last executing test programs: 14.394238348s ago: executing program 4 (id=1159): syz_mount_image$udf(&(0x7f0000000200), &(0x7f00000001c0)='./file0\x00', 0x18008, &(0x7f0000000140)=ANY=[@ANYRES32=0x0, @ANYRES64, @ANYRES64], 0x1, 0x4b1, &(0x7f0000001d00)="$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") sync() openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.stat\x00', 0x275a, 0x0) 13.588475663s ago: executing program 4 (id=1164): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) unshare(0x8000000) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x13, 0x0, 0x4) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000002c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) r2 = socket$inet(0x2, 0x3, 0x6) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(r2, 0x0) r3 = dup(0xffffffffffffffff) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x0, {0x7, 0x1f}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) 13.324330103s ago: executing program 4 (id=1165): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x4, 0x0, 0x0, 0xfffefff7, 0xb, "da6cd1122d1d837f65d3fe6ba6439cddec04ed"}) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000000)) 13.304558245s ago: executing program 4 (id=1166): syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000180)='./bus\x00', 0xa08886, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], 0x1, 0x2bd, &(0x7f0000000640)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) open(&(0x7f0000000140)='./bus\x00', 0x143142, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, "ef359f413bb90152f7d6d1ce5d29c3ee5e5ca9000f7c41499dc2aac63a01000000000000004faa2ad9c084a003ea00", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00"}) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[@ANYRES64, @ANYRES64, @ANYRES16], 0x78) 12.99572337s ago: executing program 4 (id=1167): epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x38, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10.507282186s ago: executing program 4 (id=1175): ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x1018e58, &(0x7f0000000300)={[{@noblock_validity}, {@barrier}, {@resuid}, {@noload}, {@dioread_lock}, {@bh}, {}, {@bsdgroups}]}, 0x6, 0x641, &(0x7f0000000d80)="$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") 4.010336243s ago: executing program 0 (id=1198): syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x189802) r0 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000300)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) io_uring_enter(r0, 0x7a98, 0x0, 0x0, 0x0, 0x0) 3.970383426s ago: executing program 1 (id=1199): bind$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000002740)={&(0x7f0000002580)={0x34, r4, 0x1, 0x0, 0x0, {0x34}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) 3.666331439s ago: executing program 0 (id=1201): r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r2 = fcntl$dupfd(r1, 0x0, r1) write$sndseq(r2, &(0x7f0000000200)=[{0x0, 0x9, 0x0, 0x0, @time={0x100}, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"13e661fefa8c7d0d9a4be91e"}}], 0x38) close(r0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) fsmount(0xffffffffffffffff, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = fanotify_init(0x200, 0x0) r4 = dup(r3) fanotify_mark(r3, 0x1, 0x4800107b, r4, 0x0) socket$kcm(0x10, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000040)) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, 0x0, &(0x7f0000000100)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x25, &(0x7f0000000180)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}}, 0x9c) 3.608929794s ago: executing program 3 (id=1202): openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000a00), 0x2, 0x2) io_setup(0xb0, &(0x7f0000000200)=0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r1, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c460006000000e0ff0000ffffff02000800d4"], 0x78) 3.503036832s ago: executing program 3 (id=1203): r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000040)=0x8004, 0x4) syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff02000000000000000000000000000104004e20004d13"], 0x0) recvmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=""/17, 0x11}}], 0x1, 0x0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r1, &(0x7f0000001800)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) 3.03813195s ago: executing program 3 (id=1204): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000e280)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000380)={0x50, 0x0, r1, {0x7, 0x27}}, 0x50) r2 = syz_io_uring_setup(0x76, &(0x7f0000000240)={0x0, 0x0, 0x10100}, &(0x7f00000002c0)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r2, 0x567, 0x0, 0x0, 0x0, 0x0) rename(&(0x7f0000000100)='./file0/../file0/file0\x00', &(0x7f0000000140)='./file0/../file0/file0\x00') connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000240)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10) r5 = syz_io_uring_setup(0x239, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r5, 0x2def, 0x0, 0x0, 0x0, 0x0) 2.979309114s ago: executing program 1 (id=1205): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) writev(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r2, 0x29, 0x16, 0x0, &(0x7f00000003c0)) 2.78207088s ago: executing program 3 (id=1206): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000), 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x138a877, &(0x7f0000000080)={[{@nr_blocks={'nr_blocks', 0x3d, [0x35, 0x36, 0x34]}}]}) 2.65440803s ago: executing program 3 (id=1207): r0 = socket$pppoe(0x18, 0x1, 0x0) syz_open_dev$vim2m(0x0, 0x0, 0x2) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x3, @multicast, 'macvtap0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x2, @remote, 'syzkaller0\x00'}}, 0x1e) 2.625762222s ago: executing program 0 (id=1208): r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$dsp(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sendmsg$unix(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x2c, 0x3b, 0x107, 0x0, 0x0, {0x4, 0x7c}, [@typed={0x4}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0x9, 0x0, 0x0, @u32}]}]}, 0x2c}}, 0x0) 2.496077133s ago: executing program 3 (id=1209): memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010100000000105801000100000000000109022400010000002009040000010300000009210000000122dc01090589"], 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791097"], 0x0}, 0x90) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendto(0xffffffffffffffff, &(0x7f00000000c0)="1f89923372db0c0bdcf1e46f946be6915876c838e85e0ac7f85d219d983fd4a2774f51a2bf17e1db1a15482e71e61c03a5a290a96054490118ece8f37355c951e122a5152f95acd9f5f97ad55e74383c94c44f4332abca39236bb897e9ea074a282baefd1a7c8dd1c7290db0c90983106d82b8a3bb93905c85b587a4112fab292bb333d9", 0x84, 0x0, 0x0, 0x0) socket(0x10, 0x80002, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) add_key$keyring(&(0x7f0000000140), 0x0, 0x0, 0x0, 0xffffffffffffffff) r3 = request_key(&(0x7f00000008c0)='big_key\x00', &(0x7f0000000900)={'syz', 0x0}, 0x0, 0xfffffffffffffffe) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r5, &(0x7f0000000140), 0x9) ioctl$IOC_PR_REGISTER(r5, 0x401870c8, &(0x7f0000000400)={0x80000001, 0x4, 0x1}) add_key$keyring(&(0x7f0000000500), &(0x7f0000000540)={'syz', 0x2}, 0x0, 0x0, r4) r6 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x1a, &(0x7f00000000c0)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@dev}}, {{@in=@remote}, 0x0, @in=@multicast2}}, 0xe8) r7 = socket$inet6(0xa, 0x80002, 0x0) r8 = add_key$fscrypt_provisioning(&(0x7f00000003c0), &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000480)=ANY=[@ANYBLOB="382f15342d3f0000000000000000"], 0xe, r3) keyctl$KEYCTL_MOVE(0x1e, r8, r4, r3, 0x0) setsockopt$inet6_int(r7, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="8c0000000001010400000000ffffff8802000000240001801400018008000100ac1414bb08000200ac1414bb0c00028005000100000000002400028014000180080001000000004008000200ac1414bb0c0002800500010000000000080007400000000028000680080002007f00000108000100000000001400038006"], 0x8c}, 0x1, 0x600000000000000}, 0x0) sendmsg$netlink(r1, &(0x7f0000001800)={0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000640)={0x18, 0x18, 0x9, 0x0, 0x0, "", [@nested={0x4}, @nested={0x4, 0x12}]}, 0x18}], 0x1}, 0x0) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r1, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2401000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r9, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x101}]}, 0x1c}}, 0x10100) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003000012002505a8a4f0"], 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 2.246253852s ago: executing program 2 (id=1211): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240)={'#! ', './file1'}, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000a41000/0x2000)=nil}) r4 = dup(r3) keyctl$instantiate_iov(0x14, 0x0, &(0x7f00000035c0)=[{&(0x7f0000000100)="ebb20639123fa20bb54bd839febb49f9b1b8768d110d169571a56f30a6c4185dbca4266903fbe389dc33005b6cb3c947df31", 0x32}], 0x1, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000040)) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f00000000c0)=0xffff) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2.141952751s ago: executing program 2 (id=1212): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJREF_SET_ID={0x8, 0x5, 0x1, 0x0, 0x1}]}}}]}]}], {0x14}}, 0x88}}, 0x0) 2.085412425s ago: executing program 2 (id=1213): r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000040)=0x8004, 0x4) syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff02000000000000000000000000000104004e20004d13"], 0x0) recvmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=""/17, 0x11}}], 0x1, 0x0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r1, &(0x7f0000001800)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) 2.010400001s ago: executing program 1 (id=1214): r0 = syz_open_dev$evdev(&(0x7f0000000a00), 0x2, 0x2) io_setup(0xb0, &(0x7f0000000200)=0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r1, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c460006000000e0ff0000ffffff02000800d4"], 0x78) 1.921765738s ago: executing program 1 (id=1215): capset(0x0, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @loopback, 0x0, 0x0, 'sed\x00', 0x1}, 0x2c) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r1, &(0x7f0000001680)=[{&(0x7f0000000000)=@in={0x2, 0x0, @loopback}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000040)="9e", 0x1}], 0x1}], 0x1, 0xfc) 1.865887852s ago: executing program 2 (id=1216): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x21404e, &(0x7f0000000700)={[{@errors_remount}, {@noblock_validity}, {@mblk_io_submit}, {@bsdgroups}, {@dioread_nolock}]}, 0x1, 0x517, &(0x7f0000000140)="$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") 1.810423327s ago: executing program 1 (id=1217): sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) unshare(0x62040200) 1.696154096s ago: executing program 0 (id=1218): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000300)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x3, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 1.439130377s ago: executing program 2 (id=1219): socket$inet6_sctp(0xa, 0x0, 0x84) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast1}, 0x10) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e24, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000003c0)='dctcp-reno\x00', 0xb) setsockopt$sock_int(r0, 0x1, 0x1, &(0x7f0000000200)=0x9, 0x4) 1.26197619s ago: executing program 0 (id=1220): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x1001, 0x2}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) dup3(r4, 0xffffffffffffffff, 0x0) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) lseek(r5, 0x851, 0x0) 1.190974096s ago: executing program 1 (id=1221): r0 = socket$rds(0x15, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() bind$inet6(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0xffff8000) r2 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r2, 0x10d, 0xeb, &(0x7f00000002c0), &(0x7f0000000080)=0x3) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) migrate_pages(r1, 0x0, &(0x7f0000000000)=0x9, &(0x7f0000000080)=0x20400000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sched_setscheduler(r1, 0x2, &(0x7f0000000380)=0x3) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) move_pages(r1, 0x4, &(0x7f00000002c0)=[&(0x7f000091f000/0x4000)=nil, &(0x7f00003cb000/0x3000)=nil, &(0x7f00000f5000/0x1000)=nil, &(0x7f0000182000/0x4000)=nil], &(0x7f0000000300)=[0x0, 0x6, 0x4], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4) bind$rds(r0, &(0x7f00000021c0)={0x2, 0x0, @local}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x4, &(0x7f00000000c0)=[{0x25, 0x0, 0x2}, {0x81}, {0x3, 0x0, 0x80}, {0x16, 0x0, 0xff}]}) sendmsg$rds(r0, &(0x7f0000002180)={&(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000001fc0)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000280)=[{&(0x7f00000006c0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000180)=""/205, 0xcd}], 0x3}}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000001ec0)=[{&(0x7f0000001a00)=""/161, 0xa1}], 0x1, 0x76}}], 0x90}, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r6, 0x11, 0x67, &(0x7f0000000000)=0x200, 0x4) connect$inet6(r5, &(0x7f0000002f80)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) write$binfmt_misc(r5, &(0x7f0000000040)=ANY=[], 0xfe46) socket(0x10, 0x2, 0x0) 1.064093686s ago: executing program 2 (id=1222): socket$nl_rdma(0x10, 0x3, 0x14) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x0, 0x0, 0x0, 0x8000}, 0x48) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/profiling', 0x22042, 0x0) write$cgroup_int(r0, &(0x7f00000000c0)=0x7, 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 0s ago: executing program 0 (id=1223): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./file2\x00', 0x0, &(0x7f0000000240)={[{@noinline_xattr}, {@four_active_logs}, {@four_active_logs}, {@jqfmt_vfsv1}, {@noinline_data}, {@user_xattr}, {@grpjquota={'grpjquota', 0x3d, '\\#&['}}, {@jqfmt_vfsv1}, {@fsync_mode_strict}, {@noextent_cache}]}, 0x21, 0x552d, &(0x7f000000abc0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r0, 0x8008f513, 0x0) kernel console output (not intermixed with test programs): : renamed from eth1 [ 295.574273][ T7494] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 295.617992][ T7494] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 295.855034][ T7494] 8021q: adding VLAN 0 to HW filter on device bond0 [ 295.902937][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 295.914194][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 295.943587][ T7494] 8021q: adding VLAN 0 to HW filter on device team0 [ 295.993604][ T3608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 296.003630][ T3608] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 296.032359][ T3608] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.039512][ T3608] bridge0: port 1(bridge_slave_0) entered forwarding state [ 296.122689][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 296.143005][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 296.185070][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 296.237655][ T1280] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.244795][ T1280] bridge0: port 2(bridge_slave_1) entered forwarding state [ 296.290358][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 296.331554][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 296.353765][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 296.399693][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 296.450557][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 296.490332][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 296.528986][ T7494] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 296.590596][ T7494] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 296.655792][ T3608] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 296.664344][ T3608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 296.708318][ T3608] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 296.743731][ T3608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 296.789090][ T3608] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 296.827566][ T3791] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 297.061802][ T3701] Bluetooth: hci5: command 0x040f tx timeout [ 