last executing test programs: 13.648904054s ago: executing program 0 (id=521): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000040)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) accept4(r0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000001a80)=""/102400, 0x19000}, {0x0}], 0x2, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x0, 0x0) r1 = epoll_create(0x3f) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r3 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x3) ftruncate(r3, 0xffff) fcntl$addseals(r3, 0x409, 0x7) r4 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000000)={r3, 0x0, 0x0, 0x8000}) r5 = fcntl$dupfd(r4, 0x0, r1) ppoll(&(0x7f0000000140)=[{r5}, {r5, 0x1004}, {r4, 0x810}], 0x3, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) io_uring_setup(0x354b, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, r5}) r6 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r6, 0x0, 0x0) r7 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r7, &(0x7f0000000200)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x0, 0x2, 0x3, {0xa, 0x4e22, 0x1, @mcast2, 0xa47}}}, 0x32) r8 = socket$pppl2tp(0x18, 0x1, 0x1) write$vhost_msg_v2(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, {0x0, 0x0, 0x0}}, 0x48) connect$pppl2tp(r8, 0x0, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r9, 0x29, 0x45, &(0x7f0000000000)={'TPROXY\x00'}, &(0x7f0000000040)=0x1e) 12.328373371s ago: executing program 0 (id=528): r0 = syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x800081, &(0x7f00000007c0)={[{@nls={'nls', 0x3d, 'koi8-r'}}, {}, {@creator={'creator', 0x3d, "6c080be5"}}, {@barrier}, {@nobarrier}, {@umask={'umask', 0x3d, 0x401}}]}, 0x0, 0x6e3, &(0x7f00000000c0)="$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") ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0x7, 0x40, 0x2}) accept$packet(r1, &(0x7f00000008c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000840)=0x14) r2 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="120100005131e70863072110621c000000010902120001000000000904000000ff4ada0002da5c49a819faba89b2d11adf49d899e97d7be222ece814692d7ec66e7caa257d0534908d90d35700756d27dc1f5cd80800550cbc444950d8b11e0c66ffaa4bd8fffe1ddb19dad54ea7d51a2145d5760701f52d85128bdd1cb9eb7a3bcb604288a8e4cf6528101a906dda1f899c2aacec579464ee409ec1dc0efdd1b0"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x409, 0x0, 0x0, {}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xf}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x70}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r8, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x69, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x26892}], 0xbb}}], 0x2, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc]}}]}}]}, 0x8c}}, 0x0) 8.037657139s ago: executing program 0 (id=546): ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r0, 0xe0, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r1}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x108, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f09df33c9f7b986", 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 7.471241315s ago: executing program 2 (id=547): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6}, @NFTA_LOG_QTHRESHOLD={0x6, 0x4, 0x1, 0x0, 0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) 7.061358938s ago: executing program 2 (id=548): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000000000e8950f696217dd9a00000000000000980f6b189239376706f6a5fc57f9b5c57a0db2e83478cded2bfe54815ce21278290775"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r4) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r5 = inotify_init1(0x0) fcntl$setown(r5, 0x8, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmmsg(r6, &(0x7f0000000240), 0x0, 0x40000100, &(0x7f0000000280)) fcntl$getownex(r5, 0x10, &(0x7f0000000140)={0x0, 0x0}) r8 = syz_open_procfs(r7, &(0x7f0000000600)='fd/4\x00') ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r8, 0x4004662b, &(0x7f0000000180)={@desc={0x1, 0x2000000, @desc3}}) 6.844251186s ago: executing program 4 (id=550): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x2, &(0x7f0000000b80)=ANY=[@ANYBLOB="850000000200000095"], &(0x7f0000000180)='GPL\x00', 0x2, 0xe9, &(0x7f0000000240)=""/233, 0x0, 0x11}, 0x90) 6.777969001s ago: executing program 0 (id=551): futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x1, 0x0, 0x0, 0x0, 0x0) 5.754057774s ago: executing program 3 (id=552): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x2c8, 0x128, 0x111, 0x4b4, 0x128, 0xd4feffff, 0x128, 0x20a, 0x278, 0x220, 0x278, 0x3, 0x0, {[{{@ipv6={@private2, @loopback, [], [], 'bond_slave_1\x00', 'team_slave_0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@tcp={{0x30}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x328) 5.734656486s ago: executing program 2 (id=553): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xb1}, @IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x60}}, 0x0) 5.67695378s ago: executing program 3 (id=554): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=@newtaction={0x14, 0x6a, 0x2195}, 0x14}}, 0x0) 5.67414983s ago: executing program 4 (id=555): r0 = socket$rds(0x15, 0x5, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r0, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) 5.576496648s ago: executing program 0 (id=556): ioperm(0x0, 0x3, 0x3f) eventfd2(0x81, 0xc0801) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) bind$xdp(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) pipe2$watch_queue(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$TCFLSH(r1, 0x541b, 0xffffffffffffffff) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='batadv_slave_0\x00', 0x10) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='wlan1\x00', 0x10) setsockopt$inet_opts(r2, 0x0, 0x4, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000001c0)="8e77ca3389787867582dd0b9999e5e7ce579fc6b2977bf71ab517f68a8ddb58b93c91675a4b5dde502242a66491162f75f9b28f59cd9746ff7140fde3923b99bcc4c2cc72443169b2ab2f90a0f03dd842adba400500327de779dc66f3ebd32a81ebea8b89c9cc7e0f46e28fc1ff127a0", 0x70, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03859bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b037511bf746bec66ba", 0x2acf, 0x11, 0x0, 0x27) recvmsg(r0, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x200045ca}], 0xa, 0x0, 0x46, 0x407006}, 0x104) shutdown(r0, 0x1) syz_usb_connect(0x0, 0x48, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005ce48620450c1960ae3d010203010902360001000000000904fd"], 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) 5.522797812s ago: executing program 1 (id=557): socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x154, 0x10, 0x713, 0x0, 0x0, {{@in=@remote, @in=@local}, {@in=@loopback, 0x0, 0x32}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0xa, 0x1}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x4, {0x2, 0x0, 0x0, @in=@loopback}}]}, 0x154}}, 0x0) 5.505560734s ago: executing program 2 (id=558): r0 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) request_key(&(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000140)='#$*\x00', r0) keyctl$restrict_keyring(0xa, r0, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='id:cb2e') 5.395799883s ago: executing program 3 (id=559): r0 = socket$isdn(0x22, 0x3, 0x0) bind$isdn(r0, &(0x7f00000001c0)={0x22, 0x0, 0x0, 0xb4, 0x7}, 0x6) 5.264998773s ago: executing program 3 (id=560): memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x1d, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000007000000000100000200000400000000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000186a00000800000000000000c6040000186100000400000000000000070000002d5500000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000300)='GPL\x00', 0xa, 0x8f, &(0x7f0000000180)=""/143}, 0x90) memfd_create(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) io_setup(0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) preadv(r1, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) r2 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r2, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) syz_emit_ethernet(0x7e, &(0x7f00000000c0)={@link_local, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "02000b", 0x48, 0x2f, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558, 0x4, 0x0, [], "97de0000"}}}}}}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1}}}, 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000000000000000008847", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016000000000008001c000000000005000c00000000000a001a"], 0xc3}, 0x1, 0x100000000000000}, 0x0) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f00000001c0)={0x5c, 0xa, 0x0, "b75c89e7a20c8eac82ad0416bb1844038d2cd97c945462f31638b5394c00"}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}}, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x268080) socket$nl_route(0x10, 0x3, 0x0) 5.230664436s ago: executing program 2 (id=561): r0 = memfd_create(&(0x7f0000000280)='%\x00', 0x4) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x200000f, 0x4002012, r0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000180)='sys_enter\x00'}, 0x10) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = io_uring_setup(0x177b, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="850000002200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x6, 0x4, 0x5b, 0x8a}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4) sendmsg$unix(r5, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x1e2febc4}, 0x10}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r3, 0x0, 0xcc0, 0xfffffffffffffde6, &(0x7f00000001c0)="348b0d151f8218e3c73697e4080049c416b90900000093291cfc5e8b99005e8b9900", 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 5.217026317s ago: executing program 4 (id=562): r0 = openat$incfs(0xffffffffffffff9c, &(0x7f00000001c0)='.log\x00', 0x142542, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) bind$unix(r0, &(0x7f0000000080)=@abs={0x0, 0x0, 0x4e21}, 0x6e) 4.9427219s ago: executing program 1 (id=563): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000ed000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {r2, 0x0, 0x30, 0x30, 0x0, @in6={0x1b, 0x0, 0x0, @loopback}, @ib={0x1b, 0x0, 0x0, {"0e000000000000000000000004000001"}}}}, 0x118) 4.801888051s ago: executing program 1 (id=564): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bind$inet6(0xffffffffffffffff, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='blkio.bfq.sectors\x00', 0x26e1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[], 0x32600) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000202069250000000000202020730af8ff00000000bfa100000000000007010000f6ffffffb702000008000000b703000000000080850000009900000195"], &(0x7f0000000300)='GPL\x00', 0x5, 0xff8, &(0x7f0000001e00)=""/4088}, 0x90) r4 = socket(0x11, 0x800000003, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000340)={'sit0\x00', &(0x7f0000000580)={'sit0\x00', 0x0, 0x700, 0x7, 0x1, 0x3, {{0x29, 0x4, 0x0, 0x4, 0xa4, 0x65, 0x0, 0x20, 0x2f, 0x0, @multicast2, @empty, {[@timestamp_addr={0x44, 0x4c, 0xd5, 0x1, 0xe, [{@dev={0xac, 0x14, 0x14, 0x35}, 0xf8d}, {@rand_addr=0x64010102, 0x9}, {@loopback, 0x2}, {@local, 0x81}, {@local, 0x800}, {@multicast2, 0x100}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3b}, 0x2}, {@multicast1, 0x40}]}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x3c, 0xe5, 0x3, 0x5, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}, {@multicast2, 0x5}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}, {@local, 0x2}, {@empty, 0x40}, {@multicast2, 0xffff}, {@rand_addr=0x64010100, 0x6}]}, @ra={0x94, 0x4}]}}}}}) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="280000001c0073fc000000000000000007000003", @ANYRES32=r6, @ANYBLOB="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"], 0x28}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0xf, 0x4, &(0x7f0000000140)=@framed={{}, [@generic={0x71, 0x2, 0x1}]}, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0xac, &(0x7f0000000000)=""/172, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x80) 4.801380701s ago: executing program 4 (id=565): socket$inet6(0xa, 0x2, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r4 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r5 = dup(r4) ioctl$LOOP_SET_FD(r5, 0x800448d3, 0xffffffffffffffff) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r6, 0x40046205, 0xfffffffffffffffe) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x24048081, 0x0, 0x0) chdir(0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), 0xffffffffffffffff) 1.543819585s ago: executing program 1 (id=566): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x7c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x68, 0x1, [@m_tunnel_key={0x64, 0x1, 0x0, 0x0, {{0xf}, {0x34, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @empty}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x0) 1.514357277s ago: executing program 4 (id=567): r0 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000700)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, r0}) io_uring_enter(r0, 0x1808, 0x0, 0x0, 0x0, 0x0) 1.453626632s ago: executing program 0 (id=568): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0500000000000109022400010000000009040001090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x22, {[@global=@item_4={0x3, 