last executing test programs: 10.049846289s ago: executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) capget(&(0x7f00000000c0), &(0x7f0000000100)) 9.962405949s ago: executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r2, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff"], 0x398}}, 0x0) 9.336711821s ago: executing program 4: close(0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000002100)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x7d, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}}, &(0x7f0000003c00)=0x90) syz_mount_image$hfs(&(0x7f0000001600), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=0x0, @ANYBLOB=',iocharset=cp936,iocharset=iso8859-1,uid=', @ANYRESHEX, @ANYBLOB="2c656172743d302930300100"/26], 0x1, 0x2fe, &(0x7f0000000240)="$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") syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xc4, 0x5a, 0x52, 0x40, 0x2058, 0x1005, 0xdc00, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa6, 0x89, 0x16}}]}}]}}, 0x0) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="02c8000c000800010002080400030022e8"], 0x11) socket$inet6(0xa, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f0000000000)="4dcdc7c6223e00000000ffff8137", 0x71, 0x0, &(0x7f0000000140)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @dev}, 0x14) 9.18985693s ago: executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3) listen(r0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) openat$ttynull(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) mprotect(&(0x7f00004a4000/0x800000)=nil, 0x800000, 0x0) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 8.552280396s ago: executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="01000001000000001100020202000900010023"], 0x2c}, 0x1, 0x40030000000000}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="580000001400010627bd7000000000000a84"], 0x58}}, 0x0) 7.927978939s ago: executing program 0: syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000020961b0a9f15000000000109022d0001000000000904000005030000000921"], 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/ip6_flowlabel\x00') socket$alg(0x26, 0x5, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000140)) socket$nl_route(0x10, 0x3, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2004cb], 0x0, 0x200}) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f0000000200)={0xbe, 0x0, 0x1}) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.74996701s ago: executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180100002100000000000000000000108500000075000000a50000002300000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0xed}) ppoll(&(0x7f0000000180)=[{r1}], 0x1, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) madvise(&(0x7f00009b7000/0x2000)=nil, 0x2000, 0x4) read(r1, &(0x7f0000000240)=""/131, 0x83) 5.697147145s ago: executing program 4: syz_mount_image$hfsplus(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x3a00014, &(0x7f0000005800)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRESOCT], 0x1, 0x615, &(0x7f0000000a00)="$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") creat(&(0x7f0000000140)='./bus\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0xfecc) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_aout(r1, &(0x7f0000001240)=ANY=[], 0xfecc) 5.514058908s ago: executing program 2: bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$kcm(0x10, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) syz_emit_ethernet(0x348, &(0x7f0000000780)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00ed00", 0x312, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, [{0x0, 0xa, "a78c000005dc8080a2030003004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34060600000000000000dac15084dbaf736b41e5af0502"}, {0x0, 0x1, "00000500000000de25000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf3915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x0, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f005"}, {0xe, 0x6, "b8a3e10000a3e1100000006f00ffc0ffff00000000600000ff0bc0fe000000000000000000000000d9a027440000000000"}, {0x0, 0xc, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d180610027628cf9ef083611c9f68e2e1eb3d8bf9c6ab2642c4808298e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c"}]}}}}}}, 0x0) 5.016244658s ago: executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x9}, 0x10) write(r0, &(0x7f00000000c0)="1b0000001e005f0214fffffffffffff80700000001000000000000", 0x1b) 4.672095334s ago: executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r0, 0x800448d7, &(0x7f0000000080)) 4.537496061s ago: executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x4, 0xffff, 0x0, 0x1}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x3, 0x0, r0}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000001280), 0x2, r1}, 0x38) 4.488947813s ago: executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x10, r0, 0x0) capget(&(0x7f00000000c0), &(0x7f0000000100)) 4.374224917s ago: executing program 3: syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3) listen(0xffffffffffffffff, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) openat$ttynull(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) mprotect(&(0x7f00004a4000/0x800000)=nil, 0x800000, 0x0) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 3.995869829s ago: executing program 0: close(0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000002100)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x7d, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}}, &(0x7f0000003c00)=0x90) syz_mount_image$hfs(&(0x7f0000001600), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=0x0, @ANYBLOB=',iocharset=cp936,iocharset=iso8859-1,uid=', @ANYRESHEX, @ANYBLOB="2c656172743d302930300100"/26], 0x1, 0x2fe, &(0x7f0000000240)="$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") syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xc4, 0x5a, 0x52, 0x40, 0x2058, 0x1005, 0xdc00, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa6, 0x89, 0x16}}]}}]}}, 0x0) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="02c8000c000800010002080400030022e8"], 0x11) socket$inet6(0xa, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f0000000000)="4dcdc7c6223e00000000ffff8137", 0x71, 0x0, &(0x7f0000000140)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @dev}, 0x14) 3.791878106s ago: executing program 2: syz_mount_image$exfat(&(0x7f00000001c0), &(0x7f0000000000)='./file1\x00', 0x1808000, &(0x7f00000000c0)=ANY=[@ANYBLOB='dmask=00000000000000000001777,errors=continue,dmask=00000000000000000000005,iocharset=cp852,iocharset=macceltic,dmask=00000000000000000000005,uid=', @ANYRESHEX=0x0, @ANYBLOB='\x00\x00\x00\x00\a', @ANYRESHEX=0x0, @ANYBLOB=',utf8,namecase=1,\x00'], 0x5, 0x150c, &(0x7f0000000440)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00'}, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) bpf$PROG_BIND_MAP(0xe, &(0x7f0000000080), 0xc) 3.675333041s ago: executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r2, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff"], 0x398}}, 0x0) 3.086886236s ago: executing program 1: bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$kcm(0x10, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) syz_emit_ethernet(0x348, &(0x7f0000000780)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00ed00", 0x312, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, [{0x0, 0xa, "a78c000005dc8080a2030003004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34060600000000000000dac15084dbaf736b41e5af0502"}, {0x0, 0x1, "00000500000000de25000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf3915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x0, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f005"}, {0xe, 0x6, "b8a3e10000a3e1100000006f00ffc0ffff00000000600000ff0bc0fe000000000000000000000000d9a027440000000000"}, {0x0, 0xc, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d180610027628cf9ef083611c9f68e2e1eb3d8bf9c6ab2642c4808298e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c"}]}}}}}}, 0x0) 3.027344864s ago: executing program 4: syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000020961b0a9f15000000000109022d0001000000000904000005030000000921"], 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/ip6_flowlabel\x00') socket$alg(0x26, 0x5, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000140)) socket$nl_route(0x10, 0x3, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2004cb], 0x0, 0x200}) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f0000000200)={0xbe, 0x0, 0x1}) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.919407404s ago: executing program 2: syz_mount_image$hfsplus(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x3a00014, &(0x7f0000005800)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRESOCT], 0x1, 0x615, &(0x7f0000000a00)="$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") creat(&(0x7f0000000140)='./bus\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0xfecc) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_aout(r1, &(0x7f0000001240)=ANY=[], 0xfecc) 2.569248542s ago: executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x9}, 0x10) write(r0, &(0x7f00000000c0)="1b0000001e005f0214fffffffffffff80700000001000000000000", 0x1b) 1.954787512s ago: executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="01000001000000001100020202000900010023"], 0x2c}, 0x1, 0x40030000000000}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, &(0x7f0000000100)) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="580000001400010627bd7000000000000a84"], 0x58}}, 0x0) 1.470959206s ago: executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180100002100000000000000000000108500000075000000a50000002300000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0xed}) ppoll(&(0x7f0000000180)=[{r1}], 0x1, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) madvise(&(0x7f00009b7000/0x2000)=nil, 0x2000, 0x4) read(r1, &(0x7f0000000240)=""/131, 0x83) 1.373755293s ago: executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) ioctl$sock_bt_hci(r0, 0x800448d7, &(0x7f0000000080)) 950.507037ms ago: executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x10, r0, 0x0) capget(&(0x7f00000000c0), &(0x7f0000000100)) 907.854637ms ago: executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x200000000000c, &(0x7f0000000240)="ea00000100000000", 0x8) 520.646757ms ago: executing program 1: r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000006900000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 440.913506ms ago: executing program 3: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = epoll_create1(0x0) r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000140)={@cgroup=r2, r0, 0x11}, 0x14) 204.997578ms ago: executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff"], 0x398}}, 0x0) 0s ago: executing program 3: syz_mount_image$exfat(&(0x7f00000001c0), &(0x7f0000000000)='./file1\x00', 0x1808000, &(0x7f00000000c0)=ANY=[@ANYBLOB='dmask=00000000000000000001777,errors=continue,dmask=00000000000000000000005,iocharset=cp852,iocharset=macceltic,dmask=00000000000000000000005,uid=', @ANYRESHEX=0x0, @ANYBLOB='\x00\x00\x00\x00\a', @ANYRESHEX=0x0, @ANYBLOB=',utf8,namecase=1,\x00'], 0x5, 0x150c, &(0x7f0000000440)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00'}, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) bpf$PROG_BIND_MAP(0xe, &(0x7f0000000080), 0xc) kernel console output (not intermixed with test programs): nge request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 548.406266][ T5462] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 548.790032][ T5462] usb 5-1: Using ep0 maxpacket: 32 [ 549.006715][ T5462] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 549.017343][ T5462] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 549.030795][ T5462] usb 5-1: New USB device found, idVendor=1b96, idProduct=9f0a, bcdDevice= 0.15 [ 549.040315][ T5462] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 549.186271][ T5462] usb 5-1: config 0 descriptor?? [ 549.376261][ T5462] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 550.027892][ T780] usb 5-1: USB disconnect, device number 5 [ 550.734017][ T8033] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 551.058636][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 551.058723][ T29] audit: type=1326 audit(1717958766.328:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8029 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf745a579 code=0x0 [ 552.478581][ T8043] loop0: detected capacity change from 0 to 2048 [ 552.628656][ T8043] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 553.014874][ T8043] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 554.534271][ T8053] loop4: detected capacity change from 0 to 47 [ 554.872112][ T8055] minix: Unknown parameter '00000000000000000000000"Co"'ή_0-%+ t6P'k;/|%T9i(%Z@G~ͱ\%S:UVTOvO7MfOJjN"Bn]XZ [ 554.872112][ T8055] o*e4bL*' [ 556.198809][ T8059] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 558.112849][ T8068] loop0: detected capacity change from 0 to 256 [ 558.189934][ T8070] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 558.245220][ T780] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 558.360389][ T8067] tipc: Started in network mode [ 558.365976][ T8067] tipc: Node identity fc, cluster identity 4711 [ 558.372594][ T8067] tipc: Enabling of bearer rejected, failed to enable media [ 558.489771][ T29] audit: type=1326 audit(1717958773.758:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8069 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7420579 code=0x0 [ 558.549991][ T780] usb 3-1: Using ep0 maxpacket: 32 [ 558.722462][ T780] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 558.732963][ T780] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 558.746313][ T780] usb 3-1: New USB device found, idVendor=1b96, idProduct=9f0a, bcdDevice= 0.15 [ 558.756201][ T780] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 558.819890][ T780] usb 3-1: config 0 descriptor?? [ 558.887898][ T780] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 559.774833][ T780] usb 3-1: USB disconnect, device number 18 [ 560.390667][ T8084] loop4: detected capacity change from 0 to 2048 [ 560.541513][ T8084] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 560.718390][ T8084] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 563.231387][ T8104] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 563.370447][ T29] audit: type=1326 audit(1717958778.708:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8103 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7420579 code=0x0 [ 565.065480][ T5459] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 565.379579][ T5459] usb 5-1: Using ep0 maxpacket: 32 [ 565.514260][ T5459] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 565.525077][ T5459] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 565.538546][ T5459] usb 5-1: New USB device found, idVendor=1b96, idProduct=9f0a, bcdDevice= 0.15 [ 565.548010][ T5459] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 565.578655][ T5459] usb 5-1: config 0 descriptor?? [ 565.673809][ T5459] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 565.785885][ T8117] loop0: detected capacity change from 0 to 2048 [ 565.923921][ T8117] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 566.077032][ T8117] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 566.215424][ T5459] usb 5-1: USB