last executing test programs: 9.593145094s ago: executing program 0 (id=786): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000340), 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000440)=0x82, 0x49) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000480)="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", 0x271, 0xc000, 0x0, 0x0) 9.536358519s ago: executing program 0 (id=788): syz_usb_connect$cdc_ncm(0x0, 0x81, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000002000040255da1a440000102030109026f0002010020000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000724140100020008241c0800e8d9000424020f090581030002ff"], 0x0) 7.066132251s ago: executing program 4 (id=809): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0xdc3, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f0000000080)=""/7) 6.83624983s ago: executing program 4 (id=810): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') write$cgroup_subtree(r0, 0x0, 0x3) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x0, &(0x7f000001b180)=ANY=[], 0x6cc}, 0x0) syz_usb_connect(0x5, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = memfd_secret(0x80000) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r2) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000001a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) ioctl$F2FS_IOC_GET_FEATURES(0xffffffffffffffff, 0x8004f50c, &(0x7f00000002c0)) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82187201, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000020c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x3f0, 0x1f0, 0x94, 0x284, 0x284, 0x144, 0x35c, 0x35c, 0x35c, 0x35c, 0x35c, 0x6, 0x0, {[{{@ip={@rand_addr, @multicast1, 0x0, 0x0, 'vlan0\x00', 'veth1\x00'}, 0x0, 0x70, 0x94}, @unspec=@CHECKSUM={0x24}}, {{@uncond, 0x0, 0x70, 0xb0, 0x0, {0x100000000000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x4}}}, {{@ip={@rand_addr, @empty, 0x0, 0x0, 'dummy0\x00', 'ipvlan1\x00'}, 0x0, 0x70, 0xac}, @inet=@TPROXY1={0x3c, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@private2}}}, {{@uncond, 0x0, 0x70, 0x94}, @TTL={0x24}}, {{@ip={@empty, @multicast1, 0x0, 0x0, 'caif0\x00', 'rose0\x00'}, 0x0, 0xb4, 0xd8, 0x0, {}, [@common=@socket0={{0x20}}, @inet=@rpfilter={{0x24}}]}, @TTL={0x24}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x44c) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)) r4 = openat$mice(0xffffff9c, &(0x7f0000000000), 0x2c01) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x4e22, @multicast1}}, 0x0, 0x0, 0x2a, 0x0, "d6b06b3503c1feea3161c761bc9c92b84bf027742c278fe2ea8c1d1e2a4c193a8e149191a8f81a85c9faa8b8ff18aa79d50ba06c4ad144e6dfce2e60c13de3d698783a985939a378e06737b28a01e869"}, 0xd8) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) preadv(r5, 0x0, 0x0, 0x0, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001f40), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r6, &(0x7f0000002100)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}}}, 0xa0) syz_emit_ethernet(0x38, &(0x7f0000000300)=ANY=[@ANYRES8, @ANYRESHEX, @ANYBLOB="0ccc58476342563312aa01f9bb887a7c004d22ad84205fb37e5ee458f99edbc6986678c0f720cb213ee6c9591a15bbcd1cec6296a8f343f96677d1b0e0df56e64aae2e6e186faa665d08b0dce4b035f938ce5d7b6ff819598258506e720605a652797c030000001e217d6c6d208659c3e2d72ecb93fcedca37", @ANYRESOCT, @ANYRES16=r6, @ANYRES16=r6, @ANYBLOB="b0369817e0085f6f20838a4fa47b32efa3d884a7a74c648f19487926226a19b4caa456b692ded5f5cc546049", @ANYRESHEX=r0], 0x0) 6.284281105s ago: executing program 0 (id=813): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f00000000c0)=0xff, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex(0x0, 0xb, 0x200000, 0x0, &(0x7f0000048000), 0x2) newfstatat(0xffffffffffffff9c, &(0x7f0000003980)='./file0\x00', &(0x7f00000039c0), 0x0) syz_open_procfs(0x0, &(0x7f00000020c0)='net/wireless\x00') connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote}, 0x1c) syz_mount_image$squashfs(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f00000043c0)=ANY=[@ANYBLOB="003bfa093f92d25f4b42889f58b36282edd6f82c49e007ed49b9ed030962f330bd57af2a"], 0x2, 0x1a2, &(0x7f0000000440)="$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") llistxattr(&(0x7f0000000280)='./file1\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xaa}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x1b}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x2df, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) ioctl$FIDEDUPERANGE(r5, 0xc0189436, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYBLOB="000000000500"/28, @ANYRES32=r4, @ANYBLOB="00000000001000"/28]) socket$inet_tcp(0x2, 0x1, 0x0) 4.589075904s ago: executing program 4 (id=814): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000340), 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000440)=0x82, 0x49) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000480)="fbbf0b5044e308cb7bd572aa2b42e9678bcf30eff9f3aed14dc94a114bd2b45956aebe2b108a87e865501a5f9e0383611afdd3f8bac3d5cfd7772a3ab48d0ba4b600731e357e38716c449fae7c28548a4f2105f44b8fd9b33041270ae01f1a405e3f650fc3b0926d481c364fca00000000000000006d3a3ede9fc738b8d860161d5ddb5fcf3d09001117cdb9d055aa2d89fe3458720724853a876448d4a1fe9ef0569ad98a05ab5df763923b4e2c576e00000000000000000000000000000000002090666159e3075f7244cf4ec3d7814c0c934f44e200219e6dd7bc23397d5f2f2c76a5baddd0fd8c340362691ef226f7a0ac51b74b6be5ed6737948514cd466943d08eeb3895b80499da2b209da4f3ec5e3744ce3e863b0e04d0ec2f39edf50b6e08c4b47e448a35414763d687fbe3792ee15c5b9791310a346472723c100bf77a310b0ced8004b5ac6d48c40439f512e8ef34a53d65f55563f68136a577736ca5f6f66e01ef4ec2cdc8db34f6de50713adaa3f70189958263fddc1314f8a28ccdef6e1390c5fbaeadc3035d019f0dc75de307de6c0d010000000000000027083d1d5b4b013c503b863b560688d94de886b6dc73d5da2dfeff4b0100010000000000b480e4415ddca5657a5a8e3b111015499e952bb5e8d8f60de3d688df7802c6e8b27b31fac4e199038b79a3999920e634a5af162a9581b0e6647e410700246548234acacf9cb43ab332a37bbc926c39897395c974fda31536be523bf4260300730ae6136fecae5f0fa6ab2df8d98128b24589e3bbe5230e07dc5e0d65cc397e3f8204d48e59e8e294a6d7008ba8fba28cd5009fe1a7c569ce740078bf1c7389a6ba0f89257f0eac417aac0d2d89b05ee5dafa2f1d936c87264d077b2c0d5abdbc64ce94", 0x286, 0xc000, 0x0, 0x0) 4.51874803s ago: executing program 4 (id=816): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}}, 0x20) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, 0x0, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0xd}}, 0x14) setsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f00000000c0)={@remote}, 0x14) 4.412985229s ago: executing program 0 (id=818): socket$nl_route(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0, 0x33}], 0x1) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f0000000940)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TCSETSW2(0xffffffffffffffff, 0x5435, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045542, &(0x7f0000000140)=0x3) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000003c0)={0x0, 0x0}) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x8) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000001a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000900)=ANY=[], 0x7) socket$inet_udplite(0x2, 0x2, 0x88) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000001c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r3, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0], &(0x7f0000000280), 0x1, r5}) ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, &(0x7f0000000380)={0x401, 0x1, &(0x7f00000000c0)=[r5], &(0x7f0000000200), &(0x7f0000000300)=[r6], &(0x7f0000000580)}) syz_usb_connect(0x0, 0x56, &(0x7f0000002d80)={{0x12, 0x1, 0x0, 0xc9, 0xd1, 0xc4, 0x8, 0x499, 0x500a, 0xe7b7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x44, 0x2, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x97, 0x0, 0x1, 0xd, 0xd5, 0xce, 0x0, [@uac_as={[@format_type_i_continuous={0x8}]}], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x7, 0x5, "a3f6d2fb5b"}]}}]}}, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x41, 0x6, 0xcf, 0x0, [@uac_as={[@format_type_i_discrete={0x8}]}], [{{0x9, 0x5, 0x2, 0x3}}]}}]}}]}}, 0x0) openat$dir(0xffffff9c, 0x0, 0x21800, 0x0) 4.411851569s ago: executing program 4 (id=820): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000000800088d049585000000000001090224008100000000090400000103000000092100000001220b0009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="00000b0000000b006705000d6ffa"], 0x0, 0x0, 0x0, 0x0}, 0x0) 4.352400244s ago: executing program 3 (id=821): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000004882, 0x0) write(0xffffffffffffffff, &(0x7f0000000000), 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r1, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}]) ioctl$sock_ifreq(0xffffffffffffffff, 0x8929, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x40000141) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) 4.236198713s ago: executing program 1 (id=822): socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x3, 0x4, 0xfffffff9) socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) io_setup(0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000000)={0x1c, 0x0, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8}, @void}}}, 0x1c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000280)={0x0, 0x7, @value=0xd}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x30}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000001a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) keyctl$restrict_keyring(0x3, 0xfffffffffffffffb, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)="f94df812521399ef781ac9ccd72f712688c6b219a0614b7ac3de8bcaf74bebb3b0", 0x33fe0}], 0x1}, 0x0) 4.138826611s ago: executing program 3 (id=823): r0 = open(&(0x7f0000000080)='./bus\x00', 0x145842, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r4) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r5 = inotify_init1(0x0) fcntl$setown(r5, 0x8, 0xffffffffffffffff) fcntl$getownex(r5, 0x10, &(0x7f0000000140)={0x0, 0x0}) r7 = syz_open_procfs(r6, &(0x7f0000000600)='fd/4\x00') syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r0) ioctl$EXT4_IOC_GROUP_EXTEND(r7, 0x40086607, &(0x7f0000000040)) 4.079231666s ago: executing program 1 (id=824): syz_usb_connect$cdc_ncm(0x0, 0x81, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000002000040255da1a440000102030109026f0002010020000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000724140100020008241c0800e8d9000424020f090581030002ff000009"], 0x0) 3.218205786s ago: executing program 3 (id=826): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000340), 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000440)=0x82, 0x49) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000480)="fbbf0b5044e308cb7bd572aa2b42e9678bcf30eff9f3aed14dc94a114bd2b45956aebe2b108a87e865501a5f9e0383611afdd3f8bac3d5cfd7772a3ab48d0ba4b600731e357e38716c449fae7c28548a4f2105f44b8fd9b33041270ae01f1a405e3f650fc3b0926d481c364fca00000000000000006d3a3ede9fc738b8d860161d5ddb5fcf3d09001117cdb9d055aa2d89fe3458720724853a876448d4a1fe9ef0569ad98a05ab5df763923b4e2c576e00000000000000000000000000000000002090666159e3075f7244cf4ec3d7814c0c934f44e200219e6dd7bc23397d5f2f2c76a5baddd0fd8c340362691ef226f7a0ac51b74b6be5ed6737948514cd466943d08eeb3895b80499da2b209da4f3ec5e3744ce3e863b0e04d0ec2f39edf50b6e08c4b47e448a35414763d687fbe3792ee15c5b9791310a346472723c100bf77a310b0ced8004b5ac6d48c40439f512e8ef34a53d65f55563f68136a577736ca5f6f66e01ef4ec2cdc8db34f6de50713adaa3f70189958263fddc1314f8a28ccdef6e1390c5fbaeadc3035d019f0dc75de307de6c0d010000000000000027083d1d5b4b013c503b863b560688d94de886b6dc73d5da2dfeff4b0100010000000000b480e4415ddca5657a5a8e3b111015499e952bb5e8d8f60de3d688df7802c6e8b27b31fac4e199038b79a3999920e634a5af162a9581b0e6647e410700246548234acacf9cb43ab332a37bbc926c39897395c974fda31536be523bf4260300730ae6136fecae5f0fa6ab2df8d98128b24589e3bbe5230e07dc5e0d65cc397e3f8204d48e59e8e294a6d7008ba8fba28cd5009fe1a7c569ce740078bf1c7389a6ba0f89257f0eac417aac0d2d89b05ee5dafa2f1d936c87264d077b2c0d5abdbc64ce94", 0x286, 0xc000, 0x0, 0x0) 2.231139377s ago: executing program 3 (id=827): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r0, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f0000001e40)=@delrng={0x10, 0x14, 0x1}, 0x10}}, 0x0) 2.230556227s ago: executing program 2 (id=828): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f00000000c0)=0xff, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex(0x0, 0xb, 0x200000, 0x0, &(0x7f0000048000), 0x2) newfstatat(0xffffffffffffff9c, &(0x7f0000003980)='./file0\x00', &(0x7f00000039c0), 0x0) syz_open_procfs(0x0, &(0x7f00000020c0)='net/wireless\x00') connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote}, 0x1c) syz_mount_image$squashfs(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f00000043c0)=ANY=[@ANYBLOB="003bfa093f92d25f4b42889f58b36282edd6f82c49e007ed49b9ed030962f330bd57af2a"], 0x2, 0x1a2, &(0x7f0000000440)="$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") llistxattr(&(0x7f0000000280)='./file1\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xaa}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x1b}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x2df, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) ioctl$FIDEDUPERANGE(r5, 0xc0189436, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYBLOB="000000000500"/28, @ANYRES32=r4, @ANYBLOB="00000000001000"/28]) socket$inet_tcp(0x2, 0x1, 0x0) 2.164064473s ago: executing program 3 (id=829): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000a000000080000000200000fffffffff0e000000000000000380000007000000030000ca75ffffff0000000000000000"], &(0x7f0000000040)=""/249, 0x46, 0xf9, 0x6}, 0x20) 2.139906515s ago: executing program 3 (id=830): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d3e457201e040b40e73e000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) syz_open_dev$vim2m(0x0, 0x0, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) utimes(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000001a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000) r5 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x12, &(0x7f0000004900), 0x4) fcntl$dupfd(r4, 0x406, r4) symlinkat(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', r4, &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r6 = syz_open_dev$video(&(0x7f00000000c0), 0x7, 0x0) ioctl$VIDIOC_S_FMT(r6, 0xc0cc5605, &(0x7f0000000100)={0x1, @pix_mp={0x0, 0x0, 0xb5315258}}) ioctl$KVM_S390_VCPU_FAULT(r4, 0x4008ae52, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xa, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000fe93a222203200000000009500a5050000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x41100, 0x47, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x90) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000180)='\xbd\x11\x03\x93\xa9\x00\x00\b\xe3r\v\xee\xa2\x01\xc1\x96I\xdf\xed\r\xccoW\xc3\x88\xc6\xe9\xc6\xab\xf9\xd9\xb9K:\xb5\xcdZ\xbc\xc3\x01\x1e\xdaD\xa4\xd2v \xd8Y\x94\xd8]mTar\xee\x85\xed\xfd\x1f\x1e[\xe7u>\x94\x16\x89\x8cv\xe4\x89\xf3\n\xb8\x1f\x89\xfc\"\x1a\xb2}\xa5;7\x17\x8d\xff\xc1o\xf0,\x90~<\x03S\xe2\x9f-\x11\x93\r?