0x1, 0x0, "3951b38e"}, @local=@item_4={0x3, 0x2, 0x0, "67aff528"}, @global=@item_4, @local=@item_4={0x3, 0x2, 0x2, "849b9173"}, @local=@item_012={0x1, 0x2, 0x0, 'N'}, @global=@item_012={0x1, 0x1, 0x0, "1a"}, @local=@item_4={0x3, 0x2, 0x0, "fa9e274a"}, @local=@item_4={0x3, 0x2, 0x2}]}}, 0x0}, 0x0) 1.442030633s ago: executing program 2 (id=569): syz_usb_connect$cdc_ecm(0x2, 0x9f, &(0x7f0000000640)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8d, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x0, "d7e2d8e958fe"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x73c5, 0x800, 0x67c4, 0x9}, [@network_terminal={0x7}, @country_functional={0x6}, @mdlm={0x15}, @mdlm={0x15}, @dmm={0x7}, @dmm={0x7}]}, {[{}]}}}]}}]}}, &(0x7f0000000540)={0xffffffffffffff77, &(0x7f0000000180)={0xa}, 0x17, &(0x7f00000001c0)={0x5, 0xf, 0x17, 0x2, [@ext_cap={0x7}, @wireless={0xb}]}, 0xa, [{0x4, &(0x7f0000000200)=@lang_id={0x4}}, {0x4, &(0x7f0000000240)=@lang_id={0x4}}, {0x4, &(0x7f0000000280)=@lang_id={0x4}}, {0x4, &(0x7f0000000700)=@string={0x0, 0x3, "2ceb0851f38abbfe56f321e58867315e808df6d3547cdde3a418172b9412709b69f6fef9840ce272240c83a6c77a93fc055f599755f1f7fb265c71f7a3dd9e415687c0425251daf4ab6100f20ee493c92c6b796956c4b94de139a9bbcf6fe473f483205d7b33fd5d8a0ea1f0be58cdec62d2dfae92c2e3b0c84cf28e1545a3eea38e94d82d26489698a68278c02866cf3f7a982c88c4bd6a6045360bdfad7b9203714919a0cd611a7426161864eaeb86acc23f740f4998e1a41607bb8f742564e26c46036c5b1732f2050dfee36d9b2b815216f793a1e5"}}, {0x9, &(0x7f0000000300)=@string={0x9, 0x3, "38b404187bf08f"}}, {0x4, &(0x7f0000000600)=@lang_id={0x4}}, {0x4, &(0x7f0000000400)=@lang_id={0x4}}, {0x4, &(0x7f0000000440)=@lang_id={0x4}}, {0x54, &(0x7f0000000480)=@string={0x54, 0x3, "b1b5a68fb19daec4ced690605895c8cb60a4fbb018b562a582dfaf08040a9b1ff6923ab7f334cccfe56e9ba4f58f15a1d06b880f5a1fab291e107d24cdf5b7ad2021b262f9f38c38f7d018e01151843c6d35"}}, {0x4, &(0x7f0000000500)=@lang_id={0x4}}]}) 1.3640149s ago: executing program 3 (id=570): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) syz_emit_ethernet(0xa3, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESOCT=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bind$inet6(0xffffffffffffffff, &(0x7f0000000840)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000380)='mm_page_alloc\x00'}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@i, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kfree\x00', r6}, 0x10) unshare(0x2040400) r7 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) unshare(0x2000400) fsmount(r7, 0x0, 0x0) write$uinput_user_dev(r5, 0x0, 0x0) 1.275290207s ago: executing program 1 (id=571): sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[], 0x1c}}, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000200)=@assoc_value={0x0}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000000)=r2, 0x4) 1.038763236s ago: executing program 4 (id=572): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x84, &(0x7f0000000040)=ANY=[@ANYBLOB="00000100000005"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000480)=ANY=[@ANYBLOB="000e3a"], 0x0, 0x0, 0x0, 0x0}) 6.795009ms ago: executing program 1 (id=573): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc058565d, &(0x7f0000000400)={0x0, 0x4}) r1 = memfd_create(&(0x7f0000000380)='/dloop#\x00', 0x6) lseek(r1, 0xfffffffffffffffc, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x0, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000100)=0xa0000) sched_rr_get_interval(0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r3, 0x4b72, &(0x7f0000000000)={0x4, 0x0, 0x27, 0x1, 0x100, &(0x7f00000000c0)="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"}) 0s ago: executing program 3 (id=574): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000ed000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {r2, 0x0, 0x30, 0x30, 0x0, @in6={0x1b, 0x0, 0x0, @loopback}, @ib={0x1b, 0x0, 0x0, {"0e000000000000000000000004000001"}}}}, 0x118) kernel console output (not intermixed with test programs): T3870] usb 3-1: config 0 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 106.940162][ T4050] team0: Port device team_slave_1 added [ 107.117925][ T3870] usb 3-1: New USB device found, idVendor=1266, idProduct=1002, bcdDevice=ef.1e [ 107.128518][ T4050] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 107.135505][ T4050] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.171419][ T3870] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.207038][ T3870] usb 3-1: Product: syz [ 107.217538][ T3870] usb 3-1: Manufacturer: syz [ 107.222381][ T3870] usb 3-1: SerialNumber: syz [ 107.267154][ T4050] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 107.279153][ T3870] usb 3-1: config 0 descriptor?? [ 107.308309][ T4097] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 107.330187][ T3870] option 3-1:0.0: GSM modem (1-port) converter detected [ 107.577025][ T4050] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 107.588146][ T4050] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.628085][ T4106] binder: 4102:4106 ioctl c00c6211 0 returned -14 [ 108.013338][ T3690] usb 3-1: USB disconnect, device number 4 [ 108.588194][ T3653] Bluetooth: hci5: command tx timeout [ 108.622462][ T3690] option 3-1:0.0: device disconnected [ 108.799707][ T4050] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 108.837761][ T3660] Bluetooth: hci6: command tx timeout [ 108.922138][ T4111] loop0: detected capacity change from 0 to 2048 [ 109.024830][ T4050] device hsr_slave_0 entered promiscuous mode [ 109.048837][ T4050] device hsr_slave_1 entered promiscuous mode [ 109.079428][ T4111] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 109.098618][ T4050] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 109.106256][ T4050] Cannot create hsr debugfs directory [ 109.613944][ T4120] netlink: 4 bytes leftover after parsing attributes in process `syz.0.95'. [ 110.253127][ T3646] EXT4-fs (loop0): unmounting filesystem. [ 110.434005][ T4040] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.465525][ T4129] loop0: detected capacity change from 0 to 1024 [ 110.718368][ T4040] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.890852][ T4131] kvm: emulating exchange as write [ 110.915839][ T4040] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.926390][ T3870] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 111.146957][ T4040] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.167813][ T3870] usb 1-1: Using ep0 maxpacket: 8 [ 111.287992][ T3870] usb 1-1: New USB device found, idVendor=0763, idProduct=1021, bcdDevice=1c.62 [ 111.309937][ T3870] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.385756][ T3870] usb 1-1: config 0 descriptor?? [ 112.362974][ T3870] snd-usb-audio: probe of 1-1:0.0 failed with error -2 [ 112.427095][ T3857] udevd[3857]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 113.484527][ T4144] binder: 4143:4144 ioctl c0306201 0 returned -14 [ 113.563296][ T4050] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.739173][ T4050] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.892649][ T4050] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.033540][ T4050] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.375918][ T4040] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 114.410512][ T4040] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 114.439545][ T4040] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 114.518909][ T4040] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 114.527148][ T7] usb 1-1: USB disconnect, device number 2 [ 114.947881][ T4050] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 114.993827][ T4050] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 115.091698][ T4050] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 115.159121][ T4050] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 115.328835][ T4156] loop3: detected capacity change from 0 to 4096 [ 115.399168][ T4040] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.442218][ T4158] netlink: 'syz.0.107': attribute type 1 has an invalid length. [ 115.500021][ T4158] device bond1 entered promiscuous mode [ 115.591721][ T4160] bond1: (slave veth3): Enslaving as an active interface with a down link [ 115.713756][ T4040] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.740696][ T4158] netlink: 4 bytes leftover after parsing attributes in process `syz.0.107'. [ 115.826106][ T4158] bond1 (unregistering): (slave veth3): Releasing active interface [ 115.839299][ T4164] ntfs3: loop3: failed to convert "0080" to koi8-ru [ 115.863858][ T4158] bond1 (unregistering): Released all slaves [ 115.878012][ T4164] ntfs3: loop3: failed to convert name for inode 1e. [ 115.941492][ T4164] ntfs3: loop3: failed to convert "256c" to koi8-ru [ 115.942041][ T3871] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 115.987699][ T3871] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 116.100409][ T3870] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 116.115959][ T3870] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 116.182804][ T4168] loop2: detected capacity change from 0 to 512 [ 116.188291][ T3870] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.196296][ T3870] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.229104][ T3870] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 116.268924][ T3870] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 116.276159][ T4168] EXT4-fs (loop2): can't mount with both data=journal and delalloc [ 116.303853][ T4171] loop0: detected capacity change from 0 to 128 [ 116.318268][ T3870] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.325539][ T3870] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.351557][ T4172] loop3: detected capacity change from 0 to 64 [ 116.372016][ T3870] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 116.392140][ T3870] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 116.402097][ T3870] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 116.413114][ T3870] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 116.413284][ T4171] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 116.422744][ T3870] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 116.439913][ T3870] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 116.451714][ T3870] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 116.460086][ T3870] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 116.477265][ T3802] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 116.502181][ T3802] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 116.564268][ T4171] ext4 filesystem being mounted at /29/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 116.595686][ C0] vkms_vblank_simulate: vblank timer overrun [ 116.632282][ T4050] 8021q: adding VLAN 0 to HW filter on device bond0 [ 116.685915][ T3802] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 116.726294][ T3802] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 116.774626][ T4040] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 116.806078][ T4175] netlink: 8 bytes leftover after parsing attributes in process `syz.0.112'. [ 116.869232][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 116.888951][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 116.911410][ T4050] 8021q: adding VLAN 0 to HW filter on device team0 [ 116.964006][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 116.980344][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 117.029659][ T3691] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.036918][ T3691] bridge0: port 1(bridge_slave_0) entered forwarding state [ 117.118769][ T4179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.147621][ T4179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.177656][ T4179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.229317][ T4179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.273975][ T4179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.331043][ T4179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.377726][ T4179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.426208][ T4179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.507363][ T3800] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 117.515757][ T3800] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 117.556699][ T3800] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 117.590219][ T3800] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.597557][ T3800] bridge0: port 2(bridge_slave_1) entered forwarding state [ 117.651758][ T3800] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 117.724767][ T3801] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 117.794161][ T3801] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 117.829257][ T3801] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 117.879852][ T3800] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 117.929200][ T3801] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 117.958825][ T3801] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 117.988402][ T3801] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 118.018049][ T3801] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 118.044907][ T4050] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 118.095118][ T4050] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 