297.196008][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 297.215199][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 297.258022][ T7494] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 297.335322][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 297.364599][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 297.441901][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 297.462909][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 297.472794][ T7494] device veth0_vlan entered promiscuous mode [ 297.517909][ T7494] device veth1_vlan entered promiscuous mode [ 297.533412][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 297.542167][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 297.582355][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 297.660110][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 297.677806][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 297.738567][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 297.770595][ T7494] device veth0_macvtap entered promiscuous mode [ 297.808973][ T7494] device veth1_macvtap entered promiscuous mode [ 297.888093][ T7494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 297.925545][ T7494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.966159][ T7494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 298.017263][ T7494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.067453][ T7494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 298.128761][ T7494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.159420][ T7494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 298.212426][ T7494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.253206][ T7494] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 298.286414][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 298.302857][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 298.332061][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 298.364437][ T7494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 298.385207][ T7494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.421855][ T7494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 298.468234][ T7494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.509271][ T7494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 298.551179][ T7494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.580741][ T7494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 298.631643][ T7494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.663460][ T7494] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 298.675555][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 298.694580][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 298.725987][ T7494] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.752032][ T7494] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.781120][ T7494] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.811483][ T7494] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.979973][ T6066] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 299.017299][ T6066] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 299.059536][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 299.082533][ T156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 299.110219][ T156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 299.141825][ T1066] Bluetooth: hci5: command 0x0419 tx timeout [ 299.172873][ T3608] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 299.581736][ T1066] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 299.831820][ T1066] usb 2-1: Using ep0 maxpacket: 16 [ 299.951945][ T1066] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 299.992901][ T1066] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 300.026314][ T1066] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.066452][ T1066] usb 2-1: config 0 descriptor?? [ 300.559425][ T7608] netlink: 16 bytes leftover after parsing attributes in process `syz.1.849'. [ 300.586199][ T7608] udc-core: couldn't find an available UDC or it's busy [ 300.608406][ T7608] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 300.653691][ T1066] hid (null): unknown global tag 0xe [ 300.670552][ T1066] hid-generic 0003:0158:0100.001F: unknown main item tag 0x1 [ 300.717333][ T1066] hid-generic 0003:0158:0100.001F: unexpected long global item [ 300.732098][ T1066] hid-generic: probe of 0003:0158:0100.001F failed with error -22 [ 300.855840][ T1066] usb 2-1: USB disconnect, device number 15 [ 302.560988][ T7641] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -512 0 [ 302.570978][ T7641] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -512 0 [ 302.590977][ T7641] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -512 0 [ 302.610985][ T7641] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -512 0 [ 302.630987][ T7641] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -512 0 [ 302.650969][ T7641] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -512 0 [ 302.670973][ T7641] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -512 0 [ 302.690969][ T7641] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -512 0 [ 302.710965][ T7641] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -512 0 [ 302.740979][ T7641] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -512 0 [ 302.760970][ T7641] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -512 0 [ 302.780988][ T7641] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -512 0 [ 302.800971][ T7641] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -512 0 [ 302.820971][ T7641] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -512 0 [ 302.840968][ T7641] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -512 0 [ 302.860969][ T7641] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -512 0 [ 302.880973][ T7641] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -512 0 [ 302.902974][ T7641] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -512 0 [ 302.940987][ T7641] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -512 0 [ 302.960979][ T7641] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -512 0 [ 302.987053][ T7641] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -512 0 [ 303.020981][ T7641] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -512 0 [ 303.050995][ T7641] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -512 0 [ 303.071003][ T7641] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -512 0 [ 303.101303][ T7641] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -512 0 [ 303.150980][ T7641] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -512 0 [ 303.170971][ T7641] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -512 0 [ 303.211022][ T7641] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -512 0 [ 303.230970][ T7641] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -512 0 [ 303.251003][ T7641] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -512 0 [ 303.270967][ T7641] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -512 0 [ 303.290967][ T7641] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -512 0 [ 303.310970][ T7641] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -512 0 [ 303.330966][ T7641] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -512 0 [ 303.350965][ T7641] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -512 0 [ 303.389628][ T7641] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -512 0 [ 303.651784][ T7649] loop0: detected capacity change from 0 to 32768 [ 303.761741][ T1066] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 303.991119][ T7665] loop2: detected capacity change from 0 to 2048 [ 304.015769][ T1066] usb 4-1: Using ep0 maxpacket: 16 [ 304.028407][ T7665] NILFS (loop2): invalid segment: Sequence number mismatch [ 304.036090][ T7665] NILFS (loop2): trying rollback from an earlier position [ 304.065168][ T7665] NILFS (loop2): recovery complete [ 304.132139][ T1066] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 304.152274][ T7669] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 304.173286][ T1066] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 304.195462][ T1066] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.234977][ T1066] usb 4-1: config 0 descriptor?? [ 304.386094][ T7655] orangefs_mount: mount request failed with -4 [ 304.713734][ T7653] netlink: 16 bytes leftover after parsing attributes in process `syz.3.876'. [ 304.775765][ T7653] udc-core: couldn't find an available UDC or it's busy [ 304.775786][ T7653] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 304.818338][ T1066] hid (null): unknown global tag 0xe [ 304.833785][ T1066] hid-generic 0003:0158:0100.0020: unknown main item tag 0x1 [ 304.833819][ T1066] hid-generic 0003:0158:0100.0020: unexpected long global item [ 304.834232][ T1066] hid-generic: probe of 0003:0158:0100.0020 failed with error -22 [ 304.856859][ T7674] loop0: detected capacity change from 0 to 32768 [ 304.969552][ T7674] find_entry called with index >= next_index [ 305.003852][ T7674] find_entry called with index = 0 [ 305.009080][ T7674] find_entry called with index >= next_index [ 305.025227][ T1066] usb 4-1: USB disconnect, device number 16 [ 305.189120][ T7690] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 305.719075][ T6066] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0xe5 [ 305.781822][ T3608] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 305.872500][ T7701] loop1: detected capacity change from 0 to 32768 [ 305.914579][ T7701] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 305.941730][ T7701] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 306.023847][ T7701] gfs2: fsid=syz:syz.s: journal 0 mapped with 16 extents in 0ms [ 306.062075][ T3608] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 306.139935][ T7701] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 306.152051][ T3608] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 306.181837][ T3608] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 306.212794][ T3608] usb 1-1: config 0 interface 0 has no altsetting 0 [ 306.312255][ T3608] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 306.321229][ T3608] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 306.410559][ T3608] usb 1-1: config 0 interface 0 has no altsetting 0 [ 306.511935][ T3608] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 306.520875][ T3608] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 306.540396][ T3608] usb 1-1: config 0 interface 0 has no altsetting 0 [ 306.621821][ T3608] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 306.627096][ T7728] netlink: 'syz.1.905': attribute type 6 has an invalid length. [ 306.630778][ T3608] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 306.639261][ T7728] netlink: 4 bytes leftover after parsing attributes in process `syz.1.905'. [ 306.655212][ T3608] usb 1-1: config 0 interface 0 has no altsetting 0 [ 306.667357][ T7728] netlink: 'syz.1.905': attribute type 5 has an invalid length. [ 306.695000][ T7728] netlink: 4 bytes leftover after parsing attributes in process `syz.1.905'. [ 306.749795][ T3608] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 306.768153][ T3608] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 306.781245][ T3608] usb 1-1: config 0 interface 0 has no altsetting 0 [ 306.872155][ T3608] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 306.881053][ T3608] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 306.896343][ T3608] usb 1-1: config 0 interface 0 has no altsetting 0 [ 306.982072][ T3608] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 307.000088][ T3608] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 307.018128][ T3608] usb 1-1: config 0 interface 0 has no altsetting 0 [ 307.051747][ T3894] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 307.101814][ T3608] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 307.111234][ T3608] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 307.123841][ T3608] usb 1-1: config 0 interface 0 has no altsetting 0 [ 307.171748][ T1066] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 307.220086][ T7740] netlink: 'syz.3.910': attribute type 8 has an invalid length. [ 307.281873][ T3608] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 307.290928][ T3608] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 307.299361][ T3608] usb 1-1: Product: syz [ 307.303668][ T3608] usb 1-1: Manufacturer: syz [ 307.308266][ T3608] usb 1-1: SerialNumber: syz [ 307.328405][ T3608] usb 1-1: config 0 descriptor?? [ 307.341777][ T3894] usb 2-1: Using ep0 maxpacket: 8 [ 307.376767][ T3608] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0 [ 307.462152][ T1066] usb 3-1: Using ep0 maxpacket: 16 [ 307.512012][ T3894] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 307.528886][ T3894] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 307.538162][ T3894] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 307.560878][ T3894] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 307.585135][ T3894] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 307.596037][ T3894] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.621859][ T1066] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 307.643992][ T1066] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 307.654570][ T3894] hub 2-1:1.0: bad descriptor, ignoring hub [ 307.660495][ T3894] hub: probe of 2-1:1.0 failed with error -5 [ 307.672131][ T3894] cdc_wdm 2-1:1.0: skipping garbage [ 307.677453][ T1066] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.685639][ T3894] cdc_wdm 2-1:1.0: skipping garbage [ 307.692696][ T1066] usb 3-1: config 0 descriptor?? [ 307.698715][ T3894] cdc_wdm 2-1:1.0: cdc-wdm1: USB WDM device [ 307.705309][ T7742] udc-core: couldn't find an available UDC or it's busy [ 307.712705][ T7742] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 307.720238][ T3894] cdc_wdm 2-1:1.0: Unknown control protocol [ 307.728238][ T3698] usb 1-1: USB disconnect, device number 17 [ 307.731734][ C1] usb 1-1: yurex_control_callback - control failed: -71 [ 307.742890][ T3698] yurex 1-1:0.0: USB YUREX #0 now disconnected [ 307.931089][ T7744] loop3: detected capacity change from 0 to 1024 [ 308.006066][ T7744] EXT4-fs (loop3): mounted filesystem without journal. Opts: noauto_da_alloc,max_dir_size_kb=0x0000000000000001,dioread_lock,norecovery,discard,lazytime,noload,usrquota,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 308.118678][ T3983] EXT4-fs error (device loop3): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 308.134734][ T3983] EXT4-fs error (device loop3): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 308.147502][ T3983] EXT4-fs error (device loop3): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 308.160326][ T3983] EXT4-fs error (device loop3): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 308.165337][ T7734] netlink: 16 bytes leftover after parsing attributes in process `syz.2.908'. [ 308.172303][ T3983] EXT4-fs error (device loop3): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 308.183620][ T7734] udc-core: couldn't find an available UDC or it's busy [ 308.197371][ T3983] EXT4-fs error (device loop3): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 308.197665][ T3698] usb 2-1: USB disconnect, device number 16 [ 308.210144][ T3983] EXT4-fs error (device loop3): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 308.214349][ T7734] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 308.230449][ T3983] EXT4-fs error (device loop3): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 308.253476][ T3983] EXT4-fs error (device loop3): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 308.263464][ T1066] hid (null): unknown global tag 0xe [ 308.268750][ T3983] EXT4-fs error (device loop3): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 308.278342][ T1066] hid-generic 0003:0158:0100.0021: unknown main item tag 0x1 [ 308.287526][ T1066] hid-generic 0003:0158:0100.0021: unexpected long global item [ 308.296541][ T1066] hid-generic: probe of 0003:0158:0100.0021 failed with error -22 [ 308.493416][ T3701] usb 3-1: USB disconnect, device number 24 [ 308.697030][ T4218] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.829480][ T4218] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.904923][ T7751] loop0: detected capacity change from 0 to 32768 [ 308.950563][ T4218] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.951965][ T7751] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 309.014348][ T7751] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 