disconnect, device number 6 [ 567.250505][ T8132] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 567.597894][ T8135] loop4: detected capacity change from 0 to 512 [ 567.652610][ T8135] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 567.777870][ T8135] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 567.791616][ T8135] ext4 filesystem being mounted at /root/syzkaller-testdir1775715245/syzkaller.x8fkSl/177/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 568.104659][ T8147] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 568.274197][ T29] audit: type=1326 audit(1717958783.568:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8146 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7409579 code=0x0 [ 568.404209][ T5078] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 569.113913][ T8154] loop2: detected capacity change from 0 to 2048 [ 569.245572][ T8154] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 569.398462][ T8154] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 569.556527][ T8158] fuse: blksize only supported for fuseblk [ 570.540167][ T8165] loop0: detected capacity change from 0 to 512 [ 570.655274][ T5459] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 570.711048][ T8165] journal_path: Lookup failure for './file0/file0' [ 570.718063][ T8165] EXT4-fs: error: could not find journal device path [ 571.077664][ T5459] usb 3-1: Using ep0 maxpacket: 32 [ 571.201729][ T8168] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 571.214791][ T5459] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 571.227045][ T5459] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 571.240584][ T5459] usb 3-1: New USB device found, idVendor=1b96, idProduct=9f0a, bcdDevice= 0.15 [ 571.250063][ T5459] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 571.326210][ T5459] usb 3-1: config 0 descriptor?? [ 571.394434][ T5459] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 571.736455][ T8171] netlink: 'syz-executor.0': attribute type 11 has an invalid length. [ 571.950921][ T5289] usb 3-1: USB disconnect, device number 19 [ 572.613050][ T8186] loop4: detected capacity change from 0 to 16 [ 572.662267][ T8186] erofs: (device loop4): mounted with root inode @ nid 36. [ 573.008729][ T8190] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 573.161797][ T29] audit: type=1326 audit(1717958788.488:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8189 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7409579 code=0x0 [ 573.386874][ T8192] loop3: detected capacity change from 0 to 2048 [ 573.433951][ T8192] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 573.522286][ T8192] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 574.105521][ T8203] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 574.217770][ T8205] loop3: detected capacity change from 0 to 512 [ 574.344625][ T8205] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 574.357998][ T8205] ext4 filesystem being mounted at /root/syzkaller-testdir2741570391/syzkaller.DCv2rB/182/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 574.410505][ T8211] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1216: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 574.623858][ T29] audit: type=1804 audit(1717958789.898:549): pid=8205 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2741570391/syzkaller.DCv2rB/182/file0/file1" dev="loop3" ino=15 res=1 errno=0 [ 574.805731][ T5089] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 575.479428][ T3905] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 575.620998][ T3905] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 575.763102][ T3905] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 575.957482][ T3905] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.146594][ T5135] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 576.316306][ T3905] bridge_slave_1: left allmulticast mode [ 576.322303][ T3905] bridge_slave_1: left promiscuous mode [ 576.335609][ T3905] bridge0: port 2(bridge_slave_1) entered disabled state [ 576.408186][ T3905] bridge_slave_0: left allmulticast mode [ 576.414304][ T3905] bridge_slave_0: left promiscuous mode [ 576.421013][ T3905] bridge0: port 1(bridge_slave_0) entered disabled state [ 576.433793][ T5135] usb 5-1: Using ep0 maxpacket: 32 [ 576.604712][ T5135] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 576.615330][ T5135] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 576.628993][ T5135] usb 5-1: New USB device found, idVendor=1b96, idProduct=9f0a, bcdDevice= 0.15 [ 576.642675][ T5135] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 576.907748][ T5135] usb 5-1: config 0 descriptor?? [ 577.027749][ T5135] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 577.049988][ T8229] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 577.230968][ T3905] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 577.464478][ T3905] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 577.509286][ T3905] bond0 (unregistering): Released all slaves [ 577.795428][ T3905] tipc: Left network mode [ 578.038650][ T5459] usb 5-1: USB disconnect, device number 7 [ 579.483398][ T3905] hsr_slave_0: left promiscuous mode [ 579.608863][ T3905] hsr_slave_1: left promiscuous mode [ 579.658085][ T3905] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 579.666000][ T3905] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 579.719081][ T3905] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 579.727060][ T3905] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 579.794064][ T3905] veth1_macvtap: left promiscuous mode [ 579.799880][ T3905] veth0_macvtap: left promiscuous mode [ 579.810886][ T3905] veth1_vlan: left promiscuous mode [ 579.816615][ T3905] veth0_vlan: left promiscuous mode [ 579.846449][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 579.861556][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 579.948165][ T3905] infiniband syz0: set down [ 580.035172][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 580.049632][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 580.061765][ T51] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 580.071945][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 580.378698][ T3905] pimreg (unregistering): left allmulticast mode [ 580.617720][ T5758] smc: removing ib device syz0 [ 580.823445][ T8251] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 580.862210][ T3905] team0 (unregistering): Port device team_slave_1 removed [ 580.909867][ T3905] team0 (unregistering): Port device team_slave_0 removed [ 581.494485][ T5285] infiniband syz0: ib_query_port failed (-19) [ 582.328728][ T51] Bluetooth: hci2: command tx timeout [ 583.383153][ T8262] netlink: 1272 bytes leftover after parsing attributes in process `syz-executor.4'. [ 584.018719][ T8267] loop2: detected capacity change from 0 to 16 [ 584.083167][ T8267] erofs: (device loop2): mounted with root inode @ nid 36. [ 584.418848][ T51] Bluetooth: hci2: command tx timeout [ 584.534186][ T8243] chnl_net:caif_netlink_parms(): no params data found [ 584.650660][ T8274] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 585.626780][ T8283] loop2: detected capacity change from 0 to 2048 [ 585.773709][ T5285] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 585.857253][ T8283] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 586.027374][ T8243] bridge0: port 1(bridge_slave_0) entered blocking state [ 586.037046][ T8243] bridge0: port 1(bridge_slave_0) entered disabled state [ 586.045077][ T8243] bridge_slave_0: entered allmulticast mode [ 586.061972][ T8243] bridge_slave_0: entered promiscuous mode [ 586.090522][ T8243] bridge0: port 2(bridge_slave_1) entered blocking state [ 586.098884][ T8243] bridge0: port 2(bridge_slave_1) entered disabled state [ 586.106996][ T8243] bridge_slave_1: entered allmulticast mode [ 586.116834][ T8243] bridge_slave_1: entered promiscuous mode [ 586.173667][ T5285] usb 4-1: Using ep0 maxpacket: 32 [ 586.284631][ T8290] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 234: padding at end of block bitmap is not set [ 586.313923][ T5285] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 586.324473][ T5285] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 586.337891][ T5285] usb 4-1: New USB device found, idVendor=1b96, idProduct=9f0a, bcdDevice= 0.15 [ 586.347630][ T5285] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 586.366892][ T8243] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 586.384251][ T8290] EXT4-fs (loop2): Remounting filesystem read-only [ 586.424389][ T5285] usb 4-1: config 0 descriptor?? [ 586.456166][ T5082] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 586.472627][ T8243] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 586.494587][ T51] Bluetooth: hci2: command tx timeout [ 586.527124][ T5285] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 586.730238][ T8243] team0: Port device team_slave_0 added [ 586.806457][ T8243] team0: Port device team_slave_1 added [ 586.996356][ T8294] pim6reg1: entered promiscuous mode [ 587.001925][ T8294] pim6reg1: entered allmulticast mode [ 587.155136][ T8243] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 587.162362][ T8243] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 587.192426][ T8243] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 587.244955][ T780] usb 4-1: USB disconnect, device number 15 [ 587.464620][ T8243] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 587.471847][ T8243] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 587.501995][ T8243] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 587.961348][ T8243] hsr_slave_0: entered promiscuous mode [ 587.982066][ T8243] hsr_slave_1: entered promiscuous mode [ 588.017861][ T8243] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 588.026117][ T8243] Cannot create hsr debugfs directory [ 588.573930][ T51] Bluetooth: hci2: command tx timeout [ 589.405509][ T8317] loop4: detected capacity change from 0 to 128 [ 589.514191][ T8317] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 589.584191][ T8317] ext4 filesystem being mounted at /root/syzkaller-testdir1775715245/syzkaller.x8fkSl/194/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 590.099118][ T5078] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 590.157387][ T8243] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 590.348552][ T8243] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 590.469925][ T8243] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 590.536691][ T8243] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 590.671465][ T1080] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.820851][ T1080] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.375233][ T8340] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 591.500067][ T1080] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.666239][ T1080] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.768847][ T8342] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 592.050705][ T1080] bridge_slave_1: left allmulticast mode [ 592.057912][ T1080] bridge_slave_1: left promiscuous mode [ 592.064837][ T1080] bridge0: port 2(bridge_slave_1) entered disabled state [ 592.088216][ T1080] bridge_slave_0: left allmulticast mode [ 592.098731][ T1080] bridge_slave_0: left promiscuous mode [ 592.106665][ T1080] bridge0: port 1(bridge_slave_0) entered disabled state [ 592.151522][ T5095] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 592.165556][ T5095] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 592.185354][ T5095] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 592.194305][ T8303] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 592.325073][ T5095] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 592.338195][ T5095] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 592.371764][ T5095] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 592.486027][ T8303] usb 3-1: Using ep0 maxpacket: 32 [ 592.690406][ T8303] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 592.701954][ T8303] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 592.718514][ T8303] usb 3-1: New USB device found, idVendor=1b96, idProduct=9f0a, bcdDevice= 0.15 [ 592.729096][ T8303] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 592.806682][ T8303] usb 3-1: config 0 descriptor?? [ 592.864295][ T1224] ieee802154 phy0 wpan0: encryption failed: -22 [ 592.871031][ T1224] ieee802154 phy1 wpan1: encryption failed: -22 [ 592.964748][ T8303] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 592.980631][ T1080] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 593.067567][ T1080] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 593.117936][ T1080] bond0 (unregistering): Released all slaves [ 593.623693][ T8243] 8021q: adding VLAN 0 to HW filter on device bond0 [ 593.756931][ T5458] usb 3-1: USB disconnect, device number 20 [ 594.304761][ T1080] hsr_slave_0: left promiscuous mode [ 594.314149][ T1080] hsr_slave_1: left promiscuous mode [ 594.365904][ T1080] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 594.373871][ T1080] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 594.388902][ T1080] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 594.396819][ T1080] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 594.416373][ T1080] veth1_macvtap: left promiscuous mode [ 594.422200][ T1080] veth0_macvtap: left promiscuous mode [ 594.430090][ T1080] veth1_vlan: left promiscuous mode [ 594.435916][ T1080] veth0_vlan: left promiscuous mode [ 594.658084][ T5095] Bluetooth: hci3: command tx timeout [ 595.382494][ T1080] team0 (unregistering): Port device team_slave_1 removed [ 595.426163][ T1080] team0 (unregistering): Port device team_slave_0 removed [ 595.866495][ T8243] 8021q: adding VLAN 0 to HW filter on device team0 [ 596.078945][ T8366] vlan2: entered promiscuous mode [ 596.084454][ T8366] team0: entered promiscuous mode [ 596.100373][ T8366] team0: Device vlan2 is already an upper device of the team interface [ 596.111510][ T8378] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 596.124257][ T8366] team0: left promiscuous mode [ 596.312674][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 596.320589][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 596.443869][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 596.451665][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 596.739986][ T5095] Bluetooth: hci3: command tx timeout [ 596.978120][ T8345] chnl_net:caif_netlink_parms(): no params data found [ 597.474362][ T8384] loop3: detected capacity change from 0 to 2048 [ 597.671265][ T8384] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 597.886784][ T8384] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 598.813533][ T5095] Bluetooth: hci3: command tx timeout [ 598.969739][ T8345] bridge0: port 1(bridge_slave_0) entered blocking state [ 598.977783][ T8345] bridge0: port 1(bridge_slave_0) entered disabled state [ 598.986439][ T8345] bridge_slave_0: entered allmulticast mode [ 598.995757][ T8345] bridge_slave_0: entered promiscuous mode [ 599.064224][ T8345] bridge0: port 2(bridge_slave_1) entered blocking state [ 599.072182][ T8345] bridge0: port 2(bridge_slave_1) entered disabled state [ 599.080113][ T8345] bridge_slave_1: entered allmulticast mode [ 599.089882][ T8345] bridge_slave_1: entered promiscuous mode [ 599.169000][ T780] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 599.314487][ T8345] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 