118.131600][ T3802] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 118.160964][ T3802] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 118.213258][ T4040] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 118.309428][ T3801] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 118.338151][ T3801] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 118.367727][ T3802] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 118.398403][ T3800] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 118.435397][ T3800] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 118.436757][ T3646] EXT4-fs (loop0): unmounting filesystem. [ 118.511773][ T3800] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 118.521291][ T3800] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 118.591246][ T4040] device veth0_vlan entered promiscuous mode [ 118.611669][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 118.629491][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 118.695898][ T4040] device veth1_vlan entered promiscuous mode [ 118.738201][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 118.887762][ T3802] usb 3-1: New USB device found, idVendor=05ac, idProduct=0259, bcdDevice=d0.40 [ 118.921730][ T3802] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.922043][ T3696] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 118.970131][ T3802] usb 3-1: Product: syz [ 118.973458][ T3696] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 118.995131][ T3802] usb 3-1: Manufacturer: syz [ 119.040085][ T4040] device veth0_macvtap entered promiscuous mode [ 119.046061][ T3802] usb 3-1: SerialNumber: syz [ 119.066940][ T4040] device veth1_macvtap entered promiscuous mode [ 119.080984][ T3802] usb 3-1: config 0 descriptor?? [ 119.152143][ T3802] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input7 [ 119.188566][ T3870] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 119.211745][ T3870] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 119.235475][ T3870] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 119.285845][ T3870] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 119.334794][ T4050] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 119.357776][ T3077] bcm5974 3-1:0.0: could not read from device [ 119.371135][ T4040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.407080][ T4040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.429152][ T3802] usb 3-1: USB disconnect, device number 5 [ 119.457505][ T4040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.507479][ T4040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.537635][ T4040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.563922][ T4040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.626478][ T4040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.648362][ T4040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.669866][ T4040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.691747][ T4040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.712641][ T4040] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 119.751285][ T3871] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 119.761027][ T3871] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 119.801433][ T4040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.837468][ T4040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.867935][ T4040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.907703][ T4040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.927541][ T4040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.958930][ T3723] udevd[3723]: Error opening device "/dev/input/event4": No such file or directory [ 119.989598][ T4040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.994154][ T3723] udevd[3723]: Unable to EVIOCGABS device "/dev/input/event4" [ 120.045910][ T3723] udevd[3723]: Unable to EVIOCGABS device "/dev/input/event4" [ 120.047481][ T4040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.074579][ T3723] udevd[3723]: Unable to EVIOCGABS device "/dev/input/event4" [ 120.106084][ T3723] udevd[3723]: Unable to EVIOCGABS device "/dev/input/event4" [ 120.117674][ T4040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.141277][ T4040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.171213][ T4207] loop0: detected capacity change from 0 to 32768 [ 120.181825][ T4040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.214103][ T4040] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 120.224109][ T4207] [ 120.224109][ T4207] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 120.224109][ T4207] [ 120.257171][ T3870] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 120.273783][ T3870] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 120.277987][ T26] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 120.310181][ T4040] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.360152][ T4040] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.370718][ T4207] [ 120.370718][ T4207] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 120.370718][ T4207] [ 120.372895][ T4040] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.417600][ T4040] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.484808][ T4207] [ 120.484808][ T4207] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 120.484808][ T4207] [ 120.589845][ T4207] [ 120.589845][ T4207] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 120.589845][ T4207] [ 120.649886][ T133] [ 120.649886][ T133] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 120.649886][ T133] [ 120.651506][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.697869][ T26] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 65535, setting to 64 [ 120.733259][ T26] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 120.742779][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.775365][ T26] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.787152][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 120.798412][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 120.807412][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 120.821644][ T3646] [ 120.821644][ T3646] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 120.821644][ T3646] [ 120.835390][ T26] usb 4-1: config 0 descriptor?? [ 120.849542][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.864768][ T3646] [ 120.864768][ T3646] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 120.864768][ T3646] [ 120.874555][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.877983][ T4216] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 120.910795][ T3871] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 120.919159][ T26] hub 4-1:0.0: USB hub found [ 120.930805][ T3871] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 120.954111][ T4050] device veth0_vlan entered promiscuous mode [ 120.975258][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 120.992632][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 121.008921][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 121.040831][ T4050] device veth1_vlan entered promiscuous mode [ 121.133554][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 121.137765][ T26] hub 4-1:0.0: 2 ports detected [ 121.149081][ T4228] loop2: detected capacity change from 0 to 512 [ 121.158818][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 121.198328][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 121.232942][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 121.268587][ T4228] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.128: inode #1: comm syz.2.128: iget: illegal inode # [ 121.285136][ T4228] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.128: error while reading EA inode 1 err=-117 [ 121.321675][ T4050] device veth0_macvtap entered promiscuous mode [ 121.379929][ T4050] device veth1_macvtap entered promiscuous mode [ 121.386818][ T4228] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2816: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 121.421168][ T4228] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.128: inode #1: comm syz.2.128: iget: illegal inode # [ 121.493463][ T4050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.523789][ T4050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.531228][ T4228] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.128: error while reading EA inode 1 err=-117 [ 121.555127][ T4050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.579511][ T4238] loop1: detected capacity change from 0 to 512 [ 121.583501][ T4050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.602971][ T4050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.616745][ T4050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.647584][ T4238] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 121.656152][ T4238] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 121.673693][ T4050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.707833][ T4228] EXT4-fs (loop2): 1 orphan inode deleted [ 121.713669][ T4228] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 121.726468][ T4050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.783480][ T4050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.794134][ T4050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.808445][ T4050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.827675][ T4050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.844352][ T4238] EXT4-fs (loop1): orphan cleanup on readonly fs [ 121.854401][ T4050] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 122.195988][ T4238] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3845: comm syz.1.129: Allocating blocks 41-42 which overlap fs metadata [ 122.566917][ T3870] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 122.586288][ T3870] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 122.606108][ T4238] Quota error (device loop1): write_blk: dquota write failed [ 122.628743][ T3870] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 122.637177][ T4238] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 122.685183][ T4238] EXT4-fs error (device loop1): ext4_acquire_dquot:6777: comm syz.1.129: Failed to acquire dquot type 0 [ 122.709497][ T3870] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 122.719756][ T4238] EXT4-fs (loop1): 1 truncate cleaned up [ 122.755732][ T4050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.794256][ T4050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.810425][ T4238] EXT4-fs (loop1): pa ffff8880724bb9a0: logic 1, phys. 41, len 23 [ 122.819053][ T4238] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:4885: group 0, free 22, pa_free 23 [ 122.857593][ T4050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.874902][ T4238] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 122.889361][ T4050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.912858][ T4050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.954134][ T4050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.979316][ T4238] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 122.992241][ T4050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.007455][ T4050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.020905][ T4050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.033812][ T4050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.045795][ T4238] EXT4-fs (loop1): re-mounted. Quota mode: writeback. [ 123.061905][ T4050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.088028][ T4050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.113275][ T3659] EXT4-fs (loop2): unmounting filesystem. [ 123.126656][ T4050] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 123.135190][ T3870] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 123.155904][ T4040] EXT4-fs (loop1): unmounting filesystem. [ 123.163876][ T3870] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 123.213981][ T4050] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.254772][ T4050] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.299510][ T4050] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.400597][ T4050] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.087838][ T3691] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 124.237923][ T3802] hub 4-1:0.0: hub_ext_port_status failed (err = -71) [ 124.307749][ T3802] usb 4-1: USB disconnect, device number 3 [ 124.362244][ T4262] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.576642][ T3854] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.596836][ T3854] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.617844][ T3691] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.641455][ T3691] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 124.662939][ T3871] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 124.668173][ T3691] usb 2-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 124.693794][ T3691] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.718859][ T3866] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.746691][ T3866] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.778930][ T3691] usb 2-1: config 0 descriptor?? [ 124.822740][ T27] audit: type=1326 audit(1723212344.632:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4255 comm="syz.2.132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbaeb779f9 