last executing test programs: 10.445629618s ago: executing program 4 (id=519): socket$nl_route(0x10, 0x3, 0x0) mkdir(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000005c0)={'batadv0\x00', 0x10}) mount(&(0x7f0000000340)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='msdos\x00', 0x1018000, &(0x7f0000000240)='b\xb1Fs\t\xb5\xda\xec,\xdb\xe0\xb0\xe0\xe8*\xd4\x00\x00\x00\x00\x00\x00\x00\x00F*\x0f\xdd\xe3\rb\xf9,\x196\xb2\x92\x9d\x94\xd4\x96\xbc9))\xef\xdeW\x86\xf4\xd8(\x13\x81') sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[], &(0x7f0000000080)=""/227, 0x3e, 0xe3, 0x1}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1}, 0x48) move_mount(r1, 0x0, 0xffffffffffffff9c, 0x0, 0x0) socket$caif_seqpacket(0x25, 0x5, 0x0) syz_io_uring_setup(0x5169, &(0x7f0000000400)={0x0, 0x0, 0x4, 0xfffffffe, 0x1b8}, &(0x7f0000000100), &(0x7f0000000680)) syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0) r2 = io_uring_setup(0x74cb, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 9.150297243s ago: executing program 4 (id=523): pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0x0, 0x0, 0x0, {}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_FWMARK={0x8, 0x12, 0x2}, @TCA_CAKE_MEMORY={0x8}]}}]}, 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 4.732317514s ago: executing program 1 (id=531): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000406d0422c2000000000001090224000100000000090400000103000000092100000001220b0009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$tipc(0x1e, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000500)={0x24, 0x0, 0x0, &(0x7f0000000400)={0x0, 0x22, 0xb, {[@main=@item_012={0x1, 0x0, 0xa, "df"}, @global=@item_4={0x3, 0x1, 0x0, "bf927e64"}, @main, @global=@item_012={0x2, 0x1, 0x0, "c503"}]}}, 0x0}, 0x0) 4.64557564s ago: executing program 4 (id=532): r0 = socket(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0xa00000000000000, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x948, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000480], 0x1400, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="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"/2376]}, 0x9c0) 4.361432614s ago: executing program 4 (id=536): syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x8002}}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000680)=[{{0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f00000006c0)="5e3ff67c", 0x4}], 0x2}}], 0x1, 0x0) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5393, &(0x7f0000000000)) 4.169226169s ago: executing program 4 (id=537): syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$reiserfs(&(0x7f00000003c0), &(0x7f00000002c0)='./file0/file0\x00', 0x98, &(0x7f0000000280), 0x1, 0x10ef, &(0x7f00000022c0)="$eJzs2DGLE0EYBuB3dg/kqshcvx5oYSHHHfEPXKGQxsLaLljZmUrJz/HnyFX2R3pTBOyVTQwJEhDJYuB4Hlh252Vmvp1yvgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDvLPlekosmqdusSVKSrrubLJJ02/zx17ZJydv3k9mrj+PXs8209FmT0q9aj+vN01rHdVxv6suL22d19unzh3avZEmX+9V8ev5mOehR+trtoDsCAADAw/DzaKMT1wcAAAD+ZrBGAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAA6vajSVKSrrubLJJ0p/0tAAAA4EglTd6NDuWbNsDOi3wblZRHu+RH6edc58uB9QAAAMC/KXv38ec5z5O9/DJnubrajH+/srxN2iTXf+xzv5pP18/lfFr+5wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgF/swLEAAAAAgDB/6zQ6NgAAAAAAAAAAAAAAAGCqAAAA//9TGNII") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040), &(0x7f0000000040)=ANY=[], 0x1001, 0x3) 3.806149259s ago: executing program 2 (id=539): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) syz_emit_ethernet(0x4c, &(0x7f0000000140)={@link_local, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0x0, @remote, @local, {[], {0x0, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3, 0x0, @val=0x2}, "30b00afe4e70"}}}}}}}, 0x0) 3.459938897s ago: executing program 0 (id=541): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=@base={0x12, 0x2, 0x8, 0x2}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r1, 0x7}, 0x10) close(r1) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r0, 0x7, 0x0, 0x0, @prog_id}, 0x20) 3.453239357s ago: executing program 2 (id=542): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x8, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000040)={0x4a, 0x2, 0x0, "0ba7dfad1cfbb5a12e6a2bdee79988d940d2c1aebd746fc04a0026d174932d46"}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = dup(r3) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000044d564b"]) 3.263577313s ago: executing program 0 (id=544): pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000000)=ANY=[], 0x26) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002880)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x26, 0xb) 3.217179007s ago: executing program 4 (id=545): r0 = syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x800081, &(0x7f00000007c0)={[{@nls={'nls', 0x3d, 'koi8-r'}}, {}, {@creator={'creator', 0x3d, "6c080be5"}}, {@barrier}, {@nobarrier}, {@umask={'umask', 0x3d, 0x401}}]}, 0x0, 0x6e3, &(0x7f00000000c0)="$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") ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0x7, 0x40, 0x2}) accept$packet(r1, &(0x7f00000008c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000840)=0x14) r2 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="120100005131e70863072110621c000000010902120001000000000904000000ff4ada0002da5c49a819faba89b2d11adf49d899e97d7be222ece814692d7ec66e7caa257d0534908d90d35700756d27dc1f5cd80800550cbc444950d8b11e0c66ffaa4bd8fffe1ddb19dad54ea7d51a2145d5760701f52d85128bdd1cb9eb7a3bcb604288a8e4cf6528101a906dda1f899c2aacec579464ee409ec1dc0efdd1b0"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x409, 0x0, 0x0, {}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xf}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x70}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r8, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x69, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x26892}], 0xbb}}], 0x2, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc]}}]}}]}, 0x8c}}, 0x0) 2.956010189s ago: executing program 2 (id=546): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) unshare(0x2a060400) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) 2.672812781s ago: executing program 2 (id=549): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000090000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='mmap_lock_acquire_returned\x00', r3}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2.550228512s ago: executing program 3 (id=550): syz_emit_ethernet(0x76, &(0x7f0000000100)={@link_local, @random="86082b9827c1", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb3e02", 0x40, 0x3a, 0x0, @private2, @local, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "974367", 0x0, 0x11, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, [@dstopts={0x0, 0x8, '\x00', [@padn={0x1, 0xffffff84, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}]}}}}}}}, 0x0) 2.499910575s ago: executing program 1 (id=551): sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[], 0x1c}}, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000200)=@assoc_value={0x0}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000000)=r2, 0x4) 2.350554058s ago: executing program 3 (id=552): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)={0x5c, r1, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_KEYS={0x2c, 0x51, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "a7fd4531296b6353d1f3e08847"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac02}, @NL80211_KEY_IDX={0x5}]}]}, @NL80211_ATTR_SSID={0x5, 0x34, @random='^'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x5c}}, 0x0) 2.261623625s ago: executing program 0 (id=553): openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x0) 2.260439895s ago: executing program 2 (id=554): stat(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000840)='./file0\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f0000000900)={{}, {0x1, 0x4}, [{0x2, 0x5}, {0x2, 0x2}, {0x2, 0x1, 0xee01}, {0x2, 0xd118a75fd53a7ef1}, {0x2, 0x4}, {0x2, 0x4}], {}, [{0x8, 0x7}, {0x8, 0x0, r0}, {0x8, 0x0, r1}]}, 0x6c, 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0xc}, 0x48) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x1d, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xa, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180200000300000000000000000000008500000027000000850000000800000095000000000000001644ac29e83946cfc7968102c7dc48c4a4fbacec981fda152b00c5ebc7733d2ed95abd36a3210100000000000000e3368079af8ecb3664"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe3f}, 0x46) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0x11, 0x0, &(0x7f0000000000)="e02742afe8760d85ff97ae0ca72986f949", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000e00)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$cgroup_int(r5, &(0x7f0000000000), 0x12) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000200), 0xfecc) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'veth1_to_bridge\x00'}) sendfile(r5, r6, &(0x7f0000000100), 0x4) socket(0x10, 0x3, 0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) socket(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/tracing', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = dup(r7) write$UHID_INPUT(r8, &(0x7f0000001040)={0x9, {"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", 0x1000}}, 0x1006) 2.251394476s ago: executing program 1 (id=555): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=@base={0x12, 0x2, 0x8, 0x2}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r1, 0x7}, 0x10) close(r1) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r0, 0x7, 0x0, 0x0, @prog_id}, 0x20) 2.07329171s ago: executing program 3 (id=556): syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000140)='./file1\x00', 0x80c406, &(0x7f00000005c0)=ANY=[@ANYBLOB="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", @ANYRES64=0x0, @ANYRES64], 0xff, 0x2a9, &(0x7f0000000a40)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) 2.014668785s ago: executing program 1 (id=557): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x8, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000040)={0x4a, 0x2, 0x0, "0ba7dfad1cfbb5a12e6a2bdee79988d940d2c1aebd746fc04a0026d174932d46"}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = dup(r3) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000044d564b"]) 1.927703002s ago: executing program 0 (id=558): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, &(0x7f00000001c0)=ANY=[@ANYBLOB="51b843f324833500cd81cb7287e718f47daf4cb8cfdebb0a22e14af8d093b58ba65d8568ff32f8c5a53ccb43241ae3f9e9478ff9af2c8205f3c686dc8607ad"], 0x0}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x3, 0xffffffffffffffff) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="440000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000790a2c4b35c14ce94e9705f2d6cfe0000000000240012800b0001006272696467650000140002800666fb2ea83bf3b5009a4bd64a8ca1b851b043da6eeb6de9ddf0d0e3d1bb0bd3891e9f9b7769d7c5c8dc0551a1d6bb455fea77b7c062e37e2acb53854495941aefaa496004b42e03160b4ec1f0b6249ea84a8abe207c6a0e84e28dc0fc5237178499b623aa2f35caae4dcbc2b1fc72a69b9849f68b4eba65744a2823e648189b01edbbe446b00bf6cb328af88c3633484ac07a823babb2671ed5f3765cf89a617004e6fd73aa612b1d6f3d24bf659d6515ce102ef1171ca23161eab568bfcf3fc129fe0f399c9a0adf97f68ec7"], 0x44}}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f00000008c0)=""/106, 0x6a}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x3, 0x0, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000004980)={0x0, 0x0}, &(0x7f00000049c0)=0xc) getresgid(&(0x7f0000004a00), &(0x7f0000004a40)=0x0, &(0x7f0000004a80)=0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@ipv4_newnexthop={0x28, 0x68, 0x23, 0x0, 0x0, {}, [@NHA_FDB={0x4}, @NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @SEG6_LOCAL_OIF={0x8}}]}, 0x28}}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004b80)=[{{&(0x7f0000001140)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000011c0)=[{&(0x7f0000001280)="3d21950f365ff35e6d784c34a0dd6f193bb9592192d41da445f7c82db5890328eeb5fa4ebf65a31cca6b50da04f5a3a5e269c8e83843c8cf399f8bff55aea3a122c3a9f7b8bd37d93cf2f83af76a84ded3b081e552306d607f24d90e99c9333928855b8cf558c3d5300383869c50", 0x6e}, {&(0x7f0000001600)="fd0335d8573eaf121ca5d5be5b7572544f32cff20bd8d96756e7e98499c78b74529de9fbe2417136f8a5f16a8086de018d34cbaa3ce732f005736eaa271c412c7a5477cc8905cf8d8d7f33966d975f621a1a35ba2a3a98bf8bccf69401a1d4a070aee928425be7be00623c5302025873c947da752f7d2555bb4cb14e4499ec8d43936cc5adc63bc25f1db5f568586c1dc4aad018f7313ea5aa6771e118e84f169f264c633096b189", 0xa8}, {&(0x7f00000016c0)="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", 0xff0}], 0x3, &(0x7f0000002740)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}], 0xa0, 0x20000004}}, {{&(0x7f0000002800)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000002d00), 0x0, 0x0, 0x0, 0x4004002}}, {{&(0x7f0000003080)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000004480)=[{&(0x7f0000003100)="b13ebaea1660c8d08bca833c788dfebc147d29870b3a7f197093566820b986bcad0aff41b57db7550fece71f1f445f6de27513afef1686b03ee8e7152d09d553c62f6d7826fdd3c1b69b31f90bde2fd7f2a86b1374206e2087261c3e39a27a433c89aa57087458", 0x67}, {&(0x7f0000003180)="f91c3082fc2cbaad38fbff282d352a98f98b88e996e340b62e489bdafdea0f54990071b54bbb54e0f56924506d5b5d6a7ff1fcc4a37eb4073da851cc6ae6ef1278a645a0f15d66251efb54232ebbe83a03def078ed2af5e515b97e768abaa5e727e61ddad178f05863662c71edbcc8736807f02d1b83c506fd7736a95301b352494303e9773d729c6453eb2a7958cbeb6962be55089f6fc7249373b6939c60a142ca7e99c5ec06290944aa559f08161d55adab25de6b79819a7e061687b8d7e4162e41e1f17fe2ebfec5c5e47ba706cb7a06a36eadf80c998f4948af0f169c5c9d95d91b8d", 0xe5}, {&(0x7f0000003280)="1585deee14bab8b5b7ad123b7e28ee9423503d14f707038f7fa428d9b09625db2e992a911bf2e3cd3cd26d33178fbe216bcacc1ec4ef73e2f949a68587622e66d20844bdefac257d7cd2fbb97ef32fd81cb9133bf6765abef01d13d5d5d1d06c5b500882c716", 0x66}, {&(0x7f0000003300)="ecbe8704101bd9dd9b35c314888d174e998c41f2f0792cdafce9cb2292d4370be60df7efd8d7527504b339ba", 0x2c}, {&(0x7f0000003340)="e232f91edb356e3b1a5e0af63898656797ffc8a8523cb055ba527fadb2a113cd9db5fc79a9b97db8459959e7d149997a4c1fcc004182593ea6906bd530d2af783841491443f5d719aac93c87ae98f759c7daa43134d305f64e358dbd14236a01c1f662faa0f6c2f327221cd8a3c7822271068858823f7252512ce6a6bea0843bf12f3a10f793a6171c2f8bbc2d689b5af8", 0x91}, {&(0x7f0000004440)="52d376f1aacd7074f65b3e842c221bee41c613db5f", 0x15}], 0x6, &(0x7f0000000280)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0xee00, @ANYBLOB="0000000038000000e9ff00fe00000000010000", @ANYRES32=r3, @ANYRES32=r1, @ANYRES32=r5, @ANYRES32, @ANYRESHEX=r11, @ANYRES32=r4, @ANYRESHEX, @ANYRES32=r2, @ANYRES32, @ANYRES32, @ANYBLOB="2c000000000100000001000000000000", @ANYRES32=r0, @ANYRES32, @ANYRES32=r0, @ANYRES32, @ANYRES32=r5, @ANYRES32, @ANYRES32, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r1, @ANYRESDEC=r8, @ANYRES32, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES16=r9, @ANYRES32=r9, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x100, 0x8041}}, {{&(0x7f0000004740)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001300)=[{&(0x7f00000047c0)="22ccdcf42ee596eec327da3391edc4dc179d1841582267dbdc197b7f7ede2c95", 0x20}], 0x1, &(0x7f0000004ac0)=ANY=[@ANYBLOB="2c000000000000000100000001000000", @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001800000000000000010000", @ANYRES32=r4, @ANYBLOB, @ANYRES32=r7, @ANYRES32, @ANYRES32=r10, @ANYBLOB='\n\x00\x00\x00'], 0x88, 0x20000000}}], 0x4, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000001200)=0x1c) write(r5, &(0x7f0000000100), 0xfffffe5d) bpf$PROG_LOAD(0x5, 0x0, 0x0) utimensat(r3, &(0x7f0000000200)='./file0\x00', &(0x7f00000003c0)={{0x0, 0xea60}, {0x0, 0xea60}}, 0x100) r12 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_opts(r12, 0x3a, 0x0, 0x0, 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1c917, &(0x7f0000000080)={[{@nobarrier}, {@noblock_validity}, {@discard}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@noinit_itable}, {@resgid={'resgid', 0x3d, 0xee01}}, {@jqfmt_vfsold}, {@resgid={'resgid', 0x3d, 0xee01}}, {@resgid={'resgid', 0x3d, 0xee00}, 0x32}]}, 0x1b, 0x4c5, &(0x7f0000000ec0)="$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") 1.601112009s ago: executing program 3 (id=559): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) unshare(0x2a060400) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) 1.525798215s ago: executing program 1 (id=560): syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file0\x00', 0xa00a14, &(0x7f0000000080)=ANY=[], 0x1, 0x322, &(0x7f0000000580)="$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") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x0) ftruncate(r0, 0x7fff) ftruncate(r0, 0x7ffa) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) fsync(r1) 415.040006ms ago: executing program 0 (id=561): syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x8002}}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000680)=[{{0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f00000006c0)="5e3ff67c", 0x4}], 0x2}}], 0x1, 0x0) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5393, &(0x7f0000000000)) 342.107841ms ago: executing program 2 (id=562): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000406d0422c2000000000001090224000100000000090400000103000000092100000001220b0009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$tipc(0x1e, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000500)={0x24, 0x0, 0x0, &(0x7f0000000400)={0x0, 0x22, 0xb, {[@main=@item_012={0x1, 0x0, 0xa, "df"}, @global=@item_4={0x3, 0x1, 0x0, "bf927e64"}, @main, @global=@item_012={0x2, 0x1, 0x0, "c503"}]}}, 0x0}, 0x0) 295.496695ms ago: executing program 3 (id=563): syz_emit_ethernet(0x76, &(0x7f0000000100)={@link_local, @random="86082b9827c1", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb3e02", 0x40, 0x3a, 0x0, @private2, @local, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "974367", 0x0, 0x11, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, [@dstopts={0x0, 0x8, '\x00', [@padn={0x1, 0xffffff84, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}]}}}}}}}, 0x0) 196.282944ms ago: executing program 0 (id=564): pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000000)=ANY=[], 0x26) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002880)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x26, 0xb) 134.160018ms ago: executing program 3 (id=565): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000090000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='mmap_lock_acquire_returned\x00', r3}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 1 (id=566): sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[], 0x1c}}, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000200)=@assoc_value={0x0}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000000)=r2, 0x4) kernel console output (not intermixed with test programs): syz.1.145 (4378) [ 114.851208][ T4378] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 114.863766][ T4378] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 114.873215][ T4378] BTRFS info (device loop1): using free space tree [ 114.962981][ T4378] BTRFS info (device loop1): enabling ssd optimizations [ 115.007800][ T14] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.059545][ T14] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 115.084412][ T14] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 115.095784][ T14] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 115.126097][ T14] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 115.145480][ T14] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 115.213193][ T3641] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 115.317816][ T14] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 115.388319][ T14] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.452421][ T14] usb 4-1: Product: syz [ 115.461955][ T4419] loop0: detected capacity change from 0 to 1024 [ 115.479063][ T14] usb 4-1: Manufacturer: syz [ 115.486132][ T14] usb 4-1: SerialNumber: syz [ 115.572494][ T4419] hfsplus: unable to parse mount options [ 115.793937][ T4424] loop1: detected capacity change from 0 to 2048 [ 115.797748][ T14] cdc_ncm 4-1:1.0: bind() failure [ 115.828277][ T14] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 115.870703][ T14] cdc_ncm 4-1:1.1: bind() failure [ 115.919403][ T14] usb 4-1: USB disconnect, device number 5 [ 115.938363][ T4424] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 115.957885][ T4424] ext4 filesystem being mounted at /34/file0 supports timestamps until 2038 (0x7fffffff) [ 115.999709][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 116.105543][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 116.144816][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 116.159269][ T4424] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.150: bg 0: block 288: padding at end of block bitmap is not set [ 116.212233][ T4424] fs-verity (loop1, inode 13): ext4_end_enable_verity() failed with err -117 [ 116.428610][ T3641] EXT4-fs (loop1): unmounting filesystem. [ 116.612282][ T4418] loop4: detected capacity change from 0 to 32768 [ 116.644669][ T4134] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 116.714086][ T4418] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.149 (4418) [ 116.729480][ T4134] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 116.791559][ T4134] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 116.848889][ T4418] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 116.893852][ T4134] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 116.902473][ T4418] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 116.943591][ T4418] BTRFS info (device loop4): using free space tree [ 117.345442][ T4418] BTRFS info (device loop4): enabling ssd optimizations [ 117.539922][ T3653] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 117.542535][ T4134] 8021q: adding VLAN 0 to HW filter on device bond0 [ 117.587669][ T4421] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 117.719867][ T4067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 117.736227][ T4067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 117.774332][ T4134] 8021q: adding VLAN 0 to HW filter on device team0 [ 117.820697][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 117.847330][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 117.887661][ T3688] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.894833][ T3688] bridge0: port 1(bridge_slave_0) entered forwarding state [ 117.961189][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 117.986901][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 118.017142][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 118.052124][ T3688] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.059360][ T3688] bridge0: port 2(bridge_slave_1) entered forwarding state [ 118.087745][ T4421] usb 4-1: config 0 has an invalid interface number: 18 but max is 0 [ 118.095925][ T4421] usb 4-1: config 0 has no interface number 0 [ 118.113773][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 118.126397][ T4421] usb 4-1: config 0 interface 18 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.187946][ T4421] usb 4-1: config 0 interface 18 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.192382][ T3788] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 118.223446][ T3788] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 118.270378][ T3788] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 118.306216][ T3788] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 118.327750][ T3688] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 118.337956][ T4421] usb 4-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.10 [ 118.351809][ T3788] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 118.367973][ T4421] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 118.376024][ T4421] usb 4-1: Manufacturer: syz [ 118.403672][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 118.411869][ T4421] usb 4-1: config 0 descriptor?? [ 118.419667][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 118.448473][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 118.453932][ T4440] loop1: detected capacity change from 0 to 40427 [ 118.460260][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 118.489197][ T4440] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 118.496998][ T4440] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 118.508509][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 118.539446][ T4134] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 118.589121][ T4440] F2FS-fs (loop1): Found nat_bits in checkpoint [ 118.709109][ T3688] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 118.734729][ T3688] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 118.760919][ T4440] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 118.773305][ T3688] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 118.782083][ T4440] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 118.817371][ T3688] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 118.855861][ T3688] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.882165][ T3688] usb 5-1: config 0 descriptor?? [ 118.918143][ T4472] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 119.097381][ T4328] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 119.109947][ T4421] input: syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.18/0003:054C:03D5.000A/input/input14 [ 119.124491][ T4421] sony 0003:054C:03D5.000A: input,hidraw0: USB HID v0.00 Joystick [syz] on usb-dummy_hcd.3-1/input18 [ 119.150983][ T4421] usb 4-1: USB disconnect, device number 6 [ 119.820653][ T4328] usb 1-1: Using ep0 maxpacket: 8 [ 119.991817][ T3688] plantronics 0003:047F:FFFF.000B: unknown main item tag 0xd [ 120.003007][ T3688] plantronics 0003:047F:FFFF.000B: No inputs registered, leaving [ 120.045847][ T3688] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 120.090287][ T3688] usb 5-1: USB disconnect, device number 6 [ 120.147965][ T4328] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee [ 120.167384][ T4328] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.224668][ T4328] usb 1-1: Product: syz [ 120.237576][ T4328] usb 1-1: Manufacturer: syz [ 120.264525][ T4134] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 120.277625][ T4328] usb 1-1: SerialNumber: syz [ 120.284427][ T4328] usb 1-1: config 0 descriptor?? [ 120.309043][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 120.317876][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 120.374667][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 120.385228][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 120.442055][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 120.477306][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 120.521059][ T4134] device veth0_vlan entered promiscuous mode [ 120.546344][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 120.575053][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 120.583560][ T4328] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 120.610407][ T4134] device veth1_vlan entered promiscuous mode [ 120.624009][ T4503] loop4: detected capacity change from 0 to 128 [ 120.688706][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 120.697071][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 120.756846][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 120.784869][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 120.816859][ T4134] device veth0_macvtap entered promiscuous mode [ 120.834667][ T3736] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 120.877396][ T4134] device veth1_macvtap entered promiscuous mode [ 121.003865][ T4503] device syzkaller0 entered promiscuous mode [ 121.052526][ T4134] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.087731][ T4328] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -71 [ 121.107644][ T4134] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.131562][ T4328] usb 1-1: USB disconnect, device number 4 [ 121.154162][ T4134] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.180413][ T4134] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.207580][ T4134] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.225746][ T4134] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.246585][ T4134] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.268202][ T4134] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.289686][ T4134] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 121.627294][ T4504] loop3: detected capacity change from 0 to 32768 [ 121.674276][ T4504] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.158 (4504) [ 121.738622][ T4504] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 121.773122][ T4504] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 121.802693][ T4504] BTRFS info (device loop3): using free space tree [ 121.831463][ T4515] loop1: detected capacity change from 0 to 32768 [ 121.857144][ T4515] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.160 (4515) [ 121.973394][ T4515] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 121.987599][ T14] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 121.997903][ T4515] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 122.008777][ T4515] BTRFS info (device loop1): using free space tree [ 122.108296][ T4504] BTRFS info (device loop3): enabling ssd optimizations [ 122.171253][ T4515] BTRFS info (device loop1): enabling ssd optimizations [ 122.279317][ T3641] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 122.374353][ T14] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.385685][ T14] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.402353][ T14] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 122.437746][ T14] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 122.456615][ T14] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 122.537764][ T14] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 122.734304][ T14] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 122.775705][ T14] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.794159][ T14] usb 1-1: Product: syz [ 122.798578][ T14] usb 1-1: Manufacturer: syz [ 122.803199][ T14] usb 1-1: SerialNumber: syz [ 122.805008][ T4560] loop1: detected capacity change from 0 to 2048 [ 122.837466][ T3656] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 122.920323][ T4560] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 122.929303][ T4560] ext4 filesystem being mounted at /38/file0 supports timestamps until 2038 (0x7fffffff) [ 123.032710][ T4560] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.162: bg 0: block 288: padding at end of block bitmap is not set [ 123.052776][ T4560] fs-verity (loop1, inode 13): ext4_end_enable_verity() failed with err -117 [ 123.149196][ T3641] EXT4-fs (loop1): unmounting filesystem. [ 123.648838][ T4575] loop3: detected capacity change from 0 to 2048 [ 123.661701][ T4575] UDF-fs: bad mount option "nosrict" or missing value [ 123.863714][ T4575] loop3: detected capacity change from 0 to 1994 [ 123.907252][ T4575] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=2016, location=2016 [ 123.931642][ T4575] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 123.949030][ T4575] UDF-fs: error (device loop3): udf_read_inode: (ino 1376) failed !bh [ 123.958267][ T4575] UDF-fs: error (device loop3): udf_fill_super: Error in udf_iget, block=64, partition=0 [ 124.689099][ T4327] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 124.926000][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 124.934572][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 124.942856][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 124.952167][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 124.962812][ T4134] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.990891][ T4134] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.023613][ T4134] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.044434][ T4134] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.064675][ T4134] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.075431][ T4327] usb 4-1: config 0 has an invalid interface number: 18 but max is 0 [ 125.086527][ T4134] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.096504][ T4327] usb 4-1: config 0 has no interface number 0 [ 125.102988][ T4134] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.113546][ T4327] usb 4-1: config 0 interface 18 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.129330][ T4134] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.139299][ T4327] usb 4-1: config 0 interface 18 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 125.155931][ T4134] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 125.187962][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 125.196845][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 125.237701][ T4327] usb 4-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.10 [ 125.246804][ T4327] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 125.248627][ T4134] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.255053][ T4327] usb 4-1: Manufacturer: syz [ 125.256983][ T4327] usb 4-1: config 0 descriptor?? [ 125.317679][ T14] cdc_ncm 1-1:1.0: bind() failure [ 125.326308][ T14] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 125.374050][ T4134] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.390736][ T14] cdc_ncm 1-1:1.1: bind() failure [ 125.422464][ T4588] loop1: detected capacity change from 0 to 16 [ 125.447112][ T4134] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.471136][ T14] usb 1-1: USB disconnect, device number 5 [ 