last executing test programs: 3.722255106s ago: executing program 2 (id=1243): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x0, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9, 0x84, 0x144}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r4}, 0x38) unshare(0x22020600) openat2(0xffffffffffffffff, &(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x8}, 0x18) 2.920194512s ago: executing program 0 (id=1251): syz_emit_ethernet(0x36, &(0x7f0000000440)={@multicast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x28, 0x28, 0x0, 0x0, 0x0, 0x88, 0x0, @empty, @broadcast}, @timestamp_reply={0xe, 0x0, 0x0, 0x3, 0xfff7}}}}}, 0x0) r0 = syz_usb_connect$cdc_ecm(0x0, 0x76, &(0x7f0000000a00)=ANY=[@ANYBLOB="12011003020000202505a1a44000000001010902640001010000000904000012609ce798ba8c9802060000052406000005240000000d240f01040000000000ff070005240101d707241408002d030008241c04800309000c241b070059ea9fa622f4624905810300020104cf0905820200027f00000905"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x810}}]}) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$binder(0x0, &(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0), 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='stats=']) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000240), 0x25, 0x4b6, &(0x7f0000000540)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) pwritev2(r4, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5406, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x103042, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0xfffffdef) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) getdents64(r2, 0x0, 0x4100) ioctl$BLKFRASET(r2, 0x1264, &(0x7f0000000140)=0x8) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={@ifindex, 0x0, 0x1, 0x80, &(0x7f0000000280)=[0x0], 0x1, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000440)={@cgroup=r5, r4, 0x13, 0x20, 0x0, @link_id, r7}, 0x20) ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f0000000040)={0x0, 0x8000000, 0xa, 0x14, 0x0, 0x3e, 0x1}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000480), 0x109242, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') 2.854430227s ago: executing program 4 (id=1252): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000580)={0x0, 0x1, 0x0, &(0x7f0000000100)=""/47, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f0000000500)=""/69, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000016c0)) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af00, &(0x7f00000000c0)) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000180)=r1) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0x1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000380)={0x1, r1}) 2.757654255s ago: executing program 4 (id=1253): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f00000000c0)='./bus\x00', 0xa08886, &(0x7f0000000040)=ANY=[], 0x3, 0x2b9, &(0x7f0000000ac0)="$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") r0 = open(&(0x7f0000000100)='./file0\x00', 0x60c2, 0x0) r1 = open$dir(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000300), 0x16) r3 = dup3(r2, r0, 0x0) sendfile(r3, r1, 0x0, 0x800008038) sendfile(r0, r1, 0x0, 0xef84) syz_emit_ethernet(0x46, 0x0, 0x0) 2.19925922s ago: executing program 1 (id=1257): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$UHID_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000540)=""/32, 0x20}}, 0x120) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000000000040341a02080000000000010902"], 0x0) r0 = syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) poll(&(0x7f00000000c0)=[{r0}], 0x1, 0x0) 1.927982493s ago: executing program 3 (id=1260): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x90) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000000)=0xffb) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2004cb], 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.83727689s ago: executing program 4 (id=1261): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@bridge_delneigh={0x1c, 0x1d, 0x1}, 0x1c}}, 0x0) 1.782301545s ago: executing program 2 (id=1262): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000004850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xe, 0x4, 0x4, 0x5}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001040)={&(0x7f0000001000)='signal_generate\x00', r2}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r3}, 0x10) 1.725696929s ago: executing program 3 (id=1263): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2008002, &(0x7f0000000080), 0x1, 0x53d, &(0x7f0000000a80)="$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") lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x5c, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000001c0)="2e00000010008188040f46ecdb4cb9cca7480ef40f000000e3bd6efb010509000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x0) 1.707682351s ago: executing program 2 (id=1264): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f0000000500)=""/69, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000016c0)) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af00, &(0x7f00000000c0)) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000180)=r1) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0x1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000380)={0x1, r1}) 1.644202156s ago: executing program 4 (id=1265): syz_mount_image$xfs(&(0x7f0000009800), &(0x7f0000000040)='./file0\x00', 0x884, &(0x7f0000000180)={[{@quota}, {@grpid}]}, 0x1, 0x99e7, &(0x7f000003eb40)="$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") symlinkat(&(0x7f00000001c0)='./file7\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file6\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000b80)='./file6\x00', 0xffffffffffffff9c, 0x0, 0x0) 1.643582856s ago: executing program 2 (id=1266): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000108500000075000000a40000002300000095"], 0x0}, 0x90) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000040)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f00000000c0)='netlink_extack\x00', r0}, 0x11) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@migrate={0x27c, 0x21, 0x1, 0x0, 0x0, {{@in, @in6=@remote}}, [@migrate={0x219, 0x11, [{@in=@multicast1, @in=@local, @in=@local, @in=@broadcast}, {@in=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@multicast2, @in6=@empty}, {@in=@empty, @in=@private, @in6=@remote, @in6=@mcast2}, {@in=@local, @in6=@local, @in6=@empty, @in6=@private2}, {@in=@broadcast, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in=@private, @in=@dev}, {@in6=@mcast2, @in=@broadcast, @in6=@private2, @in6=@remote}]}, @policy_type={0xa}, @replay_esn_val={0x40, 0x17, {0x9, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, @proto={0x5}, @mark={0xc}]}, 0x27c}}, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8943, 0x0) 1.540878484s ago: executing program 2 (id=1267): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) open(&(0x7f0000000080)='./bus\x00', 0xa942, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./bus\x00', 0x12508, &(0x7f0000000440)={[{@errors_continue}, {@grpjquota}, {@sb={'sb', 0x3d, 0x1000}}]}, 0x0, 0x515, &(0x7f0000001400)="$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") mkdir(&(0x7f0000000300)='./bus\x00', 0x0) 1.46313581s ago: executing program 2 (id=1268): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000cc0)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000f80)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)={0x40, 0x13, 0x6, @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000012c0)={0x44, &(0x7f0000001040)=ANY=[@ANYBLOB="08000100"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 1.293568814s ago: executing program 3 (id=1269): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @hsr={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8}]}}}]}, 0x38}}, 0x0) 1.152920446s ago: executing program 3 (id=1270): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff}, 0x48) 1.152726596s ago: executing program 3 (id=1271): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x38, 0x54, 0x1e5, 0x0, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x0, 0x0, {@ip4=@broadcast}}}]}, 0x38}}, 0x0) 1.115590599s ago: executing program 3 (id=1272): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x0, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9, 0x84, 0x144}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r4}, 0x38) unshare(0x22020600) openat2(0xffffffffffffffff, &(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x8}, 0x18) 680.486905ms ago: executing program 0 (id=1273): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x90) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000000)=0xffb) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2004cb], 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 624.69838ms ago: executing program 4 (id=1274): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000004850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xe, 0x4, 0x4, 0x5}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001040)={&(0x7f0000001000)='signal_generate\x00', r2}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r3}, 0x10) 591.761172ms ago: executing program 1 (id=1275): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f00000000c0)='./bus\x00', 0xa08886, &(0x7f0000000040)=ANY=[], 0x3, 0x2b9, &(0x7f0000000ac0)="$eJzs3U1oE2kYwPGnH9t2u7QJy7KwC7v77PayigxNzkIbpBUxUNFGqgVhaicaMiYhE6Ip0kQQevHgxa+zCiKFgngQhFIPnqRFevPgrbcerCeLiCPp9COp6Qc1bQr9/w7tQ573mTx538mQvIFk/ujtK/GoY0TNjNS31El9txRksU78Ui8rCnLo6sTbv86cO38yFA73nFbtDfUHgqra/s/k4PXx/6Yyv5x93v6yWab9F+YXgnPTv0//Mf+1/3LM0ZijiWRGTR1KJjPmkG3p8F0nbqiesi3TsTSWcKx0WT5qJ1OpnJqJ4bbWVNpyHDUTOY1bOc0kNZPOqXnJjCXUMAxtaxVsbjz7ILRxNvJ00XVlIfPGdZsL4rpu8caWPWwPNba0/q5bsv63at0S9lDJRb1FxB7LRrIR77+XD0UlJrZY0ik++SLFc8R9OOEunSrFv9eCE+HZw69fqapfRu38cn0+G2korw+IT/xejceLe0+EewLqKa//SVpL64Pik98q1wcr1jfJ/x0l9Yb4ZPaiJMWWmcl/P831jd1bqR8NqB7rC6+r/1mG16bpyccarQ8AAAAAAAAAADth6KqK+/dGccDNEVVtW5f36it9PrB+f76z4v58o/zZWNvHDgAAAADAQeHkRuKmbVvpHwyKb+WrcZzqB81S2zYe3dj+4L97Nx/T0dUw0/2ukLKtdF72x/RuJ/g8sC/aKA9kefdpq8ENVX6mrAUfqnKcuuX+Nh5zfPD9sy2P0/Td/GxkavevSgAAAAB2w9qL/i7JR19k8wNH7tS6JwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADpodfOXYzP1KKS0Gvz6ulFq9M+/3xQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPaVbwEAAP//u5TQrw==") r0 = open(&(0x7f0000000100)='./file0\x00', 0x60c2, 0x0) r1 = open$dir(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000300), 0x16) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'ip6tnl0\x00', 0x0}) sendfile(0xffffffffffffffff, r1, 0x0, 0x800008038) sendfile(r0, r1, 0x0, 0xef84) syz_emit_ethernet(0x46, 0x0, 0x0) 445.902904ms ago: executing program 0 (id=1276): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f0000000500)=""/69, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000016c0)) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af00, &(0x7f00000000c0)) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000180)=r1) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0x1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000380)={0x1, r1}) 388.935649ms ago: executing program 1 (id=1277): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) write$tun(0xffffffffffffffff, 0x0, 0x0) socket(0x1e, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r0 = socket(0x0, 0x0, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x7, 0x5}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000007d00000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) socket$pppoe(0x18, 0x1, 0x0) request_key(&(0x7f0000000040)='ceph\x00', &(0x7f0000000240)={'syz', 0x1}, &(0x7f0000000280)=',\x00', 0x0) 314.220125ms ago: executing program 0 (id=1278): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f0000000240), 0x21, 0x4a6, &(0x7f0000000a40)="$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") open(&(0x7f0000000080)='./bus\x00', 0xa942, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./bus\x00', 0x12508, &(0x7f0000000440)={[{@errors_continue}, {@grpjquota}, {@sb={'sb', 0x3d, 0x1000}}]}, 0x0, 0x515, &(0x7f0000001400)="$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") mkdir(&(0x7f0000000300)='./bus\x00', 0x0) 226.191822ms ago: executing program 1 (id=1279): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x0) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000005100)={&(0x7f0000005040)={0x28, 0x0, 0x400, 0x0, 0x0, {}, [@GTPA_FLOW={0x6}, @GTPA_TID={0xc}]}, 0x28}}, 0x0) 140.229879ms ago: executing program 0 (id=1280): unshare(0x22020400) r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, 0x0, 0x0) 139.887619ms ago: executing program 1 (id=1281): getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000240)) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000000c0)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='batadv0\x00', 0x10) sendmmsg$inet6(r0, &(0x7f0000001600)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="8252", 0x2}], 0x1}}], 0x1, 0x4000c000) sendto$inet6(r0, &(0x7f0000000300), 0x16, 0x0, 0x0, 0xfffffffffffffdfd) 77.068144ms ago: executing program 0 (id=1282): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x7, 0x10001, 0x9, 0x1}, 0x48) 45.017927ms ago: executing program 1 (id=1283): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x31, &(0x7f0000000500)=@ringbuf={{}, {}, {}, [@kfunc, @ringbuf_query, @initr0, @printk, @map_val, @cb_func, @snprintf, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}]}, 0x0}, 0x90) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xb) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xff7f}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0x0) 0s ago: executing program 4 (id=1284): syz_emit_ethernet(0x36, &(0x7f0000000440)={@multicast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x28, 0x28, 0x0, 0x0, 0x0, 0x88, 0x0, @empty, @broadcast}, @timestamp_reply={0xe, 0x0, 0x0, 0x3, 0xfff7}}}}}, 0x0) r0 = syz_usb_connect$cdc_ecm(0x0, 0x76, &(0x7f0000000a00)=ANY=[@ANYBLOB="12011003020000202505a1a44000000001010902640001010000000904000012609ce798ba8c9802060000052406000005240000000d240f01040000000000ff070005240101d707241408002d030008241c04800309000c241b070059ea9fa622f4624905810300020104cf0905820200027f00000905"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x810}}]}) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$binder(0x0, &(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0), 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='stats=']) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000240), 0x25, 0x4b6, &(0x7f0000000540)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) pwritev2(r4, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5406, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x103042, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0xfffffdef) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) getdents64(r2, 0x0, 0x4100) ioctl$BLKFRASET(r2, 0x1264, &(0x7f0000000140)=0x8) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={@ifindex, 0x0, 0x1, 0x80, &(0x7f0000000280)=[0x0], 0x1, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000440)={@cgroup=r5, r4, 0x13, 0x20, 0x0, @link_id, r7}, 0x20) ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f0000000040)={0x0, 0x8000000, 0xa, 0x14, 0x0, 0x3e, 0x1}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000480), 0x109242, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') kernel console output (not intermixed with test programs): [ 233.401725][ T7343] EXT4-fs (loop4): free_blocks=65280 [ 233.415965][ T7343] EXT4-fs (loop4): dirty_blocks=32 [ 233.421186][ T7343] EXT4-fs (loop4): Block reservation details [ 233.427567][ T3551] r8152-cfgselector 3-1: Unknown version 0x0000 [ 233.463707][ T7343] EXT4-fs (loop4): i_reserved_data_blocks=32 [ 233.496023][ T7391] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 31 with error 28 [ 233.533463][ T7391] EXT4-fs (loop4): This should not happen!! Data will be lost [ 233.533463][ T7391] [ 233.632429][ T5089] r8152-cfgselector 3-1: USB disconnect, device number 19 [ 233.678556][ T5092] usb 5-1: USB disconnect, device number 11 [ 233.747150][ T7294] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 233.772867][ T7294] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 233.823130][ T7294] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 233.844756][ T7294] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 234.031954][ T7294] 8021q: adding VLAN 0 to HW filter on device bond0 [ 234.065291][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 234.082417][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 234.095292][ T7294] 8021q: adding VLAN 0 to HW filter on device team0 [ 234.124604][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 234.144284][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 234.189227][ T3549] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.196333][ T3549] bridge0: port 1(bridge_slave_0) entered forwarding state [ 234.251946][ T4813] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 234.259849][ T4813] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 234.282409][ T1069] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 234.301018][ T4813] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 234.330341][ T4813] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.331839][ T5089] Bluetooth: hci1: command 0x041b tx timeout [ 234.337447][ T4813] bridge0: port 2(bridge_slave_1) entered forwarding state [ 234.372466][ T7422] loop2: detected capacity change from 0 to 4096 [ 234.392215][ T4813] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 234.401432][ T4813] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 234.481896][ T7422] ntfs: (device loop2): is_boot_sector_ntfs(): Invalid end of sector marker. [ 234.502119][ T4801] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 234.511596][ T4801] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 234.531771][ T1069] usb 2-1: Using ep0 maxpacket: 8 [ 234.565614][ T4801] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 234.574269][ T7422] ntfs: volume version 3.1. [ 234.580609][ T4801] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 234.605300][ T4801] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 234.649037][ T4801] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 234.671938][ T1069] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 234.681967][ T4801] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 234.693799][ T1069] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.712377][ T4801] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 234.722367][ T7294] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 234.743589][ T1069] usb 2-1: config 0 descriptor?? [ 234.762107][ T4801] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 234.829695][ T7435] loop4: detected capacity change from 0 to 4096 [ 234.915422][ T7435] ntfs: (device loop4): is_boot_sector_ntfs(): Invalid end of sector marker. [ 235.001831][ T1069] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 235.027209][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 235.029561][ T7435] ntfs: volume version 3.1. [ 235.042377][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 235.068527][ T1069] asix: probe of 2-1:0.0 failed with error -32 [ 235.080103][ T7294] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 235.200501][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 235.209806][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 235.267760][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 235.286321][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 235.331099][ T7294] device veth0_vlan entered promiscuous mode [ 235.341418][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 235.354816][ T7461] loop4: detected capacity change from 0 to 512 [ 235.355235][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 235.405815][ T7294] device veth1_vlan entered promiscuous mode [ 235.428159][ T7461] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 235.447146][ T7461] ext4 filesystem being mounted at /149/bus supports timestamps until 2038 (0x7fffffff) [ 235.556737][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 235.566639][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 235.571743][ T4813] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 235.576019][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 235.590867][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 235.602168][ T7294] device veth0_macvtap entered promiscuous mode [ 235.613157][ T7294] device veth1_macvtap entered promiscuous mode [ 235.630259][ T7294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.645868][ T7294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.671669][ T7294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.686402][ T7294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.696612][ T7294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.702268][ T1069] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 235.721685][ T7294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.740328][ T7294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.761621][ T7294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.771465][ T7294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.804047][ T7294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.819772][ T7294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.838399][ T7294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.850314][ T7294] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 235.870682][ T4805] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 235.881114][ T4805] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 235.889996][ T4805] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 235.917491][ T4805] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 235.928333][ T7294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.951500][ T7294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.970725][ T7294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.974649][ T7483] loop4: detected capacity change from 0 to 128 [ 235.981869][ T7294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.006576][ T7294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.020019][ T4813] usb 3-1: config 0 has no interfaces? [ 236.025668][ T1069] usb 1-1: Using ep0 maxpacket: 16 [ 236.036119][ T4813] usb 3-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 236.045721][ T7294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.064478][ T4813] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.073310][ T7294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.086770][ T4813] usb 3-1: config 0 descriptor?? [ 236.092191][ T7294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.103839][ T7294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.107126][ T6093] usb 2-1: USB disconnect, device number 14 [ 236.122203][ T7294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.142981][ T7294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.171901][ T1069] usb 1-1: config 0 has no interfaces? [ 236.178536][ T7294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.199533][ T7294] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 236.224847][ T4801] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 236.236086][ T4801] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 236.256266][ T7294] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.267535][ T7294] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.276727][ T7294] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.290362][ T7294] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.300799][ T26] audit: type=1800 audit(1721333727.662:34): pid=7480 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.995" name="file0" dev="loop4" ino=1048655 res=0 errno=0 [ 236.376717][ T1069] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 236.395999][ T26] audit: type=1804 audit(1721333727.692:35): pid=7480 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.995" name="/newroot/150/bus/file0" dev="loop4" ino=1048655 res=1 errno=0 [ 236.412093][ T5092] Bluetooth: hci1: command 0x040f tx timeout [ 236.443518][ T1069] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.477994][ T1069] usb 1-1: Product: syz [ 236.494362][ T1069] usb 1-1: Manufacturer: syz [ 236.507263][ T561] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.517170][ T1069] usb 1-1: SerialNumber: syz [ 236.530799][ T26] audit: type=1804 audit(1721333727.692:36): pid=7480 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.995" name="/newroot/150/bus/file0" dev="loop4" ino=1048655 res=1 errno=0 [ 236.541766][ T6093] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 236.598097][ T1069] r8152-cfgselector 1-1: config 0 descriptor?? [ 236.609157][ T561] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.643264][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 236.665041][ T5630] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.709328][ T5630] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.769070][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 236.834181][ T6093] usb 2-1: Using ep0 maxpacket: 32 [ 236.872049][ T3549] usb 3-1: USB disconnect, device number 20 [ 236.881975][ T1069] r8152-cfgselector 1-1: Unknown version 0x0000 [ 237.150919][ T6093] usb 2-1: unable to get BOS descriptor or descriptor too short [ 237.302460][ T6093] usb 2-1: config 1 has an invalid descriptor of length 186, skipping remainder of the config [ 237.541498][ T6093] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 237.776839][ T3519] r8152-cfgselector 1-1: USB disconnect, device number 14 [ 237.852432][ T6093] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 237.867557][ T7503] loop2: detected capacity change from 0 to 4096 [ 237.902067][ T6093] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 237.985475][ T6093] usb 2-1: SerialNumber: syz [ 238.053909][ T7503] ntfs: (device loop2): is_boot_sector_ntfs(): Invalid end of sector marker. [ 238.134087][ T7503] ntfs: volume version 3.1. [ 238.160426][ T7519] loop3: detected capacity change from 0 to 4096 [ 238.254469][ T7489] binder: Bad value for 'stats' [ 238.267553][ T7519] ntfs: (device loop3): is_boot_sector_ntfs(): Invalid end of sector marker. [ 238.405783][ T7519] ntfs: volume version 3.1. [ 238.491713][ T3519] Bluetooth: hci1: command 0x0419 tx timeout [ 238.607141][ T7545] loop3: detected capacity change from 0 to 128 [ 238.652464][ T3519] usb 2-1: USB disconnect, device number 15 [ 238.691469][ T26] audit: type=1800 audit(1721333730.052:37): pid=7545 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1007" name="file0" dev="loop3" ino=1048658 res=0 errno=0 [ 238.712602][ T3556] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 238.747678][ T26] audit: type=1804 audit(1721333730.092:38): pid=7545 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1007" name="/newroot/2/bus/file0" dev="loop3" ino=1048658 res=1 errno=0 [ 238.818606][ T26] audit: type=1804 audit(1721333730.092:39): pid=7545 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1007" name="/newroot/2/bus/file0" dev="loop3" ino=1048658 res=1 errno=0 [ 238.911825][ T4801] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 238.971776][ T3556] usb 3-1: Using ep0 maxpacket: 8 [ 239.091907][ T3556] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 239.145602][ T3556] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.177428][ T3556] usb 3-1: config 0 descriptor?? [ 239.302013][ T4801] usb 1-1: config 0 has no interfaces? [ 239.308051][ T4801] usb 1-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 239.325612][ T4801] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.355668][ T4801] usb 1-1: config 0 descriptor?? [ 239.449859][ T3556] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 239.479733][ T3556] asix: probe of 3-1:0.0 failed with error -32 [ 240.552304][ T3519] usb 1-1: USB disconnect, device number 15 [ 240.737281][ T7580] loop3: detected capacity change from 0 to 512 [ 240.851798][ T4801] usb 3-1: USB disconnect, device number 21 [ 240.902095][ T5904] EXT4-fs warning (device loop0): kmmpd:170: kmmpd being stopped since MMP feature has been disabled. [ 240.911526][ T7580] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 240.962951][ T7580] ext4 filesystem being mounted at /7/bus supports timestamps until 2038 (0x7fffffff) [ 241.173396][ T7294] EXT4-fs error (device loop3): htree_dirblock_to_tree:1111: inode #2: block 3: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4289961423, rec_len=65023, size=2048 fake=0 [ 241.195215][ T4813] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 241.462226][ T4813] usb 2-1: Using ep0 maxpacket: 32 [ 241.479373][ T7586] loop2: detected capacity change from 0 to 32768 [ 241.522234][ T3519] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 241.572948][ T7604] loop4: detected capacity change from 0 to 128 [ 241.588843][ T7586] XFS (loop2): Mounting V5 Filesystem [ 241.627015][ T26] audit: type=1800 audit(1721333732.992:40): pid=7604 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1027" name="file0" dev="loop4" ino=1048659 res=0 errno=0 [ 241.652641][ T4813] usb 2-1: unable to get BOS descriptor or descriptor too short [ 241.721480][ T26] audit: type=1804 audit(1721333733.022:41): pid=7604 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1027" name="/newroot/156/bus/file0" dev="loop4" ino=1048659 res=1 errno=0 [ 241.744087][ T26] audit: type=1804 audit(1721333733.032:42): pid=7604 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.1027" name="/newroot/156/bus/file0" dev="loop4" ino=1048659 res=1 errno=0 [ 241.762985][ T7586] XFS (loop2): Ending clean mount [ 241.776403][ T7586] XFS (loop2): Quotacheck needed: Please wait. [ 241.783252][ T4813] usb 2-1: config 1 has an invalid descriptor of length 186, skipping remainder of the config [ 241.785585][ T3990] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.815411][ T4813] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 241.869906][ T7586] XFS (loop2): Quotacheck: Done. [ 241.881909][ T3519] usb 1-1: config 0 has no interfaces? [ 241.891971][ T3519] usb 1-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 241.929726][ T3990] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.940315][ T4813] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 241.940908][ T3519] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.958025][ T4813] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 241.988579][ T3519] usb 1-1: config 0 descriptor?? [ 242.005163][ T4813] usb 2-1: SerialNumber: syz [ 242.031134][ T4511] XFS (loop2): Unmounting Filesystem [ 242.089901][ T3990] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.208939][ T3990] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.264579][ T7588] binder: Bad value for 'stats' [ 242.597272][ T4813] usb 2-1: USB disconnect, device number 16 [ 242.626185][ T7612] chnl_net:caif_netlink_parms(): no params data found [ 242.719270][ T7618] loop4: detected capacity change from 0 to 4096 [ 242.777892][ T5092] usb 1-1: USB disconnect, device number 16 [ 242.852151][ T7618] ntfs: (device loop4): is_boot_sector_ntfs(): Invalid end of sector marker. [ 242.915865][ T7616] loop2: detected capacity change from 0 to 32768 [ 242.923139][ T7612] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.941037][ T7618] ntfs: volume version 3.1. [ 242.945720][ T7612] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.975258][ T7612] device bridge_slave_0 entered promiscuous mode [ 243.000457][ T7612] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.019168][ T7612] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.028899][ T7612] device bridge_slave_1 entered promiscuous mode [ 243.035150][ T7616] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.1030 (7616) [ 243.121344][ T7616] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 243.141896][ T7616] BTRFS info (device loop2): setting nodatacow, compression disabled [ 243.173096][ T7612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 243.181378][ T7616] BTRFS info (device loop2): setting datacow [ 243.191806][ T7616] BTRFS info (device loop2): doing ref verification [ 243.213856][ T7643] loop4: detected capacity change from 0 to 128 [ 243.224369][ T7616] BTRFS info (device loop2): force clearing of disk cache [ 243.242311][ T7612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 243.269520][ T7616] BTRFS info (device loop2): turning off barriers [ 243.301845][ T7616] BTRFS info (device loop2): enabling ssd optimizations [ 243.317399][ T7616] BTRFS info (device loop2): using spread ssd allocation scheme [ 243.351734][ T7616] BTRFS info (device loop2): not using ssd optimizations [ 243.371316][ T7616] BTRFS info (device loop2): not using spread ssd allocation scheme [ 243.409494][ T7616] BTRFS info (device loop2): using free space tree [ 243.433863][ T7612] team0: Port device team_slave_0 added [ 243.443754][ T7643] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 243.469960][ T7616] BTRFS info (device loop2): has skinny extents [ 243.493504][ T7643] FAT-fs (loop4): Filesystem has been set read-only [ 243.502657][ T7612] team0: Port device team_slave_1 added [ 244.282764][ T7616] BTRFS info (device loop2): clearing free space tree [ 244.399574][ T7616] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 244.492678][ T7616] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 244.526668][ T5089] Bluetooth: hci1: command 0x0409 tx timeout [ 244.569517][ T7612] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 244.581269][ T7616] BTRFS info (device loop2): creating free space tree [ 244.591997][ T3549] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 244.602059][ T7612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 244.621140][ T7616] BTRFS info (device loop2): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 244.630402][ T3549] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 244.645398][ T3549] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 244.653107][ T3549] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 244.660766][ T7612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 244.673137][ T3549] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 244.680535][ T3549] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 244.690015][ T3549] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 244.691209][ T7616] BTRFS info (device loop2): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 