309.056983][ T4218] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.075817][ T7751] gfs2: fsid=syz:syz.s: journal 0 mapped with 16 extents in 0ms [ 309.194561][ T7751] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 309.636829][ T7761] chnl_net:caif_netlink_parms(): no params data found [ 309.998527][ T7761] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.011978][ T7761] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.040876][ T7761] device bridge_slave_0 entered promiscuous mode [ 310.064251][ T7825] netlink: 16 bytes leftover after parsing attributes in process `syz.0.940'. [ 310.072680][ T7761] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.090574][ T7761] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.149433][ T7761] device bridge_slave_1 entered promiscuous mode [ 310.270986][ T7761] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 310.309911][ T7761] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 310.435657][ T7761] team0: Port device team_slave_0 added [ 310.481428][ T7761] team0: Port device team_slave_1 added [ 310.621062][ T7761] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 310.645410][ T7761] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 310.733175][ T7761] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 310.853603][ T7818] loop1: detected capacity change from 0 to 32768 [ 310.856748][ T7761] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 310.882894][ T7761] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 310.960458][ T7761] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 310.991323][ T7818] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 311.001842][ T7818] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 311.061889][ T1280] Bluetooth: hci2: command 0x0409 tx timeout [ 311.117873][ T7818] gfs2: fsid=syz:syz.s: journal 0 mapped with 16 extents in 0ms [ 311.287734][ T7761] device hsr_slave_0 entered promiscuous mode [ 311.324334][ T7761] device hsr_slave_1 entered promiscuous mode [ 311.335615][ T7761] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 311.348246][ T7818] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 311.351800][ T7761] Cannot create hsr debugfs directory [ 311.363599][ T7873] kvm [7872]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc1 data 0x0 [ 311.380634][ T7873] kvm [7872]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc1 data 0x1900000019 [ 311.396523][ T7873] kvm [7872]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x1a0000002d [ 311.430558][ T7873] kvm [7872]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x1900000053 [ 311.471083][ T7873] kvm [7872]: vcpu0, guest rIP: 0x1be ignored wrmsr: 0x11e data 0x200000065 [ 311.558110][ T4218] device hsr_slave_0 left promiscuous mode [ 311.578302][ T4218] device hsr_slave_1 left promiscuous mode [ 311.585613][ T4218] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 311.600658][ T4218] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 311.684759][ T4218] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 311.694912][ T4218] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 311.719402][ T4218] device bridge_slave_1 left promiscuous mode [ 311.738687][ T4218] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.773682][ T4218] device bridge_slave_0 left promiscuous mode [ 311.793582][ T4218] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.821531][ T4218] device veth1_macvtap left promiscuous mode [ 311.855484][ T4218] device veth0_macvtap left promiscuous mode [ 311.879770][ T4218] device veth1_vlan left promiscuous mode [ 311.904516][ T4218] device veth0_vlan left promiscuous mode [ 312.130530][ T7906] loop2: detected capacity change from 0 to 1024 [ 312.199492][ T7906] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 312.311097][ T7906] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000084,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,jqfmt=vfsold,usrquota,data_err=abort,,errors=continue. Quota mode: writeback. [ 313.174623][ T3894] Bluetooth: hci3: command 0x0409 tx timeout [ 313.233925][ T3610] Bluetooth: hci2: command 0x041b tx timeout [ 313.285483][ T7915] loop0: detected capacity change from 0 to 32768 [ 313.314537][ T4218] team0 (unregistering): Port device team_slave_1 removed [ 313.329207][ T4218] team0 (unregistering): Port device team_slave_0 removed [ 313.344439][ T4218] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 313.371749][ T7915] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 313.388932][ T4218] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 313.390458][ T7915] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 313.420537][ T7915] gfs2: fsid=syz:syz.s: journal 0 mapped with 16 extents in 0ms [ 313.481537][ T4218] bond0 (unregistering): Released all slaves [ 313.524738][ T7915] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 313.620822][ T7927] tap0: tun_chr_ioctl cmd 1074025675 [ 313.626381][ T7927] tap0: persist enabled [ 313.960505][ T7867] chnl_net:caif_netlink_parms(): no params data found [ 314.067583][ T7946] loop2: detected capacity change from 0 to 1024 [ 314.159636][ T7946] EXT4-fs (loop2): Ignoring removed orlov option [ 314.202016][ T7946] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 314.241321][ T7946] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 314.241522][ T7867] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.271138][ T7867] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.280015][ T7867] device bridge_slave_0 entered promiscuous mode [ 314.419873][ T7867] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.446151][ T7867] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.467847][ T7867] device bridge_slave_1 entered promiscuous mode [ 314.548444][ T7970] netlink: 'syz.0.979': attribute type 33 has an invalid length. [ 314.572515][ T7970] netlink: 152 bytes leftover after parsing attributes in process `syz.0.979'. [ 314.644974][ T7867] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 314.659424][ T7867] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 314.787626][ T7867] team0: Port device team_slave_0 added [ 314.854717][ T7867] team0: Port device team_slave_1 added [ 314.877480][ T7974] kvm [7972]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc1 data 0x0 [ 314.884073][ T7761] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 314.890508][ T7974] kvm [7972]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc1 data 0x1900000019 [ 314.962105][ T7974] kvm [7972]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x1a0000002d [ 315.011200][ T7974] kvm [7972]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x1900000053 [ 315.065846][ T7974] kvm [7972]: vcpu0, guest rIP: 0x1be ignored wrmsr: 0x11e data 0x200000065 [ 315.079612][ T7761] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 315.302621][ T3612] Bluetooth: hci2: command 0x040f tx timeout [ 315.323783][ T3612] Bluetooth: hci3: command 0x041b tx timeout [ 315.973259][ T7761] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 316.016691][ T7867] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 316.024781][ T7867] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 316.091824][ T7867] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 316.130145][ T7761] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 316.254128][ T7867] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 316.261136][ T7867] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 316.276995][ T7998] loop0: detected capacity change from 0 to 2048 [ 316.331663][ T7867] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 316.339429][ T7998] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 316.443168][ T7998] EXT4-fs (loop0): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000000,grpid,nomblk_io_submit,stripe=0x000000000004ffff,norecovery,errors=remount-ro,bsddf,. Quota mode: none. [ 316.488740][ T7998] EXT4-fs error (device loop0): ext4_find_inline_data_nolock:163: inode #15: comm syz.0.984: inline data xattr refers to an external xattr inode [ 316.571985][ T7998] EXT4-fs (loop0): Remounting filesystem read-only [ 316.588723][ T7867] device hsr_slave_0 entered promiscuous mode [ 316.607454][ T8007] loop1: detected capacity change from 0 to 512 [ 316.631715][ T7867] device hsr_slave_1 entered promiscuous mode [ 316.657575][ T7867] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 316.686442][ T8010] loop2: detected capacity change from 0 to 512 [ 316.700818][ T7867] Cannot create hsr debugfs directory [ 316.718116][ T8007] EXT4-fs (loop1): orphan cleanup on readonly fs [ 316.765850][ T8007] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=0 [ 316.802023][ T8007] EXT4-fs warning (device loop1): ext4_enable_quotas:6431: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 316.816899][ T8007] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 316.900726][ T8010] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2213: inode #15: comm syz.2.987: corrupted in-inode xattr [ 316.923884][ T8007] EXT4-fs (loop1): 1 truncate cleaned up [ 316.936854][ T7761] 8021q: adding VLAN 0 to HW filter on device bond0 [ 316.948033][ T8007] EXT4-fs (loop1): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000009,init_itable,,errors=continue. Quota mode: writeback. [ 316.959602][ T8010] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.987: couldn't read orphan inode 15 (err -117) [ 316.977184][ T8010] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 317.073099][ T1376] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.079444][ T1376] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.109075][ T7761] 8021q: adding VLAN 0 to HW filter on device team0 [ 317.157953][ T3610] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 317.187793][ T3610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 317.381995][ T3612] Bluetooth: hci2: command 0x0419 tx timeout [ 317.461879][ T21] Bluetooth: hci3: command 0x040f tx timeout [ 317.505706][ T7867] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.512773][ T8033] loop2: detected capacity change from 0 to 128 [ 317.719490][ T3896] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 317.728537][ T3896] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 317.737148][ T3896] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.744263][ T3896] bridge0: port 1(bridge_slave_0) entered forwarding state [ 317.761871][ T3896] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 317.770740][ T8033] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 317.802708][ T3896] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 317.813415][ T3896] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.820473][ T3896] bridge0: port 2(bridge_slave_1) entered forwarding state [ 317.893228][ T3896] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 317.934348][ T3896] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 317.942954][ T26] audit: type=1800 audit(1719977675.219:102): pid=8033 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.991" name="bus" dev="loop2" ino=1048714 res=0 errno=0 [ 318.089210][ T26] audit: type=1800 audit(1719977675.269:103): pid=8039 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.991" name="bus" dev="loop2" ino=1048714 res=0 errno=0 [ 318.110714][ T3700] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 318.258631][ T3664] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 318.280101][ T7867] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.315041][ T7761] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 318.335981][ T7761] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 318.371425][ T3896] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 318.395747][ T3896] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 318.419921][ T3896] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 318.436970][ T3896] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 318.460754][ T3896] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 318.478481][ T3896] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 318.498476][ T3896] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 318.509765][ T3896] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 318.582749][ T8057] netlink: 8 bytes leftover after parsing attributes in process `syz.2.996'. [ 318.604020][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 318.612819][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 318.683555][ T7867] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.729890][ T8063] loop2: detected capacity change from 0 to 512 [ 318.973770][ T7867] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.008231][ T8063] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 319.052117][ T8063] ext4 filesystem being mounted at /65/file0 supports timestamps until 2038 (0x7fffffff) [ 319.086389][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 319.100157][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 319.150704][ T7761] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 319.192749][ T8063] Quota error (device loop2): do_check_range: Getting dqdh_prev_free 589824 out of range 0-6 [ 319.205375][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 319.289075][ T8063] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 319.364222][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 319.380574][ T8087] loop0: detected capacity change from 0 to 512 [ 319.392763][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 319.401775][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 319.410890][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 319.419554][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 319.427087][ T8063] EXT4-fs error (device loop2): ext4_acquire_dquot:6196: comm syz.2.997: Failed to acquire dquot type 1 [ 319.450158][ T7761] device veth0_vlan entered promiscuous mode [ 319.483646][ T8089] xt_hashlimit: overflow, try lower: 3/0 [ 319.499962][ T7761] device veth1_vlan entered promiscuous mode [ 319.541899][ T1280] Bluetooth: hci3: command 0x0419 tx timeout [ 319.550048][ T8087] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 319.560646][ T8087] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802c01c, mo2=0002] [ 319.572083][ T8087] System zones: 1-12 [ 319.577332][ T8087] EXT4-fs (loop0): couldn't mount RDWR because of unsupported optional features (80) [ 319.662762][ T8087] EXT4-fs (loop0): Skipping orphan cleanup due to unknown ROCOMPAT features [ 319.671487][ T8087] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 319.707248][ T7867] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 319.774388][ T7867] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 319.874870][ T7867] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 319.900958][ T8097] loop0: detected capacity change from 0 to 128 [ 319.915663][ T7867] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 319.950269][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 319.969072][ T8097] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 320.038036][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 320.098201][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 320.116773][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 320.482691][ T7761] device veth0_macvtap entered promiscuous mode [ 320.489274][ T26] audit: type=1800 audit(1719977677.769:104): pid=8097 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1002" name="bus" dev="loop0" ino=1048715 res=0 errno=0 [ 320.519934][ T3610] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 320.570102][ T7761] device veth1_macvtap entered promiscuous mode [ 320.579640][ T156] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 320.611310][ T26] audit: type=1800 audit(1719977677.769:105): pid=8097 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1002" name="bus" dev="loop0" ino=1048715 res=0 errno=0 [ 320.685833][ T7761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 320.687875][ T8112] loop2: detected capacity change from 0 to 512 [ 320.721653][ T7761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.731497][ T7761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 320.762812][ T7761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.791711][ T7761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 320.831909][ T7761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.851666][ T7761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 320.878109][ T7761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.912606][ T7761] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 320.931115][ T3894] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 320.944179][ T3894] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 320.974565][ T8112] EXT4-fs (loop2): orphan cleanup on readonly fs [ 320.981004][ T8112] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=0 [ 321.045826][ T7761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 321.062112][ T8112] EXT4-fs warning (device loop2): ext4_enable_quotas:6431: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 321.078095][ T8112] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 321.085115][ T7761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.112364][ T8112] EXT4-fs (loop2): 1 truncate cleaned up [ 321.113166][ T7761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 321.129359][ T7761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.139775][ T7761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 321.151469][ T7761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.168169][ T8112] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000009,init_itable,,errors=continue. Quota mode: writeback. [ 321.172295][ T7761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 321.206634][ T7761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.227040][ T7761] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 321.246552][ T3896] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 321.259514][ T3896] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 321.295223][ T7761] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.315271][ T7761] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.335531][ T7761] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.345907][ T8129] trusted_key: encrypted_key: master key parameter 'ecryptf' is invalid [ 321.351674][ T7761] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.426099][ T7867] 8021q: adding VLAN 0 to HW filter on device bond0 [ 321.547696][ T7867] 8021q: adding VLAN 0 to HW filter on device team0 [ 321.713790][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 321.722102][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 321.768128][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 322.525069][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 322.537503][ T1066] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.544727][ T1066] bridge0: port 1(bridge_slave_0) entered forwarding state [ 322.617858][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 322.642881][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 322.655029][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 322.672234][ T3698] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.679306][ T3698] bridge0: port 2(bridge_slave_1) entered forwarding state [ 322.702011][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 322.710875][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 322.748090][ T3896] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 322.765198][ T3896] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 322.786240][ T4219] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 322.865098][ T8146] loop1: detected capacity change from 0 to 1024 [ 322.882095][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 322.882822][ T4219] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 322.890433][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 322.922739][ T8146] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 322.927147][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 322.952334][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 322.968637][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 322.978291][ T8146] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 322.987611][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 323.004903][ T8146] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 323.005279][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 323.054196][ T7867] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 323.074269][ T8146] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002] [ 323.082083][ T3699] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 323.091824][ T8146] System zones: 0-1, 3-36 [ 323.106242][ T3817] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 323.110285][ T8146] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,jqfmt=vfsv1,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 323.129808][ T3817] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 323.183560][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 323.518562][ T3791] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 323.524430][ T8159] loop2: detected capacity change from 0 to 2048 [ 323.545837][ T3791] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 323.571564][ T8163] loop0: detected capacity change from 0 to 512 [ 323.594723][ T7867] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 323.630594][ T8167] loop1: detected capacity change from 0 to 128 [ 323.656375][ T8159] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 323.676885][ T8163] EXT4-fs (loop0): orphan cleanup on readonly fs [ 323.706400][ T8163] Quota error (device loop0): v2_read_header: Failed header read: expected=8 got=0 [ 323.749629][ T8167] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 323.752616][ T8163] EXT4-fs warning (device loop0): ext4_enable_quotas:6431: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 323.774853][ T8163] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 323.819595][ T8163] EXT4-fs (loop0): 1 truncate cleaned up [ 323.881759][ T3699] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 323.899670][ T8163] EXT4-fs (loop0): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000009,init_itable,,errors=continue. Quota mode: writeback. [ 324.092795][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 324.103558][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 324.137084][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 324.151538][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 324.177731][ T7867] device veth0_vlan entered promiscuous mode [ 324.211924][ T3896] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 324.220683][ T3896] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 324.237327][ T7867] device veth1_vlan entered promiscuous mode [ 324.314211][ T3699] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 324.348593][ T3699] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 324.391845][ T3699] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 324.410395][ T3699] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 324.420033][ T3699] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.442084][ T7867] device veth0_macvtap entered promiscuous mode [ 324.464764][ T3699] usb 4-1: config 0 descriptor?? [ 324.481749][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 324.490275][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 324.506556][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 324.526874][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 324.540895][ T7867] device veth1_macvtap entered promiscuous mode [ 324.558017][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 324.568769][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 324.600970][ T8201] loop1: detected capacity change from 0 to 128 [ 324.615679][ T7867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 324.642689][ T7867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.661232][ T7867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 324.687074][ T7867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.698531][ T7867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 324.709913][ T7867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.734699][ T3791] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 324.740730][ T7867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 324.761267][ T7867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.773594][ T7867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 324.784967][ T7867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.796925][ T7867] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 324.807386][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 324.816949][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 324.829114][ T7867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 324.847303][ T8201] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 324.881318][ T7867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.890900][ T26] audit: type=1800 audit(1719977682.169:106): pid=8201 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1027" name="bus" dev="loop1" ino=1048719 res=0 errno=0 [ 324.893695][ T7867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 324.957136][ T8166] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1016'. [ 324.977288][ T26] audit: type=1800 audit(1719977682.229:107): pid=8201 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1027" name="bus" dev="loop1" ino=1048719 res=0 errno=0 [ 324.984714][ T7867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.998470][ T3791] usb 1-1: Using ep0 maxpacket: 16 [ 325.028881][ T7867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 325.050335][ T7867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.060381][ T7867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 325.078659][ T7867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.088721][ T7867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 325.104568][ T7867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.114731][ T3791] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 325.115212][ T4217] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 325.126255][ T3791] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 325.126282][ T3791] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.127939][ T3791] usb 1-1: config 0 descriptor?? [ 325.161092][ T7867] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 325.171902][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 325.193543][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 325.217598][ T7867] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.250923][ T7867] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.280375][ T7867] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.321827][ T7867] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.457691][ T8215] netlink: 'syz.2.1034': attribute type 10 has an invalid length. [ 325.521739][ T8215] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1034'. [ 325.618821][ T8215] device bond0 entered promiscuous mode [ 325.651730][ T8215] device bond_slave_0 entered promiscuous mode [ 325.659222][ T8215] device bond_slave_1 entered promiscuous mode [ 325.677697][ T8198] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1026'. [ 325.692368][ T8215] bridge0: port 3(bond0) entered blocking state [ 325.739547][ T8215] bridge0: port 3(bond0) entered disabled state [ 325.781020][ T8215] bridge0: port 3(bond0) entered blocking state [ 325.787920][ T8215] bridge0: port 3(bond0) entered forwarding state [ 325.806519][ T8222] udc-core: couldn't find an available UDC or it's busy [ 325.824959][ T8222] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 325.851850][ T8219] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.1035'. [ 325.893540][ T3791] hid (null): unknown global tag 0xe [ 325.912892][ T3791] hid-generic 0003:0158:0100.0022: unknown main item tag 0x1 [ 325.920339][ T3791] hid-generic 0003:0158:0100.0022: unexpected long global item [ 325.942248][ T4217] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 326.001436][ T4217] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 326.012390][ T3791] hid-generic: probe of 0003:0158:0100.0022 failed with error -22 [ 326.043801][ T3817] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 326.059959][ T3896] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 326.067382][ T3817] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 326.095668][ T3610] usb 1-1: USB disconnect, device number 18 [ 326.127057][ T3896] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 326.340280][ T8232] loop1: detected capacity change from 0 to 1024 [ 326.491081][ T8232] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 326.623639][ T8232] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsold,noauto_da_alloc,jqfmt=vfsold,bsdgroups,resuid=0x0000000000000000,dioread_nolock,usrjquota=,discard,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 326.822534][ T26] audit: type=1800 audit(1719977684.109:108): pid=8232 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1039" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 326.859897][ T8249] loop0: detected capacity change from 0 to 1024 [ 327.421916][ T3700] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 327.571996][ T8249] EXT4-fs (loop0): Test dummy encryption mode enabled [ 327.610643][ T8249] EXT4-fs (loop0): Ignoring removed orlov option [ 327.628502][ T8257] hub 6-0:1.0: USB hub found [ 327.677538][ T8257] hub 6-0:1.0: 1 port detected [ 327.808621][ T8249] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,sysvgroups,commit=0x0000000000000005,orlov,nobarrier,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue. Quota mode: writeback. [ 328.051703][ T21] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 328.091713][ T3700] usb 3-1: Using ep0 maxpacket: 16 [ 328.328796][ T8249] fscrypt (loop0): Error allocating 'xts(aes)' transform: -4 [ 328.409883][ T8270] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 328.417988][ T21] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 328.421947][ T3700] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=d8.08 [ 328.462886][ T21] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 328.509723][ T3700] usb 3-1: New USB device strings: Mfr=40, Product=98, SerialNumber=3 [ 328.559596][ T3700] usb 3-1: Product: syz [ 328.579848][ T3700] usb 3-1: Manufacturer: syz [ 328.600207][ T3700] usb 3-1: SerialNumber: syz [ 328.614877][ T21] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 328.627663][ T3700] usb 3-1: config 0 descriptor?? [ 328.649211][ T21] usb 5-1: New USB device strings: Mfr=0, Product=9, SerialNumber=0 [ 328.663136][ T3699] usbhid 4-1:0.0: can't add hid device: -71 [ 328.665325][ T21] usb 5-1: Product: syz [ 328.676039][ T3699] usbhid: probe of 4-1:0.0 failed with error -71 [ 328.687132][ T3700] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 328.687240][ T21] usb 5-1: config 0 descriptor?? [ 328.702507][ T3700] usb 3-1: Detected FT-X [ 328.718867][ T3699] usb 4-1: USB disconnect, device number 17 [ 328.866785][ T8282] syz.0.1050[8282] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 328.866906][ T8282] syz.0.1050[8282] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 328.891959][ T3700] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 328.987991][ T8285] loop0: detected capacity change from 0 to 512 [ 329.046999][ T8285] EXT4-fs (loop0): Ignoring removed orlov option [ 329.066759][ T8285] EXT4-fs (loop0): Test dummy encryption mode enabled [ 329.091512][ T8285] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a014e09c, mo2=0002] [ 329.118887][ T8285] System zones: 1-12 [ 329.129267][ T8285] EXT4-fs error (device loop0): ext4_orphan_get:1397: inode #15: comm syz.0.1051: casefold flag without casefold feature [ 329.192389][ T8285] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: inode #12: comm syz.0.1051: missing EA_INODE flag [ 329.201839][ T3700] ftdi_sio 3-1:0.0: GPIO initialisation failed: -71 [ 329.216733][ T3700] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 329.223855][ T21] konepure 0003:1E7D:2DB4.0023: item fetching failed at offset 10/11 [ 329.232873][ T3700] usb 3-1: USB disconnect, device number 25 [ 329.238714][ T8285] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.1051: error while reading EA inode 12 err=-117 [ 329.253617][ T3700] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 329.264508][ T3700] ftdi_sio 3-1:0.0: device disconnected [ 329.272672][ T8285] EXT4-fs (loop0): 1 orphan inode deleted [ 329.281273][ T8285] EXT4-fs (loop0): mounted filesystem without journal. Opts: orlov,minixdf,max_dir_size_kb=0x0000000000009c7c,debug,grpquota,errors=continue,test_dummy_encryption,auto_da_alloc,nodiscard,,errors=continue. Quota mode: writeback. [ 329.296493][ T21] konepure 0003:1E7D:2DB4.0023: parse failed [ 329.362829][ T21] konepure: probe of 