125.536027][ T4134] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.590199][ T4588] erofs: (device loop1): mounted with root inode @ nid 36. [ 125.831046][ T4593] 9pnet_fd: Insufficient options for proto=fd [ 126.324769][ T4327] input: syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.18/0003:054C:03D5.000C/input/input16 [ 126.485182][ T4327] sony 0003:054C:03D5.000C: input,hidraw0: USB HID v0.00 Joystick [syz] on usb-dummy_hcd.3-1/input18 [ 126.513584][ T3955] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.573574][ T3955] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.575096][ T14] usb 4-1: USB disconnect, device number 7 [ 126.587889][ T3688] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 126.649185][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 126.728321][ T3734] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.736496][ T3734] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.833902][ T3788] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 126.924043][ T4606] loop0: detected capacity change from 0 to 512 [ 126.961679][ T3688] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 126.998839][ T3688] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 127.020303][ T3688] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 127.030769][ T3688] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.046195][ T3688] usb 5-1: config 0 descriptor?? [ 127.064079][ T4613] loop2: detected capacity change from 0 to 8 [ 127.070711][ T4590] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 127.129994][ T4606] EXT4-fs warning (device loop0): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 127.171060][ T4606] EXT4-fs warning (device loop0): dx_probe:880: Enable large directory feature to access it [ 127.185005][ T4606] EXT4-fs warning (device loop0): dx_probe:965: inode #2: comm syz.0.176: Corrupt directory, running e2fsck is recommended [ 127.235483][ T4613] SQUASHFS error: xz decompression failed, data probably corrupt [ 127.261030][ T4613] SQUASHFS error: Failed to read block 0x60: -5 [ 127.280162][ T4606] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 127.315470][ T4606] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2213: inode #15: comm syz.0.176: corrupted in-inode xattr [ 127.337108][ T4613] SQUASHFS error: xz decompression failed, data probably corrupt [ 127.339540][ T4606] EXT4-fs error (device loop0): ext4_orphan_get:1401: comm syz.0.176: couldn't read orphan inode 15 (err -117) [ 127.360619][ T4613] SQUASHFS error: Failed to read block 0x60: -5 [ 127.367204][ T4606] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 127.388657][ T26] audit: type=1800 audit(1722026829.565:12): pid=4613 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.109" name="file1" dev="loop2" ino=1 res=0 errno=0 [ 127.426334][ T4618] SQUASHFS error: xz decompression failed, data probably corrupt [ 127.697560][ T4625] loop3: detected capacity change from 0 to 2048 [ 127.723736][ T4625] UDF-fs: bad mount option "nosrict" or missing value [ 127.744632][ T4618] SQUASHFS error: Failed to read block 0x60: -5 [ 128.126635][ T4625] loop3: detected capacity change from 0 to 1994 [ 128.247353][ T4625] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=2016, location=2016 [ 128.261589][ T4625] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 128.272453][ T4625] UDF-fs: error (device loop3): udf_read_inode: (ino 1376) failed !bh [ 128.281610][ T4625] UDF-fs: error (device loop3): udf_fill_super: Error in udf_iget, block=64, partition=0 [ 128.305118][ T26] audit: type=1800 audit(1722026830.475:13): pid=4618 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.109" name="file1" dev="loop2" ino=1 res=0 errno=0 [ 128.342761][ T4254] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 128.368938][ T3642] EXT4-fs (loop0): unmounting filesystem. [ 128.553639][ T4630] loop1: detected capacity change from 0 to 512 [ 128.590177][ T4630] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 128.647723][ T4630] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 128.797704][ T3688] usbhid 5-1:0.0: can't add hid device: -71 [ 128.811462][ T3688] usbhid: probe of 5-1:0.0 failed with error -71 [ 128.847626][ T4067] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 128.864984][ T4630] EXT4-fs (loop1): 1 truncate cleaned up [ 128.881144][ T4630] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 128.903073][ T3688] usb 5-1: USB disconnect, device number 7 [ 128.966567][ T4630] syz.1.179 (pid 4630) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 129.143593][ T3641] EXT4-fs (loop1): unmounting filesystem. [ 129.217977][ T4067] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 129.247685][ T4067] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 129.287650][ T4067] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 129.327586][ T4067] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 129.336693][ T4067] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.405760][ T4067] usb 1-1: config 0 descriptor?? [ 129.447865][ T4632] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 129.455528][ T4637] loop3: detected capacity change from 0 to 40427 [ 129.499638][ T4637] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 129.532358][ T4637] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 129.606983][ T4637] F2FS-fs (loop3): Found nat_bits in checkpoint [ 129.726910][ T4637] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 129.737578][ T4637] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 129.929799][ T4067] plantronics 0003:047F:FFFF.000D: unknown main item tag 0xd [ 129.969871][ T4067] plantronics 0003:047F:FFFF.000D: No inputs registered, leaving [ 130.059866][ T4067] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 130.917243][ T4067] usb 1-1: USB disconnect, device number 6 [ 131.019175][ T4684] loop2: detected capacity change from 0 to 8 [ 131.026318][ T4657] loop1: detected capacity change from 0 to 32768 [ 131.084446][ T4657] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.186 (4657) [ 131.113386][ T4657] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 131.154701][ T4657] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 131.164309][ T4657] BTRFS info (device loop1): using free space tree [ 131.254959][ T4684] SQUASHFS error: xz decompression failed, data probably corrupt [ 131.306775][ T4684] SQUASHFS error: Failed to read block 0x60: -5 [ 131.418884][ T4684] SQUASHFS error: xz decompression failed, data probably corrupt [ 131.426793][ T4684] SQUASHFS error: Failed to read block 0x60: -5 [ 131.480944][ T26] audit: type=1800 audit(1722026833.655:14): pid=4684 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.191" name="file1" dev="loop2" ino=1 res=0 errno=0 [ 131.510841][ T4657] BTRFS info (device loop1): enabling ssd optimizations [ 131.557756][ T4706] SQUASHFS error: xz decompression failed, data probably corrupt [ 131.617660][ T4706] SQUASHFS error: Failed to read block 0x60: -5 [ 131.624227][ T26] audit: type=1800 audit(1722026833.795:15): pid=4706 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.191" name="file1" dev="loop2" ino=1 res=0 errno=0 [ 131.695464][ T4686] loop4: detected capacity change from 0 to 32768 [ 131.723657][ T3641] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 131.738628][ T4686] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.193 (4686) [ 131.881128][ T4686] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 131.977784][ T4686] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 132.008752][ T4686] BTRFS info (device loop4): using free space tree [ 132.065912][ T4720] loop1: detected capacity change from 0 to 512 [ 132.076496][ T4720] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 132.109884][ T4720] EXT4-fs (loop1): 1 truncate cleaned up [ 132.115596][ T4720] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 132.243137][ T3641] EXT4-fs (loop1): unmounting filesystem. [ 132.273680][ T4686] BTRFS info (device loop4): enabling ssd optimizations [ 132.775665][ T4751] loop1: detected capacity change from 0 to 1024 [ 132.872629][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.880818][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.908443][ T4751] hfsplus: unable to parse mount options [ 133.081271][ T3653] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 133.264701][ T4751] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 133.270255][ T4762] loop2: detected capacity change from 0 to 1024 [ 133.294556][ T4751] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 133.314005][ T4751] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 133.416264][ T4762] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 133.453852][ T4771] loop0: detected capacity change from 0 to 8 [ 133.607921][ T4762] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 133.667320][ T4771] SQUASHFS error: xz decompression failed, data probably corrupt [ 133.689995][ T4762] EXT4-fs: Cannot change journaled quota options when quota turned on [ 133.726374][ T4771] SQUASHFS error: Failed to read block 0x60: -5 [ 133.803675][ T4771] SQUASHFS error: xz decompression failed, data probably corrupt [ 133.838992][ T4134] EXT4-fs (loop2): unmounting filesystem. [ 133.855804][ T4771] SQUASHFS error: Failed to read block 0x60: -5 [ 133.909504][ T26] audit: type=1800 audit(1722026836.085:16): pid=4771 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.209" name="file1" dev="loop0" ino=1 res=0 errno=0 [ 133.938162][ T4773] SQUASHFS error: xz decompression failed, data probably corrupt [ 133.980732][ T4773] SQUASHFS error: Failed to read block 0x60: -5 [ 134.017760][ T26] audit: type=1800 audit(1722026836.195:17): pid=4773 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.209" name="file1" dev="loop0" ino=1 res=0 errno=0 [ 134.102911][ T4777] loop2: detected capacity change from 0 to 512 [ 134.124278][ T4777] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 134.179332][ T4777] EXT4-fs (loop2): 1 truncate cleaned up [ 134.202500][ T4777] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 134.243420][ T4765] loop3: detected capacity change from 0 to 32768 [ 134.259776][ T4765] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.208 (4765) [ 134.289996][ T4765] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 134.356521][ T4765] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 134.375138][ T4784] binder: 4783:4784 ioctl c018620c 20000700 returned -22 [ 134.398098][ T4765] BTRFS info (device loop3): using free space tree [ 134.530542][ T4134] EXT4-fs (loop2): unmounting filesystem. [ 134.664581][ T4765] BTRFS info (device loop3): enabling ssd optimizations [ 134.734357][ T4813] loop2: detected capacity change from 0 to 512 [ 134.748693][ T4813] EXT4-fs: Ignoring removed oldalloc option [ 134.814780][ T4813] EXT4-fs error (device loop2): ext4_xattr_inode_iget:400: comm syz.2.217: Parent and EA inode have the same ino 15 [ 134.834960][ T4813] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2810: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 134.860601][ T4813] EXT4-fs error (device loop2): ext4_xattr_inode_iget:400: comm syz.2.217: Parent and EA inode have the same ino 15 [ 134.930577][ T4813] EXT4-fs (loop2): 1 orphan inode deleted [ 134.948422][ T4813] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 134.967356][ T3656] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 135.230222][ T4820] loop4: detected capacity change from 0 to 1024 [ 135.851091][ T4134] EXT4-fs (loop2): unmounting filesystem. [ 135.891302][ T4820] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 136.017687][ T4820] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 136.090725][ T4820] EXT4-fs: Cannot change journaled quota options when quota turned on [ 136.277147][ T3653] EXT4-fs (loop4): unmounting filesystem. [ 136.531639][ T4837] binder: 4836:4837 ioctl c018620c 20000700 returned -22 [ 136.651857][ T4842] loop3: detected capacity change from 0 to 512 [ 136.705991][ T4842] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 136.780457][ T4842] EXT4-fs (loop3): 1 truncate cleaned up [ 136.789450][ T4842] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 136.970341][ T4846] 9pnet_fd: Insufficient options for proto=fd [ 137.692546][ T3656] EXT4-fs (loop3): unmounting filesystem. [ 137.837828][ T4393] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 138.079032][ T4835] loop0: detected capacity change from 0 to 32768 [ 138.276345][ T4393] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 138.473956][ T4393] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 138.702060][ T4835] XFS (loop0): Mounting V5 Filesystem [ 138.725641][ T4393] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 138.787702][ T4393] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.833576][ T4393] usb 5-1: config 0 descriptor?? [ 138.858160][ T4844] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 138.898985][ T4835] XFS (loop0): Ending clean mount [ 138.930442][ T4835] XFS (loop0): Quotacheck needed: Please wait. [ 138.967705][ T4879] loop3: detected capacity change from 0 to 1024 [ 139.030342][ T4879] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 139.136595][ T4879] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 139.149229][ T4879] EXT4-fs: Cannot change journaled quota options when quota turned on [ 139.160545][ T4835] XFS (loop0): Quotacheck: Done. [ 139.203945][ T3656] EXT4-fs (loop3): unmounting filesystem. [ 139.321587][ T3642] XFS (loop0): Unmounting Filesystem [ 139.406794][ T4888] binder: 4886:4888 ioctl c018620c 20000700 returned -22 [ 139.716277][ T4878] loop2: detected capacity change from 0 to 40427 [ 139.764210][ T4878] F2FS-fs (loop2): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 140.549223][ T4878] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 140.597883][ T4393] usbhid 5-1:0.0: can't add hid device: -71 [ 140.603971][ T4393] usbhid: probe of 5-1:0.0 failed with error -71 [ 140.624267][ T4878] F2FS-fs (loop2): invalid crc value [ 140.652264][ T4393] usb 5-1: USB disconnect, device number 8 [ 140.659044][ T4878] F2FS-fs (loop2): Found nat_bits in checkpoint [ 140.676594][ T4900] loop1: detected capacity change from 0 to 512 [ 140.717688][ T4900] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 140.761380][ T4900] EXT4-fs (loop1): 1 truncate cleaned up [ 140.797676][ T4900] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 140.864524][ T4904] loop0: detected capacity change from 0 to 164 [ 141.004019][ T4878] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 141.033542][ T4878] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 141.076840][ T3641] EXT4-fs (loop1): unmounting filesystem. [ 141.381963][ T26] audit: type=1804 audit(1722026843.545:18): pid=4878 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.237" name="/newroot/16/file0/file1" dev="loop2" ino=10 res=1 errno=0 [ 141.785193][ T4894] f2fs_ckpt-7:2: attempt to access beyond end of device [ 141.785193][ T4894] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 141.922824][ T4917] loop1: detected capacity change from 0 to 164 [ 141.930227][ T4914] loop4: detected capacity change from 0 to 1024 [ 141.985329][ T4914] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 142.141405][ T4914] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 142.205753][ T4914] EXT4-fs: Cannot change journaled quota options when quota turned on [ 142.335173][ T3653] EXT4-fs (loop4): unmounting filesystem. [ 142.392525][ T4922] binder: 4921:4922 ioctl c018620c 20000700 returned -22 [ 142.541394][ T4924] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.550941][ T4924] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.786672][ T4930] loop4: detected capacity change from 0 to 1024 [ 143.476855][ T4254] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 143.804725][ T4945] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.812007][ T4945] bridge0: port 2(bridge_slave_1) entered forwarding state [ 143.821271][ T4945] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.828504][ T4945] bridge0: port 1(bridge_slave_0) entered forwarding state [ 143.888116][ T4947] : Can't open blockdev [ 143.987813][ T4069] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 144.003379][ T4945] device bridge0 entered promiscuous mode [ 144.079172][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 144.226854][ T4953] loop0: detected capacity change from 0 to 512 [ 144.247804][ T4069] usb 4-1: Using ep0 maxpacket: 16 [ 144.342937][ T4953] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 144.352160][ T4955] loop1: detected capacity change from 0 to 1024 [ 144.377869][ T4069] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 144.397859][ T4069] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 144.407391][ T4069] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.447293][ T4955] hfsplus: unable to parse mount