last executing test programs: 39.92751011s ago: executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) write$binfmt_script(r1, &(0x7f0000000200)={'#! ', '', [{0x20, '#!2'}, {0x20, '#! '}, {0x20, '/proc/sys/net/ipv4/tcp_congestion_control\x00'}, {}], 0xa, "8855d1bef46f70e481dbdabbfc3bcc3f005c1079e7344e4392717247b88b05708cd1663511237737ac00004c03fa9d00005380"}, 0xfffffe59) sendmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000700)='D', 0x1}], 0x1}, 0x0) close(r1) r2 = socket$inet(0x2, 0x2, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) write(r2, 0x0, 0x0) write(r2, 0x0, 0x0) write$tcp_mem(r2, 0x0, 0x0) rt_sigreturn() futex(&(0x7f0000000700)=0x2, 0x0, 0x2, &(0x7f0000000740)={0x0, 0x3938700}, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000200)={{}, {0x0, 0x3938700}}, 0x0) rt_sigreturn() mlockall(0x1) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) pipe(0x0) 39.711981983s ago: executing program 2: sched_setscheduler(0x0, 0x0, &(0x7f0000000200)) syz_usb_connect(0x0, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x95, 0x4c, 0x53, 0x40, 0x50d, 0x11b, 0x6fa4, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x2, 0xff}}]}}]}}, 0x0) 39.309416145s ago: executing program 1: syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000240)='./file0\x00', 0xe, &(0x7f0000000280)={[{@noload}, {@data_ordered}, {@bsdgroups}, {@auto_da_alloc}, {@journal_path={'journal_path', 0x3d, './file0'}}, {@user_xattr}, {@noload}]}, 0x3, 0x453, &(0x7f0000001140)="$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") ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'lo\x00', &(0x7f0000000140)=@ethtool_eee}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f00000009c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, 0x0}], 0x1, 0x0, &(0x7f0000000180)=[@cr4={0x1, 0x40002}], 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000008000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000240)="0f0d51f40f01d10fc75800f30fc73600102e0f71e100b800008ec0640f017400aa66b9e408000066b81f6269e766ba000000000f309c0c0cb8d09bbc8966efbafc0cedba4300ba210066ed3626f00fc70d", 0x51}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 39.064729453s ago: executing program 3: open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB=':', @ANYBLOB], 0x50}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000400)=0x1000000000010001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x20) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) gettid() getpid() r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6(0xa, 0x80003, 0x0) setsockopt$inet6_int(r2, 0x29, 0x16, &(0x7f0000fcb000), 0x4) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000000)={0x6, {{0x2, 0x0, @multicast1}}}, 0x88) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c00000002060300000000000000000000000000050004001f0000000500010006000000070005000000000014000780080008400000000008001740000000000900020073797a32000000000d0003006c6973743a736574"], 0x5c}}, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f00000011c0)={0x9, {{0x2, 0x0, @multicast2}}}, 0x88) read(0xffffffffffffffff, &(0x7f0000000740)=""/384, 0x200008c0) 38.841750427s ago: executing program 1: bind$alg(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000ffeb0000000000000000850000006100", @ANYRES32=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0305710, &(0x7f0000000040)={0x1, 0xff, 0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x4000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r4 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000240)='/proc/asound/card0/oss_mixer\x00', 0x298f3cc22e12b39a, 0x0) writev(r4, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000000)="e2", 0x1}], 0x2) 38.643255148s ago: executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@ipv6_newrule={0x30, 0x1e, 0x1, 0x0, 0x0, {0x2}, [@FRA_DST={0x14, 0x1, @local}]}, 0x30}}, 0x0) 38.521152677s ago: executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x2, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x58, 0x0, 0x0, 0x0, '\x00', 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x800, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000400)=0x60) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 38.264255806s ago: executing program 3: syz_mount_image$iso9660(&(0x7f0000000780), &(0x7f0000000000)='./file0\x00', 0x21488b, &(0x7f0000000440)=ANY=[@ANYBLOB='map=acorn,sbsector=0x0000000000000000,uid=', @ANYRESDEC=0x0, @ANYBLOB="0000b18eb0ea96e8437d91edf772ce16e8f4545927e1e38533740c5b1da10b839e273fa468d364205a63adda5262cda8e690c1049c88d615fd8362cd464a35e122ae29c203d5ce83fd7888eb1f09a8a7f55959926a7fd5ac27fd519b1ddcfd9072f503656169e720fdc2da8c998a8706232e5263a0", @ANYRES16, @ANYBLOB="48aa122ce7bad1d4005fd66df97f8e8d089b806053c44bbc71da3c639abd9ee548b49a9c10009f28579f82efb3cf18d7e4f7d0cda9f6feec4c5df95db277defa1414ccf2075e6fd144cdc78c1f843f1574502ce415c27f3cec88", @ANYBLOB="bfe49d"], 0x1, 0x65c, &(0x7f0000002280)="$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") sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) shutdown(0xffffffffffffffff, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000002900)=""/4088, 0xff8) 38.031671332s ago: executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) process_vm_readv(0x0, &(0x7f00000013c0)=[{&(0x7f0000001440)=""/83}, {&(0x7f0000001140)=""/231}, {&(0x7f0000001240)=""/235, 0xfffffffffffffe9b}, {&(0x7f0000001340)=""/19, 0xe}, {&(0x7f0000001640)=""/26}], 0x100000000000039d, &(0x7f0000001100)=[{&(0x7f00000010c0)=""/36}, {&(0x7f00000014c0)=""/105}, {&(0x7f0000001540)=""/254}], 0x1, 0x0) r0 = socket(0x2, 0x80805, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000001680)=@base={0x2, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x48) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) keyctl$read(0xb, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000001080)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) iopl(0x3) getsockopt$bt_hci(r0, 0x84, 0x6d, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) 37.07266342s ago: executing program 4: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r0, @ANYBLOB], 0x7c}}, 0x0) 37.012562259s ago: executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x77, 0x101301) ioctl$USBDEVFS_BULK(r0, 0x80045515, &(0x7f0000000000)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x8d, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x8d, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000002340)) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) pwritev(r2, &(0x7f00000002c0)=[{&(0x7f00000009c0)="4c5a5c123779afdfd40600d053b5e2526c07e601f79da6c7ec9fb073d53c6fa6a9af97f6a42323d1896eaf91d1739b2fa98a824989504aa1fa47d238398b69b8aa1a694eed01000000000000803e008ac8a715dad077", 0x56}], 0x1, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) 36.885307329s ago: executing program 2: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001c40)=@newtaction={0xf0, 0x30, 0x1, 0x0, 0x0, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf0}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) 36.88029905s ago: executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140), 0xe9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000010000004000018008000800000000000c0007000000e3ffffff0000080005000000000007000600666f000008000b00736970000800090003000000060001000a00"], 0x54}}, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x100000001) 36.794484153s ago: executing program 4: setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB='|'], 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@private1, 0x0, r0}) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r2 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x8916, &(0x7f0000000000)) 36.580027586s ago: executing program 0: r0 = syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f00000015c0)='./file0\x00', 0x0, &(0x7f0000002880)={[{@clear_cache}]}, 0x0, 0x559e, &(0x7f0000005680)="$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") ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f00000000c0)={0x4}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, &(0x7f0000000400)={{}, 0x0, 0x6, @inherit={0x60, &(0x7f0000001400)={0x0, 0x51, 0x0, 0x0, {0x0, 0xb686}, [0x0, 0x0, 0x0]}}, @name="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"}) 36.571845577s ago: executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x77, 0x101301) ioctl$USBDEVFS_BULK(r0, 0x80045515, &(0x7f0000000000)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) 36.402532383s ago: executing program 1: bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000980)=ANY=[@ANYBLOB="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"/3604], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)={0x1b, 0x0, 0x0, 0x80e}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x4, 0x0, 0x7}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) syz_read_part_table(0x5fd, &(0x7f0000000d00)="$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") mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x147842, 0x0) preadv2(r1, &(0x7f0000000040)=[{&(0x7f0000001200)=""/4096, 0xfffffdef}], 0x1, 0x0, 0x0, 0x0) 35.914096979s ago: executing program 1: open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB=':', @ANYBLOB], 0x50}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000400)=0x1000000000010001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x20) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) gettid() getpid() r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x16, &(0x7f0000fcb000), 0x4) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000000)={0x6, {{0x2, 0x0, @multicast1}}}, 0x88) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c00000002060300000000000000000000000000050004001f0000000500010006000000070005000000000014000780080008400000000008001740000000000900020073797a32000000000d0003006c6973743a736574"], 0x5c}}, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f00000011c0)={0x9, {{0x2, 0x0, @multicast2}}}, 0x88) read(0xffffffffffffffff, &(0x7f0000000740)=""/384, 0x200008c0) 35.404062658s ago: executing program 3: syz_mount_image$nilfs2(&(0x7f0000000040), &(0x7f0000000340)='./bus\x00', 0x0, &(0x7f00000002c0)=ANY=[], 0x1, 0xabf, &(0x7f0000002340)="$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") creat(&(0x7f0000000300)='./bus\x00', 0x0) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x64, &(0x7f00000001c0)=ANY=[], 0x1, 0x0, &(0x7f0000000000)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) fchown(r0, 0x0, 0x0) 35.120293901s ago: executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x2, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x58, 0x0, 0x0, 0x0, '\x00', 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x800, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000400)=0x60) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 34.61439013s ago: executing program 0: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000740)={0x2c, &(0x7f0000000980)=ANY=[@ANYBLOB="00000001"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_io_uring_setup(0x6908, &(0x7f0000000280), 0x0, 0x0) syz_io_uring_setup(0x615e, &(0x7f0000000380), 0x0, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 34.08917659s ago: executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) process_vm_readv(0x0, &(0x7f00000013c0)=[{&(0x7f0000001440)=""/83}, {&(0x7f0000001140)=""/231}, {&(0x7f0000001240)=""/235, 0xfffffffffffffe9b}, {&(0x7f0000001340)=""/19, 0xe}, {&(0x7f0000001640)=""/26}], 0x100000000000039d, &(0x7f0000001100)=[{&(0x7f00000010c0)=""/36}, {&(0x7f00000014c0)=""/105}, {&(0x7f0000001540)=""/254}], 0x1, 0x0) r0 = socket(0x2, 0x80805, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000001680)=@base={0x2, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x48) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) keyctl$read(0xb, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000001080)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) iopl(0x3) getsockopt$bt_hci(r0, 0x84, 0x6d, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) 33.148663085s ago: executing program 3: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r0, @ANYBLOB], 0x7c}}, 0x0) 31.011592095s ago: executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='pids.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00005d4000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000040)="5b0f01c2c29c028ed0660f388236af0083ee2c0f20c06635000004200f22c0643e1f0fb7c2", 0x25}], 0x1, 0x0, 0x0, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000380)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, &(0x7f0000000340)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 30.752006125s ago: executing program 0: syz_mount_image$xfs(&(0x7f0000009800), &(0x7f0000009840)='./file0\x00', 0x0, &(0x7f00000004c0), 0x1, 0x98ea, &(0x7f0000013140)="$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") open(&(0x7f0000000100)='./bus\x00', 0x143142, 0x0) r0 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r0, 0x0) ftruncate(r0, 0x20cf01) open(&(0x7f0000000140)='./bus\x00', 0x14927e, 0x0) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0) 30.026038867s ago: executing program 0: prlimit64(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x8923, &(0x7f0000000540)={'syztnl0\x00', 0x0}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000003480)={'ip6gre0\x00', &(0x7f0000003400)={'syztnl0\x00', 0x0, 0x29, 0x0, 0x2, 0x0, 0x0, @ipv4, @local}}) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 6.86753503s ago: executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[], 0xff2e) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x0, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(r0, 0x540a, 0x1) 6.773121974s ago: executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) 5.888964561s ago: executing program 1: syz_open_dev$hidraw(&(0x7f0000002300), 0x0, 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, 0x0, 0x2d) write$char_usb(r0, &(0x7f0000000300), 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r1 = syz_open_dev$hidraw(0x0, 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000002300), 0x243c2917, 0x14a042) syz_open_dev$evdev(&(0x7f0000001640), 0x0, 0x80801) syz_open_dev$evdev(0x0, 0x0, 0x0) write$char_usb(0xffffffffffffffff, 0x0, 