244.697908][ T3549] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 244.725411][ T3549] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 244.735504][ T3549] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 244.751720][ T3549] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 244.759335][ T3549] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 244.767749][ T3549] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 244.775520][ T3549] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 244.783343][ T3549] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 244.790883][ T3549] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 244.807275][ T3549] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 244.822902][ T3549] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 244.830292][ T3549] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 244.845153][ T3549] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 244.856786][ T3549] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 244.867973][ T3549] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 244.875784][ T3549] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 244.883405][ T3549] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 244.890949][ T3549] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 244.898763][ T3549] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 244.906638][ T3549] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 244.914303][ T3549] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 244.915695][ T3556] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 244.922311][ T3549] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 244.937207][ T3549] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 244.944891][ T3549] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 244.952722][ T3549] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 244.961483][ T3549] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz0] on syz0 [ 245.035622][ T7612] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 245.052487][ T7612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 245.086049][ T26] audit: type=1800 audit(1721333736.452:43): pid=7616 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1030" name="bus" dev="loop2" ino=263 res=0 errno=0 [ 245.120966][ T7612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 245.302036][ T3556] usb 5-1: config 0 has no interfaces? [ 245.307575][ T3556] usb 5-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 245.341655][ T3556] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.394773][ T3556] usb 5-1: config 0 descriptor?? [ 245.562622][ T7612] device hsr_slave_0 entered promiscuous mode [ 245.586314][ T7701] loop2: detected capacity change from 0 to 128 [ 245.589463][ T7612] device hsr_slave_1 entered promiscuous mode [ 245.609682][ T7612] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 245.635660][ T7612] Cannot create hsr debugfs directory [ 245.639665][ T5094] usb 5-1: USB disconnect, device number 12 [ 245.675400][ T26] audit: type=1800 audit(1721333737.042:44): pid=7701 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1044" name="file0" dev="loop2" ino=1048663 res=0 errno=0 [ 245.786699][ T26] audit: type=1804 audit(1721333737.052:45): pid=7701 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1044" name="/newroot/160/bus/file0" dev="loop2" ino=1048663 res=1 errno=0 [ 245.858867][ T1066] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 245.886001][ T26] audit: type=1804 audit(1721333737.052:46): pid=7701 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1044" name="/newroot/160/bus/file0" dev="loop2" ino=1048663 res=1 errno=0 [ 245.918811][ T3990] device hsr_slave_0 left promiscuous mode [ 245.935215][ T3990] device hsr_slave_1 left promiscuous mode [ 245.971038][ T3990] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 245.988839][ T3990] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 246.026865][ T3990] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 246.051803][ T3990] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 246.073936][ T3990] device bridge_slave_1 left promiscuous mode [ 246.090558][ T3990] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.131782][ T1066] usb 2-1: Using ep0 maxpacket: 32 [ 246.148518][ T3990] device bridge_slave_0 left promiscuous mode [ 246.175851][ T3990] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.226115][ T3990] device veth1_macvtap left promiscuous mode [ 246.239645][ T3990] device veth0_macvtap left promiscuous mode [ 246.269960][ T3990] device veth1_vlan left promiscuous mode [ 246.284981][ T3990] device veth0_vlan left promiscuous mode [ 246.291821][ T1066] usb 2-1: unable to get BOS descriptor or descriptor too short [ 246.382073][ T1066] usb 2-1: config 1 has an invalid descriptor of length 186, skipping remainder of the config [ 246.416500][ T1066] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 246.568953][ T7725] loop2: detected capacity change from 0 to 512 [ 246.575371][ T3549] Bluetooth: hci1: command 0x041b tx timeout [ 246.688890][ T1066] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 246.701471][ T1066] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 246.713044][ T1066] usb 2-1: SerialNumber: syz [ 247.060927][ T7697] binder: Bad value for 'stats' [ 247.090964][ T7725] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 247.279202][ T7725] ext4 filesystem being mounted at /161/bus supports timestamps until 2038 (0x7fffffff) [ 247.555855][ T7735] loop4: detected capacity change from 0 to 4096 [ 247.629826][ T7735] ntfs: (device loop4): is_boot_sector_ntfs(): Invalid end of sector marker. [ 247.662734][ T3990] team0 (unregistering): Port device team_slave_1 removed [ 247.683720][ T1066] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 247.700144][ T3990] team0 (unregistering): Port device team_slave_0 removed [ 247.707025][ T1066] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 247.721775][ T1066] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 247.739616][ T1066] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 247.745136][ T7735] ntfs: volume version 3.1. [ 247.759945][ T1066] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 247.767829][ T1066] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 247.780482][ T1066] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 247.782477][ T3990] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 247.796242][ T1066] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 247.810172][ T1066] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 247.831745][ T1066] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 247.840377][ T3990] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 247.846752][ T1066] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 247.856823][ T1066] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 247.864554][ T1066] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 247.872306][ T1066] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 247.879709][ T1066] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 247.887831][ T1066] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 247.913734][ T1066] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 247.921255][ T1066] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 247.939852][ T1066] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 247.947514][ T1066] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 247.955245][ T1066] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 247.962919][ T1066] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 247.970335][ T1066] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 247.978491][ T1066] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 247.988285][ T1066] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 247.995798][ T1066] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 248.003245][ T1066] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 248.010639][ T1066] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 248.019952][ T1066] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 248.027410][ T1066] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 248.034847][ T1066] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 248.043667][ T1066] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 248.052325][ T1066] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz0] on syz0 [ 248.062474][ T1066] usb 2-1: USB disconnect, device number 17 [ 248.351738][ T5093] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 248.498438][ T3990] bond0 (unregistering): Released all slaves [ 248.517870][ T7749] loop4: detected capacity change from 0 to 128 [ 248.602200][ T26] audit: type=1800 audit(1721333739.972:47): pid=7749 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1060" name="file0" dev="loop4" ino=1048664 res=0 errno=0 [ 248.651818][ T4801] Bluetooth: hci1: command 0x040f tx timeout [ 248.700355][ T26] audit: type=1804 audit(1721333739.972:48): pid=7749 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1060" name="/newroot/168/bus/file0" dev="loop4" ino=1048664 res=1 errno=0 [ 248.743976][ T5093] usb 3-1: config 0 has no interfaces? [ 248.749519][ T5093] usb 3-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 248.784112][ T5093] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.824994][ T26] audit: type=1804 audit(1721333739.972:49): pid=7749 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.1060" name="/newroot/168/bus/file0" dev="loop4" ino=1048664 res=1 errno=0 [ 248.848523][ T5093] usb 3-1: config 0 descriptor?? [ 249.101148][ T5094] usb 3-1: USB disconnect, device number 22 [ 250.320602][ T7778] loop2: detected capacity change from 0 to 512 [ 250.569604][ T7612] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 250.571172][ T7778] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 250.587587][ T7780] loop4: detected capacity change from 0 to 4096 [ 250.587780][ T7778] ext4 filesystem being mounted at /163/bus supports timestamps until 2038 (0x7fffffff) [ 250.632507][ T7612] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 250.685697][ T7780] ntfs: (device loop4): is_boot_sector_ntfs(): Invalid end of sector marker. [ 250.691135][ T7612] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 250.732533][ T3549] Bluetooth: hci1: command 0x0419 tx timeout [ 250.739966][ T7612] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 250.752362][ T7780] ntfs: volume version 3.1. [ 250.781720][ T5093] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 251.021750][ T5093] usb 2-1: Using ep0 maxpacket: 32 [ 251.121532][ T7612] 8021q: adding VLAN 0 to HW filter on device bond0 [ 251.174129][ T4801] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 251.181840][ T5093] usb 2-1: unable to get BOS descriptor or descriptor too short [ 251.192222][ T4801] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 251.199737][ T4801] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 251.212329][ T3587] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 251.214414][ T4801] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 251.231126][ T4801] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 251.238929][ T4801] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 251.246852][ T4801] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 251.250222][ T3587] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 251.254588][ T4801] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 251.261928][ T5093] usb 2-1: config 1 has an invalid descriptor of length 186, skipping remainder of the config [ 251.272393][ T4801] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 251.321331][ T4801] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 251.364895][ T4801] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 251.388736][ T4801] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 251.413269][ T4801] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 251.455967][ T4801] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 251.491795][ T4801] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 251.524136][ T4801] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 251.556142][ T4801] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 251.594668][ T4801] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 251.624384][ T4801] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 251.658839][ T4801] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 251.692208][ T4801] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 251.726425][ T4801] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 251.761268][ T4801] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 251.774595][ T5093] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 251.791492][ T7612] 8021q: adding VLAN 0 to HW filter on device team0 [ 251.791688][ T4801] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 251.820993][ T3587] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 251.830580][ T3587] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 251.839646][ T3587] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.846774][ T3587] bridge0: port 1(bridge_slave_0) entered forwarding state [ 251.854928][ T3587] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 251.855480][ T4801] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 251.871095][ T3587] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 251.879660][ T3587] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.886262][ T4801] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 251.886768][ T3587] bridge0: port 2(bridge_slave_1) entered forwarding state [ 251.901190][ T4801] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 251.909465][ T5093] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 251.916569][ T4801] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 251.929640][ T5093] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 251.937899][ T4801] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 251.937926][ T4801] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 251.937950][ T4801] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 251.937974][ T4801] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 251.972012][ T4801] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz0] on syz0 [ 251.982037][ T3587] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 251.990998][ T3587] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 252.040943][ T7612] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 252.087755][ T5093] usb 2-1: SerialNumber: syz [ 252.181666][ T7612] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 252.219312][ T3519] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 252.267481][ T3519] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 252.312655][ T3519] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 252.343022][ T3519] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 252.353812][ T7787] binder: Bad value for 'stats' [ 252.391954][ T263] block nbd1: Possible stuck request ffff88801b6c8000: control (read@0,4096B). Runtime 120 seconds [ 252.403023][ T1069] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 252.802372][ T1069] usb 5-1: config 0 has no interfaces? [ 252.808858][ T1069] usb 5-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 252.859358][ T1069] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.053013][ T1069] usb 5-1: config 0 descriptor?? [ 253.106243][ T3519] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 253.114864][ T3519] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 253.123695][ T3519] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 253.135498][ T3519] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 253.154878][ T3519] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 253.181011][ T7833] loop2: detected capacity change from 0 to 512 [ 253.189907][ T3519] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 253.218436][ T3519] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 253.308430][ T7833] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 253.323879][ T1069] usb 5-1: USB disconnect, device number 13 [ 253.341838][ T7833] ext4 filesystem being mounted at /167/bus supports timestamps until 2038 (0x7fffffff) [ 253.370000][ T4813] usb 2-1: USB disconnect, device number 18 [ 253.522090][ T7612] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 253.529506][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 253.540425][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 253.578623][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 253.588183][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 253.651954][ T3587] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 253.660230][ T3587] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 253.713631][ T7612] device veth0_vlan entered promiscuous mode [ 253.746302][ T7612] device veth1_vlan entered promiscuous mode [ 253.766813][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 253.777511][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 253.792495][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 253.825699][ T7612] device veth0_macvtap