0003:1E7D:2DB4.0023 failed with error -22 [ 329.434192][ T21] usb 5-1: USB disconnect, device number 20 [ 329.503775][ T8285] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 329.682312][ T8300] hub 6-0:1.0: USB hub found [ 329.687327][ T8300] hub 6-0:1.0: 1 port detected [ 329.746654][ T3698] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 330.001757][ T21] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 330.011750][ T3698] usb 2-1: Using ep0 maxpacket: 16 [ 330.153726][ T3698] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 330.196391][ T3698] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 330.216609][ T3698] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.221397][ T8316] loop2: detected capacity change from 0 to 1024 [ 330.250214][ T3698] usb 2-1: config 0 descriptor?? [ 330.318959][ T8316] EXT4-fs (loop2): Test dummy encryption mode enabled [ 330.339008][ T8316] EXT4-fs (loop2): Ignoring removed orlov option [ 330.371928][ T21] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 330.397957][ T21] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 330.431126][ T8316] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,sysvgroups,commit=0x0000000000000005,orlov,nobarrier,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue. Quota mode: writeback. [ 330.541994][ T21] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 330.551066][ T21] usb 1-1: New USB device strings: Mfr=0, Product=9, SerialNumber=0 [ 330.561726][ T3699] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 330.590160][ T21] usb 1-1: Product: syz [ 330.610816][ T8322] loop3: detected capacity change from 0 to 512 [ 330.640135][ T21] usb 1-1: config 0 descriptor?? [ 330.665950][ T8322] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 330.678127][ T8322] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038 (0x7fffffff) [ 330.726746][ T26] audit: type=1804 audit(1719977688.009:109): pid=8316 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1059" name="/newroot/90/file0/bus" dev="loop2" ino=18 res=1 errno=0 [ 330.734889][ T8295] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1053'. [ 330.788638][ T8295] udc-core: couldn't find an available UDC or it's busy [ 330.796968][ T8295] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 330.833804][ T3698] hid (null): unknown global tag 0xe [ 330.849658][ T3698] hid-generic 0003:0158:0100.0024: unknown main item tag 0x1 [ 330.858931][ T3698] hid-generic 0003:0158:0100.0024: unexpected long global item [ 330.874225][ T3698] hid-generic: probe of 0003:0158:0100.0024 failed with error -22 [ 330.956387][ T3699] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11 [ 331.014961][ T3699] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024 [ 331.034637][ T3699] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 331.056325][ T3699] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.111381][ T3701] usb 2-1: USB disconnect, device number 17 [ 331.131957][ T8318] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 331.203539][ T21] konepure 0003:1E7D:2DB4.0025: item fetching failed at offset 10/11 [ 331.218078][ T21] konepure 0003:1E7D:2DB4.0025: parse failed [ 331.227312][ T21] konepure: probe of 0003:1E7D:2DB4.0025 failed with error -22 [ 331.411729][ T21] usb 1-1: USB disconnect, device number 19 [ 331.783251][ T8337] netlink: 'syz.1.1066': attribute type 4 has an invalid length. [ 331.893847][ T8318] loop4: detected capacity change from 0 to 40427 [ 331.970409][ T7761] Quota error (device loop3): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 331.990729][ T7761] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 332.009601][ T7761] EXT4-fs error (device loop3): ext4_acquire_dquot:6196: comm syz-executor: Failed to acquire dquot type 0 [ 332.153124][ T8318] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 332.197159][ T8318] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 332.322919][ T8318] F2FS-fs (loop4): invalid crc value [ 332.388883][ T8318] F2FS-fs (loop4): Found nat_bits in checkpoint [ 332.523447][ T8318] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 332.530745][ T8318] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 333.128526][ T3699] aiptek 5-1:17.0: Aiptek using 400 ms programming speed [ 333.158416][ T3699] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:17.0/input/input9 [ 333.253230][ T3699] usb 5-1: USB disconnect, device number 21 [ 333.289645][ T8367] loop0: detected capacity change from 0 to 16 [ 333.354983][ T8367] erofs: (device loop0): check_layout_compatibility: unidentified incompatible feature 8, please upgrade kernel version [ 333.438213][ T6066] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.508268][ T3610] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 333.580898][ T6066] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.752328][ T3610] usb 3-1: Using ep0 maxpacket: 16 [ 333.872091][ T3610] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 333.914623][ T3546] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 333.943232][ T3610] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 333.959699][ T3546] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 333.983891][ T3610] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.412184][ T3610] usb 3-1: config 0 descriptor?? [ 334.426914][ T6066] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.577598][ T6066] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.914731][ T8365] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1075'. [ 335.026714][ T3612] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 335.281831][ T3612] usb 1-1: Using ep0 maxpacket: 16 [ 335.331964][ T1280] usb 5-1: new low-speed USB device number 22 using dummy_hcd [ 335.562945][ T3612] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 335.591854][ T1280] usb 5-1: Invalid ep0 maxpacket: 64 [ 335.603208][ T3612] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.615661][ T8372] chnl_net:caif_netlink_parms(): no params data found [ 335.626003][ T3612] usb 1-1: Product: syz [ 335.630204][ T3612] usb 1-1: Manufacturer: syz [ 335.669052][ T3612] usb 1-1: SerialNumber: syz [ 335.696744][ T3612] r8152-cfgselector 1-1: config 0 descriptor?? [ 335.732353][ T3610] usbhid 3-1:0.0: can't add hid device: -71 [ 335.741803][ T1280] usb 5-1: new low-speed USB device number 23 using dummy_hcd [ 335.759756][ T3610] usbhid: probe of 3-1:0.0 failed with error -71 [ 335.780175][ T3610] usb 3-1: USB disconnect, device number 26 [ 335.861776][ T3608] Bluetooth: hci2: command 0x0409 tx timeout [ 335.900613][ T8372] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.908137][ T8372] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.917272][ T8372] device bridge_slave_0 entered promiscuous mode [ 335.935133][ T8372] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.942601][ T8372] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.950790][ T8372] device bridge_slave_1 entered promiscuous mode [ 335.971937][ T3612] r8152-cfgselector 1-1: Unknown version 0x0000 [ 336.001737][ T1280] usb 5-1: Invalid ep0 maxpacket: 64 [ 336.007252][ T1280] usb usb5-port1: attempt power cycle [ 336.026425][ T8372] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 336.080716][ T8372] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 336.148749][ T8372] team0: Port device team_slave_0 added [ 336.187266][ T8372] team0: Port device team_slave_1 added [ 336.193189][ T3612] r8152-cfgselector 1-1: Unknown version 0x0000 [ 336.200794][ T3612] r8152-cfgselector 1-1: bad CDC descriptors [ 336.241884][ T3612] r8152-cfgselector 1-1: Unknown version 0x0000 [ 336.263329][ T3612] r8152-cfgselector 1-1: USB disconnect, device number 20 [ 336.337331][ T8372] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 336.349773][ T8372] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 336.390821][ T8372] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 336.420916][ T8417] loop1: detected capacity change from 0 to 1024 [ 336.428088][ T8372] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 336.435981][ T8372] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 336.462578][ T1280] usb 5-1: new low-speed USB device number 24 using dummy_hcd [ 336.482975][ T8372] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 336.518063][ T8417] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 336.542721][ T8394] loop2: detected capacity change from 0 to 40427 [ 336.551966][ T1280] usb 5-1: Invalid ep0 maxpacket: 64 [ 336.564969][ T8417] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsold,noauto_da_alloc,jqfmt=vfsold,bsdgroups,resuid=0x0000000000000000,dioread_nolock,usrjquota=,discard,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 336.601504][ T26] audit: type=1800 audit(1719977693.879:110): pid=8417 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1086" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 336.644731][ T8394] F2FS-fs (loop2): invalid crc value [ 336.711927][ T1280] usb 5-1: new low-speed USB device number 25 using dummy_hcd [ 336.722847][ T8394] F2FS-fs (loop2): Found nat_bits in checkpoint [ 336.741536][ T8372] device hsr_slave_0 entered promiscuous mode [ 336.769773][ T8372] device hsr_slave_1 entered promiscuous mode [ 336.809021][ T8372] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 336.822958][ T1280] usb 5-1: Invalid ep0 maxpacket: 64 [ 336.828562][ T1280] usb usb5-port1: unable to enumerate USB device [ 336.848733][ T8372] Cannot create hsr debugfs directory [ 336.896016][ T8394] F2FS-fs (loop2): Cannot turn on quotas: -2 on 0 [ 336.950790][ T8394] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 337.180687][ T6066] device hsr_slave_0 left promiscuous mode [ 337.207420][ T6066] device hsr_slave_1 left promiscuous mode [ 337.214421][ T6066] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 337.239702][ T6066] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 337.264095][ T6066] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 337.282050][ T6066] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 337.301510][ T6066] device bridge_slave_1 left promiscuous mode [ 337.318095][ T6066] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.318554][ T3700] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 337.338639][ T6066] device bridge_slave_0 left promiscuous mode [ 337.365089][ T6066] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.407389][ T6066] device veth1_macvtap left promiscuous mode [ 337.429264][ T6066] device veth0_macvtap left promiscuous mode [ 337.445838][ T6066] device veth1_vlan left promiscuous mode [ 337.456213][ T6066] device veth0_vlan left promiscuous mode [ 337.481589][ T8438] loop0: detected capacity change from 0 to 40427 [ 337.540516][ T8438] F2FS-fs (loop0): Found nat_bits in checkpoint [ 337.599375][ T8438] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 337.654522][ T8438] attempt to access beyond end of device [ 337.654522][ T8438] loop0: rw=10241, want=45104, limit=40427 [ 337.674841][ T8438] attempt to access beyond end of device [ 337.674841][ T8438] loop0: rw=2049, want=45112, limit=40427 [ 337.707079][ T8438] attempt to access beyond end of device [ 337.707079][ T8438] loop0: rw=2049, want=45120, limit=40427 [ 337.756463][ T3700] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11 [ 337.774921][ T3700] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024 [ 337.819477][ T3700] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 337.836795][ T8463] loop4: detected capacity change from 0 to 256 [ 337.843802][ T3700] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.861598][ T3500] attempt to access beyond end of device [ 337.861598][ T3500] loop0: rw=2049, want=45128, limit=40427 [ 337.877178][ T6066] team0 (unregistering): Port device team_slave_1 removed [ 337.892704][ T8443] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 337.900432][ T6066] team0 (unregistering): Port device team_slave_0 removed [ 337.936953][ T6066] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 337.943686][ T8463] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x9563797b, utbl_chksum : 0xe619d30d) [ 337.961976][ T3698] Bluetooth: hci2: command 0x041b tx timeout [ 337.978950][ T6066] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 338.105389][ T6066] bond0 (unregistering): Released all slaves [ 338.238646][ T6663] attempt to access beyond end of device [ 338.238646][ T6663] loop2: rw=2049, want=45112, limit=40427 [ 338.848710][ T8487] loop4: detected capacity change from 0 to 512 [ 338.988909][ T8487] FAT-fs (loop4): error, invalid access to FAT (entry 0x0000079f) [ 339.041824][ T8487] FAT-fs (loop4): Filesystem has been set read-only [ 339.103230][ T8372] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 339.145808][ T8443] loop1: detected capacity change from 0 to 40427 [ 339.162205][ T8372] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 339.184726][ T8372] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 339.255932][ T8443] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 339.263633][ T8372] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 339.284196][ T8443] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 339.314510][ T8499] loop4: detected capacity change from 0 to 2048 [ 339.330691][ T8443] F2FS-fs (loop1): invalid crc value [ 339.419639][ T8443] F2FS-fs (loop1): Found nat_bits in checkpoint [ 339.475852][ T8499] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 339.541761][ T3896] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 339.669967][ T8443] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 339.682755][ T8443] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 339.685142][ T8372] 8021q: adding VLAN 0 to HW filter on device bond0 [ 339.895015][ T26] audit: type=1326 audit(1719977697.129:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8498 comm="syz.4.1097" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6c089ddf19 code=0x0 [ 340.334018][ T3700] aiptek 2-1:17.0: Aiptek using 400 ms programming speed [ 340.344249][ T3700] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.0/input/input10 [ 340.364698][ T3698] Bluetooth: hci2: command 0x040f tx timeout [ 340.383736][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 340.391755][ T3896] usb 3-1: Using ep0 maxpacket: 16 [ 340.416818][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 340.425592][ T3700] usb 2-1: USB disconnect, device number 18 [ 340.441672][ C0] aiptek 2-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 340.454516][ T8372] 8021q: adding VLAN 0 to HW filter on device team0 [ 340.518861][ T3608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 340.539778][ T3608] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 340.552926][ T3896] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 340.606676][ T3896] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 340.615279][ T3608] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.622852][ T3608] bridge0: port 1(bridge_slave_0) entered forwarding state [ 340.641662][ T3896] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.701587][ T3896] usb 3-1: config 0 descriptor?? [ 340.874560][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 340.886157][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 340.903470][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 340.919518][ T1280] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.926680][ T1280] bridge0: port 2(bridge_slave_1) entered forwarding state [ 340.948711][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 340.968031][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 340.985808][ T3699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 341.011747][ T3699] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 341.049457][ T3699] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 341.060471][ T3699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 341.071324][ T8543] loop1: detected capacity change from 0 to 1024 [ 341.075577][ T3699] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 341.098069][ T3699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 341.111840][ T3699] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 341.133941][ T8372] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 341.156334][ T8372] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 341.175640][ T8543] hfsplus: unable to find HFS+ superblock [ 341.188499][ T3894] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 341.199115][ T3894] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 