0x0) write$hidraw(0xffffffffffffffff, &(0x7f0000003000)="297860dfde1863c08be8a1b7ad03094335f03542a50ea1e811193af3fb75f07ebb230f0791102fcd36124dd6fe8af416d0cb4bbbebbd8f1396a4772e1e9bc2c9e18ec784a3a99bc0f612d783b6822e8c7d2fd6f3e32710a16907ba29fc540e5f7a84138d2b91d7f7c68a43c4aa95ddd5adda44c7d132c5a51435d891e0804aa2f10e6ac281ec9f9e4538066bb7b9d692f30357780059f3bb86876d2ed600588fbd47a73825e61607fc361a459ee650333870af5d4c828d7f7799f662e7f043292136de6a9c3d928d95ed36f316329fe4a37af00bc0f200045538ba0961168a72ce5a358100d07b9c92c687926dd42b4a85ba8b7b150a99a000f4b3985c277ee70ff96c12c2c5625677f29cbcbf1cf9228c35f3a1bcf71e3a69b959413ce88746fbd18ac526335460496df9afb86c9011482dd00e57cf2898ad963f993d5fd94927aab1321cedc606d52d24c97997a04b5bebcbf2b55be90e35055b4a5d1b6eb70f7a7e5544c44d8a9f0f35755da03f642d385641b7d814d6c4aff7bfa4cf9b20c67633d517cb4fc431a5fc34d758e0bbb4860a05b5044aea1bcc14ff9ecb81e98af787abddff559ad8ea005e8efc5a9588b2dee9028e633e66c6c425f72c7c655b64b1284d21892e332dc53095268ad9a74b033f1cffc462177fae09fa528769fa5c4ed497cfd3119afae90c8a5fe2114a21595275ae10bbbe2aaee8a366a185235670049c5503e570f52087c53ab0c38db6b0b028e635fcb8882d0bb1be1872bd75f937aff57c7026525bfc2414250f8978e156de8bd6f2e15f026ee7333c9cf8892f81e868f9bccf942c77259808a14127df1b7ebee12b25041ba61afb81c9c4bccaaa0b181c74f6d6bc084d665ea4a744bc2364e6ad5fa3da0230ea4d1ffa883c3fe852e7a64ae91185f64a99e56beb11321f92a6dfe668a9d41acf9921c2497c0aaeae50c441fdf34fca82cc58ff1961eb6bd2eea0bea29213fcb39c5bd5199b3f0a7bda8629c9a98b6ebad502293f9f2c835b12c69d630cbea6b0e0c97ce8110d852bbc9e0a9a1eea66c2d0e47a6d51d44e2d8a8a5a980828bf0de3eea059f2597f398cb50cf2d9704dcef49ad9f5d3b4bd8729d57a7e665708780863d1f96c204cedba74cae9ee7b433d50a2bbedad81ba2aaff9d1a8e15bbc13ae86f469bffae227592768b968f27042137ec2568304448b8209f9b1822c899fa47f189aae3aa1e0e115581dc1c1dac3141e0dfeb85e87a12952852d5018f8f0d5ad5975320ae356b847f6cc9c89bb9d7a5e6728584a97b77a8054e129aac35623e30c169d444f0c58adb4148d734eb26fe57dad156ebf0a985ff946583dade5f183687997b7302f207840ced708719df301880d6fddf6e38fb04bd8c069303d55f6c8a07275434eaad6f8435f4096fe909c7e02f317c28975a7bad6ae1d883244ba6e72f5fcb24d832562449866b7bc6878775237dc5c0d9ccb1cd3b6fe67794a5af53ea7fb01de105809a84496ed2f03e20b1dfdab3d4cb21d8b4998f77595c4b99c183c821989fec094cb91ede61bf5c0d116c3116f903715e692675196d7e499a118c788a09a8f687aefd10af1c34f670dce4b5e628715ddcde04acc7299db87db83f8ef0d7c1d9979d7894d3d0d16e536d25789e86f2cab2856cf0b71efd91757f157da3300b1374fe80ea0d05b5ec52434f5b8c20dee83d2b92f338d4a3339aa3a78bf79d8260c55d002618b1444952bad36ba1c17dc801c1ad008f2bebdee89c54d582fdd89da995c5eb7b4c923c1e1d9d29207e92e913fa2187a10302052e6fa0da1c6134db7a4ad2679a0558a43d4d05d60cfa0ee41c7f458951a54173d91139142573794c594c65f25b93d7b7499956a2a5614a5aebc1567ea47cef87fca1d2a82d7f9eabdb7a933ffba467a3e26eeec8ab0a31358589cf451fbc90a9619c470424afc464308bf02b4208a72be8f74cc840fca700ae6e147da83fa27216179ef984c1dfce0c7bb5c8e0ac23b97748905b219bd75ef425a334660ec930b4ef6cc3ab0429794649149404d856d9c6ddaf69c66b60aabe8d214973f74db7760d26f9699a32246a0947a0af6a26841386298ff61a32bac3aa6e8fa5260c19e0b5db71a11d45ed34cb9a48ca56d1d2516e110e510aa5eddbbc207220dd7ac2fd77f1e219e6097e3a5cd15662c80169d00fb69cdac5e7246fdfdead45f91d8f3bc6c878d8ff0182e0f9efdc9330d55a04a01f08825e6e7df9e552f8f630f3344150c0bad7901eb9ef11c56fee9d86a7781bd34ed0c4da0a59366c7bc31fe01e8b01ceb9ed833c9759df103ab0e644282e951a0cc50e6c76217bebe6a2e6be568fc3670ce621f2379b22b77340986dc323e5f252ce4ff3a87295fb2d124ce7cd8afb00c1e3c187d0abbd448196256ac652112073ccae7577d27cbe3df18321e0fb435629737f51e849abadc065b8fdbe846ab31d11eaf80ef27eb60eca3d12944c43152a67c7e3ca484c4f325076846f87063e79f893d7f872a1cc4167b7f8474166ebc43e5c1e1adc6c963d77d6c9dd164cd37e12e8ce4699cd500a3b060bac1d778bbe2a5d36bc816ff5e75e8a32704a0f326a3a46c703549e0a7ef88f0fbde6598591f66aec1813cfc0de35986d0151ee79e1297a8932b400996672f092b50718f5ffb0159044552bae06811bc42d5b90e7cba3fc775916af5861d0025a1d3957a93f704e5ab5c2876e477a8a9df7efe6661c7e208cddf8f1a15bf030206a64f69e2fc26cfbcf1315d5f6d189e0da3c69c3bbcc14f70d6a6b02644e36decc52992545238112b5f3c2a80036a8af0ad8381b97162a7ff0565e2945f0182b13d6235437dee1a8f48aa847a6aafdf699dcec9e46c63f26e7fffb70a54129b7494ee3d9d97e220d2e418735d129be91bf24f0d0b22f9ef6dca7fdb60a34b59e3fda4d364d18451d385fd17dff74519a1f22470781c86d07fa66ffffab1d6aa413362570d38780340bdeeee6d4c5da51512c0757d69cac48c7c44441e1abb06b6a8943c093d732e8b39f85570c3e846a62b4cda5c0c5974a001433c8e3ffae9afff41419c0caa58f6853067bfb92b55c6ecd58503b8deebc44ab258064787dbeef58b0914dbc8cea6bffbe619ff976d7987648457ee49c7744f58f919906c1987bebfb13b14ef8bc40dc7a95c34a825efd517c95fa5380073421efb95ae6e4ff3ece3f4501c918521b230dd169ee6ddb5f09c8762287c28a2b9a75d569f392bb7184edae72084e1fc295347d16caabe0196a7f679687f399dfaaffc537544b9f8cf27b2a44217187308845ce2bb3227412aa9d6a582800540fb715e0483c96f5e66247616f59bc275036b622502191ca3b29749f79675f88a6ad9b304e9cbe21a2c817db9622bac725246a71b9c8659d81b75cc1d37ca5797270ef9f82124a2077ea408bd01dfc53cb701a2b276e322ee4ff268e540781b8d4066d75747aa27342c842ea569679f6d0146bf3c5fcd57f10cdc2a1cab835cf9e6c8924d4808c3beeb16c47f58484d0dc60a38612a4caeef41cc3b6c7adb651c2e024ec75c5a4af98450aac1638ae45c9cb902723d584ecef25345bb33255f65b0cc469c19a1ec84045a7e8388f7391ad31606cb6e3e46cf7eb48996a96ff4b7a2d97a8cb5da97842b28fc48b279ab99da252fffbd0034667c51e12406ea161dd9ea19bbe33ee464a45fed53939d104deb7febc9b362320d2c3008e27ae7094274bb75b7379e8db191ef34e1d9b648dda3de37c59fd2e6d569398c9fb3529976f12ea64a67f66a577ceed99da2899edc953feef13e3ac6952bef1c2443d25e6cabb7fb538920255650a7ffa05d43b9d87c2ed323b4edbf39f5a101986f2ef41cb14565d9f86584008548e6688fda0e95f13c3856368fafee0bc673d0d9cde94e500398785c14fcad3082684817d2d1ea4c96c207f2b12036ce0954639f4e4f2e0ff5bf4af919464359fb67208401cb1e6196e64534871a74e888b16dcc4f6c8872cd2f973788c5048e30ef9d863534017f4c35ae35dbc96d9bf487a181b2edeeb8d5bade6d0df4214a70a1feb58b0bc94eb601b8a2c0f3d4012bc215d0bc3fc9f548d58a02df1a4a5b071829665be43396bc8de262f69f245888699c611354428c9f31ac0a59cbb6fd1cddcfb7cbc5a1fb4d10627d8e37940052945c1da8c9994ef34372baad992cbaa20511c0064762d70edcfd6da5c4d7ed9a9e9516", 0xbb3) ioctl$HIDIOCGRDESC(r1, 0x4030582a, &(0x7f0000000040)={0xd, "3a82000000010000000000009d"}) ioctl$HIDIOCGRDESC(0xffffffffffffffff, 0x40305829, &(0x7f00000002c0)={0xd, "3a82000000130000000000009d"}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000a40)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) syz_usb_connect(0x1, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805848f"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r2 = syz_open_dev$evdev(&(0x7f0000001900), 0x0, 0x0) read$hidraw(r2, &(0x7f00000000c0)=""/222, 0xde) ioctl$EVIOCREVOKE(r2, 0x40044591, 0x0) read$char_usb(0xffffffffffffffff, &(0x7f0000000200)=""/128, 0x80) 0s ago: executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) kernel console output (not intermixed with test programs): 9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.472129][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.481159][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.489609][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.498768][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.515700][ T3570] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.527025][ T3570] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.563064][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.572079][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.580340][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.589346][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.598409][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.606973][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.615226][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.624002][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.632443][ T3617] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.639494][ T3617] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.647401][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.656588][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.664960][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.674176][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.682811][ T3617] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.689862][ T3617] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.697467][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.705754][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.714268][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.726387][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.736420][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.746731][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.758806][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.792712][ T3572] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.801010][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.834107][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.878968][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.897836][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.906167][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.925168][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.938198][ T3572] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.952743][ T3566] device veth0_vlan entered promiscuous mode [ 56.975058][ T3566] device veth1_vlan entered promiscuous mode [ 56.980067][ T3581] Bluetooth: hci0: command tx timeout [ 56.986939][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.006209][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.015727][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.030866][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 57.038856][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.047600][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.056225][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.064664][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.073105][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.081749][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.113920][ T3573] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.128264][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.135899][ T3581] Bluetooth: hci4: command tx timeout [ 57.141659][ T3578] Bluetooth: hci1: command tx timeout [ 57.141706][ T3581] Bluetooth: hci2: command tx timeout [ 57.147031][ T3578] Bluetooth: hci3: command tx timeout [ 57.171143][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.179010][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 57.187601][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.196573][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.205343][ T3617] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.212481][ T3617] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.221533][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.230441][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.238762][ T3617] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.245852][ T3617] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.253478][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.262869][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.272535][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.281361][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.289613][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.297174][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.305795][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.314136][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.344317][ T3570] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.369591][ T3572] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 57.382253][ T3572] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.403990][ T3566] device veth0_macvtap entered promiscuous mode [ 57.412073][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.421581][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.430318][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.438770][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.448267][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.457788][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.466450][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.475195][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.494725][ T3571] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.508075][ T3566] device veth1_macvtap entered promiscuous mode [ 57.525067][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.534512][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.552297][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.564607][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.584790][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.620283][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.628995][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.692117][ T3566] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.719889][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.729701][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.740465][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.748845][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.760750][ T3566] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.775861][ T3566] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.800271][ T3566] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.808986][ T3566] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.818064][ T3566] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.837806][ T3570] device veth0_vlan entered promiscuous mode [ 57.847731][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.857334][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.865506][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.874851][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.890901][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.898353][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.928538][ T3572] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.946780][ T3570] device veth1_vlan entered promiscuous mode [ 57.962402][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 57.971188][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.978638][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.995201][ T3573] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.067026][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 58.078493][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.087538][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.107197][ T3570] device veth0_macvtap entered promiscuous mode [ 58.132887][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.143293][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.153168][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.162452][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.177073][ T3570] device veth1_macvtap entered promiscuous mode [ 58.202219][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.213898][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.222757][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.232102][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.241989][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.250107][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.261750][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.269486][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.288131][ T3570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.299584][ T3570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.304593][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.312287][ T3570] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.322290][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.335735][ T3573] device veth0_vlan entered promiscuous mode [ 58.346042][ T3571] device veth0_vlan entered promiscuous mode [ 58.355863][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.364920][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.373695][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.382387][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.390885][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.401924][ T3570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.421402][ T3570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.432873][ T3570] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.456052][ T3572] device veth0_vlan entered promiscuous mode [ 58.463328][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.474013][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.482110][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.493971][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.502833][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.513795][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.524259][ T3573] device veth1_vlan entered promiscuous mode [ 58.536104][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.544138][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.558345][ T3570] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.567323][ T3570] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.576842][ T3570] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.585578][ T3570] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.605150][ T102] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.620715][ T102] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.626540][ T3572] device veth1_vlan entered promiscuous mode [ 58.637344][ T3571] device veth1_vlan entered promiscuous mode [ 58.663004][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 58.671404][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.717136][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 58.725922][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.739991][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.748535][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.758383][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.769434][ T3573] device veth0_macvtap entered promiscuous mode [ 58.777939][ T3571] device veth0_macvtap entered promiscuous mode [ 58.789506][ T3571] device veth1_macvtap entered promiscuous mode [ 58.818318][ T3573] device veth1_macvtap entered promiscuous mode [ 58.859494][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.869636][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.878708][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.896221][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.907966][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.918844][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.934968][ T3572] device