options [ 144.463109][ T4953] EXT4-fs (loop0): 1 truncate cleaned up [ 144.469136][ T4953] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 144.502269][ T4069] usb 4-1: config 0 descriptor?? [ 144.650739][ T4938] loop2: detected capacity change from 0 to 32768 [ 144.734056][ T4938] XFS (loop2): Mounting V5 Filesystem [ 144.861234][ T3642] EXT4-fs (loop0): unmounting filesystem. [ 144.909194][ T4938] XFS (loop2): Ending clean mount [ 144.956028][ T4938] XFS (loop2): Quotacheck needed: Please wait. [ 144.986311][ T4941] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.028271][ T4941] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.097209][ T4938] XFS (loop2): Quotacheck: Done. [ 145.119801][ T4069] hid (null): invalid report_size 17387 [ 145.134307][ T4069] hid (null): report_id 2176741362 is invalid [ 145.168717][ T4069] hid (null): unknown global tag 0xc [ 145.195841][ T4069] hid (null): unknown global tag 0xd [ 145.215752][ T4069] hid-generic 0003:0158:0100.000E: unknown main item tag 0x1 [ 145.233543][ T4069] hid-generic 0003:0158:0100.000E: unexpected long global item [ 145.248152][ T4069] hid-generic: probe of 0003:0158:0100.000E failed with error -22 [ 145.326225][ T4955] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 145.351482][ T3691] usb 4-1: USB disconnect, device number 8 [ 145.370736][ T4134] XFS (loop2): Unmounting Filesystem [ 145.463007][ T4955] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 145.513999][ T4973] loop0: detected capacity change from 0 to 164 [ 145.518368][ T4955] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 145.581358][ T4254] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 148.132717][ T4971] loop4: detected capacity change from 0 to 40427 [ 148.175591][ T4971] F2FS-fs (loop4): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 148.207706][ T4996] loop0: detected capacity change from 0 to 2048 [ 148.216490][ T4971] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 148.320878][ T4971] F2FS-fs (loop4): invalid crc value [ 148.334824][ T4996] EXT4-fs: Ignoring removed bh option [ 148.356200][ T4971] F2FS-fs (loop4): Found nat_bits in checkpoint [ 148.365552][ T4996] EXT4-fs: Ignoring removed nomblk_io_submit option [ 148.413406][ T4996] EXT4-fs: Ignoring removed nobh option [ 148.487027][ T4996] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 148.829892][ T3642] EXT4-fs (loop0): unmounting filesystem. [ 148.836644][ T5015] loop1: detected capacity change from 0 to 164 [ 148.942150][ T4254] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 148.950791][ T7] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 149.407724][ T7] usb 4-1: Using ep0 maxpacket: 16 [ 149.578453][ T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 149.799878][ T7] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 150.016540][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.065115][ T7] usb 4-1: config 0 descriptor?? [ 150.336844][ T5033] loop4: detected capacity change from 0 to 1764 [ 150.646163][ T5011] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.883127][ T5011] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.119371][ T7] hid (null): invalid report_size 17387 [ 151.125167][ T7] hid (null): report_id 2176741362 is invalid [ 151.146122][ T7] hid (null): unknown global tag 0xc [ 151.155546][ T7] hid (null): unknown global tag 0xd [ 151.210226][ T7] hid-generic 0003:0158:0100.000F: unknown main item tag 0x1 [ 151.237624][ T7] hid-generic 0003:0158:0100.000F: unexpected long global item [ 151.266978][ T5041] loop2: detected capacity change from 0 to 1024 [ 151.273248][ T7] hid-generic: probe of 0003:0158:0100.000F failed with error -22 [ 151.378253][ T4067] usb 4-1: USB disconnect, device number 9 [ 151.422526][ T5041] hfsplus: unable to parse mount options [ 151.701549][ T5040] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 151.725255][ T5040] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 151.752550][ T5040] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 151.816011][ T5049] loop1: detected capacity change from 0 to 2048 [ 151.831082][ T5049] EXT4-fs: Ignoring removed bh option [ 151.847351][ T5049] EXT4-fs: Ignoring removed nomblk_io_submit option [ 151.859933][ T5049] EXT4-fs: Ignoring removed nobh option [ 151.894691][ T5049] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 152.879954][ T3641] EXT4-fs (loop1): unmounting filesystem. [ 154.103160][ T5069] loop3: detected capacity change from 0 to 2048 [ 154.153384][ T5075] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.160895][ T5075] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.321174][ T5047] loop4: detected capacity change from 0 to 40427 [ 154.435636][ T5047] F2FS-fs (loop4): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 154.444159][ T5077] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 154.502240][ T5047] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 154.564665][ T5047] F2FS-fs (loop4): invalid crc value [ 154.594424][ T5047] F2FS-fs (loop4): Failed to start F2FS issue_checkpoint_thread (-12) [ 154.625717][ T5075] loop0: detected capacity change from 0 to 1024 [ 154.719004][ T4254] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 154.849700][ T5082] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3832186367 (490519854976 ns) > initial count (268435456 ns). Using initial count to start timer. [ 155.160931][ T5082] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.168364][ T5082] bridge0: port 2(bridge_slave_1) entered forwarding state [ 155.175810][ T5082] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.183016][ T5082] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.414974][ T5087] loop4: detected capacity change from 0 to 1764 [ 155.543183][ T5082] device bridge0 entered promiscuous mode [ 155.771729][ T4069] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 158.036026][ T5090] loop3: detected capacity change from 0 to 32768 [ 158.156507][ T5090] XFS (loop3): Mounting V5 Filesystem [ 158.331416][ T5090] XFS (loop3): Ending clean mount [ 158.373182][ T5090] XFS (loop3): Quotacheck needed: Please wait. [ 158.434248][ T5097] loop4: detected capacity change from 0 to 32768 [ 158.454421][ T5090] XFS (loop3): Quotacheck: Done. [ 158.629171][ T5134] loop0: detected capacity change from 0 to 2048 [ 158.652113][ T5097] XFS (loop4): Mounting V5 Filesystem [ 158.664953][ T5136] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 158.745572][ T5097] XFS (loop4): Ending clean mount [ 158.771625][ T5097] XFS (loop4): Quotacheck needed: Please wait. [ 158.846642][ T3656] XFS (loop3): Unmounting Filesystem [ 158.846837][ T5097] XFS (loop4): Quotacheck: Done. [ 159.053793][ T3653] XFS (loop4): Unmounting Filesystem [ 159.342495][ T5140] loop0: detected capacity change from 0 to 1764 [ 159.794669][ T5144] netlink: 'syz.0.314': attribute type 2 has an invalid length. [ 160.108164][ T5151] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.115515][ T5151] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.173130][ T5125] loop2: detected capacity change from 0 to 40427 [ 160.271354][ T5125] F2FS-fs (loop2): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 160.301257][ T5149] loop4: detected capacity change from 0 to 1024 [ 160.325677][ T5155] loop3: detected capacity change from 0 to 1024 [ 160.347035][ T5149] hfsplus: unable to parse mount options [ 160.363321][ T5125] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 160.375462][ T5125] F2FS-fs (loop2): invalid crc value [ 160.392985][ T5153] loop0: detected capacity change from 0 to 512 [ 160.434014][ T5153] ext4: Unknown parameter 'noacl' [ 160.452521][ T5125] F2FS-fs (loop2): Found nat_bits in checkpoint [ 160.589998][ T5149] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 160.670582][ T5149] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 160.698024][ T5149] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 160.739174][ T5125] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 160.751970][ T5125] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 160.895336][ T26] audit: type=1804 audit(1722026863.065:19): pid=5125 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.309" name="/newroot/25/file0/file1" dev="loop2" ino=10 res=1 errno=0 [ 160.929050][ T5156] f2fs_ckpt-7:2: attempt to access beyond end of device [ 160.929050][ T5156] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 161.126913][ T5155] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.134065][ T5155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 161.142602][ T5155] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.149742][ T5155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 161.213841][ T5155] device bridge0 entered promiscuous mode [ 161.243364][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 162.117100][ T5172] loop0: detected capacity change from 0 to 512 [ 162.257079][ T5172] ext4: Unknown parameter 'fowner<00000000000000000000' [ 162.388114][ T5177] loop3: detected capacity change from 0 to 2048 [ 162.611160][ T5181] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 162.958005][ T4327] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 163.381027][ T4327] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 163.411548][ T4327] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 163.450799][ T4327] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 163.467798][ T4327] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.496849][ T4327] usb 1-1: config 0 descriptor?? [ 163.555025][ T5199] loop2: detected capacity change from 0 to 512 [ 163.615978][ T5199] ext4: Unknown parameter 'noacl' [ 163.986509][ T4327] cp2112 0003:10C4:EA90.0010: unknown main item tag 0x0 [ 164.005447][ T4327] cp2112 0003:10C4:EA90.0010: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 164.034575][ T5206] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 164.198025][ T4327] cp2112 0003:10C4:EA90.0010: Part Number: 0x82 Device Version: 0xFE [ 164.559384][ T5215] 9pnet_fd: p9_fd_create_tcp (5215): problem connecting socket to 127.0.0.1 [ 164.577785][ T4421] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 165.571455][ T4331] usb 1-1: reset high-speed USB device number 7 using dummy_hcd [ 165.607712][ T4421] usb 3-1: Using ep0 maxpacket: 16 [ 165.625914][ T5219] loop4: detected capacity change from 0 to 2048 [ 165.644083][ T5198] loop3: detected capacity change from 0 to 40427 [ 165.689550][ T5198] F2FS-fs (loop3): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 165.721505][ T5198] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 165.739839][ T4421] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 165.754380][ T4421] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 165.767265][ T4421] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.779243][ T4421] usb 3-1: config 0 descriptor?? [ 165.788160][ T5221] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 165.799435][ T5198] F2FS-fs (loop3): invalid crc value [ 165.839645][ T3661] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 165.862740][ T5198] F2FS-fs (loop3): Found nat_bits in checkpoint [ 165.869777][ T3661] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 165.885458][ T3661] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 165.893462][ T3661] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 165.901184][ T3661] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 165.908546][ T3661] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 166.105641][ T5198] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 166.163955][ T5198] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 166.251650][ T5208] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.277963][ T5208] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 166.319548][ T4421] hid (null): invalid report_size 17387 [ 166.327988][ T4421] hid (null): report_id 2176741362 is invalid [ 166.334344][ T4421] hid (null): unknown global tag 0xc [ 166.382990][ T26] audit: type=1804 audit(1722026868.555:20): pid=5198 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.329" name="/newroot/66/file0/file1" dev="loop3" ino=10 res=1 errno=0 [ 166.415303][ T5222] f2fs_ckpt-7:3: attempt to access beyond end of device [ 166.415303][ T5222] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 166.463943][ T5220] chnl_net:caif_netlink_parms(): no params data found [ 166.482222][ T4327] usb 1-1: USB disconnect, device number 7 [ 166.489497][ T4421] hid (null): unknown global tag 0xd [ 166.497348][ T4421] hid-generic 0003:0158:0100.0011: unknown main item tag 0x1 [ 166.700177][ T4421] hid-generic 0003:0158:0100.0011: unexpected long global item [ 166.731829][ T4421] hid-generic: probe of 0003:0158:0100.0011 failed with error -22 [ 167.758934][ T4421] usb 3-1: USB disconnect, device number 4 [ 167.987900][ T3661] Bluetooth: hci2: command tx timeout [ 168.192343][ T5220] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.224526][ T5220] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.272711][ T5220] device bridge_slave_0 entered promiscuous mode [ 168.302509][ T5220] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.328144][ T5220] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.382943][ T5220] device bridge_slave_1 entered promiscuous mode [ 168.511838][ T5220] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 168.547845][ T7] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 168.566208][ T5220] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 168.622264][ T5220] team0: Port device team_slave_0 added [ 168.652186][ T5220] team0: Port device team_slave_1 added [ 168.711213][ T5220] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 168.743696][ T5220] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 168.853136][ T5220] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 168.915635][ T5220] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 168.937776][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 168.958208][ T5220] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 168.994142][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 169.027879][ T7] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 169.057408][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.067727][ T5220] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 169.086182][ T5255] loop4: detected capacity change from 0 to 32768 [ 169.106518][ T7] usb 1-1: config 0 descriptor?? [ 169.141875][ T5255] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.346 (5255) [ 169.256579][ T5255] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 169.297333][ T5255] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 169.330175][ T5220] device hsr_slave_0 entered promiscuous mode [ 169.356750][ T5220] device hsr_slave_1 entered promiscuous mode [ 169.383497][ T5255] BTRFS info (device loop4): using free space tree [ 169.440526][ T5266] loop3: detected capacity change from 0 to 8 [ 169.576678][ T5266] SQUASHFS error: Failed to read block 0x6e6: -5 [ 169.599794][ T7] cp2112 0003:10C4:EA90.0012: unknown main item tag 0x0 [ 169.604681][ T5266] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 169.624887][ T5266] SQUASHFS error: Unable to read directory block [6e4:0] [ 169.828683][ T7] cp2112 0003:10C4:EA90.0012: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 169.856521][ T5255] BTRFS info (device loop4): enabling ssd optimizations [ 169.986845][ T5283] netlink: 'syz.3.349': attribute type 10 has an invalid length. [ 170.019005][ T5283] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 170.047815][ T7] cp2112 0003:10C4:EA90.0012: Part Number: 0x82 Device Version: 0xFE [ 170.070447][ T3653] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 170.077782][ T3661] Bluetooth: hci2: command tx timeout [ 170.586046][ T5220] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.827262][ T4327] usb 1-1: USB disconnect, device number 8 [ 170.888865][ T5220] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.117380][ T5294] loop3: detected capacity change from 0 to 512 [ 172.147634][ T3661] Bluetooth: hci2: command tx timeout [ 172.182030][ T5294] ext4: Unknown parameter 'noacl' [ 172.246008][ T5220] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.507092][ T5220] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.723924][ T5305] loop4: detected capacity change from 0 to 8 [ 172.891100][ T5305] SQUASHFS error: Failed to read block 0x6e6: -5 [ 172.901195][ T5305] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 172.950020][ T5305] SQUASHFS error: Unable to read directory block [6e4:0] [ 172.958926][ T5220] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 173.020655][ T5220] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 173.082623][ T5220] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 173.139112][ T5220] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 173.490577][ T5311] netlink: 'syz.3.361': attribute