341.225180][ T8495] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1091'. [ 341.245464][ T8495] udc-core: couldn't find an available UDC or it's busy [ 341.263272][ T8495] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 341.303609][ T3896] hid (null): unknown global tag 0xe [ 341.315510][ T3896] hid-generic 0003:0158:0100.0026: unknown main item tag 0x1 [ 341.344745][ T3896] hid-generic 0003:0158:0100.0026: unexpected long global item [ 341.383679][ T3896] hid-generic: probe of 0003:0158:0100.0026 failed with error -22 [ 341.506574][ T3894] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 341.549530][ T3894] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 341.575357][ T8372] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 341.584716][ T3896] usb 3-1: USB disconnect, device number 27 [ 341.655032][ T3894] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 341.674422][ T3894] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 341.742671][ T3894] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 341.761550][ T3894] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 341.792431][ T8372] device veth0_vlan entered promiscuous mode [ 341.813769][ T3894] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 341.830816][ T3894] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 341.924066][ T8372] device veth1_vlan entered promiscuous mode [ 342.542623][ T3700] Bluetooth: hci2: command 0x0419 tx timeout [ 342.578293][ T3608] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 342.612574][ T3608] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 342.617623][ T8583] loop2: detected capacity change from 0 to 512 [ 342.803493][ T3608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 342.833599][ T3608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 342.848744][ T8372] device veth0_macvtap entered promiscuous mode [ 342.976947][ T8589] loop0: detected capacity change from 0 to 1024 [ 343.184514][ T8372] device veth1_macvtap entered promiscuous mode [ 343.241001][ T8372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 343.383696][ T8372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 343.414882][ T8372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 343.435757][ T8583] EXT4-fs error (device loop2): ext4_find_inline_data_nolock:163: inode #12: comm syz.2.1111: inline data xattr refers to an external xattr inode [ 343.444003][ T8372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 343.472525][ T8583] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.1111: couldn't read orphan inode 12 (err -117) [ 343.597443][ T8372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 343.608109][ T8372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 343.664153][ T8583] EXT4-fs (loop2): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000200000,data_err=ignore,norecovery,resuid=0x0000000000000000,prjquota,debug_want_extra_isize=0x0000000000000008,usrjquota=,resgid=0x0000000000000000,nodiscard,,errors=continue. Quota mode: writeback. [ 343.701670][ T8372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 343.745414][ T8372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 343.786414][ T8372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 343.825723][ T26] audit: type=1800 audit(1719977701.109:112): pid=8583 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1111" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 343.867110][ T8372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 343.933295][ T8372] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 343.947608][ T8595] device lo entered promiscuous mode [ 343.990626][ T3610] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 343.999132][ T3610] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 344.014670][ T3610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 344.026677][ T8589] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e000e01c, mo2=0002] [ 344.044879][ T8372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 344.063734][ T8589] System zones: 0-1, 3-12 [ 344.065179][ T8372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.068974][ T8589] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 344.081069][ T8372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 344.132542][ T8372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.143005][ T8372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 344.152672][ T26] audit: type=1800 audit(1719977701.429:113): pid=8610 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1111" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 344.153575][ T8372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.184666][ T8372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 344.216164][ T8372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.240073][ T8372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 344.304793][ T8372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.362044][ T8372] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 344.387827][ T8595] device lo left promiscuous mode [ 344.412443][ T3610] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 344.421235][ T3610] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 344.451108][ T8372] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.480403][ T8372] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.543022][ T8372] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.581661][ T8372] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.626705][ T8624] loop1: detected capacity change from 0 to 2048 [ 344.712067][ T3894] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 344.784774][ T8624] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 344.962641][ T3817] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 344.982525][ T3817] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 345.062450][ T8642] netlink: 'syz.4.1118': attribute type 2 has an invalid length. [ 345.078922][ T3610] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 345.106850][ T3817] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 345.122153][ T3894] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11 [ 345.146161][ T3817] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 345.183373][ T3894] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024 [ 345.224600][ T3894] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 345.232815][ T3610] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 345.262105][ T3894] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.342083][ T8621] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 346.446857][ T8674] loop4: detected capacity change from 0 to 256 [ 346.798517][ T8674] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fe7f, chksum : 0xb0200e68, utbl_chksum : 0xe619d30d) [ 346.822475][ T8674] exFAT-fs (loop4): error, invalid access to FAT (entry 0x00000005) bogus content (0xffffff00) [ 346.833029][ T8674] exFAT-fs (loop4): failed to initialize root inode [ 347.012082][ T3896] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 347.398832][ T8681] loop4: detected capacity change from 0 to 512 [ 347.482177][ T3894] aiptek 3-1:17.0: Aiptek using 400 ms programming speed [ 347.523630][ T3896] usb 1-1: Using ep0 maxpacket: 16 [ 347.551225][ T3894] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:17.0/input/input11 [ 347.660055][ T8691] loop2: detected capacity change from 0 to 512 [ 347.671971][ T3896] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 347.688253][ T8681] EXT4-fs error (device loop4): ext4_find_inline_data_nolock:163: inode #12: comm syz.4.1124: inline data xattr refers to an external xattr inode [ 347.722065][ T3896] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 347.744105][ T8691] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 347.776132][ T8694] loop1: detected capacity change from 0 to 256 [ 347.780346][ T3894] usb 3-1: USB disconnect, device number 28 [ 347.786229][ T8681] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.1124: couldn't read orphan inode 12 (err -117) [ 347.800553][ T8681] EXT4-fs (loop4): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000200000,data_err=ignore,norecovery,resuid=0x0000000000000000,prjquota,debug_want_extra_isize=0x0000000000000008,usrjquota=,resgid=0x0000000000000000,nodiscard,,errors=continue. Quota mode: writeback. [ 347.807138][ C0] aiptek 3-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 347.861991][ T3896] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.865850][ T8694] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 347.874241][ T3896] usb 1-1: config 0 descriptor?? [ 347.906166][ T8691] EXT4-fs (loop2): Unrecognized mount option "pcr=00000000000000000021" or missing value [ 347.917547][ T26] audit: type=1800 audit(1719977705.206:114): pid=8681 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1124" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 347.945988][ T3725] udevd[3725]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 348.120545][ T8691] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1127'. [ 348.361197][ T8704] loop1: detected capacity change from 0 to 512 [ 348.388189][ T8676] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1121'. [ 348.415692][ T26] audit: type=1800 audit(1719977705.696:115): pid=8695 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1124" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 348.446097][ T8676] udc-core: couldn't find an available UDC or it's busy [ 348.468589][ T8676] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 348.500893][ T8704] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2925: inode #16: comm syz.1.1131: corrupted xattr block 8 [ 348.563792][ T3896] hid (null): unknown global tag 0xe [ 348.571455][ T3896] hid-generic 0003:0158:0100.0027: unknown main item tag 0x1 [ 348.608965][ T8704] EXT4-fs warning (device loop1): ext4_evict_inode:302: xattr delete (err -117) [ 348.618234][ T8704] EXT4-fs (loop1): 1 orphan inode deleted [ 348.631845][ T8704] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 348.649672][ T3896] hid-generic 0003:0158:0100.0027: unexpected long global item [ 348.661190][ T8704] ext4 filesystem being mounted at /78/file1 supports timestamps until 2038 (0x7fffffff) [ 348.681925][ T3896] hid-generic: probe of 0003:0158:0100.0027 failed with error -22 [ 348.730648][ T8718] loop4: detected capacity change from 0 to 2048 [ 348.767039][ T3701] usb 1-1: USB disconnect, device number 21 [ 348.966548][ T8718] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 349.180225][ T8724] loop2: detected capacity change from 0 to 512 [ 349.252059][ T3610] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 349.431966][ T26] audit: type=1326 audit(1719977706.646:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8717 comm="syz.4.1136" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6c089ddf19 code=0x0 [ 349.598824][ T8724] EXT4-fs error (device loop2): __ext4_iget:4861: inode #14: block 1886221359: comm syz.2.1138: invalid block [ 349.677784][ T8724] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.1138: couldn't read orphan inode 14 (err -117) [ 349.731977][ T3610] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11 [ 349.779334][ T3610] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024 [ 349.793254][ T8724] EXT4-fs (loop2): mounted filesystem without journal. Opts: quota,,errors=continue. Quota mode: writeback. [ 349.815174][ T8735] loop1: detected capacity change from 0 to 512 [ 349.822401][ T8724] ext4 filesystem being mounted at /105/bus supports timestamps until 2038 (0x7fffffff) [ 349.832058][ T3610] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 349.876302][ T3610] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.908699][ T8735] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 349.948938][ T8713] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 350.027410][ T8735] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c128, mo2=0002] [ 350.043471][ T8735] System zones: 1-12 [ 350.052825][ T8735] EXT4-fs error (device loop1): __ext4_iget:4861: inode #17: block 1803188595: comm syz.1.1140: invalid block [ 350.090770][ T8735] EXT4-fs (loop1): Remounting filesystem read-only [ 350.124730][ T8735] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.1140: couldn't read orphan inode 17 (err -117) [ 350.165446][ T8748] loop4: detected capacity change from 0 to 512 [ 350.174856][ T8735] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000007,errors=remount-ro,resgid=0x0000000000000000,inode_readahead_blks=0x0000000000010000,errors=remount-ro,noload,init_itable=0x0000000000000009,debug,auto_da_alloc,. Quota mode: none. [ 350.286612][ T8751] loop2: detected capacity change from 0 to 512 [ 350.296766][ T8748] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 350.321271][ T8736] chnl_net:caif_netlink_parms(): no params data found [ 350.325916][ T8748] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2213: inode #15: comm syz.4.1144: corrupted in-inode xattr [ 350.362205][ T8748] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.1144: couldn't read orphan inode 15 (err -117) [ 350.419743][ T8751] EXT4-fs error (device loop2): ext4_find_inline_data_nolock:163: inode #12: comm syz.2.1145: inline data xattr refers to an external xattr inode [ 350.442331][ T8748] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 350.453384][ T8751] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.1145: couldn't read orphan inode 12 (err -117) [ 350.532064][ T8751] EXT4-fs (loop2): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000200000,data_err=ignore,norecovery,resuid=0x0000000000000000,prjquota,debug_want_extra_isize=0x0000000000000008,usrjquota=,resgid=0x0000000000000000,nodiscard,,errors=continue. Quota mode: writeback. [ 350.580399][ T3816] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.713054][ T26] audit: type=1800 audit(1719977707.986:117): pid=8751 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1145" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 350.739373][ T8713] loop3: detected capacity change from 0 to 40427 [ 350.842482][ T8713] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 350.857166][ T8713] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 351.051104][ T8713] F2FS-fs (loop3): invalid crc value [ 351.148474][ T8713] F2FS-fs (loop3): Found nat_bits in checkpoint [ 351.221940][ T3612] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 351.303494][ T8713] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 351.330269][ T8713] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 351.393520][ T26] audit: type=1800 audit(1719977708.666:118): pid=8766 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1145" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 351.467693][ T3816] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.554346][ T8736] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.564806][ T8736] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.573050][ T8736] device bridge_slave_0 entered promiscuous mode [ 351.580918][ T8736] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.588140][ T8736] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.596416][ T8736] device bridge_slave_1 entered promiscuous mode [ 351.813514][ T3612] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 352.105821][ T3612] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 352.251717][ T3896] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 352.264392][ T3701] Bluetooth: hci6: command 0x0409 tx timeout [ 352.281039][ T8736] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 352.324348][ T3816] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.324877][ T8780] loop2: detected capacity change from 0 to 2048 [ 352.345609][ T8736] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 352.377005][ T8736] team0: Port device team_slave_0 added [ 352.398436][ T3816] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.415645][ T8736] team0: Port device team_slave_1 added [ 352.431906][ T3612] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 352.441379][ T3612] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.450285][ T3612] usb 5-1: Product: syz [ 352.452694][ T8780] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 352.454929][ T3612] usb 5-1: Manufacturer: syz [ 352.469955][ T3612] usb 5-1: SerialNumber: syz [ 352.512918][ T3896] usb 2-1: Using ep0 maxpacket: 16 [ 352.545958][ T8736] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 