veth0_macvtap entered promiscuous mode [ 58.973167][ T3571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.992143][ T3571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.002964][ T3571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.013690][ T3571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.031919][ T3571] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.045804][ T3573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.057448][ T3578] Bluetooth: hci0: command tx timeout [ 59.069722][ T3573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.079991][ T3573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.094636][ T3573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.106740][ T3573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.121415][ T3573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.133563][ T3573] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.156190][ T3572] device veth1_macvtap entered promiscuous mode [ 59.175835][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.184738][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.193225][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.201992][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.210773][ T3581] Bluetooth: hci2: command tx timeout [ 59.211339][ T3578] Bluetooth: hci3: command tx timeout [ 59.216161][ T3581] Bluetooth: hci1: command tx timeout [ 59.216203][ T3581] Bluetooth: hci4: command tx timeout [ 59.217499][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.241633][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.252713][ T3571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.263737][ T3571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.276412][ T3571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.287610][ T3571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.303478][ T3571] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.312907][ T3573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.323629][ T3573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.333699][ T3573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.344975][ T3573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.354835][ T3573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.365481][ T3573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.378452][ T3573] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.408932][ T3572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.439459][ T3572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.458259][ T3572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.469141][ T3572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.479176][ T3572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.489864][ T3572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.502156][ T3572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.517119][ T3572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.529707][ T3572] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.543626][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.554627][ T3625] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.566733][ T3625] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.575348][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.585366][ T3625] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.598612][ T3625] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.607397][ T3625] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.616609][ T3625] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.625463][ T3625] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.635675][ T3571] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.649096][ T3571] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.658051][ T3571] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.666795][ T3571] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.689994][ T3572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.701984][ T3572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.712259][ T3572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.722818][ T3572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.732676][ T3572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.743289][ T3572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.755448][ T3572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.765902][ T3572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.778257][ T3572] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.787134][ T3573] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.796401][ T3573] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.815117][ T3573] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.826053][ T3573] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.873389][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.882818][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.896159][ T3659] bridge0: port 3(vlan2) entered blocking state [ 59.907281][ T3659] bridge0: port 3(vlan2) entered disabled state [ 59.931376][ T3572] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.940520][ T3572] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.949222][ T3572] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.958317][ T3572] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.979464][ T102] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.989504][ T102] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.999365][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.168687][ T3665] loop1: detected capacity change from 0 to 1024 [ 60.205781][ T3637] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.218253][ T3637] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.236714][ T102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.246663][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.263455][ T102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.282819][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.303519][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.335411][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.352393][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.373674][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.387648][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.407081][ T3637] hfsplus: b-tree write err: -5, ino 4 [ 60.423921][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.443166][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.465434][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.483120][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.510650][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.518709][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.626132][ T3673] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 60.667683][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.102726][ T3690] mmap: syz-executor.0 (3690) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 61.131171][ T3583] Bluetooth: hci0: command tx timeout [ 61.187823][ T3690] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 61.290559][ T3578] Bluetooth: hci4: command tx timeout [ 61.292308][ T3583] Bluetooth: hci1: command tx timeout [ 61.296004][ T3578] Bluetooth: hci2: command tx timeout [ 61.301771][ T3581] Bluetooth: hci3: command tx timeout [ 61.336323][ T3694] loop2: detected capacity change from 0 to 1024 [ 61.414022][ T3698] Driver unsupported XDP return value 0 on prog (id 6) dev N/A, expect packet loss! [ 61.460164][ T3637] hfsplus: b-tree write err: -5, ino 4 [ 61.611397][ T3625] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 61.827951][ T3709] netlink: 292 bytes leftover after parsing attributes in process `syz-executor.1'. [ 61.851511][ T3625] usb 5-1: Using ep0 maxpacket: 32 [ 61.970504][ T3625] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 61.990521][ T3625] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 61.993103][ T3715] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 62.036886][ T3625] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 62.220631][ T3625] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 62.234452][ T3625] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 62.259851][ T3625] usb 5-1: Product: syz [ 62.264676][ T3625] usb 5-1: Manufacturer: syz [ 62.271016][ T3625] usb 5-1: SerialNumber: syz [ 62.297781][ T3625] usb 5-1: config 0 descriptor?? [ 62.343423][ T3625] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 62.378593][ T3625] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 62.474537][ T3728] loop1: detected capacity change from 0 to 1024 [ 62.560859][ T9] hfsplus: b-tree write err: -5, ino 4 [ 62.572344][ T154] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 62.589920][ T3696] ldusb 5-1:0.0: Couldn't submit interrupt_in_urb -90 [ 62.637344][ T3615] usb 5-1: USB disconnect, device number 2 [ 62.676183][ T3615] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 62.693893][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 62.802945][ T3737] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 62.818989][ T3737] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 62.857089][ T3737] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 62.932293][ T3744] ieee802154 phy0 wpan0: encryption failed: -22 [ 62.960462][ T154] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 62.978549][ T154] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 62.990186][ T154] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 63.010151][ T154] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.036016][ T154] usb 4-1: config 0 descriptor?? [ 63.468676][ T3760] program syz-executor.2 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 63.529067][ T154] cm6533_jd 0003:0D8C:0022.0001: unknown main item tag 0x0 [ 63.544023][ T3762] loop0: detected capacity change from 0 to 1024 [ 63.569351][ T154] cm6533_jd 0003:0D8C:0022.0001: unknown main item tag 0x0 [ 63.593931][ T154] cm6533_jd 0003:0D8C:0022.0001: unknown main item tag 0x0 [ 63.618994][ T154] cm6533_jd 0003:0D8C:0022.0001: unknown main item tag 0x0 [ 63.650739][ T154] cm6533_jd 0003:0D8C:0022.0001: unknown main item tag 0x0 [ 63.703515][ T154] cm6533_jd 0003:0D8C:0022.0001: No inputs registered, leaving [ 63.712765][ T51] hfsplus: b-tree write err: -5, ino 4 [ 63.747754][ T3767] device bond0 entered promiscuous mode [ 63.758465][ T154] cm6533_jd 0003:0D8C:0022.0001: hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.3-1/input0 [ 63.787017][ T3767] device bond_slave_0 entered promiscuous mode [ 63.824873][ T154] usb 4-1: USB disconnect, device number 2 [ 63.840522][ T3767] device bond_slave_1 entered promiscuous mode [ 63.894902][ T3763] device bond0 left promiscuous mode [ 63.926565][ T3763] device bond_slave_0 left promiscuous mode [ 63.947738][ T3763] device bond_slave_1 left promiscuous mode [ 64.316087][ T3787] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.615667][ T3794] loop1: detected capacity change from 0 to 2048 [ 64.644359][ T3794] ======================================================= [ 64.644359][ T3794] WARNING: The mand mount option has been deprecated and [ 64.644359][ T3794] and is ignored by this kernel. Remove the mand [ 64.644359][ T3794] option from the mount to silence this warning. [ 64.644359][ T3794] ======================================================= [ 64.690114][ T3625] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 64.766124][ T3802] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 64.766613][ T3794] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 64.785656][ T3802] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.816065][ T3802] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.837506][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 64.911210][ T3803] fuse: Unknown parameter 'romod000000000000000000400' [ 64.941136][ T3625] usb 5-1: Using ep0 maxpacket: 32 [ 65.061347][ T3625] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 65.073611][ T3625] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 65.111909][ T3625] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 65.291106][ T3625] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 65.311387][ T3625] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 65.337838][ T3625] usb 5-1: Product: syz [ 65.350269][ T3625] usb 5-1: Manufacturer: syz [ 65.373886][ T3625] usb 5-1: SerialNumber: syz [ 65.396817][ T3625] usb 5-1: config 0 descriptor?? [ 65.461466][ T3625] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 65.508407][ T3625] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 65.516185][ T3827] loop1: detected capacity change from 0 to 1024 [ 65.570455][ T154] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 65.622974][ T11] hfsplus: b-tree write err: -5, ino 4 [ 65.702988][ T3831] IPVS: Error joining to the multicast group [ 65.718349][ T3792] ldusb 5-1:0.0: Couldn't submit interrupt_in_urb -90 [ 65.739974][ T3625] usb 5-1: USB disconnect, device number 3 [ 65.762620][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.774941][ T3625] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 65.956424][ T154] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 66.001096][ T154] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 66.034025][ T154] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 66.113733][ T3839] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 66.778166][ T154] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.788892][ T154] usb 4-1: config 0 descriptor?? [ 66.954480][ T3822] loop0: detected capacity change from 0 to 32768 [ 66.989939][ T3822] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz-executor.0 (3822) [ 67.048314][ T3822] BTRFS info (device loop0): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 67.065805][ T3822] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 67.077479][ T3822] BTRFS info (device loop0): force zlib compression, level 3 [ 67.110271][ T3822] BTRFS info (device loop0): force clearing of disk cache [ 67.117699][ T3822] BTRFS info (device loop0): setting nodatasum [ 67.153733][ T3837] loop2: detected capacity change from 0 to 32768 [ 67.200199][ T3822] BTRFS info (device loop0): allowing degraded mounts [ 67.208406][ T3837] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz-executor.2 (3837) [ 67.225965][ T3822] BTRFS info (device loop0): enabling disk space caching [ 67.239983][ T3822] BTRFS info (device loop0): disk space caching is enabled [ 67.261278][ T154] cm6533_jd 0003:0D8C:0022.0002: unknown main item tag 0x0 [ 67.279247][ T154] cm6533_jd 0003:0D8C:0022.0002: unknown main item tag 0x0 [ 67.304398][ T154] cm6533_jd 0003:0D8C:0022.0002: unknown main item tag 0x0 [ 67.318097][ T154] cm6533_jd 0003:0D8C:0022.0002: unknown main item tag 0x0 [ 67.326665][ T154] cm6533_jd 0003:0D8C:0022.0002: unknown main item tag 0x0 [ 67.337692][ T154] cm6533_jd 0003:0D8C:0022.0002: No inputs registered, leaving [ 67.349967][ T154] cm6533_jd 0003:0D8C:0022.0002: hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.3-1/input0 [ 67.378431][ T3837] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 67.390190][ T3837] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 67.400214][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 67.434565][ T3837] BTRFS info (device loop2): force clearing of disk cache [ 67.450553][ T3837] BTRFS info (device loop2): using free space tree [ 67.490478][ T154] usb 4-1: USB disconnect, device number 3 [ 67.582205][ T3822] BTRFS info (device loop0): rebuilding free space tree [ 67.771830][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 67.780388][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 67.789106][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 67.797443][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 67.813810][ T3822] BTRFS info (device loop0): disabling free space tree [ 67.825059][ T3837] BTRFS info (device loop2): enabling ssd optimizations [ 67.830299][ T3822] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 67.867986][ T3837] BTRFS info (device loop2): rebuilding free space tree [ 67.893726][ T3822] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 68.183863][ T3570] BTRFS info (device loop0): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 68.200272][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 68.241418][ T3900] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 68.288872][ T3900] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 68.389087][ T3900] netlink: 'syz-executor.3': attribute type 6 has an invalid length. [ 68.569134][ T3573] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 68.593223][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.663107][ T3912] tipc: Started in network mode [ 68.680863][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 68.689271][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 68.697675][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 68.713369][ T3912] tipc: Node identity ac1414aa, cluster identity 4711 [ 68.785076][ T27] audit: type=1326 audit(1717663733.504:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3905 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f244d67cf69 code=0x7fc00000 [ 68.793013][ T3912] tipc: Enabled bearer , priority 10 [ 69.347338][ T27] audit: type=1326 audit(1717663734.054:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3905 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f244d67cf69 code=0x7fc00000 [ 69.418034][ T27] audit: type=1326 audit(1717663734.054:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3905 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f244d67cf69 code=0x7fc00000 [ 69.500723][ T27] audit: type=1326 audit(1717663734.054:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3905 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f244d67cf69 code=0x7fc00000 [ 69.551451][ T27] audit: type=1326 audit(1717663734.054:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3905 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f244d67cf69 code=0x7fc00000 [ 70.166646][ T3615] tipc: Node number set to 2886997162 [ 70.176030][ T27] audit: type=1326 audit(1717663734.054:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3905 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f244d67cf69 code=0x7fc00000 [ 70.198645][ C0] vkms_vblank_simulate: vblank timer overrun [ 70.230413][ T7] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 70.297555][ T27] audit: type=1326 audit(1717663734.054:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3905 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f244d67cf69 code=0x7fc00000 [ 70.414181][ T27] audit: type=1326 audit(1717663734.054:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3905 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f244d67cf69 code=0x7fc00000 [ 70.500290][ T7] usb 3-1: Using ep0 maxpacket: 32 [ 70.503001][ T27] audit: type=1326 audit(1717663734.054:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3905 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f244d67cf69 code=0x7fc00000 [ 70.555202][ T27] audit: type=1326 audit(1717663734.054:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3905 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f244d67cf69 code=0x7fc00000 [ 70.780216][ T7] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 70.788642][ T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 70.799789][ T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 70.810405][ T3615] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 71.213574][ T1245] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.222397][ T1245] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.380364][ T3618] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 71.564006][ T7] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 71.574701][ T7] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 71.583255][ T7] usb 3-1: Product: syz [ 71.587465][ T7] usb 3-1: Manufacturer: syz [ 71.592458][ T7] usb 3-1: SerialNumber: syz [ 71.599253][ T7] usb 3-1: config 0 descriptor?? [ 71.642462][ T7] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 71.656672][ T7] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 71.680365][ T3618] usb 4-1: Using ep0 maxpacket: 8 [ 71.750344][ T3615] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 71.761866][ T3615] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 71.772758][ T3615] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 71.782430][ T3615] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.791326][ T3949] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 71.803812][ T3949] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 71.821321][ T3615] usb 1-1: config 0 descriptor?? [ 71.877899][ T3950] netlink: 'syz-executor.1': attribute type 6 has an invalid length. [ 71.878382][ T3574] usb 3-1: USB disconnect, device number 2 [ 71.897059][ T3574] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 71.960664][ T3618] usb 4-1: New USB device found, idVendor=07c4, idProduct=a109, bcdDevice= f.59 [ 71.986568][ T3618] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.012704][ T3618] usb 4-1: Product: syz [ 72.020573][ T3618] usb 4-1: Manufacturer: syz [ 72.030213][ T3618] usb 4-1: SerialNumber: syz [ 72.048311][ T3618] usb 4-1: config 0 descriptor?? [ 72.101154][ T3618] ums-datafab 4-1:0.0: USB Mass Storage device detected [ 72.169398][ T3618] ums-sddr55 4-1:0.0: USB Mass Storage device detected [ 72.297598][ T3615] cm6533_jd 0003:0D8C:0022.0003: unknown main item tag 0x0 [ 72.334356][ T3615] cm6533_jd 0003:0D8C:0022.0003: unknown main item tag 0x0 [ 72.358503][ T3615] cm6533_jd 0003:0D8C:0022.0003: unknown main item tag 0x0 [ 72.407536][ T3615] cm6533_jd 0003:0D8C:0022.0003: unknown main item tag 0x0 [ 72.469421][ T3615] cm6533_jd 0003:0D8C:0022.0003: unknown main item tag 0x0 [ 72.904520][ T3615] cm6533_jd 0003:0D8C:0022.0003: No inputs registered, leaving [ 73.118151][ T3615] cm6533_jd 0003:0D8C:0022.0003: hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.0-1/input0 [ 73.242167][ T3910] usb 1-1: USB disconnect, device number 2 [ 73.561037][ T3978] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 73.913929][ T3904] usb 4-1: USB disconnect, device number 4 [ 74.250288][ T3910] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 74.960100][ T3910] usb 2-1: Using ep0 maxpacket: 8 [ 75.310526][ T3910] usb 2-1: New USB device found, idVendor=07c4, idProduct=a109, bcdDevice= f.59 [ 75.337277][ T3994] loop0: detected capacity change from 0 to 1024 [ 75.358268][ T3910] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.444891][ T3998] loop2: detected capacity change from 0 to 256 [ 75.450295][ T3910] usb 2-1: Product: syz [ 75.455761][ T3910] usb 2-1: Manufacturer: syz [ 75.464582][ T3910] usb 2-1: SerialNumber: syz [ 75.521538][ T3910] usb 2-1: config 0 descriptor?? [ 75.576520][ T3967] hfsplus: b-tree write err: -5, ino 4 [ 75.591871][ T3910] ums-datafab 2-1:0.0: USB Mass Storage device detected [ 75.670359][ T3613] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 75.702937][ T3910] ums-sddr55 2-1:0.0: USB Mass Storage device detected [ 75.718281][ T4007] netlink: 292 bytes leftover after parsing attributes in process `syz-executor.3'. [ 75.749053][ T4009] loop0: detected capacity change from 0 to 2048 [ 75.816146][ T4009] loop0: p1 < > p4 [ 75.859070][ T4009] loop0: p4 size 8388608 extends beyond EOD, truncated [ 75.871498][ T4013] loop3: detected capacity change from 0 to 4096 [ 75.920373][ T3613] usb 5-1: Using ep0 maxpacket: 32 [ 76.000600][ T27] kauditd_printk_skb: 53 callbacks suppressed [ 76.000617][ T27] audit: type=1800 audit(1717663740.694:65): pid=4016 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1968 res=0 errno=0 [ 76.070349][ T3613] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 76.141751][ T4018] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 76.340467][ T3904] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 76.450773][ T14] cfg80211: failed to load regulatory.db [ 76.457685][ T3613] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 76.609276][ T3613] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 76.823280][ T14] usb 2-1: USB disconnect, device number 2 [ 76.869754][ T3613] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 76.890333][ T3904] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 76.898096][ T3613] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 76.914360][ T3904] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 76.918803][ T3613] usb 5-1: Product: syz [ 76.931117][ T3613] usb 5-1: Manufacturer: syz [ 76.940201][ T3613] usb 5-1: SerialNumber: syz [ 76.942050][ T3904] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 76.955913][ T3613] usb 5-1: config 0 descriptor?? [ 76.974693][ T3904] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.995004][ T3904] usb 1-1: config 0 descriptor?? [ 77.001995][ T3613] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 77.092945][ T3613] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 77.205004][ T3613] usb 5-1: USB disconnect, device number 4 [ 77.266145][ T3613] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 77.930438][ T3907] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 78.162194][ T4045] loop2: detected capacity change from 0 to 256 [ 78.179929][ T4045] exfat: Unknown parameter ''md' [ 78.210273][ T3904] usbhid 1-1:0.0: can't add hid device: -71 [ 78.220208][ T3907] usb 4-1: Using ep0 maxpacket: 8 [ 78.227864][ T3904] usbhid: probe of 1-1:0.0 failed with error -71 [ 78.312861][ T3904] usb 1-1: USB disconnect, device number 3 [ 78.412883][ T4051] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 78.500362][ T3907] usb 4-1: New USB device found, idVendor=07c4, idProduct=a109, bcdDevice= f.59 [ 78.510133][ T3907] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.530302][ T3907] usb 4-1: Product: syz [ 78.567345][ T3907] usb 4-1: Manufacturer: syz [ 78.569324][ T4053] netlink: 292 bytes leftover after parsing attributes in process `syz-executor.4'. [ 78.581108][ T3907] usb 4-1: SerialNumber: syz [ 78.615420][ T3907] usb 4-1: config 0 descriptor?? [ 78.671112][ T3907] ums-datafab 4-1:0.0: USB Mass Storage device detected [ 78.686655][ T4057] loop2: detected capacity change from 0 to 4096 [ 78.777843][ T3907] ums-sddr55 4-1:0.0: USB Mass Storage device detected [ 78.782208][ T4064] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 79.291601][ T3904] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 79.986258][ T4075] program syz-executor.4 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 80.021953][ T27] audit: type=1800 audit(1717663744.744:66): pid=4059 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="/" dev="fuse" ino=1 res=0 errno=0 [ 80.159723][ T3907] usb 4-1: USB disconnect, device number 5 [ 80.310244][ T3904] usb 1-1: Using ep0 maxpacket: 16 [ 80.323819][ T4080] syz-executor.4 uses obsolete (PF_INET,SOCK_PACKET) [ 80.340179][ T3910] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 80.351037][ T4080] device syzkaller1 entered promiscuous mode [ 80.430279][ T3904] usb 1-1: config 0 interface 0 altsetting 44 has an invalid endpoint with address 0xFB, skipping [ 80.455025][ T3904] usb 1-1: config 0 interface 0 altsetting 44 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 80.494293][ T3904] usb 1-1: config 0 interface 0 has no altsetting 0 [ 80.520087][ T3613] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 80.580387][ T3910] usb 3-1: Using ep0 maxpacket: 8 [ 80.671535][ T3904] usb 1-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 80.689535][ T4091] loop4: detected capacity change from 0 to 256 [ 80.698091][ T3904] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.707181][ T3904] usb 1-1: Product: syz [ 80.714395][ T4091] exfat: Unknown parameter ''md' [ 80.719535][ T3904] usb 1-1: Manufacturer: syz [ 80.720739][ T4092] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 80.724861][ T3904] usb 1-1: SerialNumber: syz [ 80.743154][ T3904] usb 1-1: config 0 descriptor?? [ 80.800234][ T3613] usb 2-1: Using ep0 maxpacket: 32 [ 80.814892][ T3558] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 80.932150][ T3613] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 80.966428][ T3613] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 80.993483][ T3910] usb 3-1: New USB device found, idVendor=07c4, idProduct=a109, bcdDevice= f.59 [ 81.008495][ T3910] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.017742][ T3910] usb 3-1: Product: syz [ 81.034761][ T3910] usb 3-1: Manufacturer: syz [ 81.039400][ T3910] usb 3-1: SerialNumber: syz [ 81.044370][ T3613] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 81.059321][ T3904] usb 1-1: USB disconnect, device number 4 [ 81.145928][ T3910] usb 3-1: config 0 descriptor?? [ 81.716239][ T3910] ums-datafab 3-1:0.0: USB Mass Storage device detected [ 81.819169][ T3910] ums-sddr55 3-1:0.0: USB Mass Storage device detected [ 81.848220][ T3613] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 81.857672][ T3613] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 81.878425][ T27] audit: type=1326 audit(1717663746.594:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4104 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8f7587cf69 code=0x0 [ 81.878684][ T3613] usb 2-1: Product: syz [ 81.909686][ T3613] usb 2-1: Manufacturer: syz [ 81.922647][ T3613] usb 2-1: SerialNumber: syz [ 81.937947][ T3613] usb 2-1: config 0 descriptor?? [ 81.981887][ T3613] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 81.994206][ T3613] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 82.050186][ T3618] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 82.093392][ T3289] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 82.184774][ T3613] usb 2-1: USB disconnect, device number 3 [ 82.199619][ T3613] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 82.290118][ T3618] usb 4-1: Using ep0 maxpacket: 8 [ 82.500465][ T3289] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 82.518198][ T3289] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 82.529117][ T3289] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 82.545479][ T3289] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.568000][ T3289] usb 5-1: config 0 descriptor?? [ 82.570303][ T3618] usb 4-1: New USB device found, idVendor=07c4, idProduct=a109, bcdDevice= f.59 [ 82.590093][ T3618] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.598485][ T3618] usb 4-1: Product: syz [ 82.610081][ T3618] usb 4-1: Manufacturer: syz [ 82.616863][ T3618] usb 4-1: SerialNumber: syz [ 82.639860][ T3618] usb 4-1: config 0 descriptor?? [ 82.691136][ T3618] ums-datafab 4-1:0.0: USB Mass Storage device detected [ 82.759112][ T4113] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 82.909555][ T4113] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 82.967502][ T3618] ums-sddr55 4-1:0.0: USB Mass Storage device detected [ 82.984038][ T3910] usb 3-1: USB disconnect, device number 3 [ 83.778884][ T3904] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 83.790489][ T3289] usbhid 5-1:0.0: can't add hid device: -71 [ 83.820820][ T3289] usbhid: probe of 5-1:0.0 failed with error -71 [ 83.847876][ T3289] usb 5-1: USB disconnect, device number 5 [ 83.943090][ T3615] usb 4-1: USB disconnect, device number 6 [ 84.048482][ T4131] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 84.056857][ T3904] usb 2-1: Using ep0 maxpacket: 8 [ 84.150520][ T4131] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 84.165338][ T4133] 9pnet_fd: Insufficient options for proto=fd [ 84.340419][ T3904] usb 2-1: New USB device found, idVendor=07c4, idProduct=a109, bcdDevice= f.59 [ 84.365877][ T3904] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.374669][ T4137] device syzkaller1 entered promiscuous mode [ 84.383951][ T4135] loop3: detected capacity change from 0 to 2048 [ 84.403215][ T3904] usb 2-1: Product: syz [ 84.407792][ T3904] usb 2-1: Manufacturer: syz [ 84.424344][ T3904] usb 2-1: SerialNumber: syz [ 84.441236][ T4135] loop3: p1 < > p4 [ 84.446523][ T3904] usb 2-1: config 0 descriptor?? [ 84.449274][ T4135] loop3: p4 size 8388608 extends beyond EOD, truncated [ 84.590589][ T4144] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 84.988294][ T3904] ums-datafab 2-1:0.0: USB Mass Storage device detected [ 85.263811][ T27] audit: type=1800 audit(1717663749.984:68): pid=4146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1967 res=0 errno=0 [ 85.348047][ T3904] ums-sddr55 2-1:0.0: USB Mass Storage device detected [ 85.422977][ T27] audit: type=1326 audit(1717663750.144:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4150 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f929887cf69 code=0x0 [ 85.638303][ T3558] udevd[3558]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 85.641035][ T3560] udevd[3560]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 85.797883][ T3615] usb 2-1: USB disconnect, device