzo6x/+6fA7v0yrNZfn9Lbjs5LoU/2hdR5bPImTmoqIH13gmtfJrbw90+OuCF9IISKei4gXs/t/Pm5l/5oAwE3Wbs9He743DQDcdIVsDiwplPO5gLkoFMrlzhze83G7UGs0W/ceNfa21ztzZXeiWHi0Wasu5XOFd6KYpOnl7PjTdOVU+kFEPBsRv5qZzdLltUZtfZwvfABggj11avz/70xn/AcAbrjSuCsAAIyc8R8AJk/v+F8YYz0AgNHx/h8AJo/xHwAmj/EfACaP8R8AJsqP33wz3drH+e9fr7+zv7fVeOf+erW5Va7vrZXXGrs75Y1GYyP7zZ76ederNRo7y6/E3rt3vrvTbC029w8e1ht7262H2e96P6wWR9IqAOAsz77wwV+TiDh8fTbbomctB2M13Gy+7gOT69a4KwCMjdW+YHJd4D2+6QG4Ic5b47YUEbOnM9vtdvvqqgRcsbtf+Vzz/wujrR1wlXrm//0vYJgw5v9hcpn/h8nVbifDrvkfw54IAFxvPsQHBnz+/1y+/33+4cDP1k+f8f5V1goAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACut+76v+V8LfC5KBTK5YinI+JOFJNHm7XqUkQ8ExF/mSnOpOnlMdcZALiowj+SfP2vu/Mvz50unU4+mcn2EfGL37z163dXW63dP6f5/z7Jb72f51fGUX8A4DzdcTrb97yR//jo8Vp3G2V9Pvp+RJQ68Y+PpuP4JP5UTGX7UhQj4vZ/kjzdkfTMXVzE4XsR8eV+7U9iLpsD6ax8ejp+GvvpkcYvfCZ+ISvr7NO/xZcuoS4waT5I+583+t1/hVjI9v3v/1LWQ11c3v+ll1o7zvrAT+N3+79bA/q/hWFjvPLHH3aOZp8sey/iq1MR3djHPf1PN34y2z/+y0PG/9vXvvHioLL2byPuRv/4vbEWW/Wdxeb+wf3N+upGdaO6XamsLK8svfbg1cpiNke9OHg0+Ofr954ZVJa2//aA+KVu+wf8/b81ZPt/97+3f/rNM+J/+6V+8Qvx/Bnxiy8NGTwiVm//oTSoLI2/PqD9U2fET/PuDRn/w78fPLFsOAAwPs39g63VWq26e0kHH+XXPfPk7guJywrq4BofTF/o4cX8qZLnnPvUGuPB90YVazqGPnkmtlbb7S8Ua1CPcRmzbsB1cHLTR8Qn464MAAAAAAAAAAAAAADQ1yi+sTTuNgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHBz/T8AAP//q3jHtg==") r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000000180)='./bus\x00', r0, &(0x7f0000000240)='./bus\x00') 908.242371ms ago: executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000002"], 0x110) setsockopt$inet_group_source_req(r0, 0x0, 0x2b, &(0x7f00000007c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @broadcast}}}, 0x108) 764.780813ms ago: executing program 1: socket$nl_route(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, &(0x7f0000000140)) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x3, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x88}, [], {0x95, 0x0, 0x5a5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x90) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x18, &(0x7f00000001c0)={r3}, 0x8) 695.972233ms ago: executing program 1: socket(0x0, 0x0, 0x0) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000080)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="110800000000000000002000000024002d80050004000000000005000100b10000000800020003000000080003000300000008000300", @ANYRES32=r3], 0x40}}, 0x0) 661.678019ms ago: executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r0, r1, 0x5}, 0x10) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6}]}) socket(0x0, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 546.924536ms ago: executing program 0: syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x440, &(0x7f0000001040)=ANY=[], 0xfc, 0x2b5, &(0x7f00000001c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x40047211, &(0x7f00000004c0)) 333.348829ms ago: executing program 1: bind$inet6(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) ioperm(0x0, 0x40, 0x80) unlink(&(0x7f0000000140)='./cgroup\x00') 292.900705ms ago: executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000002c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="070300000000000000000100000008000300", @ANYRES32=r2], 0x1c}}, 0x0) 253.34482ms ago: executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000002c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="070300000000000000000100000008000300", @ANYRES32=r2], 0x1c}}, 0x0) 131.40704ms ago: executing program 1: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) socket$packet(0x11, 0x0, 0x300) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, 0x0}, 0x20000011) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000540), 0x40) r1 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r1, &(0x7f0000000180)='`', 0x64, 0x0, &(0x7f0000000240)={0x2f, 0x0, 0x0, 0x1, 0x0, 0x6, @random="4a99fee2a74d"}, 0x14) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@remote, @dev={0xac, 0x14, 0x14, 0x25}}, 0x10) memfd_create(0x0, 0x9) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioperm(0x0, 0x0, 0x4000000001) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 79.991117ms ago: executing program 0: bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000e00)={0x1b, 0x0, 0x0, 0x8000, 0x4, 0x1}, 0x48) socket$vsock_stream(0x28, 0x1, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socket$netlink(0x10, 0x3, 0x7) unshare(0x68060200) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x82, &(0x7f0000001100)={'nat\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f0000001180)=0x50) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000080)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000000100)=0x20) socket$inet6(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001040)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0) 0s ago: executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000240)=ANY=[], 0x0) pipe(&(0x7f0000000080)) socket$inet_udp(0x2, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040)={0x1}, 0x10}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2f00020b, 0x0, 0x0, &(0x7f0000000200)="000fff87c64dba", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt(r4, 0x1, 0x40, &(0x7f00000000c0)=""/12, &(0x7f0000000100)=0xc) r5 = socket(0x10, 0x803, 0x20000000) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEAUTHENTICATE(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x4c}}, 0x200080d1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000071107900000000009500"/32], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYRES64=r7, @ANYRES32=r7, @ANYBLOB="34005e8018000100000000000004000081000000100900000700000008000900060000000800060004000000080007007602000044005e8008000700ab0400000800090005000000080007009205000008000500280000000800090086650000080005002800000008000600b6010000080005000000000034005e80080003000004000008000700990600000800060004000000080007009b030000080006000080000008000500540000000c005e80080003000500000014005e80080005006200000008000300f7fdf6181c005e800800020007000000080006000100000008000300130c00002c005e80080006000101000008000100ff000000080007002f06000008000900f80100000800030001800000"], 0x130}, 0x1, 0x0, 0x0, 0x20008001}, 0x20008800) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340), 0x44}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x4) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[], 0x28}}, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000001000)=ANY=[@ANYBLOB="7a0af8ff75257025bfa100000000000007010000f8ffffffb702000005000000bf130000000000008500000006000000b700000000000000950000ff00000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r9, 0x2800000002000000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x0, 0x4000000}, 0x28) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) kernel console output (not intermixed with test programs): syz-executor.0: Invalid inode table block 0 in block_group 0 [ 64.139306][ T3904] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5789: Corrupt filesystem [ 64.167259][ T3904] EXT4-fs error (device loop0): ext4_dirty_inode:5993: inode #16: comm syz-executor.0: mark_inode_dirty error [ 64.558726][ T3922] loop1: detected capacity change from 0 to 128 [ 64.727071][ T3665] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.854358][ T3665] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.987158][ T3665] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.134043][ T3665] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.296068][ T3933] device syzkaller0 entered promiscuous mode [ 65.309701][ T3563] Bluetooth: hci4: command 0x0411 tx timeout [ 65.785226][ T3953] loop4: detected capacity change from 0 to 1024 [ 66.215890][ T3937] chnl_net:caif_netlink_parms(): no params data found [ 66.456521][ T3937] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.524206][ T3937] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.564730][ T3937] device bridge_slave_0 entered promiscuous mode [ 66.626134][ T3937] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.637136][ T3937] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.720525][ T3982] loop4: detected capacity change from 0 to 512 [ 66.720942][ T3937] device bridge_slave_1 entered promiscuous mode [ 66.776130][ T3982] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 66.824794][ T3982] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 66.860624][ T3982] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b016c118, mo2=0002] [ 66.917284][ T3982] System zones: 1-12 [ 66.926449][ T3937] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.999417][ T3989] loop1: detected capacity change from 0 to 2048 [ 67.000534][ T3982] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2213: inode #15: comm syz-executor.4: corrupted in-inode xattr [ 67.026861][ T3937] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.072192][ T3982] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz-executor.4: couldn't read orphan inode 15 (err -117) [ 67.127129][ T3989] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 67.150182][ T3982] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,data_err=abort,debug,noload,mblk_io_submit,commit=0x0000000000000005,init_itable=0x0000000000000601,grpquota,,errors=continue. Quota mode: writeback. [ 67.187001][ T3937] team0: Port device team_slave_0 added [ 67.195245][ T3937] team0: Port device team_slave_1 added [ 67.205752][ T3989] ext4 filesystem being mounted at /root/syzkaller-testdir1648024515/syzkaller.aQiJxL/28/bus supports timestamps until 2038 (0x7fffffff) [ 67.310266][ T3714] Bluetooth: hci1: command 0x0409 tx timeout [ 67.330288][ T25] audit: type=1804 audit(1717121488.443:8): pid=3989 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir1648024515/syzkaller.aQiJxL/28/bus/file0/file0" dev="loop1" ino=13 res=1 errno=0 [ 67.526894][ T3937] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.542856][ T3937] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.571651][ T4009] loop3: detected capacity change from 0 to 1024 [ 67.767685][ T3937] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.389637][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #1c2!!! [ 68.399419][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 68.409585][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 68.418619][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 68.427661][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 68.436691][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 68.445716][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 68.454711][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 68.463752][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 68.472805][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 68.718001][ T4029] loop3: detected capacity change from 0 to 512 [ 68.752258][ T3937] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.762655][ T3937] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.837024][ T4029] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 68.860990][ T4029] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 68.979934][ T4029] EXT4-fs (loop3): 1 truncate cleaned up [ 68.985611][ T4029] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota="errors=continue,noload,data_err=ignore,grpjquota="errors=continue,errors=remount-ro,noblock_validity,. Quota mode: writeback. [ 69.012494][ T3937] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.072197][ T4029] EXT4-fs error (device loop3): ext4_append:79: inode #2: comm syz-executor.3: Logical block already allocated [ 69.117908][ T4029] EXT4-fs (loop3): Remounting filesystem read-only [ 69.175448][ T3937] device hsr_slave_0 entered promiscuous mode [ 69.189844][ T3937] device hsr_slave_1 entered promiscuous mode [ 69.189879][ T4029] EXT4-fs error (device loop3): ext4_remount:5854: comm syz-executor.3: Abort forced by user [ 69.210921][ T3937] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.227329][ T3937] Cannot create hsr debugfs directory [ 69.289676][ T1065] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 69.342740][ T3665] device hsr_slave_0 left promiscuous mode [ 69.351639][ T3665] device hsr_slave_1 left promiscuous mode [ 69.389752][ T3715] Bluetooth: hci1: command 0x041b tx timeout [ 69.410930][ T3665] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 69.448026][ T3665] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 69.475768][ T3665] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 69.509654][ T4049] loop3: detected capacity change from 0 to 256 [ 69.533333][ T3665] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 69.549791][ T1065] usb 2-1: Using ep0 maxpacket: 8 [ 69.566069][ T3665] device bridge_slave_1 left promiscuous mode [ 69.573454][ T3665] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.641620][ T3665] device bridge_slave_0 left promiscuous mode [ 69.663184][ T3665] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.669835][ T1065] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 69.709210][ T1065] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 69.745486][ T1065] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 69.762844][ T3665] device veth1_macvtap left promiscuous mode [ 69.782998][ T3665] device veth0_macvtap left promiscuous mode [ 69.789100][ T1065] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 69.831493][ T1065] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 69.840842][ T3665] device veth1_vlan left promiscuous mode [ 69.860368][ T3665] device veth0_vlan left promiscuous mode [ 69.913265][ T1065] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.944278][ T4061] loop3: detected capacity change from 0 to 512 [ 70.047011][ T4061] EXT4-fs (loop3): Unrecognized mount option "obj_type=" or missing value [ 70.219812][ T1065] usb 2-1: GET_CAPABILITIES returned 0 [ 70.225326][ T1065] usbtmc 2-1:16.0: can't read capabilities [ 70.437998][ T1065] usb 2-1: USB disconnect, device number 2 [ 70.656480][ T4072] loop3: detected capacity change from 0 to 1024 [ 70.801604][ T3665] team0 (unregistering): Port device team_slave_1 removed [ 70.820503][ T3665] team0 (unregistering): Port device team_slave_0 removed [ 70.865981][ T3665] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 70.929911][ T3665] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 71.042034][ T3714] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 71.068276][ T3714] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 71.087168][ T3714] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 71.112624][ T3714] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 71.139278][ T3714] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 71.160896][ T1374] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.162901][ T1879] cfg80211: failed to load regulatory.db [ 71.167622][ T1374] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.184047][ T3714] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 71.214198][ T3714] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 71.232113][ T3665] bond0 (unregistering): Released all slaves [ 71.249022][ T3714] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 