code=0x7ffc0000 [ 124.825178][ T3800] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 124.871782][ T3691] usbhid 2-1:0.0: can't add hid device: -22 [ 124.899590][ T3691] usbhid: probe of 2-1:0.0 failed with error -22 [ 124.947968][ T27] audit: type=1326 audit(1723212344.632:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4255 comm="syz.2.132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbaeb779f9 code=0x7ffc0000 [ 125.112886][ T27] audit: type=1326 audit(1723212344.662:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4255 comm="syz.2.132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcbaeb779f9 code=0x7ffc0000 [ 125.149283][ T27] audit: type=1326 audit(1723212344.662:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4255 comm="syz.2.132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbaeb779f9 code=0x7ffc0000 [ 125.172336][ T27] audit: type=1326 audit(1723212344.662:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4255 comm="syz.2.132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbaeb779f9 code=0x7ffc0000 [ 125.201726][ T27] audit: type=1326 audit(1723212344.672:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4255 comm="syz.2.132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7fcbaeb779f9 code=0x7ffc0000 [ 125.255779][ T27] audit: type=1326 audit(1723212344.672:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4255 comm="syz.2.132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbaeb779f9 code=0x7ffc0000 [ 125.295281][ T27] audit: type=1326 audit(1723212344.672:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4255 comm="syz.2.132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbaeb779f9 code=0x7ffc0000 [ 125.319234][ T3696] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 125.588020][ T3696] usb 4-1: Using ep0 maxpacket: 32 [ 125.599062][ T4272] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 125.616927][ T4272] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 125.738553][ T3696] usb 4-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 125.761794][ T3696] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.808454][ T3696] usb 4-1: config 0 descriptor?? [ 125.861531][ T3696] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 126.219654][ T4280] loop2: detected capacity change from 0 to 1024 [ 126.396436][ T3800] usb 2-1: USB disconnect, device number 3 [ 126.619043][ T3871] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 126.717763][ T3696] gspca_nw80x: reg_r err -71 [ 126.736425][ T3696] nw80x: probe of 4-1:0.0 failed with error -71 [ 126.798162][ T3696] usb 4-1: USB disconnect, device number 4 [ 126.899013][ T3871] usb 3-1: Using ep0 maxpacket: 8 [ 127.019474][ T3871] usb 3-1: New USB device found, idVendor=0763, idProduct=1021, bcdDevice=1c.62 [ 127.046713][ T3871] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.109682][ T3871] usb 3-1: config 0 descriptor?? [ 127.587266][ T3871] snd-usb-audio: probe of 3-1:0.0 failed with error -2 [ 127.652349][ T3857] udevd[3857]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 128.646234][ T4301] loop0: detected capacity change from 0 to 1024 [ 129.017713][ T3800] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 130.798237][ T3800] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 130.912513][ T3800] usb 2-1: config 179 has no interface number 0 [ 131.075001][ T3800] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 1029, setting to 64 [ 131.192061][ T3800] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 65535, setting to 64 [ 131.240819][ T7] usb 3-1: USB disconnect, device number 6 [ 131.259534][ T3800] usb 2-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 131.297550][ T3800] usb 2-1: config 179 interface 65 has no altsetting 0 [ 131.307877][ T3800] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 131.507260][ T3800] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.548089][ T4321] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.719783][ T4305] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 131.757700][ T3691] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 132.587624][ T3691] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 132.595608][ T3691] usb 4-1: can't read configurations, error -71 [ 132.788050][ T3800] usb 2-1: can't set config #179, error -71 [ 132.799916][ T3800] usb 2-1: USB disconnect, device number 4 [ 133.749829][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.756312][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.927533][ T3800] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 133.969397][ T4348] tipc: Started in network mode [ 134.050302][ T4348] tipc: Node identity 7f000001, cluster identity 4711 [ 134.089979][ T4348] tipc: Enabling of bearer rejected, failed to enable media [ 134.168017][ T3800] usb 2-1: Using ep0 maxpacket: 16 [ 134.328476][ T3800] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 134.556424][ T3800] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 134.567727][ T3800] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.575921][ T3800] usb 2-1: Product: syz [ 134.593292][ T3800] usb 2-1: Manufacturer: syz [ 134.606111][ T3800] usb 2-1: SerialNumber: syz [ 134.626311][ T3800] usb 2-1: config 0 descriptor?? [ 134.653070][ T4352] binder: BINDER_SET_CONTEXT_MGR already set [ 134.673472][ T4352] binder: 4351:4352 ioctl 4018620d 20000040 returned -16 [ 134.711228][ T3800] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 134.957669][ T3750] usb 2-1: Failed to submit usb control message: -71 [ 134.967650][ T26] usb 2-1: USB disconnect, device number 5 [ 134.983862][ T3750] usb 2-1: unable to send the bmi data to the device: -71 [ 135.024119][ T3750] usb 2-1: unable to get target info from device [ 135.024436][ T4368] loop2: detected capacity change from 0 to 256 [ 135.072684][ T3750] usb 2-1: could not get target info (-71) [ 135.104278][ T4368] exfat: Deprecated parameter 'utf8' [ 135.108635][ T3750] usb 2-1: could not probe fw (-71) [ 135.139879][ T4369] loop0: detected capacity change from 0 to 1024 [ 135.152315][ T4368] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 135.295335][ T4371] device pim6reg1 entered promiscuous mode [ 135.369878][ T4369] hfsplus: xattr searching failed [ 135.393803][ T3653] Bluetooth: hci0: Ignoring connect complete event for invalid link type [ 135.563502][ T4369] hfsplus: xattr searching failed [ 135.589641][ T4369] 9pnet_fd: Insufficient options for proto=fd [ 136.077675][ T3800] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 136.519966][ T4369] hfsplus: xattr searching failed [ 136.553590][ T4376] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.868822][ T3800] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 137.565529][ T3658] Bluetooth: hci0: command 0x0406 tx timeout [ 137.566987][ T3800] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 137.581568][ T3800] usb 5-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 137.591218][ T3800] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.621379][ T3800] usb 5-1: config 0 descriptor?? [ 137.684209][ T3800] usbhid 5-1:0.0: can't add hid device: -22 [ 137.699808][ T3800] usbhid: probe of 5-1:0.0 failed with error -22 [ 137.916263][ T4349] hfsplus: b-tree write err: -5, ino 3 [ 139.023009][ T3696] usb 5-1: USB disconnect, device number 2 [ 139.109874][ T4402] netlink: 28 bytes leftover after parsing attributes in process `syz.4.178'. [ 140.192488][ T4414] loop3: detected capacity change from 0 to 764 [ 140.368790][ T4414] Symlink component flag not implemented [ 140.384916][ T4414] Symlink component flag not implemented (101) [ 140.428564][ T4418] netlink: 28 bytes leftover after parsing attributes in process `syz.4.184'. [ 140.457769][ T3696] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 140.460903][ T4418] tipc: Failed to obtain node identity [ 140.504864][ T4418] tipc: Enabling of bearer rejected, failed to enable media [ 140.849037][ T4428] IPv6: NLM_F_REPLACE set, but no existing node found! [ 141.088032][ T3696] usb 3-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice= e.22 [ 141.111228][ T3696] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.135342][ T3696] usb 3-1: Product: syz [ 141.151563][ T3696] usb 3-1: Manufacturer: syz [ 141.164450][ T3696] usb 3-1: SerialNumber: syz [ 141.181103][ T3696] usb 3-1: config 0 descriptor?? [ 141.253717][ T3696] usb 3-1: selecting invalid altsetting 3 [ 141.266427][ T3696] comedi comedi0: could not set alternate setting 3 in high speed [ 141.267695][ T3800] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 141.282912][ T3696] usbdux 3-1:0.0: driver 'usbdux' failed to auto-configure device. [ 141.311925][ T3696] usbdux: probe of 3-1:0.0 failed with error -22 [ 141.374030][ T4422] loop0: detected capacity change from 0 to 40427 [ 141.426236][ T4422] F2FS-fs (loop0): invalid crc value [ 141.490322][ T4422] F2FS-fs (loop0): Found nat_bits in checkpoint [ 141.496288][ T3691] usb 3-1: USB disconnect, device number 7 [ 141.537603][ T3800] usb 4-1: Using ep0 maxpacket: 8 [ 141.606621][ T4422] F2FS-fs (loop0): Cannot turn on quotas: -2 on 1 [ 141.624756][ T4422] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 141.657786][ T3800] usb 4-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice=13.13 [ 141.677196][ T3800] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.710624][ T3800] usb 4-1: config 0 descriptor?? [ 141.954239][ T3800] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input8 [ 142.813897][ T3646] syz-executor: attempt to access beyond end of device [ 142.813897][ T3646] loop0: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 142.902530][ T3646] syz-executor: attempt to access beyond end of device [ 142.902530][ T3646] loop0: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 143.741751][ T4354] kworker/u4:16: attempt to access beyond end of device [ 143.741751][ T4354] loop0: rw=2049, sector=45096, nr_sectors = 24 limit=40427 [ 143.778396][ T7] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 143.879029][ T4449] loop2: detected capacity change from 0 to 4096 [ 143.895263][ T4449] __ntfs_error: 4 callbacks suppressed [ 143.895294][ T4449] ntfs: (device loop2): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 143.915070][ T4449] ntfs: (device loop2): read_ntfs_boot_sector(): Mount option errors=recover not used. Aborting without trying to recover. [ 143.929251][ T4449] ntfs: (device loop2): ntfs_fill_super(): Not an NTFS volume. [ 144.339088][ T7] usb 2-1: New USB device found, idVendor=0408, idProduct=4030, bcdDevice=fa.f1 [ 144.384236][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.413494][ T4354] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.419466][ T7] usb 2-1: Product: syz [ 144.447088][ T7] usb 2-1: Manufacturer: syz [ 144.474143][ T7] usb 2-1: SerialNumber: syz [ 144.503354][ T7] usb 2-1: config 0 descriptor?? [ 144.506207][ T4455] Illegal XDP return value 4290956200 on prog (id 48) dev N/A, expect packet loss! [ 144.573191][ T7] usb 2-1: Found UVC 0.00 device syz (0408:4030) [ 144.596700][ T7] usb 2-1: No valid video chain found. [ 144.699181][ T4354] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.713930][ T4460] ieee802154 phy0 wpan0: encryption failed: -22 [ 144.720642][ T3077] bcm5974 4-1:0.0: could not read from device [ 144.784635][ T7] usb 2-1: USB disconnect, device number 6 [ 144.790739][ T3723] bcm5974 4-1:0.0: could not read from device [ 144.843216][ T3871] usb 4-1: USB disconnect, device number 7 [ 144.901369][ T3077] bcm5974 4-1:0.0: could not read from device [ 145.040338][ T4354] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.176400][ T4354] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.290697][ T3723] udevd[3723]: Error opening device "/dev/input/event4": No such file or directory [ 145.333092][ T3723] udevd[3723]: Unable to EVIOCGABS device "/dev/input/event4" [ 145.388421][ T3723] udevd[3723]: Unable to EVIOCGABS device "/dev/input/event4" [ 145.464082][ T3723] udevd[3723]: Unable to EVIOCGABS device "/dev/input/event4" [ 145.523693][ T3723] udevd[3723]: Unable to EVIOCGABS device "/dev/input/event4" [ 145.542775][ T3723] udevd[3723]: Assertion 'close_nointr(fd) != -EBADF' failed at util.c:228, function safe_close(). Aborting. [ 145.595542][ T4354] tipc: Left network mode [ 145.619373][ T3092] udevd[3092]: worker [3723] terminated by signal 6 (Aborted) [ 145.650229][ T3092] udevd[3092]: worker [3723] failed while handling '/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input8/event4' [ 145.729185][ T4477] loop3: detected capacity change from 0 to 1024 [ 145.780401][ T4477] EXT4-fs: Ignoring removed nobh option [ 145.889437][ T4477] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 146.110900][ T4489] loop2: detected capacity change from 0 to 1024 [ 146.187253][ C0] eth0: bad gso: type: 1, size: 1408 [ 146.260325][ T4489] netlink: 8 bytes leftover after parsing attributes in process `syz.2.212'. [ 146.586557][ T3655] EXT4-fs (loop3): unmounting filesystem. [ 146.709335][ T3653] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 146.723682][ T3653] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 146.739305][ T3653] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 146.750639][ T3653] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 146.760213][ T3653] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 146.767940][ T3653] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 147.066271][ T4520] binder: 4516:4520 ioctl c0306201 0 returned -14 [ 147.140879][ T4509] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 147.264096][ T4509] kvm: pic: level sensitive irq not supported [ 147.275540][ T4509] kvm: pic: non byte read [ 147.321653][ T4509] kvm: pic: level sensitive irq not supported [ 147.321803][ T4509] kvm: pic: non byte read [ 147.349402][ T4509] kvm: pic: level sensitive irq not supported [ 147.349741][ T4509] kvm: pic: non byte read [ 147.422727][ T4509] kvm: pic: level sensitive irq not supported [ 147.422827][ T4509] kvm: pic: non byte read [ 147.567264][ T4534] loop2: detected capacity change from 0 to 8 [ 147.617091][ T4534] squashfs: Unknown parameter '’©úDgnïeÆêÖ«Ï씕ÎÆÁ%ÿŒp~bSµC`¨·•5ò1É¿Âî¯G' [ 148.522878][ T4550] loop3: detected capacity change from 0 to 16 [ 148.976034][ T3653] Bluetooth: hci0: command tx timeout [ 148.977063][ T4550] erofs: (device loop3): mounted with root inode @ nid 36. [ 149.627235][ T4553] loop3: detected capacity change from 0 to 1024 [ 149.695269][ T4553] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 149.727348][ T4553] EXT4-fs error (device loop3): ext4_get_journal_inode:5733: inode #32: comm syz.3.226: iget: special inode unallocated [ 149.752934][ T4503] chnl_net:caif_netlink_parms(): no params data found [ 149.816051][ T4553] EXT4-fs (loop3): no journal found [ 149.862466][ T4553] EXT4-fs (loop3): can't get journal size [ 149.903145][ T4354] device hsr_slave_0 left promiscuous mode [ 149.908254][ T4553] EXT4-fs error (device loop3): ext4_protect_reserved_inode:160: inode #32: comm syz.3.226: iget: special inode unallocated [ 149.929927][ T4354] device hsr_slave_1 left promiscuous mode [ 149.949718][ T4553] EXT4-fs (loop3): failed to initialize system zone (-117) [ 149.957097][ T4553] EXT4-fs (loop3): mount failed [ 149.998179][ T4354] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 150.005835][ T4354] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 150.079985][ T4354] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 150.114432][ T4354] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 150.152246][ T4354] device bridge_slave_1 left promiscuous mode [ 150.183874][ T4354] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.231048][ T4354] device bridge_slave_0 left promiscuous mode [ 150.257973][ T4354] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.362226][ T3653] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 150.373019][ T3653] Bluetooth: hci4: Injecting HCI hardware error event [ 150.383406][ T3660] Bluetooth: hci4: hardware error 0x00 [ 150.408505][ T4572] loop3: detected capacity change from 0 to 512 [ 150.440331][ T4572] journal_path: Lookup failure for './file0' [ 150.473120][ T4572] EXT4-fs: error: could not find journal device path [ 150.550970][ T4354] device veth1_macvtap left promiscuous mode [ 150.594035][ T4354] device veth0_macvtap left promiscuous mode [ 150.620081][ T4354] device veth1_vlan left promiscuous mode [ 150.630243][ T4354] device veth0_vlan left promiscuous mode [ 151.001341][ T3653] Bluetooth: hci0: command tx timeout [ 151.408861][ T4598] loop3: detected capacity change from 0 to 1024 [ 151.441377][ T4598] EXT4-fs: Invalid want_extra_isize 4232 [ 151.480269][ T3815] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 152.522115][ T3660] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 152.559960][ T4354] team0 (unregistering): Port device team_slave_1 removed [ 152.702109][ T4354] team0 (unregistering): Port device team_slave_0 removed [ 152.795977][ T4354] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 152.875710][ T4354] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 153.087747][ T3660] Bluetooth: hci0: command tx timeout [ 153.206523][ T4354] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 153.539929][ T4354] bond0 (unregistering): Released all slaves [ 153.685609][ T4603] netlink: 24 bytes leftover after parsing attributes in process `syz.4.238'. [ 153.918914][ T4621] netlink: 8 bytes leftover after parsing attributes in process `syz.3.243'. [ 153.989636][ T4503] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.003204][ T4503] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.066654][ T4503] device bridge_slave_0 entered promiscuous mode [ 154.135539][ T4503] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.175209][ T4503] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.227248][ T4503] device bridge_slave_1 entered promiscuous mode [ 154.396485][ T4503] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 154.470805][ T4503] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 154.645826][ T4503] team0: Port device team_slave_0 added [ 154.656356][ T4503] team0: Port device team_slave_1 added [ 154.817634][ T3692] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 154.839508][ T4503] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 154.846511][ T4503] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.872458][ C0] vkms_vblank_simulate: vblank timer overrun [ 154.935679][ T4503] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 154.986991][ T4503] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 154.987014][ T4503] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.987042][ T4503] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 155.157720][ T3660] Bluetooth: hci0: command tx timeout [ 155.797553][ T3692] usb 4-1: Using ep0 maxpacket: 16 [ 155.830398][ T4503] device hsr_slave_0 entered promiscuous mode [ 155.838872][ T4503] device hsr_slave_1 entered promiscuous mode [ 155.917837][ T3692] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 156.087838][ T3692] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 156.122158][ T3692] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.134411][ T4503] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 156.150638][ T3692] usb 4-1: Product: syz [ 156.157937][ T3692] usb 4-1: Manufacturer: syz [ 156.162687][ T3692] usb 4-1: SerialNumber: syz [ 156.169878][ T4503] Cannot create hsr debugfs directory [ 156.212915][ T3692] usb 4-1: config 0 descriptor?? [ 156.311048][ T3692] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 156.499585][ T3696] usb 4-1: USB disconnect, device number 8 [ 156.517886][ T3937] usb 4-1: Failed to submit usb control message: -71 [ 156.525851][ T3937] usb 4-1: unable to send the bmi data to the device: -71 [ 156.567583][ T3937] usb 4-1: unable to get target info from device [ 156.573998][ T3937] usb 4-1: could not get target info (-71) [ 156.604435][ T3937] usb 4-1: could not probe fw (-71) [ 156.694788][ T4675] loop2: detected capacity change from 0 to 64 [ 156.723063][ T4675] MINIX-fs: bad superblock [ 156.785447][ T3815] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 157.903466][ T4696] loop3: detected capacity change from 0 to 4096 [ 157.946544][ T4698] loop2: detected capacity change from 0 to 4096 [ 157.968855][ T4696] ntfs: (device loop3): check_mft_mirror(): Incomplete multi sector transfer detected in mft mirror record 3. [ 158.057594][ T4698] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512) [ 158.077500][ T4696] ntfs: (device loop3): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 158.486921][ T4696] ntfs: (device loop3): ntfs_read_locked_inode(): $DATA attribute is missing. [ 158.937537][ T4696] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x4 as bad. Run chkdsk. [ 159.037728][ T4696] ntfs: (device loop3): load_and_init_attrdef(): Failed to initialize attribute definition table. [ 159.057986][ T4696] ntfs: (device loop3): ntfs_fill_super(): Failed to load system files. [ 159.134731][ T4710] loop1: detected capacity change from 0 to 64 [ 159.369900][ T4698] loop2: detected capacity change from 4096 to 4073 [ 159.495276][ T4712] ntfs3: loop2: ino=5, "/" directory corrupted [ 159.668613][ T3659] ntfs3: loop2: ino=5, "/" directory corrupted [ 159.710039][ T3659] ntfs3: loop2: ino=5, "/" directory corrupted [ 160.720989][ T4349] ntfs3: loop2: ino=5, directory corrupted [ 160.857234][ T4503] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 160.885804][ T4349] ntfs3: loop2: ino=5, directory corrupted [ 161.097808][ T4503] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 161.144936][ T4503] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 161.286425][ T4503] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 161.691487][ T4503] 8021q: adding VLAN 0 to HW filter on device bond0 [ 162.116950][ T4354] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.223327][ T3800] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 162.250983][ T3800] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 162.307644][ T4503] 8021q: adding VLAN 0 to HW filter on device team0 [ 162.444813][ T4354] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.549174][ T4741] loop1: detected capacity change from 0 to 512 [ 162.549763][ T3800] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 162.568419][ T4741] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 162.620884][ T3800] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 162.644015][ T3800] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.645363][ T4741] EXT4-fs error (device loop1): mb_free_blocks:1815: group 0, [ 162.651189][ T3800] bridge0: port 1(bridge_slave_0) entered forwarding state [ 162.666428][ T4741] inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 162.684980][ T3800] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 162.700459][ T3800] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 162.715090][ T3800] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.722307][ T3800] bridge0: port 2(bridge_slave_1) entered forwarding state [ 162.849312][ T4354] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.868104][ T4741] EXT4-fs (loop1): Remounting filesystem read-only [ 162.875723][ T4741] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.275: invalid indirect mapped block 1 (level 1) [ 162.889919][ T3660] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 162.906932][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 162.916521][ T3660] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 162.928162][ T3660] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 162.934311][ T4741] EXT4-fs (loop1): 1 truncate cleaned up [ 162.936688][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 162.949989][ T3658] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 162.973300][ T3658] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 162.981067][ T3660] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 163.000806][ T4741] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 163.033547][ T4752] loop3: detected capacity change from 0 to 256 [ 163.039097][ T3871] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 163.049421][ T3871] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 163.059929][ T3871] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 163.068703][ T3871] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 163.079333][ T3871] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 163.164154][ T4752] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 163.179595][ T4354] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.215919][ T4503] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 163.227553][ T3692] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 163.275199][ T4503] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 163.306990][ T3871] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 163.353352][ T3871] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 163.363986][ T4752] exFAT-fs (loop3): error, exfat_alloc_cluster: invalid used clusters(t:15,u:4294967295) [ 163.363986][ T4752] [ 163.379063][ T3871] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 163.409668][ T4752] exFAT-fs (loop3): error, failed to bmap (inode : ffff888058009b60 iblock : 0, err : -5) [ 163.419067][ T3871] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 163.432272][ T3871] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 163.436624][ T4040] EXT4-fs error (device loop1): ext4_map_blocks:607: inode #2: block 13: comm syz-executor: lblock 0 mapped to illegal pblock 13 (length 1) [ 163.477656][ T3692] usb 5-1: Using ep0 maxpacket: 16 [ 163.515031][ T3871] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 163.607973][ T4040] EXT4-fs (loop1): Remounting filesystem read-only [ 163.699583][ T4040] EXT4-fs (loop1): unmounting filesystem. [ 163.744484][ C0] eth0: bad gso: type: 1, size: 1408 [ 163.777823][ T3692] usb 5-1: New USB device found, idVendor=09e8, idProduct=0062, bcdDevice=80.f2 [ 163.797844][ T3692] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.805892][ T3692] usb 5-1: Product: syz [ 163.854516][ T3692] usb 5-1: Manufacturer: syz [ 163.879716][ T3692] usb 5-1: SerialNumber: syz [ 163.978473][ T3692] usb 5-1: config 0 descriptor?? [ 164.012470][ T4767] loop3: detected capacity change from 0 to 128 [ 164.094414][ T3692] snd-usb-audio: probe of 5-1:0.0 failed with error -2 [ 164.162032][ T3815] udevd[3815]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 164.241848][ T27] audit: type=1326 audit(1723212383.380:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4749 