number 4 [ 85.872264][ T3910] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 86.077438][ T4165] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 86.110086][ T3910] usb 4-1: Using ep0 maxpacket: 32 [ 86.115856][ T4165] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 86.230248][ T3910] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 86.238474][ T3910] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 86.287804][ T3910] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 86.436477][ T4169] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 86.468286][ T4169] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. [ 86.472255][ T3910] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 86.520320][ T3910] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 86.524095][ T4169] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 86.545523][ T3910] usb 4-1: Product: syz [ 86.564164][ T3910] usb 4-1: Manufacturer: syz [ 86.585618][ T3910] usb 4-1: SerialNumber: syz [ 86.607781][ T3910] usb 4-1: config 0 descriptor?? [ 86.699207][ T27] audit: type=1326 audit(1717663751.414:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4168 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f929887cf69 code=0x7ffc0000 [ 86.739267][ T27] audit: type=1326 audit(1717663751.414:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4168 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f929887cf69 code=0x7ffc0000 [ 86.779548][ T4175] 9pnet_fd: Insufficient options for proto=fd [ 86.811393][ T3910] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 86.820985][ T27] audit: type=1326 audit(1717663751.414:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4168 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f929887cf69 code=0x7ffc0000 [ 86.868077][ T27] audit: type=1326 audit(1717663751.414:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4168 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f929887cf69 code=0x7ffc0000 [ 86.918446][ T3910] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 86.949883][ T4177] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 87.023972][ T27] audit: type=1326 audit(1717663751.414:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4168 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f929887cf69 code=0x7ffc0000 [ 87.334882][ T3910] usb 4-1: USB disconnect, device number 7 [ 87.496378][ T3910] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 87.531854][ T27] audit: type=1326 audit(1717663751.414:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4168 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f929887cf69 code=0x7ffc0000 [ 87.555066][ T27] audit: type=1326 audit(1717663751.414:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4168 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f929887cf69 code=0x7ffc0000 [ 87.578289][ T27] audit: type=1326 audit(1717663751.414:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4168 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f929887cf69 code=0x7ffc0000 [ 87.601541][ T27] audit: type=1326 audit(1717663751.414:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4168 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f929887cf69 code=0x7ffc0000 [ 87.624324][ T27] audit: type=1326 audit(1717663751.534:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4168 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f929887cf69 code=0x7ffc0000 [ 87.649027][ T27] audit: type=1326 audit(1717663751.534:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4168 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f929887cf69 code=0x7ffc0000 [ 87.742842][ T4186] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.1'. [ 88.313470][ T4212] 9pnet_fd: Insufficient options for proto=fd [ 88.465126][ T4215] netlink: 292 bytes leftover after parsing attributes in process `syz-executor.1'. [ 88.790781][ T4221] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 88.819423][ T4221] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 88.986717][ T4227] tipc: Started in network mode [ 89.006885][ T4227] tipc: Node identity ac1414aa, cluster identity 4711 [ 89.020795][ T4227] tipc: Enabled bearer , priority 10 [ 89.110248][ T3910] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 89.247640][ T4235] 9pnet_fd: Insufficient options for proto=fd [ 89.360164][ T3910] usb 5-1: Using ep0 maxpacket: 32 [ 89.449982][ T4243] netlink: 292 bytes leftover after parsing attributes in process `syz-executor.1'. [ 89.480358][ T3910] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 89.507154][ T3910] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 89.569614][ T3910] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 89.762155][ T3910] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 89.788906][ T3910] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 89.816868][ T3910] usb 5-1: Product: syz [ 89.833508][ T4238] loop3: detected capacity change from 0 to 32768 [ 89.841278][ T3910] usb 5-1: Manufacturer: syz [ 89.849648][ T3910] usb 5-1: SerialNumber: syz [ 89.878656][ T4238] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz-executor.3 (4238) [ 89.896620][ T3910] usb 5-1: config 0 descriptor?? [ 89.941490][ T3910] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 89.987161][ T3910] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 90.035799][ T4238] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 90.072515][ T4238] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 90.100790][ T4254] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 90.119956][ T4238] BTRFS info (device loop3): force clearing of disk cache [ 90.122507][ T4254] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 90.141128][ T14] tipc: Node number set to 2886997162 [ 90.149188][ T4225] ldusb 5-1:0.0: Couldn't submit interrupt_in_urb -90 [ 90.164659][ T14] usb 5-1: USB disconnect, device number 6 [ 90.182697][ T14] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 90.192677][ T4238] BTRFS info (device loop3): using free space tree [ 90.409120][ T4265] loop2: detected capacity change from 0 to 2048 [ 90.443229][ T4249] capability: warning: `syz-executor.1' uses deprecated v2 capabilities in a way that may be insecure [ 90.501182][ T4265] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 90.526452][ T4238] BTRFS info (device loop3): enabling ssd optimizations [ 90.558224][ T4238] BTRFS info (device loop3): rebuilding free space tree [ 90.612653][ T3573] EXT4-fs (loop2): unmounting filesystem. [ 90.660162][ T3910] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 90.826969][ T3572] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 91.030181][ T3910] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 91.075517][ T3910] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 91.081025][ T4294] 9pnet_fd: Insufficient options for proto=fd [ 91.129504][ T3910] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 91.168330][ T3910] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.206019][ T3910] usb 1-1: config 0 descriptor?? [ 91.266673][ T4298] netlink: 292 bytes leftover after parsing attributes in process `syz-executor.1'. [ 91.453724][ T4306] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 91.475261][ T4306] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.1'. [ 91.507136][ T4306] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 91.804353][ T3910] usbhid 1-1:0.0: can't add hid device: -71 [ 91.811913][ T3910] usbhid: probe of 1-1:0.0 failed with error -71 [ 91.834709][ T3910] usb 1-1: USB disconnect, device number 5 [ 91.903605][ T4318] loop3: detected capacity change from 0 to 256 [ 92.151333][ T3558] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 92.760335][ T3910] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 93.063355][ T3910] usb 3-1: Using ep0 maxpacket: 8 [ 93.072206][ T4333] 9pnet_fd: Insufficient options for proto=fd [ 93.187187][ T27] audit: type=1326 audit(1717663757.904:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4334 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f244d67cf69 code=0x0 [ 93.343163][ T3910] usb 3-1: New USB device found, idVendor=07c4, idProduct=a109, bcdDevice= f.59 [ 93.414973][ T27] audit: type=1800 audit(1717663758.124:82): pid=4348 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1967 res=0 errno=0 [ 93.437436][ T3910] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.503904][ T3910] usb 3-1: Product: syz [ 93.633332][ T3910] usb 3-1: Manufacturer: syz [ 93.733473][ T3910] usb 3-1: SerialNumber: syz [ 93.941990][ T3910] usb 3-1: config 0 descriptor?? [ 94.081622][ T3910] ums-datafab 3-1:0.0: USB Mass Storage device detected [ 94.186681][ T3910] ums-sddr55 3-1:0.0: USB Mass Storage device detected [ 94.262704][ T4356] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.1'. [ 94.990344][ T3910] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 95.280178][ T3910] usb 1-1: Using ep0 maxpacket: 8 [ 95.330150][ T3904] usb 3-1: USB disconnect, device number 4 [ 95.374664][ T4372] loop3: detected capacity change from 0 to 512 [ 95.520236][ T3618] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 95.531640][ T4372] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 95.590431][ T3910] usb 1-1: New USB device found, idVendor=07c4, idProduct=a109, bcdDevice= f.59 [ 95.599507][ T3910] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.634266][ T4372] ext4 filesystem being mounted at /root/syzkaller-testdir3269237678/syzkaller.k0cEjk/35/file0 supports timestamps until 2038 (0x7fffffff) [ 95.649827][ T3910] usb 1-1: Product: syz [ 95.666244][ T3910] usb 1-1: Manufacturer: syz [ 95.674820][ T3910] usb 1-1: SerialNumber: syz [ 95.696464][ T3910] usb 1-1: config 0 descriptor?? [ 95.747571][ T3910] ums-datafab 1-1:0.0: USB Mass Storage device detected [ 95.835808][ T4383] loop4: detected capacity change from 0 to 2048 [ 95.867898][ T3910] ums-sddr55 1-1:0.0: USB Mass Storage device detected [ 95.920424][ T3618] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 95.955906][ T4383] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 95.976484][ T3618] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 95.997942][ T3618] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 96.032870][ T3618] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.151114][ T3618] usb 2-1: config 0 descriptor?? [ 96.973450][ T3618] usbhid 2-1:0.0: can't add hid device: -71 [ 96.979753][ T3618] usbhid: probe of 2-1:0.0 failed with error -71 [ 97.041078][ T3618] usb 2-1: USB disconnect, device number 5 [ 97.336800][ T3289] usb 1-1: USB disconnect, device number 6 [ 97.551354][ T4389] loop2: detected capacity change from 0 to 4096 [ 97.560696][ T27] audit: type=1326 audit(1717663762.274:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4394 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8f7587cf69 code=0x0 [ 97.847446][ T4403] geneve1: mtu less than device minimum [ 97.898349][ T4403] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 98.438178][ T4409] device syzkaller1 entered promiscuous mode [ 98.639130][ T4415] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 99.824214][ T3289] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 100.230469][ T3289] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.276073][ T3289] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.351920][ T3289] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 100.425442][ T3289] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.487410][ T3289] usb 2-1: config 0 descriptor?? [ 100.699202][ T4422] loop2: detected capacity change from 0 to 40427 [ 100.774522][ T4422] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 100.818644][ T4422] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 100.861296][ T4422] F2FS-fs (loop2): invalid crc value [ 100.901287][ T4422] F2FS-fs (loop2): Found nat_bits in checkpoint [ 100.924957][ T4421] loop4: detected capacity change from 0 to 40427 [ 100.965283][ T4421] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 100.974159][ T3289] hid (null): bogus close delimiter [ 101.011719][ T4421] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 101.242291][ T3289] usb 2-1: language id specifier not provided by device, defaulting to English [ 101.262074][ T4421] F2FS-fs (loop4): invalid crc value [ 101.281703][ T4422] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 101.294626][ T3572] EXT4-fs (loop3): unmounting filesystem. [ 101.298011][ T4422] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 101.303121][ T4421] F2FS-fs (loop4): Found nat_bits in checkpoint [ 101.417009][ T4421] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 101.438804][ T4421] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 101.480211][ T3289] uclogic 0003:256C:006D.0004: failed retrieving Huion firmware version: -71 [ 101.492680][ T3289] uclogic 0003:256C:006D.0004: failed probing parameters: -71 [ 101.511106][ T3289] uclogic: probe of 0003:256C:006D.0004 failed with error -71 [ 101.564728][ T3289] usb 2-1: USB disconnect, device number 6 [ 102.244212][ T39] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 102.284983][ T39] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 102.473599][ T27] audit: type=1326 audit(1717663767.194:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4450 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd48da7cf69 code=0x0 [ 103.017888][ T27] audit: type=1800 audit(1717663767.734:85): pid=4462 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="file0" dev="sda1" ino=1961 res=0 errno=0 [ 103.509675][ T4464] overlayfs: failed to resolve './file2': -2 [ 104.016305][ T4469] device syzkaller1 entered promiscuous mode [ 104.481540][ T4459] loop0: detected capacity change from 0 to 32768 [ 104.583804][ T4459] XFS (loop0): Mounting V5 Filesystem [ 104.626680][ T14] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 104.718933][ T4459] XFS (loop0): Ending clean mount [ 104.835709][ T3615] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x39/0xc0, xfs_bnobt block 0x8 [ 104.859945][ T3615] XFS (loop0): Unmount and run xfs_repair [ 104.877131][ T3615] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 104.888715][ T3615] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff AB3B............ [ 104.908104][ T14] usb 5-1: Using ep0 maxpacket: 32 [ 104.930231][ T3615] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 10 ................ [ 104.939119][ T3615] 00000020: a2 f8 2a ab 77 f8 42 86 af d4 a8 f7 00 a7 4b ab ..*.w.B.......K. [ 104.962246][ T3615] 00000030: 00 00 00 00 5b fd 4f dd 00 00 00 05 00 00 00 01 ....[.O......... [ 104.975708][ T3615] 00000040: 00 00 02 36 00 00 0d ca 00 00 00 00 00 00 00 00 ...6............ [ 104.987187][ T3615] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 105.002307][ T3615] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 105.014518][ T3615] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 105.026092][ T4490] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x26e/0x370" at daddr 0x8 len 8 error 74 [ 105.040376][ T14] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 105.048575][ T14] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 105.068876][ T4490] XFS (loop0): Corruption of in-memory data (0x8) detected at xfs_defer_finish_noroll+0x1acd/0x2210 (fs/xfs/libxfs/xfs_defer.c:573). Shutting down filesystem. [ 105.080047][ T14] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 105.118034][ T4490] XFS (loop0): Please unmount the filesystem and rectify the problem(s) [ 105.187525][ T3570] XFS (loop0): Unmounting Filesystem [ 105.305646][ T14] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 105.332951][ T14] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 105.370072][ T14] usb 5-1: Product: syz [ 105.374269][ T14] usb 5-1: Manufacturer: syz [ 105.378866][ T14] usb 5-1: SerialNumber: syz [ 105.413056][ T14] usb 5-1: config 0 descriptor?? [ 105.472512][ T14] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 105.489634][ T4498] loop2: detected capacity change from 0 to 1024 [ 105.506068][ T14] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 105.640354][ T3981] hfsplus: b-tree write err: -5, ino 4 [ 105.680542][ T4478] ldusb 5-1:0.0: Couldn't submit interrupt_in_urb -90 [ 105.712938][ T14] usb 5-1: USB disconnect, device number 7 [ 105.730646][ T14] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 105.929479][ T27] audit: type=1800 audit(1717663770.644:86): pid=4507 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="file0" dev="sda1" ino=1959 res=0 errno=0 [ 106.122979][ T4496] loop3: detected capacity change from 0 to 40427 [ 106.167058][ T4496] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 106.290577][ T4496] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 106.934592][ T4496] F2FS-fs (loop3): invalid crc value [ 106.996108][ T4496] F2FS-fs (loop3): Found nat_bits in checkpoint [ 107.078269][ T4496] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 107.099681][ T4496] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 108.096314][ T3981] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 108.118703][ T27] audit: type=1800 audit(1717663772.834:87): pid=4539 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=1953 res=0 errno=0 [ 108.119706][ T3981] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 109.322347][ T4543] loop1: detected capacity change from 0 to 1024 [ 109.451413][ T11] hfsplus: b-tree write err: -5, ino 4 [ 109.658702][ T4547] loop3: detected capacity change from 0 to 2048 [ 109.738658][ T4547] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 109.750599][ T4534] loop2: detected capacity change from 0 to 32768 [ 110.012121][ T4534] XFS (loop2): Mounting V5 Filesystem [ 110.050461][ T27] audit: type=1800 audit(1717663774.774:88): pid=4563 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=1952 res=0 errno=0 [ 110.978700][ T4534] XFS (loop2): Ending clean mount [ 111.035538][ T3573] XFS (loop2): Unmounting Filesystem [ 111.604496][ T4589] program syz-executor.1 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 112.166087][ T4592] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 112.428375][ T4549] loop4: detected capacity change from 0 to 40427 [ 112.462102][ T4549] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 112.503382][ T4549] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 112.530449][ T4549] F2FS-fs (loop4): invalid crc value [ 112.585446][ T4549] F2FS-fs (loop4): Found nat_bits in checkpoint [ 113.076873][ T4626] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 113.242560][ T4630] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 113.711193][ T27] audit: type=1800 audit(1717663778.434:89): pid=4633 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1947 res=0 errno=0 [ 114.071329][ T27] audit: type=1800 audit(1717663778.464:90): pid=4633 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1947 res=0 errno=0 [ 115.008212][ T4601] loop2: detected capacity change from 0 to 32768 [ 115.068207][ T4601] XFS (loop2): Mounting V5 Filesystem [ 115.150688][ T4659] loop0: detected capacity change from 0 to 2048 [ 115.164420][ T3615] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 115.201179][ T4659] loop0: p1 < > p4 [ 115.212839][ T4659] loop0: p4 size 8388608 extends beyond EOD, truncated [ 115.240623][ T4666] loop1: detected capacity change from 0 to 4096 [ 115.275110][ T4601] XFS (loop2): Ending clean mount [ 115.307258][ T27] audit: type=1800 audit(1717663780.024:91): pid=4659 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1968 res=0 errno=0 [ 115.366655][ T4670] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 115.377518][ T4601] XFS (loop2): Metadata CRC error detected at xfs_allocbt_read_verify+0x39/0xc0, xfs_bnobt block 0x8 [ 115.377617][ T4601] XFS (loop2): Unmount and run xfs_repair [ 115.377632][ T4601] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 115.377649][ T4601] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff AB3B............ [ 115.377665][ T4601] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 10 ................ [ 115.377680][ T4601] 00000020: a2 f8 2a ab 77 f8 42 86 af d4 a8 f7 00 a7 4b ab ..*.w.B.......K. [ 115.377695][ T4601] 00000030: 00 00 00 00 5b fd 4f dd 00 00 00 05 00 00 00 01 ....[.O......... [ 115.377709][ T4601] 00000040: 00 00 02 36 00 00 0d ca 00 00 00 00 00 00 00 00 ...6............ [ 115.377724][ T4601] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 115.377739][ T4601] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 115.377753][ T4601] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 115.377774][ T4601] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x26e/0x370" at daddr 0x8 len 8 error 74 [ 115.393221][ T4601] XFS (loop2): Corruption of in-memory data (0x8) detected at xfs_defer_finish_noroll+0x1acd/0x2210 (fs/xfs/libxfs/xfs_defer.c:573). Shutting down filesystem. [ 115.456088][ T4672] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 115.510233][ T3615] usb 5-1: Using ep0 maxpacket: 16 [ 115.527149][ T4601] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [ 115.649446][ T3573] XFS (loop2): Unmounting Filesystem [ 115.660513][ T3615] usb 5-1: config 0 interface 0 altsetting 44 has an invalid endpoint with address 0xFB, skipping [ 115.698182][ T4676] xt_socket: unknown flags 0x2 [ 115.702856][ T3615] usb 5-1: config 0 interface 0 altsetting 44 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 115.743213][ T3615] usb 5-1: config 0 interface 0 has no altsetting 0 [ 115.765850][ T4678] device syzkaller1 entered promiscuous mode [ 115.877101][ T4649] loop3: detected capacity change from 0 to 40427 [ 115.906690][ T4649] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 115.918245][ T4649] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 115.927268][ T3615] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 115.954530][ T3615] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.965685][ T4649] F2FS-fs (loop3): invalid crc value [ 115.977093][ T3615] usb 5-1: Product: syz [ 115.983773][ T3615] usb 5-1: Manufacturer: syz [ 115.990191][ T3615] usb 5-1: SerialNumber: syz [ 116.005606][ T3615] usb 5-1: config 0 descriptor?? [ 116.020986][ T4649] F2FS-fs (loop3): Found nat_bits in checkpoint [ 116.121566][ T4649] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 116.128883][ T4649] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 116.934101][ T14] usb 5-1: USB disconnect, device number 8 [ 116.993160][ T3967] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 117.018789][ T3967] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 117.030017][ C1] sched: RT throttling activated [ 117.258064][ T4702] loop2: detected capacity change from 0 to 2048 [ 117.381112][ T4702] loop2: p1 < > p4 [ 117.797289][ T4702] loop2: p4 size 8388608 extends beyond EOD, truncated [ 117.810737][ T27] audit: type=1800 audit(1717663782.534:92): pid=4705 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1964 res=0 errno=0 [ 117.870552][ T3002] loop2: p1 < > p4 [ 117.887942][ T3002] loop2: p4 size 8388608 extends beyond EOD, truncated [ 117.909655][ T4707] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 118.032114][ T3573] __loop_clr_fd: partition scan of loop2 failed (rc=-16) [ 118.041548][ T3560] I/O error, dev loop2, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 118.114689][ T3560] I/O error, dev loop2, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 118.149241][ T3560] Buffer I/O error on dev loop2p4, logical block 1, async page read [ 118.164730][ T4709] loop4: detected capacity change from 0 to 4096 [ 118.215184][ T4716] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 118.244526][ T4715] loop3: detected capacity change from 0 to 2048 [ 118.276814][ T4715] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 118.342448][ T3558] udevd[3558]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 118.358768][ T3560] udevd[3560]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 118.400574][ T4720] fuse: Unknown parameter 'romod000000000000000000400' [ 118.445224][ T27] audit: type=1800 audit(1717663783.164:93): pid=4720 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file1" dev="sda1" ino=1944 res=0 errno=0 [ 118.563685][ T3560] udevd[3560]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 118.581487][ T3558] udevd[3558]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 118.929329][ T4698] loop1: detected capacity change from 0 to 32768 [ 118.973326][ T4698] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz-executor.1 (4698) [ 119.036702][ T4698] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 119.084710][ T4698] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 119.139792][ T4698] BTRFS info (device loop1): force clearing of disk cache [ 119.167810][ T4698] BTRFS info (device loop1): using free space tree [ 119.314983][ T27] audit: type=1804 audit(1717663784.004:94): pid=4747 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir3888238266/syzkaller.OtBEfi/49/cgroup.controllers" dev="sda1" ino=1966 res=1 errno=0 [ 119.476615][ T4698] BTRFS info (device loop1): enabling ssd optimizations [ 119.543778][ T4698] BTRFS info (device loop1): rebuilding free space tree [ 119.722579][ T4763] loop3: detected capacity change from 0 to 2048 [ 119.742949][ T4766] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 119.804467][ T4763] loop3: p1 < > p4 [ 119.815328][ T4763] loop3: p4 size 8388608 extends beyond EOD, truncated [ 119.853098][ T27] audit: type=1800 audit(1717663784.574:95): pid=4767 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1951 res=0 errno=0 [ 120.029487][ T3566] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 120.079351][ T3581] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 120.090218][ T3581] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 120.098371][ T3581] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 120.107482][ T3581] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 120.115301][ T3581] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 120.128086][ T3581] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 120.245316][ T3570] syz-executor.0 (3570) used greatest stack depth: 18160 bytes left [ 120.465646][ T102] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.560982][ T4785] loop3: detected capacity change from 0 to 2048 [ 120.599542][ T102] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.636901][ T4785] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 120.672757][ T4792] Bluetooth: MGMT ver 1.22 [ 120.746725][ T102] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.774574][ T4793] fuse: Unknown parameter 'romod000000000000000000400' [ 120.795957][ T27] audit: type=1800 audit(1717663785.514:96): pid=4793 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file1" dev="sda1" ino=1961 res=0 errno=0 [ 120.913414][ T102] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.006557][ T4802] syz-executor.4[4802] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 121.006646][ T4802] syz-executor.4[4802] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 121.176415][ T4771] chnl_net:caif_netlink_parms(): no params data found [ 121.275026][ T4809] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 121.276789][ T102] tipc: Disabling bearer [ 121.421133][ T4811] loop4: detected capacity change from 0 to 1024 [ 121.509440][ T3766] hfsplus: b-tree write err: -5, ino 4 [ 121.513349][ T102] tipc: Left network mode [ 121.853944][ T27] audit: type=1800 audit(1717663786.574:97): pid=4822 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1959 res=0 errno=0 [ 121.920410][ T27] audit: type=1800 audit(1717663786.624:98): pid=4822 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1959 res=0 errno=0 [ 121.979151][ T4771] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.015264][ T4771] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.067298][ T4771] device bridge_slave_0 entered promiscuous mode [ 122.177321][ T3581] Bluetooth: hci1: command tx timeout [ 122.180414][ T4771] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.254446][ T4771] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.298600][ T4771] device bridge_slave_1 entered promiscuous mode [ 122.443631][ T4771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 122.490875][ T4808] loop1: detected capacity change from 0 to 32768 [ 122.534821][ T4771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 122.546511][ T4808] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz-executor.1 (4808) [ 122.607792][ T4808] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 122.654053][ T4808] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 122.675895][ T4771] team0: Port device team_slave_0 added [ 122.690460][ T4808] BTRFS info (device loop1): force clearing of disk cache [ 122.724407][ T4771] team0: Port device team_slave_1 added [ 122.742708][ T4808] BTRFS info (device loop1): using free space tree [ 122.840680][ T4771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 122.847665][ T4771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.880392][ T4771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 122.984159][ T4808] BTRFS info (device loop1): enabling ssd optimizations [ 123.008151][ T4808] BTRFS info (device loop1): rebuilding free space tree [ 123.029331][ T4771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 123.040103][ T4771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 123.148414][ T4869] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 123.194612][ T4771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 123.327506][ T4875] loop2: detected capacity change from 0 to 1024 [ 123.350822][ T3566] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 123.596207][ T4771] device hsr_slave_0 entered promiscuous mode [ 123.611456][ T3637] hfsplus: b-tree write err: -5, ino 4 [ 123.627809][ T4771] device hsr_slave_1 entered promiscuous mode [ 123.658971][ T4771] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 123.689850][ T4771] Cannot create hsr debugfs directory [ 123.788425][ T102] device hsr_slave_0 left promiscuous mode [ 123.829421][ T102] device hsr_slave_1 left promiscuous mode [ 123.904885][ T102] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 123.919353][ T102] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 123.959232][ T102] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 123.998742][ T102] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 124.041484][ T102] device bridge_slave_1 left promiscuous mode [ 124.058531][ T102] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.091352][ T102] device bridge_slave_0 left promiscuous mode [ 124.098853][ T102] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.137252][ T102] device veth1_macvtap left promiscuous mode [ 124.154737][ T102] device veth0_macvtap left promiscuous mode [ 124.178506][ T102] device veth1_vlan left promiscuous mode [ 124.221543][ T4904] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 124.261628][ T3581] Bluetooth: hci1: command tx timeout [ 124.651186][ T102] team0 (unregistering): Port device team_slave_1 removed [ 124.679615][ T102] team0 (unregistering): Port device team_slave_0 removed [ 124.704143][ T102] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 124.721794][ T102] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 124.853057][ T102] bond0 (unregistering): Released all slaves [ 125.081631][ T4919] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 125.110262][ T3615] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 125.217470][ T4922] loop3: detected capacity change from 0 to 1024 [ 125.460736][ T3963] hfsplus: b-tree write err: -5, ino 4 [ 125.510354][ T3615] usb 2-1: New USB device found, idVendor=05ac, idProduct=0290, bcdDevice=dc.1b [ 125.519427][ T3615] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.573968][ T3615] usb 2-1: config 0 descriptor?? [ 125.624811][ T3615] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input5 [ 125.772284][ T27] audit: type=1326 audit(1717663790.494:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4932 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f929887cf69 code=0x7ffc0000 [ 125.843476][ T3613] usb 2-1: USB disconnect, device number 7 [ 125.966124][ T27] audit: type=1326 audit(1717663790.494:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4932 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f929887cf69 code=0x7ffc0000 [ 126.111308][ T27] audit: type=1326 audit(1717663790.494:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4932 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f929887cf69 code=0x7ffc0000 [ 126.217804][ T27] audit: type=1326 audit(1717663790.494:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4932 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f929887cf69 code=0x7ffc0000 [ 126.295512][ T4771] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 126.318681][ T27] audit: type=1326 