entered promiscuous mode [ 253.841258][ T5094] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 253.860321][ T5094] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 253.891302][ T5094] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 253.914645][ T7612] device veth1_macvtap entered promiscuous mode [ 253.946071][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 253.964507][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 254.020903][ T7612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.102011][ T7612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.143851][ T7612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.189139][ T7612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.233375][ T7612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.284586][ T7612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.291211][ T7872] loop4: detected capacity change from 0 to 128 [ 254.315858][ T7612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.360156][ T7872] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 254.367661][ T7612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.418203][ T7612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.452888][ T7612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.519431][ T7612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.545849][ T7612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.565222][ T7612] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 254.621846][ T5087] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 254.633133][ T5087] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 254.655603][ T7878] handle_bad_sector: 4 callbacks suppressed [ 254.655623][ T7878] attempt to access beyond end of device [ 254.655623][ T7878] loop4: rw=2049, want=201, limit=128 [ 254.729676][ T7612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.765144][ T7878] attempt to access beyond end of device [ 254.765144][ T7878] loop4: rw=2049, want=249, limit=128 [ 254.866601][ T7878] attempt to access beyond end of device [ 254.866601][ T7878] loop4: rw=2049, want=265, limit=128 [ 255.003745][ T7612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.232301][ T7612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 255.433552][ T7612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.444024][ T7878] attempt to access beyond end of device [ 255.444024][ T7878] loop4: rw=2049, want=281, limit=128 [ 255.506417][ T7853] loop2: detected capacity change from 0 to 32768 [ 255.518223][ T7612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 255.533779][ T7612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.535389][ T1376] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.546283][ T7612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 255.549884][ T1376] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.560289][ T7612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.577206][ T7612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 255.587989][ T7612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.589124][ T7872] attempt to access beyond end of device [ 255.589124][ T7872] loop4: rw=2049, want=241, limit=128 [ 255.597871][ T7612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 255.597892][ T7612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.599515][ T7612] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 255.664810][ T5087] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 255.667849][ T7872] attempt to access beyond end of device [ 255.667849][ T7872] loop4: rw=2049, want=257, limit=128 [ 255.682406][ T5087] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 255.702544][ T7872] attempt to access beyond end of device [ 255.702544][ T7872] loop4: rw=2049, want=273, limit=128 [ 255.717770][ T7612] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.740045][ T7853] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.1081 (7853) [ 255.747842][ T7872] attempt to access beyond end of device [ 255.747842][ T7872] loop4: rw=2049, want=337, limit=128 [ 255.841139][ T7612] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.865812][ T4805] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 255.876346][ T4805] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 255.916484][ T7612] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.936120][ T4805] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 255.947189][ T7612] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.960918][ T4805] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 255.989778][ T4805] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 256.019769][ T4805] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 256.040014][ T4805] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 256.072699][ T4805] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 256.080138][ T4805] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 256.110499][ T4805] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 256.138734][ T4805] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 256.158920][ T4805] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 256.179281][ T4805] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 256.197920][ T4805] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 256.208399][ T4805] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 256.216344][ T4805] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 256.224111][ T4805] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 256.231981][ T4805] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 256.240079][ T4805] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 256.250650][ T4805] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 256.258324][ T4805] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 256.266108][ T4805] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 256.273859][ T4805] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 256.281418][ T4805] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 256.289257][ T4805] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 256.297064][ T4805] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 256.304761][ T4805] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 256.312976][ T4805] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 256.320377][ T4805] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 256.331849][ T4805] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 256.340386][ T4805] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 256.348459][ T4805] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 256.357292][ T4805] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz0] on syz0 [ 256.391818][ T7853] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 256.400556][ T7853] BTRFS info (device loop2): setting nodatacow, compression disabled [ 256.418352][ T3871] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 256.454199][ T7853] BTRFS info (device loop2): setting datacow [ 256.460381][ T7853] BTRFS info (device loop2): doing ref verification [ 256.500973][ T7853] BTRFS info (device loop2): force clearing of disk cache [ 256.536589][ T7853] BTRFS info (device loop2): turning off barriers [ 256.572213][ T7853] BTRFS info (device loop2): enabling ssd optimizations [ 256.615878][ T7913] loop4: detected capacity change from 0 to 128 [ 256.631932][ T7853] BTRFS info (device loop2): using spread ssd allocation scheme [ 256.649525][ T7853] BTRFS info (device loop2): not using ssd optimizations [ 256.656871][ T4805] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 256.676137][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 256.693650][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 256.730895][ T7853] BTRFS info (device loop2): not using spread ssd allocation scheme [ 256.751903][ T3871] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 256.767699][ T3871] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 256.790511][ T26] audit: type=1800 audit(1721333748.152:50): pid=7913 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1092" name="file0" dev="loop4" ino=1048667 res=0 errno=0 [ 256.812111][ T1069] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 256.821469][ T3587] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 256.842487][ T7853] BTRFS info (device loop2): using free space tree [ 256.859660][ T7853] BTRFS info (device loop2): has skinny extents [ 256.876665][ T3587] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 256.896895][ T26] audit: type=1804 audit(1721333748.152:51): pid=7913 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1092" name="/newroot/178/bus/file0" dev="loop4" ino=1048667 res=1 errno=0 [ 257.042287][ T7853] BTRFS error (device loop2): open_ctree failed [ 257.067330][ T26] audit: type=1804 audit(1721333748.182:52): pid=7913 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.1092" name="/newroot/178/bus/file0" dev="loop4" ino=1048667 res=1 errno=0 [ 257.089218][ T1069] usb 2-1: Using ep0 maxpacket: 32 [ 257.094515][ T4805] usb 1-1: config 0 has no interfaces? [ 257.100772][ T4805] usb 1-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 257.125379][ T4805] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.160526][ T4805] usb 1-1: config 0 descriptor?? [ 257.272018][ T1069] usb 2-1: unable to get BOS descriptor or descriptor too short [ 257.382140][ T1069] usb 2-1: config 1 has an invalid descriptor of length 186, skipping remainder of the config [ 257.446203][ T1069] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 257.455391][ T3519] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 257.514193][ T4813] usb 1-1: USB disconnect, device number 17 [ 257.596697][ T1069] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 257.614910][ T1069] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 257.623894][ T1069] usb 2-1: SerialNumber: syz [ 257.720215][ T7957] loop4: detected capacity change from 0 to 512 [ 257.729141][ T3519] usb 4-1: Using ep0 maxpacket: 8 [ 257.798101][ T7957] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 257.809413][ T7957] ext4 filesystem being mounted at /180/bus supports timestamps until 2038 (0x7fffffff) [ 257.929269][ T7957] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.1100: bg 0: block 8192: padding at end of block bitmap is not set [ 257.955692][ T7910] binder: Bad value for 'stats' [ 258.521104][ T4417] EXT4-fs error (device loop4): htree_dirblock_to_tree:1111: inode #2: block 3: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4289961423, rec_len=65023, size=2048 fake=0 [ 258.604991][ T3519] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 258.626554][ T3519] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.649550][ T3519] usb 4-1: config 0 descriptor?? [ 258.689993][ T7966] loop2: detected capacity change from 0 to 1024 [ 258.749352][ T7966] EXT4-fs (loop2): Test dummy encryption mode enabled [ 258.779431][ T7966] EXT4-fs (loop2): Ignoring removed orlov option [ 258.786382][ T4813] usb 2-1: USB disconnect, device number 19 [ 258.822961][ T7966] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue. Quota mode: writeback. [ 258.901743][ T3519] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 258.915191][ T3519] asix: probe of 4-1:0.0 failed with error -32 [ 259.128970][ T7969] loop2: detected capacity change from 0 to 1024 [ 259.158908][ T3871] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 259.190482][ T3871] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.237407][ T7969] EXT4-fs (loop2): Test dummy encryption mode enabled [ 259.251083][ T3871] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 259.284317][ T7969] EXT4-fs (loop2): Ignoring removed orlov option [ 259.300911][ T3871] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.347565][ T7969] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue. Quota mode: writeback. [ 259.428657][ T3587] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 259.429757][ T3871] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 259.446553][ T3871] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.457969][ T3587] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 259.485593][ T26] audit: type=1326 audit(1721333750.852:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7986 comm="syz.1.1112" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdaad791b59 code=0x0 [ 259.491803][ T3587] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 259.529649][ T3587] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 259.540459][ T3587] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 259.555044][ T3587] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 259.566265][ T3587] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 259.578475][ T3587] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 259.586839][ T3587] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 259.594327][ T3587] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 259.601843][ T3587] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 259.609238][ T3587] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 259.618062][ T3587] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 259.625563][ T3587] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 259.633228][ T3587] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 259.640623][ T3587] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 259.648141][ T3587] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 259.655572][ T3587] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 259.663065][ T3587] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 259.670452][ T3587] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 259.678029][ T3587] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 259.685439][ T3587] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 259.693314][ T3587] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 259.700717][ T3587] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 259.708242][ T3587] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 259.716526][ T3587] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 259.724057][ T3587] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 259.731446][ T3587] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 259.739002][ T3587] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 259.746440][ T3587] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 259.753948][ T3587] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 259.761333][ T3587] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 259.780028][ T3587] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz0] on syz0 [ 259.796862][ T3871] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 259.807982][ T3871] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.903651][ T7990] loop2: detected capacity change from 0 to 512 [ 259.985522][ T7979] chnl_net:caif_netlink_parms(): no params data found [ 259.996334][ T7990] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 260.035128][ T7990] ext4 filesystem being mounted at /176/bus supports timestamps until 2038 (0x7fffffff) [ 260.045146][ T3519] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 260.102738][ T7990] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.1113: bg 0: block 8192: padding at end of block bitmap is not set [ 260.161634][ T4511] EXT4-fs error (device loop2): htree_dirblock_to_tree:1111: inode #2: block 3: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4289961423, rec_len=65023, size=2048 fake=0 [ 260.200690][ T3549] usb 4-1: USB disconnect, device number 13 [ 260.243669][ T7979] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.250754][ T7979] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.261083][ T7979] device bridge_slave_0 entered promiscuous mode [ 260.295485][ T7979] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.307316][ T7979] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.362927][ T7979] device bridge_slave_1 entered promiscuous mode [ 260.412264][ T3519] usb 1-1: config 0 has no interfaces? [ 260.417774][ T3519] usb 1-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 260.457157][ T3519] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.487292][ T3519] usb 1-1: config 0 descriptor?? [ 260.619354][ T7979] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 260.650369][ T7979] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 260.688688][ T7979] team0: Port device team_slave_0 added [ 260.704734][ T7979] team0: Port device team_slave_1 added [ 260.881776][ T4813] usb 1-1: USB disconnect, device number 18 [ 261.059299][ T7979] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 261.079772][ T7979] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 261.108026][ T7979] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 261.177250][ T7979] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 261.191930][ T7979] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 261.261656][ T7979] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 261.451886][ T3549] Bluetooth: hci0: command 0x0409 tx timeout [ 261.605411][ T7979] device hsr_slave_0 entered promiscuous mode [ 261.652060][ T7979] device hsr_slave_1 entered promiscuous mode [ 261.672017][ T7979] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 261.687359][ T7979] Cannot create hsr debugfs directory [ 261.738084][ T8032] loop3: detected capacity change from 0 to 1024 [ 261.744848][ T1066] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 261.859096][ T8032] EXT4-fs (loop3): Test dummy encryption mode enabled [ 261.871716][ T8032] EXT4-fs (loop3): Ignoring removed orlov option [ 262.000254][ T8032] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue. Quota mode: writeback. [ 262.028935][ T1066] usb 1-1: Using ep0 maxpacket: 32 [ 262.121698][ T4813] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 262.197946][ T1066] usb 1-1: unable to get BOS descriptor or descriptor too short [ 262.224649][ T3871] device hsr_slave_0 left promiscuous mode [ 262.241559][ T3871] device hsr_slave_1 left promiscuous mode [ 262.251088][ T3871] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 262.280922][ T3871] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 262.292326][ T3871] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 262.307274][ T1066] usb 1-1: config 1 has an invalid descriptor of length 186, skipping remainder of the config [ 262.314595][ T8051] loop3: detected capacity change from 0 to 512 [ 262.324521][ T3871] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 262.332307][ T1066] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 262.336690][ T3871] device bridge_slave_1 left promiscuous mode [ 262.362830][ T3871] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.371425][ T3871] device bridge_slave_0 left promiscuous mode [ 262.389123][ T3871] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.406015][ T3871] device veth1_macvtap left promiscuous mode [ 262.412528][ T3871] device veth0_macvtap left promiscuous mode [ 262.413398][ T8051] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 262.419811][ T3871] device veth1_vlan left promiscuous mode [ 262.429758][ T4813] usb 2-1: Using ep0 maxpacket: 8 [ 262.440599][ T8051] ext4 filesystem being mounted at /5/bus supports timestamps until 2038 (0x7fffffff) [ 262.441709][ T1066] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 262.460141][ T3871] device veth0_vlan left promiscuous mode [ 262.482506][ T8051] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.1125: bg 0: block 8192: padding at end of block bitmap is not set [ 262.496975][ T1066] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 262.518638][ T7612] EXT4-fs error (device loop3): htree_dirblock_to_tree:1111: inode #2: block 3: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4289961423, rec_len=65023, size=2048 fake=0 [ 262.560193][ T1066] usb 1-1: SerialNumber: syz [ 262.601779][ T4813] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 262.611061][ T4813] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.621033][ T4813] usb 2-1: config 0 descriptor?? [ 262.765442][ T3871] team0 (unregistering): Port device team_slave_1 removed [ 262.777993][ T3871] team0 (unregistering): Port device team_slave_0 removed [ 262.792927][ T3871] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 262.811264][ T3871] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 262.823943][ T8025] binder: Bad value for 'stats' [ 262.891284][ T3871] bond0 (unregistering): Released all slaves [ 262.891813][ T4813] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 262.917427][ T4813] asix: probe of 2-1:0.0 failed with error -32 [ 263.064021][ T8022] chnl_net:caif_netlink_parms(): no params data found [ 263.132901][ T4801] usb 1-1: USB disconnect, device number 19 [ 263.199708][ T8022] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.207122][ T8022] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.216432][ T8022] device bridge_slave_0 entered promiscuous mode [ 263.244084][ T8022] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.261341][ T8022] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.270005][ T8022] device bridge_slave_1 entered promiscuous mode [ 263.373603][ T3587] Bluetooth: hci3: command 0x0409 tx timeout [ 263.393675][ T8022] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 263.475144][ T8022] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 263.541849][ T3549] Bluetooth: hci0: command 0x041b tx timeout [ 263.615529][ T8022] team0: Port device team_slave_0 added [ 263.662144][ T8022] team0: Port device team_slave_1 added [ 263.755000][ T8022] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 263.772337][ T8022] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 263.852433][ T8022] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 263.876130][ T7979] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 263.910238][ T8022] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 263.925009][ T8022] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 263.992552][ T1069] usb 2-1: USB disconnect, device number 20 [ 264.039830][ T8022] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 264.061188][ T7979] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 264.095568][ T7979] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 264.133479][ T4806] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 264.154316][ T4806] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 264.162180][ T4806] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 264.169625][ T4806] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 264.177925][ T4806] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 264.185637][ T4806] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 264.201627][ T4806] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 264.214883][ T7979] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 264.227332][ T4806] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 264.238270][ T4806] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 264.281990][ T4806] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 264.301767][ T4806] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 264.309164][ T4806] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 264.333099][ T4806] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 264.350728][ T4806] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 264.372839][ T4806] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 264.380232][ T4806] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 264.390846][ T4806] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 264.398634][ T4806] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 264.406545][ T4806] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 264.414811][ T4806] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 264.422553][ T4806] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 264.430485][ T4806] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 264.438364][ T4806] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 264.446024][ T4806] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 264.461720][ T4806] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 264.507021][ T4806] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 264.539009][ T4806] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 264.561740][ T1069] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 264.579782][ T4806] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 264.621635][ T4806] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 264.659655][ T4806] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 264.701724][ T4806] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 264.709128][ T4806] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 264.757436][ T4806] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz0] on syz0 [ 264.977069][ T1069] usb 2-1: config 0 has no interfaces? [ 264.983078][ T1069] usb 2-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 265.011677][ T1069] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.048635][ T1069] usb 2-1: config 0 descriptor?? [ 265.133432][ T8022] device hsr_slave_0 entered promiscuous mode [ 265.158178][ T8022] device hsr_slave_1 entered promiscuous mode [ 265.183271][ T8022] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 265.201008][ T8022] Cannot create hsr debugfs directory [ 265.214914][ T8075] chnl_net:caif_netlink_parms(): no params data found [ 265.316395][ T3549] usb 2-1: USB disconnect, device number 21 [ 265.407723][ T7979] 8021q: adding VLAN 0 to HW filter on device bond0 [ 265.452113][ T4801] Bluetooth: hci3: command 0x041b tx timeout [ 265.498983][ T4801] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 265.517101][ T4801] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 265.563627][ T7979] 8021q: adding VLAN 0 to HW filter on device team0 [ 265.578676][ T3549] Bluetooth: hci1: command 0x0409 tx timeout [ 265.608446][ T8075] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.621722][ T3549] Bluetooth: hci0: command 0x040f tx timeout [ 265.642449][ T8075] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.663971][ T8075] device bridge_slave_0 entered promiscuous mode [ 265.701832][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 265.710412][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 265.743176][ T1069] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.750240][ T1069] bridge0: port 1(bridge_slave_0) entered forwarding state [ 265.802023][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 265.822173][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 265.830604][ T1069] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.837712][ T1069] bridge0: port 2(bridge_slave_1) entered forwarding state [ 265.852006][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 265.866046][ T8075] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.875550][ T8075] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.912980][ T8075] device bridge_slave_1 entered promiscuous mode [ 266.010737][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 266.028108][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 266.062498][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 266.113320][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 266.157181][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 266.209468][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 266.299189][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 266.317586][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 266.344337][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 266.382146][ T8022] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.407285][ T8075] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 266.431517][ T7979] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 266.446226][ T7979] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 266.464970][ T5087] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 266.475837][ T5087] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 266.490857][ T8075] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 266.500238][ T3519] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 266.522134][ T5091] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 266.539524][ T8022] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.585986][ T8075] team0: Port device team_slave_0 added [ 266.601247][ T3871] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.627172][ T8022] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.650909][ T8075] team0: Port device team_slave_1 added [ 266.664525][ T3871] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.695183][ T4805] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 266.702813][ T4805] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 266.717929][ T8075] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 266.725037][ T8075] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 266.741886][ T3519] usb 1-1: Using ep0 maxpacket: 32 [ 266.756327][ T8075] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 266.767130][ T5091] usb 2-1: Using ep0 maxpacket: 8 [ 266.770666][ T7979] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 266.786810][ T8022] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.808457][ T8075] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 266.816240][ T8075] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 266.845243][ T8075] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 266.867021][ T3871] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.901948][ T5091] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 266.911365][ T5091] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.922563][ T5091] usb 2-1: config 0 descriptor?? [ 266.941829][ T3519] usb 1-1: unable to get BOS descriptor or descriptor too short [ 266.944268][ T3871] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.973770][ T8075] device hsr_slave_0 entered promiscuous mode [ 266.980682][ T8075] device hsr_slave_1 entered promiscuous mode [ 266.989934][ T8075] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 266.997846][ T8075] Cannot create hsr debugfs directory [ 267.031870][ T3519] usb 1-1: config 1 has an invalid descriptor of length 186, skipping remainder of the config [ 267.042471][ T3519] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 267.068702][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 267.077333][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 267.131848][ T3519] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 267.141840][ T3519] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 267.149880][ T3519] usb 1-1: SerialNumber: syz [ 267.181768][ T5091] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 267.194029][ T5091] asix: probe of 2-1:0.0 failed with error -32 [ 267.232767][ T7979] device veth0_vlan entered promiscuous mode [ 267.253268][ T3587] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 267.262129][ T3587] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 267.334363][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 267.342486][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 267.351914][ T7979] device veth1_vlan entered promiscuous mode [ 267.372492][ T8022] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 267.412848][ T8022] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 267.463252][ T8148] binder: Bad value for 'stats' [ 267.499472][ T8022] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 267.541121][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 267.561320][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 267.573421][ T7979] device veth0_macvtap entered promiscuous mode [ 267.580794][ T8022] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 267.597525][ T1069] Bluetooth: hci3: command 0x040f tx timeout [ 267.620503][ T7979] device veth1_macvtap entered promiscuous mode [ 267.627336][ T1069] Bluetooth: hci1: command 0x041b tx timeout [ 267.691815][ T4805] Bluetooth: hci0: command 0x0419 tx timeout [ 267.727307][ T7979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 267.738126][ T7979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.750827][ T3561] usb 1-1: USB disconnect, device number 20 [ 267.760550][ T7979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 267.772138][ T7979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.782355][ T7979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 267.792941][ T7979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.802822][ T7979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 267.813882][ T7979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.823788][ T7979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 267.834283][ T7979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.844236][ T7979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 267.854978][ T3549] Bluetooth: hci5: command 0x0406 tx timeout [ 267.859584][ T7979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.873517][ T7979] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 267.890048][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 267.899076][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 267.907937][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 267.916741][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 267.940873][ T7979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 267.953110][ T7979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.963392][ T7979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 267.976656][ T7979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.986723][ T7979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 267.997426][ T7979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.007534][ T7979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 268.019801][ T7979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.029691][ T7979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 268.040129][ T7979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.050144][ T7979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 268.061442][ T7979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.073295][ T7979] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 268.108339][ T4806] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 268.118757][ T4806] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 268.130436][ T7979] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.139815][ T7979] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.149125][ T7979] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.157988][ T7979] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.247139][ T3549] usb 2-1: USB disconnect, device number 22 [ 268.276440][ T8022] 8021q: adding VLAN 0 to HW filter on device bond0 [ 268.325751][ T8075] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 268.409385][ T8075] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 268.444703][ T8075] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 268.461972][ T8075] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 268.517173][ T8022] 8021q: adding VLAN 0 to HW filter on device team0 [ 268.538486][ T5094] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 268.546479][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 268.564193][ T5094] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 268.571544][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 268.597210][ T5094] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 268.675918][ T5094] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 268.684912][ T5094] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 268.702292][ T5094] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.709496][ T5094] bridge0: port 1(bridge_slave_0) entered forwarding state [ 268.720221][ T5094] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 268.730899][ T5094] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 268.749935][ T5094] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.757065][ T5094] bridge0: port 2(bridge_slave_1) entered forwarding state [ 268.771133][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 268.811847][ T3561] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 268.814338][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 268.840030][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 269.171828][ T3561] usb 2-1: config 0 has no interfaces? [ 269.177517][ T3561] usb 2-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 269.189487][ T3561] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.209034][ T3561] usb 2-1: config 0 descriptor?? [ 269.375529][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 269.390445][ T4806] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 269.399532][ T4806] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 269.400529][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 269.417549][ T26] audit: type=1326 audit(1721333760.782:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8209 comm="syz.0.1142" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5e774d0b59 code=0x0 [ 269.441088][ T4806] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 269.460456][ T4806] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 269.472719][ T4806] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 269.481134][ T4806] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 269.505705][ T8022] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 269.530670][ T8022] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 269.554042][ T4801] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 269.562496][ T4801] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 269.570609][ T4801] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 269.579626][ T4801] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 269.622999][ T4801] Bluetooth: hci3: command 0x0419 tx timeout [ 269.703430][ T4806] Bluetooth: hci1: command 0x040f tx timeout [ 269.706672][ T8223] loop4: detected capacity change from 0 to 128 [ 269.765174][ T8075] 8021q: adding VLAN 0 to HW filter on device bond0 [ 269.795332][ T26] audit: type=1800 audit(1721333761.162:55): pid=8223 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1107" name="file0" dev="loop4" ino=1048672 res=0 errno=0 [ 269.818541][ T4806] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 269.842858][ T4806] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 269.856451][ T8075] 8021q: adding VLAN 0 to HW filter on device team0 [ 269.896435][ T4806] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 269.905342][ T26] audit: type=1804 audit(1721333761.162:56): pid=8223 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1107" name="/newroot/0/bus/file0" dev="loop4" ino=1048672 res=1 errno=0 [ 269.928966][ T4806] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 269.938247][ T4806] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.945366][ T4806] bridge0: port 1(bridge_slave_0) entered forwarding state [ 269.964829][ T21] usb 2-1: USB disconnect, device number 23 [ 269.966923][ T26] audit: type=1804 audit(1721333761.162:57): pid=8223 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.1107" name="/newroot/0/bus/file0" dev="loop4" ino=1048672 res=1 errno=0 [ 270.024823][ T4813] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 270.053605][ T4813] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 270.082897][ T4813] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 270.107507][ T4813] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.114715][ T4813] bridge0: port 2(bridge_slave_1) entered forwarding state [ 270.160527][ T4813] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 270.193283][ T4813] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 270.285078][ T4801] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 270.322319][ T4801] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 270.350971][ T4801] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 270.383536][ T4801] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 270.403741][ T4801] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 270.433490][ T4801] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 270.477683][ T8075] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 270.562099][ T8075] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 270.590187][ T4806] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 270.608760][ T4806] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 270.616578][ T4806] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 270.644012][ T4806] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 270.655536][ T4806] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 270.680272][ T8238] loop4: detected capacity change from 0 to 1024 [ 270.733804][ T8022] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 270.776437][ T8238] EXT4-fs (loop4): Test dummy encryption mode enabled [ 270.807488][ T8238] EXT4-fs (loop4): Ignoring removed orlov option [ 270.841647][ T3519] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 270.854915][ T4806] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 270.881244][ T4806] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 270.904688][ T8238] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue. Quota mode: writeback. [ 270.992670][ T8022] device veth0_vlan entered promiscuous mode [ 271.012269][ T5094] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 271.020540][ T5094] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 271.059568][ T8022] device veth1_vlan entered promiscuous mode [ 271.091835][ T3519] usb 1-1: Using ep0 maxpacket: 8 [ 271.118303][ T5093] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 271.126633][ T5093] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 271.135160][ T5093] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 271.190293][ T3871] device hsr_slave_0 left promiscuous mode [ 271.198442][ T3871] device hsr_slave_1 left promiscuous mode [ 271.211812][ T3519] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 271.221166][ T3519] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.229406][ T3871] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 271.249802][ T3871] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 271.251066][ T3519] usb 1-1: config 0 descriptor?? [ 271.263701][ T3871] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 271.271120][ T3871] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 271.280166][ T3871] device bridge_slave_1 left promiscuous mode [ 271.289932][ T3871] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.301473][ T3871] device bridge_slave_0 left promiscuous mode [ 271.319986][ T3871] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.334130][ T3871] device hsr_slave_0 left promiscuous mode [ 271.340663][ T3871] device hsr_slave_1 left promiscuous mode [ 271.351675][ T3550] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 271.362390][ T3871] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 271.382140][ T3871] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 271.390289][ T3871] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 271.409618][ T3871] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 271.425554][ T3871] device bridge_slave_1 left promiscuous mode [ 271.433536][ T3871] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.442599][ T3871] device bridge_slave_0 left promiscuous mode [ 271.448803][ T3871] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.486848][ T3871] device veth1_macvtap left promiscuous mode [ 271.504969][ T3871] device veth0_macvtap left promiscuous mode [ 271.511060][ T3871] device veth1_vlan left promiscuous mode [ 271.527631][ T3871] device veth0_vlan left promiscuous mode [ 271.543150][ T3871] device veth1_macvtap left promiscuous mode [ 271.559460][ T3871] device veth0_macvtap left promiscuous mode [ 271.569048][ T3871] device veth1_vlan left promiscuous mode [ 271.581691][ T3871] device veth0_vlan left promiscuous mode [ 271.602516][ T3550] usb 2-1: Using ep0 maxpacket: 32 [ 271.742115][ T3519] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 271.761743][ T3550] usb 2-1: unable to get BOS descriptor or descriptor too short [ 271.772279][ T3519] asix 1-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 271.782219][ T4801] Bluetooth: hci1: command 0x0419 tx timeout [ 271.783581][ T3519] asix: probe of 1-1:0.0 failed with error -61 [ 271.851875][ T3550] usb 2-1: config 1 has an invalid descriptor of length 186, skipping remainder of the config [ 271.870838][ T3550] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 271.981859][ T3550] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 271.991475][ T3550] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 272.000224][ T3550] usb 2-1: SerialNumber: syz [ 272.095480][ T3871] team0 (unregistering): Port device team_slave_1 removed [ 272.120498][ T3871] team0 (unregistering): Port device team_slave_0 removed [ 272.141715][ T3871] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 272.164202][ T3871] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 272.254817][ T8246] binder: Bad value for 'stats' [ 272.329270][ T3871] bond0 (unregistering): Released all slaves [ 272.577616][ T3519] usb 2-1: USB disconnect, device number 24 [ 272.611164][ T3871] team0 (unregistering): Port device team_slave_1 removed [ 272.627001][ T3871] team0 (unregistering): Port device team_slave_0 removed [ 272.642292][ T3871] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 272.672072][ T3871] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 272.780299][ T3871] bond0 (unregistering): Released all slaves [ 272.832712][ T8075] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 272.839848][ T5093] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 272.847965][ T5093] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 272.855646][ T5093] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 272.885188][ T3561] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 272.893852][ T3561] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 272.914743][ T8022] device veth0_macvtap entered promiscuous mode [ 272.927959][ T8022] device veth1_macvtap entered promiscuous mode [ 272.961967][ T8075] device veth0_vlan entered promiscuous mode [ 272.969257][ T3561] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 272.977414][ T3561] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 272.985454][ T3561] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 272.995438][ T3561] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 273.004084][ T3561] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 273.012423][ T3561] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 273.025831][ T8022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 273.037091][ T1069] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 273.045370][ T8022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.055769][ T8022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 273.066848][ T8022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.077354][ T8022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 273.089121][ T8022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.101294][ T8022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 273.152231][ T8022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.166895][ T8022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 273.184386][ T8022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.197159][ T8022] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 273.213049][ T3561] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 273.220800][ T3561] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 273.231078][ T3561] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 273.240576][ T3561] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 273.250294][ T8075] device veth1_vlan entered promiscuous mode [ 273.259039][ T8022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.279984][ T8022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.292990][ T8022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.303616][ T8022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.314898][ T8022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.325622][ T8022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.337891][ T8022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.348439][ T8022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.358847][ T8022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.369324][ T8022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.380654][ T8022] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 273.398841][ T5094] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 273.408214][ T5094] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 273.416746][ T5094] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 273.421866][ T1069] usb 5-1: config 0 has no interfaces? [ 273.425943][ T5094] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 273.435864][ T1069] usb 5-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 273.452584][ T8022] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.461481][ T8022] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.470833][ T1069] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.475481][ T8022] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.488239][ T8022] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.503421][ T1069] usb 5-1: config 0 descriptor?? [ 273.527836][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 273.536873][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 273.557600][ T8075] device veth0_macvtap entered promiscuous mode [ 273.564705][ T3519] usb 1-1: USB disconnect, device number 21 [ 273.612101][ T8075] device veth1_macvtap entered promiscuous mode [ 273.688247][ T8075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 273.720319][ T8075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.742673][ T8075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 273.761209][ T8075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.782558][ T8075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 273.802859][ T8075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.813310][ T8075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 273.824118][ T8075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.834299][ T8075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 273.845150][ T8075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.856677][ T8075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 273.868868][ T8075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.880833][ T8075] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 273.896169][ T4801] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 273.912717][ T4801] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 273.921058][ T4801] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 273.930086][ T4801] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 273.965248][ T8075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.976662][ T3681] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.981474][ T8075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.989264][ T3681] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 274.002968][ T8075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 274.020118][ T8075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.040146][ T8075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 274.053528][ T8075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.063457][ T8075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 274.075066][ T8075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.095196][ T8075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 274.113764][ T8075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.128852][ T8075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 274.153829][ T8075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.217120][ T8075] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 274.267446][ T4801] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 274.284552][ T4801] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 274.322548][ T4801] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 274.342172][ T4801] usb 5-1: USB disconnect, device number 14 [ 274.360365][ T8075] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.383684][ T8075] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.409168][ T8075] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.432871][ T8075] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.483982][ T561] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 274.519285][ T561] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 274.561721][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 274.575541][ T8284] loop4: detected capacity change from 0 to 512 [ 274.717844][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 274.735882][ T8284] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 274.763131][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 274.791925][ T8284] ext4 filesystem being mounted at /7/bus supports timestamps until 2038 (0x7fffffff) [ 274.822181][ T3550] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 274.859835][ T3519] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 275.061779][ T3550] usb 1-1: Using ep0 maxpacket: 32 [ 275.228958][ T3550] usb 1-1: unable to get BOS descriptor or descriptor too short [ 275.236883][ T5094] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 275.296563][ T3681] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 275.329652][ T3681] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 275.342120][ T3550] usb 1-1: config 1 has an invalid descriptor of length 186, skipping remainder of the config [ 275.365452][ T3550] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 275.406879][ T8299] loop4: detected capacity change from 0 to 128 [ 275.466648][ T3519] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 275.474146][ T3550] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 275.485620][ T3550] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 275.497971][ T5094] usb 3-1: Using ep0 maxpacket: 8 [ 275.504032][ T26] audit: type=1800 audit(1721333766.872:58): pid=8299 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1165" name="file0" dev="loop4" ino=1048675 res=0 errno=0 [ 275.558747][ T3550] usb 1-1: SerialNumber: syz [ 275.585728][ T26] audit: type=1804 audit(1721333766.892:59): pid=8299 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1165" name="/newroot/8/bus/file0" dev="loop4" ino=1048675 res=1 errno=0 [ 275.641813][ T5094] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 275.659244][ T5094] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.681074][ T8305] 9pnet: Insufficient options for proto=fd [ 275.706567][ T5094] usb 3-1: config 0 descriptor?? [ 275.721243][ T26] audit: type=1804 audit(1721333766.892:60): pid=8299 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.1165" name="/newroot/8/bus/file0" dev="loop4" ino=1048675 res=1 errno=0 [ 275.825280][ T8283] binder: Bad value for 'stats' [ 276.141676][ T3561] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 276.202023][ T5094] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 276.218932][ T5094] asix 3-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 276.255142][ T5094] asix: probe of 3-1:0.0 failed with error -61 [ 276.285707][ T5094] usb 1-1: USB disconnect, device number 22 [ 276.512015][ T3561] usb 4-1: config 0 has no interfaces? [ 276.517662][ T3561] usb 4-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 276.555987][ T3561] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.578956][ T3561] usb 4-1: config 0 descriptor?? [ 276.683190][ T8323] loop4: detected capacity change from 0 to 512 [ 276.799046][ T8323] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 276.841743][ T8323] ext4 filesystem being mounted at /12/bus supports timestamps until 2038 (0x7fffffff) [ 277.146363][ T8334] loop4: detected capacity change from 0 to 164 [ 277.266909][ T8334] Unable to read rock-ridge attributes [ 277.285423][ T8334] Unable to read rock-ridge attributes [ 277.415598][ T4805] usb 4-1: USB disconnect, device number 14 [ 277.528071][ T8342] loop4: detected capacity change from 0 to 128 [ 277.589135][ T26] audit: type=1800 audit(1721333768.952:61): pid=8342 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1181" name="file0" dev="loop4" ino=1048678 res=0 errno=0 [ 277.680525][ T26] audit: type=1804 audit(1721333768.982:62): pid=8342 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1181" name="/newroot/16/bus/file0" dev="loop4" ino=1048678 res=1 errno=0 [ 277.756791][ T26] audit: type=1804 audit(1721333768.982:63): pid=8342 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.1181" name="/newroot/16/bus/file0" dev="loop4" ino=1048678 res=1 errno=0 [ 277.878779][ T5094] usb 3-1: USB disconnect, device number 23 [ 278.202930][ T8358] device bond_slave_0 entered promiscuous mode [ 278.209506][ T8358] device bond_slave_1 entered promiscuous mode [ 278.277147][ T8356] device bond_slave_0 left promiscuous mode [ 278.283453][ T8356] device bond_slave_1 left promiscuous mode [ 278.522664][ T8364] loop3: detected capacity change from 0 to 512 [ 278.646121][ T8364] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 278.692397][ T8364] ext4 filesystem being mounted at /4/bus supports timestamps until 2038 (0x7fffffff) [ 278.741779][ T3550] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 278.867670][ T3561] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 278.991768][ T3550] usb 3-1: Using ep0 maxpacket: 32 [ 279.058486][ T3519] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 279.101482][ T8385] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1197'. [ 279.156702][ T3550] usb 3-1: unable to get BOS descriptor or descriptor too short [ 279.186997][ T8369] loop4: detected capacity change from 0 to 32768 [ 279.241863][ T3561] usb 2-1: config 0 has no interfaces? [ 279.247528][ T3550] usb 3-1: config 1 has an invalid descriptor of length 186, skipping remainder of the config [ 279.262986][ T3561] usb 2-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 279.277966][ T3550] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 279.291450][ T3561] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.301653][ T3519] usb 1-1: Using ep0 maxpacket: 8 [ 279.319532][ T3561] usb 2-1: config 0 descriptor?? [ 279.341084][ T8369] XFS (loop4): Mounting V5 Filesystem [ 279.386232][ T3550] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 279.409869][ T3550] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 279.421920][ T3519] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 279.431718][ T3519] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.440511][ T3550] usb 3-1: SerialNumber: syz [ 279.484346][ T8369] XFS (loop4): Ending clean mount [ 279.491345][ T8369] XFS (loop4): Quotacheck needed: Please wait. [ 279.500175][ T3519] usb 1-1: config 0 descriptor?? [ 279.532562][ T8369] XFS (loop4): Quotacheck: Done. [ 279.593349][ T7979] XFS (loop4): Unmounting Filesystem [ 279.735004][ T8362] binder: Bad value for 'stats' [ 279.782181][ T8362] loop2: detected capacity change from 0 to 512 [ 279.978137][ T8362] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 279.991861][ T3519] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 280.015217][ T3519] asix 1-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 280.039491][ T8362] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038 (0x7fffffff) [ 280.080222][ T3519] asix: probe of 1-1:0.0 failed with error -61 [ 280.129609][ T8362] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 280.164190][ T3561] usb 2-1: USB disconnect, device number 25 [ 280.190158][ T8407] loop4: detected capacity change from 0 to 128 [ 280.227170][ T8362] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 23 with error 28 [ 280.263837][ T26] audit: type=1804 audit(1721333771.632:64): pid=8411 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1186" name="/newroot/5/file0/file1" dev="loop2" ino=15 res=1 errno=0 [ 280.282178][ T8362] EXT4-fs (loop2): This should not happen!! Data will be lost [ 280.282178][ T8362] [ 280.361731][ T8362] EXT4-fs (loop2): Total free blocks count 0 [ 280.390973][ T26] audit: type=1800 audit(1721333771.672:65): pid=8407 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1201" name="file0" dev="loop4" ino=1048679 res=0 errno=0 [ 280.413960][ T8362] EXT4-fs (loop2): Free/Dirty block details [ 280.448065][ T26] audit: type=1804 audit(1721333771.672:66): pid=8407 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1201" name="/newroot/18/bus/file0" dev="loop4" ino=1048679 res=1 errno=0 [ 280.528718][ T8362] EXT4-fs (loop2): free_blocks=65280 [ 280.552864][ T8362] EXT4-fs (loop2): dirty_blocks=23 [ 280.581024][ T26] audit: type=1804 audit(1721333771.672:67): pid=8407 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.1201" name="/newroot/18/bus/file0" dev="loop4" ino=1048679 res=1 errno=0 [ 280.604178][ T8362] EXT4-fs (loop2): Block reservation details [ 280.650107][ T8362] EXT4-fs (loop2): i_reserved_data_blocks=23 [ 280.719044][ T26] audit: type=1804 audit(1721333771.892:68): pid=8410 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1186" name="/newroot/5/file0/file1" dev="loop2" ino=15 res=1 errno=0 [ 280.746541][ T4813] usb 3-1: USB disconnect, device number 24 [ 281.789068][ T3561] usb 1-1: USB disconnect, device number 23 [ 281.851869][ T3550] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 282.117478][ T8446] loop3: detected capacity change from 0 to 512 [ 282.291642][ C0] sched: RT throttling activated [ 283.292843][ T263] block nbd1: Possible stuck request ffff88801b6c8000: control (read@0,4096B). Runtime 150 seconds [ 284.270216][ T3550] usb 2-1: config 0 has no interfaces? [ 284.281158][ T3550] usb 2-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 284.327082][ T3550] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.352634][ T3550] usb 2-1: config 0 descriptor?? [ 284.468013][ T8457] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1219'. [ 284.481356][ T8459] capability: warning: `syz.4.1218' uses deprecated v2 capabilities in a way that may be insecure [ 284.489558][ T8446] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 284.551751][ T8446] ext4 filesystem being mounted at /12/bus supports timestamps until 2038 (0x7fffffff) [ 284.569792][ T4805] usb 2-1: USB disconnect, device number 26 [ 284.601477][ T8461] loop4: detected capacity change from 0 to 128 [ 284.699368][ T26] audit: type=1800 audit(1721333776.062:69): pid=8461 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1220" name="file0" dev="loop4" ino=1048680 res=0 errno=0 [ 284.810135][ T26] audit: type=1804 audit(1721333776.092:70): pid=8461 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1220" name="/newroot/22/bus/file0" dev="loop4" ino=1048680 res=1 errno=0 [ 284.939639][ T26] audit: type=1804 audit(1721333776.092:71): pid=8461 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.1220" name="/newroot/22/bus/file0" dev="loop4" ino=1048680 res=1 errno=0 [ 284.991838][ T4813] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 285.281437][ T8450] loop2: detected capacity change from 0 to 32768 [ 285.341771][ T4813] usb 1-1: Using ep0 maxpacket: 32 [ 285.484655][ T8450] XFS (loop2): Mounting V5 Filesystem [ 285.514119][ T4813] usb 1-1: unable to get BOS descriptor or descriptor too short [ 285.620159][ T8450] XFS (loop2): Ending clean mount [ 285.623236][ T4813] usb 1-1: config 1 has an invalid descriptor of length 186, skipping remainder of the config [ 285.636660][ T4813] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 285.652726][ T8450] XFS (loop2): Quotacheck needed: Please wait. [ 285.725156][ T4813] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 285.738337][ T4813] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 285.746463][ T4813] usb 1-1: SerialNumber: syz [ 285.747246][ T8450] XFS (loop2): Quotacheck: Done. [ 285.812186][ T4805] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 285.835195][ T8022] XFS (loop2): Unmounting Filesystem [ 286.013946][ T8465] binder: Bad value for 'stats' [ 286.101736][ T4805] usb 4-1: Using ep0 maxpacket: 8 [ 286.191959][ T4801] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 286.198779][ T8504] loop2: detected capacity change from 0 to 512 [ 286.225458][ T8506] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1233'. [ 286.235658][ T8506] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1233'. [ 286.241987][ T4805] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 286.279522][ T8504] EXT4-fs error (device loop2): ext4_find_inline_data_nolock:163: inode #12: comm syz.2.1232: inline data xattr refers to an external xattr inode [ 286.300668][ T4805] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.317624][ T8504] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.1232: couldn't read orphan inode 12 (err -117) [ 286.329280][ T4813] usb 1-1: USB disconnect, device number 24 [ 286.330896][ T8504] EXT4-fs (loop2): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000200000,data_err=ignore,norecovery,resuid=0x0000000000000000,prjquota,debug_want_extra_isize=0x0000000000000008,usrjquota=,resgid=0x0000000000000000,nodiscard,,errors=continue. Quota mode: writeback. [ 286.337157][ T4805] usb 4-1: config 0 descriptor?? [ 286.428817][ T8504] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 286.459426][ T8504] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 286.487950][ T8504] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 286.506247][ T8504] device bridge_slave_0 left promiscuous mode [ 286.521349][ T8504] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.548804][ T8504] device bridge_slave_1 left promiscuous mode [ 286.559650][ T8504] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.573078][ T4801] usb 5-1: config 0 has no interfaces? [ 286.578596][ T4801] usb 5-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 286.596845][ T4801] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.609626][ T8504] bond0: (slave bond_slave_0): Releasing backup interface [ 286.610804][ T4801] usb 5-1: config 0 descriptor?? [ 286.649503][ T8504] bond0: (slave bond_slave_1): Releasing backup interface [ 286.714410][ T8504] team0: Port device team_slave_0 removed [ 286.810585][ T8504] team0: Port device team_slave_1 removed [ 286.818732][ T8504] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 286.826809][ T8504] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 286.837847][ T8504] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 286.858502][ T8504] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 286.931829][ T4805] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 286.952306][ T4805] asix 4-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffe0 [ 286.996909][ T4805] asix: probe of 4-1:0.0 failed with error -32 [ 287.402121][ T4805] usb 5-1: USB disconnect, device number 15 [ 287.555507][ T8541] device syz_tun entered promiscuous mode [ 287.610758][ T8541] device bridge0 entered promiscuous mode [ 287.619750][ T8551] loop4: detected capacity change from 0 to 256 [ 287.658244][ T8541] device hsr1 entered promiscuous mode [ 287.710188][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 288.009331][ T8561] loop4: detected capacity change from 0 to 128 [ 288.111760][ T4805] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 288.135313][ T26] audit: type=1800 audit(1721333779.502:72): pid=8561 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1253" name="file0" dev="loop4" ino=1048681 res=0 errno=0 [ 288.191213][ T26] audit: type=1804 audit(1721333779.532:73): pid=8561 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1253" name="/newroot/33/bus/file0" dev="loop4" ino=1048681 res=1 errno=0 [ 288.254086][ T26] audit: type=1804 audit(1721333779.532:74): pid=8561 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.1253" name="/newroot/33/bus/file0" dev="loop4" ino=1048681 res=1 errno=0 [ 288.411939][ T4805] usb 1-1: Using ep0 maxpacket: 32 [ 288.498533][ T1069] usb 4-1: USB disconnect, device number 15 [ 288.592947][ T4805] usb 1-1: unable to get BOS descriptor or descriptor too short [ 288.671811][ T4805] usb 1-1: config 1 has an invalid descriptor of length 186, skipping remainder of the config [ 288.704140][ T4805] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 288.852627][ T4805] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 288.867476][ T4805] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 288.890363][ T4805] usb 1-1: SerialNumber: syz [ 288.891786][ T1066] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 289.034700][ T8590] loop3: detected