\xf4|\xe8_\xc5NK\xa6\xfa\x02\xc4W\x17\x96\xe7Z\x18\xb1\x93\xe8\x1c)%J\x98 \x9f[\xb6|\xf1s|x\xb9\f\xa3[\xe3\xb7\x9b5\x92\xeb\x93|d\xc7y\x80\xe2\xcf\xa53\x067\xecH#\xe3\xb1\xeaM+r\xb4\xb4V]\x93[~\xb0\xa9:\xf9M+\xa9\xdd}[\xda\xbd\xea\x86^\xd6\xd0\x8b\xb5q\x8e\x8bN\xcc\x01\x84\xab\xf3j\x1a\xad\xa2a\xd9\xf8\x9f\xe2va\xa4yG\xaa\x01\xeb\xf6\xe0)\xec') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x13, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000000000061115a000000000085000000210000009500000000000000"], 0x0, 0x2}, 0x90) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000580)=ANY=[@ANYBLOB="4c0000001300010000000000000000000000000030e4d745cb19f056162b619644132e4b1d500f3d", @ANYRESOCT=r3], 0x4c}}, 0x800) 1.309297572s ago: executing program 1 (id=831): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}}, 0x20) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, 0x0, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0xd}}, 0x14) setsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f00000000c0)={@remote}, 0x14) 1.265194166s ago: executing program 4 (id=832): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_connect$uac1(0x0, 0xae, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) 1.242753928s ago: executing program 1 (id=833): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x6, &(0x7f0000000700)=ANY=[@ANYBLOB="05000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x90) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x26e1, 0x0) close(r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000001bc0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000900007b8af8ff00000000bfa200000000000007020000faffffffb703000008000000b7040000000000008500000003000000850000005000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000700), &(0x7f0000000740)='_', 0x40, r0}, 0x38) 1.22069502s ago: executing program 1 (id=834): close(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000300)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="0500"/14, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r4}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 1.123953168s ago: executing program 2 (id=835): bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x0, 0x3}, 0x48) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0xf56, 0x0, [{0x0, 0xfe}, {}, {}, {0x0, 0x35}, {}, {}, {}, {0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {0x4, 0x4}]}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.013015647s ago: executing program 1 (id=836): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x20040a, &(0x7f00000001c0)={[{@grpjquota}, {@errors_continue}, {@abort}, {@bsdgroups}]}, 0x12, 0x51a, &(0x7f0000001200)="$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") socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) mount$binder(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000340), 0x10000, &(0x7f0000000380)={[{@max={'max', 0x3d, 0x1}}, {@max={'max', 0x3d, 0x4}}, {}], [{@flag='dirsync'}]}) 999.167068ms ago: executing program 2 (id=837): r0 = open(&(0x7f0000000080)='./bus\x00', 0x145842, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r2) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000140)={0x0, 0x0}) r5 = syz_open_procfs(r4, &(0x7f0000000600)='fd/4\x00') syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r0) ioctl$EXT4_IOC_GROUP_EXTEND(r5, 0x40086607, &(0x7f0000000040)) 957.427252ms ago: executing program 2 (id=838): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000340), 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000440)=0x82, 0x49) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000480)="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", 0x290, 0xc000, 0x0, 0x0) 888.998217ms ago: executing program 2 (id=839): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f00000000c0)=0xff, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000020c0)='net/wireless\x00') preadv(r4, &(0x7f0000001540)=[{&(0x7f0000000000)=""/100, 0x64}, {&(0x7f0000001600)=""/171, 0xab}, {&(0x7f0000000140)=""/88, 0x58}], 0x3, 0x0, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) 888.804457ms ago: executing program 0 (id=840): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000a000000080000000200000fffffffff0e000000000000000380000007000000030000ca75ffffff0000000000000000"], &(0x7f0000000040)=""/249, 0x46, 0xf9, 0x6}, 0x20) 709.229641ms ago: executing program 0 (id=841): pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="1302000000000000feff02000000580001"], 0x6c}}, 0x0) splice(r0, 0x0, r2, 0x0, 0x83b1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000002400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f0000000100)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f00000000c0), 0x12) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r8, &(0x7f00000003c0), 0x10) sendmsg$can_bcm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[], 0x80}, 0x1, 0x0, 0x0, 0x40080}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r10, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) pidfd_getfd(0xffffffffffffffff, r9, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x3b) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_CLIENT(r12, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)={0x28, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r9, 0x0, 0x1) 0s ago: executing program 2 (id=842): syz_usb_connect$cdc_ncm(0x0, 0x81, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000002000040255da1a440000102030109026f0002010020000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000724140100020008241c0800e8d9000424020f090581030002ff000009"], 0x0) kernel console output (not intermixed with test programs): 0 [ 97.344155][ T3768] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 97.377786][ T3768] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 97.411702][ T4448] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.436535][ T21] usb 5-1: USB disconnect, device number 6 [ 97.493277][ T4579] device veth3 entered promiscuous mode [ 97.508274][ T4583] netlink: 28 bytes leftover after parsing attributes in process `syz.4.237'. [ 97.518343][ T3768] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 97.532581][ T3768] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 97.559483][ T3768] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.566662][ T3768] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.612217][ T3768] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 97.631199][ T3768] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 97.650276][ T3768] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.657392][ T3768] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.736289][ T4474] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.899023][ T3768] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 97.914136][ T3768] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 97.990454][ T7] Bluetooth: hci2: command 0x040f tx timeout [ 98.005197][ T3750] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 98.019193][ T3750] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 98.052037][ T3612] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 98.058496][ T3750] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 98.076223][ T3750] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 98.089926][ T3750] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 98.121618][ T4604] loop1: detected capacity change from 0 to 512 [ 98.122248][ T3750] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 98.146717][ T3750] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 98.159685][ T3750] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 98.195047][ T4474] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.217060][ T4604] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodelalloc,grpid,auto_da_alloc,,errors=continue. Quota mode: writeback. [ 98.242915][ T4448] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 98.262346][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 98.270310][ T3768] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 98.287375][ T4604] ext4 filesystem being mounted at /61/file1 supports timestamps until 2038 (0x7fffffff) [ 98.291882][ T3612] usb 1-1: Using ep0 maxpacket: 16 [ 98.304114][ T3768] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 98.350832][ T4474] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.422543][ T3612] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 98.446015][ T3612] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 98.476680][ T3612] usb 1-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 98.575251][ T4474] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 98.594543][ T4474] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 98.626717][ T3768] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 98.658531][ T3768] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 98.668131][ T4474] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 98.672086][ T3612] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 98.686228][ T4474] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 98.699662][ T4448] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.708454][ T3612] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.728598][ T3612] usb 1-1: Product: syz [ 98.735335][ T3612] usb 1-1: Manufacturer: syz [ 98.741278][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 98.756241][ T3612] usb 1-1: SerialNumber: syz [ 98.765526][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 98.792688][ T21] Bluetooth: hci4: command 0x040f tx timeout [ 98.849778][ T1400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 98.873371][ T1400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 98.887485][ T4620] loop4: detected capacity change from 0 to 128 [ 98.892780][ T1400] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 98.902808][ T1400] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 98.924581][ T4448] device veth0_vlan entered promiscuous mode [ 98.941994][ T3688] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 98.965344][ T4448] device veth1_vlan entered promiscuous mode [ 98.996775][ T26] audit: type=1800 audit(1724208361.356:3): pid=4620 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.248" name="bus" dev="loop4" ino=1048596 res=0 errno=0 [ 99.002655][ T4474] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.041614][ T4588] loop0: detected capacity change from 0 to 1024 [ 99.067645][ T4474] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.083921][ T3768] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 99.142351][ T3768] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 99.157175][ T3768] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 99.184085][ T3768] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 99.184785][ T4622] loop4: detected capacity change from 0 to 512 [ 99.206402][ T4448] device veth0_macvtap entered promiscuous mode [ 99.235901][ T3768] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 99.245232][ T3612] usb 1-1: USB disconnect, device number 4 [ 99.245765][ T3768] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 99.265780][ T3768] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 99.279592][ T3768] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.286677][ T3768] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.295832][ T4448] device veth1_macvtap entered promiscuous mode [ 99.302127][ T3688] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 99.320664][ T3688] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 99.329018][ T4448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.353904][ T4448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.356913][ T3695] udevd[3695]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 99.373997][ T4448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.382786][ T3688] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 99.400023][ T3688] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.402011][ T4622] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 99.410650][ T3688] usb 2-1: config 0 descriptor?? [ 99.424326][ T4448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.434620][ T4614] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 99.442917][ T4622] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 99.449839][ T4448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.451038][ T4622] System zones: [ 99.463451][ T3688] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 99.477084][ T4622] 0-1, 15-15, 18-18, 34-34 [ 99.482582][ T4622] EXT4-fs (loop4): orphan cleanup on readonly fs [ 99.486735][ T4448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.489214][ T4622] Quota error (device loop4): v2_read_header: Failed header read: expected=8 got=0 [ 99.499430][ T4448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.508842][ T4622] EXT4-fs warning (device loop4): ext4_enable_quotas:6431: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 99.532686][ T4448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.536756][ T4622] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 99.551022][ T4622] EXT4-fs error (device loop4): ext4_orphan_get:1423: comm syz.4.249: bad orphan inode 16 [ 99.552073][ T4448] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.562667][ T4622] ext4_test_bit(bit=15, block=18) = 1 [ 99.582063][ T3768] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 99.599853][ T3768] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 99.607409][ T4622] is_bad_inode(inode)=0 [ 99.611634][ T4622] NEXT_ORPHAN(inode)=0 [ 99.622421][ T3768] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 99.637409][ T4622] max_ino=32 [ 99.640667][ T4622] i_nlink=2 [ 99.647100][ T3768] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 99.661524][ T4622] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 99.678071][ T3768] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.685356][ T3768] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.700512][ T3768] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 99.710435][ T3768] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 99.719462][ T3768] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 99.730914][ T3768] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 99.740591][ T3768] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 99.750470][ T3768] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 99.766357][ T3768] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 99.782975][ T4448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.795311][ T4448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.808616][ T4448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.820399][ T4448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.831044][ T4448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.872253][ T4448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.883789][ T4448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.894984][ T4448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.916110][ T4448] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.922214][ T4635] loop4: detected capacity change from 0 to 512 [ 99.952462][ T3768] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 99.970489][ T3768] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 99.989881][ T3768] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 100.009795][ T3768] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 100.036782][ T3768] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 100.047518][ T3768] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 100.056320][ T4635] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodelalloc,grpid,auto_da_alloc,,errors=continue. Quota mode: writeback. [ 100.057606][ T3768] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 100.080137][ T3612] Bluetooth: hci2: command 0x0419 tx timeout [ 100.085847][ T4635] ext4 filesystem being mounted at /38/file1 supports timestamps until 2038 (0x7fffffff) [ 100.091686][ T3768] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 100.109317][ T4448] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.122452][ T4448] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.131611][ T4448] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.140945][ T4448] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.154087][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 100.299853][ T1400] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.356369][ T1400] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.470658][ T3773] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 100.499823][ T3774] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.513104][ T3774] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.542711][ T3773] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 100.571949][ T3688] usb 2-1: USB disconnect, device number 6 [ 100.668988][ T3774] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 100.680572][ T3774] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 100.718059][ T4664] netlink: 12 bytes leftover after parsing attributes in process `syz.1.261'. [ 100.741282][ T4474] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.790923][ T3750] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 100.804850][ T3750] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 100.835600][ T3750] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 100.845192][ T3750] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 100.857586][ T4474] device veth0_vlan entered promiscuous mode [ 100.865074][ T3615] Bluetooth: hci4: command 0x0419 tx timeout [ 100.872186][ T13] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 100.877509][ T4474] device veth1_vlan entered promiscuous mode [ 100.888811][ T3750] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 100.897027][ T3750] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 100.905066][ T3750] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 100.932255][ T3750] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 100.940556][ T3750] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 100.952556][ T3750] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 100.968592][ T4474] device veth0_macvtap entered promiscuous mode [ 100.985540][ T4474] device veth1_macvtap entered promiscuous mode [ 100.999838][ T4474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.010905][ T4474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.021050][ T4474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.032391][ T4474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.043608][ T4474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.055027][ T4474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.065677][ T4474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.078432][ T4474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.088633][ T4474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.121179][ T4474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.135363][ T4474] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.143267][ T13] usb 1-1: Using ep0 maxpacket: 16 [ 101.158903][ T4474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.191905][ T4474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.202694][ T4474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.214577][ T4474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.226951][ T4474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.240699][ T4474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.255042][ T4474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.267655][ T4474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.280117][ T13] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 101.280780][ T4474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.291624][ T13] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 101.310136][ T4474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.312311][ T13] usb 1-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 101.342504][ T4474] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.357233][ T3750] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 101.372298][ T3750] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 101.384044][ T3750] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 101.388117][ T4673] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 101.394084][ T3750] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 101.460824][ T4474] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.471099][ T4474] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.480651][ T4474] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.491619][ T4474] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.508541][ T4675] loop1: detected capacity change from 0 to 512 [ 101.532136][ T13] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 101.555349][ T13] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.572366][ T13] usb 1-1: Product: syz [ 101.576976][ T13] usb 1-1: Manufacturer: syz [ 101.582149][ T13] usb 1-1: SerialNumber: syz [ 101.682836][ T4675] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodelalloc,grpid,auto_da_alloc,,errors=continue. Quota mode: writeback. [ 101.697603][ T4675] ext4 filesystem being mounted at /67/file1 supports timestamps until 2038 (0x7fffffff) [ 101.794720][ T1400] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.805570][ T1400] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.827152][ T3774] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 101.873473][ T4656] loop0: detected capacity change from 0 to 1024 [ 101.914159][ T3768] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.928708][ T3628] device hsr_slave_0 left promiscuous mode [ 101.943319][ T3628] device hsr_slave_1 left promiscuous mode [ 101.943780][ T3768] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.988414][ T3628] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.018062][ T3628] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 102.034410][ T3628] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.062018][ T3628] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 102.078657][ T3628] device bridge_slave_1 left promiscuous mode [ 102.085876][ T3628] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.113865][ T13] usb 1-1: USB disconnect, device number 5 [ 102.143158][ T3628] device bridge_slave_0 left promiscuous mode [ 102.149996][ T3628] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.181337][ T3695] udevd[3695]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 102.201455][ T3628] device veth1_macvtap left promiscuous mode [ 102.212002][ T3628] device veth0_macvtap left promiscuous mode [ 102.222243][ T3628] device veth1_vlan left promiscuous mode [ 102.229792][ T3628] device veth0_vlan left promiscuous mode [ 102.580283][ T4682] loop0: detected capacity change from 0 to 256 [ 102.697077][ T4682] FAT-fs (loop0): Directory bread(block 64) failed [ 102.706160][ T4682] FAT-fs (loop0): Directory bread(block 65) failed [ 102.714945][ T4682] FAT-fs (loop0): Directory bread(block 66) failed [ 102.723976][ T4682] FAT-fs (loop0): Directory bread(block 67) failed [ 102.731310][ T4682] FAT-fs (loop0): Directory bread(block 68) failed [ 102.739473][ T4682] FAT-fs (loop0): Directory bread(block 69) failed [ 102.750437][ T4682] FAT-fs (loop0): Directory bread(block 70) failed [ 102.757920][ T4682] FAT-fs (loop0): Directory bread(block 71) failed [ 102.766338][ T4682] FAT-fs (loop0): Directory bread(block 72) failed [ 102.774402][ T4682] FAT-fs (loop0): Directory bread(block 73) failed [ 102.920611][ T3628] team0 (unregistering): Port device team_slave_1 removed [ 102.960997][ T3628] team0 (unregistering): Port device team_slave_0 removed [ 102.988606][ T3628] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 103.017384][ T3628] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 103.181239][ T3628] bond0 (unregistering): Released all slaves [ 103.257963][ T1400] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 104.181932][ T1074] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 104.251671][ T4701] loop3: detected capacity change from 0 to 512 [ 104.294942][ T4703] loop0: detected capacity change from 0 to 512 [ 104.450356][ T4703] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodelalloc,grpid,auto_da_alloc,,errors=continue. Quota mode: writeback. [ 104.478575][ T4703] ext4 filesystem being mounted at /73/file1 supports timestamps until 2038 (0x7fffffff) [ 104.573084][ T4701] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpjquota=,errors=continue,abort,bsdgroups,,errors=continue. Quota mode: writeback. [ 104.599895][ T4701] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038 (0x7fffffff) [ 104.632659][ T1074] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 104.829454][ T1074] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 104.862409][ T1074] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 104.887311][ T1074] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.949414][ T1074] usb 5-1: config 0 descriptor?? [ 104.992347][ T4686] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 105.017623][ T1074] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 105.172466][ T4716] loop0: detected capacity change from 0 to 8 [ 105.486608][ T4716] SQUASHFS error: Failed to read block 0x1ec: -5 [ 105.493220][ T4716] SQUASHFS error: Unable to read metadata cache entry [1ea] [ 105.817917][ T4718] loop2: detected capacity change from 0 to 512 [ 105.953684][ T4718] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=2802c018, mo2=0002] [ 105.972006][ T4718] System zones: 0-2, 18-18, 34-35 [ 105.993453][ T4718] EXT4-fs (loop2): mounted filesystem without journal. Opts: lazytime,noinit_itable,debug,,errors=continue. Quota mode: writeback. [ 106.036907][ T4718] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038 (0x7fffffff) [ 106.048035][ T4731] loop0: detected capacity change from 0 to 512 [ 106.166543][ T4733] loop3: detected capacity change from 0 to 512 [ 106.185417][ T4718] EXT4-fs error (device loop2): ext4_add_entry:2484: inode #2: comm syz.2.276: Directory hole found for htree leaf block 0 [ 106.235375][ T4733] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 106.255290][ T4731] EXT4-fs (loop0): 1 orphan inode deleted [ 106.271112][ T4731] EXT4-fs (loop0): mounted filesystem without journal. Opts: resgid=0x000000000000ee00,grpquota,noblock_validity,init_itable,stripe=0x000000000000002e,resgid=0x0000000000000000,sysvgroups,norecovery,usrquota,,errors=continue. Quota mode: writeback. [ 106.302178][ T1074] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 106.306617][ T4731] ext4 filesystem being mounted at /76/file1 supports timestamps until 2038 (0x7fffffff) [ 106.311628][ T4733] ext4 filesystem being mounted at /2/bus supports timestamps until 2038 (0x7fffffff) [ 106.449598][ T3615] usb 5-1: USB disconnect, device number 7 [ 107.283815][ T4748] loop4: detected capacity change from 0 to 512 [ 107.402416][ T1074] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 107.422693][ T4748] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodelalloc,grpid,auto_da_alloc,,errors=continue. Quota mode: writeback. [ 107.467862][ T1074] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 107.532017][ T4748] ext4 filesystem being mounted at /42/file1 supports timestamps until 2038 (0x7fffffff) [ 107.561922][ T1074] usb 2-1: config 1 interface 1 has no altsetting 0 [ 107.812659][ T1074] usb 2-1: New USB device found, idVendor=5d25, idProduct=a4a1, bcdDevice= 0.40 [ 107.840197][ T1074] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.861143][ T1074] usb 2-1: Product: syz [ 107.875977][ T1074] usb 2-1: Manufacturer: syz [ 107.892493][ T1074] usb 2-1: SerialNumber: syz [ 107.902183][ T7] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 108.179805][ T4766] loop4: detected capacity change from 0 to 1024 [ 108.192141][ T1074] usb 2-1: selecting invalid altsetting 0 [ 108.198025][ T7] usb 3-1: Using ep0 maxpacket: 16 [ 108.205980][ T1074] usb 2-1: selecting invalid altsetting 0 [ 108.218007][ T1074] cdc_ncm 2-1:1.0: bind() failure [ 108.229789][ T1074] usb 2-1: selecting invalid altsetting 0 [ 108.246605][ T1074] usbtest: probe of 2-1:1.1 failed with error -22 [ 108.258831][ T1074] usb 2-1: USB disconnect, device number 7 [ 108.309538][ T4766] EXT4-fs (loop4): Ignoring removed orlov option [ 108.329876][ T4768] loop0: detected capacity change from 0 to 512 [ 108.349948][ T4766] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 108.358086][ T7] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 108.369975][ T7] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 108.381104][ T7] usb 3-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 108.423303][ T4768] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpjquota=,errors=continue,abort,bsdgroups,,errors=continue. Quota mode: writeback. [ 108.461742][ T4766] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 108.485913][ T4768] ext4 filesystem being mounted at /78/file0 supports timestamps until 2038 (0x7fffffff) [ 108.752273][ T7] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 109.034650][ T26] audit: type=1800 audit(1724208371.396:4): pid=4775 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.290" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 109.056776][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.088930][ T7] usb 3-1: Product: syz [ 109.121551][ T7] usb 3-1: Manufacturer: syz [ 109.148437][ T7] usb 3-1: SerialNumber: syz [ 109.712022][ T7] usb 3-1: USB disconnect, device number 2 [ 109.771888][ T1074] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 109.796317][ T4790] loop0: detected capacity change from 0 to 256 [ 109.811483][ T4790] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011fbe, chksum : 0xeb6f636c, utbl_chksum : 0xe619d30d) [ 109.844995][ T4790] attempt to access beyond end of device [ 109.844995][ T4790] loop0: rw=524288, want=408, limit=256 [ 109.858608][ T4790] attempt to access beyond end of device [ 109.858608][ T4790] loop0: rw=524288, want=664, limit=256 [ 109.869924][ T4790] attempt to access beyond end of device [ 109.869924][ T4790] loop0: rw=0, want=288, limit=256 [ 109.880953][ T26] audit: type=1800 audit(1724208372.236:5): pid=4790 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.297" name="file1" dev="loop0" ino=1048605 res=0 errno=0 [ 109.881645][ T4791] process 'syz.0.297' launched './file1' with NULL argv: empty string added [ 109.988195][ T4793] loop0: detected capacity change from 0 to 512 [ 110.101564][ T4793] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodelalloc,grpid,auto_da_alloc,,errors=continue. Quota mode: writeback. [ 110.131772][ T4793] ext4 filesystem being mounted at /81/file1 supports timestamps until 2038 (0x7fffffff) [ 110.208032][ T1074] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 110.219375][ T1074] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 110.233189][ T1074] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 110.242700][ T1074] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.269176][ T1074] usb 2-1: config 0 descriptor?? [ 110.370977][ T4806] loop4: detected capacity change from 0 to 256 [ 110.372181][ T4783] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 110.453676][ T4808] loop2: detected capacity change from 0 to 8 [ 110.633251][ T4808] SQUASHFS error: Failed to read block 0x1ec: -5 [ 110.639740][ T4808] SQUASHFS error: Unable to read metadata cache entry [1ea] [ 111.036280][ T1074] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 111.235442][ T4816] loop0: detected capacity change from 0 to 1024 [ 111.289511][ T4818] loop2: detected capacity change from 0 to 512 [ 111.387768][ T4818] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpjquota=,errors=continue,abort,bsdgroups,,errors=continue. Quota mode: writeback. [ 111.426513][ T4818] ext4 filesystem being mounted at /9/file0 supports timestamps until 2038 (0x7fffffff) [ 111.625383][ T3612] usb 2-1: USB disconnect, device number 8 [ 111.631276][ T4835] loop4: detected capacity change from 0 to 512 [ 111.773358][ T4838] loop1: detected capacity change from 0 to 1764 [ 112.763841][ T4835] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodelalloc,grpid,auto_da_alloc,,errors=continue. Quota mode: writeback. [ 112.798134][ T4835] ext4 filesystem being mounted at /49/file1 supports timestamps until 2038 (0x7fffffff) [ 113.242959][ T4853] loop0: detected capacity change from 0 to 8 [ 113.513690][ T4853] SQUASHFS error: Failed to read block 0x1ec: -5 [ 113.520187][ T4853] SQUASHFS error: Unable to read metadata cache entry [1ea] [ 113.716575][ T4862] loop2: detected capacity change from 0 to 256 [ 113.725190][ T4865] loop1: detected capacity change from 0 to 1024 [ 113.820622][ T4860] loop1: detected capacity change from 0 to 128 [ 113.915717][ T4880] loop4: detected capacity change from 0 to 512 [ 113.937319][ T4878] loop2: detected capacity change from 0 to 1024 [ 114.028915][ T4880] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodelalloc,grpid,auto_da_alloc,,errors=continue. Quota mode: writeback. [ 114.072751][ T4880] ext4 filesystem being mounted at /53/file1 supports timestamps until 2038 (0x7fffffff) [ 114.151952][ T24] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 114.367040][ C1] net_ratelimit: 4 callbacks suppressed [ 114.367058][ C1] eth0: bad gso: type: 1, size: 1408 [ 114.522221][ T24] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 114.563386][ T4901] loop4: detected capacity change from 0 to 1024 [ 114.580644][ T24] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 114.607949][ T4901] EXT4-fs (loop4): Ignoring removed nobh option [ 114.680932][ T4904] loop3: detected capacity change from 0 to 8 [ 114.978095][ T4901] EXT4-fs (loop4): mounted filesystem without journal. Opts: user_xattr,init_itable=0x0000000000000003,nobh,usrquota,inode_readahead_blks=0x0000000000010000,max_dir_size_kb=0x00000000000007b1,jqfmt=vfsv1,min_batch_time=0x000000000000088d,delalloc,bsdgroups,nojournal_checksum,,errors=continue. Quota mode: writeback. [ 115.204722][ T24] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 115.228995][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.256895][ T4911] netlink: 4 bytes leftover after parsing attributes in process `syz.1.336'. [ 115.268121][ T4902] SQUASHFS error: Failed to read block 0x1ec: -5 [ 115.274881][ T4902] SQUASHFS error: Unable to read metadata cache entry [1ea] [ 115.287090][ T24] usb 1-1: config 0 descriptor?? [ 115.313061][ T4875] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 115.336909][ T24] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 115.360205][ T4909] device veth3 entered promiscuous mode [ 115.429620][ T4913] loop1: detected capacity change from 0 to 256 [ 115.626421][ T4924] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 115.642451][ T4924] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 115.654721][ T4926] loop4: detected capacity change from 0 to 2048 [ 115.672685][ T4924] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 115.754871][ T4926] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 115.992374][ T4941] loop1: detected capacity change from 0 to 128 [ 116.042109][ T2988] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 116.082265][ T4941] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 116.098236][ T4941] ext4 filesystem being mounted at /82/mnt supports timestamps until 2038 (0x7fffffff) [ 116.161037][ T4946] loop4: detected capacity change from 0 to 1024 [ 116.213584][ T4946] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 116.241115][ T4941] fscrypt: Adiantum using implementation "adiantum(xchacha12-simd,aes-aesni,nhpoly1305-avx2)" [ 116.322313][ T1074] usb 1-1: USB disconnect, device number 6 [ 116.416919][ T4957] loop0: detected capacity change from 0 to 2048 [ 116.476445][ T4965] loop1: detected capacity change from 0 to 512 [ 116.490670][ T4957] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 116.492096][ T2988] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 116.518587][ T2988] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 116.547801][ T2988] usb 3-1: config 1 interface 1 has no altsetting 0 [ 116.582335][ T4965] EXT4-fs (loop1): 1 truncate cleaned up [ 116.588335][ T4965] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 116.610452][ T4965] EXT4-fs error (device loop1): ext4_add_entry:2484: inode #2: comm syz.1.355: Directory hole found for htree leaf block 0 [ 116.792293][ T2988] usb 3-1: New USB device found, idVendor=5d25, idProduct=a4a1, bcdDevice= 0.40 [ 116.821727][ T2988] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.963282][ T4977] EXT4-fs error (device loop1): ext4_add_entry:2484: inode #2: comm syz.1.355: Directory hole found for htree leaf block 0 [ 117.234824][ T4984] loop0: detected capacity change from 0 to 1024 [ 117.247439][ T2988] usb 3-1: Product: syz [ 117.251665][ T2988] usb 3-1: Manufacturer: syz [ 117.256563][ T2988] usb 3-1: SerialNumber: syz [ 117.329935][ T4990] loop1: detected capacity change from 0 to 256 [ 117.440646][ T4990] FAT-fs (loop1): Directory bread(block 64) failed [ 117.455762][ T4990] FAT-fs (loop1): Directory bread(block 65) failed [ 117.464506][ T4990] FAT-fs (loop1): Directory bread(block 66) failed [ 117.474001][ T4990] FAT-fs (loop1): Directory bread(block 67) failed [ 117.474119][ T4990] FAT-fs (loop1): Directory bread(block 68) failed [ 117.474148][ T4990] FAT-fs (loop1): Directory bread(block 69) failed [ 117.474210][ T4990] FAT-fs (loop1): Directory bread(block 