type 10 has an invalid length. [ 173.567176][ T5311] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 173.707619][ T5220] 8021q: adding VLAN 0 to HW filter on device bond0 [ 173.858496][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 173.869194][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 173.916604][ T5314] loop4: detected capacity change from 0 to 2048 [ 173.917415][ T5220] 8021q: adding VLAN 0 to HW filter on device team0 [ 173.986434][ T5302] loop0: detected capacity change from 0 to 32768 [ 174.000225][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 174.009673][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 174.056609][ T4241] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.063800][ T4241] bridge0: port 1(bridge_slave_0) entered forwarding state [ 174.134947][ T5319] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 174.214375][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 174.226307][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 174.234806][ T3661] Bluetooth: hci2: command tx timeout [ 174.258529][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 174.267176][ T4421] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.274348][ T4421] bridge0: port 2(bridge_slave_1) entered forwarding state [ 174.284395][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 174.294160][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 174.309347][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 174.320980][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 174.349388][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 174.378131][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 174.429449][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 174.487340][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 174.525030][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 174.606363][ T5220] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 174.698834][ T5220] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 174.779845][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 174.797402][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 176.354678][ T5338] loop4: detected capacity change from 0 to 512 [ 176.412552][ T5338] ext4: Unknown parameter 'noacl' [ 176.423476][ T5340] loop0: detected capacity change from 0 to 8 [ 176.564101][ T5340] SQUASHFS error: Failed to read block 0x6e6: -5 [ 176.597799][ T5340] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 176.638156][ T5340] SQUASHFS error: Unable to read directory block [6e4:0] [ 176.838207][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 176.851467][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 176.900614][ T5220] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 177.005989][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 177.024223][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 177.119525][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 177.136747][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 177.173948][ T5220] device veth0_vlan entered promiscuous mode [ 177.198781][ T3712] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 177.218608][ T3712] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 177.232492][ T5220] device veth1_vlan entered promiscuous mode [ 177.287695][ T4069] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 177.379857][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 177.398724][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 177.448068][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 177.494319][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 177.506982][ T5350] loop4: detected capacity change from 0 to 2048 [ 177.533244][ T5220] device veth0_macvtap entered promiscuous mode [ 177.569242][ T5220] device veth1_macvtap entered promiscuous mode [ 177.609968][ T5220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.622817][ T5350] EXT4-fs error (device loop4): ext4_orphan_get:1422: comm syz.4.374: bad orphan inode 8192 [ 177.638187][ T5350] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 177.660143][ T5220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.674601][ T26] audit: type=1800 audit(1722026879.845:21): pid=5350 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.374" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 177.797786][ T5220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.817674][ T4069] usb 4-1: New USB device found, idVendor=13d3, idProduct=3333, bcdDevice=84.ed [ 177.849153][ T4069] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.871063][ T5220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.910086][ T5220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.917598][ T4069] usb 4-1: Product: syz [ 177.924993][ T4069] usb 4-1: Manufacturer: syz [ 177.964288][ T5220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.974314][ T4069] usb 4-1: SerialNumber: syz [ 177.995724][ T5220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.996374][ T4069] usb 4-1: config 0 descriptor?? [ 178.027824][ T5220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.074097][ T5220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 178.101045][ T4069] r8712u: register rtl8712_netdev_ops to netdev_ops [ 178.134563][ T5220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.137564][ T4069] usb 4-1: r8712u: USB_SPEED_HIGH with 0 endpoints [ 178.187207][ T3653] EXT4-fs (loop4): unmounting filesystem. [ 178.201944][ T5220] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 178.299181][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 178.308765][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 178.352733][ T5348] loop0: detected capacity change from 0 to 32768 [ 178.353434][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 178.589627][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 178.617839][ T5220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.678447][ T5358] 9pnet_fd: p9_fd_create_tcp (5358): problem connecting socket to 127.0.0.1 [ 179.472790][ T4069] usb 4-1: r8712u: Boot from EFUSE: Autoload Failed [ 179.497580][ T4069] usb 4-1: r8712u: MAC Address from efuse = 00:e0:4c:87:00:00 [ 179.548065][ T4069] usb 4-1: r8712u: Loading firmware from "rtlwifi/rtl8712u.bin" [ 179.580347][ T5220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.632713][ T5220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 179.661437][ T5220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.723657][ T5220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 179.777693][ T5220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.823138][ T5220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 179.868882][ T5220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.937610][ T5220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 179.987743][ T5220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.168137][ T4241] usb 4-1: USB disconnect, device number 10 [ 180.171676][ T5220] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 180.227015][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 180.255014][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 180.779651][ T5220] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.825990][ T5220] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.908584][ T3644] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 180.927976][ T3644] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 180.936717][ T3644] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 180.945120][ T3644] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 180.954107][ T3644] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 180.961529][ T3644] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 180.977801][ T5220] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.986514][ T5220] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.089858][ T5375] loop3: detected capacity change from 0 to 256 [ 181.305085][ T5375] FAT-fs (loop3): Directory bread(block 64) failed [ 181.367822][ T5375] FAT-fs (loop3): Directory bread(block 65) failed [ 181.375248][ T5375] FAT-fs (loop3): Directory bread(block 66) failed [ 181.446089][ T5375] FAT-fs (loop3): Directory bread(block 67) failed [ 181.549032][ T5375] FAT-fs (loop3): Directory bread(block 68) failed [ 181.575519][ T5375] FAT-fs (loop3): Directory bread(block 69) failed [ 181.605873][ T5375] FAT-fs (loop3): Directory bread(block 70) failed [ 181.679406][ T5375] FAT-fs (loop3): Directory bread(block 71) failed [ 181.686134][ T5375] FAT-fs (loop3): Directory bread(block 72) failed [ 181.757647][ T5375] FAT-fs (loop3): Directory bread(block 73) failed [ 181.845977][ T5333] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.888703][ T5333] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 181.957562][ T4069] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 182.033596][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 182.115186][ T5333] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.188089][ T5333] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.208038][ T4069] usb 1-1: Using ep0 maxpacket: 16 [ 182.287345][ T3712] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 182.328364][ T4069] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 204, changing to 7 [ 182.370142][ T4069] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1040, setting to 1024 [ 182.561579][ T5372] chnl_net:caif_netlink_parms(): no params data found [ 182.607923][ T4069] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 182.616984][ T4069] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.731558][ T4069] usb 1-1: Product: 閮８騬ꭗ툵✕캑鐆껑驲冎榻༝꟎㰣㐘왞釯뭨涎ݏ涌勣᤻殉⠉䴻ʻ쾵늗邢뒂蟕䶞僧㝜奎룪֣ᥠ試ᇽ﵇屼騎풻⢕û뿓笓偎 [ 182.845990][ T4069] usb 1-1: SerialNumber: syz [ 182.988381][ T5385] loop1: detected capacity change from 0 to 164 [ 183.037644][ T3644] Bluetooth: hci6: command tx timeout [ 183.071917][ T5390] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 183.112734][ T5372] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.133527][ T5379] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.288026][ T5379] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.328732][ T5372] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.345028][ T5379] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.434778][ T5372] device bridge_slave_0 entered promiscuous mode [ 183.442831][ T5379] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.578056][ T5372] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.347124][ T5395] loop4: detected capacity change from 0 to 2048 [ 184.353943][ T5372] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.416078][ T5372] device bridge_slave_1 entered promiscuous mode [ 184.447949][ T4069] usb 1-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 184.593206][ T5395] EXT4-fs error (device loop4): ext4_orphan_get:1422: comm syz.4.384: bad orphan inode 8192 [ 184.628923][ T5395] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 184.713506][ T4069] usb 1-1: USB disconnect, device number 9 [ 184.800862][ T5372] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 184.821044][ T26] audit: type=1800 audit(1722026886.995:22): pid=5395 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.384" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 184.870853][ T5372] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 184.935899][ T5403] loop1: detected capacity change from 0 to 256 [ 184.958727][ T4254] udevd[4254]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 185.057685][ T3653] EXT4-fs (loop4): unmounting filesystem. [ 185.104447][ T5372] team0: Port device team_slave_0 added [ 185.118448][ T3644] Bluetooth: hci6: command tx timeout [ 185.173212][ T5372] team0: Port device team_slave_1 added [ 185.208417][ T5403] FAT-fs (loop1): Directory bread(block 64) failed [ 185.215105][ T5403] FAT-fs (loop1): Directory bread(block 65) failed [ 185.281634][ T5409] loop3: detected capacity change from 0 to 1024 [ 185.317653][ T5403] FAT-fs (loop1): Directory bread(block 66) failed [ 185.327781][ T5403] FAT-fs (loop1): Directory bread(block 67) failed [ 185.378459][ T5409] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 185.420289][ T5372] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 185.427250][ T5372] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 185.494791][ T5403] FAT-fs (loop1): Directory bread(block 68) failed [ 185.520252][ T5403] FAT-fs (loop1): Directory bread(block 69) failed [ 185.526980][ T5403] FAT-fs (loop1): Directory bread(block 70) failed [ 185.534097][ T3712] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 185.606022][ T5403] FAT-fs (loop1): Directory bread(block 71) failed [ 185.612988][ T3689] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 185.623512][ T5372] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 185.671693][ T5403] FAT-fs (loop1): Directory bread(block 72) failed [ 185.689067][ T5372] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 185.696044][ T5372] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 185.734011][ T5403] FAT-fs (loop1): Directory bread(block 73) failed [ 185.772876][ T3656] EXT4-fs (loop3): unmounting filesystem. [ 185.789761][ T5372] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 185.928810][ T26] audit: type=1800 audit(1722026888.105:23): pid=5403 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.385" name="file1" dev="loop1" ino=1048602 res=0 errno=0 [ 185.953569][ T5372] device hsr_slave_0 entered promiscuous mode [ 185.960385][ T3712] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 186.019166][ T3712] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 186.057921][ T3712] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 186.067210][ T3712] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.081368][ T3712] usb 1-1: config 0 descriptor?? [ 186.096890][ T5372] device hsr_slave_1 entered promiscuous mode [ 186.127838][ T5372] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 186.154096][ T5372] Cannot create hsr debugfs directory [ 186.237790][ T3689] usb 5-1: New USB device found, idVendor=13d3, idProduct=3333, bcdDevice=84.ed [ 186.246901][ T3689] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.288474][ T3689] usb 5-1: Product: syz [ 186.292702][ T3689] usb 5-1: Manufacturer: syz [ 186.297328][ T3689] usb 5-1: SerialNumber: syz [ 186.339219][ T3689] usb 5-1: config 0 descriptor?? [ 186.390556][ T3689] r8712u: register rtl8712_netdev_ops to netdev_ops [ 186.401930][ T3689] usb 5-1: r8712u: USB_SPEED_HIGH with 0 endpoints [ 186.549869][ T3712] cp2112 0003:10C4:EA90.0013: unknown main item tag 0x0 [ 186.562154][ T3712] cp2112 0003:10C4:EA90.0013: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 186.757754][ T3712] cp2112 0003:10C4:EA90.0013: Part Number: 0x82 Device Version: 0xFE [ 186.817440][ T5372] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.838255][ T5425] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 187.027715][ T3689] usb 5-1: r8712u: Boot from EFUSE: Autoload Failed [ 187.044101][ T3689] usb 5-1: r8712u: MAC Address from efuse = 00:e0:4c:87:00:00 [ 187.107765][ T5427] 9pnet_fd: p9_fd_create_tcp (5427): problem connecting socket to 127.0.0.1 [ 187.187606][ T3661] Bluetooth: hci6: command tx timeout [ 187.579440][ T3689] usb 5-1: r8712u: Loading firmware from "rtlwifi/rtl8712u.bin" [ 187.962501][ T3689] usb 5-1: USB disconnect, device number 9 [ 188.137599][ T4331] usb 1-1: reset high-speed USB device number 10 using dummy_hcd [ 188.185681][ T5431] loop4: detected capacity change from 0 to 2048 [ 188.252342][ T5372] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.318819][ T5431] EXT4-fs error (device loop4): ext4_orphan_get:1422: comm syz.4.398: bad orphan inode 8192 [ 188.409215][ T5431] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 188.508184][ T26] audit: type=1800 audit(1722026890.685:24): pid=5431 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.398" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 188.558441][ T5372] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.647667][ T4069] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 188.755402][ T5372] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.864392][ T3653] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2213: inode #15: comm syz-executor: corrupted in-inode xattr [ 188.908650][ T3653] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2213: inode #15: comm syz-executor: corrupted in-inode xattr [ 189.027943][ T4069] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 189.049707][ T4241] usb 1-1: USB disconnect, device number 10 [ 189.080861][ T4069] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 189.127625][ T4069] usb 4-1: New USB device found, idVendor=056a, idProduct=00f8, bcdDevice= 4.00 [ 189.136732][ T4069] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.222044][ T4069] usb 4-1: config 0 descriptor?? [ 