599.386135][ T8345] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 599.406957][ T8243] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 599.482907][ T780] usb 5-1: Using ep0 maxpacket: 32 [ 599.620173][ T780] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 599.621750][ T8345] team0: Port device team_slave_0 added [ 599.630766][ T780] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 599.649751][ T780] usb 5-1: New USB device found, idVendor=1b96, idProduct=9f0a, bcdDevice= 0.15 [ 599.659284][ T780] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 599.721203][ T780] usb 5-1: config 0 descriptor?? [ 599.753851][ T8345] team0: Port device team_slave_1 added [ 599.904884][ T780] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 600.064854][ T8345] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 600.072062][ T8345] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 600.102323][ T8345] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 600.226780][ T8345] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 600.234213][ T8345] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 600.260780][ T8345] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 600.420100][ T8243] veth0_vlan: entered promiscuous mode [ 600.602103][ T780] usb 5-1: USB disconnect, device number 8 [ 600.642052][ T8243] veth1_vlan: entered promiscuous mode [ 600.686895][ T8415] loop3: detected capacity change from 0 to 512 [ 600.774875][ T8415] EXT4-fs error (device loop3): mb_free_blocks:1940: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 600.858844][ T8345] hsr_slave_0: entered promiscuous mode [ 600.884748][ T8415] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz-executor.3: invalid indirect mapped block 1 (level 1) [ 600.904201][ T5095] Bluetooth: hci3: command tx timeout [ 600.916445][ T8345] hsr_slave_1: entered promiscuous mode [ 600.930047][ T8415] EXT4-fs (loop3): 1 truncate cleaned up [ 600.936389][ T8415] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 600.969002][ T8345] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 600.977243][ T8345] Cannot create hsr debugfs directory [ 601.374358][ T5089] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 601.474610][ T8243] veth0_macvtap: entered promiscuous mode [ 601.571955][ T8243] veth1_macvtap: entered promiscuous mode [ 602.152757][ T8425] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 602.183049][ T8243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 602.194348][ T8243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 602.204929][ T8243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 602.215761][ T8243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 602.236519][ T8243] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 602.371622][ T8243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 602.382775][ T8243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 602.393959][ T8243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 602.404879][ T8243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 602.422183][ T8243] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 602.637856][ T8243] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.651259][ T8243] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.661920][ T8243] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.671189][ T8243] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.322388][ T8345] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 603.377859][ T8345] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 603.527828][ T8345] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 603.602461][ T8435] loop4: detected capacity change from 0 to 2048 [ 603.609328][ T8345] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 603.855756][ T8435] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 604.038749][ T8435] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 605.339540][ T8345] 8021q: adding VLAN 0 to HW filter on device bond0 [ 605.595065][ T8345] 8021q: adding VLAN 0 to HW filter on device team0 [ 605.720310][ T4683] bridge0: port 1(bridge_slave_0) entered blocking state [ 605.728270][ T4683] bridge0: port 1(bridge_slave_0) entered forwarding state [ 605.831252][ T4683] bridge0: port 2(bridge_slave_1) entered blocking state [ 605.839249][ T4683] bridge0: port 2(bridge_slave_1) entered forwarding state [ 607.055854][ T4683] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 607.358180][ T4683] usb 3-1: Using ep0 maxpacket: 32 [ 607.494783][ T4683] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 607.506843][ T4683] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 607.521811][ T4683] usb 3-1: New USB device found, idVendor=1b96, idProduct=9f0a, bcdDevice= 0.15 [ 607.528763][ T8477] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 607.531796][ T4683] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 607.625889][ T4683] usb 3-1: config 0 descriptor?? [ 607.678625][ T4683] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 608.341730][ T780] usb 3-1: USB disconnect, device number 21 [ 608.505814][ T8345] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 608.827844][ T8491] loop4: detected capacity change from 0 to 2048 [ 608.965951][ T8491] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 609.048334][ T8345] veth0_vlan: entered promiscuous mode [ 609.166874][ T8345] veth1_vlan: entered promiscuous mode [ 609.176410][ T8491] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 609.570559][ T8345] veth0_macvtap: entered promiscuous mode [ 609.697541][ T8345] veth1_macvtap: entered promiscuous mode [ 609.942213][ T8345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 609.953174][ T8345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 609.963802][ T8345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 609.974661][ T8345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 609.984852][ T8345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 609.995676][ T8345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 610.011851][ T8345] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 610.299681][ T8345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 610.312526][ T8345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 610.326645][ T8345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 610.339067][ T8345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 610.349272][ T8345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 610.360901][ T8345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 610.377073][ T8345] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 610.468656][ T8345] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 610.478002][ T8345] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 610.487213][ T8345] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 610.496806][ T8345] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.657723][ T3339] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 611.666070][ T3339] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 611.746000][ T3339] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 611.754574][ T3339] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 611.872968][ T8522] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 612.643115][ T8530] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 612.838762][ T29] audit: type=1326 audit(1717958828.128:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8528 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf744c579 code=0x0 [ 613.571210][ T8541] loop3: detected capacity change from 0 to 2048 [ 613.677961][ T8541] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 613.890720][ T8541] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 613.904265][ T25] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 614.184422][ T25] usb 3-1: Using ep0 maxpacket: 32 [ 614.324157][ T25] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 614.336269][ T25] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 614.351326][ T25] usb 3-1: New USB device found, idVendor=1b96, idProduct=9f0a, bcdDevice= 0.15 [ 614.361082][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 614.427151][ T25] usb 3-1: config 0 descriptor?? [ 614.491293][ T25] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 615.456517][ T25] usb 3-1: USB disconnect, device number 22 [ 615.728450][ T8572] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 615.738079][ T8572] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 615.873128][ T8572] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 615.957794][ T8574] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 615.988545][ T8572] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 616.030944][ T8572] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 616.054949][ T8572] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 617.463214][ T8590] vcan0: entered promiscuous mode [ 617.468843][ T8590] vlan2: entered promiscuous mode [ 617.484955][ T8590] vcan0: left promiscuous mode [ 617.613805][ T8593] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 617.779282][ T29] audit: type=1326 audit(1717958833.038:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8591 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf744c579 code=0x0 [ 617.876407][ T8594] loop3: detected capacity change from 0 to 2048 [ 617.981437][ T8594] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 618.202605][ T8594] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 618.394038][ T4337] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 618.402034][ T4337] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 618.755050][ T4337] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 618.763157][ T4337] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 620.045908][ T8619] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 620.696713][ T780] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 621.015023][ T780] usb 3-1: Using ep0 maxpacket: 32 [ 621.156097][ T780] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 621.166673][ T780] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 621.184788][ T780] usb 3-1: New USB device found, idVendor=1b96, idProduct=9f0a, bcdDevice= 0.15 [ 621.196016][ T780] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 621.287116][ T780] usb 3-1: config 0 descriptor?? [ 621.362656][ T780] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 621.371114][ T8634] loop4: detected capacity change from 0 to 2048 [ 621.379962][ T8636] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 621.590657][ T8634] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 621.705491][ T29] audit: type=1326 audit(1717958836.998:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8635 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7431579 code=0x0 [ 621.820776][ T8634] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 622.010187][ T8624] kvm: pic: level sensitive irq not supported [ 622.010538][ T8624] kvm: pic: non byte read [ 622.060020][ T8624] kvm: pic: level sensitive irq not supported [ 622.060451][ T8624] kvm: pic: non byte read [ 622.085112][ T8646] bond_slave_0: entered promiscuous mode [ 622.091158][ T8646] bond_slave_1: entered promiscuous mode [ 622.097467][ T8646] team_slave_0: entered promiscuous mode [ 622.103615][ T8646] team_slave_1: entered promiscuous mode [ 622.106373][ T8624] kvm: pic: level sensitive irq not supported [ 622.117469][ T8646] vlan2: entered promiscuous mode [ 622.124738][ T8624] kvm: pic: non byte read [ 622.129075][ T8646] bond0: entered promiscuous mode [ 622.131540][ T8646] team0: entered promiscuous mode [ 622.189155][ T8624] kvm: pic: level sensitive irq not supported [ 622.189777][ T8624] kvm: pic: non byte read [ 622.226214][ T8624] kvm: pic: level sensitive irq not supported [ 622.228008][ T8624] kvm: pic: non byte read [ 622.246956][ T8646] bond0: left promiscuous mode [ 622.256729][ T8646] team0: left promiscuous mode [ 622.266618][ T8646] bond_slave_0: left promiscuous mode [ 622.272300][ T8646] bond_slave_1: left promiscuous mode [ 622.278091][ T8646] team_slave_0: left promiscuous mode [ 622.284054][ T8646] team_slave_1: left promiscuous mode [ 622.426608][ T5135] usb 3-1: USB disconnect, device number 23 [ 623.779445][ T8662] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 625.134911][ T8678] loop2: detected capacity change from 0 to 2048 [ 625.231385][ T8678] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 625.367844][ T8681] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 625.474863][ T8678] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 625.637989][ T29] audit: type=1326 audit(1717958840.958:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8679 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf744c579 code=0x0 [ 626.323927][ T8] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 626.653537][ T8] usb 4-1: Using ep0 maxpacket: 32 [ 626.773930][ T8] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 626.784787][ T8] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 626.798188][ T8] usb 4-1: New USB device found, idVendor=1b96, idProduct=9f0a, bcdDevice= 0.15 [ 626.812900][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 626.922428][ T8] usb 4-1: config 0 descriptor?? [ 626.949464][ T8702] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 627.010471][ T8] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 627.216597][ T8705] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 627.615961][ T8692] kvm: pic: level sensitive irq not supported [ 627.616518][ T8692] kvm: pic: non byte read [ 627.704263][ T8692] kvm: pic: level sensitive irq not supported [ 627.704706][ T8692] kvm: pic: non byte read [ 627.755739][ T8692] kvm: pic: level sensitive irq not supported [ 627.756181][ T8692] kvm: pic: non byte read [ 627.814608][ T8692] kvm: pic: level sensitive irq not supported [ 627.815056][ T8692] kvm: pic: non byte read [ 627.876283][ T8692] kvm: pic: level sensitive irq not supported [ 627.876837][ T8692] kvm: pic: non byte read [ 628.104153][ T8] usb 4-1: USB disconnect, device number 16 [ 628.995916][ T8724] loop4: detected capacity change from 0 to 2048 [ 629.096211][ T8724] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 629.339134][ T8730] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 629.513945][ T8731] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 629.773731][ T29] audit: type=1326 audit(1717958845.068:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8729 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf744c579 code=0x0 [ 629.963778][ T8738] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 631.995236][ T780] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 632.246590][ T780] usb 2-1: Using ep0 maxpacket: 32 [ 632.366533][ T780] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 632.377253][ T780] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 632.390722][ T780] usb 2-1: New USB device found, idVendor=1b96, idProduct=9f0a, bcdDevice= 0.15 [ 632.400220][ T780] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 632.477276][ T29] audit: type=1326 audit(1717958847.808:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8767 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7423579 code=0x0 [ 632.484943][ T8766] loop0: detected capacity change from 0 to 2048 [ 632.526140][ T780] usb 2-1: config 0 descriptor?? [ 632.588470][ T780] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 632.624208][ T8766] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 632.916274][ T8770] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 633.288995][ T780] usb 2-1: USB disconnect, device number 13 [ 633.545983][ T8779] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 633.726547][ T29] audit: type=1326 audit(1717958849.038:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8778 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7420579 code=0x0 [ 634.672390][ T8793] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 635.950725][ T780] hid-generic 0000:0000:0000.0004: unknown main item tag 0x1 [ 635.958760][ T780] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 635.966647][ T780] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 635.974789][ T780] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 635.982997][ T780] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 635.991128][ T780] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 635.999035][ T780] hid-generic 0000:0000:0000.0004: unknown main item tag 0x4 [ 636.007098][ T780] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 636.015049][ T780] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 636.022797][ T780] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 636.035764][ T780] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 636.046476][ T780] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 636.054505][ T780] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 636.062674][ T780] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 636.070533][ T780] hid-generic 0000:0000:0000.0004: unknown main item tag 0x2 [ 636.078475][ T780] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 636.086349][ T780] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 636.094260][ T780] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 636.106246][ T780] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 636.114087][ T780] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 636.121834][ T780] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 636.134706][ T780] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 636.145392][ T780] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 636.153465][ T780] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 636.161280][ T780] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 636.169166][ T780] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 636.176991][ T780] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 636.184816][ T780] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 636.192570][ T780] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 636.204634][ T780] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 636.212366][ T780] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 636.220258][ T780] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 636.228169][ T780] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 636.241638][ T780] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 636.252502][ T780] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 636.260417][ T780] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 636.268282][ T780] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 636.276256][ T780] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 636.327389][ T8807] loop1: detected capacity change from 0 to 2048 [ 636.462556][ T780] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz0] on syz0 [ 636.474025][ T8807] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 636.626237][ T29] audit: type=1804 audit(1717958851.928:557): pid=8816 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir62064608/syzkaller.Ad1Ovk/13/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/bus" dev="loop1" ino=1367 res=1 errno=0 [ 636.785902][ T8807] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 637.043782][ T780] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 637.183746][ T4683] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 637.532513][ T8825] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 637.554883][ T780] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 637.569772][ T780] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 637.581365][ T780] usb 4-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 637.590825][ T780] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 637.939448][ T4683] usb 3-1: Using ep0 maxpacket: 32 [ 637.955688][ T780] usb 4-1: config 0 descriptor?? [ 638.036950][ T29] audit: type=1326 audit(1717958853.338:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8824 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf744c579 code=0x0 [ 638.070643][ T4683] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 638.086165][ T4683] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 638.101131][ T4683] usb 3-1: New USB device found, idVendor=1b96, idProduct=9f0a, bcdDevice= 0.15 [ 638.110810][ T4683] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 638.155897][ T4683] usb 3-1: config 0 descriptor?? [ 638.231422][ T4683] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 638.456825][ T51] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 638.488484][ T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 638.502476][ T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 638.528670][ T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 638.551992][ T51] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 638.568393][ T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 638.581517][ T8827] mmap: syz-executor.4 (8827) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 638.763536][ T780] logitech-hidpp-device 0003:046D:C086.0005: hidraw0: USB HID v0.00 Device [HID 046d:c086] on usb-dummy_hcd.3-1/input0 [ 638.849347][ T780] usb 4-1: USB disconnect, device number 17 [ 639.229419][ T5135] usb 3-1: USB disconnect, device number 24 [ 640.278580][ T4337] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 640.581304][ T4337] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 640.684005][ T8831] chnl_net:caif_netlink_parms(): no params data found [ 640.737768][ T51] Bluetooth: hci5: command tx timeout [ 640.792608][ T4337] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 640.996402][ T4337] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 641.405536][ T4337] bridge_slave_1: left allmulticast mode [ 641.411624][ T4337] bridge_slave_1: left promiscuous mode [ 641.419031][ T4337] bridge0: port 2(bridge_slave_1) entered disabled state [ 641.464226][ T8858] loop4: detected capacity change from 0 to 2048 [ 641.484677][ T4337] bridge_slave_0: left allmulticast mode [ 641.490765][ T4337] bridge_slave_0: left promiscuous mode [ 641.498503][ T4337] bridge0: port 1(bridge_slave_0) entered disabled state [ 642.248507][ T4337] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 642.279708][ T29] audit: type=1326 audit(1717958857.578:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8863 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf744c579 code=0x0 [ 642.340058][ T4337] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 642.394099][ T4337] bond0 (unregistering): Released all slaves [ 642.571931][ T8866] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 642.815620][ T51] Bluetooth: hci5: command tx timeout [ 643.272911][ T4337] hsr_slave_0: left promiscuous mode [ 643.323142][ T4337] hsr_slave_1: left promiscuous mode [ 643.335230][ T5458] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 643.352156][ T4337] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 643.361766][ T4337] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 643.417686][ T4337] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 643.426217][ T4337] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 643.524372][ T4337] veth1_macvtap: left promiscuous mode [ 643.530239][ T4337] veth0_macvtap: left promiscuous mode [ 643.537979][ T4337] veth1_vlan: left promiscuous mode [ 643.543940][ T4337] veth0_vlan: left promiscuous mode [ 643.608067][ T5458] usb 5-1: Using ep0 maxpacket: 32 [ 643.764119][ T5458] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 643.775011][ T5458] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 643.788449][ T5458] usb 5-1: New USB device found, idVendor=1b96, idProduct=9f0a, bcdDevice= 0.15 [ 643.798050][ T5458] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 643.977638][ T5458] usb 5-1: config 0 descriptor?? [ 644.063877][ T5458] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 644.843931][ T5458] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 644.907320][ T5095] Bluetooth: hci5: command tx timeout [ 644.925187][ T4337] team0 (unregistering): Port device team_slave_1 removed [ 644.970182][ T4337] team0 (unregistering): Port device team_slave_0 removed [ 645.324760][ T5458] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 645.335262][ T5458] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 645.609393][ T8831] bridge0: port 1(bridge_slave_0) entered blocking state [ 645.617494][ T5135] usb 5-1: USB disconnect, device number 9 [ 645.626925][ T8831] bridge0: port 1(bridge_slave_0) entered disabled state [ 645.635080][ T8831] bridge_slave_0: entered allmulticast mode [ 645.644957][ T8831] bridge_slave_0: entered promiscuous mode [ 645.704265][ T5458] usb 3-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 645.713927][ T5458] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 645.722239][ T5458] usb 3-1: Product: syz [ 645.728583][ T5458] usb 3-1: Manufacturer: syz [ 645.734353][ T5458] usb 3-1: SerialNumber: syz [ 645.774218][ T8831] bridge0: port 2(bridge_slave_1) entered blocking state [ 645.775218][ T5458] usb 3-1: config 0 descriptor?? [ 645.782001][ T8831] bridge0: port 2(bridge_slave_1) entered disabled state [ 645.794793][ T8831] bridge_slave_1: entered allmulticast mode [ 645.804802][ T8831] bridge_slave_1: entered promiscuous mode [ 646.128659][ T8831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 646.221429][ T8831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 646.312011][ T5458] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 646.350448][ T5458] usb 3-1: USB disconnect, device number 25 [ 646.565911][ T8831] team0: Port device team_slave_0 added [ 646.647974][ T8831] team0: Port device team_slave_1 added [ 646.941891][ T8831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 646.949839][ T8831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 646.976538][ T8831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 646.992049][ T5095] Bluetooth: hci5: command tx timeout [ 647.077204][ T8831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 647.088034][ T8831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 647.115976][ T8831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 647.581517][ T8831] hsr_slave_0: entered promiscuous mode [ 647.606193][ T8831] hsr_slave_1: entered promiscuous mode [ 647.627272][ T8831] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 647.635502][ T8831] Cannot create hsr debugfs directory [ 647.895309][ T8911] fuse: Bad value for 'fd' [ 648.592137][ T8916] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 648.786633][ T29] audit: type=1326 audit(1717958864.088:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8915 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7420579 code=0x0 [ 649.487191][ T8831] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 649.605402][ T8831] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 649.729030][ T8831] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 649.829836][ T8831] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 651.324878][ T5135] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 651.463742][ T8831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 651.669915][ T8831] 8021q: adding VLAN 0 to HW filter on device team0 [ 651.724546][ T5135] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 651.736024][ T5135] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 651.746319][ T5135] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 651.755075][ T5458] bridge0: port 1(bridge_slave_0) entered blocking state [ 651.759754][ T5135] usb 4-1: New USB device found, idVendor=11c2, idProduct=2208, bcdDevice= 0.00 [ 651.767001][ T5458] bridge0: port 1(bridge_slave_0) entered forwarding state [ 651.775748][ T5135] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 651.883959][ T8] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 651.900087][ T5135] usb 4-1: config 0 descriptor?? [ 651.939982][ T5458] bridge0: port 2(bridge_slave_1) entered blocking state [ 651.948003][ T5458] bridge0: port 2(bridge_slave_1) entered forwarding state [ 652.184101][ T8] usb 1-1: Using ep0 maxpacket: 32 [ 652.344129][ T8] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 652.355227][ T8] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 652.368760][ T8] usb 1-1: New USB device found, idVendor=1b96, idProduct=9f0a, bcdDevice= 0.15 [ 652.378294][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 652.486626][ T8] usb 1-1: config 0 descriptor?? [ 652.556433][ T8] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 652.591430][ T5135] betop 0003:11C2:2208.0006: item fetching failed at offset 4/5 [ 652.676855][ T5135] betop 0003:11C2:2208.0006: parse failed [ 652.683995][ T5135] betop 0003:11C2:2208.0006: probe with driver betop failed with error -22 [ 652.796970][ T4505] usb 4-1: USB disconnect, device number 18 [ 653.042474][ T5135] usb 1-1: USB disconnect, device number 15 [ 653.952661][ T8831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 654.279413][ T1224] ieee802154 phy0 wpan0: encryption failed: -22 [ 654.287073][ T1224] ieee802154 phy1 wpan1: encryption failed: -22 [ 654.496061][ T8831] veth0_vlan: entered promiscuous mode [ 654.596986][ T8831] veth1_vlan: entered promiscuous mode [ 654.699058][ T8960] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 654.929778][ T29] audit: type=1326 audit(1717958870.228:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8958 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf744c579 code=0x0 [ 654.982286][ T8831] veth0_macvtap: entered promiscuous mode [ 655.060263][ T8831] veth1_macvtap: entered promiscuous mode [ 655.238739][ T8831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 655.249607][ T8831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 655.259794][ T8831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 655.271790][ T8831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 655.286607][ T8831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 655.298961][ T8831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 655.315329][ T8831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 655.581300][ T8831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 655.595998][ T8831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 655.608036][ T8831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 655.619353][ T8831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 655.629642][ T8831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 655.640580][ T8831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 655.656651][ T8831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 655.879569][ T8831] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 655.890634][ T8831] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 655.905729][ T8831] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 655.918837][ T8831] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 