70) failed [ 117.474237][ T4990] FAT-fs (loop1): Directory bread(block 71) failed [ 117.474297][ T4990] FAT-fs (loop1): Directory bread(block 72) failed [ 117.474324][ T4990] FAT-fs (loop1): Directory bread(block 73) failed [ 117.551896][ T24] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 117.552028][ T2988] usb 3-1: selecting invalid altsetting 0 [ 117.552054][ T2988] usb 3-1: selecting invalid altsetting 0 [ 117.552114][ T2988] cdc_ncm 3-1:1.0: bind() failure [ 117.555586][ T2988] usb 3-1: selecting invalid altsetting 0 [ 117.555615][ T2988] usbtest: probe of 3-1:1.1 failed with error -22 [ 117.569905][ T2988] usb 3-1: USB disconnect, device number 3 [ 117.704883][ T4997] kvm: emulating exchange as write [ 117.789129][ T5004] loop0: detected capacity change from 0 to 1024 [ 117.789129][ T5002] loop1: detected capacity change from 0 to 2048 [ 117.836931][ T5004] EXT4-fs (loop0): Ignoring removed orlov option [ 117.844200][ T5004] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 117.868470][ T5002] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 117.895846][ T5004] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 117.919652][ T24] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 117.932432][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 117.946144][ T24] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 117.955552][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.972308][ T24] usb 5-1: config 0 descriptor?? [ 118.032154][ T4986] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 118.053909][ T24] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 118.322888][ T3615] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 118.582025][ T3615] usb 2-1: Using ep0 maxpacket: 32 [ 118.784945][ T3615] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.849198][ T3615] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 119.008325][ T3615] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 119.033257][ T3615] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.054921][ T3615] usb 2-1: config 0 descriptor?? [ 119.100407][ T3615] hub 2-1:0.0: USB hub found [ 119.109123][ T5018] input: syz1 as /devices/virtual/input/input7 [ 119.145542][ T3612] usb 5-1: USB disconnect, device number 8 [ 119.200033][ T5018] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 119.238158][ T5029] loop2: detected capacity change from 0 to 256 [ 119.267348][ T5018] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 119.295070][ T5018] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 119.328416][ T5018] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 119.478278][ T5041] loop2: detected capacity change from 0 to 512 [ 119.809759][ T5041] EXT4-fs (loop2): 1 truncate cleaned up [ 119.835738][ T5041] EXT4-fs (loop2): mounted filesystem without journal. Opts: noauto_da_alloc,quota,noload,jqfmt=vfsold,,errors=continue. Quota mode: writeback. [ 120.059601][ T5032] A link change request failed with some changes committed already. Interface ip6gre0 may have been left with an inconsistent configuration, please check. [ 120.227557][ T3612] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 120.479088][ T4474] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 13: comm syz-executor: path /26/file0: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=196608, rec_len=0, size=1024 fake=0 [ 120.524690][ T4474] EXT4-fs error (device loop2): ext4_lookup:1856: inode #11: comm syz-executor: iget: Dir with htree data on filesystem without dir_index feature. [ 120.545274][ T4474] EXT4-fs error (device loop2): ext4_lookup:1856: inode #11: comm syz-executor: iget: Dir with htree data on filesystem without dir_index feature. [ 120.643522][ T5057] loop3: detected capacity change from 0 to 8 [ 120.722216][ T5057] SQUASHFS error: Failed to read block 0x1ec: -5 [ 120.728767][ T5057] SQUASHFS error: Unable to read metadata cache entry [1ea] [ 120.862149][ T3612] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 120.913166][ T3612] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 121.024122][ T1074] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 121.082891][ T3612] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 121.128664][ T3612] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 121.245421][ T3612] usb 5-1: SerialNumber: syz [ 121.342175][ T3615] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 121.402122][ T3628] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.409647][ T5061] loop3: detected capacity change from 0 to 512 [ 121.427021][ T5061] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 121.434664][ T5061] UDF-fs: Scanning with blocksize 512 failed [ 121.442178][ T3615] usbhid 2-1:0.0: can't add hid device: -71 [ 121.448402][ T3615] usbhid: probe of 2-1:0.0 failed with error -71 [ 121.451160][ T1074] usb 1-1: Using ep0 maxpacket: 16 [ 121.460409][ T5061] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 121.484324][ T5061] UDF-fs: Scanning with blocksize 1024 failed [ 121.495146][ T3628] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.497933][ T5061] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 121.527840][ T5061] UDF-fs: Scanning with blocksize 2048 failed [ 121.538911][ T5061] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 121.559260][ T3628] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.578168][ T5061] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 121.612049][ T1074] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 121.631871][ T1074] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 121.646439][ T3628] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.649886][ T1074] usb 1-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 121.690869][ T3615] usb 2-1: reset high-speed USB device number 9 using dummy_hcd [ 121.732024][ T3615] usb 2-1: device reset changed ep0 maxpacket size! [ 121.751756][ T3615] usb 2-1: USB disconnect, device number 9 [ 121.785699][ T3612] usb 5-1: 0:2 : does not exist [ 121.842149][ T1074] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 121.861441][ T1074] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.879883][ T1074] usb 1-1: Product: syz [ 121.890007][ T1074] usb 1-1: Manufacturer: syz [ 121.897238][ T1074] usb 1-1: SerialNumber: syz [ 122.006048][ T5063] chnl_net:caif_netlink_parms(): no params data found [ 122.038602][ T3612] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5) [ 122.095190][ T5063] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.102813][ T5063] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.111184][ T5063] device bridge_slave_0 entered promiscuous mode [ 122.132150][ T5063] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.139650][ T5063] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.147519][ T3615] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 122.157049][ T5063] device bridge_slave_1 entered promiscuous mode [ 122.201584][ T5063] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 122.222458][ T5063] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 122.272033][ T3612] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5) [ 122.288103][ T5063] team0: Port device team_slave_0 added [ 122.314819][ T3612] usb 5-1: USB disconnect, device number 9 [ 122.356391][ T5063] team0: Port device team_slave_1 added [ 122.414038][ T5063] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 122.420997][ T5063] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.427789][ T1074] usb 1-1: USB disconnect, device number 7 [ 122.471238][ T1789] usb 4-1: ezusb_ihex_firmware_download - request "keyspan/usa28.fw" failed [ 122.497614][ T1789] usb 4-1: failed to load firmware "keyspan/usa28.fw" [ 122.521261][ T1789] keyspan: probe of 4-1:0.0 failed with error -2 [ 122.528536][ T5063] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 122.548155][ T3615] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 122.588380][ T5063] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 122.595438][ T3615] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 122.637973][ T5063] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.666738][ T1789] usb 4-1: USB disconnect, device number 3 [ 122.681959][ T3615] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 122.712199][ T3615] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.749852][ T5063] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 122.766105][ T3615] usb 2-1: config 0 descriptor?? [ 122.782278][ T5059] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 122.804336][ T3615] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 122.839345][ T26] audit: type=1326 audit(1724208385.196:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5108 comm="syz.3.397" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f687425be79 code=0x0 [ 122.928959][ T5063] device hsr_slave_0 entered promiscuous mode [ 122.935851][ T5063] device hsr_slave_1 entered promiscuous mode [ 122.956565][ T5063] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 122.964819][ T5063] Cannot create hsr debugfs directory [ 123.177969][ T3628] device hsr_slave_0 left promiscuous mode [ 123.184598][ T3628] device hsr_slave_1 left promiscuous mode [ 123.191036][ T3628] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 123.211989][ T1789] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 123.243618][ T3628] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 123.349653][ T3628] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 123.437762][ T3628] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 123.471952][ T1789] usb 1-1: Using ep0 maxpacket: 32 [ 123.577863][ T3628] device bridge_slave_1 left promiscuous mode [ 123.592332][ T1789] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.670152][ T1789] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 123.705919][ T3628] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.843689][ T1789] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 123.873164][ T1789] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.890528][ T3689] Bluetooth: hci4: command 0x0409 tx timeout [ 123.908431][ T1789] usb 1-1: config 0 descriptor?? [ 123.937192][ T3628] device bridge_slave_0 left promiscuous mode [ 123.944269][ T3628] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.958061][ T3628] device veth1_macvtap left promiscuous mode [ 123.966452][ T1789] hub 1-1:0.0: USB hub found [ 123.974336][ T3628] device veth0_macvtap left promiscuous mode [ 123.980578][ T3628] device veth1_vlan left promiscuous mode [ 123.987480][ T3628] device veth0_vlan left promiscuous mode [ 125.058643][ T3628] team0 (unregistering): Port device team_slave_1 removed [ 125.076068][ T3628] team0 (unregistering): Port device team_slave_0 removed [ 125.091138][ T3628] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 125.107273][ T3628] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 125.228064][ T3628] bond0 (unregistering): Released all slaves [ 125.334862][ T5154] loop4: detected capacity change from 0 to 512 [ 125.354821][ T3615] usb 2-1: USB disconnect, device number 10 [ 125.473590][ T5154] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodelalloc,grpid,bsddf,,errors=continue. Quota mode: writeback. [ 125.547869][ T5154] ext4 filesystem being mounted at /76/file1 supports timestamps until 2038 (0x7fffffff) [ 125.755149][ T5063] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 125.778468][ T5063] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 125.788463][ T5063] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 125.799785][ T5063] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 125.975833][ T5063] 8021q: adding VLAN 0 to HW filter on device bond0 [ 125.985737][ T3615] Bluetooth: hci4: command 0x041b tx timeout [ 126.016482][ T1400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 126.032617][ T1400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 126.043631][ T5063] 8021q: adding VLAN 0 to HW filter on device team0 [ 126.078401][ T1400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 126.092601][ T1400] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 126.106949][ T1400] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.114070][ T1400] bridge0: port 1(bridge_slave_0) entered forwarding state [ 126.164093][ T1400] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 126.185857][ T1400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 126.211317][ T1400] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 126.249844][ T1400] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.257013][ T1400] bridge0: port 2(bridge_slave_1) entered forwarding state [ 126.288357][ T5181] loop1: detected capacity change from 0 to 128 [ 126.296288][ T1400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 126.316724][ T1400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 126.369891][ T1400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 126.381530][ T1400] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 126.431530][ T1400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 126.444634][ T5181] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 126.484696][ T1400] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 126.537296][ T5181] ext4 filesystem being mounted at /94/file0 supports timestamps until 2038 (0x7fffffff) [ 126.552659][ T1400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 126.561207][ T1400] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 126.570746][ T1400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 126.579675][ T1400] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 126.600698][ T5063] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 126.614072][ T1400] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 127.421925][ T1789] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 127.583430][ T5214] loop4: detected capacity change from 0 to 2048 [ 127.607918][ T1400] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 127.623417][ T1400] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 127.672676][ T1789] usbhid 1-1:0.0: can't add hid device: -71 [ 127.678657][ T1789] usbhid: probe of 1-1:0.0 failed with error -71 [ 127.780522][ T5210] loop0: detected capacity change from 0 to 1024 [ 127.819321][ T5063] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 128.088959][ T5215] loop1: detected capacity change from 0 to 256 [ 128.103758][ T3615] Bluetooth: hci4: command 0x040f tx timeout [ 128.111165][ T1789] usb 1-1: USB disconnect, device number 8 [ 128.130915][ T3771] loop4: p1 p2 p3 [ 128.203736][ T5214] loop4: p1 p2 p3 [ 128.224634][ T1400] hfsplus: b-tree write err: -5, ino 4 [ 128.337104][ T5215] exFAT-fs (loop1): failed to load alloc-bitmap [ 128.343472][ T5215] exFAT-fs (loop1): failed to recognize exfat type [ 128.374328][ T5063] device veth0_vlan entered promiscuous mode [ 128.407119][ T1400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 128.439992][ T1400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 130.136183][ T5225] sched: RT throttling activated [ 130.173021][ T3688] Bluetooth: hci4: command 0x0419 tx timeout [ 130.220364][ T1400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 130.274815][ T1400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 130.289621][ T5063] device veth1_vlan entered promiscuous mode [ 130.320678][ T5234] netlink: 416 bytes leftover after parsing attributes in process `syz.3.422'. [ 130.336677][ T1400] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 130.373386][ T1400] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 130.425193][ T5246] loop3: detected capacity change from 0 to 128 [ 130.435216][ T5237] loop1: detected capacity change from 0 to 512 [ 130.466195][ T5248] netlink: 416 bytes leftover after parsing attributes in process `syz.4.434'. [ 130.484979][ T3774] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 130.565332][ T3774] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 130.825917][ T5246] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 130.841769][ T5063] device veth0_macvtap entered promiscuous mode [ 130.881332][ T5237] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodelalloc,grpid,bsddf,,errors=continue. Quota mode: writeback. [ 131.020387][ T5246] ext4 filesystem being mounted at /25/file0 supports timestamps until 2038 (0x7fffffff) [ 131.152084][ T5237] ext4 filesystem being mounted at /96/file1 supports timestamps until 2038 (0x7fffffff) [ 131.157229][ T5063] device veth1_macvtap entered promiscuous mode [ 131.207919][ T5063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.221758][ T5063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.238660][ T5063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.249256][ T5063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.260406][ T5063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.276844][ T5262] loop4: detected capacity change from 0 to 128 [ 131.281548][ T5063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.293388][ T5063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.325932][ T5063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.359685][ T5063] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 131.417602][ T5262] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 131.434329][ T1400] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 131.434725][ T5262] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 131.446549][ T1400] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 131.476315][ T1400] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 131.528627][ T1400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 131.595432][ T5063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.631255][ T5063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.926807][ T5063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.072997][ T5063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.209897][ T5063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.299748][ T5063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.317441][ T5063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.341825][ T5063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.553216][ T5063] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 132.569085][ T3750] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 132.579140][ T3750] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 132.704582][ T1387] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.779244][ T1387] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.223125][ T5063] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.224657][ T5293] loop0: detected capacity change from 0 to 512 [ 133.288485][ T5063] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.357728][ T5063] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.371415][ T5063] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.395149][ T5299] loop4: detected capacity change from 0 to 128 [ 133.420403][ T5303] loop3: detected capacity change from 0 to 128 [ 133.722242][ T5293] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpjquota=,errors=continue,abort,bsdgroups,,errors=continue. Quota mode: writeback. [ 133.789592][ T5299] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 133.841128][ T5303] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 134.094355][ T5299] ext4 filesystem being mounted at /83/file0 supports timestamps until 2038 (0x7fffffff) [ 134.129225][ T5293] ext4 filesystem being mounted at /112/file0 supports timestamps until 2038 (0x7fffffff) [ 134.144013][ T5303] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 134.176822][ T3750] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.208640][ T3750] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.307116][ T3774] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 134.317404][ T3771] udevd[3771]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 134.332354][ T3695] udevd[3695]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 134.353745][ T4098] udevd[4098]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 134.397472][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.430014][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.508818][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 135.240183][ T5325] loop3: detected capacity change from 0 to 1764 [ 135.276456][ T3771] udevd[3771]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 135.299177][ T4098] udevd[4098]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 135.308055][ T3695] udevd[3695]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 135.720809][ T5341] loop2: detected capacity change from 0 to 512 [ 135.868402][ T5341] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodelalloc,grpid,bsddf,,errors=continue. Quota mode: writeback. [ 135.892089][ T13] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 135.918638][ T5341] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038 (0x7fffffff) [ 136.003491][ T5363] loop1: detected capacity change from 0 to 512 [ 136.013705][ T5363] EXT4-fs (loop1): Test dummy encryption mode enabled [ 136.097685][ T5363] EXT4-fs error (device loop1): ext4_fill_super:4840: inode #2: comm syz.1.449: casefold flag without casefold feature [ 136.157228][ T5363] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 136.161859][ T13] usb 5-1: Using ep0 maxpacket: 32 [ 136.198878][ T5363] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsv0,test_dummy_encryption,,errors=continue. Quota mode: none. [ 136.332097][ T13] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 136.360457][ T13] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 136.404462][ T13] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 136.434192][ T13] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.457608][ T5363] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 136.499343][ T13] usb 5-1: config 0 descriptor?? [ 136.505152][ T26] audit: type=1800 audit(1724208398.866:7): pid=5363 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.449" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 136.586071][ T13] hub 5-1:0.0: USB hub found [ 139.678639][ T13] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 140.453049][ T13] usbhid 5-1:0.0: can't add hid device: -71 [ 140.466222][ T13] usbhid: probe of 5-1:0.0 failed with error -71 [ 140.504682][ T5445] loop1: detected capacity change from 0 to 512 [ 140.536614][ T13] usb 5-1: USB disconnect, device number 10 [ 140.759986][ T5445] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpjquota=,errors=continue,abort,bsdgroups,,errors=continue. Quota mode: writeback. [ 140.797121][ T5445] ext4 filesystem being mounted at /113/file0 supports timestamps until 2038 (0x7fffffff) [ 140.861865][ T5458] loop4: detected capacity change from 0 to 512 [ 140.869078][ T3688] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 140.917129][ T5460] loop0: detected capacity change from 0 to 8 [ 141.063229][ T5460] SQUASHFS error: Failed to read block 0x1ec: -5 [ 141.069652][ T5460] SQUASHFS error: Unable to read metadata cache entry [1ea] [ 141.102062][ T3688] usb 3-1: device descriptor read/64, error -71 [ 141.161065][ T5458] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802e02c, mo2=0002] [ 141.180507][ T5458] EXT4-fs error (device loop4): __ext4_iget:4872: inode #11: block 393240: comm syz.4.475: invalid block [ 141.196085][ T5458] EXT4-fs (loop4): Remounting filesystem read-only [ 141.203058][ T5458] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.475: couldn't read orphan inode 11 (err -117) [ 141.222188][ T5458] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,min_batch_time=0x0000000000000001,errors=remount-ro,sb=0x0000000000000008,lazytime. Quota mode: none. [ 141.451951][ T3688] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 141.762181][ T3688] usb 3-1: device descriptor read/64, error -71 [ 141.892783][ T3688] usb usb3-port1: attempt power cycle [ 142.372424][ T5467] loop0: detected capacity change from 0 to 1024 [ 142.391919][ T3688] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 142.473244][ T5470] loop3: detected capacity change from 0 to 512 [ 142.512116][ T3688] usb 3-1: device descriptor read/8, error -71 [ 142.576862][ T5470] syz.3.480 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 142.579144][ T144] hfsplus: b-tree write err: -5, ino 4 [ 142.628593][ T5470] loop3: detected capacity change from 0 to 128 [ 142.947227][ T5476] loop0: detected capacity change from 0 to 8 [ 142.961587][ T3688] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 143.570503][ T5474] SQUASHFS error: Failed to read block 0x1ec: -5 [ 143.576875][ T5474] SQUASHFS error: Unable to read metadata cache entry [1ea] [ 143.741996][ T5457] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 361: padding at end of block bitmap is not set [ 143.955168][ T3688] usb 3-1: device not accepting address 7, error -71 [ 143.967005][ T3688] usb usb3-port1: unable to enumerate USB device [ 144.419655][ T5469] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 144.539093][ T5457] EXT4-fs (loop4): Remounting filesystem read-only [ 145.527483][ T5497] loop2: detected capacity change from 0 to 8 [ 145.601927][ T3689] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 145.841965][ T3689] usb 1-1: Using ep0 maxpacket: 16 [ 145.962322][ T3689] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 145.989458][ T3689] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 146.041400][ T3689] usb 1-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 146.164604][ T5496] SQUASHFS error: Failed to read block 0x1ec: -5 [ 146.167718][ T5499] capability: warning: `syz.4.490' uses 32-bit capabilities (legacy support in use) [ 146.171096][ T5496] SQUASHFS error: Unable to read metadata cache entry [1ea] [ 146.262016][ T3689] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 146.286407][ T3689] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.305027][ T5505] loop1: detected capacity change from 0 to 256 [ 146.314318][ T3689] usb 1-1: Product: syz [ 146.318622][ T3689] usb 1-1: Manufacturer: syz [ 146.325166][ T3689] usb 1-1: SerialNumber: syz [ 146.479137][ T5505] FAT-fs (loop1): Directory bread(block 64) failed [ 146.489432][ T5505] FAT-fs (loop1): Directory bread(block 65) failed [ 146.497939][ T5505] FAT-fs (loop1): Directory bread(block 66) failed [ 146.505628][ T5505] FAT-fs (loop1): Directory bread(block 67) failed [ 146.516847][ T5505] FAT-fs (loop1): Directory bread(block 68) failed [ 146.523942][ T5505] FAT-fs (loop1): Directory bread(block 69) failed [ 146.530649][ T5505] FAT-fs (loop1): Directory bread(block 70) failed [ 146.542996][ T5505] FAT-fs (loop1): Directory bread(block 71) failed [ 146.549623][ T5505] FAT-fs (loop1): Directory bread(block 72) failed [ 146.557782][ T5505] FAT-fs (loop1): Directory bread(block 73) failed [ 146.635325][ T5511] loop4: detected capacity change from 0 to 8 [ 146.649110][ T2988] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 148.216647][ T3689] usb 1-1: USB disconnect, device number 9 [ 148.358473][ T5508] SQUASHFS error: Failed to read block 0x1ec: -5 [ 148.365337][ T5508] SQUASHFS error: Unable to read metadata cache entry [1ea] [ 148.454706][ T3771] udevd[3771]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 149.111101][ T2988] usb 4-1: device descriptor read/64, error -71 [ 149.326657][ T5535] loop0: detected capacity change from 0 to 256 [ 149.472927][ T5528] loop2: detected capacity change from 0 to 512 [ 150.492894][ T5540] loop3: detected capacity change from 0 to 8 [ 151.046176][ T5538] SQUASHFS error: Failed to read block 0x1ec: -5 [ 151.053613][ T5538] SQUASHFS error: Unable to read metadata cache entry [1ea] [ 151.101919][ T5528] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpjquota=,errors=continue,abort,bsdgroups,,errors=continue. Quota mode: writeback. [ 151.137827][ T5528] ext4 filesystem being mounted at /17/file0 supports timestamps until 2038 (0x7fffffff) [ 152.307801][ T1074] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 152.528934][ T5575] loop4: detected capacity change from 0 to 512 [ 152.630066][ T5577] loop0: detected capacity change from 0 to 8 [ 152.671989][ T1074] usb 2-1: Using ep0 maxpacket: 16 [ 152.785206][ T5577] SQUASHFS error: Failed to read block 0x1ec: -5 [ 152.791654][ T5577] SQUASHFS error: Unable to read metadata cache entry [1ea] [ 152.809218][ T1074] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 152.876788][ T5575] EXT4-fs (loop4): 1 truncate cleaned up [ 152.910636][ T1074] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 152.984913][ T5575] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 153.073464][ T1074] usb 2-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 153.146292][ T5575] EXT4-fs error (device loop4): ext4_add_entry:2484: inode #2: comm syz.4.517: Directory hole found for htree leaf block 0 [ 153.163219][ T5575] EXT4-fs error (device loop4): ext4_add_entry:2484: inode #2: comm syz.4.517: Directory hole found for htree leaf block 0 [ 153.293399][ T5583] loop3: detected capacity change from 0 to 512 [ 153.318834][ T5585] loop0: detected capacity change from 0 to 512 [ 153.334738][ T5575] EXT4-fs error (device loop4): ext4_add_entry:2484: inode #2: comm syz.4.517: Directory hole found for htree leaf block 0 [ 153.361051][ T5583] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802e02c, mo2=0002] [ 153.370292][ T5583] EXT4-fs error (device loop3): __ext4_iget:4872: inode #11: block 393240: comm syz.3.516: invalid block [ 153.382240][ T1074] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 153.391371][ T1074] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.400522][ T5583] EXT4-fs (loop3): Remounting filesystem read-only [ 153.407126][ T5583] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.516: couldn't read orphan inode 11 (err -117) [ 153.419701][ T5583] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,min_batch_time=0x0000000000000001,errors=remount-ro,sb=0x0000000000000008,lazytime. Quota mode: none. [ 153.468906][ T5585] EXT4-fs (loop0): orphan cleanup on readonly fs [ 153.475833][ T1074] usb 2-1: Product: syz [ 153.484040][ T5585] Quota error (device loop0): v2_read_file_info: Number of blocks too big for quota file size (103079221248 > 6144). [ 153.492154][ T1074] usb 2-1: Manufacturer: syz [ 153.511882][ T1074] usb 2-1: SerialNumber: syz [ 153.524721][ T5585] EXT4-fs warning (device loop0): ext4_enable_quotas:6431: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 153.544126][ T5585] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 153.618753][ T5585] EXT4-fs (loop0): 1 truncate cleaned up [ 153.658222][ T5585] EXT4-fs (loop0): mounted filesystem without journal. Opts: journal_dev=0x000000000000000d,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,abort,noload,noload,,errors=continue. Quota mode: writeback. [ 154.087285][ T1074] usb 2-1: USB disconnect, device number 11 [ 154.216459][ T26] audit: type=1800 audit(1724208416.546:8): pid=5585 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.519" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 155.425124][ T5547] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 361: padding at end of block bitmap is not set [ 155.622973][ T5547] EXT4-fs (loop3): Remounting filesystem read-only [ 155.973376][ T5612] loop4: detected capacity change from 0 to 512 [ 156.077689][ T5616] loop2: detected capacity change from 0 to 8 [ 156.178161][ T5612] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpjquota=,errors=continue,abort,bsdgroups,,errors=continue. Quota mode: writeback. [ 156.283033][ T5612] ext4 filesystem being mounted at /103/file0 supports timestamps until 2038 (0x7fffffff) [ 161.736996][ T5632] loop1: detected capacity change from 0 to 512 [ 161.816827][ T5637] loop0: detected capacity change from 0 to 512 [ 162.087630][ T5637] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 162.243259][ T5632] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.534: invalid indirect mapped block 256 (level 2) [ 162.277861][ T5637] ext4 filesystem being mounted at /129/file0 supports timestamps until 2038 (0x7fffffff) [ 162.908609][ T5632] EXT4-fs (loop1): 2 truncates cleaned up [ 162.931919][ T5632] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 163.352009][ T21] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 164.434976][ T21] usb 3-1: Using ep0 maxpacket: 16 [ 165.262026][ T21] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 165.277897][ T21] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 165.288652][ T21] usb 3-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 165.381081][ T5679] loop0: detected capacity change from 0 to 512 [ 165.482192][ T21] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 165.557263][ T21] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.584825][ T21] usb 3-1: Product: syz [ 165.601130][ T21] usb 3-1: Manufacturer: syz [ 165.611666][ T21] usb 3-1: SerialNumber: syz [ 165.635144][ T3612] Bluetooth: hci0: command 0x0406 tx timeout [ 165.650432][ T3612] Bluetooth: hci1: command 0x0406 tx timeout [ 165.750962][ T5679] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpjquota=,errors=continue,abort,bsdgroups,,errors=continue. Quota mode: writeback. [ 165.812756][ T5679] ext4 filesystem being mounted at /130/file0 supports timestamps until 2038 (0x7fffffff) [ 166.464215][ T5687] loop4: detected capacity change from 0 to 164 [ 166.508212][ T21] usb 3-1: USB disconnect, device number 8 [ 166.511365][ T5687] rock: directory entry would overflow storage [ 166.511383][ T5687] rock: sig=0x4f50, size=4, remaining=3 [ 166.511580][ T5687] isofs: Unable to find the ".." directory for NFS. [ 166.611062][ T3695] udevd[3695]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 168.189610][ T5721] loop4: detected capacity change from 0 to 8 [ 170.071356][ T5717] SQUASHFS error: Failed to read block 0x1ec: -5 [ 170.078003][ T5717] SQUASHFS error: Unable to read metadata cache entry [1ea] [ 170.421509][ T5735] loop4: detected capacity change from 0 to 256 [ 170.514727][ T5735] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011c00, chksum : 0xa65fdcb6, utbl_chksum : 0xe619d30d) [ 171.204992][ T5755] loop1: detected capacity change from 0 to 1024 [ 171.221260][ T5757] loop3: detected capacity change from 0 to 512 [ 171.316091][ T5763] loop4: detected capacity change from 0 to 512 [ 171.322923][ T5755] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000088,resuid=0x000000000000ee00,nouid32,nolazytime,usrquota,data_err=abort,max_batch_time=0x0000000000000009,,errors=continue. Quota mode: writeback. [ 171.612055][ T5763] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802e02c, mo2=0002] [ 171.703385][ T5757] EXT4-fs (loop3): 1 orphan inode deleted [ 171.818198][ T5763] EXT4-fs error (device loop4): __ext4_iget:4872: inode #11: block 393240: comm syz.4.567: invalid block [ 171.848663][ T5757] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 171.959453][ T5757] ext4 filesystem being mounted at /44/file1 supports timestamps until 2038 (0x7fffffff) [ 171.969492][ T5763] EXT4-fs (loop4): Remounting filesystem read-only [ 171.976122][ T5763] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.567: couldn't read orphan inode 11 (err -117) [ 171.989347][ T5763] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,min_batch_time=0x0000000000000001,errors=remount-ro,sb=0x0000000000000008,lazytime. Quota mode: none. [ 172.019023][ T26] audit: type=1326 audit(1724208434.376:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5754 comm="syz.1.565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f322be36e79 code=0x7ffc0000 [ 172.070929][ T26] audit: type=1326 audit(1724208434.416:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5754 comm="syz.1.565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f322be36e79 code=0x7ffc0000 [ 172.180084][ T26] audit: type=1326 audit(1724208434.486:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5754 comm="syz.1.565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f322be36e79 code=0x7ffc0000 [ 172.252642][ T26] audit: type=1326 audit(1724208434.486:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5754 comm="syz.1.565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f322be36e79 code=0x7ffc0000 [ 172.288733][ T26] audit: type=1326 audit(1724208434.486:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5754 comm="syz.1.565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f322be36e79 code=0x7ffc0000 [ 172.355794][ T26] audit: type=1326 audit(1724208434.486:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5754 comm="syz.1.565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7f322be36e79 code=0x7ffc0000 [ 172.462654][ T5781] loop0: detected capacity change from 0 to 8 [ 172.508515][ T5781] SQUASHFS error: Failed to read block 0x1ec: -5 [ 172.514952][ T5781] SQUASHFS error: Unable to read metadata cache entry [1ea] [ 172.762438][ T26] audit: type=1326 audit(1724208434.486:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5754 comm="syz.1.565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f322be36e79 code=0x7ffc0000 [ 173.347715][ T26] audit: type=1326 audit(1724208434.486:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5754 comm="syz.1.565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f322be36e79 code=0x7ffc0000 [ 173.370065][ T26] audit: type=1326 audit(1724208434.486:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5754 comm="syz.1.565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=327 compat=0 ip=0x7f322be36e79 code=0x7ffc0000 [ 173.476299][ T26] audit: type=1326 audit(1724208434.486:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5754 comm="syz.1.565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f322be36e79 code=0x7ffc0000 [ 174.043659][ T5807] loop0: detected capacity change from 0 to 512 [ 174.126348][ T5813] netlink: 28 bytes leftover after parsing attributes in process `syz.1.577'. [ 174.146077][ T5807] EXT4-fs (loop0): Ignoring removed orlov option [ 174.207245][ T5807] EXT4-fs (loop0): 1 truncate cleaned up [ 174.260822][ T5807] EXT4-fs (loop0): mounted filesystem without journal. Opts: bsdgroups,quota,debug_want_extra_isize=0x000000000000005c,noauto_da_alloc,orlov,i_version,max_batch_time=0x000000000000006e,errors=remount-ro,auto_da_alloc,. Quota mode: writeback. [ 175.621887][ T1074] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 175.839757][ T5836] loop1: detected capacity change from 0 to 8 [ 175.961874][ T1074] usb 5-1: Using ep0 maxpacket: 16 [ 176.092125][ T1074] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 176.147508][ T5836] SQUASHFS error: Failed to read block 0x1ec: -5 [ 176.154052][ T5836] SQUASHFS error: Unable to read metadata cache entry [1ea] [ 176.225034][ T1074] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 176.272724][ T1074] usb 5-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 176.552223][ T1074] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 176.625451][ T5840] input: syz0 as /devices/virtual/input/input8 [ 176.715513][ T1074] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.762487][ T1074] usb 5-1: Product: syz [ 177.365406][ T5844] loop3: detected capacity change from 0 to 2048 [ 177.651861][ T1074] usb 5-1: Manufacturer: syz [ 177.656498][ T1074] usb 5-1: SerialNumber: syz [ 177.693832][ T5844] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 177.712411][ T1074] usb 5-1: can't set config #1, error -71 [ 177.723066][ T1074] usb 5-1: USB disconnect, device number 11 [ 177.766030][ T5844] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 177.805108][ T5844] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 177.823639][ T5844] UDF-fs: Scanning with blocksize 512 failed [ 178.874466][ T5844] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 179.065179][ T5868] loop4: detected capacity change from 0 to 16 [ 179.824534][ T5868] erofs: (device loop4): mounted with root inode @ nid 36. [ 179.878830][ T5870] loop1: detected capacity change from 0 to 164 [ 180.423644][ T5870] rock: directory entry would overflow storage [ 180.429865][ T5870] rock: sig=0x4f50, size=4, remaining=3 [ 180.436138][ T5870] isofs: Unable to find the ".." directory for NFS. [ 180.767346][ T5888] loop0: detected capacity change from 0 to 8 [ 180.823332][ T5886] input input9: cannot allocate more than FF_MAX_EFFECTS effects [ 182.029470][ T3615] Bluetooth: hci3: command 0x0406 tx timeout [ 182.312096][ T3689] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 182.313055][ T5885] SQUASHFS error: Failed to read block 0x1ec: -5 [ 182.328642][ T5885] SQUASHFS error: Unable to read metadata cache entry [1ea] [ 182.512067][ T3689] usb 5-1: device descriptor read/64, error -71 [ 182.788783][ T5900] loop2: detected capacity change from 0 to 1024 [ 182.795229][ T3689] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 185.969791][ T5890] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 186.003793][ T5902] input: syz0 as /devices/virtual/input/input10 [ 186.037626][ T5902] netlink: 4 bytes leftover after parsing attributes in process `syz.1.599'. [ 186.053146][ T5902] netlink: 32 bytes leftover after parsing attributes in process `syz.1.599'. [ 186.064680][ T5902] debugfs: Directory 'netdev:rose0' with parent 'phy7' already present! [ 186.497436][ T5922] loop4: detected capacity change from 0 to 256 [ 186.552900][ T5922] FAT-fs (loop4): Unrecognized mount option "00000000000000000000ÿÿ" or missing value [ 186.965402][ T1789] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 188.422568][ T5939] blk_update_request: I/O error, dev loop4, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 188.435055][ T5939] EXT4-fs (loop4): unable to read superblock [ 188.831927][ T1789] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 188.945387][ T1789] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 188.954830][ T1789] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 189.177116][ T5949] loop0: detected capacity change from 0 to 256 [ 189.181966][ T1789] usb 2-1: New USB device found, idVendor=5d25, idProduct=a4a1, bcdDevice= 0.40 [ 189.199415][ T1789] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.212068][ T1789] usb 2-1: Product: syz [ 189.225879][ T1789] usb 2-1: Manufacturer: syz [ 189.236479][ T1789] usb 2-1: SerialNumber: syz [ 189.373688][ T7] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 189.374667][ T1789] cdc_ncm 2-1:1.0: skipping garbage [ 189.391597][ T1789] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 189.412598][ T1789] cdc_ncm 2-1:1.0: bind() failure [ 189.579988][ T5949] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 189.645833][ T5949] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 189.658845][ T5949] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 189.670740][ T5949] UDF-fs: Scanning with blocksize 512 failed [ 189.699890][ T3616] usb 2-1: USB disconnect, device number 12 [ 189.712655][ T5949] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 189.745241][ T5949] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 189.851928][ T7] usb 5-1: Using ep0 maxpacket: 16 [ 190.633661][ T5968] netlink: 16 bytes leftover after parsing attributes in process `syz.2.621'. [ 191.355564][ T5965] input: syz0 as /devices/virtual/input/input11 [ 191.744794][ T7] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 191.755119][ T7] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 191.815687][ T7] usb 5-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 192.614339][ T5982] loop4: detected capacity change from 0 to 2048 [ 192.649908][ T5982] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 192.741946][ T7] usb 5-1: string descriptor 0 read error: -71 [ 192.748201][ T7] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 192.806915][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.858004][ T5987] loop1: detected capacity change from 0 to 8 [ 193.162106][ T7] usb 5-1: can't set config #1, error -71 [ 193.288610][ T7] usb 5-1: USB disconnect, device number 14 [ 193.421216][ T5982] Device name cannot be null; rc = [-22] [ 193.428954][ T5996] loop2: detected capacity change from 0 to 256 [ 193.527281][ T3616] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 194.147240][ T1387] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.158254][ T1387] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.339859][ T3762] UDF-fs: error (device loop4): udf_read_inode: (ino 1317) failed !bh [ 194.385941][ T3762] UDF-fs: error (device loop4): udf_read_inode: (ino 1317) failed !bh [ 194.465853][ T3616] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 194.479034][ T3616] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 194.490757][ T3616] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 195.032128][ T6014] loop1: detected capacity change from 0 to 512 [ 195.105698][ T3616] usb 4-1: New USB device found, idVendor=5d25, idProduct=a4a1, bcdDevice= 0.40 [ 195.118598][ T6014] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 195.146967][ T3616] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.194613][ T6014] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 195.209990][ T3616] usb 4-1: Product: syz [ 195.214529][ T3616] usb 4-1: Manufacturer: syz [ 195.219140][ T3616] usb 4-1: SerialNumber: syz [ 195.292845][ T6014] EXT4-fs (loop1): 1 truncate cleaned up [ 195.300305][ T3773] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.314158][ T3616] cdc_ncm 4-1:1.0: skipping garbage [ 195.319471][ T3616] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 195.341980][ T6014] EXT4-fs (loop1): mounted filesystem without journal. Opts: resuid=0x0000000000000000,init_itable,stripe=0x0000000000000000,noblock_validity,,errors=continue. Quota mode: none. [ 195.398816][ T3616] cdc_ncm 4-1:1.0: bind() failure [ 195.421953][ T21] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 195.516432][ T3610] usb 4-1: USB disconnect, device number 7 [ 195.526936][ T3773] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.606000][ T6021] loop0: detected capacity change from 0 to 256 [ 195.649865][ T3773] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.661511][ T6021] FAT-fs (loop0): Unrecognized mount option "00000000000000000000ÿÿ" or missing value [ 195.671911][ T21] usb 3-1: Using ep0 maxpacket: 16 [ 195.751019][ T3773] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.794966][ T21] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 195.810118][ T21] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 195.820458][ T21] usb 3-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 196.353727][ T6034] blk_update_request: I/O error, dev loop0, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 196.364962][ T6034] EXT4-fs (loop0): unable to read superblock [ 196.614937][ T6022] chnl_net:caif_netlink_parms(): no params data found [ 196.632634][ T6037] loop1: detected capacity change from 0 to 512 [ 196.672282][ T6040] loop3: detected capacity change from 0 to 1024 [ 196.699856][ T6037] EXT4-fs (loop1): Ignoring removed orlov option [ 196.721930][ T21] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 196.736327][ T6037] EXT4-fs (loop1): Test dummy encryption mode enabled [ 196.736515][ T21] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.753898][ T21] usb 3-1: Product: syz [ 196.758086][ T21] usb 3-1: Manufacturer: syz [ 196.762798][ T21] usb 3-1: SerialNumber: syz [ 196.828487][ T6037] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a014e09c, mo2=0002] [ 196.840438][ T6037] System zones: 1-12 [ 196.885798][ T6037] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #15: comm syz.1.643: casefold flag without casefold feature [ 196.906538][ T6037] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: inode #12: comm syz.1.643: missing EA_INODE flag [ 196.930607][ T6037] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.643: error while reading EA inode 12 err=-117 [ 196.959389][ T6037] EXT4-fs (loop1): 1 orphan inode deleted [ 196.982034][ T6037] EXT4-fs (loop1): mounted filesystem without journal. Opts: orlov,minixdf,max_dir_size_kb=0x0000000000009c7c,debug,grpquota,errors=continue,test_dummy_encryption,auto_da_alloc,nodiscard,,errors=continue. Quota mode: writeback. [ 197.062230][ T6022] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.112088][ T6022] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.140710][ T6022] device bridge_slave_0 entered promiscuous mode [ 197.162242][ T3616] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 197.167651][ T6022] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.177322][ T6022] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.186025][ T6022] device bridge_slave_1 entered promiscuous mode [ 197.220107][ T6022] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 197.490262][ T6022] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 197.531441][ T21] usb 3-1: USB disconnect, device number 9 [ 197.586556][ T3771] udevd[3771]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 197.662016][ T5890] Bluetooth: hci3: command 0x0409 tx timeout [ 197.697792][ T6022] team0: Port device team_slave_0 added [ 197.766549][ T6022] team0: Port device team_slave_1 added [ 197.897851][ T6076] loop2: detected capacity change from 0 to 512 [ 197.905161][ T6022] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 197.927033][ T6022] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.953846][ T3616] usb 1-1: Using ep0 maxpacket: 8 [ 197.959382][ T6022] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 197.967233][ T6076] EXT4-fs (loop2): 1 orphan inode deleted [ 197.978008][ T6076] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota,. Quota mode: writeback. [ 198.207384][ T6022] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 198.246798][ T6022] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 198.319171][ T6076] ext4 filesystem being mounted at /50/file1 supports timestamps until 2038 (0x7fffffff) [ 198.475849][ T6022] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 198.687348][ T3616] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 198.898543][ T3616] usb 1-1: config 179 has no interface number 0 [ 198.926835][ T3616] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 64, changing to 10 [ 198.965461][ T6022] device hsr_slave_0 entered promiscuous mode [ 198.977640][ T3616] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 1029, setting to 1024 [ 198.999767][ T3616] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 199.015616][ T3616] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 199.026457][ T3616] usb 1-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 199.040643][ T3616] usb 1-1: config 179 interface 65 has no altsetting 0 [ 199.047896][ T3616] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 199.057097][ T3616] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.078934][ T6022] device hsr_slave_1 entered promiscuous mode [ 199.097756][ T6022] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 199.105598][ T6022] Cannot create hsr debugfs directory [ 199.124259][ T6048] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 199.168401][ T3616] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input12 [ 199.216862][ T6104] loop2: detected capacity change from 0 to 256 [ 199.236356][ T6104] FAT-fs (loop2): Unrecognized mount option "00000000000000000000ÿÿ" or missing value [ 199.241951][ T5890] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 199.348084][ T6106] netlink: 232 bytes leftover after parsing attributes in process `syz.3.658'. [ 199.385934][ T3615] usb 1-1: USB disconnect, device number 10 [ 199.414057][ T3615] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 199.728305][ T6114] blk_update_request: I/O error, dev loop2, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 199.739815][ T6114] EXT4-fs (loop2): unable to read superblock [ 200.027826][ T21] Bluetooth: hci3: command 0x041b tx timeout [ 200.033999][ T5890] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 200.046900][ T5890] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 200.055894][ T5890] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 200.099360][ T6124] syz.0.660 sent an empty control message without MSG_MORE. [ 200.222189][ T5890] usb 2-1: New USB device found, idVendor=5d25, idProduct=a4a1, bcdDevice= 0.40 [ 200.245088][ T5890] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.269758][ T5890] usb 2-1: Product: syz [ 200.288656][ T5890] usb 2-1: Manufacturer: syz [ 200.304649][ T5890] usb 2-1: SerialNumber: syz [ 200.353892][ T5890] cdc_ncm 2-1:1.0: skipping garbage [ 200.360473][ T5890] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 200.381666][ T5890] cdc_ncm 2-1:1.0: bind() failure [ 200.417504][ T6139] netlink: 4 bytes