comm="syz.4.276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f273a7779f9 code=0x7ffc0000 [ 164.243179][ T3802] usb 5-1: USB disconnect, device number 3 [ 164.328344][ T27] audit: type=1326 audit(1723212383.380:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4749 comm="syz.4.276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f273a7779f9 code=0x7ffc0000 [ 164.521830][ T27] audit: type=1326 audit(1723212383.380:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4749 comm="syz.4.276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=176 compat=0 ip=0x7f273a7779f9 code=0x7ffc0000 [ 164.544956][ T4775] loop3: detected capacity change from 0 to 1024 [ 164.600365][ T4747] chnl_net:caif_netlink_parms(): no params data found [ 164.677643][ T27] audit: type=1326 audit(1723212383.380:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4749 comm="syz.4.276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f273a7779f9 code=0x7ffc0000 [ 164.758529][ T27] audit: type=1326 audit(1723212383.380:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4749 comm="syz.4.276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f273a7779f9 code=0x7ffc0000 [ 164.797664][ T4503] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 164.804845][ T3802] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 164.817788][ T3802] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 164.967804][ T3870] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 165.086656][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 165.095806][ T3653] Bluetooth: hci4: command tx timeout [ 165.108706][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 165.148037][ T4747] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.158766][ T4747] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.196650][ T4747] device bridge_slave_0 entered promiscuous mode [ 165.217537][ T3870] usb 4-1: Using ep0 maxpacket: 8 [ 165.273967][ T4747] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.287621][ T4747] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.308815][ T4747] device bridge_slave_1 entered promiscuous mode [ 165.368042][ T3870] usb 4-1: New USB device found, idVendor=0763, idProduct=1021, bcdDevice=1c.62 [ 165.387763][ T3870] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.428294][ T3870] usb 4-1: config 0 descriptor?? [ 165.436432][ T3802] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 165.453739][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 165.486478][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 165.513730][ T4503] device veth0_vlan entered promiscuous mode [ 165.575639][ T3870] snd-usb-audio: probe of 4-1:0.0 failed with error -2 [ 165.616342][ T3751] udevd[3751]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 165.678679][ T3660] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 165.699438][ T3660] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 165.709738][ T3660] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 165.722462][ T3660] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 165.731880][ T3660] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 165.739755][ T3660] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 165.757860][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 165.955391][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 165.998061][ T4503] device veth1_vlan entered promiscuous mode [ 166.010263][ T4747] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 166.211901][ T4747] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 166.307904][ T3802] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 166.648172][ T3802] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 166.694857][ T3802] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.859003][ T3802] cdc_ether 5-1:1.0: skipping garbage [ 166.867528][ T3802] usb 5-1: bad CDC descriptors [ 166.949519][ T4747] team0: Port device team_slave_0 added [ 167.022212][ T4747] team0: Port device team_slave_1 added [ 167.161960][ T3800] usb 5-1: USB disconnect, device number 4 [ 167.168061][ T3660] Bluetooth: hci4: command tx timeout [ 167.273292][ T4747] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 167.283853][ T4747] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 167.325422][ T4747] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 167.361097][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 167.387116][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 167.413977][ T4503] device veth0_macvtap entered promiscuous mode [ 167.454513][ T4747] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 167.470679][ T4747] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 167.514031][ T4747] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 167.642756][ T4503] device veth1_macvtap entered promiscuous mode [ 167.766771][ T4354] device hsr_slave_0 left promiscuous mode [ 167.783729][ T4354] device hsr_slave_1 left promiscuous mode [ 167.800791][ T3660] Bluetooth: hci5: command tx timeout [ 167.811070][ T4354] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 167.828029][ T4354] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 167.863935][ T4354] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 167.923250][ T4354] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 167.950591][ T3870] usb 4-1: USB disconnect, device number 9 [ 168.016538][ T4354] device bridge_slave_1 left promiscuous mode [ 168.043747][ T4354] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.088970][ T4354] device bridge_slave_0 left promiscuous mode [ 168.095418][ T4354] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.175721][ T4354] device veth1_macvtap left promiscuous mode [ 168.189730][ T4354] device veth0_macvtap left promiscuous mode [ 168.203757][ T4354] device veth1_vlan left promiscuous mode [ 168.230226][ T4354] device veth0_vlan left promiscuous mode [ 169.261509][ T3660] Bluetooth: hci4: command tx timeout [ 169.877842][ T3660] Bluetooth: hci5: command tx timeout [ 170.154048][ T4354] team0 (unregistering): Port device team_slave_1 removed [ 170.236153][ T4354] team0 (unregistering): Port device team_slave_0 removed [ 170.327011][ T4354] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 170.401678][ T4354] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 170.980664][ T4354] bond0 (unregistering): Released all slaves [ 171.103395][ T4747] device hsr_slave_0 entered promiscuous mode [ 171.116809][ T4747] device hsr_slave_1 entered promiscuous mode [ 171.146183][ T4747] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 171.154271][ T4747] Cannot create hsr debugfs directory [ 171.168668][ T4503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 171.179439][ T4503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.191885][ T4503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 171.203978][ T4503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.214343][ T4503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 171.225509][ T4503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.236057][ T4503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 171.248401][ T4503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.258703][ T4503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 171.269580][ T4503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.282525][ T4503] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 171.305894][ T3801] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 171.327294][ T3660] Bluetooth: hci4: command tx timeout [ 171.330927][ T3801] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 171.348557][ T3801] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 171.366440][ T3801] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 171.594146][ T4503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 171.622860][ T4503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.642949][ T4503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 171.667938][ T4503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.694535][ T4503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 171.719155][ T4503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.748556][ T4503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 171.760049][ T4503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.771083][ T4503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 171.782473][ T4503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.795793][ T4503] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 171.977597][ T3660] Bluetooth: hci5: command tx timeout [ 172.020118][ T3801] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 172.048632][ T3801] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 172.073411][ T4503] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.179539][ T4826] loop3: detected capacity change from 0 to 128 [ 172.293508][ T4503] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.521121][ T4503] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.685609][ T4503] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.845575][ T4817] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 173.038252][ T4792] chnl_net:caif_netlink_parms(): no params data found [ 173.227893][ T4834] netlink: 72 bytes leftover after parsing attributes in process `syz.4.289'. [ 173.520248][ T3750] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 173.546876][ T3750] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 173.555489][ T26] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 173.717912][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 173.809923][ T26] usb 4-1: Using ep0 maxpacket: 8 [ 173.842298][ T4792] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.860874][ T4792] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.889383][ T4792] device bridge_slave_0 entered promiscuous mode [ 173.927841][ T26] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 173.952258][ T26] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 173.963032][ T4792] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.977928][ T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 173.997528][ T4792] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.004764][ T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 174.013851][ T4792] device bridge_slave_1 entered promiscuous mode [ 174.027572][ T26] usb 4-1: New USB device found, idVendor=06f8, idProduct=0003, bcdDevice= e.dd [ 174.039498][ T3653] Bluetooth: hci5: command tx timeout [ 174.057121][ T26] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.078334][ T26] usb 4-1: config 0 descriptor?? [ 174.180467][ C0] eth0: bad gso: type: 1, size: 1408 [ 174.240033][ T3802] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 174.322264][ T4792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 174.345519][ T3802] usb 4-1: USB disconnect, device number 10 [ 174.379302][ T4792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 174.435459][ T27] audit: type=1326 audit(1723212393.570:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4853 comm="syz.4.291" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f273a7779f9 code=0x0 [ 174.522637][ T4792] team0: Port device team_slave_0 added [ 174.574205][ T4792] team0: Port device team_slave_1 added [ 174.827556][ T4792] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 175.047642][ T4864] hub 9-0:1.0: USB hub found [ 175.056856][ T4864] hub 9-0:1.0: 8 ports detected [ 175.467565][ T4792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 175.629247][ T4792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 175.650777][ T4792] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 175.659282][ T4792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 175.686474][ T4792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 175.998194][ T3692] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 176.237695][ T3692] usb 4-1: Using ep0 maxpacket: 16 [ 176.351384][ T4747] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 176.357860][ T3692] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 176.398948][ T3692] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 176.422118][ T4792] device hsr_slave_0 entered promiscuous mode [ 176.437607][ T3692] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 176.447288][ T3692] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 176.496174][ T4792] device hsr_slave_1 entered promiscuous mode [ 176.543527][ T4792] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 176.557429][ T4792] Cannot create hsr debugfs directory [ 176.607956][ T4747] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 177.554072][ T4747] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 177.601035][ T4747] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 177.648342][ T3692] usb 4-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=b4.5b [ 177.668630][ T3692] usb 4-1: New USB device strings: Mfr=1, Product=130, SerialNumber=3 [ 177.676893][ T3692] usb 4-1: Product: syz [ 177.718478][ T3692] usb 4-1: Manufacturer: syz [ 177.723154][ T3692] usb 4-1: SerialNumber: syz [ 177.758376][ T3692] usb 4-1: config 0 descriptor?? [ 177.783961][ T4886] Bluetooth: MGMT ver 1.22 [ 177.818586][ T3692] usb 4-1: NFC: intf ffff888024764000 id ffffffff8dbda1e0 [ 178.086125][ T3664] usb 4-1: USB