657.232708][ T8983] 8021q: adding VLAN 0 to HW filter on device bond0 [ 657.249920][ T8983] team0: Port device bond0 added [ 658.773587][ T4683] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 659.074764][ T4683] usb 1-1: Using ep0 maxpacket: 32 [ 659.234089][ T4683] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 659.244820][ T4683] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 659.258230][ T4683] usb 1-1: New USB device found, idVendor=1b96, idProduct=9f0a, bcdDevice= 0.15 [ 659.268283][ T4683] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 659.357042][ T4683] usb 1-1: config 0 descriptor?? [ 659.426075][ T4683] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 660.002868][ T4683] usb 1-1: USB disconnect, device number 16 [ 661.101194][ T9014] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 661.297458][ T29] audit: type=1326 audit(1717958876.608:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9013 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7423579 code=0x0 [ 662.735772][ T4505] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 662.926901][ T1080] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 662.935394][ T1080] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 663.063504][ T4337] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 663.071787][ T4337] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 663.156540][ T4505] usb 1-1: Using ep0 maxpacket: 16 [ 663.284608][ T4505] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 663.296106][ T4505] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 663.309501][ T4505] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 663.319164][ T4505] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 663.363621][ T4505] usb 1-1: config 0 descriptor?? [ 663.885743][ T4505] microsoft 0003:045E:07DA.0007: No inputs registered, leaving [ 663.931422][ T4505] microsoft 0003:045E:07DA.0007: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 663.943813][ T4505] microsoft 0003:045E:07DA.0007: no inputs found [ 663.950454][ T4505] microsoft 0003:045E:07DA.0007: could not initialize ff, continuing anyway [ 664.140781][ T9039] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 664.150258][ T9039] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 664.432682][ T9039] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 665.837775][ T8303] usb 1-1: USB disconnect, device number 17 [ 665.903807][ T4683] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 666.239389][ T4683] usb 2-1: Using ep0 maxpacket: 32 [ 666.374169][ T4683] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 666.385099][ T4683] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 666.398531][ T4683] usb 2-1: New USB device found, idVendor=1b96, idProduct=9f0a, bcdDevice= 0.15 [ 666.408090][ T4683] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 666.489618][ T4683] usb 2-1: config 0 descriptor?? [ 666.595711][ T4683] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 666.649362][ T9057] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 666.842249][ T29] audit: type=1326 audit(1717958882.128:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9056 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7420579 code=0x0 [ 667.235948][ T4683] usb 2-1: USB disconnect, device number 14 [ 670.899116][ T9104] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 671.207164][ T29] audit: type=1326 audit(1717958886.508:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9102 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73f0579 code=0x0 [ 671.823645][ T5461] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 672.112575][ T5461] usb 5-1: Using ep0 maxpacket: 32 [ 672.254291][ T5461] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 672.265135][ T5461] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 672.283896][ T5461] usb 5-1: New USB device found, idVendor=1b96, idProduct=9f0a, bcdDevice= 0.15 [ 672.295627][ T5461] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 672.382028][ T5461] usb 5-1: config 0 descriptor?? [ 672.462027][ T5461] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 673.254841][ T4505] usb 5-1: USB disconnect, device number 10 [ 674.980146][ T9152] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 675.259576][ T29] audit: type=1326 audit(1717958890.418:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9150 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7420579 code=0x0 [ 675.556177][ T9159] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 676.554972][ T4505] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 676.934245][ T4505] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 676.945687][ T4505] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 676.959464][ T4505] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 676.968974][ T4505] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 677.035331][ T4505] usb 3-1: config 0 descriptor?? [ 677.083630][ T5289] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 677.348700][ T5289] usb 2-1: Using ep0 maxpacket: 32 [ 677.486779][ T5289] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 677.501706][ T5289] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 677.516929][ T5289] usb 2-1: New USB device found, idVendor=1b96, idProduct=9f0a, bcdDevice= 0.15 [ 677.526523][ T5289] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 677.560946][ T4505] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 677.568887][ T4505] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 677.589286][ T5289] usb 2-1: config 0 descriptor?? [ 677.663049][ T4505] plantronics 0003:047F:FFFF.0008: No inputs registered, leaving [ 677.690454][ T5289] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 677.738041][ T4505] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 677.903977][ T4505] usb 3-1: USB disconnect, device number 26 [ 678.207536][ T4683] usb 2-1: USB disconnect, device number 15 [ 680.444706][ T9211] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 680.620062][ T29] audit: type=1326 audit(1717958895.938:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9209 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf745a579 code=0x0 [ 682.083693][ T8] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 682.363624][ T8] usb 1-1: Using ep0 maxpacket: 32 [ 682.484997][ T8] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 682.496058][ T8] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 682.509516][ T8] usb 1-1: New USB device found, idVendor=1b96, idProduct=9f0a, bcdDevice= 0.15 [ 682.522016][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 682.591790][ T8] usb 1-1: config 0 descriptor?? [ 682.680673][ T8] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 682.972989][ T8] usb 1-1: USB disconnect, device number 18 [ 684.068457][ T29] audit: type=1326 audit(1717958899.368:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9244 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744c579 code=0x7ffc0000 [ 684.092660][ T29] audit: type=1326 audit(1717958899.368:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9244 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744c579 code=0x7ffc0000 [ 684.116009][ T29] audit: type=1326 audit(1717958899.378:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9244 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf744c579 code=0x7ffc0000 [ 684.139039][ T29] audit: type=1326 audit(1717958899.378:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9244 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744c579 code=0x7ffc0000 [ 684.164860][ T29] audit: type=1326 audit(1717958899.388:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9244 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=40000003 syscall=5 compat=1 ip=0xf744c579 code=0x7ffc0000 [ 684.189121][ T29] audit: type=1326 audit(1717958899.388:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9244 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744c579 code=0x7ffc0000 [ 684.212166][ T29] audit: type=1326 audit(1717958899.388:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9244 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=40000003 syscall=5 compat=1 ip=0xf744c579 code=0x7ffc0000 [ 684.235390][ T29] audit: type=1326 audit(1717958899.388:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9244 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744c579 code=0x7ffc0000 [ 684.261780][ T29] audit: type=1326 audit(1717958899.408:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9244 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744c579 code=0x7ffc0000 [ 684.990289][ T9253] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 686.709271][ T4683] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 686.989585][ T4683] usb 5-1: Using ep0 maxpacket: 32 [ 687.129295][ T4683] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 687.140416][ T4683] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 687.154392][ T4683] usb 5-1: New USB device found, idVendor=1b96, idProduct=9f0a, bcdDevice= 0.15 [ 687.163900][ T4683] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 687.240462][ T4683] usb 5-1: config 0 descriptor?? [ 687.341682][ T4683] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 687.999702][ T4683] usb 5-1: USB disconnect, device number 11 [ 688.359601][ T9306] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 688.564577][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 688.564663][ T29] audit: type=1326 audit(1717958903.898:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9305 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73f0579 code=0x0 [ 689.833528][ T4683] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 690.103520][ T4683] usb 5-1: Using ep0 maxpacket: 32 [ 690.245242][ T4683] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 690.257067][ T4683] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 690.414929][ T4683] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 690.424901][ T4683] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 690.433691][ T4683] usb 5-1: Product: syz [ 690.438149][ T4683] usb 5-1: Manufacturer: syz [ 690.531101][ T4683] hub 5-1:4.0: USB hub found [ 690.829157][ T4683] hub 5-1:4.0: 2 ports detected [ 691.926562][ T9336] loop2: detected capacity change from 0 to 256 [ 691.961252][ T9336] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 691.992514][ T9336] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 692.003024][ T9336] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 692.011049][ T9336] UDF-fs: Scanning with blocksize 512 failed [ 692.060454][ T9336] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 692.134037][ T4683] hub 5-1:4.0: activate --> -90 [ 692.153883][ T9336] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 692.565176][ T4683] usb 5-1-port2: cannot warm reset (err = -71) [ 692.572967][ T5461] usb 5-1: USB disconnect, device number 12 [ 692.599881][ T4683] usb 5-1-port2: cannot warm reset (err = -71) [ 692.606760][ T4683] usb 5-1-port2: Cannot enable. Maybe the USB cable is bad? [ 693.849708][ T9347] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 694.053112][ T29] audit: type=1326 audit(1717958909.348:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9344 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7423579 code=0x0 [ 694.084230][ T5461] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 694.366579][ T5461] usb 1-1: Using ep0 maxpacket: 32 [ 694.515671][ T5461] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 694.527364][ T5461] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 694.541574][ T5461] usb 1-1: New USB device found, idVendor=1b96, idProduct=9f0a, bcdDevice= 0.15 [ 694.551173][ T5461] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 694.582874][ T5461] usb 1-1: config 0 descriptor?? [ 694.672125][ T5461] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 695.233466][ T4505] usb 1-1: USB disconnect, device number 19 [ 697.527014][ T9382] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 697.703935][ T29] audit: type=1326 audit(1717958912.968:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9380 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7423579 code=0x0 [ 698.663757][ T8] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 698.924453][ T8] usb 5-1: Using ep0 maxpacket: 32 [ 699.055051][ T8] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 699.065830][ T8] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 699.079472][ T8] usb 5-1: New USB device found, idVendor=1b96, idProduct=9f0a, bcdDevice= 0.15 [ 699.091316][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 699.166987][ T8] usb 5-1: config 0 descriptor?? [ 699.222139][ T8] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 699.876597][ T8] usb 5-1: USB disconnect, device number 13 [ 701.406361][ T9437] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 701.637936][ T29] audit: type=1326 audit(1717958916.888:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9435 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf744c579 code=0x0 [ 702.014178][ T9440] loop1: detected capacity change from 0 to 512 [ 702.151407][ T9440] EXT4-fs: Ignoring removed nobh option [ 702.405742][ T9440] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 702.419870][ T9440] ext4 filesystem being mounted at /root/syzkaller-testdir2726578854/syzkaller.f983QB/32/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 702.449566][ T9425] Bluetooth: hci2: command 0x0406 tx timeout [ 702.929737][ T29] audit: type=1800 audit(1717958918.278:592): pid=9440 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 703.343162][ T8831] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 704.640345][ T4683] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 704.893816][ T4683] usb 1-1: Using ep0 maxpacket: 32 [ 704.934991][ T9481] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 704.937879][ T29] audit: type=1326 audit(1717958920.268:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9478 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7420579 code=0x0 [ 705.033995][ T4683] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 705.049936][ T4683] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 705.064945][ T4683] usb 1-1: New USB device found, idVendor=1b96, idProduct=9f0a, bcdDevice= 0.15 [ 705.074599][ T4683] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 705.109088][ T4683] usb 1-1: config 0 descriptor?? [ 705.179677][ T4683] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 705.614405][ T9495] loop3: detected capacity change from 0 to 256 [ 705.796754][ T4683] usb 1-1: USB disconnect, device number 20 [ 706.090813][ T9495] FAT-fs (loop3): IO charset none not found [ 706.750530][ T9503] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. [ 707.934078][ T9519] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 708.574828][ T9525] bond0: (slave bond_slave_1): Releasing backup interface [ 708.768313][ T29] audit: type=1326 audit(1717958924.088:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9524 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73f0579 code=0x0 [ 710.096245][ T5135] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 710.114163][ T9541] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.2'. [ 710.363654][ T5135] usb 1-1: Using ep0 maxpacket: 32 [ 710.525268][ T5135] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 710.536296][ T5135] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 710.549712][ T5135] usb 1-1: New USB device found, idVendor=1b96, idProduct=9f0a, bcdDevice= 0.15 [ 710.559220][ T5135] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 710.650926][ T5135] usb 1-1: config 0 descriptor?? [ 710.660323][ T5095] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 710.690754][ T5095] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 710.704244][ T5095] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 710.722032][ T5135] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 710.770471][ T5095] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 710.805222][ T5095] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 710.816706][ T5095] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 711.216389][ T5135] usb 1-1: USB disconnect, device number 21 [ 712.026097][ T9562] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 712.764109][ T4337] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 712.908470][ T5095] Bluetooth: hci3: command tx timeout [ 712.959705][ T4337] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 712.978350][ T9545] chnl_net:caif_netlink_parms(): no params data found [ 713.068521][ T4337] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 713.271136][ T4337] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 713.629209][ T29] audit: type=1326 audit(1717958928.918:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9576 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7420579 code=0x0 [ 713.661066][ T4337] bridge_slave_1: left allmulticast mode [ 713.667208][ T4337] bridge_slave_1: left promiscuous mode [ 713.674241][ T4337] bridge0: port 2(bridge_slave_1) entered disabled state [ 713.764393][ T4337] bridge_slave_0: left allmulticast mode [ 713.770334][ T4337] bridge_slave_0: left promiscuous mode [ 713.778617][ T4337] bridge0: port 1(bridge_slave_0) entered disabled state [ 714.480601][ T4337] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 714.570579][ T4337] bond0 (unregistering): (slave team0): Releasing backup interface [ 714.605910][ T4337] bond0 (unregistering): Released all slaves [ 714.973526][ T5095] Bluetooth: hci3: command tx timeout [ 715.511881][ T4337] hsr_slave_0: left promiscuous mode [ 715.545926][ T4337] hsr_slave_1: left promiscuous mode [ 715.575881][ T4337] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 715.584394][ T4337] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 715.636574][ T4337] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 715.644473][ T4337] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 715.726766][ T1224] ieee802154 phy0 wpan0: encryption failed: -22 [ 715.733741][ T1224] ieee802154 phy1 wpan1: encryption failed: -22 [ 715.779496][ T4337] veth1_macvtap: left promiscuous mode [ 715.785497][ T4337] veth0_macvtap: left promiscuous mode [ 715.791468][ T4337] veth1_vlan: left promiscuous mode [ 715.799728][ T4337] veth0_vlan: left promiscuous mode [ 716.304924][ T4337] pimreg (unregistering): left allmulticast mode [ 716.909588][ T4337] team0 (unregistering): Port device team_slave_1 removed [ 717.005547][ T4337] team0 (unregistering): Port device team_slave_0 removed [ 717.016335][ T5285] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 717.095456][ T5095] Bluetooth: hci3: command tx timeout [ 717.313805][ T5285] usb 5-1: Using ep0 maxpacket: 32 [ 717.585540][ T5285] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 717.596172][ T5285] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 717.609685][ T5285] usb 5-1: New USB device found, idVendor=1b96, idProduct=9f0a, bcdDevice= 0.15 [ 717.621782][ T5285] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 717.725751][ T5285] usb 5-1: config 0 descriptor?? [ 717.758094][ T9601] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 717.791394][ T9545] bridge0: port 1(bridge_slave_0) entered blocking state [ 717.799506][ T9545] bridge0: port 1(bridge_slave_0) entered disabled state [ 717.807683][ T9545] bridge_slave_0: entered allmulticast mode [ 717.810648][ T5285] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 717.817533][ T9545] bridge_slave_0: entered promiscuous mode [ 717.919290][ T9545] bridge0: port 2(bridge_slave_1) entered blocking state [ 717.927340][ T9545] bridge0: port 2(bridge_slave_1) entered disabled state [ 717.938474][ T9545] bridge_slave_1: entered allmulticast mode [ 717.955608][ T9545] bridge_slave_1: entered promiscuous mode [ 718.248611][ T9545] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 718.351080][ T9545] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 718.508941][ T5285] usb 5-1: USB disconnect, device number 14 [ 718.714934][ T9545] team0: Port device team_slave_0 added [ 718.776850][ T9545] team0: Port device team_slave_1 added [ 719.020074][ T9545] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 719.027628][ T9545] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 719.056738][ T9545] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 719.097437][ T9545] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 719.105081][ T9545] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 719.131904][ T9545] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 719.177534][ T5095] Bluetooth: hci3: command tx timeout [ 719.478622][ T9545] hsr_slave_0: entered promiscuous mode [ 719.519563][ T9545] hsr_slave_1: entered promiscuous mode [ 719.576480][ T9545] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 719.587150][ T9545] Cannot create hsr debugfs directory [ 719.718854][ T29] audit: type=1326 audit(1717958935.008:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9620 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf745a579 code=0x0 [ 721.308061][ T9632] loop2: detected capacity change from 0 to 512 [ 721.393166][ T9632] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 721.765336][ T9545] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 722.034497][ T9545] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 722.227138][ T9545] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 722.425875][ T9545] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 724.542649][ T9545] 8021q: adding VLAN 0 to HW filter on device bond0 [ 724.721757][ T9545] 8021q: adding VLAN 0 to HW filter on device team0 [ 724.821179][ T5285] bridge0: port 1(bridge_slave_0) entered blocking state [ 724.829122][ T5285] bridge0: port 1(bridge_slave_0) entered forwarding state [ 724.947711][ T5285] bridge0: port 2(bridge_slave_1) entered blocking state [ 724.955608][ T5285] bridge0: port 2(bridge_slave_1) entered forwarding state [ 725.133574][ T5135] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 725.203654][ T9545] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 725.403573][ T5135] usb 1-1: Using ep0 maxpacket: 32 [ 725.524811][ T5135] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 725.535462][ T5135] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 725.548990][ T5135] usb 1-1: New USB device found, idVendor=1b96, idProduct=9f0a, bcdDevice= 0.15 [ 725.560285][ T5135] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 725.614037][ T5135] usb 1-1: config 0 descriptor?? [ 725.669715][ T5135] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 726.429215][ T5458] usb 1-1: USB disconnect, device number 22 [ 726.970896][ T9545] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 727.521382][ T9545] veth0_vlan: entered promiscuous mode [ 727.685752][ T9545] veth1_vlan: entered promiscuous mode [ 727.806991][ T9674] loop1: detected capacity change from 0 to 4096 [ 727.850217][ T9674] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 728.072720][ T9545] veth0_macvtap: entered promiscuous mode [ 728.144425][ T9545] veth1_macvtap: entered promiscuous mode [ 728.403807][ T9545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 728.415154][ T9545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 728.425399][ T9545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 728.436214][ T9545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 728.448537][ T9545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 728.459499][ T9545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 728.475859][ T9545] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 728.672961][ T9545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 728.683987][ T9545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 728.697802][ T9545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 728.718118][ T9545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 728.733483][ T9545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 728.747872][ T9545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 728.769991][ T9545] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 728.929373][ T9545] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 728.940357][ T9545] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 728.951193][ T9545] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 728.960577][ T9545] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 732.237749][ T5135] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 732.523863][ T5135] usb 3-1: Using ep0 maxpacket: 32 [ 732.664073][ T5135] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 732.674651][ T5135] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 732.688090][ T5135] usb 3-1: New USB device found, idVendor=1b96, idProduct=9f0a, bcdDevice= 0.15 [ 732.699569][ T5135] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 732.781477][ T5135] usb 3-1: config 0 descriptor?? [ 732.906452][ T5135] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 733.584130][ T5461] usb 3-1: USB disconnect, device number 27 [ 735.701085][ T5758] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 735.709556][ T5758] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 735.939227][ T3339] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 735.948354][ T3339] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 736.622543][ T9751] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 736.756058][ T9739] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 736.916116][ T9754] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 739.033590][ T8303] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 739.304580][ T8303] usb 3-1: Using ep0 maxpacket: 32 [ 739.463917][ T8303] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 739.474551][ T8303] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 739.488047][ T8303] usb 3-1: New USB device found, idVendor=1b96, idProduct=9f0a, bcdDevice= 0.15 [ 739.497967][ T8303] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 739.556350][ T8303] usb 3-1: config 0 descriptor?? [ 739.622876][ T8303] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 740.057324][ T9789] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 740.237527][ T8303] usb 3-1: USB disconnect, device number 28 [ 741.784486][ T9805] loop0: detected capacity change from 0 to 256 [ 741.980709][ T9805] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xdc42f586, utbl_chksum : 0xe619d30d) [ 743.308243][ T9816] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 744.494030][ T5135] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 744.764383][ T5135] usb 4-1: Using ep0 maxpacket: 32 [ 744.934803][ T5135] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 744.945533][ T5135] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 744.959002][ T5135] usb 4-1: New USB device found, idVendor=1b96, idProduct=9f0a, bcdDevice= 0.15 [ 744.968537][ T5135] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 745.107198][ T5135] usb 4-1: config 0 descriptor?? [ 745.170389][ T5135] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 745.488234][ T9837] loop2: detected capacity change from 0 to 256 [ 745.639576][ T9837] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xdc42f586, utbl_chksum : 0xe619d30d) [ 745.687388][ T9826] kvm: pic: non byte read [ 745.729356][ T9826] kvm: pic: level sensitive irq not supported [ 745.730578][ T9826] kvm: pic: non byte read [ 745.756484][ T9826] kvm: pic: level sensitive irq not supported [ 745.756926][ T9826] kvm: pic: non byte read [ 745.782745][ T9826] kvm: pic: level sensitive irq not supported [ 745.783794][ T9826] kvm: pic: non byte read [ 745.874509][ T5461] usb 4-1: USB disconnect, device number 19 [ 747.344740][ T9855] loop2: detected capacity change from 0 to 512 [ 747.381377][ T9855] EXT4-fs (loop2): Test dummy encryption mode enabled [ 747.489165][ T9855] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2250: inode #12: comm syz-executor.2: corrupted in-inode xattr: invalid ea_ino [ 747.581699][ T9855] EXT4-fs error (device loop2): ext4_orphan_get:1399: comm syz-executor.2: couldn't read orphan inode 12 (err -117) [ 747.675314][ T9855] EXT4-fs (loop2): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 748.109095][ T9855] fscrypt (loop2): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 748.136861][ T9865] fscrypt (loop2): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 748.724675][ T5082] EXT4-fs (loop2): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 749.082755][ T9883] loop4: detected capacity change from 0 to 256 [ 749.224138][ T9883] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xdc42f586, utbl_chksum : 0xe619d30d) [ 749.955981][ T8303] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 750.243768][ T8303] usb 1-1: Using ep0 maxpacket: 32 [ 750.419696][ T8303] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 750.430296][ T8303] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 750.443866][ T8303] usb 1-1: New USB device found, idVendor=1b96, idProduct=9f0a, bcdDevice= 0.15 [ 750.453437][ T8303] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 750.491004][ T8303] usb 1-1: config 0 descriptor?? [ 750.575320][ T8303] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 751.269550][ T9892] kvm: pic: non byte read [ 751.284548][ T9892] kvm: pic: level sensitive irq not supported [ 751.284899][ T9892] kvm: pic: non byte read [ 751.335582][ T9892] kvm: pic: level sensitive irq not supported [ 751.335951][ T9892] kvm: pic: non byte read [ 751.365768][ T9892] kvm: pic: level sensitive irq not supported [ 751.366332][ T9892] kvm: pic: non byte read [ 751.392077][ T780] usb 1-1: USB disconnect, device number 23 [ 751.782199][ T9912] loop1: detected capacity change from 0 to 64 [ 751.814264][ T9912] hfs: unable to change iocharset [ 751.819543][ T9912] hfs: unable to parse mount options [ 752.245120][ T780] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 752.736702][ T9910] loop3: detected capacity change from 0 to 8192 [ 752.844084][ T9910] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 752.867407][ T780] usb 2-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=dc.00 [ 752.877101][ T780] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 752.885814][ T780] usb 2-1: Product: syz [ 752.890346][ T780] usb 2-1: Manufacturer: syz [ 752.895381][ T780] usb 2-1: SerialNumber: syz [ 752.940684][ T780] usb 2-1: config 0 descriptor?? [ 753.247225][ T780] viperboard 2-1:0.0: version 0.00 found at bus 002 address 016 [ 753.270323][ T9910] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1052) [ 753.285554][ T9910] FAT-fs (loop3): Filesystem has been set read-only [ 753.299950][ T5095] Bluetooth: hci5: link tx timeout [ 753.305681][ T5095] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 753.331431][ T780] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100 [ 753.340920][ T780] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 753.344090][ T9910] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1052) [ 753.366459][ T9910] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1052) [ 754.145925][ T9545] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1052) [ 754.359660][ T780] usb 2-1: USB disconnect, device number 16 [ 754.598895][ T9928] loop2: detected capacity change from 0 to 256 [ 754.730857][ T9928] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xdc42f586, utbl_chksum : 0xe619d30d) [ 755.379198][ T5095] Bluetooth: hci5: command 0x0406 tx timeout [ 756.273642][ T780] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 756.547556][ T780] usb 1-1: Using ep0 maxpacket: 32 [ 756.736309][ T780] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 756.746912][ T780] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 756.764238][ T780] usb 1-1: New USB device found, idVendor=1b96, idProduct=9f0a, bcdDevice= 0.15 [ 756.775189][ T780] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 756.860146][ T780] usb 1-1: config 0 descriptor?? [ 756.968764][ T780] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 757.517609][ T9946] kvm: pic: non byte read [ 757.522794][ T9946] kvm: pic: level sensitive irq not supported [ 757.523139][ T9946] kvm: pic: non byte read [ 757.586767][ T9946] kvm: pic: level sensitive irq not supported [ 757.587215][ T9946] kvm: pic: non byte read [ 757.602053][ T9946] kvm: pic: level sensitive irq not supported [ 757.602388][ T9946] kvm: pic: non byte read [ 757.642967][ T8303] usb 1-1: USB disconnect, device number 24 [ 758.012264][ T9961] 8021q: adding VLAN 0 to HW filter on device bond0 [ 758.028083][ T9961] team0: Port device bond0 added [ 759.177110][ T9966] loop0: detected capacity change from 0 to 256 [ 759.270059][ T9968] loop3: detected capacity change from 0 to 64 [ 759.287489][ T9968] hfs: unable to change iocharset [ 759.292762][ T9968] hfs: unable to parse mount options [ 759.445837][ T9966] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xdc42f586, utbl_chksum : 0xe619d30d) [ 759.731005][ T5461] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 760.364395][ T5461] usb 4-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=dc.00 [ 760.374125][ T5461] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 760.382476][ T5461] usb 4-1: Product: syz [ 760.387111][ T5461] usb 4-1: Manufacturer: syz [ 760.391989][ T5461] usb 4-1: SerialNumber: syz [ 760.463731][ T5461] usb 4-1: config 0 descriptor?? [ 760.699554][ T5461] viperboard 4-1:0.0: version 0.00 found at bus 004 address 020 [ 760.789724][ T9425] Bluetooth: hci3: link tx timeout [ 760.794417][ T5461] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100 [ 760.795220][ T9425] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 760.806565][ T5461] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 761.594470][ T5285] usb 4-1: USB disconnect, device number 20 [ 761.800934][ T29] audit: type=1326 audit(1717958977.088:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9989 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73f0579 code=0x0 [ 762.155096][ T5135] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 762.413978][ T5135] usb 1-1: Using ep0 maxpacket: 32 [ 762.553891][ T5135] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 762.564723][ T5135] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 762.578050][ T5135] usb 1-1: New USB device found, idVendor=1b96, idProduct=9f0a, bcdDevice= 0.15 [ 762.587515][ T5135] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 762.650038][ T5135] usb 1-1: config 0 descriptor?? [ 762.758132][T10001] loop4: detected capacity change from 0 to 256 [ 762.762129][ T5135] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 762.891398][T10001] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xdc42f586, utbl_chksum : 0xe619d30d) [ 762.904085][ T9425] Bluetooth: hci3: command 0x0406 tx timeout [ 763.338259][ T9993] kvm: pic: non byte read [ 763.355868][ T9993] kvm: pic: level sensitive irq not supported [ 763.356234][ T9993] kvm: pic: non byte read [ 763.387437][ T9993] kvm: pic: level sensitive irq not supported [ 763.387890][ T9993] kvm: pic: non byte read [ 763.438647][ T9993] kvm: pic: level sensitive irq not supported [ 763.438988][ T9993] kvm: pic: non byte read [ 763.495657][ T9999] loop2: detected capacity change from 0 to 8192 [ 763.504280][ T5135] usb 1-1: USB disconnect, device number 25 [ 763.598740][ T9999] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 765.640806][T10032] loop2: detected capacity change from 0 to 64 [ 765.680910][T10033] loop0: detected capacity change from 0 to 256 [ 765.729669][T10032] hfs: unable to change iocharset [ 765.735231][T10032] hfs: unable to parse mount options [ 765.748967][T10035] loop1: detected capacity change from 0 to 256 [ 765.884090][T10035] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xdc42f586, utbl_chksum : 0xe619d30d) [ 766.219120][ T5461] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 766.784336][ T5461] usb 3-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=dc.00 [ 766.798141][ T5461] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 766.808053][ T5461] usb 3-1: Product: syz [ 766.812499][ T5461] usb 3-1: Manufacturer: syz [ 766.817534][ T5461] usb 3-1: SerialNumber: syz [ 766.877251][ T5461] usb 3-1: config 0 descriptor?? [ 767.065530][ T5135] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 767.065710][ T5461] viperboard 3-1:0.0: version 0.00 found at bus 003 address 029 [ 767.156070][ T5461] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100 [ 767.165382][ T5461] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 767.346750][ T9425] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 767.373812][ T5135] usb 4-1: Using ep0 maxpacket: 32 [ 767.504252][ T5135] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 767.519169][ T5135] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 767.534189][ T5135] usb 4-1: New USB device found, idVendor=1b96, idProduct=9f0a, bcdDevice= 0.15 [ 767.543882][ T5135] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 767.640610][ T5135] usb 4-1: config 0 descriptor?? [ 767.719951][ T5135] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 768.162206][ T5135] usb 3-1: USB disconnect, device number 29 [ 768.374870][ T5461] usb 4-1: USB disconnect, device number 21 [ 769.942029][T10070] loop2: detected capacity change from 0 to 256 [ 770.116506][T10070] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xdc42f586, utbl_chksum : 0xe619d30d) [ 771.129089][T10079] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 771.847651][T10090] loop2: detected capacity change from 0 to 64 [ 771.944256][T10090] hfs: unable to change iocharset [ 771.949547][T10090] hfs: unable to parse mount options [ 772.434834][ T5135] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 772.539496][T10098] loop0: detected capacity change from 0 to 47 [ 772.734406][ T5285] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 772.806190][T10101] loop3: detected capacity change from 0 to 256 [ 772.927783][T10101] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xdc42f586, utbl_chksum : 0xe619d30d) [ 773.003694][ T5285] usb 2-1: Using ep0 maxpacket: 32 [ 773.094410][ T5135] usb 3-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=dc.00 [ 773.104267][ T5135] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 773.112575][ T5135] usb 3-1: Product: syz [ 773.117493][ T5135] usb 3-1: Manufacturer: syz [ 773.122402][ T5135] usb 3-1: SerialNumber: syz [ 773.173752][ T5285] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 773.184597][ T5285] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 773.197995][ T5285] usb 2-1: New USB device found, idVendor=1b96, idProduct=9f0a, bcdDevice= 0.15 [ 773.207514][ T5285] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 773.235946][ T5135] usb 3-1: config 0 descriptor?? [ 773.279450][ T5285] usb 2-1: config 0 descriptor?? [ 773.358687][ T5285] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 773.456633][ T5135] viperboard 3-1:0.0: version 0.00 found at bus 003 address 030 [ 773.508469][ T5135] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100 [ 773.517854][ T5135] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 773.541338][ T9425] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 774.009841][T10112] loop3: detected capacity change from 0 to 512 [ 774.055606][T10096] kvm: pic: non byte read [ 774.102562][T10096] kvm: pic: level sensitive irq not supported [ 774.110348][T10096] kvm: pic: non byte read [ 774.147151][T10096] kvm: pic: level sensitive irq not supported [ 774.147788][T10096] kvm: pic: non byte read [ 774.178070][T10096] kvm: pic: level sensitive irq not supported [ 774.178698][T10096] kvm: pic: non byte read [ 774.239759][T10112] EXT4-fs error (device loop3): ext4_get_branch:178: inode #11: block 4294967295: comm syz-executor.3: invalid block [ 774.285915][T10112] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz-executor.3: invalid indirect mapped block 4294967295 (level 1) [ 774.317916][T10112] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz-executor.3: invalid indirect mapped block 4294967295 (level 1) [ 774.322303][ T5461] usb 3-1: USB disconnect, device number 30 [ 774.379465][ T8303] usb 2-1: USB disconnect, device number 17 [ 774.389750][T10112] EXT4-fs (loop3): 2 truncates cleaned up [ 774.396686][T10112] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 775.074013][T10120] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 777.083962][T10138] loop2: detected capacity change from 0 to 256 [ 777.168825][T10116] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 777.187696][ T1224] ieee802154 phy0 wpan0: encryption failed: -22 [ 777.195462][ T1224] ieee802154 phy1 wpan1: encryption failed: -22 [ 777.284573][T10138] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xdc42f586, utbl_chksum : 0xe619d30d) [ 777.861170][T10145] loop2: detected capacity change from 0 to 64 [ 777.897345][T10145] hfs: unable to change iocharset [ 777.902616][T10145] hfs: unable to parse mount options [ 777.969355][ T9545] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 777.983905][T10143] loop0: detected capacity change from 0 to 2048 [ 778.110640][T10143] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 778.213615][T10143] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 778.349683][ T5285] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 778.611462][T10149] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 778.863783][ T5135] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 778.904694][ T5285] usb 3-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=dc.00 [ 778.914200][ T5285] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 778.922489][ T5285] usb 3-1: Product: syz [ 778.927357][ T5285] usb 3-1: Manufacturer: syz [ 778.932219][ T5285] usb 3-1: SerialNumber: syz [ 778.984475][ T5285] usb 3-1: config 0 descriptor?? [ 779.168985][ T5135] usb 2-1: Using ep0 maxpacket: 32 [ 779.224257][ T5285] viperboard 3-1:0.0: version 0.00 found at bus 003 address 031 [ 779.243428][ T9425] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 779.256828][ T5285] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100 [ 779.266160][ T5285] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 779.343948][ T5135] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 779.354576][ T5135] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 779.368372][ T5135] usb 2-1: New USB device found, idVendor=1b96, idProduct=9f0a, bcdDevice= 0.15 [ 779.377892][ T5135] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 779.445856][ T5135] usb 2-1: config 0 descriptor?? [ 779.519563][ T5135] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 780.005401][ T5461] usb 3-1: USB disconnect, device number 31 [ 780.162999][T10151] kvm: pic: non byte read [ 780.188849][T10151] kvm: pic: level sensitive irq not supported [ 780.189198][T10151] kvm: pic: non byte read [ 780.214060][T10151] kvm: pic: level sensitive irq not supported [ 780.214514][T10151] kvm: pic: non byte read [ 780.279415][T10151] kvm: pic: level sensitive irq not supported [ 780.279893][T10151] kvm: pic: non byte read [ 780.336859][ T5135] usb 2-1: USB disconnect, device number 18 [ 781.033668][T10175] loop3: detected capacity change from 0 to 256 [ 781.257229][T10175] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xdc42f586, utbl_chksum : 0xe619d30d) [ 781.396074][T10181] loop0: detected capacity change from 0 to 512 [ 781.520949][T10181] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 781.539844][T10181] ext4 filesystem being mounted at /root/syzkaller-testdir809902625/syzkaller.J283ch/115/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 781.730827][ T8243] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 781.731307][T10188] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 782.718551][T10202] loop4: detected capacity change from 0 to 64 [ 782.776485][T10202] hfs: unable to change iocharset [ 782.781782][T10202] hfs: unable to parse mount options [ 783.245702][ T8303] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 783.806032][ T8303] usb 5-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=dc.00 [ 783.815776][ T8303] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 783.824880][ T8303] usb 5-1: Product: syz [ 783.829330][ T8303] usb 5-1: Manufacturer: syz [ 783.834468][ T8303] usb 5-1: SerialNumber: syz [ 783.895016][ T8303] usb 5-1: config 0 descriptor?? [ 784.013624][ T5458] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 784.126698][ T8303] viperboard 5-1:0.0: version 0.00 found at bus 005 address 015 [ 784.188400][T10216] loop2: detected capacity change from 0 to 256 [ 784.194789][ T8303] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100 [ 784.195135][ T8303] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 784.283565][ T5458] usb 1-1: Using ep0 maxpacket: 32 [ 784.408754][ T5458] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 784.415045][T10216] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xdc42f586, utbl_chksum : 0xe619d30d) [ 784.435206][ T5458] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 784.448795][ T5458] usb 1-1: New USB device found, idVendor=1b96, idProduct=9f0a, bcdDevice= 0.15 [ 784.458324][ T5458] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 784.478424][ T5458] usb 1-1: config 0 descriptor?? [ 784.567219][ T5458] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 784.941841][ T5458] usb 5-1: USB disconnect, device number 15 [ 785.127189][T10213] kvm: pic: non byte read [ 785.132349][T10213] kvm: pic: level sensitive irq not supported [ 785.132670][T10213] kvm: pic: non byte read [ 785.159952][T10213] kvm: pic: level sensitive irq not supported [ 785.160394][T10213] kvm: pic: non byte read [ 785.209537][T10213] kvm: pic: level sensitive irq not supported [ 785.210189][T10213] kvm: pic: non byte read [ 785.271294][ T5461] usb 1-1: USB disconnect, device number 26 [ 785.381355][T10224] loop2: detected capacity change from 0 to 1024 [ 785.508855][T10224] hfsplus: inconsistency in B*Tree (31095,1,255,1,0) [ 785.516990][T10224] hfsplus: xattr searching failed [ 787.316266][T10246] loop4: detected capacity change from 0 to 256 [ 787.504211][T10246] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xdc42f586, utbl_chksum : 0xe619d30d) [ 787.816607][T10250] loop0: detected