leftover after parsing attributes in process `syz.2.663'. [ 200.431226][ T6139] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 200.447056][ T6139] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 200.457966][ T6139] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 200.466662][ T1789] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 200.502756][ T6139] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 200.782039][ T1789] usb 4-1: Using ep0 maxpacket: 16 [ 200.922386][ T1789] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 200.968711][ T1789] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 201.024404][ T1789] usb 4-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 201.141665][ T5890] usb 2-1: USB disconnect, device number 13 [ 201.155908][ T3773] device hsr_slave_0 left promiscuous mode [ 201.167245][ T3773] device hsr_slave_1 left promiscuous mode [ 201.174031][ T3773] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 201.181451][ T3773] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 201.192988][ T3773] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 201.200638][ T3773] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 201.208610][ T3773] device bridge_slave_1 left promiscuous mode [ 201.214897][ T3773] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.223973][ T3773] device bridge_slave_0 left promiscuous mode [ 201.230143][ T3773] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.247455][ T3773] device veth1_macvtap left promiscuous mode [ 201.253636][ T3773] device veth0_macvtap left promiscuous mode [ 201.269893][ T3773] device veth1_vlan left promiscuous mode [ 201.283018][ T3773] device veth0_vlan left promiscuous mode [ 201.292432][ T1789] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 201.303176][ T1789] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.311397][ T1789] usb 4-1: Product: syz [ 201.315957][ T1789] usb 4-1: Manufacturer: syz [ 201.320688][ T1789] usb 4-1: SerialNumber: syz [ 201.495355][ T6157] loop1: detected capacity change from 0 to 512 [ 201.539512][ T3773] team0 (unregistering): Port device team_slave_1 removed [ 201.558526][ T3773] team0 (unregistering): Port device team_slave_0 removed [ 201.572150][ T3773] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 201.588116][ T3773] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 201.590362][ T6157] EXT4-fs (loop1): 1 orphan inode deleted [ 201.606585][ T6157] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota,. Quota mode: writeback. [ 201.628238][ T6157] ext4 filesystem being mounted at /160/file1 supports timestamps until 2038 (0x7fffffff) [ 201.669554][ T3773] bond0 (unregistering): Released all slaves [ 202.453283][ T1789] usb 4-1: USB disconnect, device number 8 [ 202.483146][ T6165] dlm: dev_write: no op 0 74000000000000 [ 202.509334][ T5890] Bluetooth: hci3: command 0x040f tx timeout [ 202.581265][ T3771] udevd[3771]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 203.048838][ T6022] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 203.295388][ T6022] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 203.331303][ T6022] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 203.699456][ T6022] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 204.324372][ T6022] 8021q: adding VLAN 0 to HW filter on device bond0 [ 204.379729][ T3774] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 204.392102][ T3616] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 204.407776][ T3774] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 204.423745][ T6022] 8021q: adding VLAN 0 to HW filter on device team0 [ 204.445128][ T3774] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 204.485720][ T3774] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 204.512062][ T3615] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 204.524989][ T3774] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.532133][ T3774] bridge0: port 1(bridge_slave_0) entered forwarding state [ 204.542035][ T3689] Bluetooth: hci3: command 0x0419 tx timeout [ 204.559237][ T6210] loop0: detected capacity change from 0 to 512 [ 204.578250][ T3774] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 204.588866][ T3774] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 204.598297][ T3774] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 204.608488][ T3774] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.615614][ T3774] bridge0: port 2(bridge_slave_1) entered forwarding state [ 204.625945][ T3774] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 204.635246][ T3774] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 204.644736][ T3774] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 204.665745][ T3774] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 204.685437][ T3774] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 204.703281][ T3628] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 204.725990][ T6210] EXT4-fs (loop0): 1 orphan inode deleted [ 204.732644][ T3628] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 204.745604][ T6210] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota,. Quota mode: writeback. [ 204.769968][ T3628] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 204.777560][ T6210] ext4 filesystem being mounted at /157/file1 supports timestamps until 2038 (0x7fffffff) [ 204.788423][ T3628] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 204.791823][ T3615] usb 3-1: Using ep0 maxpacket: 16 [ 204.817485][ T6022] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 204.831994][ T3616] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 204.863836][ T3616] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 205.034941][ T3616] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 205.091348][ T3615] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 205.094856][ T6022] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 205.347200][ T3616] usb 4-1: New USB device found, idVendor=5d25, idProduct=a4a1, bcdDevice= 0.40 [ 205.375674][ T3616] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.377970][ T3615] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 205.384085][ T3616] usb 4-1: Product: syz [ 205.398258][ T3616] usb 4-1: Manufacturer: syz [ 205.402978][ T3616] usb 4-1: SerialNumber: syz [ 205.414019][ T3628] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 205.434235][ T3615] usb 3-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 205.440357][ T3628] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 205.499869][ T3616] cdc_ncm 4-1:1.0: skipping garbage [ 205.506943][ T3616] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 205.518332][ T3616] cdc_ncm 4-1:1.0: bind() failure [ 205.842084][ T3615] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 205.966436][ T3615] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.228206][ T3615] usb 3-1: Product: syz [ 206.270582][ T3615] usb 3-1: Manufacturer: syz [ 206.285812][ T3615] usb 3-1: SerialNumber: syz [ 206.315251][ T5890] usb 4-1: USB disconnect, device number 9 [ 206.378201][ T6240] loop1: detected capacity change from 0 to 512 [ 206.401524][ T6242] loop0: detected capacity change from 0 to 512 [ 206.458711][ T3768] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 206.475369][ T6242] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 206.491436][ T3768] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 206.519121][ T6022] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 206.544393][ T6242] EXT4-fs (loop0): 1 truncate cleaned up [ 206.560019][ T6240] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpjquota=,errors=continue,abort,bsdgroups,,errors=continue. Quota mode: writeback. [ 206.578619][ T6242] EXT4-fs (loop0): mounted filesystem without journal. Opts: resuid=0x0000000000000000,init_itable,stripe=0x0000000000000000,noblock_validity,,errors=continue. Quota mode: none. [ 206.606108][ T6240] ext4 filesystem being mounted at /164/file0 supports timestamps until 2038 (0x7fffffff) [ 206.668844][ T3615] usb 3-1: USB disconnect, device number 10 [ 206.842185][ T3771] udevd[3771]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 207.727025][ T3628] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 207.738007][ T3628] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 207.797311][ T6022] device veth0_vlan entered promiscuous mode [ 207.964096][ T3628] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 207.987516][ T3628] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 208.008976][ T3628] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 208.107074][ T3628] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 208.439877][ T2988] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 208.519533][ T6022] device veth1_vlan entered promiscuous mode [ 208.729541][ T6297] netlink: 288 bytes leftover after parsing attributes in process `syz.3.696'. [ 208.739325][ T3628] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 208.766303][ T3628] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 208.811737][ T3774] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 208.830021][ T3774] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 208.859578][ T6022] device veth0_macvtap entered promiscuous mode [ 208.937486][ T6022] device veth1_macvtap entered promiscuous mode [ 208.952235][ T2988] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 208.991801][ T2988] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 209.029031][ T6022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.031506][ T2988] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 209.093840][ T6022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.141578][ T6022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.183422][ T6022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.230989][ T6022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.244199][ T2988] usb 1-1: New USB device found, idVendor=5d25, idProduct=a4a1, bcdDevice= 0.40 [ 209.269409][ T6022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.294010][ T2988] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.314247][ T6022] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 209.357413][ T3774] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 209.369671][ T2988] usb 1-1: Product: syz [ 209.373045][ T3774] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 209.392143][ T2988] usb 1-1: Manufacturer: syz [ 209.392306][ T3774] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 209.409185][ T2988] usb 1-1: SerialNumber: syz [ 209.455068][ T3774] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 209.492381][ T6022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.513346][ T2988] cdc_ncm 1-1:1.0: skipping garbage [ 209.529986][ T2988] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 209.543364][ T6022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.575160][ T2988] cdc_ncm 1-1:1.0: bind() failure [ 209.599477][ T6022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.638552][ T6022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.687953][ T6022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.728922][ T3689] usb 1-1: USB disconnect, device number 11 [ 209.761618][ T6022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.787593][ T6022] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 209.804171][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 209.843823][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 209.903888][ T6022] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.952077][ T6022] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.065784][ T6022] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.076294][ T6022] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.071007][ T6358] netlink: 4 bytes leftover after parsing attributes in process `syz.0.710'. [ 211.080205][ T156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.093175][ T6358] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 211.104141][ T6358] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 211.119708][ T156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 211.147503][ T6358] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 211.180213][ T6358] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 211.285860][ T3628] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 211.302092][ T156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.322423][ T156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 211.368203][ T6368] syz.2.714[6368] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 211.368296][ T6368] syz.2.714[6368] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 211.404625][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 213.252018][ T1789] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 214.457997][ T1789] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 214.486480][ T1789] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 214.508485][ T6410] netlink: 4 bytes leftover after parsing attributes in process `syz.1.727'. [ 214.510325][ T1789] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 214.517581][ T6410] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 214.538850][ T6410] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 214.548226][ T6410] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 214.559983][ T6410] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 214.702109][ T1789] usb 1-1: New USB device found, idVendor=5d25, idProduct=a4a1, bcdDevice= 0.40 [ 214.712532][ T1789] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.720668][ T1789] usb 1-1: Product: syz [ 214.736057][ T1789] usb 1-1: Manufacturer: syz [ 214.764627][ T1789] usb 1-1: can't set config #1, error -71 [ 214.780236][ T1789] usb 1-1: USB disconnect, device number 12 [ 214.925452][ T6429] loop0: detected capacity change from 0 to 512 [ 216.701863][ T1789] Bluetooth: hci2: command 0x0406 tx timeout [ 216.889185][ T6429] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpjquota=,errors=continue,abort,bsdgroups,,errors=continue. Quota mode: writeback. [ 216.907044][ T6429] ext4 filesystem being mounted at /165/file0 supports timestamps until 2038 (0x7fffffff) [ 217.185895][ T1789] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 217.552214][ T1789] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 217.569882][ T1789] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 217.604106][ T1789] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 217.772104][ T1789] usb 5-1: New USB device found, idVendor=5d25, idProduct=a4a1, bcdDevice= 0.40 [ 217.788291][ T1789] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.811853][ T1789] usb 5-1: Product: syz [ 217.816069][ T1789] usb 5-1: Manufacturer: syz [ 217.841317][ T1789] usb 5-1: SerialNumber: syz [ 217.883183][ T1789] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 217.900752][ T1789] cdc_ncm 5-1:1.0: bind() failure [ 218.089557][ T3615] usb 5-1: USB disconnect, device number 15 [ 218.222298][ T1789] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 218.421855][ T1789] usb 1-1: device descriptor read/64, error -71 [ 218.702242][ T1789] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 218.911843][ T1789] usb 1-1: device descriptor read/64, error -71 [ 219.042119][ T1789] usb usb1-port1: attempt power cycle [ 219.158195][ T6486] loop4: detected capacity change from 0 to 8 [ 219.350164][ T6486] SQUASHFS error: Failed to read block 0x1ec: -5 [ 219.356992][ T6486] SQUASHFS error: Unable to read metadata cache entry [1ea] [ 220.012709][ T1789] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 220.829050][ T1789] usb 1-1: device descriptor read/8, error -71 [ 221.021061][ T6503] loop2: detected capacity change from 0 to 512 [ 221.129056][ T6503] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpjquota=,errors=continue,abort,bsdgroups,,errors=continue. Quota mode: writeback. [ 221.145343][ T6503] ext4 filesystem being mounted at /82/file0 supports timestamps until 2038 (0x7fffffff) [ 221.542385][ T1789] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 221.596442][ T6521] loop4: detected capacity change from 0 to 8 [ 221.864053][ T6521] SQUASHFS error: Failed to read block 0x1ec: -5 [ 221.870502][ T6521] SQUASHFS error: Unable to read metadata cache entry [1ea] [ 222.281885][ T1789] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 222.302607][ T1789] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 222.311511][ T1789] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 222.652924][ T1789] usb 1-1: New USB device found, idVendor=5d25, idProduct=a4a1, bcdDevice= 0.40 [ 222.710256][ T1789] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.924559][ T1789] usb 1-1: Product: syz [ 223.013340][ T1789] usb 1-1: Manufacturer: syz [ 223.138673][ T1789] usb 1-1: SerialNumber: syz [ 223.323505][ T1789] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 223.330325][ T1789] cdc_ncm 1-1:1.0: bind() failure [ 223.478123][ T13] usb 1-1: USB disconnect, device number 16 [ 223.571952][ T1074] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 223.781966][ T1074] usb 4-1: device descriptor read/64, error -71 [ 224.071972][ T1074] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 224.261636][ T6560] loop4: detected capacity change from 0 to 8 [ 224.428022][ T6560] SQUASHFS error: Failed to read block 0x1ec: -5 [ 224.434540][ T6560] SQUASHFS error: Unable to read metadata cache entry [1ea] [ 224.633143][ T1074] usb 4-1: device descriptor read/64, error -71 [ 224.784191][ T1074] usb usb4-port1: attempt power cycle [ 