189.259936][ T5445] netlink: 'syz.0.405': attribute type 17 has an invalid length. [ 189.277870][ T3647] Bluetooth: hci6: command tx timeout [ 189.327352][ T5445] device vlan2 entered promiscuous mode [ 189.377600][ T5445] device macvtap0 entered promiscuous mode [ 189.411412][ T5445] device macvtap0 left promiscuous mode [ 189.553601][ T5372] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 189.600472][ T5372] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 189.647821][ T4241] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 189.705197][ T5372] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 189.709111][ T5437] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.768046][ T5372] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 189.785399][ T5437] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 189.908391][ T5437] input: syz1 as /devices/virtual/input/input18 [ 189.948449][ T4241] usb 2-1: Using ep0 maxpacket: 16 [ 190.041408][ T5372] 8021q: adding VLAN 0 to HW filter on device bond0 [ 190.041419][ T4069] wacom 0003:056A:00F8.0014: unknown main item tag 0x0 [ 190.069082][ T3712] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 190.088286][ T3712] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 190.113545][ T5372] 8021q: adding VLAN 0 to HW filter on device team0 [ 190.117651][ T14] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 190.128474][ T4069] wacom 0003:056A:00F8.0014: hidraw0: USB HID v0.00 Device [HID 056a:00f8] on usb-dummy_hcd.3-1/input0 [ 190.153040][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 190.178524][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 190.218382][ T4331] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.225700][ T4331] bridge0: port 1(bridge_slave_0) entered forwarding state [ 190.277885][ T4241] usb 2-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 190.307816][ T4241] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.339001][ T4241] usb 2-1: Product: syz [ 190.343188][ T4241] usb 2-1: Manufacturer: syz [ 190.358790][ T4241] usb 2-1: SerialNumber: syz [ 190.385834][ T4241] usb 2-1: config 0 descriptor?? [ 190.395187][ T5372] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 190.444917][ T5372] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 190.459267][ T4241] visor 2-1:0.0: Sony Clie 3.5 converter detected [ 190.514773][ T3786] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 190.539540][ T3786] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 190.589044][ T3786] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 190.632924][ T3786] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.640233][ T3786] bridge0: port 2(bridge_slave_1) entered forwarding state [ 190.658061][ T3786] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 190.677099][ T3786] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 190.687813][ T14] usb 1-1: New USB device found, idVendor=13d3, idProduct=3333, bcdDevice=84.ed [ 190.694518][ T3786] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 190.696894][ T14] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.709935][ T3786] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 190.733371][ T3786] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 190.790888][ T3786] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 190.817780][ T14] usb 1-1: Product: syz [ 190.822008][ T14] usb 1-1: Manufacturer: syz [ 190.836219][ T14] usb 1-1: SerialNumber: syz [ 190.848602][ T3786] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 190.858426][ T14] usb 1-1: config 0 descriptor?? [ 190.907731][ T4241] usb 2-1: clie_3_5_startup: get interface number failed: -32 [ 190.910298][ T14] r8712u: register rtl8712_netdev_ops to netdev_ops [ 190.915601][ T4241] visor: probe of 2-1:0.0 failed with error -32 [ 190.930801][ T3786] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 190.952436][ T14] usb 1-1: r8712u: USB_SPEED_HIGH with 0 endpoints [ 190.957399][ T3786] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 190.984760][ T3786] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 191.020907][ T3786] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 191.034989][ T3786] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 191.135497][ T4241] usb 4-1: USB disconnect, device number 11 [ 191.268512][ T3647] Bluetooth: hci1: command 0x0406 tx timeout [ 191.274675][ T3647] Bluetooth: hci0: command 0x0406 tx timeout [ 191.280809][ T3661] Bluetooth: hci3: command 0x0406 tx timeout [ 191.527686][ T14] usb 1-1: r8712u: Boot from EFUSE: Autoload Failed [ 191.534488][ T14] usb 1-1: r8712u: MAC Address from efuse = 00:e0:4c:87:00:00 [ 191.618771][ T14] usb 1-1: r8712u: Loading firmware from "rtlwifi/rtl8712u.bin" [ 192.528737][ T4331] usb 1-1: USB disconnect, device number 11 [ 192.605392][ T3653] EXT4-fs (loop4): unmounting filesystem. [ 192.761888][ T5036] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.862661][ T5036] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.921860][ T4069] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 192.964573][ T4069] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 193.227990][ T5036] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.248756][ T5372] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 193.333390][ T5036] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.410747][ T4069] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 193.456633][ T4069] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 193.535096][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 193.576449][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 193.630894][ T5372] device veth0_vlan entered promiscuous mode [ 193.672822][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 193.694622][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 193.737970][ T5372] device veth1_vlan entered promiscuous mode [ 193.836795][ T5472] fuse: Unknown parameter '0x0000000000000005' [ 193.943798][ T4421] usb 2-1: USB disconnect, device number 7 [ 194.192823][ T5478] loop0: detected capacity change from 0 to 512 [ 194.456110][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.508147][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.525697][ T5472] netlink: 24 bytes leftover after parsing attributes in process `syz.3.415'. [ 194.655602][ T5478] EXT4-fs (loop0): 1 truncate cleaned up [ 194.661376][ T5478] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 194.694809][ T5474] EXT4-fs error (device loop0): ext4_find_dest_de:2112: inode #2: block 13: comm syz.0.416: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=196608, rec_len=0, size=1024 fake=0 [ 194.721332][ T5474] EXT4-fs (loop0): Remounting filesystem read-only [ 194.753110][ T3647] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 194.764189][ T3647] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 194.772327][ T3647] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 194.781366][ T3647] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 194.802606][ T3647] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 194.810990][ T3642] EXT4-fs (loop0): unmounting filesystem. [ 194.816947][ T3647] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 194.875545][ T5372] device veth0_macvtap entered promiscuous mode [ 194.948006][ T3712] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 194.956614][ T3712] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 195.038927][ T3712] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 195.095034][ T5372] device veth1_macvtap entered promiscuous mode [ 195.247131][ T5372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.302487][ T5372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.341838][ T5372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.387550][ T5372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.397431][ T5372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.429437][ T5494] loop0: detected capacity change from 0 to 256 [ 195.487814][ T5372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.544411][ T5372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.568298][ T5494] FAT-fs (loop0): Directory bread(block 64) failed [ 195.586902][ T5494] FAT-fs (loop0): Directory bread(block 65) failed [ 195.620420][ T5498] netlink: 8 bytes leftover after parsing attributes in process `syz.3.421'. [ 195.627669][ T5372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.630205][ T5494] FAT-fs (loop0): Directory bread(block 66) failed [ 195.670392][ T5494] FAT-fs (loop0): Directory bread(block 67) failed [ 195.677079][ T5494] FAT-fs (loop0): Directory bread(block 68) failed [ 195.680778][ T5372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.737245][ T5494] FAT-fs (loop0): Directory bread(block 69) failed [ 195.740061][ T5372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.774855][ T5494] FAT-fs (loop0): Directory bread(block 70) failed [ 195.799818][ T5372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.820814][ T5494] FAT-fs (loop0): Directory bread(block 71) failed [ 195.851124][ T5372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.868904][ T5494] FAT-fs (loop0): Directory bread(block 72) failed [ 195.892787][ T5372] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 195.957576][ T5494] FAT-fs (loop0): Directory bread(block 73) failed [ 196.003801][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 196.018955][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 196.050032][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 196.202010][ T26] audit: type=1800 audit(1722026898.375:25): pid=5494 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.420" name="file1" dev="loop0" ino=1048603 res=0 errno=0 [ 196.289527][ T5372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 196.357595][ T5372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.357617][ T5372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 196.357641][ T5372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.357654][ T5372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 196.357671][ T5372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.357687][ T5372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 196.357702][ T5372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.357726][ T5372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 196.357740][ T5372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.357757][ T5372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 196.357771][ T5372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.361354][ T5372] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 196.747831][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 196.846235][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 196.846512][ T5522] fuse: Unknown parameter '0x0000000000000005' [ 196.866784][ T5372] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.878473][ T3644] Bluetooth: hci3: command tx timeout [ 196.898406][ T5372] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.907289][ T5372] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.917210][ T5372] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.086496][ T5525] netlink: 24 bytes leftover after parsing attributes in process `syz.0.427'. [ 197.664018][ T5544] netlink: 4 bytes leftover after parsing attributes in process `syz.0.431'. [ 197.719841][ T5544] netlink: 'syz.0.431': attribute type 18 has an invalid length. [ 197.820934][ T5544] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 197.830908][ T5544] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 197.839733][ T5544] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 197.841181][ T5549] netlink: 56 bytes leftover after parsing attributes in process `syz.1.433'. [ 197.848501][ T5544] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 197.881119][ T5544] device vxlan0 entered promiscuous mode [ 197.897923][ T5549] netlink: 'syz.1.433': attribute type 2 has an invalid length. [ 198.947692][ T3644] Bluetooth: hci3: command tx timeout [ 199.066008][ T5551] loop3: detected capacity change from 0 to 1024 [ 199.092013][ T5484] chnl_net:caif_netlink_parms(): no params data found [ 199.261319][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 199.357662][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 199.490162][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 199.764765][ T5555] loop0: detected capacity change from 0 to 4096 [ 199.859794][ T5555] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 199.980777][ T5038] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 200.037649][ T5038] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 200.160545][ T5555] ntfs3: loop0: ino=1e, "file1" encrypted i/o not supported [ 200.172601][ T5484] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.191497][ T5484] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.196295][ T26] audit: type=1800 audit(1722026902.365:26): pid=5555 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.435" name="file1" dev="loop0" ino=30 res=0 errno=0 [ 200.250555][ T5484] device bridge_slave_0 entered promiscuous mode [ 200.276779][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 200.577897][ T5484] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.585070][ T5484] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.678900][ T5484] device bridge_slave_1 entered promiscuous mode [ 200.782727][ T5587] netlink: 56 bytes leftover after parsing attributes in process `syz.1.444'. [ 200.839487][ T5587] netlink: 'syz.1.444': attribute type 2 has an invalid length. [ 201.029765][ T3644] Bluetooth: hci3: command tx timeout [ 201.264990][ T5601] loop1: detected capacity change from 0 to 512 [ 201.664952][ T5601] EXT4-fs (loop1): 1 truncate cleaned up [ 201.671031][ T5601] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 201.699470][ T5596] EXT4-fs error (device loop1): ext4_find_dest_de:2112: inode #2: block 13: comm syz.1.446: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=196608, rec_len=0, size=1024 fake=0 [ 201.720961][ T5596] EXT4-fs (loop1): Remounting filesystem read-only [ 201.831430][ T5220] EXT4-fs (loop1): unmounting filesystem. [ 201.880812][ T5607] loop3: detected capacity change from 0 to 128 [ 201.954120][ T5607] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (16076!=39978) [ 201.988458][ T5036] device hsr_slave_0 left promiscuous mode [ 202.001690][ T5607] EXT4-fs error (device loop3): __ext4_fill_super:5399: inode #2: comm syz.3.449: iget: checksum invalid [ 202.008503][ T5036] device hsr_slave_1 left promiscuous mode [ 202.040988][ T5607] EXT4-fs (loop3): get root inode failed [ 202.046735][ T5607] EXT4-fs (loop3): mount failed [ 202.094856][ T5036] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 202.125120][ T5036] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 202.222171][ T5036] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 202.252571][ T5036] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 202.298613][ T5036] device bridge_slave_1 left promiscuous mode [ 202.305009][ T5036] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.338487][ T5036] device bridge_slave_0 left promiscuous mode [ 202.352145][ T5036] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.500968][ T5036] device veth1_macvtap left promiscuous mode [ 202.515400][ T5036] device veth0_macvtap left promiscuous mode [ 202.528020][ T5036] device veth1_vlan left promiscuous mode [ 202.542626][ T5036] device veth0_vlan left promiscuous mode [ 203.119470][ T3644] Bluetooth: hci3: command tx timeout [ 203.846997][ T5036] team0 (unregistering): Port device team_slave_1 removed [ 203.886609][ T5036] team0 (unregistering): Port device team_slave_0 removed [ 203.926608][ T5036] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 203.972434][ T5036] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 204.394087][ T5036] bond0 (unregistering): Released all slaves [ 204.483497][ T5484] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 204.523654][ T5628] netlink: 'syz.1.456': attribute type 5 has an invalid length. [ 204.745811][ T5484] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 204.947201][ T5484] team0: Port device team_slave_0 added [ 204.973990][ T5484] team0: Port device team_slave_1 added [ 205.067745][ T3786] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 205.592070][ T3786] usb 2-1: Using ep0 maxpacket: 16 [ 205.678036][ T4331] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 205.970169][ T3786] usb 2-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 206.053020][ T3786] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.114690][ T3786] usb 2-1: Product: syz [ 206.119804][ T4331] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 206.133763][ T3786] usb 2-1: Manufacturer: syz [ 206.161793][ T4331] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 206.172695][ T3786] usb 2-1: SerialNumber: syz [ 206.190996][ T3786] usb 2-1: config 0 descriptor?? [ 206.206516][ T4331] usb 4-1: New USB device found, idVendor=056a, idProduct=00f8, bcdDevice= 4.00 [ 206.233024][ T4331] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.271114][ T3786] visor 2-1:0.0: Sony Clie 3.5 converter detected [ 206.289056][ T4331] usb 4-1: config 0 descriptor?? [ 206.315979][ T5484] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 206.326811][ T5484] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.437724][ T5484] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 206.470487][ T5484] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 206.488555][ T5484] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.570056][ T5484] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 206.700887][ T5484] device hsr_slave_0 entered promiscuous mode [ 206.721874][ T5484] device hsr_slave_1 entered promiscuous mode [ 206.742665][ T5484] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 206.750621][ T3786] usb 2-1: clie_3_5_startup: get interface number failed: -32 [ 206.758423][ T3786] visor: probe of 2-1:0.0 failed with error -32 [ 206.765761][ T5484] Cannot create hsr debugfs directory [ 206.781723][ T5671] netlink: 'syz.0.471': attribute type 5 has an invalid length. [ 206.835210][ T5658] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.870153][ T5658] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.929419][ T5658] input: syz1 as /devices/virtual/input/input22 [ 207.002764][ T4331] wacom 0003:056A:00F8.0015: unknown main item tag 0x0 [ 207.028811][ T4331] wacom 0003:056A:00F8.0015: hidraw0: USB HID v0.00 Device [HID 056a:00f8] on usb-dummy_hcd.3-1/input0 [ 207.377634][ T4069] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 207.898381][ T4069] usb 1-1: New USB device found, idVendor=0bfd, idProduct=001d, bcdDevice=f2.28 [ 208.058207][ T4069] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.131556][ T4069] usb 1-1: Product: syz [ 208.152137][ T4069] usb 1-1: Manufacturer: syz [ 208.175724][ T4069] usb 1-1: SerialNumber: syz [ 208.202652][ T4069] usb 1-1: config 0 descriptor?? [ 208.242030][ T14] usb 4-1: USB disconnect, device number 12 [ 208.269862][ T4069] kvaser_usb 1-1:0.0: Cannot get usb endpoint(s) [ 208.480525][ T3691] usb 1-1: USB disconnect, device number 12 [ 208.647729][ T14] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 209.817689][ T14] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 209.826805][ T14] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.898662][ T14] usb 4-1: config 0 descriptor?? [ 209.941764][ T4331] usb 2-1: USB disconnect, device number 8 [ 209.943287][ T14] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 209.990478][ T5715] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 210.177059][ T5484] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 210.210980][ T5484] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 210.270803][ T5484] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 210.339347][ T5484] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 211.092804][ T5728] loop1: detected capacity change from 0 to 4096 [ 211.286200][ T5728] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 211.439440][ T5484] 8021q: adding VLAN 0 to HW filter on device bond0 [ 211.476418][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 211.486627][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 211.529116][ T5484] 8021q: adding VLAN 0 to HW filter on device team0 [ 211.529895][ T5728] ntfs3: loop1: ino=1e, "file1" encrypted i/o not supported [ 211.576206][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 211.602700][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 211.614647][ T26] audit: type=1800 audit(1722026913.785:27): pid=5728 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.484" name="file1" dev="loop1" ino=30 res=0 errno=0 [ 211.622611][ T4393] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.641287][ T4393] bridge0: port 1(bridge_slave_0) entered forwarding state [ 211.652605][ T14] gspca_cpia1: usb_control_msg 03, error -71 [ 211.681057][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 211.689609][ T14] gspca_cpia1: usb_control_msg 04, error -71 [ 211.697039][ T14] cpia1: probe of 4-1:0.0 failed with error -71 [ 211.704306][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 211.724654][ T14] usb 4-1: USB disconnect, device number 13 [ 211.732162][ T4393] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.739378][ T4393] bridge0: port 2(bridge_slave_1) entered forwarding state [ 211.775729][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 211.828261][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 211.836461][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 211.873056][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 211.899384][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 211.930765][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 211.952026][ T22] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 211.959472][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 211.968867][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 211.988648][ T5742] Driver unsupported XDP return value 0 on prog (id 59) dev N/A, expect packet loss! [ 212.008166][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 212.037840][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 212.068084][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 212.094389][ T5484] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 212.119608][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 212.347831][ T22] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 212.369062][ T22] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 212.372434][ T5755] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 212.409106][ T22] usb 3-1: New USB device found, idVendor=056a, idProduct=00f8, bcdDevice= 4.00 [ 212.449849][ T22] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.508513][ T22] usb 3-1: config 0 descriptor?? [ 212.657574][ T4331] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 212.860483][ T3786] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 212.869663][ T3786] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 212.880092][ T7] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 212.887484][ T5484] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 212.902193][ T5769] loop3: detected capacity change from 0 to 256 [ 212.990814][ T5740] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.029442][ T5740] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.055888][ T26] audit: type=1804 audit(1722026915.225:28): pid=5769 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.496" name="/newroot/119/file0/file1" dev="loop3" ino=1048607 res=1 errno=0 [ 213.060429][ T5740] input: syz1 as /devices/virtual/input/input26 [ 213.088434][ T4331] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 213.102633][ T26] audit: type=1326 audit(1722026915.275:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5767 comm="syz.3.496" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f23aeb77299 code=0x0 [ 213.135483][ T4331] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 213.137686][ T7] usb 2-1: Using ep0 maxpacket: 16 [ 213.153261][ T22] wacom 0003:056A:00F8.0016: unknown main item tag 0x0 [ 213.170701][ T22] wacom 0003:056A:00F8.0016: hidraw0: USB HID v0.00 Device [HID 056a:00f8] on usb-dummy_hcd.2-1/input0 [ 213.184394][ T4331] usb 1-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 213.201277][ T4331] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.285603][ T4331] usb 1-1: config 0 descriptor?? [ 213.458016][ T7] usb 2-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 213.467138][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.476288][ T7] usb 2-1: Product: syz [ 213.480885][ T7] usb 2-1: Manufacturer: syz [ 213.485538][ T7] usb 2-1: SerialNumber: syz [ 213.493606][ T7] usb 2-1: config 0 descriptor?? [ 213.539292][ T7] visor 2-1:0.0: Sony Clie 3.5 converter detected [ 213.597700][ T3691] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 213.706305][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 213.717015][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 213.795312][ T3725] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 213.806287][ T3725] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 213.818848][ T4331] lg-g15 0003:046D:C222.0017: unknown main item tag 0x0 [ 213.825870][ T4331] lg-g15 0003:046D:C222.0017: unbalanced collection at end of report description [ 213.837775][ T3691] usb 4-1: Using ep0 maxpacket: 16 [ 213.838502][ T4331] lg-g15: probe of 0003:046D:C222.0017 failed with error -22 [ 213.889602][ T3687] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 213.899079][ T3687] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 213.908711][ T5484] device veth0_vlan entered promiscuous mode [ 213.939417][ T3687] usb 3-1: USB disconnect, device number 5 [ 213.958087][ T3691] usb 4-1: config 183 has too many interfaces: 145, using maximum allowed: 32 [ 213.977349][ T3691] usb 4-1: config 183 has an invalid interface association descriptor of length 5, skipping [ 213.990333][ T7] usb 2-1: clie_3_5_startup: get interface number failed: -32 [ 214.008148][ T7] visor: probe of 2-1:0.0 failed with error -32 [ 214.020186][ T3691] usb 4-1: config 183 has an invalid descriptor of length 0, skipping remainder of the config [ 214.053070][ T3691] usb 4-1: config 183 has 0 interfaces, different from the descriptor's value: 145 [ 214.087794][ T3725] usb 1-1: USB disconnect, device number 13 [ 214.147821][ T5484] device veth1_vlan entered promiscuous mode [ 214.237795][ T3691] usb 4-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice= f.88 [ 214.254943][ T3691] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.287095][ T3691] usb 4-1: Product: syz [ 214.298508][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 214.304161][ T3691] usb 4-1: Manufacturer: syz [ 214.306893][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 214.328153][ T3691] usb 4-1: SerialNumber: syz [ 214.356370][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 214.564678][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 214.623741][ T5799] loop2: detected capacity change from 0 to 4096 [ 214.921009][ T5799] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 215.368643][ T5484] device veth0_macvtap entered promiscuous mode [ 215.387872][ T3786] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 215.416326][ T5484] device veth1_macvtap entered promiscuous mode [ 215.457829][ T5799] ntfs3: loop2: ino=1e, "file1" encrypted i/o not supported [ 215.477321][ T26] audit: type=1800 audit(1722026917.645:30): pid=5799 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.498" name="file1" dev="loop2" ino=30 res=0 errno=0 [ 215.629417][ T5484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.645604][ T5484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.656024][ T5484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.669045][ T5484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.686071][ T5484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.703503][ T5484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.715073][ T5484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.726571][ T5484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.736978][ T5484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.748750][ T5484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.758864][ T5484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.769631][ T5484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.790840][ T5484] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 215.926385][ T3691] usb 4-1: USB disconnect, device number 14 [ 215.958050][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 215.974132][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 215.996442][ T5484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 216.052075][ T5484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.085086][ T5484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 216.111774][ T5484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.128987][ T5484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 216.148341][ T5484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.187783][ T5484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 216.211856][ T5484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.234061][ T5484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 216.237567][ T3687] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 216.270871][ T5484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.292867][ T5484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 216.316897][ T5484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.340261][ T5484] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 216.397927][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 216.412397][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 216.426972][ T5832] Falling back ldisc for ptm0. [ 216.541462][ T22] usb 2-1: USB disconnect, device number 9 [ 216.626143][ T5484] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.626181][ T5484] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.626209][ T5484] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.626235][ T5484] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.637865][ T3687] usb 3-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 216.637901][ T3687] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.639966][ T3687] usb 3-1: config 0 descriptor?? [ 216.681253][ T3687] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 216.907820][ T3691] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 217.046417][ T3799] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 217.089423][ T3799] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 217.192525][ T3725] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 217.268328][ T3691] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 217.284553][ T3691] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 217.307061][ T3691] usb 4-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 217.326660][ T3691] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.349480][ T3691] usb 4-1: config 0 descriptor?? [ 217.363317][ T5858] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 217.516835][ T4626] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 217.546762][ T4626] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 217.620547][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 217.829186][ T5871] netlink: 36 bytes leftover after parsing attributes in process `syz.4.412'. [ 217.832139][ T3691] lg-g15 0003:046D:C222.0018: unknown main item tag 0x0 [ 217.847091][ T3691] lg-g15 0003:046D:C222.0018: unbalanced collection at end of report description [ 217.868830][ T3691] lg-g15: probe of 0003:046D:C222.0018 failed with error -22 [ 217.897798][ T3712] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 217.924077][ T5876] loop4: detected capacity change from 0 to 512 [ 217.943365][ T5036] device hsr_slave_0 left promiscuous mode [ 217.958991][ T5036] device hsr_slave_1 left promiscuous mode [ 217.985921][ T5036] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 217.995990][ T5876] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 218.029166][ T5876] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 218.032659][ T5036] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 218.046092][ T3687] gspca_cpia1: usb_control_msg 03, error -71 [ 218.080328][ T22] usb 4-1: USB disconnect, device number 15 [ 218.088074][ T3687] gspca_cpia1: usb_control_msg 04, error -71 [ 218.094182][ T3687] cpia1: probe of 3-1:0.0 failed with error -71 [ 218.095616][ T5876] EXT4-fs (loop4): ea_inode feature is not supported for Hurd [ 218.157607][ T3712] usb 1-1: Using ep0 maxpacket: 16 [ 218.160178][ T3687] usb 3-1: USB disconnect, device number 6 [ 218.183675][ T5036] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 218.203377][ T5036] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 218.216840][ T5036] device bridge_slave_1 left promiscuous mode [ 218.258756][ T5036] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.308573][ T3712] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 204, changing to 7 [ 218.321025][ T5036] device bridge_slave_0 left promiscuous mode [ 218.325471][ T3712] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1040, setting to 1024 [ 218.327284][ T5036] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.405642][ T5036] device hsr_slave_0 left promiscuous mode [ 218.423381][ T5036] device hsr_slave_1 left promiscuous mode [ 218.441617][ T5036] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 218.460119][ T5036] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 218.486477][ T5036] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 218.502362][ T5036] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 218.521576][ T5036] device bridge_slave_1 left promiscuous mode [ 218.528705][ T3712] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 218.541955][ T3712] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.557348][ T5036] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.571479][ T3712] usb 1-1: Product: 閮８騬ꭗ툵✕캑鐆껑驲冎榻༝꟎㰣㐘왞釯뭨涎ݏ涌勣᤻殉⠉䴻ʻ쾵늗邢뒂蟕䶞僧㝜奎룪֣ᥠ試ᇽ﵇屼騎풻⢕û뿓笓偎 [ 218.665067][ T3712] usb 1-1: SerialNumber: syz [ 218.698219][ T5036] device bridge_slave_0 left promiscuous mode [ 218.708472][ T5036] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.976032][ T5864] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.463999][ T5864] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 219.790768][ T5898] loop2: detected capacity change from 0 to 2048 [ 219.829782][ T5864] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.876945][ T5900] loop3: detected capacity change from 0 to 1024 [ 219.878094][ T5898] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 219.887395][ T5864] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 219.965135][ T26] audit: type=1804 audit(1722026922.135:31): pid=5898 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.521" name="/newroot/26/file0/bus" dev="loop2" ino=16 res=1 errno=0 [ 219.996916][ T5036] device veth1_macvtap left promiscuous mode [ 220.011606][ T5036] device veth0_macvtap left promiscuous mode [ 220.035582][ T5036] device veth1_vlan left promiscuous mode [ 220.054109][ T5036] device veth0_vlan left promiscuous mode [ 220.082944][ T5036] device veth1_macvtap left promiscuous mode [ 220.113693][ T5036] device veth0_macvtap left promiscuous mode [ 220.124449][ T5036] device veth1_vlan left promiscuous mode [ 220.130924][ T5036] device veth0_vlan left promiscuous mode [ 220.137935][ T3712] usb 1-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 220.152066][ T5372] EXT4-fs (loop2): unmounting filesystem. [ 220.210831][ T3712] usb 1-1: USB disconnect, device number 14 [ 220.256693][ T4254] udevd[4254]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 220.327637][ T7] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 220.403529][ T5915] loop2: detected capacity change from 0 to 512 [ 220.441456][ T5915] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 220.482835][ T5915] EXT4-fs (loop2): 1 truncate cleaned up [ 220.490837][ T5915] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 220.533203][ T5915] deleting an unspecified loop device is not supported. [ 220.579278][ T5372] EXT4-fs (loop2): unmounting filesystem. [ 220.587827][ T7] usb 4-1: Using ep0 maxpacket: 8 [ 220.717927][ T7] usb 4-1: New USB device found, idVendor=0763, idProduct=1021, bcdDevice=1c.62 [ 220.734794][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.763562][ T5919] loop2: detected capacity change from 0 to 1024 [ 220.766572][ T7] usb 4-1: config 0 descriptor?? [ 220.784588][ T5919] ext4: Unknown parameter 'subj_user' [ 220.882706][ T5921] loop0: detected capacity change from 0 to 8192 [ 220.904077][ T5921] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 220.926041][ T5921] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 220.938214][ T5921] REISERFS (device loop0): using ordered data mode [ 220.945168][ T5921] reiserfs: using flush barriers [ 220.965222][ T5921] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 220.983232][ T5921] REISERFS (device loop0): checking transaction log (loop0) [ 220.992984][ T7] snd-usb-audio: probe of 4-1:0.0 failed with error -2 [ 221.160506][ T5921] REISERFS (device loop0): Using tea hash to sort names [ 221.185820][ T5921] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 221.229559][ T3791] udevd[3791]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 222.632198][ T5036] team0 (unregistering): Port device team_slave_1 removed [ 222.678928][ T5036] team0 (unregistering): Port device team_slave_0 removed [ 222.721215][ T5036] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 222.769016][ T5036] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 223.127662][ T3107] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 223.241595][ T5036] bond0 (unregistering): Released all slaves [ 223.487961][ T3107] usb 1-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 223.498584][ T3107] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.516140][ T3107] usb 1-1: config 0 descriptor?? [ 223.562832][ T3107] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 223.673112][ T5036] team0 (unregistering): Port device team_slave_1 removed [ 223.714896][ T5036] team0 (unregistering): Port device team_slave_0 removed [ 223.753464][ T5036] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 223.802013][ T5036] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 224.206117][ T5036] bond0 (unregistering): Released all slaves [ 224.302403][ T5914] netlink: 4 bytes leftover after parsing attributes in process `syz.4.523'. [ 224.312030][ T5881] Falling back ldisc for ptm0. [ 224.313109][ T5914] netlink: 'syz.4.523': attribute type 18 has an invalid length. [ 224.330504][ T5914] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 224.339733][ T5914] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 224.349223][ T5914] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 224.358079][ T5914] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 224.376885][ T5914] device vxlan0 entered promiscuous mode [ 224.385727][ T5919] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 224.454753][ T3687] usb 4-1: USB disconnect, device number 16 [ 224.716367][ T5944] loop2: detected capacity change from 0 to 512 [ 224.777556][ T5944] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 224.857712][ T7] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 224.869199][ T5944] EXT4-fs (loop2): 1 truncate cleaned up [ 224.878322][ T5944] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 224.903678][ T3107] gspca_cpia1: usb_control_msg 03, error -71 [ 224.941176][ T3107] gspca_cpia1: usb_control_msg 04, error -71 [ 224.998032][ T3107] cpia1: probe of 1-1:0.0 failed with error -71 [ 225.016839][ T5951] loop4: detected capacity change from 0 to 8192 [ 225.041373][ T3107] usb 1-1: USB disconnect, device number 15 [ 225.048232][ T5951] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 225.064876][ T5951] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 225.076226][ T5951] REISERFS (device loop4): using ordered data mode [ 225.082868][ T5951] reiserfs: using flush barriers [ 225.096676][ T5951] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 225.137113][ T5951] REISERFS (device loop4): checking transaction log (loop4) [ 225.230000][ T7] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 225.267211][ T7] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 225.267266][ T7] usb 2-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 225.267295][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.270319][ T7] usb 2-1: config 0 descriptor?? [ 225.326857][ T5372] EXT4-fs (loop2): unmounting filesystem. [ 225.583890][ T5951] REISERFS (device loop4): Using tea hash to sort names [ 225.628005][ T5951] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 225.770882][ T7] lg-g15 0003:046D:C222.0019: unknown main item tag 0x0 [ 225.813241][ T7] lg-g15 0003:046D:C222.0019: unbalanced collection at end of report description [ 225.866348][ T7] lg-g15: probe of 0003:046D:C222.0019 failed with error -22 [ 226.003099][ T3786] usb 2-1: USB disconnect, device number 10 [ 226.394226][ T5989] loop4: detected capacity change from 0 to 1024 [ 226.782816][ T22] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 227.027644][ T22] usb 5-1: Using ep0 maxpacket: 8 [ 227.153897][ T6015] loop3: detected capacity change from 0 to 128 [ 227.178244][ T22] usb 5-1: New USB device found, idVendor=0763, idProduct=1021, bcdDevice=1c.62 [ 227.178279][ T22] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.182834][ T22] usb 5-1: config 0 descriptor?? [ 227.359065][ T6019] netlink: 36 bytes leftover after parsing attributes in process `syz.0.558'. [ 227.376312][ T22] snd-usb-audio: probe of 5-1:0.0 failed with error -2 [ 227.406186][ T3791] udevd[3791]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 227.461434][ T6025] loop0: detected capacity change from 0 to 512 [ 227.695484][ T6025] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 227.695513][ T6025] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 227.695532][ T6025] EXT4-fs (loop0): ea_inode feature is not supported for Hurd [ 228.601602][ T6032] loop1: detected capacity change from 0 to 128 [ 228.629026][ T6032] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 228.783502][ T26] audit: type=1804 audit(1722026930.925:32): pid=6032 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.560" name="/newroot/38/file0/bus" dev="loop1" ino=1048611 res=1 errno=0 [ 228.813520][ T6032] syz.1.560: attempt to access beyond end of device [ 228.813520][ T6032] loop1: rw=2049, sector=144, nr_sectors = 1 limit=128 [ 228.909112][ T6032] Buffer I/O error on dev loop1, logical block 144, lost async page write [ 229.070655][ T11] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 229.149758][ T4393] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 229.186133][ C1] [ 229.188513][ C1] ================================ [ 229.193616][ C1] WARNING: inconsistent lock state [ 229.198717][ C1] 6.1.101-syzkaller #0 Not tainted [ 229.203816][ C1] -------------------------------- [ 229.208915][ C1] inconsistent {HARDIRQ-ON-W} -> {IN-HARDIRQ-W} usage. [ 229.215752][ C1] syz.1.566/6049 [HC1[1]:SC0[0]:HE0:SE1] takes: [ 229.221990][ C1] ffff8880b9935e90 (lock#11){?.+.}-{2:2}, at: __mmap_lock_do_trace_acquire_returned+0x84/0x670 [ 229.232377][ C1] {HARDIRQ-ON-W} state was registered at: [ 229.238094][ C1] lock_acquire+0x1f8/0x5a0 [ 229.242685][ C1] __mmap_lock_do_trace_acquire_returned+0x9d/0x670 [ 229.249355][ C1] do_mprotect_pkey+0xb9f/0xbe0 [ 229.254290][ C1] __x64_sys_mprotect+0x7c/0x90 [ 229.259229][ C1] do_syscall_64+0x3b/0xb0 [ 229.263736][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 229.269715][ C1] irq event stamp: 32 [ 229.273686][ C1] hardirqs last enabled at (31): [] kasan_quarantine_put+0xd4/0x220 [ 229.283317][ C1] hardirqs last disabled at (32): [] sysvec_call_function_single+0xa/0xb0 [ 229.293377][ C1] softirqs last enabled at (0): [] copy_process+0x9e1/0x4060 [ 229.302395][ C1] softirqs last disabled at (0): [<0000000000000000>] 0x0 [ 229.309539][ C1] [ 229.309539][ C1] other info that might help us debug this: [ 229.317586][ C1] Possible unsafe locking scenario: [ 229.317586][ C1] [ 229.325112][ C1] CPU0 [ 229.328381][ C1] ---- [ 229.331650][ C1] lock(lock#11); [ 229.335373][ C1] [ 229.338818][ C1] lock(lock#11); [ 229.342715][ C1] [ 229.342715][ C1] *** DEADLOCK *** [ 229.342715][ C1] [ 229.350851][ C1] 3 locks held by syz.1.566/6049: [ 229.355866][ C1] #0: ffffffff8d91a588 (tomoyo_ss){....}-{0:0}, at: tomoyo_path_number_perm+0x1f2/0x7f0 [ 229.365700][ C1] #1: ffffffff8d32ad40 (rcu_read_lock){....}-{1:2}, at: bpf_trace_run2+0x110/0x410 [ 229.375100][ C1] #2: ffff88801c122e58 (&mm->mmap_lock){++++}-{3:3}, at: stack_map_get_build_id_offset+0x232/0x9c0 [ 229.385907][ C1] [ 229.385907][ C1] stack backtrace: [ 229.391988][ C1] CPU: 1 PID: 6049 Comm: syz.1.566 Not tainted 6.1.101-syzkaller #0 [ 229.399976][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 229.410050][ C1] Call Trace: [ 229.413332][ C1] [ 229.416172][ C1] dump_stack_lvl+0x1e3/0x2cb [ 229.420860][ C1] ? nf_tcp_handle_invalid+0x642/0x642 [ 229.426327][ C1] ? print_usage_bug+0x5fe/0x880 [ 229.431274][ C1] valid_state+0x136/0x1c0 [ 229.435696][ C1] mark_lock_irq+0xa8/0xba0 [ 229.440205][ C1] ? stack_trace_save+0x113/0x1c0 [ 229.445231][ C1] ? save_trace+0xab0/0xab0 [ 229.449754][ C1] ? stack_trace_snprint+0xe0/0xe0 [ 229.454887][ C1] ? lockdep_lock+0x11f/0x2a0 [ 229.459565][ C1] ? save_trace+0x5a/0xab0 [ 229.463991][ C1] mark_lock+0x21c/0x340 [ 229.468254][ C1] __lock_acquire+0xb40/0x1f80 [ 229.473035][ C1] lock_acquire+0x1f8/0x5a0 [ 229.477542][ C1] ? __mmap_lock_do_trace_acquire_returned+0x84/0x670 [ 229.484308][ C1] ? read_lock_is_recursive+0x10/0x10 [ 229.489691][ C1] ? down_read_trylock+0x24a/0x3b0 [ 229.494808][ C1] ? stack_map_get_build_id_offset+0x232/0x9c0 [ 229.500971][ C1] ? __mmap_lock_do_trace_acquire_returned+0x84/0x670 [ 229.507753][ C1] __mmap_lock_do_trace_acquire_returned+0x9d/0x670 [ 229.514362][ C1] ? __mmap_lock_do_trace_acquire_returned+0x84/0x670 [ 229.521148][ C1] stack_map_get_build_id_offset+0x99e/0x9c0 [ 229.527231][ C1] ? __lock_acquire+0x125b/0x1f80 [ 229.532269][ C1] ? __bpf_get_stackid+0x910/0x910 [ 229.537388][ C1] __bpf_get_stack+0x495/0x570 [ 229.542161][ C1] ? stack_map_get_build_id_offset+0x9c0/0x9c0 [ 229.548317][ C1] ? ktime_get+0x7f/0x270 [ 229.552648][ C1] ? __cant_sleep+0x270/0x270 [ 229.557325][ C1] bpf_get_stack_raw_tp+0x1b2/0x220 [ 229.562534][ C1] bpf_prog_ec3b2eefa702d8d3+0x3a/0x3e [ 229.567990][ C1] bpf_trace_run2+0x1fd/0x410 [ 229.572753][ C1] ? bpf_trace_run2+0x110/0x410 [ 229.577618][ C1] ? bpf_trace_run1+0x3d0/0x3d0 [ 229.582485][ C1] ? flush_tlb_one_user+0x50/0x50 [ 229.587522][ C1] trace_tlb_flush+0x151/0x1a0 [ 229.592303][ C1] flush_tlb_func+0x4e3/0x620 [ 229.596996][ C1] ? native_flush_tlb_multi+0xd0/0xd0 [ 229.602373][ C1] ? sched_clock_cpu+0x71/0x2b0 [ 229.607225][ C1] ? irqtime_account_irq+0xd0/0x1e0 [ 229.612438][ C1] ? __sched_clock_gtod_offset+0xe0/0xe0 [ 229.618073][ C1] __flush_smp_call_function_queue+0x2d9/0xd00 [ 229.624247][ C1] ? native_flush_tlb_multi+0xd0/0xd0 [ 229.629626][ C1] __sysvec_call_function_single+0xbb/0x360 [ 229.635515][ C1] sysvec_call_function_single+0x89/0xb0 [ 229.641143][ C1] [ 229.644091][ C1] [ 229.647019][ C1] asm_sysvec_call_function_single+0x16/0x20 [ 229.653000][ C1] RIP: 0010:tomoyo_check_path_number_acl+0x8a/0x270 [ 229.659586][ C1] Code: 97 fd 83 fb 1f 0f 87 e5 01 00 00 e8 a0 38 97 fd bd 01 00 00 00 89 d9 d3 e5 89 ee 44 21 e6 31 ff e8 eb 3b 97 fd 44 21 e5 74 58 <49> 8d 5f 20 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 [ 229.679186][ C1] RSP: 0018:ffffc90005897b68 EFLAGS: 00000202 [ 229.685253][ C1] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 0000000000000004 [ 229.693325][ C1] RDX: ffff888077110000 RSI: 0000000000000010 RDI: 0000000000000000 [ 229.701401][ C1] RBP: 0000000000000010 R08: ffffffff83f36305 R09: ffffffff83f49e38 [ 229.709376][ C1] R10: 0000000000000002 R11: ffff888077110000 R12: 0000000000000010 [ 229.717438][ C1] R13: dffffc0000000000 R14: ffff88801837ae80 R15: ffffc90005897ce0 [ 229.725421][ C1] ? tomoyo_fill_path_info+0x98/0x380 [ 229.730800][ C1] ? tomoyo_check_path_number_acl+0x85/0x270 [ 229.736781][ C1] ? tomoyo_check_path_number_acl+0x85/0x270 [ 229.742757][ C1] tomoyo_check_acl+0x126/0x3e0 [ 229.747613][ C1] ? tomoyo_path_number_perm+0x7f0/0x7f0 [ 229.753246][ C1] tomoyo_path_number_perm+0x430/0x7f0 [ 229.758705][ C1] ? tomoyo_path_number_perm+0x1f2/0x7f0 [ 229.764338][ C1] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 229.769801][ C1] ? __fget_files+0x28/0x4a0 [ 229.774396][ C1] ? __fget_files+0x28/0x4a0 [ 229.778981][ C1] ? __fget_files+0x435/0x4a0 [ 229.783655][ C1] ? __fget_files+0x28/0x4a0 [ 229.788246][ C1] security_file_ioctl+0x6d/0xa0 [ 229.793180][ C1] __se_sys_ioctl+0x47/0x160 [ 229.797780][ C1] do_syscall_64+0x3b/0xb0 [ 229.802198][ C1] ? clear_bhb_loop+0x45/0xa0 [ 229.806877][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 229.812776][ C1] RIP: 0033:0x7f15c6576e9b [ 229.817191][ C1] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 229.836814][ C1] RSP: 002b:00007f15c7439070 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 229.845269][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f15c6576e9b [ 229.853245][ C1] RDX: 0000000000000000 RSI: 0000000000006364 RDI: 00000000000000d8 [ 229.861215][ C1] RBP: 00007f15c6705f80 R08: 0000000000000000 R09: 00007fffa35a3e77 [ 229.869184][ C1] R10: 0000000000000008 R11: 0000000000000246 R12: ffffffffffffffa8 [ 229.877152][ C1] R13: 000000000000000b R14: 00007fffa35a3d90 R15: 00007fffa35a3e78 [ 229.885129][ C1] [ 229.929051][ T22] usb 5-1: USB disconnect, device number 10 [ 230.240007][ T4393] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 230.251604][ T4393] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 230.261812][ T4393] usb 3-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 230.270910][ T4393] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.280375][ T4393] usb 3-1: config 0 descriptor?? [ 230.759529][ T4393] lg-g15 0003:046D:C222.001A: unknown main item tag 0x0 [ 230.767175][ T4393] lg-g15 0003:046D:C222.001A: unbalanced collection at end of report description [ 230.778126][ T4393] lg-g15: probe of 0003:046D:C222.001A failed with error -22 [ 230.965944][ T4393] usb 3-1: USB disconnect, device number 7