capacity change from 0 to 64 [ 787.875369][T10250] hfs: unable to change iocharset [ 787.880637][T10250] hfs: unable to parse mount options [ 788.299205][ T5461] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 788.874264][ T5461] usb 1-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=dc.00 [ 788.883834][ T5461] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 788.892275][ T5461] usb 1-1: Product: syz [ 788.897008][ T5461] usb 1-1: Manufacturer: syz [ 788.901894][ T5461] usb 1-1: SerialNumber: syz [ 788.934814][ T5461] usb 1-1: config 0 descriptor?? [ 789.109531][ T5135] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 789.154065][ T5461] viperboard 1-1:0.0: version 0.00 found at bus 001 address 027 [ 789.189601][ T5461] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100 [ 789.199187][ T5461] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 789.266967][ T9425] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 789.404001][ T5135] usb 5-1: Using ep0 maxpacket: 32 [ 789.544642][ T5135] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 789.555209][ T5135] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 789.568829][ T5135] usb 5-1: New USB device found, idVendor=1b96, idProduct=9f0a, bcdDevice= 0.15 [ 789.578338][ T5135] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 789.653390][ T5135] usb 5-1: config 0 descriptor?? [ 789.731446][ T5135] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 790.075472][ T5135] usb 1-1: USB disconnect, device number 27 [ 790.502991][T10257] kvm: pic: non byte read [ 790.508981][T10257] kvm: pic: level sensitive irq not supported [ 790.509433][T10257] kvm: pic: non byte read [ 790.529489][T10257] kvm: pic: level sensitive irq not supported [ 790.529938][T10257] kvm: pic: non byte read [ 790.564709][T10257] kvm: pic: level sensitive irq not supported [ 790.565773][T10257] kvm: pic: non byte read [ 790.622334][ T5285] usb 5-1: USB disconnect, device number 16 [ 792.023671][T10275] loop0: detected capacity change from 0 to 512 [ 792.163980][T10275] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 792.405048][T10275] EXT4-fs error (device loop0): ext4_orphan_get:1394: inode #15: comm syz-executor.0: iget: bad i_size value: -67835469387268086 [ 792.460063][T10275] EXT4-fs error (device loop0): ext4_orphan_get:1399: comm syz-executor.0: couldn't read orphan inode 15 (err -117) [ 792.487427][T10275] EXT4-fs (loop0): mounted filesystem f7ff0000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 792.510459][T10275] ext2 filesystem being mounted at /root/syzkaller-testdir809902625/syzkaller.J283ch/123/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 792.820066][ T8243] EXT4-fs (loop0): unmounting filesystem f7ff0000-0000-0000-0000-000000000000. [ 792.979838][T10291] loop4: detected capacity change from 0 to 256 [ 793.171249][T10291] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xdc42f586, utbl_chksum : 0xe619d30d) [ 793.286059][T10293] loop1: detected capacity change from 0 to 64 [ 793.332636][T10293] hfs: unable to change iocharset [ 793.338286][T10293] hfs: unable to parse mount options [ 793.744918][ T5135] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 794.354286][ T5135] usb 2-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=dc.00 [ 794.364954][ T5135] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 794.374192][ T5135] usb 2-1: Product: syz [ 794.378651][ T5135] usb 2-1: Manufacturer: syz [ 794.383642][ T5135] usb 2-1: SerialNumber: syz [ 794.424648][ T5135] usb 2-1: config 0 descriptor?? [ 794.623892][ T5135] viperboard 2-1:0.0: version 0.00 found at bus 002 address 019 [ 794.724358][ T5135] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100 [ 794.734175][ T5135] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 794.852287][T10306] loop2: detected capacity change from 0 to 1024 [ 795.003763][ T5461] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 795.263803][ T5461] usb 5-1: Using ep0 maxpacket: 32 [ 795.404804][ T5461] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 795.415452][ T5461] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 795.428897][ T5461] usb 5-1: New USB device found, idVendor=1b96, idProduct=9f0a, bcdDevice= 0.15 [ 795.438441][ T5461] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 795.489705][ T5135] usb 2-1: USB disconnect, device number 19 [ 795.506972][ T5461] usb 5-1: config 0 descriptor?? [ 795.586240][ T5461] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 796.160949][T10307] kvm: pic: level sensitive irq not supported [ 796.161310][T10307] kvm: pic: non byte read [ 796.212554][T10307] kvm: pic: level sensitive irq not supported [ 796.212908][T10307] kvm: pic: non byte read [ 796.314197][T10307] kvm: pic: level sensitive irq not supported [ 796.314553][T10307] kvm: pic: non byte read [ 796.435989][ T5461] usb 5-1: USB disconnect, device number 17 [ 797.342947][T10324] loop0: detected capacity change from 0 to 1024 [ 797.497295][T10324] hfsplus: inconsistency in B*Tree (31095,1,255,1,0) [ 797.504572][T10324] hfsplus: xattr searching failed [ 797.792184][T10332] loop1: detected capacity change from 0 to 256 [ 797.989266][T10332] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xdc42f586, utbl_chksum : 0xe619d30d) [ 798.104419][T10340] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 798.241052][T10342] loop0: detected capacity change from 0 to 1024 [ 798.695538][T10347] loop4: detected capacity change from 0 to 64 [ 798.781967][T10347] hfs: unable to change iocharset [ 798.787394][T10347] hfs: unable to parse mount options [ 799.210420][ T5135] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 799.894529][ T5135] usb 5-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=dc.00 [ 799.904090][ T5135] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 799.912378][ T5135] usb 5-1: Product: syz [ 799.916968][ T5135] usb 5-1: Manufacturer: syz [ 799.921930][ T5135] usb 5-1: SerialNumber: syz [ 799.958931][ T5135] usb 5-1: config 0 descriptor?? [ 800.185170][ T5135] viperboard 5-1:0.0: version 0.00 found at bus 005 address 018 [ 800.264706][ T5135] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100 [ 800.280426][ T5135] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 800.403816][ T5458] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 800.673554][ T5458] usb 1-1: Using ep0 maxpacket: 32 [ 800.736432][T10367] syz-executor.2[10367] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 800.737099][T10367] syz-executor.2[10367] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 800.815510][ T5458] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 800.838190][ T5458] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 800.851792][ T5458] usb 1-1: New USB device found, idVendor=1b96, idProduct=9f0a, bcdDevice= 0.15 [ 800.861338][ T5458] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 800.879810][ T5458] usb 1-1: config 0 descriptor?? [ 800.958466][ T5458] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 801.165809][ T5135] usb 5-1: USB disconnect, device number 18 [ 801.346009][T10376] loop1: detected capacity change from 0 to 256 [ 801.514770][T10376] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xdc42f586, utbl_chksum : 0xe619d30d) [ 801.537699][T10363] kvm: pic: level sensitive irq not supported [ 801.538057][T10363] kvm: pic: non byte read [ 801.594298][T10363] kvm: pic: level sensitive irq not supported [ 801.594647][T10363] kvm: pic: non byte read [ 801.641632][T10363] kvm: pic: level sensitive irq not supported [ 801.641968][T10363] kvm: pic: non byte read [ 801.719697][T10380] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 801.725395][ T5135] usb 1-1: USB disconnect, device number 28 [ 802.465655][T10385] loop4: detected capacity change from 0 to 1024 [ 803.832549][T10409] loop0: detected capacity change from 0 to 64 [ 803.888822][T10409] hfs: unable to change iocharset [ 803.894325][T10409] hfs: unable to parse mount options [ 804.205302][T10412] loop2: detected capacity change from 0 to 256 [ 804.304512][ T5458] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 804.342187][T10413] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 804.357864][T10412] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xdc42f586, utbl_chksum : 0xe619d30d) [ 804.860232][ T5458] usb 1-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=dc.00 [ 804.869898][ T5458] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 804.878458][ T5458] usb 1-1: Product: syz [ 804.887882][ T5458] usb 1-1: Manufacturer: syz [ 804.892885][ T5458] usb 1-1: SerialNumber: syz [ 805.038326][ T5458] usb 1-1: config 0 descriptor?? [ 805.269425][ T5458] viperboard 1-1:0.0: version 0.00 found at bus 001 address 029 [ 805.315008][ T9425] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 805.336252][ T5458] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100 [ 805.345535][ T5458] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 805.375056][ T5461] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 805.390226][T10423] loop2: detected capacity change from 0 to 1024 [ 805.653726][ T5461] usb 5-1: Using ep0 maxpacket: 32 [ 805.784826][ T5461] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 805.795522][ T5461] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 805.813615][ T5461] usb 5-1: New USB device found, idVendor=1b96, idProduct=9f0a, bcdDevice= 0.15 [ 805.823059][ T5461] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 805.878601][ T780] usb 1-1: USB disconnect, device number 29 [ 805.881358][ T5461] usb 5-1: config 0 descriptor?? [ 805.950860][ T5461] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 806.394382][T10420] kvm: pic: level sensitive irq not supported [ 806.394738][T10420] kvm: pic: non byte read [ 806.433311][T10420] kvm: pic: level sensitive irq not supported [ 806.433778][T10420] kvm: pic: non byte read [ 806.488420][T10420] kvm: pic: level sensitive irq not supported [ 806.488975][T10420] kvm: pic: non byte read [ 806.561501][ T780] usb 5-1: USB disconnect, device number 19 [ 807.620166][T10449] ===================================================== [ 807.627673][T10449] BUG: KMSAN: uninit-value in __bpf_strtoull+0x245/0x5b0 [ 807.635154][T10449] __bpf_strtoull+0x245/0x5b0 [ 807.640074][T10449] bpf_strtol+0x7c/0x270 [ 807.644729][T10449] ___bpf_prog_run+0x13fe/0xe0f0 [ 807.649940][T10449] __bpf_prog_run96+0xb5/0xe0 [ 807.655006][T10449] bpf_test_run+0x43e/0xc30 [ 807.659760][T10449] bpf_prog_test_run_xdp+0xeaa/0x1a40 [ 807.665551][T10449] bpf_prog_test_run+0x6b7/0xad0 2024/06/09 18:50:23 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 807.670730][T10449] __sys_bpf+0x6aa/0xd90 [ 807.675340][T10449] __ia32_sys_bpf+0xa0/0xe0 [ 807.680056][T10449] ia32_sys_call+0xf7e/0x40a0 [ 807.685134][T10449] __do_fast_syscall_32+0xb4/0x120 [ 807.690513][T10449] do_fast_syscall_32+0x38/0x80 [ 807.695757][T10449] do_SYSENTER_32+0x1f/0x30 [ 807.700515][T10449] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 807.707300][T10449] [ 807.709742][T10449] Local variable stack created at: [ 807.715157][T10449] __bpf_prog_run96+0x45/0xe0 [ 807.720077][T10449] bpf_test_run+0x43e/0xc30 [ 807.724993][T10449] [ 807.727456][T10449] CPU: 1 PID: 10449 Comm: syz-executor.1 Not tainted 6.9.0-syzkaller-02339-g101b7a97143a #0 [ 807.737923][T10449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 807.748323][T10449] ===================================================== [ 807.755550][T10449] Disabling lock debugging due to kernel taint [ 807.761868][T10449] Kernel panic - not syncing: kmsan.panic set ... [ 807.768446][T10449] CPU: 1 PID: 10449 Comm: syz-executor.1 Tainted: G B 6.9.0-syzkaller-02339-g101b7a97143a #0 [ 807.780231][T10449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 807.790454][T10449] Call Trace: [ 807.793865][T10449] [ 807.796994][T10449] dump_stack_lvl+0x216/0x2d0 [ 807.801912][T10449] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 807.807933][T10449] dump_stack+0x1e/0x30 [ 807.812300][T10449] panic+0x4e2/0xcd0 [ 807.816431][T10449] ? kmsan_get_metadata+0xf1/0x1d0 [ 807.821759][T10449] kmsan_report+0x2d5/0x2e0 [ 807.826462][T10449] ? __msan_warning+0x95/0x120 [ 807.831400][T10449] ? __bpf_strtoull+0x245/0x5b0 [ 807.836537][T10449] ? bpf_strtol+0x7c/0x270 [ 807.841170][T10449] ? ___bpf_prog_run+0x13fe/0xe0f0 [ 807.846494][T10449] ? __bpf_prog_run96+0xb5/0xe0 [ 807.851547][T10449] ? bpf_test_run+0x43e/0xc30 [ 807.856468][T10449] ? bpf_prog_test_run_xdp+0xeaa/0x1a40 [ 807.862254][T10449] ? bpf_prog_test_run+0x6b7/0xad0 [ 807.867589][T10449] ? __sys_bpf+0x6aa/0xd90 [ 807.872232][T10449] ? __ia32_sys_bpf+0xa0/0xe0 [ 807.877104][T10449] ? ia32_sys_call+0xf7e/0x40a0 [ 807.882193][T10449] ? __do_fast_syscall_32+0xb4/0x120 [ 807.887710][T10449] ? do_fast_syscall_32+0x38/0x80 [ 807.892974][T10449] ? do_SYSENTER_32+0x1f/0x30 [ 807.898312][T10449] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 807.905075][T10449] ? kmsan_get_metadata+0x146/0x1d0 [ 807.910474][T10449] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 807.916486][T10449] ? __bpf_strtoull+0x80/0x5b0 [ 807.921448][T10449] ? filter_irq_stacks+0x60/0x1a0 [ 807.926712][T10449] ? stack_depot_save_flags+0x2c/0x6e0 [ 807.932361][T10449] ? kmsan_get_metadata+0x146/0x1d0 [ 807.937764][T10449] ? kmsan_internal_set_shadow_origin+0x66/0xe0 [ 807.944271][T10449] ? kmsan_get_metadata+0x146/0x1d0 [ 807.949670][T10449] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 807.955696][T10449] __msan_warning+0x95/0x120 [ 807.960494][T10449] __bpf_strtoull+0x245/0x5b0 [ 807.965404][T10449] ? bpf_strtol+0x5c/0x270 [ 807.970086][T10449] ? ___bpf_prog_run+0x13fe/0xe0f0 [ 807.975419][T10449] bpf_strtol+0x7c/0x270 [ 807.979906][T10449] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 807.985933][T10449] ___bpf_prog_run+0x13fe/0xe0f0 [ 807.991098][T10449] ? kmsan_get_metadata+0x146/0x1d0 [ 807.996536][T10449] __bpf_prog_run96+0xb5/0xe0 [ 808.001433][T10449] ? ktime_get+0x4c7/0x530 [ 808.006089][T10449] ? __pfx___bpf_prog_run96+0x10/0x10 [ 808.011679][T10449] bpf_test_run+0x43e/0xc30 [ 808.016419][T10449] ? bpf_test_run+0x388/0xc30 [ 808.021335][T10449] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 808.027357][T10449] bpf_prog_test_run_xdp+0xeaa/0x1a40 [ 808.033011][T10449] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 808.039068][T10449] bpf_prog_test_run+0x6b7/0xad0 [ 808.044231][T10449] __sys_bpf+0x6aa/0xd90 [ 808.048703][T10449] __ia32_sys_bpf+0xa0/0xe0 [ 808.053404][T10449] ia32_sys_call+0xf7e/0x40a0 [ 808.058324][T10449] __do_fast_syscall_32+0xb4/0x120 [ 808.063798][T10449] ? irqentry_exit+0x16/0x60 [ 808.068633][T10449] do_fast_syscall_32+0x38/0x80 [ 808.073718][T10449] do_SYSENTER_32+0x1f/0x30 [ 808.078448][T10449] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 808.085041][T10449] RIP: 0023:0xf73f0579 [ 808.089259][T10449] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 808.109262][T10449] RSP: 002b:00000000f5e795ac EFLAGS: 00000206 ORIG_RAX: 0000000000000165 [ 808.117958][T10449] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000020000640 [ 808.126173][T10449] RDX: 0000000000000050 RSI: 0000000000000000 RDI: 0000000000000000 [ 808.134387][T10449] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 808.142593][T10449] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 808.150711][T10449] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 808.158874][T10449] [ 808.162335][T10449] Kernel Offset: disabled [ 808.166915][T10449] Rebooting in 86400 seconds..