352.560430][ T8736] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 352.601694][ T8736] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 352.630340][ T8736] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 352.643034][ T8736] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 352.669363][ T8736] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 352.672182][ T3896] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 352.692605][ T3896] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 352.702227][ T3896] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.931852][ T3612] usb 5-1: cannot find UAC_HEADER [ 353.000684][ T3612] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 353.046142][ T3612] usb 5-1: USB disconnect, device number 26 [ 353.083613][ T8736] device hsr_slave_0 entered promiscuous mode [ 353.103364][ T3493] udevd[3493]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 353.125073][ T8736] device hsr_slave_1 entered promiscuous mode [ 353.139138][ T8736] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 353.148837][ T8736] Cannot create hsr debugfs directory [ 353.206297][ T3896] usb 2-1: config 0 descriptor?? [ 353.350173][ T3610] aiptek 4-1:17.0: Aiptek using 400 ms programming speed [ 353.359379][ T3610] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:17.0/input/input12 [ 353.368207][ T4217] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 353.372406][ T3610] usb 4-1: USB disconnect, device number 18 [ 353.383490][ C1] aiptek 4-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 353.412498][ T4217] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 353.674656][ T8773] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1149'. [ 353.694072][ T8773] udc-core: couldn't find an available UDC or it's busy [ 353.701043][ T8773] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 353.753674][ T3896] hid (null): unknown global tag 0xe [ 353.761953][ T3608] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 353.763898][ T3896] hid-generic 0003:0158:0100.0028: unknown main item tag 0x1 [ 353.787483][ T3896] hid-generic 0003:0158:0100.0028: unexpected long global item [ 353.812183][ T3896] hid-generic: probe of 0003:0158:0100.0028 failed with error -22 [ 353.968432][ T3896] usb 2-1: USB disconnect, device number 19 [ 353.997052][ T8814] loop4: detected capacity change from 0 to 1024 [ 354.131978][ T3608] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 354.144015][ T8814] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 354.164959][ T8814] EXT4-fs (loop4): orphan cleanup on readonly fs [ 354.174143][ T3608] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 354.197966][ T8814] Quota error (device loop4): v2_read_file_info: Free block number too big (0 >= 0). [ 354.209912][ T8814] EXT4-fs warning (device loop4): ext4_enable_quotas:6431: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 354.228871][ T8814] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 354.233543][ T8736] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 354.237319][ T8814] EXT4-fs error (device loop4): ext4_free_blocks:6226: comm syz.4.1157: Freeing blocks not in datazone - block = 0, count = 4096 [ 354.253045][ T3608] usb 3-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 354.260202][ T8814] EXT4-fs (loop4): Remounting filesystem read-only [ 354.272420][ T8814] EXT4-fs (loop4): 1 truncate cleaned up [ 354.278505][ T8814] EXT4-fs (loop4): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000015,stripe=0x0000000000000059,grpid,errors=remount-ro,data_err=ignore,noblock_validity,minixdf,min_batch_time=0x0000000000000013,. Quota mode: writeback. [ 354.305071][ T8736] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 354.336169][ T3608] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.356726][ T3608] usb 3-1: config 0 descriptor?? [ 354.422043][ T3896] Bluetooth: hci6: command 0x041b tx timeout [ 354.459164][ T8736] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 354.471585][ T8736] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 354.829905][ T8834] loop4: detected capacity change from 0 to 128 [ 354.861204][ T8835] loop1: detected capacity change from 0 to 512 [ 354.946736][ T8789] netlink: 'syz.2.1152': attribute type 4 has an invalid length. [ 355.043850][ T8834] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 355.097648][ T8835] EXT4-fs error (device loop1): ext4_find_inline_data_nolock:163: inode #12: comm syz.1.1160: inline data xattr refers to an external xattr inode [ 355.116559][ T8835] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.1160: couldn't read orphan inode 12 (err -117) [ 355.135542][ T8835] EXT4-fs (loop1): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000200000,data_err=ignore,norecovery,resuid=0x0000000000000000,prjquota,debug_want_extra_isize=0x0000000000000008,usrjquota=,resgid=0x0000000000000000,nodiscard,,errors=continue. Quota mode: writeback. [ 355.137430][ T8736] 8021q: adding VLAN 0 to HW filter on device bond0 [ 355.189729][ T26] audit: type=1800 audit(1719977712.466:119): pid=8835 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1160" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 355.221150][ T8736] 8021q: adding VLAN 0 to HW filter on device team0 [ 355.259647][ T3896] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 355.268318][ T3896] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 355.295806][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 355.317650][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 355.332341][ T3701] bridge0: port 1(bridge_slave_0) entered blocking state [ 355.339416][ T3701] bridge0: port 1(bridge_slave_0) entered forwarding state [ 355.348764][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 355.359132][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 355.368970][ T3701] bridge0: port 2(bridge_slave_1) entered blocking state [ 355.376087][ T3701] bridge0: port 2(bridge_slave_1) entered forwarding state [ 355.384696][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 355.393716][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 355.570149][ T3699] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 355.591473][ T3699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 355.601954][ T3608] hid-led: probe of 0003:27B8:01ED.0029 failed with error -71 [ 355.619366][ T3608] usb 3-1: USB disconnect, device number 29 [ 355.636751][ T8856] loop4: detected capacity change from 0 to 128 [ 355.640605][ T3699] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 355.666161][ T3699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 355.678986][ T3699] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 355.697280][ T3699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 355.735439][ T3699] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 355.748464][ T3699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 355.765686][ T3699] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 355.790901][ T8736] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 355.798405][ T3791] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 355.815930][ T3699] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 355.832324][ T8856] loop4: detected capacity change from 128 to 0 [ 355.909482][ C1] blk_update_request: I/O error, dev loop4, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 355.924541][ T7867] FAT-fs (loop4): Directory bread(block 3) failed [ 355.934242][ C0] blk_update_request: I/O error, dev loop4, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 355.945640][ T7867] FAT-fs (loop4): Directory bread(block 4) failed [ 355.952749][ T3816] device hsr_slave_0 left promiscuous mode [ 355.959721][ T3816] device hsr_slave_1 left promiscuous mode [ 355.967395][ C0] blk_update_request: I/O error, dev loop4, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 355.987148][ T7867] FAT-fs (loop4): Directory bread(block 5) failed [ 356.006812][ T3816] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 356.015865][ C0] blk_update_request: I/O error, dev loop4, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 356.016817][ T3816] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 356.034518][ T7867] FAT-fs (loop4): Directory bread(block 6) failed [ 356.137098][ T3816] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 356.146801][ T4217] loop: Write error at byte offset 9223372036854791679, length 512. [ 356.166858][ T3816] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 356.175279][ C0] blk_update_request: I/O error, dev loop4, sector 31 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 0 [ 356.181404][ C1] blk_update_request: I/O error, dev loop4, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 356.197344][ T154] FAT-fs (loop4): unable to read inode block for updating (i_pos 52) [ 356.209437][ C0] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 356.220986][ T7867] FAT-fs (loop4): unable to read boot sector to mark fs as dirty [ 356.264115][ T3816] device bridge_slave_1 left promiscuous mode [ 356.270527][ T3816] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.295275][ T3816] device bridge_slave_0 left promiscuous mode [ 356.302061][ T3816] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.333511][ T3791] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11 [ 356.345683][ T3816] device veth1_macvtap left promiscuous mode [ 356.351936][ T3791] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024 [ 356.363473][ T3816] device veth0_macvtap left promiscuous mode [ 356.369754][ T3816] device veth1_vlan left promiscuous mode [ 356.376426][ T3791] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 356.385902][ T3816] device veth0_vlan left promiscuous mode [ 356.392605][ T3791] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.442433][ T8852] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 357.007115][ T3699] Bluetooth: hci6: command 0x040f tx timeout [ 357.191767][ T3701] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 357.215292][ T3816] team0 (unregistering): Port device team_slave_1 removed [ 357.250936][ T3816] team0 (unregistering): Port device team_slave_0 removed [ 357.264486][ T8852] loop1: detected capacity change from 0 to 40427 [ 357.293067][ T3816] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 357.310859][ T3816] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 357.348811][ T8852] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 357.409960][ T8852] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 357.421583][ T8852] F2FS-fs (loop1): invalid crc value [ 357.448273][ T3816] bond0 (unregistering): Released all slaves [ 357.541841][ T3701] usb 3-1: Using ep0 maxpacket: 16 [ 357.629514][ T8852] F2FS-fs (loop1): Found nat_bits in checkpoint [ 357.719449][ T8852] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 357.737819][ T8852] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 357.747326][ T3701] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 357.789192][ T3701] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 357.805542][ T3701] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.860032][ T3701] usb 3-1: config 0 descriptor?? [ 358.146192][ T3894] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 358.159438][ T3894] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 358.378243][ T8863] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1169'. [ 358.578883][ T8736] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 358.770282][ T8863] udc-core: couldn't find an available UDC or it's busy [ 358.777555][ T8863] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 358.814253][ T3701] hid (null): unknown global tag 0xe [ 358.821108][ T3701] hid-generic 0003:0158:0100.002A: unknown main item tag 0x1 [ 358.837232][ T3701] hid-generic 0003:0158:0100.002A: unexpected long global item [ 358.850876][ T3701] hid-generic: probe of 0003:0158:0100.002A failed with error -22 [ 358.914743][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 358.936372][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 359.017283][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 359.026597][ T1280] usb 3-1: USB disconnect, device number 30 [ 359.040133][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 359.442080][ T3894] Bluetooth: hci6: command 0x0419 tx timeout [ 359.452479][ T8736] device veth0_vlan entered promiscuous mode [ 359.478295][ T3894] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 359.493046][ T3894] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 359.526086][ T8736] device veth1_vlan entered promiscuous mode [ 359.595197][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 359.604844][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 359.620025][ T8736] device veth0_macvtap entered promiscuous mode [ 359.648786][ T8736] device veth1_macvtap entered promiscuous mode [ 359.743929][ T8736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 359.771654][ T8736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.771790][ T3610] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 359.878273][ T8736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 359.917412][ T8736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.939789][ T8736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 359.965202][ T3791] aiptek 2-1:17.0: Aiptek using 400 ms programming speed [ 359.974345][ T3791] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.0/input/input13 [ 359.987018][ T3791] usb 2-1: USB disconnect, device number 20 [ 360.022642][ T8736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.199990][ T8736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 360.231177][ T8736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.258243][ T8736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 360.301896][ T8736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.339910][ T8736] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 360.362011][ T3610] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 360.382038][ T8736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 360.402137][ T3610] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 360.424686][ T8736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.430964][ T3701] Bluetooth: hci1: command 0x0406 tx timeout [ 360.451855][ T3610] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 360.495603][ T8736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 360.537127][ T8736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.568835][ T8736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 360.592025][ T3610] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 360.607517][ T3610] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 360.618679][ T8736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.625996][ T3610] usb 4-1: Manufacturer: syz [ 360.640716][ T8736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 360.654624][ T3610] usb 4-1: config 0 descriptor?? [ 360.659433][ T8736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.693824][ T3610] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 360.725170][ T8736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 360.762941][ T8736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.804588][ T8736] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 360.844335][ T4216] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 360.881832][ T4216] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 361.174866][ T8890] chnl_net:caif_netlink_parms(): no params data found [ 361.386694][ T3610] Bluetooth: hci0: command 0x0409 tx timeout [ 361.428405][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 361.476137][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 361.522380][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 361.576172][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 361.597426][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 361.648321][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 361.678918][ T8736] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.718777][ T8736] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.761799][ T8736] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.801857][ T8736] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.824914][ T8890] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.839531][ T8890] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.848947][ T8890] device bridge_slave_0 entered promiscuous mode [ 361.866831][ T8932] tmpfs: Unknown