audit(1717663790.494:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4932 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f929887cf69 code=0x7ffc0000 [ 126.350325][ T3581] Bluetooth: hci1: command tx timeout [ 126.368698][ T27] audit: type=1326 audit(1717663790.494:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4932 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=442 compat=0 ip=0x7f929887cf69 code=0x7ffc0000 [ 126.372047][ T4771] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 126.400582][ T27] audit: type=1326 audit(1717663790.494:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4932 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f929887cf69 code=0x7ffc0000 [ 126.596762][ T4771] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 126.656072][ T4771] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 127.630483][ T4771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 127.669949][ T4966] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 127.738728][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 127.755998][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 127.787444][ T4771] 8021q: adding VLAN 0 to HW filter on device team0 [ 127.796798][ T27] audit: type=1800 audit(1717663792.514:106): pid=4973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1959 res=0 errno=0 [ 127.827331][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 127.846429][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 127.866915][ T27] audit: type=1800 audit(1717663792.534:107): pid=4973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1959 res=0 errno=0 [ 127.910446][ T3289] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.910524][ T3289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 127.924611][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 127.926534][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 127.928284][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 127.930318][ T3289] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.930384][ T3289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 127.932338][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 127.945956][ T3574] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 127.946813][ T3574] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 127.949093][ T3574] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 127.949882][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 127.978071][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 127.978834][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 127.995423][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 127.997123][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 128.026658][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 128.027237][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 128.043344][ T4771] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 128.287025][ T4978] loop2: detected capacity change from 0 to 2048 [ 128.321765][ T4978] loop2: p1 < > p4 [ 128.323043][ T4978] loop2: p4 size 8388608 extends beyond EOD, truncated [ 128.339610][ T27] audit: type=1800 audit(1717663793.054:108): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1963 res=0 errno=0 [ 128.410430][ T3581] Bluetooth: hci1: command tx timeout [ 128.554780][ T3560] udevd[3560]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 128.569417][ T3558] udevd[3558]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 128.694632][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 128.694715][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 128.708160][ T4771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 128.806744][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 128.807346][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 128.889249][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 128.889908][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 128.891101][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 128.891594][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 128.952356][ T4771] device veth0_vlan entered promiscuous mode [ 130.348931][ T5018] loop1: detected capacity change from 0 to 4096 [ 130.546761][ T4771] device veth1_vlan entered promiscuous mode [ 130.621581][ T5030] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 130.714442][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 130.729222][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 130.768719][ T4771] device veth0_macvtap entered promiscuous mode [ 130.813724][ T4771] device veth1_macvtap entered promiscuous mode [ 130.887803][ T4771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.925885][ T4771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.973624][ T4771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.005847][ T4771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.026084][ T4771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.070173][ T4771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.099267][ T4771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.161387][ T4771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.199717][ T4771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 131.225553][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 131.250907][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 131.261040][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 131.269753][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 131.331915][ T4771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.352796][ T4771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.376055][ T5048] loop1: detected capacity change from 0 to 4096 [ 131.396234][ T4771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.423057][ T5048] ntfs3: Unknown parameter '1844674407370955161501777777777777777777777' [ 131.451738][ T4771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.472862][ T4771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.494526][ T4771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.521178][ T4771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.545226][ T4771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.568409][ T4771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 131.571227][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 131.571874][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 131.578204][ T4771] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.578269][ T4771] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.578295][ T4771] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.578321][ T4771] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.845342][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.845407][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.032276][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 132.048875][ T5065] loop1: detected capacity change from 0 to 1024 [ 132.323742][ T3963] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.324121][ T3963] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.350048][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 132.651269][ T1245] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.651392][ T1245] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.827960][ T3963] hfsplus: b-tree write err: -5, ino 4 [ 133.323499][ T5089] loop2: detected capacity change from 0 to 64 [ 133.426037][ T5097] loop3: detected capacity change from 0 to 128 [ 133.496809][ T5097] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 133.535097][ T5097] ext4 filesystem being mounted at /root/syzkaller-testdir3269237678/syzkaller.k0cEjk/72/mnt supports timestamps until 2038 (0x7fffffff) [ 133.558357][ T5089] hfs: unable to load iocharset "iɹpso885-3" [ 133.568485][ T5089] hfs: unable to parse mount options [ 133.683175][ T3572] EXT4-fs (loop3): unmounting filesystem. [ 133.829853][ T5105] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 133.901917][ T5110] tipc: Started in network mode [ 133.927200][ T5110] tipc: Node identity ac1414aa, cluster identity 4711 [ 133.977773][ T5110] tipc: Enabled bearer , priority 10 [ 135.021292][ T3909] libceph: connect (1)[c::]:6789 error -101 [ 135.027815][ T3909] libceph: mon0 (1)[c::]:6789 connect error [ 135.035680][ T3613] tipc: Node number set to 2886997162 [ 135.292201][ T3909] libceph: connect (1)[c::]:6789 error -101 [ 135.302019][ T3909] libceph: mon0 (1)[c::]:6789 connect error [ 135.357846][ T5142] loop2: detected capacity change from 0 to 128 [ 135.464150][ T5142] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 135.484517][ T5142] ext4 filesystem being mounted at /root/syzkaller-testdir1271324049/syzkaller.O2iETm/85/mnt supports timestamps until 2038 (0x7fffffff) [ 135.727032][ T3573] EXT4-fs (loop2): unmounting filesystem. [ 135.865780][ T5129] ceph: No mds server is up or the cluster is laggy [ 135.874364][ T152] libceph: connect (1)[c::]:6789 error -101 [ 135.885517][ T5156] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 135.887575][ T152] libceph: mon0 (1)[c::]:6789 connect error [ 136.266440][ T5162] tipc: Started in network mode [ 136.298020][ T5162] tipc: Node identity ac1414aa, cluster identity 4711 [ 136.341317][ T5162] tipc: Enabled bearer , priority 10 [ 136.348609][ T5164] loop2: detected capacity change from 0 to 1024 [ 136.514588][ T3981] hfsplus: b-tree write err: -5, ino 4 [ 137.231174][ T5183] loop4: detected capacity change from 0 to 128 [ 137.316914][ T5183] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 137.325563][ T3615] tipc: Node number set to 2886997162 [ 137.340216][ T152] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 137.354760][ T5183] ext4 filesystem being mounted at /root/syzkaller-testdir3888238266/syzkaller.OtBEfi/69/mnt supports timestamps until 2038 (0x7fffffff) [ 137.477535][ T3571] EXT4-fs (loop4): unmounting filesystem. [ 137.766858][ T27] audit: type=1804 audit(1717663802.484:109): pid=5194 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir3888238266/syzkaller.OtBEfi/70/cgroup.controllers" dev="sda1" ino=1956 res=1 errno=0 [ 137.920102][ T152] usb 3-1: Using ep0 maxpacket: 32 [ 138.040280][ T152] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 138.062693][ T152] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 138.091522][ T152] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 138.110766][ T152] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.161182][ T152] hub 3-1:4.0: USB hub found [ 138.380233][ T152] hub 3-1:4.0: 2 ports detected [ 138.409339][ T5209] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 138.488888][ T5210] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 138.905042][ T5215] loop0: detected capacity change from 0 to 512 [ 138.947229][ T5215] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 138.977255][ T5215] ext4 filesystem being mounted at /root/syzkaller-testdir2993156506/syzkaller.PL9VmZ/9/w5T)`)YFnA@T<3ڂ$rcnHwC" -8 supports timestamps until 2038 (0x7fffffff) [ 139.033705][ T5215] EXT4-fs error (device loop0): ext4_do_update_inode:5210: inode #2: comm syz-executor.0: corrupted inode contents [ 139.049354][ T5215] EXT4-fs error (device loop0): ext4_dirty_inode:6072: inode #2: comm syz-executor.0: mark_inode_dirty error [ 139.062508][ T5215] EXT4-fs error (device loop0): ext4_do_update_inode:5210: inode #2: comm syz-executor.0: corrupted inode contents [ 139.084562][ T5215] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #2: comm syz-executor.0: mark_inode_dirty error [ 139.181139][ T4771] EXT4-fs (loop0): unmounting filesystem. [ 139.756662][ T5236] loop0: detected capacity change from 0 to 4096 [ 139.818392][ T5234] loop4: detected capacity change from 0 to 4096 [ 139.911977][ T152] usb 3-1: USB disconnect, device number 5 [ 140.341362][ T27] audit: type=1326 audit(1717663805.064:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5245 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43f847cf69 code=0x7ffc0000 [ 140.413393][ T27] audit: type=1326 audit(1717663805.064:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5245 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43f847cf69 code=0x7ffc0000 [ 140.413431][ T27] audit: type=1326 audit(1717663805.094:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5245 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f43f847cf69 code=0x7ffc0000 [ 140.413458][ T27] audit: type=1326 audit(1717663805.094:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5245 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43f847cf69 code=0x7ffc0000 [ 140.413486][ T27] audit: type=1326 audit(1717663805.094:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5245 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43f847cf69 code=0x7ffc0000 [ 140.413513][ T27] audit: type=1326 audit(1717663805.104:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5245 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f43f847cf69 code=0x7ffc0000 [ 140.413541][ T27] audit: type=1326 audit(1717663805.104:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5245 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43f847cf69 code=0x7ffc0000 [ 140.413568][ T27] audit: type=1326 audit(1717663805.104:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5245 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43f847cf69 code=0x7ffc0000 [ 140.413596][ T27] audit: type=1326 audit(1717663805.104:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5245 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=442 compat=0 ip=0x7f43f847cf69 code=0x7ffc0000 [ 140.657940][ C1] vkms_vblank_simulate: vblank timer overrun [ 140.825216][ C1] vkms_vblank_simulate: vblank timer overrun [ 141.014398][ T5262] program syz-executor.1 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 141.814212][ T5289] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 141.977338][ T5285] loop2: detected capacity change from 0 to 4096 [ 143.367602][ T27] kauditd_printk_skb: 10 callbacks suppressed [ 143.367614][ T27] audit: type=1326 audit(1717663808.084:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5311 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43f847cf69 code=0x7ffc0000 [ 143.492934][ T5316] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 143.548411][ T27] audit: type=1326 audit(1717663808.124:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5311 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f43f847cf69 code=0x7ffc0000 [ 143.586769][ T5321] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 143.615018][ T27] audit: type=1326 audit(1717663808.124:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5311 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43f847cf69 code=0x7ffc0000 [ 143.689768][ T5287] loop1: detected capacity change from 0 to 32768 [ 143.736329][ T27] audit: type=1326 audit(1717663808.124:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5311 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43f847cf69 code=0x7ffc0000 [ 143.787405][ T27] audit: type=1326 audit(1717663808.124:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5311 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f43f847cf69 code=0x7ffc0000 [ 143.821646][ T5287] XFS (loop1): Mounting V5 Filesystem [ 143.906663][ T5340] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 143.947986][ T5287] XFS (loop1): Ending clean mount [ 143.998483][ T27] audit: type=1326 audit(1717663808.124:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5311 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43f847cf69 code=0x7ffc0000 [ 144.167259][ T27] audit: type=1326 audit(1717663808.124:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5311 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=442 compat=0 ip=0x7f43f847cf69 code=0x7ffc0000 [ 144.276961][ T3566] XFS (loop1): Unmounting Filesystem [ 144.362798][ T27] audit: type=1326 audit(1717663808.124:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5311 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43f847cf69 code=0x7ffc0000 [ 144.579472][ T27] audit: type=1800 audit(1717663809.294:137): pid=5349 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1955 res=0 errno=0 [ 145.242843][ T3615] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 145.443927][ T5370] loop1: detected capacity change from 0 to 512 [ 145.466575][ T5372] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 145.510479][ T5370] journal_path: Lookup failure for './file0' [ 145.542073][ T5370] EXT4-fs: error: could not find journal