disconnect, device number 11 [ 178.281357][ T4747] 8021q: adding VLAN 0 to HW filter on device bond0 [ 178.442508][ T4792] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.544658][ T4895] bad cache= option: nonw [ 178.544658][ T4895] [ 178.577798][ T4747] 8021q: adding VLAN 0 to HW filter on device team0 [ 178.587950][ T3801] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 178.596018][ T3801] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 178.712253][ T4792] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.777960][ T4895] CIFS: VFS: bad cache= option: nonw [ 178.798940][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 178.828436][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 178.837359][ T3692] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.844609][ T3692] bridge0: port 1(bridge_slave_0) entered forwarding state [ 178.928971][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 178.964172][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 179.247955][ T3692] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.255119][ T3692] bridge0: port 2(bridge_slave_1) entered forwarding state [ 179.382863][ T4792] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.421468][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 179.438700][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 179.459860][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 179.571931][ T4792] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.660008][ T3801] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 179.683114][ T3801] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 179.726026][ T3801] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 179.782596][ T3801] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 180.141906][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 180.268381][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 180.420653][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 180.490110][ T4747] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 180.563233][ T4747] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 180.627761][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 180.636555][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 180.908663][ T4792] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 180.965450][ T4919] loop0: detected capacity change from 0 to 64 [ 181.024698][ T4919] MINIX-fs: bad superblock [ 181.036983][ T4792] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 181.059742][ T4792] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 181.111586][ T4792] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 181.427745][ T4792] 8021q: adding VLAN 0 to HW filter on device bond0 [ 181.822977][ T3052] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 181.844237][ T3052] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 182.115136][ T3052] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 182.169234][ T3052] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 182.523285][ T4792] 8021q: adding VLAN 0 to HW filter on device team0 [ 182.546418][ T4747] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 182.701897][ T3801] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 182.718613][ T3801] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 182.743424][ T3801] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.750650][ T3801] bridge0: port 1(bridge_slave_0) entered forwarding state [ 182.884414][ T3052] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 182.911176][ T3052] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 182.922197][ T3052] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 182.948141][ T3052] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.955349][ T3052] bridge0: port 2(bridge_slave_1) entered forwarding state [ 183.003502][ T3052] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 183.035516][ T3052] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 183.086951][ T4931] loop0: detected capacity change from 0 to 32768 [ 183.099215][ T4931] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.308 (4931) [ 183.121621][ T4931] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 183.168970][ T4931] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 183.247728][ T4931] BTRFS info (device loop0): setting nodatacow, compression disabled [ 183.279292][ T4931] BTRFS info (device loop0): setting datacow [ 183.285368][ T4931] BTRFS info (device loop0): doing ref verification [ 183.367551][ T4931] BTRFS info (device loop0): force clearing of disk cache [ 183.374765][ T4931] BTRFS info (device loop0): turning off barriers [ 183.398208][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 183.409687][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 183.427734][ T4931] BTRFS info (device loop0): enabling ssd optimizations [ 183.434749][ T4931] BTRFS info (device loop0): using spread ssd allocation scheme [ 183.723655][ T4931] BTRFS info (device loop0): not using ssd optimizations [ 183.844418][ T4931] BTRFS info (device loop0): not using spread ssd allocation scheme [ 184.024903][ T4931] BTRFS info (device loop0): using free space tree [ 184.206398][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 184.215860][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 184.225799][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 184.279644][ T4949] MTD: Couldn't look up './file0': -15 [ 184.438062][ T3699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 184.447252][ T3699] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 184.456617][ T3699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 184.465926][ T3699] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 184.475924][ T3699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 184.532988][ T3699] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 184.572245][ T4792] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 184.666086][ T4747] device veth0_vlan entered promiscuous mode [ 184.732905][ T3801] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 184.749143][ T3801] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 184.767180][ T4931] BTRFS error (device loop0): open_ctree failed [ 184.938825][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 184.949660][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 185.028993][ T4747] device veth1_vlan entered promiscuous mode [ 185.206333][ C0] eth0: bad gso: type: 1, size: 1408 [ 185.229588][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 185.253698][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 185.340123][ T4978] overlayfs: missing 'workdir' [ 185.351283][ T4747] device veth0_macvtap entered promiscuous mode [ 185.387195][ T3796] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 185.418293][ T3796] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 185.554705][ T4747] device veth1_macvtap entered promiscuous mode [ 185.574855][ T3796] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 185.653498][ T3870] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 185.983665][ T3870] usb 5-1: Using ep0 maxpacket: 32 [ 186.115923][ T3796] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 187.276690][ T4747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 187.327153][ T4747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.347437][ T4747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 187.363407][ T4747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.374056][ T4747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 187.384887][ T4747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.395124][ T4747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 187.406141][ T4747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.425210][ T4747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 187.445485][ T4747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.459082][ T4747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 187.469869][ T4747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.484696][ T4747] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 187.528009][ T3870] usb 5-1: New USB device found, idVendor=0409, idProduct=0063, bcdDevice=c0.64 [ 187.542734][ T3870] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.612080][ T3870] usb 5-1: Product: syz [ 187.622201][ T3870] usb 5-1: Manufacturer: syz [ 187.632310][ T3870] usb 5-1: SerialNumber: syz [ 187.669448][ T3870] usb 5-1: config 0 descriptor?? [ 187.686809][ T4354] device hsr_slave_0 left promiscuous mode [ 187.702218][ T4354] device hsr_slave_1 left promiscuous mode [ 187.723283][ T4354] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 187.733441][ T3870] usb 5-1: bad CDC descriptors [ 187.745059][ T3870] usb 5-1: bad CDC descriptors [ 187.767697][ T4354] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 187.788602][ T3870] upd78f0730 5-1:0.0: upd78f0730 converter detected [ 187.820813][ T3870] usb 5-1: upd78f0730 converter now attached to ttyUSB0 [ 187.861961][ T4354] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 187.878084][ T4354] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 187.906484][ T4354] device bridge_slave_1 left promiscuous mode [ 187.918581][ T4354] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.954929][ T4354] device bridge_slave_0 left promiscuous mode [ 187.974523][ T4354] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.992378][ T3691] usb 5-1: USB disconnect, device number 5 [ 188.018119][ T3691] upd78f0730 ttyUSB0: upd78f0730 converter now disconnected from ttyUSB0 [ 188.048392][ T3691] upd78f0730 5-1:0.0: device disconnected [ 188.099501][ T4354] device veth1_macvtap left promiscuous mode [ 188.109421][ T4354] device veth0_macvtap left promiscuous mode [ 188.115640][ T4354] device veth1_vlan left promiscuous mode [ 188.124553][ T4354] device veth0_vlan left promiscuous mode [ 188.519831][ T4998] loop0: detected capacity change from 0 to 32768 [ 188.563205][ T4998] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.324 (4998) [ 188.628406][ T4998] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 188.672536][ T4998] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 188.707566][ T4998] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 188.727623][ T4998] BTRFS info (device loop0): use zstd compression, level 3 [ 188.748076][ T4998] BTRFS info (device loop0): using free space tree [ 188.962115][ T4998] BTRFS info (device loop0): enabling ssd optimizations [ 189.396617][ T4354] team0 (unregistering): Port device team_slave_1 removed [ 189.402845][ T4503] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 189.655947][ T4354] team0 (unregistering): Port device team_slave_0 removed [ 189.796620][ T4354] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 189.902458][ T4354] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 190.139401][ T5026] kvm [5025]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x2b00 [ 190.227508][ T5026] kvm [5025]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0xc300 [ 190.285397][ T5026] kvm [5025]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x4600 [ 190.455501][ T5026] kvm [5025]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0xe400 [ 191.050798][ T4354] bond0 (unregistering): Released all slaves [ 191.155061][ T5035] ubi0: attaching mtd0 [ 191.163342][ T5035] ubi0 error: ubi_attach_mtd_dev: bad VID header (8454144) or data offsets (8454208) [ 191.225113][ T3796] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 191.239132][ T5037] syz.4.331 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 191.249024][ T3796] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 191.270482][ T4747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.301028][ T4747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.319656][ T4747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.340503][ T4747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.356227][ T4747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.376414][ T4747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.386686][ T4747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.407670][ T4747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.426781][ T4747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.446742][ T4747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.515414][ T4747] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 192.180448][ T3653] Bluetooth: hci3: command 0x0406 tx timeout [ 192.186893][ T3653] Bluetooth: hci2: command 0x0406 tx timeout [ 192.193622][ T3660] Bluetooth: hci1: command 0x0406 tx timeout [ 192.412552][ T4792] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 192.485421][ T3052] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 192.498473][ T3052] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 192.509718][ T3052] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 192.517296][ T3052] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 192.529275][ T4747] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.257974][ T4747] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.317529][ T4747] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.367478][ T4747] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.584887][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 