parameter 'usrquota' [ 361.868044][ T8890] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.890307][ T8890] bridge0: port 2(bridge_slave_1) entered disabled state [ 361.898898][ T8890] device bridge_slave_1 entered promiscuous mode [ 362.007174][ T8890] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 362.030756][ T8890] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 362.048502][ T4216] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 362.072468][ T1280] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 362.089327][ T4216] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 362.106246][ T4219] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 362.128843][ T4219] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 362.139235][ T3791] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 362.161215][ T8890] team0: Port device team_slave_0 added [ 362.171761][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 362.181450][ T8890] team0: Port device team_slave_1 added [ 362.240438][ T8890] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 362.280150][ T8890] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 362.317988][ T8890] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 362.331807][ T1280] usb 2-1: Using ep0 maxpacket: 16 [ 362.346705][ T8890] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 362.358968][ T8890] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 362.399113][ T8890] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 362.496724][ T8890] device hsr_slave_0 entered promiscuous mode [ 362.514672][ T8890] device hsr_slave_1 entered promiscuous mode [ 362.604565][ T1280] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 362.616403][ T1280] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 362.626829][ T1280] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.636653][ T1280] usb 2-1: config 0 descriptor?? [ 362.653490][ T3816] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.074622][ T3894] usb 4-1: USB disconnect, device number 19 [ 363.413062][ T8946] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1187'. [ 363.462118][ T3612] Bluetooth: hci0: command 0x041b tx timeout [ 363.463824][ T8946] udc-core: couldn't find an available UDC or it's busy [ 363.579524][ T8946] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 363.592631][ T1280] hid (null): unknown global tag 0xe [ 363.622359][ T1280] hid-generic 0003:0158:0100.002B: unknown main item tag 0x1 [ 363.630131][ T1280] hid-generic 0003:0158:0100.002B: unexpected long global item [ 363.638951][ T1280] hid-generic: probe of 0003:0158:0100.002B failed with error -22 [ 364.312817][ T1280] usb 2-1: USB disconnect, device number 21 [ 364.351348][ T3816] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.810525][ T3816] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.039754][ T3816] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.314080][ T8980] sg_write: data in/out 220/14 bytes for SCSI command 0x0-- guessing data in; [ 365.314080][ T8980] program syz.0.1201 not setting count and/or reply_len properly [ 365.542324][ T1280] Bluetooth: hci0: command 0x040f tx timeout [ 366.605835][ T8890] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 366.647703][ T8890] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 366.697231][ T8890] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 366.720336][ T8890] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 366.731770][ T3610] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 366.971819][ T3610] usb 4-1: Using ep0 maxpacket: 16 [ 367.062610][ T8890] 8021q: adding VLAN 0 to HW filter on device bond0 [ 367.092074][ T3610] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 367.120213][ T9045] loop2: detected capacity change from 0 to 512 [ 367.123005][ T3610] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 367.217029][ T3610] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.250411][ T3610] usb 4-1: config 0 descriptor?? [ 367.253143][ T9045] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 367.282802][ T9045] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 367.320665][ T9049] netlink: 'syz.0.1218': attribute type 10 has an invalid length. [ 367.331066][ T9045] EXT4-fs (loop2): warning: maximal mount count reached, running e2fsck is recommended [ 367.352868][ T9045] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.1216: inode #15: comm syz.2.1216: iget: illegal inode # [ 367.374941][ T9045] EXT4-fs (loop2): Remounting filesystem read-only [ 367.376429][ T9049] team0: Port device netdevsim0 added [ 367.382140][ T9045] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.1216: couldn't read orphan inode 15 (err -117) [ 367.391522][ T8890] 8021q: adding VLAN 0 to HW filter on device team0 [ 367.406250][ T3608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 367.410745][ T9045] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,noblock_validity,mblk_io_submit,bsdgroups,dioread_nolock,. Quota mode: none. [ 367.414637][ T3608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 367.438194][ T9053] netlink: 'syz.0.1218': attribute type 10 has an invalid length. [ 367.451691][ T9053] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 367.498439][ T9053] team0: Failed to send options change via netlink (err -105) [ 367.506375][ T9053] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 367.517697][ T9053] team0: Port device netdevsim0 removed [ 367.526113][ T9053] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 367.615533][ T3894] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 367.622420][ T3608] Bluetooth: hci0: command 0x0419 tx timeout [ 367.659858][ T3894] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 367.693301][ T3894] bridge0: port 1(bridge_slave_0) entered blocking state [ 367.700452][ T3894] bridge0: port 1(bridge_slave_0) entered forwarding state [ 367.819009][ T9014] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1209'. [ 367.839244][ T9014] udc-core: couldn't find an available UDC or it's busy [ 367.863466][ T9014] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 368.405492][ T3610] hid (null): unknown global tag 0xe [ 368.849349][ T26] audit: type=1326 audit(1719977726.126:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9064 comm="syz.1.1221" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f83165b5f19 code=0x0 [ 368.935584][ T3610] hid-generic 0003:0158:0100.002C: unknown main item tag 0x1 [ 368.945932][ T3610] hid-generic 0003:0158:0100.002C: unexpected long global item [ 368.970252][ T3610] hid-generic: probe of 0003:0158:0100.002C failed with error -22 [ 368.993150][ T3816] device hsr_slave_0 left promiscuous mode [ 368.998541][ T3610] usb 4-1: USB disconnect, device number 20 [ 369.005151][ T9070] kernel profiling enabled (shift: 7) [ 369.012306][ T3816] device hsr_slave_1 left promiscuous mode [ 369.040578][ T3816] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 369.041957][ C1] ================================================================== [ 369.056573][ C1] BUG: KASAN: stack-out-of-bounds in profile_pc+0xa4/0xe0 [ 369.059982][ T3816] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 369.063705][ C1] Read of size 8 at addr ffffc90004d77340 by task kworker/1:12/3610 [ 369.063722][ C1] [ 369.063734][ C1] CPU: 1 PID: 3610 Comm: kworker/1:12 Not tainted 5.15.161-syzkaller #0 [ 369.063750][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 369.063763][ C1] Workqueue: usb_hub_wq hub_event [ 369.104541][ C1] Call Trace: [ 369.107822][ C1] [ 369.110661][ C1] dump_stack_lvl+0x1e3/0x2d0 [ 369.115354][ C1] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 369.120984][ C1] ? _printk+0xd1/0x120 [ 369.125145][ C1] ? __wake_up_klogd+0xcc/0x100 [ 369.129998][ C1] ? panic+0x860/0x860 [ 369.134071][ C1] ? _raw_spin_lock_irqsave+0xdd/0x120 [ 369.139535][ C1] print_address_description+0x63/0x3b0 [ 369.145090][ C1] ? profile_pc+0xa4/0xe0 [ 369.149425][ C1] kasan_report+0x16b/0x1c0 [ 369.153932][ C1] ? profile_pc+0xa4/0xe0 [ 369.158258][ C1] ? trigger_load_balance+0x1d5/0xd90 [ 369.163738][ C1] ? _raw_spin_unlock_irqrestore+0xd4/0x130 [ 369.169644][ C1] profile_pc+0xa4/0xe0 [ 369.173813][ C1] profile_tick+0xd4/0x130 [ 369.178246][ C1] tick_sched_timer+0x390/0x550 [ 369.183106][ C1] ? tick_setup_sched_timer+0x2d0/0x2d0 [ 369.188663][ C1] __hrtimer_run_queues+0x55b/0xcf0 [ 369.193899][ C1] ? hrtimer_interrupt+0x980/0x980 [ 369.199024][ C1] ? ktime_get_update_offsets_now+0x407/0x420 [ 369.205103][ C1] hrtimer_interrupt+0x392/0x980 [ 369.210073][ C1] __sysvec_apic_timer_interrupt+0x139/0x470 [ 369.216065][ C1] sysvec_apic_timer_interrupt+0x8c/0xb0 [ 369.221709][ C1] [ 369.224644][ C1] [ 369.227585][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 369.233592][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0xd4/0x130 [ 369.240110][ C1] Code: 9c 8f 44 24 20 42 80 3c 23 00 74 08 4c 89 f7 e8 62 6c a2 f7 f6 44 24 21 02 75 4e 41 f7 c7 00 02 00 00 74 01 fb bf 01 00 00 00 57 ac 2f f7 65 8b 05 d8 b2 da 75 85 c0 74 3f 48 c7 04 24 0e 36 [ 369.259722][ C1] RSP: 0018:ffffc90004d77340 EFLAGS: 00000206 [ 369.265804][ C1] RAX: 500abe4630fc8500 RBX: 1ffff920009aee6c RCX: ffffffff81631688 [ 369.273783][ C1] RDX: dffffc0000000000 RSI: ffffffff8a8b2a00 RDI: 0000000000000001 [ 369.281768][ C1] RBP: ffffc90004d773d0 R08: dffffc0000000000 R09: fffffbfff1f7f21c [ 369.289753][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 369.297742][ C1] R13: 1ffff920009aee68 R14: ffffc90004d77360 R15: 0000000000000246 [ 369.305750][ C1] ? mark_lock+0x98/0x340 [ 369.310104][ C1] ? _raw_spin_unlock+0x40/0x40 [ 369.314967][ C1] ? __wake_up_common+0x2a0/0x4e0 [ 369.320010][ C1] __wake_up_sync_key+0x121/0x1c0 [ 369.325046][ C1] ? __wake_up_locked_key_bookmark+0x20/0x20 [ 369.328538][ T9073] loop0: detected capacity change from 0 to 40427 [ 369.331048][ C1] sock_def_readable+0x135/0x240 [ 369.342377][ C1] netlink_broadcast_filtered+0xc60/0x11a0 [ 369.348215][ C1] netlink_broadcast+0x35/0x50 [ 369.352997][ C1] kobject_uevent_net_broadcast+0x377/0x560 [ 369.358890][ C1] kobject_uevent_env+0x567/0x8d0 [ 369.363902][ C1] device_del+0x9c4/0xbd0 [ 369.368219][ C1] ? kill_device+0x160/0x160 [ 369.372788][ C1] ? kobject_put+0x429/0x460 [ 369.377371][ C1] usb_disable_device+0x3b8/0x840 [ 369.382392][ C1] usb_disconnect+0x33c/0x8c0 [ 369.387057][ C1] hub_event+0x1d58/0x54c0 [ 369.391468][ C1] ? mark_lock+0x98/0x340 [ 369.395813][ C1] ? led_work+0x700/0x700 [ 369.400152][ C1] ? read_lock_is_recursive+0x10/0x10 [ 369.405533][ C1] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 369.411529][ C1] ? down_read_non_owner+0xb0/0x310 [ 369.416738][ C1] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 369.422627][ C1] ? do_raw_spin_unlock+0x137/0x8b0 [ 369.427814][ C1] process_one_work+0x8a1/0x10c0 [ 369.432743][ C1] ? worker_detach_from_pool+0x260/0x260 [ 369.438363][ C1] ? _raw_spin_lock_irqsave+0x120/0x120 [ 369.443890][ C1] ? kthread_data+0x4e/0xc0 [ 369.448375][ C1] ? wq_worker_running+0x97/0x170 [ 369.453389][ C1] worker_thread+0xdcf/0x1280 [ 369.458077][ C1] kthread+0x3f6/0x4f0 [ 369.462123][ C1] ? rcu_lock_release+0x20/0x20 [ 369.466980][ C1] ? kthread_blkcg+0xd0/0xd0 [ 369.471557][ C1] ret_from_fork+0x1f/0x30 [ 369.475985][ C1] [ 369.478981][ C1] [ 369.481282][ C1] [ 369.483584][ C1] addr ffffc90004d77340 is located in stack of task kworker/1:12/3610 at offset 0 in frame: [ 369.493618][ C1] _raw_spin_unlock_irqrestore+0x0/0x130 [ 369.499239][ C1] [ 369.501546][ C1] this frame has 1 object: [ 369.506020][ C1] [32, 40) 'flags.i.i.i.i' [ 369.506030][ C1] [ 369.512802][ C1] Memory state around the buggy address: [ 369.518414][ C1] ffffc90004d77200: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 369.526458][ C1] ffffc90004d77280: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 369.534591][ C1] >ffffc90004d77300: 00 00 00 00 00 00 00 00 f1 f1 f1 f1 00 f3 f3 f3 [ 369.542895][ C1] ^ [ 369.549054][ C1] ffffc90004d77380: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 369.557107][ C1] ffffc90004d77400: f1 f1 f1 f1 00 00 00 00 00 f3 f3 f3 f3 f3 f3 f3 [ 369.565149][ C1] ================================================================== [ 369.573232][ C1] Disabling lock debugging due to kernel taint [ 369.579383][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 369.586572][ C1] CPU: 1 PID: 3610 Comm: kworker/1:12 Tainted: G B 5.15.161-syzkaller #0 [ 369.596273][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 369.606322][ C1] Workqueue: usb_hub_wq hub_event [ 369.611332][ C1] Call Trace: [ 369.614591][ C1] [ 369.617413][ C1] dump_stack_lvl+0x1e3/0x2d0 [ 369.622075][ C1] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 369.627685][ C1] ? panic+0x860/0x860 [ 369.631732][ C1] ? lock_release+0xb9/0x9a0 [ 369.636302][ C1] ? irq_work_queue+0xcd/0x150 [ 369.641048][ C1] panic+0x318/0x860 [ 369.644939][ C1] ? check_panic_on_warn+0x1d/0xa0 [ 369.650031][ C1] ? fb_is_primary_device+0xd0/0xd0 [ 369.655210][ C1] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 369.661096][ C1] ? _raw_spin_unlock+0x40/0x40 [ 369.665946][ C1] check_panic_on_warn+0x7e/0xa0 [ 369.670867][ C1] ? profile_pc+0xa4/0xe0 [ 369.675173][ C1] end_report+0x6d/0xf0 [ 369.679311][ C1] kasan_report+0x18e/0x1c0 [ 369.683806][ C1] ? profile_pc+0xa4/0xe0 [ 369.688114][ C1] ? trigger_load_balance+0x1d5/0xd90 [ 369.693465][ C1] ? _raw_spin_unlock_irqrestore+0xd4/0x130 [ 369.699459][ C1] profile_pc+0xa4/0xe0 [ 369.703597][ C1] profile_tick+0xd4/0x130 [ 369.707990][ C1] tick_sched_timer+0x390/0x550 [ 369.712819][ C1] ? tick_setup_sched_timer+0x2d0/0x2d0 [ 369.718342][ C1] __hrtimer_run_queues+0x55b/0xcf0 [ 369.723527][ C1] ? hrtimer_interrupt+0x980/0x980 [ 369.728632][ C1] ? ktime_get_update_offsets_now+0x407/0x420 [ 369.734683][ C1] hrtimer_interrupt+0x392/0x980 [ 369.739603][ C1] __sysvec_apic_timer_interrupt+0x139/0x470 [ 369.745567][ C1] sysvec_apic_timer_interrupt+0x8c/0xb0 [ 369.751180][ C1] [ 369.754092][ C1] [ 369.757005][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 369.762962][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0xd4/0x130 [ 369.769448][ C1] Code: 9c 8f 44 24 20 42 80 3c 23 00 74 08 4c 89 f7 e8 62 6c a2 f7 f6 44 24 21 02 75 4e 41 f7 c7 00 02 00 00 74 01 fb bf 01 00 00 00 57 ac 2f f7 65 8b 05 d8 b2 da 75 85 c0 74 3f 48 c7 04 24 0e 36 [ 369.789034][ C1] RSP: 0018:ffffc90004d77340 EFLAGS: 00000206 [ 369.795092][ C1] RAX: 500abe4630fc8500 RBX: 1ffff920009aee6c RCX: ffffffff81631688 [ 369.803046][ C1] RDX: dffffc0000000000 RSI: ffffffff8a8b2a00 RDI: 0000000000000001 [ 369.810993][ C1] RBP: ffffc90004d773d0 R08: dffffc0000000000 R09: fffffbfff1f7f21c [ 369.818940][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 369.826893][ C1] R13: 1ffff920009aee68 R14: ffffc90004d77360 R15: 0000000000000246 [ 369.834844][ C1] ? mark_lock+0x98/0x340 [ 369.839156][ C1] ? _raw_spin_unlock+0x40/0x40 [ 369.843986][ C1] ? __wake_up_common+0x2a0/0x4e0 [ 369.848993][ C1] __wake_up_sync_key+0x121/0x1c0 [ 369.853994][ C1] ? __wake_up_locked_key_bookmark+0x20/0x20 [ 369.859951][ C1] sock_def_readable+0x135/0x240 [ 369.864872][ C1] netlink_broadcast_filtered+0xc60/0x11a0 [ 369.870661][ C1] netlink_broadcast+0x35/0x50 [ 369.875401][ C1] kobject_uevent_net_broadcast+0x377/0x560 [ 369.881274][ C1] kobject_uevent_env+0x567/0x8d0 [ 369.886273][ C1] device_del+0x9c4/0xbd0 [ 369.890583][ C1] ? kill_device+0x160/0x160 [ 369.895157][ C1] ? kobject_put+0x429/0x460 [ 369.899724][ C1] usb_disable_device+0x3b8/0x840 [ 369.904731][ C1] usb_disconnect+0x33c/0x8c0 [ 369.909384][ C1] hub_event+0x1d58/0x54c0 [ 369.913777][ C1] ? mark_lock+0x98/0x340 [ 369.918084][ C1] ? led_work+0x700/0x700 [ 369.922388][ C1] ? read_lock_is_recursive+0x10/0x10 [ 369.927739][ C1] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 369.933708][ C1] ? down_read_non_owner+0xb0/0x310 [ 369.938882][ C1] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 369.944760][ C1] ? do_raw_spin_unlock+0x137/0x8b0 [ 369.949949][ C1] process_one_work+0x8a1/0x10c0 [ 369.954871][ C1] ? worker_detach_from_pool+0x260/0x260 [ 369.960484][ C1] ? _raw_spin_lock_irqsave+0x120/0x120 [ 369.966012][ C1] ? kthread_data+0x4e/0xc0 [ 369.970494][ C1] ? wq_worker_running+0x97/0x170 [ 369.975492][ C1] worker_thread+0xdcf/0x1280 [ 369.980151][ C1] kthread+0x3f6/0x4f0 [ 369.984192][ C1] ? rcu_lock_release+0x20/0x20 [ 369.989017][ C1] ? kthread_blkcg+0xd0/0xd0 [ 369.993700][ C1] ret_from_fork+0x1f/0x30 [ 369.998123][ C1] [ 370.001379][ C1] Kernel Offset: disabled [ 370.005690][ C1] Rebooting in 86400 seconds..