71.284432][ T3714] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 71.318738][ T3714] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 71.365019][ T3714] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 71.392258][ T3714] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 71.413864][ T3714] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 71.434371][ T3714] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 71.448769][ T3714] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 71.463358][ T3714] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 71.478977][ T3714] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 71.499085][ T3714] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 71.518068][ T3714] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 71.534999][ T3714] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 71.554334][ T3714] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 71.579625][ T3714] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 71.598647][ T3714] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 71.623088][ T3714] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 71.641770][ T3714] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 71.663996][ T3714] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 71.681836][ T3714] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 71.696204][ T3714] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 71.710532][ T3714] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 71.718134][ T3714] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 71.726127][ T3714] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 71.733919][ T3714] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 71.741785][ T3714] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 71.753990][ T3714] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 71.772240][ T3714] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 71.801248][ T3714] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 71.832060][ T3714] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 71.870667][ T3714] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 71.897299][ T3714] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 71.918554][ T3714] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 71.943973][ T3714] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 71.967159][ T3714] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 71.989294][ T3714] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 72.062600][ T3714] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz0 [ 72.160783][ T3715] Bluetooth: hci1: command 0x040f tx timeout [ 73.938582][ T3937] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 73.959997][ T3714] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 73.978021][ T3937] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 74.017113][ T3937] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 74.042382][ T3937] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 74.119278][ T4177] »»»»»»: renamed from pim6reg1 [ 74.200168][ T3563] Bluetooth: hci1: command 0x0419 tx timeout [ 74.322126][ T3937] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.364951][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.369818][ T3714] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 74.376162][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.395392][ T3714] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 74.426471][ T3714] usb 2-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 74.438481][ T3714] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.447321][ T3937] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.478512][ T3714] usb 2-1: config 0 descriptor?? [ 74.507288][ T4184] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 74.519057][ T3715] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.531461][ T3715] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.551151][ T4184] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 74.564088][ T3715] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.571200][ T3715] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.584725][ T3715] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 74.597234][ T3715] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.608577][ T3715] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.609653][ T1065] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 74.615688][ T3715] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.668250][ T3715] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 74.676567][ T3715] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 74.691675][ T3715] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 74.706142][ T3715] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.718208][ T3715] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.732909][ T3715] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.747654][ T3715] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.791124][ T3937] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 74.837380][ T3937] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.874942][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.879812][ T1065] usb 4-1: Using ep0 maxpacket: 16 [ 74.896008][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.937386][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.948970][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.973758][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.999851][ T1065] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 75.004396][ T3714] gt683r_led 0003:1770:FF00.0002: item fetching failed at offset 1/5 [ 75.012357][ T1065] usb 4-1: config 0 has no interface number 0 [ 75.035992][ T3714] gt683r_led 0003:1770:FF00.0002: hid parsing failed [ 75.057367][ T3714] gt683r_led: probe of 0003:1770:FF00.0002 failed with error -22 [ 75.067797][ T1065] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 75.114570][ T1065] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 75.136886][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 75.228911][ T3714] usb 2-1: USB disconnect, device number 3 [ 75.300492][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 75.307952][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 75.349907][ T1065] usb 4-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice= f.88 [ 75.373878][ T3937] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.383077][ T1065] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.416904][ T1065] usb 4-1: Product: syz [ 75.435087][ T1065] usb 4-1: Manufacturer: syz [ 75.444683][ T3563] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 75.456289][ T1065] usb 4-1: SerialNumber: syz [ 75.458179][ T3563] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.487277][ T1065] usb 4-1: config 0 descriptor?? [ 75.513891][ T1879] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.530425][ T1879] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.555802][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.573549][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.595881][ T3937] device veth0_vlan entered promiscuous mode [ 75.622251][ T3937] device veth1_vlan entered promiscuous mode [ 75.670017][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 75.678038][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 75.693309][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.714232][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.760902][ T3937] device veth0_macvtap entered promiscuous mode [ 75.799118][ T3937] device veth1_macvtap entered promiscuous mode [ 75.887582][ T3937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.928925][ T3937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.963366][ T3937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.993731][ T3937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.005225][ T3937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.018244][ T1065] snd-usb-audio: probe of 4-1:0.2 failed with error -12 [ 76.022601][ T3937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.058973][ T1065] usb 4-1: USB disconnect, device number 3 [ 76.086452][ T3937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.101063][ T3937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.126256][ T4229] udevd[4229]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 76.161038][ T3937] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.215871][ T1879] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 76.226933][ T1879] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 76.259921][ T1879] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.281441][ T1879] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.303644][ T3937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.358669][ T3937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.394891][ T3937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.442434][ T3937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.487348][ T3937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.521764][ T3937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.538462][ T3937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.567703][ T3937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.611173][ T3937] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.652459][ T3563] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.678810][ T3563] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.707578][ T3937] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.740212][ T3937] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.781259][ T3937] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.823780][ T3937] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.037551][ T3650] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.046405][ T13] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 77.063275][ T3650] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.125378][ T1879] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.159797][ T3650] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.182709][ T3650] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.223403][ T1879] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.429854][ T13] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 77.513430][ T4262] loop0: detected capacity change from 0 to 4096 [ 77.551425][ T13] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 77.567411][ T13] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 77.605343][ T13] usb 2-1: SerialNumber: syz [ 77.648918][ T4262] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 78.154951][ T25] audit: type=1800 audit(1717121499.263:9): pid=4262 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.0" name="file0" dev="loop0" ino=13 res=0 errno=0 [ 78.226846][ T25] audit: type=1800 audit(1717121499.293:10): pid=4274 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.0" name="file0" dev="loop0" ino=13 res=0 errno=0 [ 78.371462][ T13] cdc_ether: probe of 2-1:1.0 failed with error -71 [ 78.400514][ T13] usb 2-1: USB disconnect, device number 4 [ 79.179843][ T1879] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 79.609991][ T1879] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 79.631810][ T1879] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 79.651132][ T1879] usb 2-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 79.671953][ T1879] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.711650][ T1879] usb 2-1: config 0 descriptor?? [ 79.766508][ T4308] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 80.225689][ T1879] lg-g15 0003:046D:C222.0003: item fetching failed at offset 5/11 [ 80.260190][ T1879] lg-g15: probe of 0003:046D:C222.0003 failed with error -22 [ 80.313659][ T4322] loop0: detected capacity change from 0 to 256 [ 80.425125][ T1879] usb 2-1: USB disconnect, device number 5 [ 80.470856][ T4322] FAT-fs (loop0): Directory bread(block 64) failed [ 80.470922][ T4322] FAT-fs (loop0): Directory bread(block 65) failed [ 80.470994][ T4322] FAT-fs (loop0): Directory bread(block 66) failed [ 80.471024][ T4322] FAT-fs (loop0): Directory bread(block 67) failed [ 80.471089][ T4322] FAT-fs (loop0): Directory bread(block 68) failed [ 80.471119][ T4322] FAT-fs (loop0): Directory bread(block 69) failed [ 80.471188][ T4322] FAT-fs (loop0): Directory bread(block 70) failed [ 80.471219][ T4322] FAT-fs (loop0): Directory bread(block 71) failed [ 80.471282][ T4322] FAT-fs (loop0): Directory bread(block 72) failed [ 80.471310][ T4322] FAT-fs (loop0): Directory bread(block 73) failed [ 81.361702][ T4343] loop4: detected capacity change from 0 to 8 [ 82.093297][ T4343] SQUASHFS error: Unable to read directory block [631:26] [ 82.162802][ T4346] loop1: detected capacity change from 0 to 256 [ 82.221339][ T4346] exfat: Bad value for 'uid' [ 83.245342][ T4365] chnl_net:caif_netlink_parms(): no params data found [ 83.384842][ T4390] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 83.459515][ T4394] device netdevsim0 entered promiscuous mode [ 83.470224][ T4396] loop3: detected capacity change from 0 to 128 [ 83.486079][ T4394] device macsec1 entered promiscuous mode [ 83.512636][ T4394] device netdevsim0 left promiscuous mode [ 83.570191][ T4396] attempt to access beyond end of device [ 83.570191][ T4396] loop3: rw=0, want=6491538, limit=128 [ 83.584439][ T4365] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.596287][ T4396] Buffer I/O error on dev loop3, logical block 3245768, async page read [ 83.619943][ T4365] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.628468][ T4396] attempt to access beyond end of device [ 83.628468][ T4396] loop3: rw=0, want=17666808, limit=128 [ 83.640063][ T4396] Buffer I/O error on dev loop3, logical block 8833403, async page read [ 83.647792][ T4365] device bridge_slave_0 entered promiscuous mode [ 83.649089][ T4396] attempt to access beyond end of device [ 83.649089][ T4396] loop3: rw=0, want=26539620, limit=128 [ 83.667088][ T4396] Buffer I/O error on dev loop3, logical block 13269809, async page read [ 83.672507][ T4365] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.685595][ T4396] attempt to access beyond end of device [ 83.685595][ T4396] loop3: rw=0, want=16147214, limit=128 [ 83.693996][ T4365] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.703306][ T4396] Buffer I/O error on dev loop3, logical block 8073606, async page read [ 83.712456][ T4396] attempt to access beyond end of device [ 83.712456][ T4396] loop3: rw=0, want=6491544, limit=128 [ 83.722432][ T4365] device bridge_slave_1 entered promiscuous mode [ 83.723731][ T4396] Buffer I/O error on dev loop3, logical block 3245771, async page read [ 83.738325][ T4396] attempt to access beyond end of device [ 83.738325][ T4396] loop3: rw=0, want=17668344, limit=128 [ 83.766927][ T4396] Buffer I/O error on dev loop3, logical block 8834171, async page read [ 83.815904][ T4365] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.815960][ T4396] attempt to access beyond end of device [ 83.815960][ T4396] loop3: rw=0, want=26932836, limit=128 [ 83.849718][ T4365] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.937369][ T4396] Buffer I/O error on dev loop3, logical block 13466417, async page read [ 83.945140][ T4365] team0: Port device team_slave_0 added [ 83.950987][ T4396] attempt to access beyond end of device [ 83.950987][ T4396] loop3: rw=0, want=16147214, limit=128 [ 84.008557][ T4365] team0: Port device team_slave_1 added [ 84.027220][ T4396] Buffer I/O error on dev loop3, logical block 8073606, async page read [ 84.044895][ T4396] attempt to access beyond end of device [ 84.044895][ T4396] loop3: rw=0, want=6491550, limit=128 [ 84.066406][ T4396] Buffer I/O error on dev loop3, logical block 3245774, async page read [ 84.075024][ T4396] attempt to access beyond end of device [ 84.075024][ T4396] loop3: rw=0, want=17669880, limit=128 [ 84.088055][ T4365] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.096275][ T4396] Buffer I/O error on dev loop3, logical block 8834939, async page read [ 84.098651][ T4365] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.173050][ T4365] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.209223][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 84.231396][ T4365] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.247408][ T4365] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.339448][ T4365] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.363740][ T4411] tipc: Started in network mode [ 84.375916][ T4411] tipc: Node identity 3a20300a74797065, cluster identity 4711 [ 84.407739][ T4411] tipc: Enabling of bearer rejected, failed to enable media [ 84.546310][ T4365] device hsr_slave_0 entered promiscuous mode [ 84.569203][ T4365] device hsr_slave_1 entered promiscuous mode [ 84.587310][ T4365] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.604101][ T4365] Cannot create hsr debugfs directory [ 84.749956][ T3714] Bluetooth: hci0: command 0x0c20 tx timeout [ 84.839801][ T3714] Bluetooth: hci5: command 0x0409 tx timeout [ 85.016135][ T4365] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.177175][ T4365] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.326356][ T4365] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.445174][ T4365] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.446051][ T4440] loop4: detected capacity change from 0 to 512 [ 85.592087][ T4440] EXT4-fs (loop4): 1 truncate cleaned up [ 85.599389][ T4440] EXT4-fs (loop4): mounted filesystem without journal. Opts: prjquota,grpquota,debug_want_extra_isize=0x000000000000005c,sysvgroups,nolazytime,errors=continue,grpjquota=,,errors=continue. Quota mode: writeback. [ 85.656994][ T4365] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 85.702541][ T4365] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 85.803573][ T4365] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 85.833540][ T4365] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 86.027447][ T3523] EXT4-fs error (device loop4): htree_dirblock_to_tree:1111: inode #2: block 13: comm syz-executor.4: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=196608, rec_len=0, size=1024 fake=0 [ 86.067057][ T4365] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.119330][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 86.131483][ T3523] EXT4-fs error (device loop4): ext4_ext_check_inode:501: inode #11: comm syz-executor.4: pblk 0 bad header/extent: invalid magic - magic e, entries 0, max 15(0), depth 0(0) [ 86.137320][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 86.198690][ T4365] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.201170][ T3523] EXT4-fs error (device loop4): ext4_ext_check_inode:501: inode #11: comm syz-executor.4: pblk 0 bad header/extent: invalid magic - magic e, entries 0, max 15(0), depth 0(0) [ 86.236123][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 86.254906][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 86.285085][ T3568] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.292248][ T3568] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.367593][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 86.379230][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 86.408775][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 86.428951][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.436198][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.438522][ T4428] loop1: detected capacity change from 0 to 40427 [ 86.460804][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 86.549638][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 86.558357][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 86.575149][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 86.599768][ T4428] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 86.609097][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 86.629814][ T4428] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 86.639212][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 86.666143][ T4365] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 86.710131][ T4365] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 86.737426][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 86.748310][ T4428] F2FS-fs (loop1): Found nat_bits in checkpoint [ 86.758700][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 86.784778][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 86.810429][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 86.818803][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 86.853934][ T4445] loop0: detected capacity change from 0 to 32768 [ 86.906998][ T3659] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.925479][ T3563] Bluetooth: hci5: command 0x041b tx timeout [ 86.930957][ T4445] [ 86.930957][ T4445] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 86.930957][ T4445] [ 86.964479][ T4428] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 87.003856][ T4428] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 87.011660][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 87.059866][ T4445] process 'syz-executor.0' launched './file1' with NULL argv: empty string added [ 87.122694][ T3659] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.124245][ T4454] 9pnet_virtio: no channels available for device @ [ 87.238518][ T9] [ 87.238518][ T9] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 87.238518][ T9] [ 87.275403][ T3659] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.283119][ T9] [ 87.283119][ T9] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 87.283119][ T9] [ 87.325535][ T3937] [ 87.325535][ T3937] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 87.325535][ T3937] [ 87.352820][ T275] [ 87.352820][ T275] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 87.352820][ T275] [ 87.377944][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 87.399922][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 87.412680][ T4365] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.426271][ T3937] [ 87.426271][ T3937] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 87.426271][ T3937] [ 87.466424][ T3659] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.570250][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 87.579024][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 87.711664][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 87.720547][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 87.729228][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 87.800254][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 87.841651][ T4365] device veth0_vlan entered promiscuous mode [ 87.857576][ T4365] device veth1_vlan entered promiscuous mode [ 88.026795][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 88.042058][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 88.066494][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 88.085334][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 88.138801][ T4365] device veth0_macvtap entered promiscuous mode [ 88.179007][ T3659] tipc: Left network mode [ 88.225528][ T4365] device veth1_macvtap entered promiscuous mode [ 88.437813][ T4365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.464155][ T4365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.489436][ T4365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.519862][ T4365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.539610][ T4365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.550269][ T4365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.572029][ T4365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.595378][ T4365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.616148][ T4365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.639180][ T4365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.662919][ T4365] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.680195][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 88.694165][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 88.722618][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 88.777213][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 88.825089][ T4365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.868429][ T4365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.900370][ T4365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.934803][ T4365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.966471][ T4365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.989880][ T3714] Bluetooth: hci5: command 0x040f tx timeout [ 88.996133][ T4365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.019227][ T4365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.042019][ T4365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.064336][ T4365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.096068][ T4365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.127236][ T4365] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.189675][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 89.198439][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 89.243595][ T4365] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.259406][ T4365] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.278619][ T4365] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.312472][ T4365] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.357365][ T4457] chnl_net:caif_netlink_parms(): no params data found [ 89.613656][ T3648] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.673145][ T3648] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.710211][ T3568] Bluetooth: hci0: command 0x0409 tx timeout [ 89.729753][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 89.749362][ T4457] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.768246][ T4457] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.792924][ T4457] device bridge_slave_0 entered promiscuous mode [ 89.911210][ T3648] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.919719][ T4457] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.927136][ T3648] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.930220][ T4457] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.978709][ T4457] device bridge_slave_1 entered promiscuous mode [ 90.123078][ T1879] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 90.205313][ T4457] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.261673][ T4457] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.272644][ T4494] loop0: detected capacity change from 0 to 32768 [ 90.372280][ T4494] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz-executor.0 (4494) [ 90.431391][ T4457] team0: Port device team_slave_0 added [ 90.439307][ T4457] team0: Port device team_slave_1 added [ 90.482101][ T4494] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 90.492553][ T4521] Zero length message leads to an empty skb [ 90.504429][ T4494] BTRFS info (device loop0): using free space tree [ 90.530178][ T4494] BTRFS info (device loop0): has skinny extents [ 90.619449][ T4521] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 90.802991][ T4457] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.820843][ T4494] BTRFS info (device loop0): enabling ssd optimizations [ 90.874058][ T4457] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.019688][ T4457] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.036457][ T4516] loop1: detected capacity change from 0 to 32768 [ 91.069814][ T1879] Bluetooth: hci5: command 0x0419 tx timeout [ 91.083008][ T4457] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.117584][ T4457] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.128178][ T4516] [ 91.128178][ T4516] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 91.128178][ T4516] [ 91.269838][ T4457] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.373351][ T3659] device hsr_slave_0 left promiscuous mode [ 91.400702][ T4516] 9pnet_virtio: no channels available for device @ [ 91.421368][ T3659] device hsr_slave_1 left promiscuous mode [ 91.453408][ T3659] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 91.477724][ T3659] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 91.488469][ T3665] [ 91.488469][ T3665] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 91.488469][ T3665] [ 91.499777][ T3665] [ 91.499777][ T3665] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 91.499777][ T3665] [ 91.512479][ T3659] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 91.520221][ T3659] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 91.527924][ T275] [ 91.527924][ T275] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 91.527924][ T275] [ 91.543669][ T3534] [ 91.543669][ T3534] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 91.543669][ T3534] [ 91.557650][ T3659] device bridge_slave_1 left promiscuous mode [ 91.566913][ T3659] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.567646][ T3534] [ 91.567646][ T3534] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 91.567646][ T3534] [ 91.599865][ T3659] device bridge_slave_0 left promiscuous mode [ 91.618516][ T3659] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.658029][ T3659] device veth1_macvtap left promiscuous mode [ 91.689729][ T4549] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 91.703871][ T3659] device veth0_macvtap left promiscuous mode [ 91.722810][ T3659] device veth1_vlan left promiscuous mode [ 91.743496][ T3659] device veth0_vlan left promiscuous mode [ 91.800099][ T3529] Bluetooth: hci0: command 0x041b tx timeout [ 91.939748][ T4549] usb 3-1: Using ep0 maxpacket: 32 [ 92.059672][ T4549] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 92.083328][ T4549] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 92.140283][ T4549] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 92.171052][ T4549] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 92.200122][ T4549] usb 3-1: New USB device found, idVendor=1b96, idProduct=9f0a, bcdDevice= 0.15 [ 92.219340][ T4549] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.263643][ T4549] usb 3-1: config 0 descriptor?? [ 92.423142][ T3659] team0 (unregistering): Port device team_slave_1 removed [ 92.447993][ T3659] team0 (unregistering): Port device team_slave_0 removed [ 92.476328][ T3659] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 92.507051][ T3659] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 92.690692][ T3659] bond0 (unregistering): Released all slaves [ 92.775353][ T4553] tipc: Started in network mode [ 92.780894][ T4553] tipc: Node identity aaaaaaaaaa2a, cluster identity 4711 [ 92.796263][ T4553] tipc: Enabled bearer , priority 0 [ 92.810809][ T4558] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 92.819819][ T4549] usbhid 3-1:0.0: can't add hid device: -71 [ 92.825960][ T4549] usbhid: probe of 3-1:0.0 failed with error -71 [ 92.832117][ T4558] tipc: Resetting bearer [ 92.856858][ T4549] usb 3-1: USB disconnect, device number 2 [ 93.005842][ T4579] loop0: detected capacity change from 0 to 256 [ 93.018119][ T4457] device hsr_slave_0 entered promiscuous mode [ 93.048782][ T4457] device hsr_slave_1 entered promiscuous mode [ 93.225343][ T4584] device veth0_to_hsr entered promiscuous mode [ 93.308154][ T4583] device veth0_to_hsr left promiscuous mode [ 93.564118][ T4596] loop1: detected capacity change from 0 to 64 [ 93.642005][ T4600] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.0'. [ 93.835145][ T4596] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 93.861501][ T3714] tipc: Node number set to 8432298 [ 93.880502][ T3714] Bluetooth: hci0: command 0x040f tx timeout [ 93.882381][ T4596] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 93.896149][ T4596] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 93.905115][ T4596] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 93.910675][ T4606] overlayfs: failed to resolve './file0': -2 [ 93.913865][ T4596] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 94.583176][ T4457] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 94.638803][ T4457] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 94.690395][ T4457] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 94.722643][ T4457] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 95.020196][ T4637] device veth0_to_hsr entered promiscuous mode [ 95.032916][ T4635] device veth0_to_hsr left promiscuous mode [ 95.089999][ T4457] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.169164][ T4457] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.199923][ T3564] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 95.210439][ T3564] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 95.290662][ T3562] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 95.301318][ T3562] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 95.322497][ T3562] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.329601][ T3562] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.409882][ T3562] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 95.441183][ T3562] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 95.460150][ T3562] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.467207][ T3562] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.522529][ T3562] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 95.537299][ T3562] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 95.578503][ T4457] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 95.628790][ T4457] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 95.670756][ T4549] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 95.678682][ T4549] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 95.708159][ T4618] loop1: detected capacity change from 0 to 32768 [ 95.710607][ T4549] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 95.738837][ T4549] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 95.764386][ T4549] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 95.785116][ T4549] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 95.801096][ T4618] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 scanned by syz-executor.1 (4618) [ 95.828225][ T4549] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 95.849337][ T4549] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 95.871315][ T4549] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 95.942045][ T4549] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 95.949873][ T21] Bluetooth: hci0: command 0x0419 tx timeout [ 95.985106][ T4549] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 96.095954][ T4618] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 96.123140][ T4618] BTRFS info (device loop1): force zlib compression, level 3 [ 96.209932][ T4618] BTRFS info (device loop1): using free space tree [ 96.229617][ T4618] BTRFS info (device loop1): has skinny extents [ 96.252995][ T3563] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 96.267231][ T3563] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 96.304754][ T4665] loop0: detected capacity change from 0 to 64 [ 96.307154][ T4457] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.530886][ T4665] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 96.540623][ T4618] BTRFS info (device loop1): enabling ssd optimizations [ 96.671413][ T4665] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 96.680238][ T4665] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 96.688935][ T4665] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 96.697731][ T4665] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 97.370938][ T4545] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 97.400959][ T4545] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 97.453766][ T4545] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 97.497942][ T4545] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 97.540216][ T4457] device veth0_vlan entered promiscuous mode [ 97.590861][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 97.598663][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 97.634503][ T4457] device veth1_vlan entered promiscuous mode [ 97.744083][ T4457] device veth0_macvtap entered promiscuous mode [ 97.801661][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 97.815270][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 97.837172][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 97.866762][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 97.888783][ T4457] device veth1_macvtap entered promiscuous mode [ 97.913341][ T4725] device veth0_to_hsr entered promiscuous mode [ 97.931430][ T3563] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 97.942943][ T3563] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 97.971389][ T4724] device veth0_to_hsr left promiscuous mode [ 98.041415][ T4457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.095860][ T4457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.145524][ T4457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.173733][ T4457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.228770][ T4457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.274780][ T4457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.321951][ T4457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.355401][ T4457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.387732][ T4457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.437260][ T4457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.490962][ T4457] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.539959][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 98.552256][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 98.584550][ T4457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.616149][ T4457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.645977][ T4457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.676840][ T4457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.699472][ T4457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.722524][ T4457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.736814][ T4723] loop0: detected capacity change from 0 to 32768 [ 98.743496][ T4457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.755185][ T4457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.765441][ T4457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.776272][ T4457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.788099][ T4457] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.807131][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 98.825228][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 98.844857][ T4457] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.865625][ T4457] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.886234][ T4457] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.906964][ T4457] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.947097][ T4723] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz-executor.0 (4723) [ 99.055914][ T4723] BTRFS error (device loop0): unsupported checksum algorithm: 4 [ 99.146146][ T1128] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.165343][ T4723] BTRFS error (device loop0): open_ctree failed [ 99.172077][ T1128] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.234631][ T4545] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 99.280407][ T3661] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.288418][ T3661] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.356308][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 99.428514][ T4771] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 99.859664][ T3714] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 100.144009][ T3714] usb 1-1: Using ep0 maxpacket: 32 [ 100.260096][ T3714] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 100.279318][ T3714] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 100.326304][ T3714] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 100.549711][ T3714] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 100.558798][ T3714] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 100.576594][ T3714] usb 1-1: Product: syz [ 100.584257][ T3714] usb 1-1: Manufacturer: syz [ 100.592482][ T3714] usb 1-1: SerialNumber: syz [ 100.603311][ T4813] loop4: detected capacity change from 0 to 64 [ 100.621703][ T3714] usb 1-1: config 0 descriptor?? [ 100.681435][ T3714] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 100.730597][ T4812] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 100.751829][ T3714] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 100.828579][ T4812] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.837728][ T4812] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.846479][ T4812] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.855201][ T4812] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 101.193906][ T4817] loop4: detected capacity change from 0 to 1024 [ 101.236951][ T4818] ldusb 1-1:0.0: Couldn't submit interrupt_in_urb -90 [ 101.265383][ T4817] EXT4-fs (loop4): Test dummy encryption mode enabled [ 101.284056][ T4817] EXT4-fs (loop4): Ignoring removed orlov option [ 101.317096][ T4817] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue. Quota mode: writeback. [ 101.345300][ C1] vkms_vblank_simulate: vblank timer overrun [ 101.481748][ T4817] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 101.501193][ T25] audit: type=1800 audit(1717121522.613:11): pid=4817 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 101.559655][ T21] Bluetooth: hci0: command 0x0c20 tx timeout [ 101.681513][ T4810] loop1: detected capacity change from 0 to 32768 [ 101.856802][ T4810] XFS (loop1): Mounting V5 Filesystem [ 101.998431][ T4810] XFS (loop1): Ending clean mount [ 102.017465][ T4810] XFS (loop1): Quotacheck needed: Please wait. [ 102.084902][ T4810] XFS (loop1): Quotacheck: Done. [ 102.158675][ T3534] XFS (loop1): Unmounting Filesystem [ 102.603481][ T4545] usb 1-1: USB disconnect, device number 2 [ 102.625030][ T4545] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 102.687577][ T4844] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. [ 102.741767][ T4844] netlink: 'syz-executor.1': attribute type 7 has an invalid length. [ 102.789566][ T4844] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 102.843086][ T4844] bond0: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 102.855626][ T4828] loop4: detected capacity change from 0 to 32768 [ 102.890591][ T4846] device veth0_to_hsr entered promiscuous mode [ 102.926539][ T4845] device veth0_to_hsr left promiscuous mode [ 102.954235][ T4828] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz-executor.4 (4828) [ 103.023555][ T4828] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 103.077708][ T4828] BTRFS info (device loop4): disabling free space tree [ 103.107119][ T4854] loop0: detected capacity change from 0 to 2048 [ 103.119580][ T4828] BTRFS info (device loop4): setting nodatacow, compression disabled [ 103.145200][ T4828] BTRFS info (device loop4): turning off barriers [ 103.187069][ T4828] BTRFS info (device loop4): use no compression [ 103.209019][ T4828] BTRFS warning (device loop4): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 103.215954][ T4854] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 103.240890][ T4828] BTRFS info (device loop4): trying to use backup root at mount time [ 103.249098][ T4828] BTRFS error (device loop4): cannot disable free space tree [ 103.257988][ T4828] BTRFS error (device loop4): open_ctree failed [ 103.636682][ T4868] loop4: detected capacity change from 0 to 2048 [ 103.845424][ T4875] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 103.916842][ T4868] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 103.929727][ T21] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 103.945865][ T4868] Remounting filesystem read-only [ 103.953838][ T4868] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 104.007069][ T4868] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 104.049223][ T4868] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 104.119814][ T4868] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 104.156128][ T4868] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 104.198728][ T4868] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 104.209749][ T21] usb 1-1: Using ep0 maxpacket: 32 [ 104.249668][ T4868] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 104.259416][ T25] audit: type=1800 audit(1717121525.363:12): pid=4868 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="file2" dev="loop4" ino=16 res=0 errno=0 [ 104.339831][ T21] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 104.352599][ T21] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 104.392685][ T21] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 104.497853][ C0] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. [ 104.609903][ T21] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 104.627428][ T21] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 104.647067][ T21] usb 1-1: Product: syz [ 104.661373][ T21] usb 1-1: Manufacturer: syz [ 104.671517][ T21] usb 1-1: SerialNumber: syz [ 104.689811][ T21] usb 1-1: config 0 descriptor?? [ 104.738176][ T4896] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'. [ 104.758272][ T4896] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 104.758702][ T21] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 104.789728][ T4896] bond0: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 104.808358][ T21] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 105.077581][ T4899] loop4: detected capacity change from 0 to 4096 [ 105.354760][ T4910] ldusb 1-1:0.0: Couldn't submit interrupt_in_urb -90 [ 107.074254][ T21] usb 1-1: USB disconnect, device number 3 [ 107.083143][ T21] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 108.281664][ T4941] netlink: 127868 bytes leftover after parsing attributes in process `syz-executor.4'. [ 108.335187][ T4941] netlink: 6955 bytes leftover after parsing attributes in process `syz-executor.4'. [ 108.431871][ T4946] loop1: detected capacity change from 0 to 1024 [ 108.525230][ T4946] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 108.576744][ T4946] EXT4-fs (loop1): mounted filesystem without journal. Opts: bsddf,debug_want_extra_isize=0x0000000000000084,resuid=0x0000000000000000,grpid,lazytime,jqfmt=vfsold,usrquota,data_err=abort,,errors=continue. Quota mode: writeback. [ 109.152345][ T3714] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 109.168612][ T3714] Bluetooth: hci5: Injecting HCI hardware error event [ 109.195646][ T146] Bluetooth: hci5: hardware error 0x00 [ 109.473265][ T4985] loop4: detected capacity change from 0 to 64 [ 109.579651][ T4550] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 109.829629][ T4550] usb 1-1: Using ep0 maxpacket: 8 [ 109.989852][ T4550] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 110.014735][ T4550] usb 1-1: can't read configurations, error -61 [ 110.182062][ T4550] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 110.315964][ C0] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. [ 110.439669][ T4550] usb 1-1: Using ep0 maxpacket: 8 [ 110.599343][ T4996] loop1: detected capacity change from 0 to 32768 [ 110.609703][ T4550] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 110.617294][ T4550] usb 1-1: can't read configurations, error -61 [ 110.629953][ T4550] usb usb1-port1: attempt power cycle [ 110.684167][ T4996] Dev loop1 SGI disklabel: csum bad, label corrupted [ 110.762389][ T2963] Dev loop1 SGI disklabel: csum bad, label corrupted [ 111.049781][ T4550] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 111.139855][ T4550] usb 1-1: Using ep0 maxpacket: 8 [ 111.299869][ T4550] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 111.312434][ T4550] usb 1-1: can't read configurations, error -61 [ 111.369800][ T3599] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 111.471236][ T4550] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 111.569806][ T4550] usb 1-1: Using ep0 maxpacket: 8 [ 111.729855][ T4550] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 111.739850][ T3599] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 111.759328][ T4550] usb 1-1: can't read configurations, error -61 [ 111.773418][ T25] audit: type=1800 audit(1717121532.883:13): pid=5035 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1961 res=0 errno=0 [ 111.799723][ T3599] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 111.819023][ T4550] usb usb1-port1: unable to enumerate USB device [ 112.000952][ T3599] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 112.022417][ T3599] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.047473][ T3599] usb 2-1: Product: syz [ 112.063069][ T3599] usb 2-1: Manufacturer: syz [ 112.077788][ T3599] usb 2-1: SerialNumber: syz [ 112.102369][ T3599] usb 2-1: config 0 descriptor?? [ 112.269699][ T4550] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 112.373556][ T3599] usb 2-1: USB disconnect, device number 6 [ 112.519683][ T4550] usb 3-1: Using ep0 maxpacket: 32 [ 112.661335][ T4550] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 112.689625][ T4550] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 112.699733][ T1879] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 112.727749][ T4550] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 112.838149][ T25] audit: type=1804 audit(1717121533.943:14): pid=5043 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir319946553/syzkaller.MYEUwW/40/file0" dev="sda1" ino=1961 res=1 errno=0 [ 112.909844][ T4550] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 112.930218][ T4550] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 112.947051][ T4550] usb 3-1: Product: syz [ 112.954882][ T4550] usb 3-1: Manufacturer: syz [ 112.963080][ T4550] usb 3-1: SerialNumber: syz [ 112.976654][ T4550] usb 3-1: config 0 descriptor?? [ 112.996543][ T1879] usb 1-1: Using ep0 maxpacket: 8 [ 113.022067][ T4550] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 113.045509][ T4550] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 113.133686][ T25] audit: type=1800 audit(1717121534.243:15): pid=5045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1966 res=0 errno=0 [ 113.155395][ T1879] usb 1-1: config 135 has an invalid interface number: 230 but max is 0 [ 113.167652][ T1879] usb 1-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 113.190529][ T1879] usb 1-1: config 135 has no interface number 0 [ 113.209409][ T1879] usb 1-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 113.419966][ T1879] usb 1-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 113.435935][ T1879] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.467907][ T1879] usb 1-1: Product: syz [ 113.486602][ T1879] usb 1-1: Manufacturer: syz [ 113.507242][ T1879] usb 1-1: SerialNumber: syz [ 113.643147][ T5047] ldusb 3-1:0.0: Couldn't submit interrupt_in_urb -90 [ 113.795881][ T1879] usb 1-1: USB disconnect, device number 8 [ 114.092656][ T5057] loop1: detected capacity change from 0 to 1024 [ 114.214566][ T5057] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 114.527464][ T5052] chnl_net:caif_netlink_parms(): no params data found [ 114.637383][ T25] audit: type=1804 audit(1717121535.743:16): pid=5075 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir319946553/syzkaller.MYEUwW/46/file0" dev="sda1" ino=1960 res=1 errno=0 [ 114.701063][ T5074] loop0: detected capacity change from 0 to 1024 [ 114.832396][ T5074] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 114.845143][ T5052] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.909019][ T5052] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.949239][ T5052] device bridge_slave_0 entered promiscuous mode [ 114.968086][ T1879] usb 3-1: USB disconnect, device number 3 [ 114.993311][ T1879] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 115.010155][ T5052] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.051487][ T5052] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.075116][ T5052] device bridge_slave_1 entered promiscuous mode [ 115.183532][ T5052] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 115.250195][ T5052] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 115.284109][ T25] audit: type=1800 audit(1717121536.393:17): pid=5086 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1947 res=0 errno=0 [ 115.389099][ T5052] team0: Port device team_slave_0 added [ 115.418780][ T5052] team0: Port device team_slave_1 added [ 115.513758][ T5052] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 115.531136][ T5052] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.573927][ T5052] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 115.593451][ T5052] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 115.626016][ T5052] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.664844][ T5052] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 115.827266][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 115.926236][ T5052] device hsr_slave_0 entered promiscuous mode [ 115.956175][ T5052] device hsr_slave_1 entered promiscuous mode [ 115.990712][ T3524] Bluetooth: hci3: Received unexpected HCI Event 00000000 [ 116.015945][ T5052] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 116.027139][ T5052] Cannot create hsr debugfs directory [ 116.033302][ T1879] Bluetooth: hci6: command 0x0409 tx timeout [ 116.349812][ T21] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 116.383722][ T5052] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.525297][ T5112] loop0: detected capacity change from 0 to 1024 [ 116.541201][ T5052] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.619822][ T21] usb 3-1: Using ep0 maxpacket: 8 [ 116.658848][ T5052] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.671139][ T5112] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 116.759737][ T21] usb 3-1: config 135 has an invalid interface number: 230 but max is 0 [ 116.792115][ T21] usb 3-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 116.835416][ T21] usb 3-1: config 135 has no interface number 0 [ 116.857819][ T21] usb 3-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 116.871643][ T5122] loop4: detected capacity change from 0 to 1024 [ 116.874884][ T5052] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.936162][ T5122] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 117.140501][ T21] usb 3-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 117.165152][ T21] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.219737][ T21] usb 3-1: Product: syz [ 117.242315][ T21] usb 3-1: Manufacturer: syz [ 117.256321][ T5052] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 117.276519][ T21] usb 3-1: SerialNumber: syz [ 117.329382][ T5052] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 117.364217][ T5052] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 117.427037][ T5052] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 117.473642][ T25] audit: type=1800 audit(1717121538.583:18): pid=5127 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1954 res=0 errno=0 [ 117.673263][ T1879] usb 3-1: USB disconnect, device number 4 [ 117.834737][ T5052] 8021q: adding VLAN 0 to HW filter on device bond0 [ 117.907549][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 117.952351][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 117.997201][ T5052] 8021q: adding VLAN 0 to HW filter on device team0 [ 118.026537][ T25] audit: type=1804 audit(1717121539.133:19): pid=5135 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir319946553/syzkaller.MYEUwW/52/file0" dev="sda1" ino=1946 res=1 errno=0 [ 118.043975][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 118.101515][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 118.120051][ T1879] Bluetooth: hci6: command 0x041b tx timeout [ 118.129191][ T3569] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.136348][ T3569] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.195709][ T4547] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 118.217608][ T1879] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 118.234208][ T1879] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 118.261931][ T1879] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.269014][ T1879] bridge0: port 2(bridge_slave_1) entered forwarding state [ 118.321356][ T1879] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 118.346718][ T1879] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 118.373029][ T1879] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 118.415200][ T1879] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 118.458212][ T5052] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 118.499838][ T5052] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 118.560390][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 118.576875][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 118.608030][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 118.685440][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 118.726866][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 118.764494][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 118.800991][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 118.831224][ T3563] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 118.961009][ T5162] loop4: detected capacity change from 0 to 1024 [ 119.104652][ T5162] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 119.277415][ T4547] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 119.308362][ T4547] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 119.344853][ T5052] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 119.400951][ T4547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 119.420920][ T4547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 119.491468][ T4547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 119.511929][ T4547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 119.539861][ T5052] device veth0_vlan entered promiscuous mode [ 119.579009][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 119.593831][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 119.618951][ T5052] device veth1_vlan entered promiscuous mode [ 119.686917][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 119.703449][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 119.726787][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 119.780519][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 119.816583][ T5052] device veth0_macvtap entered promiscuous mode [ 119.832809][ T25] audit: type=1800 audit(1717121540.943:20): pid=5173 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name=1801 dev="sda1" ino=1960 res=0 errno=0 [ 119.863221][ T5052] device veth1_macvtap entered promiscuous mode [ 119.940577][ T5052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.975781][ T5052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.013015][ T5052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.059649][ T5052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.069472][ T5052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.143396][ T5176] loop0: detected capacity change from 0 to 1024 [ 120.159641][ T5052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.179877][ T5052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.198295][ T5052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.201097][ T3714] Bluetooth: hci6: command 0x040f tx timeout [ 120.227432][ T5052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.268502][ T5052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.356609][ T5052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.388225][ T5052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.435149][ T5052] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 120.451152][ T1879] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 120.487947][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 120.520621][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 120.544764][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 120.546111][ T5176] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 120.561501][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 120.574153][ T5052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.698181][ T5052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.719750][ T1879] usb 3-1: Using ep0 maxpacket: 8 [ 120.813341][ T5052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.889726][ T1879] usb 3-1: config 135 has an invalid interface number: 230 but max is 0 [ 120.958373][ T1879] usb 3-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 121.012583][ T5052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.089687][ T1879] usb 3-1: config 135 has no interface number 0 [ 121.111841][ T5052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.127818][ T1879] usb 3-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 121.155644][ T5052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.187758][ T5052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.217554][ T5052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.248846][ T5052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.278517][ T5052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.307142][ T5052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.339554][ T5052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.349991][ T1879] usb 3-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 121.363289][ T1879] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.380620][ T5052] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 121.391460][ T1879] usb 3-1: Product: syz [ 121.395665][ T1879] usb 3-1: Manufacturer: syz [ 121.415275][ T1879] usb 3-1: SerialNumber: syz [ 121.422348][ T5052] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.455870][ T5052] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.475114][ T5052] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.507143][ T5052] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.528971][ T3563] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 121.574358][ T3563] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 121.771563][ T3599] usb 3-1: USB disconnect, device number 5 [ 121.773622][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.809808][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.872024][ T3648] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.884229][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 121.906743][ T3648] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.938424][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 122.155473][ T25] audit: type=1800 audit(1717121543.263:21): pid=5210 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1964 res=0 errno=0 [ 122.270013][ T3599] Bluetooth: hci6: command 0x0419 tx timeout [ 122.427687][ T25] audit: type=1800 audit(1717121543.533:22): pid=5217 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1942 res=0 errno=0 [ 123.402079][ T5240] 9pnet_virtio: no channels available for device syz [ 123.428005][ T5241] ALSA: mixer_oss: invalid OSS volume '' [ 123.849697][ T3599] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 123.919638][ T5259] serio: Serial port pts0 [ 124.089658][ T3599] usb 5-1: Using ep0 maxpacket: 8 [ 124.219933][ T3599] usb 5-1: config 135 has an invalid interface number: 230 but max is 0 [ 124.235038][ T3599] usb 5-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 124.267235][ T3599] usb 5-1: config 135 has no interface number 0 [ 124.295363][ T3599] usb 5-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 124.302468][ C1] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. [ 124.506073][ T3599] usb 5-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 124.535224][ T3599] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.553364][ T3599] usb 5-1: Product: syz [ 124.557534][ T3599] usb 5-1: Manufacturer: syz [ 124.574027][ T3599] usb 5-1: SerialNumber: syz [ 124.863127][ T4545] usb 5-1: USB disconnect, device number 3 [ 125.492814][ T5301] loop1: detected capacity change from 0 to 32768 [ 126.292669][ C1] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. [ 126.422143][ T5374] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 127.215610][ T5378] loop4: detected capacity change from 0 to 32768 [ 127.289845][ T5378] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz-executor.4 (5378) [ 127.347298][ T5378] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 127.401987][ T5378] BTRFS info (device loop4): using free space tree [ 127.420774][ T5378] BTRFS info (device loop4): has skinny extents [ 127.463419][ T5397] loop1: detected capacity change from 0 to 2048 [ 127.575603][ T5378] BTRFS info (device loop4): enabling ssd optimizations [ 127.606718][ T5397] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 128.377950][ T5423] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 128.400684][ T5390] loop0: detected capacity change from 0 to 32768 [ 128.588483][ T5390] XFS (loop0): Mounting V5 Filesystem [ 128.709816][ T5390] XFS (loop0): Ending clean mount [ 128.748511][ T3937] XFS (loop0): Unmounting Filesystem [ 129.344286][ T5443] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 129.543069][ T5447] loop0: detected capacity change from 0 to 1024 [ 129.686179][ T5447] hfsplus: extend alloc file! (8192,65536,366) [ 130.000168][ T3599] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 130.249594][ T3599] usb 3-1: Using ep0 maxpacket: 32 [ 130.369824][ T3599] usb 3-1: config 0 has an invalid interface number: 226 but max is 0 [ 130.378011][ T3599] usb 3-1: config 0 has no interface number 0 [ 130.405459][ T5465] loop4: detected capacity change from 0 to 8 [ 130.411905][ T3599] usb 3-1: config 0 interface 226 has no altsetting 0 [ 130.483756][ T5465] squashfs image failed sanity check [ 130.589695][ T3599] usb 3-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 130.599190][ T3599] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.628258][ T5473] loop4: detected capacity change from 0 to 256 [ 130.643818][ T3599] usb 3-1: Product: syz [ 130.659213][ T3599] usb 3-1: Manufacturer: syz [ 130.682355][ T3599] usb 3-1: SerialNumber: syz [ 130.708298][ T3599] usb 3-1: config 0 descriptor?? [ 130.760365][ T3599] hub 3-1:0.226: bad descriptor, ignoring hub [ 130.766466][ T3599] hub: probe of 3-1:0.226 failed with error -5 [ 130.784897][ T5473] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 130.967167][ T3714] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 131.178328][ T5477] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 131.196656][ T5459] loop0: detected capacity change from 0 to 32768 [ 131.279750][ T4542] usb 3-1: reset high-speed USB device number 6 using dummy_hcd [ 131.312983][ T5459] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz-executor.0 (5459) [ 131.346461][ T5459] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 131.364248][ T5459] BTRFS info (device loop0): using free space tree [ 131.379194][ T5459] BTRFS info (device loop0): has skinny extents [ 131.403104][ T3714] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 131.425004][ T3714] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.469381][ T3714] usb 2-1: config 0 descriptor?? [ 131.522643][ T5487] loop4: detected capacity change from 0 to 2048 [ 131.548765][ T5459] BTRFS info (device loop0): enabling ssd optimizations [ 131.631347][ T5487] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 131.794563][ T3714] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 131.813477][ T3714] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 131.859801][ T3714] [drm:udl_init] *ERROR* Selecting channel failed [ 131.919755][ T4542] usb 3-1: failed to restore interface 226 altsetting 75 (error=-71) [ 131.937128][ T3714] [drm] Initialized udl 0.0.1 20120220 for 2-1:0.0 on minor 2 [ 131.945814][ T4542] usb 3-1: USB disconnect, device number 6 [ 131.964298][ T3714] [drm] Initialized udl on minor 2 [ 132.021826][ T3714] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 132.051814][ T3714] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 132.099175][ T3714] usb 2-1: USB disconnect, device number 7 [ 132.307540][ T5511] loop1: detected capacity change from 0 to 128 [ 132.366015][ T5511] VFS: Found a Xenix FS (block size = 512) on device loop1 [ 132.468103][ T5511] attempt to access beyond end of device [ 132.468103][ T5511] loop1: rw=2049, want=2066843071, limit=128 [ 132.540861][ T5511] Buffer I/O error on dev loop1, logical block 2066843070, lost async page write [ 132.559594][ T3562] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 132.591403][ T1374] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.602023][ T1374] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.853767][ T3534] sysv_free_block: trying to free block not in datazone [ 132.904577][ T3534] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 132.930830][ T3562] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 132.952403][ T3562] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.002897][ T3562] usb 1-1: config 0 descriptor?? [ 133.121998][ T5517] loop1: detected capacity change from 0 to 512 [ 133.207169][ T5517] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 133.379880][ T3562] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 133.415066][ T3562] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 133.455037][ T5517] EXT4-fs error (device loop1): ext4_do_update_inode:5160: inode #16: comm syz-executor.1: corrupted inode contents [ 133.550452][ T3562] [drm:udl_init] *ERROR* Selecting channel failed [ 133.732800][ T5517] EXT4-fs error (device loop1): ext4_dirty_inode:5993: inode #16: comm syz-executor.1: mark_inode_dirty error [ 133.793183][ T3562] [drm] Initialized udl 0.0.1 20120220 for 1-1:0.0 on minor 2 [ 133.810203][ T5517] EXT4-fs error (device loop1): ext4_do_update_inode:5160: inode #16: comm syz-executor.1: corrupted inode contents [ 133.827938][ T3562] [drm] Initialized udl on minor 2 [ 133.833941][ T5517] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #16: comm syz-executor.1: mark_inode_dirty error [ 133.879794][ T3562] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 133.888384][ T3562] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 133.919636][ T5517] EXT4-fs error (device loop1): ext4_do_update_inode:5160: inode #16: comm syz-executor.1: corrupted inode contents [ 133.950994][ T3599] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 133.962161][ T3562] usb 1-1: USB disconnect, device number 9 [ 133.982175][ T5517] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 134.000625][ T3599] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 134.013145][ T5517] EXT4-fs error (device loop1): ext4_do_update_inode:5160: inode #16: comm syz-executor.1: corrupted inode contents [ 134.047079][ T3599] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 134.061293][ T5517] EXT4-fs error (device loop1): ext4_truncate:4261: inode #16: comm syz-executor.1: mark_inode_dirty error [ 134.115500][ T5517] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 134.156185][ T5517] EXT4-fs (loop1): 1 truncate cleaned up [ 134.171924][ T5517] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 134.229651][ T5517] ext4 filesystem being mounted at /root/syzkaller-testdir1648024515/syzkaller.aQiJxL/127/file1 supports timestamps until 2038 (0x7fffffff) [ 134.434567][ T5529] syz-executor.0 sent an empty control message without MSG_MORE. [ 134.754588][ T5535] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 135.729717][ T5537] loop0: detected capacity change from 0 to 32768 [ 135.779692][ T5537] BTRFS: device fsid d552757d-9c39-40e3-95f0-16d819589928 devid 1 transid 8 /dev/loop0 scanned by syz-executor.0 (5537) [ 135.811494][ T5539] loop1: detected capacity change from 0 to 32768 [ 135.837370][ T5537] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 135.872402][ T5537] BTRFS info (device loop0): use zlib compression, level 3 [ 135.902621][ T5537] BTRFS info (device loop0): turning on sync discard [ 135.909346][ T5537] BTRFS info (device loop0): max_inline at 0 [ 135.964519][ T5537] BTRFS info (device loop0): enabling ssd optimizations [ 136.005510][ T5537] BTRFS info (device loop0): using spread ssd allocation scheme [ 136.034514][ T5539] XFS (loop1): Mounting V5 Filesystem [ 136.052037][ T5537] BTRFS info (device loop0): using free space tree [ 136.058664][ T5537] BTRFS info (device loop0): has skinny extents [ 136.184589][ T5539] XFS (loop1): Ending clean mount [ 136.220398][ T5539] XFS (loop1): Quotacheck needed: Please wait. [ 136.325064][ T5539] XFS (loop1): Quotacheck: Done. [ 136.515209][ T5545] loop4: detected capacity change from 0 to 32768 [ 136.544132][ T25] audit: type=1800 audit(1717121557.653:23): pid=5537 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file1" dev="loop0" ino=260 res=0 errno=0 [ 136.583137][ T3534] XFS (loop1): Unmounting Filesystem [ 136.687063][ T25] audit: type=1804 audit(1717121557.653:24): pid=5537 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir3682591088/syzkaller.aFEt4T/89/file0/bus" dev="loop0" ino=263 res=1 errno=0 [ 136.815231][ T5545] ERROR: (device loop4): jfs_readdir: JFS:Dtree error: ino = 2, bn=44, index = 1 [ 136.815231][ T5545] [ 136.862267][ T25] audit: type=1804 audit(1717121557.683:25): pid=5537 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir3682591088/syzkaller.aFEt4T/89/file0/bus" dev="loop0" ino=263 res=1 errno=0 [ 137.090934][ T25] audit: type=1804 audit(1717121557.783:26): pid=5582 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir3682591088/syzkaller.aFEt4T/89/file0/file1" dev="loop0" ino=260 res=1 errno=0 [ 137.398405][ T5590] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 137.873622][ T4549] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 138.249887][ T4549] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 138.278710][ T4549] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 138.317458][ T4549] usb 1-1: New USB device found, idVendor=0458, idProduct=501a, bcdDevice= 0.00 [ 138.339180][ T4549] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.372513][ T4549] usb 1-1: config 0 descriptor?? [ 138.929712][ T4549] usbhid 1-1:0.0: can't add hid device: -71 [ 138.935829][ T4549] usbhid: probe of 1-1:0.0 failed with error -71 [ 138.978135][ T4549] usb 1-1: USB disconnect, device number 10 [ 139.508963][ T5607] loop1: detected capacity change from 0 to 32768 [ 139.591628][ T5606] loop4: detected capacity change from 0 to 32768 [ 139.644902][ T5607] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 139.665241][ T5606] sysfs: cannot create duplicate filename '/fs/gfs2/syz:syz' [ 139.709679][ T5607] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 139.720600][ T5606] CPU: 1 PID: 5606 Comm: syz-executor.4 Not tainted 5.15.160-syzkaller #0 [ 139.729123][ T5606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 139.739198][ T5606] Call Trace: [ 139.742488][ T5606] [ 139.745422][ T5606] dump_stack_lvl+0x1e3/0x2d0 [ 139.750110][ T5606] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 139.755755][ T5606] ? panic+0x860/0x860 [ 139.759922][ T5606] ? sysfs_create_dir_ns+0x282/0x390 [ 139.765238][ T5606] sysfs_create_dir_ns+0x2c6/0x390 [ 139.770350][ T5606] ? sysfs_warn_dup+0xa0/0xa0 [ 139.775036][ T5606] ? do_raw_spin_unlock+0x137/0x8b0 [ 