capacity change from 0 to 512 [ 289.087035][ T8597] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1266'. [ 289.126968][ T8590] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 289.144881][ T8556] binder: Bad value for 'stats' [ 289.165799][ T8590] ext4 filesystem being mounted at /18/file0 supports timestamps until 2038 (0x7fffffff) [ 289.209025][ T8590] netlink: 'syz.3.1263': attribute type 10 has an invalid length. [ 289.241909][ T8590] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1263'. [ 289.271466][ T8590] device bond0 entered promiscuous mode [ 289.291937][ T1066] usb 2-1: config 0 has no interfaces? [ 289.297474][ T1066] usb 2-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 289.301685][ T8590] device bond_slave_0 entered promiscuous mode [ 289.313665][ T1066] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.329983][ T1066] usb 2-1: config 0 descriptor?? [ 289.331823][ T8590] device bond_slave_1 entered promiscuous mode [ 289.350536][ T8590] bridge0: port 3(bond0) entered blocking state [ 289.357371][ T8590] bridge0: port 3(bond0) entered disabled state [ 289.373551][ T8590] bridge0: port 3(bond0) entered blocking state [ 289.379888][ T8590] bridge0: port 3(bond0) entered forwarding state [ 289.485913][ T1069] usb 1-1: USB disconnect, device number 25 [ 289.581944][ T8595] loop4: detected capacity change from 0 to 32768 [ 289.728035][ T5094] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 289.776085][ T8595] XFS (loop4): Mounting V5 Filesystem [ 289.896230][ T8595] XFS (loop4): Ending clean mount [ 289.923963][ T8595] XFS (loop4): Quotacheck needed: Please wait. [ 289.971769][ T5094] usb 3-1: Using ep0 maxpacket: 8 [ 289.971949][ T8595] XFS (loop4): Quotacheck: Done. [ 290.041869][ T7979] XFS (loop4): Unmounting Filesystem [ 290.092113][ T5094] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 290.101664][ T1066] usb 2-1: USB disconnect, device number 27 [ 290.121991][ T5094] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.153908][ T5094] usb 3-1: config 0 descriptor?? [ 290.642406][ T5094] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 290.676154][ T5094] asix 3-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffe0 [ 290.720907][ T5094] asix: probe of 3-1:0.0 failed with error -32 [ 290.732588][ T27] INFO: task udevd:3935 blocked for more than 143 seconds. [ 290.736046][ T8648] device hsr0 entered promiscuous mode [ 290.741851][ T27] Not tainted 5.15.163-syzkaller #0 [ 290.779780][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 290.798899][ T27] task:udevd state:D stack:24544 pid: 3935 ppid: 2962 flags:0x00004002 [ 290.805869][ T8648] device macsec1 entered promiscuous mode [ 290.819625][ T27] Call Trace: [ 290.827467][ T27] [ 290.830555][ T27] __schedule+0x12c4/0x45b0 [ 290.839919][ T27] ? release_firmware_map_entry+0x190/0x190 [ 290.846923][ T27] ? preempt_schedule+0xd9/0xe0 [ 290.852145][ T27] ? release_firmware_map_entry+0x190/0x190 [ 290.858210][ T27] ? preempt_schedule+0xd9/0xe0 [ 290.863323][ T27] ? schedule_preempt_disabled+0x20/0x20 [ 290.869127][ T27] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 290.875405][ T27] ? print_irqtrace_events+0x210/0x210 [ 290.881013][ T27] ? _raw_spin_lock_irq+0xdb/0x110 [ 290.886418][ T27] schedule+0x11b/0x1f0 [ 290.890693][ T27] io_schedule+0x88/0x100 [ 290.895425][ T27] wait_on_page_bit_common+0xa13/0x1180 [ 290.901227][ T27] ? wait_on_page_bit+0x50/0x50 [ 290.906533][ T27] ? blkdev_fallocate+0x4e0/0x4e0 [ 290.912358][ T27] ? rcu_lock_release+0x20/0x20 [ 290.917360][ T27] ? vsnprintf+0x1c70/0x1c70 [ 290.922498][ T27] do_read_cache_page+0x9c1/0x1040 [ 290.927770][ T27] read_part_sector+0xd8/0x530 [ 290.933059][ T27] adfspart_check_ICS+0xd9/0xd00 [ 290.938160][ T27] ? ptr_to_hashval+0x60/0x60 [ 290.944451][ T27] ? adfspart_check_ADFS+0x8b0/0x8b0 [ 290.950592][ T27] ? snprintf+0xd6/0x120 [ 290.960039][ T27] ? __rmqueue_pcplist+0x2030/0x2030 [ 290.968897][ T27] ? __vmalloc_node_range+0x6aa/0x8c0 [ 290.979525][ T27] ? vsnprintf+0x1b8c/0x1c70 [ 290.988489][ T27] ? vsnprintf+0x191/0x1c70 [ 290.998174][ T27] ? vscnprintf+0x80/0x80 [ 291.006358][ T27] ? alloc_pages+0x458/0x570 [ 291.011085][ T27] bdev_disk_changed+0x964/0x16c0 [ 291.021299][ T27] ? blk_drop_partitions+0x1b0/0x1b0 [ 291.030449][ T27] ? iput+0x371/0x8b0 [ 291.031681][ T21] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 291.039949][ T27] blkdev_get_whole+0x2fb/0x390 [ 291.050745][ T27] blkdev_get_by_dev+0x2bc/0xa50 [ 291.057461][ T27] blkdev_open+0x138/0x2d0 [ 291.062277][ T4813] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 291.070155][ T27] ? block_ioctl+0xf0/0xf0 [ 291.075045][ T27] do_dentry_open+0x807/0xfb0 [ 291.079844][ T27] path_openat+0x2705/0x2f20 [ 291.085021][ T27] ? do_filp_open+0x460/0x460 [ 291.089843][ T27] do_filp_open+0x21c/0x460 [ 291.095249][ T27] ? vfs_tmpfile+0x2e0/0x2e0 [ 291.100003][ T27] ? _raw_spin_unlock+0x24/0x40 [ 291.105466][ T27] ? alloc_fd+0x594/0x630 [ 291.109915][ T27] do_sys_openat2+0x13b/0x4f0 [ 291.115657][ T27] ? do_sys_open+0x220/0x220 [ 291.120373][ T27] ? __fdget+0x158/0x220 [ 291.125077][ T27] __x64_sys_openat+0x243/0x290 [ 291.130195][ T27] ? __ia32_sys_open+0x270/0x270 [ 291.135546][ T27] ? syscall_enter_from_user_mode+0x2e/0x240 [ 291.142179][ T27] ? lockdep_hardirqs_on+0x94/0x130 [ 291.147534][ T27] ? syscall_enter_from_user_mode+0x2e/0x240 [ 291.159451][ T27] do_syscall_64+0x3b/0xb0 [ 291.167281][ T27] ? clear_bhb_loop+0x15/0x70 [ 291.177465][ T27] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 291.185803][ T27] RIP: 0033:0x7f8a246609a4 [ 291.190463][ T27] RSP: 002b:00007ffdf513b600 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 291.205861][ T27] RAX: ffffffffffffffda RBX: 000055861e017cf0 RCX: 00007f8a246609a4 [ 291.214709][ T27] RDX: 00000000000a0800 RSI: 000055861e01ac60 RDI: 00000000ffffff9c [ 291.222953][ T27] RBP: 000055861e01ac60 R08: 0000000000000001 R09: 0000000000000010 [ 291.231075][ T27] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000a0800 [ 291.239222][ T27] R13: 000055861e0092b0 R14: 0000000000000001 R15: 000055861dff6910 [ 291.247407][ T27] [ 291.250535][ T27] INFO: task syz.1.359:5054 blocked for more than 143 seconds. [ 291.259037][ T27] Not tainted 5.15.163-syzkaller #0 [ 291.264901][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 291.273662][ T27] task:syz.1.359 state:D stack:26368 pid: 5054 ppid: 4455 flags:0x00004004 [ 291.282949][ T27] Call Trace: [ 291.286236][ T27] [ 291.289152][ T27] __schedule+0x12c4/0x45b0 [ 291.294035][ T21] usb 5-1: Using ep0 maxpacket: 32 [ 291.296947][ T27] ? release_firmware_map_entry+0x190/0x190 [ 291.308433][ T27] ? __mutex_trylock_common+0x8d/0x2e0 [ 291.316386][ T27] ? do_raw_spin_unlock+0x137/0x8b0 [ 291.324748][ T27] schedule+0x11b/0x1f0 [ 291.329043][ T27] schedule_preempt_disabled+0xf/0x20 [ 291.337451][ T27] __mutex_lock_common+0xe34/0x25a0 [ 291.345690][ T27] ? blkdev_put+0xfb/0x790 [ 291.350104][ T27] ? mutex_lock_io_nested+0x60/0x60 [ 291.357777][ T27] ? __fsnotify_parent+0x50b/0x730 [ 291.363130][ T27] mutex_lock_nested+0x17/0x20 [ 291.367913][ T27] blkdev_put+0xfb/0x790 [ 291.373224][ T27] ? __rwlock_init+0x140/0x140 [ 291.378012][ T27] blkdev_close+0x7c/0xa0 [ 291.383005][ T27] ? blkdev_open+0x2d0/0x2d0 [ 291.387607][ T27] __fput+0x3fe/0x8e0 [ 291.392496][ T27] task_work_run+0x129/0x1a0 [ 291.397112][ T27] exit_to_user_mode_loop+0x106/0x130 [ 291.402545][ T27] exit_to_user_mode_prepare+0xb1/0x140 [ 291.408106][ T27] syscall_exit_to_user_mode+0x5d/0x240 [ 291.413966][ T27] do_syscall_64+0x47/0xb0 [ 291.418400][ T27] ? clear_bhb_loop+0x15/0x70 [ 291.423162][ T27] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 291.429071][ T27] RIP: 0033:0x7f2bd1d21b59 [ 291.433726][ T27] RSP: 002b:00007f2bd07a2048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 291.442212][ T27] RAX: 0000000000000000 RBX: 00007f2bd1eaff60 RCX: 00007f2bd1d21b59 [ 291.450192][ T27] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000003 [ 291.451964][ T21] usb 5-1: unable to get BOS descriptor or descriptor too short [ 291.459368][ T4813] usb 1-1: config 0 has no interfaces? [ 291.471342][ T27] RBP: 00007f2bd1d90e5d R08: 0000000000000000 R09: 0000000000000000 [ 291.479509][ T4813] usb 1-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 291.488673][ T27] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 291.496859][ T4813] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.504890][ T27] R13: 000000000000000b R14: 00007f2bd1eaff60 R15: 00007ffd61951338 [ 291.516024][ T4813] usb 1-1: config 0 descriptor?? [ 291.521155][ T27] [ 291.524884][ T8648] device hsr0 left promiscuous mode [ 291.530615][ T27] [ 291.530615][ T27] Showing all locks held in the system: [ 291.551782][ T21] usb 5-1: config 1 has an invalid descriptor of length 186, skipping remainder of the config [ 291.557320][ T27] 6 locks held by kworker/1:0/21: [ 291.569725][ T27] 1 lock held by khungtaskd/27: [ 291.575370][ T27] #0: ffffffff8c91fb20 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x0/0x30 [ 291.583280][ T21] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 291.585200][ T27] 3 locks held by kworker/u4:3/561: [ 291.603245][ T27] 3 locks held by kworker/1:2/1066: [ 291.608464][ T27] #0: ffff888011c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x78a/0x10c0 [ 291.619328][ T27] #1: ffffc900045f7d20 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x7d0/0x10c0 [ 291.630683][ T27] #2: ffffffff8d9e8348 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xa/0x50 [ 291.639709][ T27] 2 locks held by getty/3262: [ 291.644430][ T27] #0: ffff888024336098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 291.654262][ T27] #1: ffffc900024b32e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6af/0x1db0 [ 291.665575][ T27] 1 lock held by udevd/3935: [ 291.670165][ T27] #0: ffff88801b656118 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x14d/0xa50 [ 291.680245][ T27] 3 locks held by kworker/0:11/4805: [ 291.681824][ T21] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 291.685565][ T27] #0: ffff8880238cc538 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x78a/0x10c0 [ 291.703708][ T21] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 291.705862][ T27] #1: ffffc90003177d20 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x7d0/0x10c0 [ 291.720877][ T21] usb 5-1: SerialNumber: syz [ 291.725950][ T27] #2: ffffffff8d9e8348 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xcc/0x1720 [ 291.726022][ T27] 2 locks held by kworker/0:12/4806: [ 291.726035][ T27] #0: ffff888011c72138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x78a/0x10c0 [ 291.726093][ T27] #1: ffffc90003187d20 ((work_completion)(&rew.rew_work)){+.+.}-{0:0}, at: process_one_work+0x7d0/0x10c0 [ 291.768817][ T27] 1 lock held by syz.1.359/5054: [ 291.780134][ T27] #0: ffff88801b656118 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_put+0xfb/0x790 [ 291.789615][ T27] 1 lock held by syz.0.609/5912: [ 291.794632][ T27] #0: ffff88801b656118 (&disk->open_mutex){+.+.}-{3:3}, at: sync_bdevs+0x1a5/0x310 [ 291.804095][ T27] 2 locks held by syz.1.1283/8648: [ 291.809205][ T27] #0: ffffffff8d9e8348 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x94c/0xee0 [ 291.818732][ T27] #1: ffffffff8c9240e8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x280/0x740 [ 291.831149][ T27] [ 291.833831][ T27] ============================================= [ 291.833831][ T27] [ 291.842339][ T27] NMI backtrace for cpu 0 [ 291.846656][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted 5.15.163-syzkaller #0 [ 291.854617][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 291.864677][ T27] Call Trace: [ 291.868053][ T27] [ 291.870991][ T27] dump_stack_lvl+0x1e3/0x2d0 [ 291.875665][ T27] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 291.881295][ T27] ? panic+0x860/0x860 [ 291.885370][ T27] ? nmi_cpu_backtrace+0x23b/0x4a0 [ 291.890472][ T27] nmi_cpu_backtrace+0x46a/0x4a0 [ 291.895401][ T27] ? __wake_up_klogd+0xd5/0x100 [ 291.900264][ T27] ? nmi_trigger_cpumask_backtrace+0x2a0/0x2a0 [ 291.906419][ T27] ? _printk+0xd1/0x120 [ 291.910561][ T27] ? panic+0x860/0x860 [ 291.914627][ T27] ? __wake_up_klogd+0xcc/0x100 [ 291.919482][ T27] ? panic+0x860/0x860 [ 291.923545][ T27] ? __rcu_read_unlock+0x92/0x100 [ 291.928672][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 291.934765][ T27] nmi_trigger_cpumask_backtrace+0x181/0x2a0 [ 291.940754][ T27] watchdog+0xe72/0xeb0 [ 291.944915][ T27] kthread+0x3f6/0x4f0 [ 291.948984][ T27] ? hungtask_pm_notify+0x50/0x50 [ 291.954000][ T27] ? kthread_blkcg+0xd0/0xd0 [ 291.958592][ T27] ret_from_fork+0x1f/0x30 [ 291.963005][ T27] [ 291.966640][ T27] Sending NMI from CPU 0 to CPUs 1: [ 291.972290][ C1] NMI backtrace for cpu 1 [ 291.972300][ C1] CPU: 1 PID: 3588 Comm: kworker/u4:5 Not tainted 5.15.163-syzkaller #0 [ 291.972316][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 291.972325][ C1] Workqueue: phy49 ieee80211_iface_work [ 291.972343][ C1] RIP: 0010:kasan_check_range+0x7b/0x290 [ 291.972360][ C1] Code: 00 00 00 00 fc ff df 4f 8d 34 1a 4c 89 f5 4c 29 cd 48 83 fd 10 7f 26 48 85 ed 0f 84 3a 01 00 00 49 f7 d2 49 01 da 41 80 39 00 <0f> 85 c4 01 00 00 49 ff c1 49 ff c2 75 ee e9 1d 01 00 00 45 89 cf [ 291.972373][ C1] RSP: 0018:ffffc9000118f9b0 EFLAGS: 00000046 [ 291.972384][ C1] RAX: 0000000000000001 RBX: 1ffffffff1f7f437 RCX: ffffffff816319a8 [ 291.972395][ C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff8fbfa1b8 [ 291.972405][ C1] RBP: 0000000000000001 R08: dffffc0000000000 R09: fffffbfff1f7f437 [ 291.972415][ C1] R10: ffffffffffffffff R11: dffffc0000000001 R12: ffff88801c270b38 [ 291.972426][ C1] R13: dffffc0000000000 R14: fffffbfff1f7f438 R15: ffff88801c270b18 [ 291.972438][ C1] FS: 0000000000000000(0000) GS:ffff8880b9b00000(0000) knlGS:0000000000000000 [ 291.972451][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 291.972461][ C1] CR2: 000000110c426143 CR3: 000000001d00b000 CR4: 00000000003506e0 [ 291.972473][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 291.972482][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 291.972491][ C1] Call Trace: [ 291.972498][ C1] [ 291.972502][ C1] ? nmi_cpu_backtrace+0x39f/0x4a0 [ 291.972519][ C1] ? read_lock_is_recursive+0x10/0x10 [ 291.972534][ C1] ? nmi_trigger_cpumask_backtrace+0x2a0/0x2a0 [ 291.972556][ C1] ? nmi_cpu_backtrace_handler+0x8/0x10 [ 291.972571][ C1] ? nmi_handle+0xf7/0x370 [ 291.972586][ C1] ? kasan_check_range+0x7b/0x290 [ 291.972600][ C1] ? default_do_nmi+0x62/0x150 [ 291.972616][ C1] ? exc_nmi+0xa8/0x100 [ 291.972630][ C1] ? end_repeat_nmi+0x16/0x31 [ 291.972647][ C1] ? mark_lock+0x98/0x340 [ 291.972660][ C1] ? kasan_check_range+0x7b/0x290 [ 291.972675][ C1] ? kasan_check_range+0x7b/0x290 [ 291.972689][ C1] ? kasan_check_range+0x7b/0x290 [ 291.972703][ C1] [ 291.972706][ C1] [ 291.972712][ C1] mark_lock+0x98/0x340 [ 291.972726][ C1] lockdep_hardirqs_on_prepare+0x27d/0x7a0 [ 291.972742][ C1] ? print_irqtrace_events+0x210/0x210 [ 291.972757][ C1] ? do_raw_spin_unlock+0x137/0x8b0 [ 291.972772][ C1] ? _raw_spin_lock_irqsave+0xac/0x120 [ 291.972791][ C1] trace_hardirqs_on+0x67/0x80 [ 291.972807][ C1] _raw_spin_unlock_irqrestore+0x8b/0x130 [ 291.972822][ C1] ? _raw_spin_unlock+0x40/0x40 [ 291.972836][ C1] ? lockdep_hardirqs_on+0x94/0x130 [ 291.972853][ C1] skb_dequeue+0x10f/0x140 [ 291.972873][ C1] ieee80211_iface_work+0x260/0xcc0 [ 291.972890][ C1] process_one_work+0x8a1/0x10c0 [ 291.972911][ C1] ? worker_detach_from_pool+0x260/0x260 [ 291.972934][ C1] ? _raw_spin_lock_irqsave+0x120/0x120 [ 291.972951][ C1] ? kthread_data+0x4e/0xc0 [ 291.972965][ C1] ? wq_worker_running+0x97/0x170 [ 291.972980][ C1] worker_thread+0xaca/0x1280 [ 291.973004][ C1] kthread+0x3f6/0x4f0 [ 291.973017][ C1] ? rcu_lock_release+0x20/0x20 [ 291.973031][ C1] ? kthread_blkcg+0xd0/0xd0 [ 291.973045][ C1] ret_from_fork+0x1f/0x30 [ 291.973066][ C1] [ 291.975718][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 291.985921][ T8650] binder: Bad value for 'stats' [ 291.988350][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted 5.15.163-syzkaller #0 [ 291.988376][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 291.988389][ T27] Call Trace: [ 291.988398][ T27] [ 291.988407][ T27] dump_stack_lvl+0x1e3/0x2d0 [ 292.018240][ T8650] loop4: detected capacity change from 0 to 512 [ 292.029173][ T27] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 292.029206][ T27] ? panic+0x860/0x860 [ 292.029241][ T27] panic+0x318/0x860 [ 292.029263][ T27] ? schedule_preempt_disabled+0x20/0x20 [ 292.029289][ T27] ? nmi_trigger_cpumask_backtrace+0x221/0x2a0 [ 292.029313][ T27] ? fb_is_primary_device+0xd0/0xd0 [ 292.029340][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 292.029366][ T27] ? nmi_trigger_cpumask_backtrace+0x221/0x2a0 [ 292.029388][ T27] ? nmi_trigger_cpumask_backtrace+0x281/0x2a0 [ 292.029412][ T27] ? nmi_trigger_cpumask_backtrace+0x286/0x2a0 [ 292.029436][ T27] watchdog+0xeb0/0xeb0 [ 292.403665][ T27] kthread+0x3f6/0x4f0 [ 292.407750][ T27] ? hungtask_pm_notify+0x50/0x50 [ 292.412822][ T27] ? kthread_blkcg+0xd0/0xd0 [ 292.417437][ T27] ret_from_fork+0x1f/0x30 [ 292.421871][ T27] [ 292.425153][ T27] Kernel Offset: disabled [ 292.429473][ T27] Rebooting in 86400 seconds..