224.909899][ T6566] loop2: detected capacity change from 0 to 512 [ 225.096306][ T6566] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpjquota=,errors=continue,abort,bsdgroups,,errors=continue. Quota mode: writeback. [ 225.352097][ T1074] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 225.492302][ T1074] usb 4-1: device descriptor read/8, error -71 [ 225.771967][ T1074] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 225.785971][ T6566] ext4 filesystem being mounted at /86/file0 supports timestamps until 2038 (0x7fffffff) [ 225.953212][ T1074] usb 4-1: device descriptor read/8, error -71 [ 226.024957][ T6581] ecryptfs_parse_options: eCryptfs: unrecognized option [&@] [ 226.047748][ T6581] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 226.073434][ T1074] usb usb4-port1: unable to enumerate USB device [ 226.091872][ T6581] Error parsing options; rc = [-22] [ 226.342031][ T13] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 226.899550][ T13] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 226.910787][ T13] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 226.922621][ T13] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 227.105640][ T6605] loop1: detected capacity change from 0 to 8 [ 227.998845][ T6602] SQUASHFS error: Failed to read block 0x1ec: -5 [ 228.005771][ T6602] SQUASHFS error: Unable to read metadata cache entry [1ea] [ 228.131989][ T13] usb 1-1: New USB device found, idVendor=5d25, idProduct=a4a1, bcdDevice= 0.40 [ 228.151634][ T13] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.170133][ T13] usb 1-1: Product: syz [ 228.180287][ T13] usb 1-1: Manufacturer: syz [ 228.196280][ T13] usb 1-1: SerialNumber: syz [ 228.295261][ T13] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 228.311837][ T13] cdc_ncm 1-1:1.0: bind() failure [ 228.369941][ T6629] netlink: 4 bytes leftover after parsing attributes in process `syz.4.806'. [ 228.542075][ T2988] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 228.710829][ T3610] usb 1-1: USB disconnect, device number 17 [ 228.731906][ T2988] usb 2-1: device descriptor read/64, error -71 [ 229.031927][ T2988] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 229.247378][ T6645] loop2: detected capacity change from 0 to 512 [ 229.623775][ T2988] usb 2-1: device descriptor read/64, error -71 [ 230.309529][ T6650] loop0: detected capacity change from 0 to 8 [ 230.912001][ T2988] usb usb2-port1: attempt power cycle [ 230.943468][ T6649] SQUASHFS error: Failed to read block 0x1ec: -5 [ 230.949871][ T6649] SQUASHFS error: Unable to read metadata cache entry [1ea] [ 231.054900][ T6645] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpjquota=,errors=continue,abort,bsdgroups,,errors=continue. Quota mode: writeback. [ 231.129896][ T6645] ext4 filesystem being mounted at /89/file0 supports timestamps until 2038 (0x7fffffff) [ 231.431852][ T13] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 231.542485][ T2988] usb usb2-port1: Cannot enable. Maybe the USB cable is bad? [ 231.624130][ T3610] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 231.821883][ T13] usb 5-1: Using ep0 maxpacket: 8 [ 231.871891][ T2988] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 231.962229][ T13] usb 5-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 231.970934][ T13] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 231.992086][ T13] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 232.021916][ T3610] usb 1-1: Using ep0 maxpacket: 8 [ 232.027053][ T13] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 232.036853][ T13] usb 5-1: New USB device found, idVendor=048d, idProduct=8595, bcdDevice= 0.00 [ 232.046412][ T13] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.063773][ T13] usb 5-1: config 0 descriptor?? [ 232.132207][ T2988] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 232.151791][ T2988] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 232.160689][ T2988] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 232.172477][ T3610] usb 1-1: config 0 has an invalid interface number: 151 but max is 1 [ 232.180644][ T3610] usb 1-1: config 0 has no interface number 1 [ 232.187199][ T3610] usb 1-1: config 0 interface 151 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 232.198397][ T3610] usb 1-1: config 0 interface 151 altsetting 0 has an invalid endpoint with address 0xA3, skipping [ 232.209419][ T3610] usb 1-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 232.223759][ T3610] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 232.234887][ T3610] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 232.432132][ T2988] usb 2-1: New USB device found, idVendor=5d25, idProduct=a4a1, bcdDevice= 0.40 [ 232.442042][ T2988] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.457451][ T2988] usb 2-1: Product: syz [ 232.461706][ T2988] usb 2-1: Manufacturer: syz [ 232.466883][ T2988] usb 2-1: SerialNumber: syz [ 233.180913][ T3610] usb 1-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 233.194111][ T13] itetech 0003:048D:8595.0002: unexpected long global item [ 233.201624][ T13] itetech: probe of 0003:048D:8595.0002 failed with error -22 [ 233.210535][ T2988] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 233.217456][ T3610] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.225593][ T2988] cdc_ncm 2-1:1.0: bind() failure [ 233.232026][ T3610] usb 1-1: Product: syz [ 233.236250][ T3610] usb 1-1: Manufacturer: syz [ 233.240859][ T3610] usb 1-1: SerialNumber: syz [ 233.327622][ T3610] usb 1-1: config 0 descriptor?? [ 233.352075][ T6673] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 233.376866][ T3610] snd-usb-audio: probe of 1-1:0.151 failed with error -2 [ 233.386747][ T3615] usb 5-1: USB disconnect, device number 16 [ 233.394704][ T3610] usb 1-1: invalid MIDI in EP 0 [ 233.489492][ T3610] snd-usb-audio: probe of 1-1:0.0 failed with error -22 [ 233.528220][ T3769] udevd[3769]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 233.558219][ T1789] usb 2-1: USB disconnect, device number 17 [ 233.582939][ T21] usb 1-1: USB disconnect, device number 18 [ 233.674424][ T6698] loop2: detected capacity change from 0 to 8 [ 234.251882][ T13] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 234.272247][ T6697] SQUASHFS error: Failed to read block 0x1ec: -5 [ 234.278774][ T6697] SQUASHFS error: Unable to read metadata cache entry [1ea] [ 234.355349][ T6706] netlink: 4 bytes leftover after parsing attributes in process `syz.1.834'. [ 234.521964][ T13] usb 4-1: Using ep0 maxpacket: 32 [ 234.543403][ T6711] loop1: detected capacity change from 0 to 512 [ 234.561993][ T3610] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 234.660197][ T6711] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpjquota=,errors=continue,abort,bsdgroups,,errors=continue. Quota mode: writeback. [ 234.675602][ T13] usb 4-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 234.697136][ T13] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.755585][ T6711] ext4 filesystem being mounted at /190/file0 supports timestamps until 2038 (0x7fffffff) [ 234.818964][ T3610] usb 5-1: device descriptor read/64, error -71 [ 234.834352][ T13] usb 4-1: config 0 descriptor?? [ 234.900640][ T13] gspca_main: sunplus-2.14.0 probing 041e:400b [ 235.103040][ T3610] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 235.332610][ T3610] usb 5-1: device descriptor read/64, error -71 [ 235.462485][ T3610] usb usb5-port1: attempt power cycle [ 235.490661][ T6727] ------------[ cut here ]------------ [ 235.514479][ T6727] WARNING: CPU: 0 PID: 6727 at net/mac80211/cfg.c:3686 ieee80211_probe_client+0x5b1/0x730 [ 235.549330][ T6727] Modules linked in: [ 235.575627][ T6727] CPU: 0 PID: 6727 Comm: syz.0.841 Not tainted 5.15.165-syzkaller #0 [ 235.596510][ T6727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 235.611839][ T6727] RIP: 0010:ieee80211_probe_client+0x5b1/0x730 [ 235.618229][ T6727] Code: f7 c6 05 da 6a 10 04 01 48 c7 c7 00 83 97 8b be 65 0e 00 00 48 c7 c2 e0 87 97 8b e8 09 bd 9d f7 e9 98 fb ff ff e8 1f 15 bb f7 <0f> 0b bb ea ff ff ff e9 1f ff ff ff 89 e9 80 e1 07 80 c1 03 38 c1 [ 235.638975][ T6727] RSP: 0018:ffffc90003337290 EFLAGS: 00010283 [ 235.649891][ T6727] RAX: ffffffff89c54c81 RBX: 0000000000000001 RCX: 0000000000040000 [ 235.658814][ T6727] RDX: ffffc9000aed5000 RSI: 0000000000000ba0 RDI: 0000000000000ba1 [ 235.667467][ T6727] RBP: 0000000000000000 R08: ffffffff89c54800 R09: fffffbfff1f8e219 [ 235.675495][ T6727] R10: 0000000000000000 R11: dffffc0000000001 R12: ffffc900033373a0 [ 235.683734][ T6727] R13: dffffc0000000000 R14: ffff8880613b0020 R15: ffff88807e26a960 [ 235.691725][ T6727] FS: 00007fe97127b6c0(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000 [ 235.755202][ T6727] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 235.764954][ T6727] CR2: 00007f322a291f98 CR3: 00000000566f0000 CR4: 00000000003506f0 [ 235.773766][ T6727] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 235.785026][ T6727] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 235.793765][ T6727] Call Trace: [ 235.797472][ T6727] [ 235.800593][ T6727] ? __warn+0x15b/0x300 [ 235.812246][ T6727] ? ieee80211_probe_client+0x5b1/0x730 [ 235.817983][ T6727] ? report_bug+0x1b7/0x2e0 [ 235.826149][ T6727] ? handle_bug+0x3d/0x70 [ 235.830709][ T6727] ? exc_invalid_op+0x16/0x40 [ 235.836246][ T6727] ? asm_exc_invalid_op+0x16/0x20 [ 235.841517][ T6727] ? ieee80211_probe_client+0x130/0x730 [ 235.851112][ T6727] ? ieee80211_probe_client+0x5b1/0x730 [ 235.864224][ T6727] ? ieee80211_probe_client+0x5b1/0x730 [ 235.869937][ T6727] ? genlmsg_put+0x13b/0x2d0 [ 235.875317][ T6727] nl80211_probe_client+0x3e6/0x820 [ 235.880694][ T6727] ? nl80211_register_unexpected_frame+0x180/0x180 [ 235.890341][ T6727] genl_rcv_msg+0xfbd/0x14a0 [ 235.895465][ T6727] ? genl_bind+0x420/0x420 [ 235.900218][ T6727] ? mark_lock+0x98/0x340 [ 235.907559][ T6727] ? __lock_acquire+0x1295/0x1ff0 [ 235.915652][ T6727] ? nl80211_register_unexpected_frame+0x180/0x180 [ 235.925431][ T6727] netlink_rcv_skb+0x1cf/0x410 [ 235.930372][ T6727] ? genl_bind+0x420/0x420 [ 235.935694][ T6727] ? netlink_ack+0xb10/0xb10 [ 235.940473][ T6727] ? down_read+0x1b3/0x2e0 [ 235.947983][ T6727] ? genl_rcv+0x9/0x40 [ 235.952522][ T6727] genl_rcv+0x24/0x40 [ 235.956723][ T6727] netlink_unicast+0x7b6/0x980 [ 235.964827][ T6727] ? netlink_detachskb+0x90/0x90 [ 235.969909][ T6727] ? __virt_addr_valid+0x3bb/0x460 [ 235.975827][ T6727] ? 0xffffffff81000000 [ 235.980200][ T6727] ? __check_object_size+0x300/0x410 [ 235.993253][ T6727] ? bpf_lsm_netlink_send+0x5/0x10 [ 235.999137][ T6727] netlink_sendmsg+0xa30/0xd60 [ 236.004540][ T6727] ? netlink_getsockopt+0x5b0/0x5b0 [ 236.010018][ T6727] ? aa_sock_msg_perm+0x91/0x150 [ 236.019078][ T6727] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 236.026106][ T6727] ? security_socket_sendmsg+0x7d/0xa0 [ 236.034911][ T6727] ? netlink_getsockopt+0x5b0/0x5b0 [ 236.040360][ T6727] ____sys_sendmsg+0x59e/0x8f0 [ 236.045859][ T6727] ? iovec_from_user+0x300/0x390 [ 236.050964][ T6727] ? __sys_sendmsg_sock+0x30/0x30 [ 236.059172][ T6727] ___sys_sendmsg+0x252/0x2e0 [ 236.064407][ T6727] ? __sys_sendmsg+0x260/0x260 [ 236.069725][ T6727] ? release_firmware_map_entry+0x190/0x190 [ 236.076249][ T6727] ? __fdget+0x191/0x220 [ 236.080516][ T6727] __se_sys_sendmsg+0x19a/0x260 [ 236.085542][ T13] gspca_sunplus: reg_r err -110 [ 236.090453][ T13] sunplus: probe of 4-1:0.0 failed with error -110 [ 236.097005][ T6727] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 236.102750][ T6727] ? __x64_sys_sendmsg+0x80/0x80 [ 236.107714][ T6727] ? syscall_enter_from_user_mode+0x37/0x240 [ 236.119316][ T6727] ? syscall_enter_from_user_mode+0x2e/0x240 [ 236.125419][ T6727] do_syscall_64+0x3b/0xb0 [ 236.129925][ T6727] ? clear_bhb_loop+0x15/0x70 [ 236.134698][ T3610] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 236.142575][ T6727] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 236.148478][ T6727] RIP: 0033:0x7fe972e40e79 [ 236.153066][ T6727] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 236.174498][ T6727] RSP: 002b:00007fe97127b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 236.182962][ T6727] RAX: ffffffffffffffda RBX: 00007fe972fdd130 RCX: 00007fe972e40e79 [ 236.191073][ T6727] RDX: 0000000000000000 RSI: 0000000020000400 RDI: 000000000000000e [ 236.199213][ T6727] RBP: 00007fe972eae916 R08: 0000000000000000 R09: 0000000000000000 [ 236.207342][ T6727] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 236.215621][ T2988] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 236.223431][ T6727] R13: 0000000000000000 R14: 00007fe972fdd130 R15: 00007ffee1599a48 [ 236.231427][ T6727] [ 236.235107][ T6727] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 236.242600][ T6727] CPU: 0 PID: 6727 Comm: syz.0.841 Not tainted 5.15.165-syzkaller #0 [ 236.250673][ T6727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 236.261078][ T6727] Call Trace: [ 236.264379][ T6727] [ 236.267298][ T6727] dump_stack_lvl+0x1e3/0x2d0 [ 236.272060][ T6727] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 236.277780][ T6727] ? panic+0x860/0x860 [ 236.281939][ T6727] ? ieee80211_probe_client+0x530/0x730 [ 236.287692][ T6727] ? ieee80211_probe_client+0x530/0x730 [ 236.293327][ T6727] panic+0x318/0x860 [ 236.297245][ T6727] ? __warn+0x16a/0x300 [ 236.301402][ T6727] ? fb_is_primary_device+0xd0/0xd0 [ 236.306602][ T6727] ? ieee80211_probe_client+0x5b1/0x730 [ 236.312299][ T6727] __warn+0x2b2/0x300 [ 236.316295][ T6727] ? ieee80211_probe_client+0x5b1/0x730 [ 236.321848][ T6727] report_bug+0x1b7/0x2e0 [ 236.326200][ T6727] handle_bug+0x3d/0x70 [ 236.330348][ T6727] exc_invalid_op+0x16/0x40 [ 236.334893][ T6727] asm_exc_invalid_op+0x16/0x20 [ 236.339735][ T6727] RIP: 0010:ieee80211_probe_client+0x5b1/0x730 [ 236.345896][ T6727] Code: f7 c6 05 da 6a 10 04 01 48 c7 c7 00 83 97 8b be 65 0e 00 00 48 c7 c2 e0 87 97 8b e8 09 bd 9d f7 e9 98 fb ff ff e8 1f 15 bb f7 <0f> 0b bb ea ff ff ff e9 1f ff ff ff 89 e9 80 e1 07 80 c1 03 38 c1 [ 236.365838][ T6727] RSP: 0018:ffffc90003337290 EFLAGS: 00010283 [ 236.371989][ T6727] RAX: ffffffff89c54c81 RBX: 0000000000000001 RCX: 0000000000040000 [ 236.379958][ T6727] RDX: ffffc9000aed5000 RSI: 0000000000000ba0 RDI: 0000000000000ba1 [ 236.387918][ T6727] RBP: 0000000000000000 R08: ffffffff89c54800 R09: fffffbfff1f8e219 [ 236.395882][ T6727] R10: 0000000000000000 R11: dffffc0000000001 R12: ffffc900033373a0 [ 236.403847][ T6727] R13: dffffc0000000000 R14: ffff8880613b0020 R15: ffff88807e26a960 [ 236.411916][ T6727] ? ieee80211_probe_client+0x130/0x730 [ 236.417489][ T6727] ? ieee80211_probe_client+0x5b1/0x730 [ 236.423037][ T6727] ? genlmsg_put+0x13b/0x2d0 [ 236.427632][ T6727] nl80211_probe_client+0x3e6/0x820 [ 236.432838][ T6727] ? nl80211_register_unexpected_frame+0x180/0x180 [ 236.439360][ T6727] genl_rcv_msg+0xfbd/0x14a0 [ 236.443968][ T6727] ? genl_bind+0x420/0x420 [ 236.448398][ T6727] ? mark_lock+0x98/0x340 [ 236.452736][ T6727] ? __lock_acquire+0x1295/0x1ff0 [ 236.457851][ T6727] ? nl80211_register_unexpected_frame+0x180/0x180 [ 236.464424][ T6727] netlink_rcv_skb+0x1cf/0x410 [ 236.469197][ T6727] ? genl_bind+0x420/0x420 [ 236.473618][ T6727] ? netlink_ack+0xb10/0xb10 [ 236.478260][ T6727] ? down_read+0x1b3/0x2e0 [ 236.482668][ T6727] ? genl_rcv+0x9/0x40 [ 236.486776][ T6727] genl_rcv+0x24/0x40 [ 236.490772][ T6727] netlink_unicast+0x7b6/0x980 [ 236.495582][ T6727] ? netlink_detachskb+0x90/0x90 [ 236.500536][ T6727] ? __virt_addr_valid+0x3bb/0x460 [ 236.505661][ T6727] ? 0xffffffff81000000 [ 236.509927][ T6727] ? __check_object_size+0x300/0x410 [ 236.515209][ T6727] ? bpf_lsm_netlink_send+0x5/0x10 [ 236.520339][ T6727] netlink_sendmsg+0xa30/0xd60 [ 236.525462][ T6727] ? netlink_getsockopt+0x5b0/0x5b0 [ 236.530667][ T6727] ? aa_sock_msg_perm+0x91/0x150 [ 236.535687][ T6727] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 236.540962][ T6727] ? security_socket_sendmsg+0x7d/0xa0 [ 236.546539][ T6727] ? netlink_getsockopt+0x5b0/0x5b0 [ 236.551802][ T6727] ____sys_sendmsg+0x59e/0x8f0 [ 236.556662][ T6727] ? iovec_from_user+0x300/0x390 [ 236.561710][ T6727] ? __sys_sendmsg_sock+0x30/0x30 [ 236.566779][ T6727] ___sys_sendmsg+0x252/0x2e0 [ 236.571459][ T6727] ? __sys_sendmsg+0x260/0x260 [ 236.576230][ T6727] ? release_firmware_map_entry+0x190/0x190 [ 236.582131][ T6727] ? __fdget+0x191/0x220 [ 236.586366][ T6727] __se_sys_sendmsg+0x19a/0x260 [ 236.591208][ T6727] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 236.596948][ T6727] ? __x64_sys_sendmsg+0x80/0x80 [ 236.601904][ T6727] ? syscall_enter_from_user_mode+0x37/0x240 [ 236.607911][ T6727] ? syscall_enter_from_user_mode+0x2e/0x240 [ 236.613997][ T6727] do_syscall_64+0x3b/0xb0 [ 236.618427][ T6727] ? clear_bhb_loop+0x15/0x70 [ 236.623193][ T6727] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 236.629090][ T6727] RIP: 0033:0x7fe972e40e79 [ 236.633501][ T6727] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 236.653297][ T6727] RSP: 002b:00007fe97127b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 236.661919][ T6727] RAX: ffffffffffffffda RBX: 00007fe972fdd130 RCX: 00007fe972e40e79 [ 236.669898][ T6727] RDX: 0000000000000000 RSI: 0000000020000400 RDI: 000000000000000e [ 236.677864][ T6727] RBP: 00007fe972eae916 R08: 0000000000000000 R09: 0000000000000000 [ 236.685832][ T6727] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 236.693801][ T6727] R13: 0000000000000000 R14: 00007fe972fdd130 R15: 00007ffee1599a48 [ 236.701802][ T6727] [ 236.705037][ T6727] Kernel Offset: disabled [ 236.709575][ T6727] Rebooting in 86400 seconds..