device path [ 145.660376][ T3615] usb 3-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 145.678220][ T3615] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.760430][ T3615] usb 3-1: config 0 descriptor?? [ 145.866214][ T3615] usb 3-1: bad CDC descriptors [ 145.893750][ T5384] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 145.912532][ T3615] usb 3-1: bad CDC descriptors [ 146.054885][ T3615] usb 3-1: USB disconnect, device number 6 [ 146.408090][ T5393] loop3: detected capacity change from 0 to 164 [ 146.550629][ T5395] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 146.723821][ T5374] loop0: detected capacity change from 0 to 32768 [ 146.792692][ T5381] ALSA: mixer_oss: invalid OSS volume '' [ 147.681013][ T5409] usb usb9: usbfs: process 5409 (syz-executor.2) did not claim interface 0 before use [ 147.684913][ T5374] XFS (loop0): Mounting V5 Filesystem [ 147.838679][ T5374] XFS (loop0): Ending clean mount [ 148.059972][ T4771] XFS (loop0): Unmounting Filesystem [ 148.143496][ T5424] usb usb9: usbfs: process 5424 (syz-executor.1) did not claim interface 0 before use [ 148.428382][ T5426] loop1: detected capacity change from 0 to 2048 [ 148.501299][ T5426] loop1: p1 < > p4 [ 148.514634][ T5426] loop1: p4 size 8388608 extends beyond EOD, truncated [ 148.579285][ T27] audit: type=1800 audit(1717663813.294:138): pid=5426 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1967 res=0 errno=0 [ 148.998565][ T5430] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 149.332852][ T5434] loop3: detected capacity change from 0 to 2048 [ 149.384987][ T5435] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 149.448683][ T5428] loop0: detected capacity change from 0 to 32768 [ 149.491548][ T5428] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz-executor.0 (5428) [ 149.529833][ T5428] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 149.565296][ T5428] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 149.611102][ T5428] BTRFS info (device loop0): force clearing of disk cache [ 149.618471][ T5428] BTRFS info (device loop0): using free space tree [ 149.912617][ T5428] BTRFS info (device loop0): enabling ssd optimizations [ 149.927153][ T5428] BTRFS info (device loop0): rebuilding free space tree [ 150.000969][ T4771] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 150.515666][ T4780] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 151.580354][ T4780] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 151.597121][ T4780] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 151.618090][ T4780] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 151.660046][ T4780] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.696012][ T4780] usb 1-1: config 0 descriptor?? [ 151.914675][ T3581] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 151.927173][ T3581] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 151.937047][ T3581] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 151.946071][ T3581] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 151.953833][ T3581] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 151.963083][ T3587] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 152.193511][ T4780] cm6533_jd 0003:0D8C:0022.0005: unknown main item tag 0x0 [ 152.211084][ T4780] cm6533_jd 0003:0D8C:0022.0005: unknown main item tag 0x0 [ 152.219202][ T4780] cm6533_jd 0003:0D8C:0022.0005: unknown main item tag 0x0 [ 152.232667][ T4780] cm6533_jd 0003:0D8C:0022.0005: unknown main item tag 0x0 [ 152.239920][ T4780] cm6533_jd 0003:0D8C:0022.0005: unknown main item tag 0x0 [ 152.253530][ T4780] cm6533_jd 0003:0D8C:0022.0005: No inputs registered, leaving [ 152.285349][ T4780] cm6533_jd 0003:0D8C:0022.0005: hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.0-1/input0 [ 153.650127][ T3909] usb 1-1: reset high-speed USB device number 7 using dummy_hcd [ 154.020295][ T3587] Bluetooth: hci3: command tx timeout [ 154.339300][ T5479] loop0: detected capacity change from 0 to 32768 [ 154.401598][ T5479] XFS (loop0): Mounting V5 Filesystem [ 154.442604][ T5479] XFS (loop0): Ending clean mount [ 154.494723][ T4781] usb 1-1: USB disconnect, device number 7 [ 154.500692][ T27] audit: type=1804 audit(1717663819.214:139): pid=5479 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir2993156506/syzkaller.PL9VmZ/26/file0/bus" dev="loop0" ino=1065 res=1 errno=0 [ 154.560047][ T27] audit: type=1804 audit(1717663819.214:140): pid=5479 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir2993156506/syzkaller.PL9VmZ/26/file0/bus" dev="loop0" ino=1065 res=1 errno=0 [ 154.596645][ T27] audit: type=1804 audit(1717663819.224:141): pid=5479 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir2993156506/syzkaller.PL9VmZ/26/file0/bus" dev="loop0" ino=1065 res=1 errno=0 [ 154.622016][ T4771] XFS (loop0): Unmounting Filesystem [ 156.090125][ T3587] Bluetooth: hci3: command tx timeout [ 158.170163][ T3587] Bluetooth: hci3: command tx timeout [ 160.250075][ T3587] Bluetooth: hci3: command tx timeout [ 175.690129][ T3578] Bluetooth: hci0: command 0x0406 tx timeout [ 175.690573][ T3569] Bluetooth: hci4: command 0x0406 tx timeout [ 175.696225][ T3578] Bluetooth: hci2: command 0x0406 tx timeout [ 178.145602][ T3578] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 178.156009][ T3578] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 178.164400][ T3578] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 178.174559][ T3578] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 178.182956][ T3578] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 178.190511][ T3578] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 178.256342][ T3569] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 178.266040][ T3569] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 178.273913][ T3569] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 178.282279][ T3569] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 178.289701][ T3569] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 178.300296][ T3569] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 178.991816][ T3578] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 179.006391][ T3578] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 179.015375][ T3578] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 179.030965][ T3578] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 179.038508][ T3578] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 179.046509][ T3578] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 180.250220][ T3578] Bluetooth: hci5: command tx timeout [ 180.330983][ T3578] Bluetooth: hci6: command tx timeout [ 181.130248][ T3578] Bluetooth: hci7: command tx timeout [ 182.340114][ T3578] Bluetooth: hci5: command tx timeout [ 182.410136][ T3578] Bluetooth: hci6: command tx timeout [ 183.220088][ T3578] Bluetooth: hci7: command tx timeout [ 184.420053][ T3578] Bluetooth: hci5: command tx timeout [ 184.500093][ T3578] Bluetooth: hci6: command tx timeout [ 184.879707][ T3569] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 184.896077][ T3567] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 184.906361][ T3567] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 184.920392][ T3567] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 184.927985][ T3567] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 184.940340][ T3567] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 185.300078][ T3567] Bluetooth: hci7: command tx timeout [ 186.492010][ T3567] Bluetooth: hci5: command tx timeout [ 186.570119][ T3578] Bluetooth: hci6: command tx timeout [ 186.970257][ T3567] Bluetooth: hci8: command tx timeout [ 187.370217][ T3567] Bluetooth: hci7: command tx timeout [ 189.050070][ T3567] Bluetooth: hci8: command tx timeout [ 191.130129][ T3567] Bluetooth: hci8: command tx timeout [ 193.210068][ T3567] Bluetooth: hci8: command tx timeout [ 194.101129][ T1245] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.107469][ T1245] ieee802154 phy1 wpan1: encryption failed: -22 [ 216.941838][ T3578] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 216.951839][ T3578] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 216.959723][ T3578] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 216.967877][ T3578] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 216.988643][ T3578] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 216.998308][ T3578] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 219.050384][ T3578] Bluetooth: hci9: command tx timeout [ 221.138740][ T3578] Bluetooth: hci9: command tx timeout [ 223.218528][ T3578] Bluetooth: hci9: command tx timeout [ 225.290225][ T3578] Bluetooth: hci9: command tx timeout [ 243.391490][ T3567] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 243.406047][ T3567] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 243.414083][ T3567] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 243.424547][ T3567] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 243.437162][ T3567] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 243.446429][ T3567] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 243.447116][ T3587] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 243.466716][ T3587] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 243.474822][ T3587] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 243.492342][ T3578] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 243.502293][ T3578] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 243.509622][ T3578] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 243.965993][ T3569] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 243.975180][ T3569] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 243.983564][ T3569] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 243.995057][ T3569] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 244.003680][ T3569] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 244.011108][ T3569] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 245.530103][ T3569] Bluetooth: hci10: command tx timeout [ 245.610205][ T3569] Bluetooth: hci11: command tx timeout [ 246.090190][ T3569] Bluetooth: hci12: command tx timeout [ 247.370332][ T3569] Bluetooth: hci1: command 0x0406 tx timeout [ 247.610210][ T3569] Bluetooth: hci10: command tx timeout [ 247.690171][ T3569] Bluetooth: hci11: command tx timeout [ 248.171986][ T3569] Bluetooth: hci12: command tx timeout [ 249.690059][ T3569] Bluetooth: hci10: command tx timeout [ 249.780060][ T3569] Bluetooth: hci11: command tx timeout [ 249.949795][ T3578] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 249.959115][ T3578] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 249.967163][ T3578] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 249.975057][ T3578] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 249.984305][ T3578] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 249.991995][ T3567] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 250.250113][ T3567] Bluetooth: hci12: command tx timeout [ 251.770034][ T3567] Bluetooth: hci10: command tx timeout [ 251.850204][ T3569] Bluetooth: hci11: command tx timeout [ 252.021253][ T3567] Bluetooth: hci13: command tx timeout [ 252.330168][ T3567] Bluetooth: hci12: command tx timeout [ 254.090095][ T3567] Bluetooth: hci13: command tx timeout [ 255.531889][ T1245] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.538222][ T1245] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.173384][ T3567] Bluetooth: hci13: command tx timeout [ 258.250063][ T3567] Bluetooth: hci13: command tx timeout [ 278.100061][ T3567] Bluetooth: hci3: command 0x0406 tx timeout [ 282.192871][ T3578] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 282.205093][ T3578] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 282.213037][ T3578] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 282.220890][ T3578] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 282.228451][ T3578] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 282.238132][ T3578] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 284.250056][ T3578] Bluetooth: hci14: command tx timeout [ 286.330049][ T3578] Bluetooth: hci14: command tx timeout [ 288.409995][ T3578] Bluetooth: hci14: command tx timeout [ 290.500017][ T3578] Bluetooth: hci14: command tx timeout [ 295.850119][ T28] INFO: task syz-executor.3:3572 blocked for more than 143 seconds. [ 295.858545][ T28] Not tainted 6.1.92-syzkaller #0 [ 295.878481][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 295.887258][ T28] task:syz-executor.3 state:D stack:19576 pid:3572 ppid:1 flags:0x00004006 2024/06/06 08:52:40 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 295.901811][ T28] Call Trace: [ 295.955367][ T28] [ 295.958343][ T28] __schedule+0x142d/0x4550 [ 295.964092][ T28] ? __mutex_lock+0x6b4/0xd80 [ 295.968786][ T28] ? __sched_text_start+0x8/0x8 [ 295.977228][ T28] ? __mutex_trylock_common+0x8d/0x2e0 [ 295.987325][ T28] ? do_raw_spin_unlock+0x137/0x8a0 [ 295.995857][ T28] schedule+0xbf/0x180 [ 296.002481][ T28] schedule_preempt_disabled+0xf/0x20 [ 296.007881][ T28] __mutex_lock+0x6b9/0xd80 [ 296.015726][ T28] ? __mutex_lock+0x53c/0xd80 [ 296.022714][ T28] ? tun_chr_close+0x3a/0x1b0 [ 296.027411][ T28] ? mutex_lock_nested+0x10/0x10 [ 296.035831][ T28] tun_chr_close+0x3a/0x1b0 [ 296.042623][ T28] ? tun_chr_open+0x4d0/0x4d0 [ 296.047319][ T28] __fput+0x3b7/0x890 [ 296.054872][ T28] task_work_run+0x246/0x300 [ 296.063087][ T28] ? kasan_quarantine_put+0xd4/0x220 [ 296.068403][ T28] ? task_work_cancel+0x2b0/0x2b0 [ 296.076901][ T28] ? kmem_cache_free+0x292/0x510 [ 296.084138][ T28] ? do_exit+0xa6e/0x26a0 [ 296.088489][ T28] do_exit+0xa73/0x26a0 [ 296.105454][ T28] ? put_task_struct+0x80/0x80 [ 296.114531][ T28] ? get_signal+0x137e/0x17d0 [ 296.119234][ T28] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 296.130826][ T28] ? print_irqtrace_events+0x210/0x210 [ 296.136317][ T28] ? _raw_spin_lock_irq+0xdb/0x110 [ 296.145883][ T28] do_group_exit+0x202/0x2b0 [ 296.151837][ T28] ? _raw_spin_unlock_irq+0x1f/0x40 [ 296.157055][ T28] ? lockdep_hardirqs_on+0x94/0x130 [ 296.168099][ T28] get_signal+0x16f7/0x17d0 [ 296.174519][ T28] ? pipe_wait_writable+0x590/0x590 [ 296.179734][ T28] ? ptrace_notify+0x370/0x370 [ 296.189075][ T28] ? wake_bit_function+0x210/0x210 [ 296.195557][ T28] arch_do_signal_or_restart+0xb0/0x1a10 [ 296.208069][ T28] ? vfs_read+0x651/0xbe0 [ 296.213731][ T28] ? kernel_read+0x1f0/0x1f0 [ 296.218336][ T28] ? get_sigframe_size+0x10/0x10 [ 296.227774][ T28] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 296.235316][ T28] ? ksys_read+0x252/0x2c0 [ 296.239744][ T28] ? exit_to_user_mode_loop+0x39/0x100 [ 296.249574][ T28] exit_to_user_mode_loop+0x6a/0x100 [ 296.256270][ T28] exit_to_user_mode_prepare+0xb1/0x140 [ 296.267403][ T28] syscall_exit_to_user_mode+0x60/0x270 [ 296.274332][ T28] do_syscall_64+0x47/0xb0 [ 296.278765][ T28] ? clear_bhb_loop+0x45/0xa0 [ 296.288045][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 296.295277][ T28] RIP: 0033:0x7f244d67bc0c [ 296.299707][ T28] RSP: 002b:00007ffd542bad50 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 296.312577][ T28] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 00007f244d67bc0c [ 296.324797][ T28] RDX: 0000000000000038 RSI: 00007f244d7b0020 RDI: 00000000000000f9 [ 296.337692][ T28] RBP: 00007ffd542badcc R08: 0000000000000000 R09: 0079746972756365 [ 296.348192][ T28] R10: 00007ffd542ba710 R11: 0000000000000246 R12: 0000000000000032 [ 296.359825][ T28] R13: 0000000000024fab R14: 0000000000024f9e R15: 0000000000000003 [ 296.371757][ T28] [ 296.375215][ T28] INFO: task syz-executor.4:5421 blocked for more than 143 seconds. [ 296.386594][ T28] Not tainted 6.1.92-syzkaller #0 [ 296.394618][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 296.415600][ T28] task:syz-executor.4 state:D stack:27128 pid:5421 ppid:3571 flags:0x00004006 [ 296.428286][ T28] Call Trace: [ 296.435819][ T28] [ 296.438767][ T28] __schedule+0x142d/0x4550 [ 296.446659][ T28] ? __sched_text_start+0x8/0x8 [ 296.453902][ T28] ? __mutex_trylock_common+0x8d/0x2e0 [ 296.459395][ T28] ? do_raw_spin_unlock+0x137/0x8a0 [ 296.469688][ T28] schedule+0xbf/0x180 [ 296.476176][ T28] schedule_preempt_disabled+0xf/0x20 [ 296.484904][ T28] __mutex_lock+0x6b9/0xd80 [ 296.489698][ T28] ? __mutex_lock+0x53c/0xd80 [ 296.503501][ T28] ? rtnetlink_rcv_msg+0x7c1/0xff0 [ 296.508643][ T28] ? mutex_lock_nested+0x10/0x10 [ 296.516384][ T28] ? rtnetlink_rcv_msg