139.780223][ T5606] ? kobject_set_name_vargs+0xca/0x110 [ 139.785698][ T5606] kobject_add_internal+0x6e0/0xe00 [ 139.791239][ T5606] kobject_init_and_add+0x120/0x190 [ 139.796426][ T5606] ? lockdep_softirqs_off+0x420/0x420 [ 139.801886][ T5606] ? widen_string+0x3a/0x310 [ 139.806466][ T5606] ? kobject_add+0x210/0x210 [ 139.811044][ T5606] ? __init_swait_queue_head+0xaa/0x140 [ 139.816582][ T5606] gfs2_sys_fs_add+0x237/0x4a0 [ 139.821422][ T5606] ? gfs2_recover_set+0x240/0x240 [ 139.826456][ T5606] ? snprintf+0xd6/0x120 [ 139.830687][ T5606] ? vscnprintf+0x80/0x80 [ 139.835094][ T5606] ? read_word_at_a_time+0xe/0x20 [ 139.840199][ T5606] ? strscpy+0x89/0x220 [ 139.844364][ T5606] gfs2_fill_super+0x1299/0x2750 [ 139.849390][ T5606] ? gfs2_reconfigure+0xcf0/0xcf0 [ 139.854402][ T5606] ? ptr_to_hashval+0x60/0x60 [ 139.859066][ T5606] ? up_write+0x19d/0x580 [ 139.863658][ T5606] ? set_blocksize+0x1ec/0x370 [ 139.868527][ T5606] get_tree_bdev+0x3fe/0x620 [ 139.873109][ T5606] ? gfs2_reconfigure+0xcf0/0xcf0 [ 139.878126][ T5606] gfs2_get_tree+0x50/0x210 [ 139.882614][ T5606] ? bpf_lsm_capable+0x5/0x10 [ 139.887311][ T5606] vfs_get_tree+0x88/0x270 [ 139.891717][ T5606] do_new_mount+0x2ba/0xb40 [ 139.896212][ T5606] ? do_move_mount_old+0x160/0x160 [ 139.901318][ T5606] ? user_path_at_empty+0x12b/0x180 [ 139.906507][ T5606] __se_sys_mount+0x2d5/0x3c0 [ 139.911170][ T5606] ? __x64_sys_mount+0xc0/0xc0 [ 139.915918][ T5606] ? syscall_enter_from_user_mode+0x2e/0x240 [ 139.921884][ T5606] ? lockdep_hardirqs_on+0x94/0x130 [ 139.927070][ T5606] ? __x64_sys_mount+0x1c/0xc0 [ 139.931830][ T5606] do_syscall_64+0x3b/0xb0 [ 139.936230][ T5606] ? clear_bhb_loop+0x15/0x70 [ 139.941075][ T5606] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 139.946952][ T5606] RIP: 0033:0x7f3b2ac5b5ea [ 139.951354][ T5606] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 09 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 139.970943][ T5606] RSP: 002b:00007f3b291ccef8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 139.979345][ T5606] RAX: ffffffffffffffda RBX: 00007f3b291ccf80 RCX: 00007f3b2ac5b5ea [ 139.987339][ T5606] RDX: 00000000200000c0 RSI: 00000000200002c0 RDI: 00007f3b291ccf40 [ 139.995293][ T5606] RBP: 00000000200000c0 R08: 00007f3b291ccf80 R09: 0000000000000000 [ 140.003248][ T5606] R10: 0000000000000000 R11: 0000000000000206 R12: 00000000200002c0 [ 140.011201][ T5606] R13: 00007f3b291ccf40 R14: 0000000000037f59 R15: 0000000020000140 [ 140.019178][ T5606] [ 140.099047][ T5607] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 140.125259][ T4542] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 140.136765][ T4542] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 140.232889][ T4542] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 96ms [ 140.271525][ T4542] gfs2: fsid=syz:syz.0: jid=0: Done [ 140.291506][ T5607] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 140.697661][ T5609] loop0: detected capacity change from 0 to 32768 [ 140.720036][ T5506] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 140.779639][ T5606] kobject_add_internal failed for syz:syz with -EEXIST, don't try to register things with the same name in the same directory. [ 140.818446][ T5609] XFS (loop0): Mounting V5 Filesystem [ 140.839789][ T5606] gfs2: fsid=syz:syz: error -17 adding sysfs files [ 141.054225][ T5609] XFS (loop0): Ending clean mount [ 141.117536][ T5609] XFS (loop0): Quotacheck needed: Please wait. [ 141.169615][ T4542] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 141.169793][ T5506] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 141.198795][ T5506] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.211674][ T5609] XFS (loop0): Quotacheck: Done. [ 141.258684][ T5506] usb 4-1: config 0 descriptor?? [ 141.325095][ T3937] XFS (loop0): Unmounting Filesystem [ 141.429610][ T4542] usb 3-1: Using ep0 maxpacket: 32 [ 141.569755][ T4542] usb 3-1: config 0 has an invalid interface number: 226 but max is 0 [ 141.577940][ T4542] usb 3-1: config 0 has no interface number 0 [ 141.589637][ T5506] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 141.603754][ T4542] usb 3-1: too many endpoints for config 0 interface 226 altsetting 75: 95, using maximum allowed: 30 [ 141.606794][ T5506] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 141.638720][ T4542] usb 3-1: config 0 interface 226 altsetting 75 has 0 endpoint descriptors, different from the interface descriptor's value: 95 [ 141.689671][ T5506] [drm:udl_init] *ERROR* Selecting channel failed [ 141.700224][ T4542] usb 3-1: config 0 interface 226 has no altsetting 0 [ 141.762905][ T5506] [drm] Initialized udl 0.0.1 20120220 for 4-1:0.0 on minor 2 [ 141.800478][ T5506] [drm] Initialized udl on minor 2 [ 141.839728][ T5506] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 141.853270][ T5506] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 141.879928][ T4542] usb 3-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 141.908159][ T4542] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.914419][ T5506] usb 4-1: USB disconnect, device number 4 [ 141.922330][ T3714] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 141.941153][ T3714] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 141.947898][ T4542] usb 3-1: Product: syz [ 141.976621][ T3714] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 141.989685][ T4542] usb 3-1: Manufacturer: syz [ 141.994292][ T4542] usb 3-1: SerialNumber: syz [ 142.030741][ T4542] usb 3-1: config 0 descriptor?? [ 142.309992][ T4542] hub 3-1:0.226: bad descriptor, ignoring hub [ 142.318412][ T4542] hub: probe of 3-1:0.226 failed with error -5 [ 142.559744][ T4542] usb 3-1: reset high-speed USB device number 7 using dummy_hcd [ 143.289671][ T4542] usb 3-1: failed to restore interface 226 altsetting 75 (error=-71) [ 143.312796][ T4542] usb 3-1: USB disconnect, device number 7 [ 143.548102][ T5652] loop1: detected capacity change from 0 to 32768 [ 143.569038][ T5645] loop0: detected capacity change from 0 to 32768 [ 143.618480][ T5654] loop4: detected capacity change from 0 to 32768 [ 143.636756][ T5652] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 143.647529][ T5645] sysfs: cannot create duplicate filename '/fs/gfs2/syz:syz' [ 143.663436][ T5654] sysfs: cannot create duplicate filename '/fs/gfs2/syz:syz' [ 143.665225][ T5652] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 143.684769][ T5645] CPU: 0 PID: 5645 Comm: syz-executor.0 Not tainted 5.15.160-syzkaller #0 [ 143.693289][ T5645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 143.703333][ T5645] Call Trace: [ 143.706596][ T5645] [ 143.709518][ T5645] dump_stack_lvl+0x1e3/0x2d0 [ 143.714189][ T5645] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 143.719805][ T5645] ? panic+0x860/0x860 [ 143.723868][ T5645] ? sysfs_create_dir_ns+0x282/0x390 [ 143.729143][ T5645] sysfs_create_dir_ns+0x2c6/0x390 [ 143.734241][ T5645] ? sysfs_warn_dup+0xa0/0xa0 [ 143.738903][ T5645] ? do_raw_spin_unlock+0x137/0x8b0 [ 143.744087][ T5645] ? kobject_set_name_vargs+0xca/0x110 [ 143.749539][ T5645] kobject_add_internal+0x6e0/0xe00 [ 143.754726][ T5645] kobject_init_and_add+0x120/0x190 [ 143.759909][ T5645] ? lockdep_softirqs_off+0x420/0x420 [ 143.765265][ T5645] ? widen_string+0x3a/0x310 [ 143.769847][ T5645] ? kobject_add+0x210/0x210 [ 143.774432][ T5645] ? __init_swait_queue_head+0xaa/0x140 [ 143.779966][ T5645] gfs2_sys_fs_add+0x237/0x4a0 [ 143.784720][ T5645] ? gfs2_recover_set+0x240/0x240 [ 143.789728][ T5645] ? snprintf+0xd6/0x120 [ 143.793965][ T5645] ? vscnprintf+0x80/0x80 [ 143.798283][ T5645] ? read_word_at_a_time+0xe/0x20 [ 143.803293][ T5645] ? strscpy+0x89/0x220 [ 143.807436][ T5645] gfs2_fill_super+0x1299/0x2750 [ 143.812371][ T5645] ? gfs2_reconfigure+0xcf0/0xcf0 [ 143.817381][ T5645] ? ptr_to_hashval+0x60/0x60 [ 143.822043][ T5645] ? up_write+0x19d/0x580 [ 143.826370][ T5645] ? set_blocksize+0x1ec/0x370 [ 143.831128][ T5645] get_tree_bdev+0x3fe/0x620 [ 143.835709][ T5645] ? gfs2_reconfigure+0xcf0/0xcf0 [ 143.840726][ T5645] gfs2_get_tree+0x50/0x210 [ 143.845220][ T5645] ? bpf_lsm_capable+0x5/0x10 [ 143.849889][ T5645] vfs_get_tree+0x88/0x270 [ 143.854296][ T5645] do_new_mount+0x2ba/0xb40 [ 143.858789][ T5645] ? do_move_mount_old+0x160/0x160 [ 143.863889][ T5645] ? user_path_at_empty+0x12b/0x180 [ 143.869075][ T5645] __se_sys_mount+0x2d5/0x3c0 [ 143.873742][ T5645] ? __x64_sys_mount+0xc0/0xc0 [ 143.878492][ T5645] ? syscall_enter_from_user_mode+0x2e/0x240 [ 143.884455][ T5645] ? lockdep_hardirqs_on+0x94/0x130 [ 143.889642][ T5645] ? __x64_sys_mount+0x1c/0xc0 [ 143.894393][ T5645] do_syscall_64+0x3b/0xb0 [ 143.898793][ T5645] ? clear_bhb_loop+0x15/0x70 [ 143.903453][ T5645] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 143.909331][ T5645] RIP: 0033:0x7f89f2fec5ea [ 143.913733][ T5645] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 09 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 143.933320][ T5645] RSP: 002b:00007f89f155def8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 143.941719][ T5645] RAX: ffffffffffffffda RBX: 00007f89f155df80 RCX: 00007f89f2fec5ea [ 143.949677][ T5645] RDX: 00000000200000c0 RSI: 00000000200002c0 RDI: 00007f89f155df40 [ 143.957632][ T5645] RBP: 00000000200000c0 R08: 00007f89f155df80 R09: 0000000000000000 [ 143.965588][ T5645] R10: 0000000000000000 R11: 0000000000000206 R12: 00000000200002c0 [ 143.973543][ T5645] R13: 00007f89f155df40 R14: 0000000000037f59 R15: 0000000020000140 [ 143.981512][ T5645] [ 144.005587][ T5654] CPU: 0 PID: 5654 Comm: syz-executor.4 Not tainted 5.15.160-syzkaller #0 [ 144.014103][ T5654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 144.024156][ T5654] Call Trace: [ 144.027435][ T5654] [ 144.030369][ T5654] dump_stack_lvl+0x1e3/0x2d0 [ 144.034181][ T5652] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 144.035055][ T5654] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 144.035082][ T5654] ? panic+0x860/0x860 [ 144.051697][ T5506] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 144.052266][ T5654] ? sysfs_create_dir_ns+0x282/0x390 [ 144.059193][ T5506] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 144.064270][ T5654] sysfs_create_dir_ns+0x2c6/0x390 [ 144.064301][ T5654] ? sysfs_warn_dup+0xa0/0xa0 [ 144.064321][ T5654] ? do_raw_spin_unlock+0x137/0x8b0 [ 144.064341][ T5654] ? kobject_set_name_vargs+0xca/0x110 [ 144.064364][ T5654] kobject_add_internal+0x6e0/0xe00 [ 144.064390][ T5654] kobject_init_and_add+0x120/0x190 [ 144.064409][ T5654] ? lockdep_softirqs_off+0x420/0x420 [ 144.064426][ T5654] ? widen_string+0x3a/0x310 [ 144.064448][ T5654] ? kobject_add+0x210/0x210 [ 144.064470][ T5654] ? __init_swait_queue_head+0xaa/0x140 [ 144.064489][ T5654] gfs2_sys_fs_add+0x237/0x4a0 [ 144.064508][ T5654] ? gfs2_recover_set+0x240/0x240 [ 144.064525][ T5654] ? snprintf+0xd6/0x120 [ 144.064547][ T5654] ? vscnprintf+0x80/0x80 [ 144.064569][ T5654] ? read_word_at_a_time+0xe/0x20 [ 144.064592][ T5654] ? strscpy+0x89/0x220 [ 144.064611][ T5654] gfs2_fill_super+0x1299/0x2750 [ 144.064647][ T5654] ? gfs2_reconfigure+0xcf0/0xcf0 [ 144.064665][ T5654] ? ptr_to_hashval+0x60/0x60 [ 144.064683][ T5654] ? up_write+0x19d/0x580 [ 144.064718][ T5654] ? set_blocksize+0x1ec/0x370 [ 144.064746][ T5654] get_tree_bdev+0x3fe/0x620 [ 144.064765][ T5654] ? gfs2_reconfigure+0xcf0/0xcf0 [ 144.064784][ T5654] gfs2_get_tree+0x50/0x210 [ 144.064801][ T5654] ? bpf_lsm_capable+0x5/0x10 [ 144.064823][ T5654] vfs_get_tree+0x88/0x270 [ 144.064849][ T5654] do_new_mount+0x2ba/0xb40 [ 144.064873][ T5654] ? do_move_mount_old+0x160/0x160 [ 144.064896][ T5654] ? user_path_at_empty+0x12b/0x180 [ 144.064919][ T5654] __se_sys_mount+0x2d5/0x3c0 [ 144.064942][ T5654] ? __x64_sys_mount+0xc0/0xc0 [ 144.064960][ T5654] ? syscall_enter_from_user_mode+0x2e/0x240 [ 144.064981][ T5654] ? lockdep_hardirqs_on+0x94/0x130 [ 144.065002][ T5654] ? __x64_sys_mount+0x1c/0xc0 [ 144.065021][ T5654] do_syscall_64+0x3b/0xb0 [ 144.065038][ T5654] ? clear_bhb_loop+0x15/0x70 [ 144.065057][ T5654] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 144.065075][ T5654] RIP: 0033:0x7f3b2ac5b5ea [ 144.065093][ T5654] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 09 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 144.065109][ T5654] RSP: 002b:00007f3b291ccef8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 144.065131][ T5654] RAX: ffffffffffffffda RBX: 00007f3b291ccf80 RCX: 00007f3b2ac5b5ea [ 144.065145][ T5654] RDX: 00000000200000c0 RSI: 00000000200002c0 RDI: 00007f3b291ccf40 [ 144.065158][ T5654] RBP: 00000000200000c0 R08: 00007f3b291ccf80 R09: 0000000000000000 [ 144.065171][ T5654] R10: 0000000000000000 R11: 0000000000000206 R12: 00000000200002c0 [ 144.065183][ T5654] R13: 00007f3b291ccf40 R14: 0000000000037f59 R15: 0000000020000140 [ 144.065211][ T5654] [ 144.096773][ T5654] kobject_add_internal failed for syz:syz with -EEXIST, don't try to register things with the same name in the same directory. [ 144.109575][ T5645] kobject_add_internal failed for syz:syz with -EEXIST, don't try to register things with the same name in the same directory. [ 144.182605][ T5654] gfs2: fsid=syz:syz: error -17 adding sysfs files [ 144.348803][ T5506] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 289ms [ 144.442890][ T5506] gfs2: fsid=syz:syz.0: jid=0: Done [ 144.457275][ T5652] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 144.677060][ T25] audit: type=1800 audit(1717121565.783:27): pid=5692 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1968 res=0 errno=0 [ 144.729627][ T5645] gfs2: fsid=syz:syz: error -17 adding sysfs files [ 145.439779][ T5584] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 145.679625][ T5584] usb 3-1: Using ep0 maxpacket: 32 [ 145.801595][ T5584] usb 3-1: config 0 has an invalid interface number: 226 but max is 0 [ 145.816446][ T5584] usb 3-1: config 0 has no interface number 0 [ 145.837356][ T5584] usb 3-1: too many endpoints for config 0 interface 226 altsetting 75: 95, using maximum allowed: 30 [ 145.876345][ T5584] usb 3-1: config 0 interface 226 altsetting 75 has 0 endpoint descriptors, different from the interface descriptor's value: 95 [ 145.919022][ T5584] usb 3-1: config 0 interface 226 has no altsetting 0 [ 146.099746][ T5584] usb 3-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 146.121813][ T5584] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.155811][ T5584] usb 3-1: Product: syz [ 146.179667][ T5584] usb 3-1: Manufacturer: syz [ 146.194520][ T5584] usb 3-1: SerialNumber: syz [ 146.218192][ T5584] usb 3-1: config 0 descriptor?? [ 146.510210][ T5584] hub 3-1:0.226: bad descriptor, ignoring hub [ 146.516313][ T5584] hub: probe of 3-1:0.226 failed with error -5 [ 146.759581][ T5584] usb 3-1: reset high-speed USB device number 8 using dummy_hcd [ 147.477397][ T5584] usb 3-1: failed to restore interface 226 altsetting 75 (error=-71) [ 147.494182][ T5584] usb 3-1: USB disconnect, device number 8 [ 148.216524][ T5731] loop0: detected capacity change from 0 to 8192 [ 148.583674][ T5742] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 148.628554][ T5742] batman_adv: batadv0: Adding interface: team0 [ 148.639742][ T5506] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 148.667621][ T5742] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 148.725075][ T5742] batman_adv: batadv0: Interface activated: team0 [ 148.989902][ T3563] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 149.049786][ T5506] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 149.089114][ T5506] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 149.099577][ T3714] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 149.144278][ T5506] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 149.164047][ T5506] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 149.211808][ T5749] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 149.285168][ T5750] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 149.320254][ T5506] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 149.329304][ T5506] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 149.379756][ T3714] usb 2-1: Using ep0 maxpacket: 32 [ 149.389765][ T5506] usb 5-1: Product: syz [ 149.393934][ T5506] usb 5-1: Manufacturer: syz [ 149.420434][ T3563] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 149.429494][ T3563] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.455437][ T5506] cdc_wdm 5-1:1.0: skipping garbage [ 149.455456][ T5506] cdc_wdm 5-1:1.0: skipping garbage [ 149.477250][ T5506] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 149.477281][ T5506] cdc_wdm 5-1:1.0: Unknown control protocol [ 149.487189][ T3563] usb 3-1: config 0 descriptor?? [ 149.520710][ T3714] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 149.520748][ T3714] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 149.667357][ T5735] loop4: detected capacity change from 0 to 512 [ 149.709966][ T3714] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 149.719026][ T3714] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 149.760860][ T3714] usb 2-1: Product: syz [ 149.765041][ T3714] usb 2-1: Manufacturer: syz [ 149.786391][ T3714] usb 2-1: SerialNumber: syz [ 149.809841][ T3563] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 149.818362][ T3563] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 149.834773][ T5735] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 149.843336][ T3714] usb 2-1: config 0 descriptor?? [ 149.848290][ T5735] UDF-fs: Scanning with blocksize 512 failed [ 149.880575][ T3563] [drm:udl_init] *ERROR* Selecting channel failed [ 149.888847][ T5735] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 149.890425][ T3714] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 149.907623][ T5735] UDF-fs: Scanning with blocksize 1024 failed [ 149.933843][ T3563] [drm] Initialized udl 0.0.1 20120220 for 3-1:0.0 on minor 2 [ 149.950559][ T3563] [drm] Initialized udl on minor 2 [ 149.954688][ T5735] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 149.956292][ T3714] ldusb 2-1:0.0: LD USB Device #1 now attached to major 180 minor 1 [ 149.989792][ T3563] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 149.996558][ T5735] UDF-fs: Scanning with blocksize 2048 failed [ 150.007447][ T3563] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 150.018874][ T5735] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 150.080042][ T3563] usb 3-1: USB disconnect, device number 9 [ 150.094811][ T4549] usb 2-1: USB disconnect, device number 8 [ 150.112631][ T5735] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 150.124802][ T4549] ldusb 2-1:0.0: LD USB Device #1 now disconnected [ 150.181262][ T5499] usb 5-1: USB disconnect, device number 4 [ 150.504183][ T5777] device pim6reg1 entered promiscuous mode [ 150.839817][ T5786] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 150.907083][ T5786] batman_adv: batadv0: Adding interface: team0 [ 150.935824][ T5786] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 151.031146][ T5786] batman_adv: batadv0: Interface activated: team0 [ 151.214619][ T25] audit: type=1326 audit(1717121572.323:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5797 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b2ac59ee9 code=0x7ffc0000 [ 151.281489][ T5801] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 151.292539][ T25] audit: type=1326 audit(1717121572.323:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5797 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3b2ac59ee9 code=0x7ffc0000 [ 151.361129][ T25] audit: type=1326 audit(1717121572.323:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5797 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b2ac59ee9 code=0x7ffc0000 [ 151.431415][ T25] audit: type=1326 audit(1717121572.323:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5797 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3b2ac59ee9 code=0x7ffc0000 [ 151.494997][ T25] audit: type=1326 audit(1717121572.323:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5797 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b2ac59ee9 code=0x7ffc0000 [ 151.563642][ T25] audit: type=1326 audit(1717121572.323:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5797 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f3b2ac59ee9 code=0x7ffc0000 [ 151.624523][ T25] audit: type=1326 audit(1717121572.323:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5797 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b2ac59ee9 code=0x7ffc0000 [ 151.729619][ T5499] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 151.772369][ T5821] loop0: detected capacity change from 0 to 512 [ 151.889841][ T3563] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 151.965764][ T5821] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 152.020224][ T5821] ext4 filesystem being mounted at /root/syzkaller-testdir3682591088/syzkaller.aFEt4T/116/file1 supports timestamps until 2038 (0x7fffffff) [ 152.102096][ T5817] EXT4-fs error (device loop0): ext4_find_dest_de:2112: inode #12: block 32: comm syz-executor.0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 152.159692][ T3563] usb 4-1: Using ep0 maxpacket: 32 [ 152.165136][ T5499] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 152.188819][ T5499] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 152.237805][ T5499] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 152.277438][ T5499] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 152.305197][ T3563] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 152.319114][ T3563] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 152.334421][ T25] audit: type=1326 audit(1717121573.443:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5838 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0d98509ee9 code=0x0 [ 152.402873][ T5842] loop0: detected capacity change from 0 to 256 [ 152.449721][ T5499] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 152.458775][ T5499] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 152.500702][ T5499] usb 5-1: Product: syz [ 152.523559][ T5499] usb 5-1: Manufacturer: syz [ 152.580501][ T5499] cdc_wdm 5-1:1.0: skipping garbage [ 152.585765][ T5499] cdc_wdm 5-1:1.0: skipping garbage [ 152.605915][ T5499] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 152.616859][ T3563] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 152.645994][ T3563] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 152.662353][ T5499] cdc_wdm 5-1:1.0: Unknown control protocol [ 152.680097][ T3563] usb 4-1: Product: syz [ 152.695437][ T3563] usb 4-1: Manufacturer: syz [ 152.722188][ T3563] usb 4-1: SerialNumber: syz [ 152.761425][ T3563] usb 4-1: config 0 descriptor?? [ 152.821150][ T3563] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 152.844728][ T3563] ldusb 4-1:0.0: LD USB Device #1 now attached to major 180 minor 1 [ 152.861132][ T5805] loop4: detected capacity change from 0 to 512 [ 152.861917][ T5853] lo speed is unknown, defaulting to 1000 [ 152.880444][ T5857] ------------[ cut here ]------------ [ 152.886135][ T5857] Please remove unsupported % in format string [ 152.892792][ T5857] WARNING: CPU: 0 PID: 5857 at lib/vsprintf.c:2667 format_decode+0x12d2/0x1f10 [ 152.901828][ T5857] Modules linked in: [ 152.905731][ T5857] CPU: 0 PID: 5857 Comm: syz-executor.1 Not tainted 5.15.160-syzkaller #0 2024/05/31 02:12:54 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 152.914366][ T5857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 152.924599][ T5857] RIP: 0010:format_decode+0x12d2/0x1f10 [ 152.930288][ T5857] Code: a3 09 01 48 b8 00 00 00 00 00 fc ff df 41 0f b6 04 07 84 c0 0f 85 30 0c 00 00 41 0f be 36 48 c7 c7 a0 1d dc 8a e8 8e 2c 1e fd <0f> 0b e9 01 fa ff ff 48 8b 4c 24 18 80 e1 07 38 c1 0f 8c e3 ed ff [ 152.949976][ T5857] RSP: 0018:ffffc90002ec76c0 EFLAGS: 00010246 [ 152.956051][ T5857] RAX: 9deb3e4067edd100 RBX: 00000000ffffffdb RCX: 0000000000040000 [ 152.964160][ T5857] RDX: ffffc90004fd2000 RSI: 0000000000004c81 RDI: 0000000000004c82 [ 152.972731][ T5857] RBP: ffffc90002ec77b0 R08: ffffffff8166860c R09: fffff520005d8e19 [ 152.980905][ T5857] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff0a00ffffff00 [ 152.988886][ T5857] R13: ffff0000ffffff00 R14: ffffc90002ec79ec R15: 1ffff920005d8f3d [ 152.996911][ T5857] FS: 00007f00800a96c0(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000 [ 153.005885][ T5857] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 153.012504][ T5857] CR2: 0000001b2fc27000 CR3: 000000007b70a000 CR4: 00000000003506f0 [ 153.020507][ T5857] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 153.028480][ T5857] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 153.036490][ T5857] Call Trace: [ 153.039798][ T5857] [ 153.042735][ T5857] ? __warn+0x15b/0x300 [ 153.046899][ T5857] ? format_decode+0x12d2/0x1f10 [ 153.051876][ T5857] ? report_bug+0x1b7/0x2e0 [ 153.056393][ T5857] ? handle_bug+0x3d/0x70 [ 153.058338][ T5853] lo speed is unknown, defaulting to 1000 [ 153.060761][ T5857] ? exc_invalid_op+0x16/0x40 [ 153.060803][ T5857] ? asm_exc_invalid_op+0x16/0x20 [ 153.060829][ T5857] ? __wake_up_klogd+0xcc/0x100 [ 153.060853][ T5857] ? format_decode+0x12d2/0x1f10 [ 153.060885][ T5857] ? vsnprintf+0x1c70/0x1c70 [ 153.060909][ T5857] ? bstr_printf+0x1b6/0x10c0 [ 153.060932][ T5857] bstr_printf+0x130/0x10c0 [ 153.099869][ T5857] ? bpf_bprintf_cleanup+0xc0/0xc0 [ 153.104989][ T5857] ? vbin_printf+0x1bc0/0x1bc0 [ 153.109791][ T5857] ? bpf_trace_printk+0x126/0x410 [ 153.114836][ T5857] bpf_trace_printk+0x1bc/0x410 [ 153.119727][ T5857] ? bpf_probe_write_user+0xd0/0xd0 [ 153.121767][ T5853] lo speed is unknown, defaulting to 1000 [ 153.124943][ T5857] bpf_prog_12183cdb1cd51dab+0x2e/0xf88 [ 153.136181][ T5857] bpf_test_run+0x5f4/0x8a0 [ 153.140744][ T5857] ? convert___skb_to_skb+0x540/0x540 [ 153.146126][ T5857] ? __build_skb+0x25/0x2f0 [ 153.150663][ T5857] ? rcu_is_watching+0x11/0xa0 [ 153.155431][ T5857] ? eth_type_trans+0x33f/0x680 [ 153.160324][ T5857] ? eth_get_headlen+0x240/0x240 [ 153.165266][ T5857] ? convert___skb_to_skb+0x3e/0x540 [ 153.170589][ T5857] ? bpf_prog_test_run_skb+0xaee/0x1420 [ 153.176143][ T5857] bpf_prog_test_run_skb+0xb41/0x1420 [ 153.181570][ T5857] ? cpu_online+0x70/0x70 [ 153.185910][ T5853] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 153.185912][ T5857] ? cpu_online+0x70/0x70 [ 153.192959][ T5857] bpf_prog_test_run+0x32f/0x3a0 [ 153.192984][ T5857] __sys_bpf+0x3ac/0x670 [ 153.193008][ T5857] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 153.193043][ T5857] ? syscall_enter_from_user_mode+0x2e/0x240 [ 153.193066][ T5857] ? lockdep_hardirqs_on+0x94/0x130 [ 153.193088][ T5857] __x64_sys_bpf+0x78/0x90 [ 153.193110][ T5857] do_syscall_64+0x3b/0xb0 [ 153.193128][ T5857] ? clear_bhb_loop+0x15/0x70 [ 153.193143][ T5857] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 153.242706][ T5857] RIP: 0033:0x7f0081b35ee9 [ 153.247124][ T5857] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 153.266760][ T5857] RSP: 002b:00007f00800a90c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 153.275010][ T5853] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 153.275222][ T5857] RAX: ffffffffffffffda RBX: 00007f0081c6cfa0 RCX: 00007f0081b35ee9 [ 153.290289][ T5857] RDX: 0000000000000028 RSI: 0000000020000080 RDI: 000000000000000a [ 153.298263][ T5857] RBP: 00007f0081b8247f R08: 0000000000000000 R09: 0000000000000000 [ 153.306268][ T5857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 153.314281][ T5857] R13: 000000000000000b R14: 00007f0081c6cfa0 R15: 00007ffe7d0da648 [ 153.322306][ T5857] [ 153.325331][ T5857] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 153.332607][ T5857] CPU: 0 PID: 5857 Comm: syz-executor.1 Not tainted 5.15.160-syzkaller #0 [ 153.341105][ T5857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 153.351155][ T5857] Call Trace: [ 153.354432][ T5857] [ 153.357360][ T5857] dump_stack_lvl+0x1e3/0x2d0 [ 153.362046][ T5857] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 153.367679][ T5857] ? panic+0x860/0x860 [ 153.371762][ T5857] ? format_decode+0x1250/0x1f10 [ 153.376709][ T5857] ? format_decode+0x1250/0x1f10 [ 153.381652][ T5857] panic+0x318/0x860 [ 153.385555][ T5857] ? __warn+0x16a/0x300 [ 153.389718][ T5857] ? fb_is_primary_device+0xd0/0xd0 [ 153.394969][ T5857] ? format_decode+0x12d2/0x1f10 [ 153.399907][ T5857] __warn+0x2b2/0x300 [ 153.403897][ T5857] ? format_decode+0x12d2/0x1f10 [ 153.408836][ T5857] report_bug+0x1b7/0x2e0 [ 153.413172][ T5857] handle_bug+0x3d/0x70 [ 153.417331][ T5857] exc_invalid_op+0x16/0x40 [ 153.421832][ T5857] asm_exc_invalid_op+0x16/0x20 [ 153.426681][ T5857] RIP: 0010:format_decode+0x12d2/0x1f10 [ 153.432232][ T5857] Code: a3 09 01 48 b8 00 00 00 00 00 fc ff df 41 0f b6 04 07 84 c0 0f 85 30 0c 00 00 41 0f be 36 48 c7 c7 a0 1d dc 8a e8 8e 2c 1e fd <0f> 0b e9 01 fa ff ff 48 8b 4c 24 18 80 e1 07 38 c1 0f 8c e3 ed ff [ 153.451841][ T5857] RSP: 0018:ffffc90002ec76c0 EFLAGS: 00010246 [ 153.457911][ T5857] RAX: 9deb3e4067edd100 RBX: 00000000ffffffdb RCX: 0000000000040000 [ 153.465885][ T5857] RDX: ffffc90004fd2000 RSI: 0000000000004c81 RDI: 0000000000004c82 [ 153.473855][ T5857] RBP: ffffc90002ec77b0 R08: ffffffff8166860c R09: fffff520005d8e19 [ 153.481827][ T5857] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff0a00ffffff00 [ 153.489799][ T5857] R13: ffff0000ffffff00 R14: ffffc90002ec79ec R15: 1ffff920005d8f3d [ 153.497779][ T5857] ? __wake_up_klogd+0xcc/0x100 [ 153.502649][ T5857] ? vsnprintf+0x1c70/0x1c70 [ 153.507248][ T5857] ? bstr_printf+0x1b6/0x10c0 [ 153.511932][ T5857] bstr_printf+0x130/0x10c0 [ 153.516449][ T5857] ? bpf_bprintf_cleanup+0xc0/0xc0 [ 153.521576][ T5857] ? vbin_printf+0x1bc0/0x1bc0 [ 153.526352][ T5857] ? bpf_trace_printk+0x126/0x410 [ 153.531510][ T5857] bpf_trace_printk+0x1bc/0x410 [ 153.536371][ T5857] ? bpf_probe_write_user+0xd0/0xd0 [ 153.541586][ T5857] bpf_prog_12183cdb1cd51dab+0x2e/0xf88 [ 153.547133][ T5857] bpf_test_run+0x5f4/0x8a0 [ 153.551657][ T5857] ? convert___skb_to_skb+0x540/0x540 [ 153.557032][ T5857] ? __build_skb+0x25/0x2f0 [ 153.561536][ T5857] ? rcu_is_watching+0x11/0xa0 [ 153.566297][ T5857] ? eth_type_trans+0x33f/0x680 [ 153.571150][ T5857] ? eth_get_headl