194.606495][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 194.731742][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 194.759318][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 195.464777][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.486092][ T4792] device veth0_vlan entered promiscuous mode [ 195.494064][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.641870][ T5066] dccp_invalid_packet: invalid packet type [ 195.695755][ T3699] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 195.704120][ T3699] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 195.755401][ T5068] netlink: 44 bytes leftover after parsing attributes in process `syz.4.341'. [ 195.787608][ T5068] netlink: 24 bytes leftover after parsing attributes in process `syz.4.341'. [ 195.803131][ T5068] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.917274][ T5068] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.924516][ T5068] bridge0: port 1(bridge_slave_0) entered forwarding state [ 195.995376][ T4792] device veth1_vlan entered promiscuous mode [ 196.042361][ T5072] netlink: 'syz.3.343': attribute type 6 has an invalid length. [ 196.122565][ T3948] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 196.206140][ T3948] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 196.230063][ T5024] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 196.255078][ T5024] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 196.258057][ T5070] loop0: detected capacity change from 0 to 8192 [ 196.290376][ T4792] device veth0_macvtap entered promiscuous mode [ 196.328190][ T5070] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 196.348495][ T5024] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 196.356907][ T5024] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 196.368628][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 196.418214][ T4792] device veth1_macvtap entered promiscuous mode [ 196.418606][ T5070] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 196.541133][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 196.542661][ T4792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 196.568521][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 196.597916][ T4792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.633324][ T4792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 196.657421][ T4792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.667331][ T4792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 196.717656][ T4792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.738344][ T4792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 196.776510][ T4792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.806066][ T4792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 196.829995][ T4792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.855959][ T4792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 196.877500][ T4792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.902267][ T4792] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 196.979183][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 196.988220][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 196.996581][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 197.047743][ T3796] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 197.079457][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 197.104668][ T4792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.125758][ T4792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.143429][ T5082] syz.0.346[5082] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 197.143568][ T5082] syz.0.346[5082] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 197.147166][ T4792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.208265][ T4792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.227494][ T4792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.257424][ T4792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.273269][ T5083] syz.0.346[5083] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 197.273393][ T5083] syz.0.346[5083] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 197.277493][ T4792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.338265][ T4792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.357606][ T4792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.377715][ T4792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.398764][ T4792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.417841][ T4792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.449973][ T4792] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 197.499019][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 197.512331][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 197.536098][ T4792] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.568019][ C0] eth0: bad gso: type: 1, size: 1408 [ 197.577871][ T3796] usb 5-1: New USB device found, idVendor=5e5b, idProduct=9318, bcdDevice=bd.92 [ 197.587217][ T3796] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.616471][ T4792] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.637531][ T3796] usb 5-1: Product: syz [ 197.641770][ T3796] usb 5-1: Manufacturer: syz [ 197.646400][ T3796] usb 5-1: SerialNumber: syz [ 197.651132][ T4792] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.681735][ T4792] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.730440][ T3796] usb 5-1: config 0 descriptor?? [ 197.788960][ T3796] usb-storage 5-1:0.0: USB Mass Storage device detected [ 198.044321][ T3796] usb 5-1: USB disconnect, device number 6 [ 199.260414][ T5105] loop3: detected capacity change from 0 to 4096 [ 199.278106][ T3866] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 199.286501][ T3866] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 199.295069][ T5105] ntfs3: Unknown parameter '1844674407370955161501777777777777777777777ÿÿ' [ 199.406999][ T4078] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 199.449702][ T4078] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 199.651437][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 199.671683][ T4890] I/O error, dev loop3, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 199.699846][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 199.816372][ T5110] loop2: detected capacity change from 0 to 4096 [ 199.985419][ T5110] ntfs3: loop2: failed to convert "0000" to iso8859-3 [ 200.127685][ T3690] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 200.135894][ T3689] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 200.227547][ T5118] loop3: detected capacity change from 0 to 4096 [ 200.258018][ T5121] loop1: detected capacity change from 0 to 1024 [ 200.293271][ T5118] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 200.305937][ T5121] hfsplus: invalid btree flag [ 200.311735][ T5121] hfsplus: failed to load extents file [ 200.352958][ T5118] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 200.376303][ T27] audit: type=1326 audit(1723212419.510:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5120 comm="syz.1.358" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f41ea5779f9 code=0x0 [ 200.380131][ T3690] usb 1-1: Using ep0 maxpacket: 16 [ 200.429488][ T3689] usb 5-1: Using ep0 maxpacket: 16 [ 200.460163][ T5118] ntfs3: loop3: ino=21, "cpu.stat" The size of extended attributes must not exceed 64KiB [ 200.500699][ T5118] ntfs3: loop3: ino=22, "cgroup.freeze" The size of extended attributes must not exceed 64KiB [ 200.532402][ T5125] Invalid ELF section header overflow [ 200.544581][ T5118] ntfs3: loop3: ino=23, "memory.swap.current" The size of extended attributes must not exceed 64KiB [ 200.557816][ T3689] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 200.577760][ T3689] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 200.609057][ T5118] ntfs3: loop3: ino=24, "memory.numa_stat" The size of extended attributes must not exceed 64KiB [ 200.694394][ T5126] ntfs3: loop3: ino=25, "memory.events" The size of extended attributes must not exceed 64KiB [ 200.707766][ T3690] usb 1-1: New USB device found, idVendor=506f, idProduct=be92, bcdDevice=b8.ea [ 200.724843][ T3690] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.831566][ T5126] ntfs3: loop3: ino=0, ntfs_iget5 [ 200.865776][ T5118] ntfs3: loop3: ino=26, "rdma.current" The size of extended attributes must not exceed 64KiB [ 200.921140][ T3689] usb 5-1: New USB device found, idVendor=0bfd, idProduct=010c, bcdDevice=7c.b1 [ 200.930952][ T3690] usb 1-1: Product: syz [ 200.935160][ T3690] usb 1-1: Manufacturer: syz [ 200.939962][ T3689] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.948659][ T3690] usb 1-1: SerialNumber: syz [ 200.954855][ T3689] usb 5-1: Product: syz [ 200.958764][ T5126] ntfs3: loop3: MFT: r=0, expect seq=0 instead of 1! [ 200.959202][ T3689] usb 5-1: Manufacturer: syz [ 200.972976][ T3690] usb 1-1: config 0 descriptor?? [ 200.978240][ T3689] usb 5-1: SerialNumber: syz [ 200.985866][ T3689] usb 5-1: config 0 descriptor?? [ 201.373366][ T3689] kvaser_usb 5-1:0.0: Cannot get usb endpoint(s) [ 201.715690][ T3689] usb 5-1: USB disconnect, device number 7 [ 202.214593][ T5143] Zero length message leads to an empty skb [ 202.307134][ T5137] input: syz1 as /devices/virtual/input/input9 [ 202.991756][ T5150] loop2: detected capacity change from 0 to 1024 [ 203.009829][ T5150] EXT4-fs: Ignoring removed nomblk_io_submit option [ 203.068789][ T5150] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 203.193525][ T5150] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 204.183315][ T4747] EXT4-fs (loop2): unmounting filesystem. [ 204.195485][ T26] usb 1-1: USB disconnect, device number 3 [ 204.561570][ T5177] tmpfs: Bad value for 'mpol' [ 204.892909][ T5181] block nbd0: shutting down sockets [ 206.778633][ T5179] loop3: detected capacity change from 0 to 40427 [ 206.837284][ T5179] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 206.871609][ T5179] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 206.943770][ T5179] F2FS-fs (loop3): invalid crc value [ 207.022402][ T5179] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 152982424156046821) [ 207.359758][ T5179] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 207.382741][ T5179] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 208.541545][ T5231] syz.3.376 (5231): drop_caches: 2 [ 209.942502][ T5259] loop2: detected capacity change from 0 to 128 [ 211.300607][ T5243] loop1: detected capacity change from 0 to 32768 [ 211.362051][ T5243] XFS: attr2 mount option is deprecated. [ 211.475955][ T5243] XFS (loop1): Mounting V5 Filesystem [ 211.617615][ T5243] XFS (loop1): Ending clean mount [ 211.656559][ T3690] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 212.109166][ T3690] usb 4-1: Using ep0 maxpacket: 8 [ 212.126730][ T5267] netlink: 8 bytes leftover after parsing attributes in process `syz.4.401'. [ 212.339474][ T3690] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 212.363706][ T3690] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 212.432606][ T3690] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 212.457502][ T3690] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 212.491390][ T3690] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 212.522563][ T3690] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.596127][ T5305] loop0: detected capacity change from 0 to 1024 [ 212.828762][ T3690] usb 4-1: GET_CAPABILITIES returned 0 [ 212.845226][ T3690] usbtmc 4-1:16.0: can't read capabilities [ 212.966647][ T11] hfsplus: b-tree write err: -5, ino 4 [ 213.066057][ T3689] usb 4-1: USB disconnect, device number 12 [ 213.286255][ T5317] loop0: detected capacity change from 0 to 512 [ 213.314174][ T5317] ext4: Unknown parameter 'nouser_xattr' [ 213.473139][ T5317] sd 0:0:1:0: PR command failed: 1026 [ 213.495212][ T5317] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 213.522512][ T5317] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 213.739489][ T27] audit: type=1326 audit(1723212432.880:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5323 comm="syz.2.418" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fed333779f9 code=0x0 [ 213.778761][ T5328] loop3: detected capacity change from 0 to 64 [ 213.854074][ T27] audit: type=1326 audit(1723212432.930:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5323 comm="syz.2.418" exe="/root/syz-executor" sig=31 arch=c000003e syscall=436 compat=0 ip=0x7fed333779f9 code=0x0 [ 214.679371][ T4792] XFS (loop1): Unmounting Filesystem [ 215.580809][ T5352] Cannot find add_set index 0 as target [ 216.486865][ T5354] loop0: detected capacity change from 0 to 512 [ 216.560476][ T5354] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 216.597490][ T5354] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 216.660745][ T5354] EXT4-fs (loop0): warning: checktime reached, running e2fsck is recommended [ 216.757665][ T5354] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 216.767086][ T5354] System zones: 0-2, 18-18, 34-34 [ 216.869904][ T5354] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1085: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 216.959702][ T5354] EXT4-fs (loop0): 1 truncate cleaned up [ 216.965442][ T5354] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 218.110319][ T5354] EXT4-fs error (device loop0): ext4_generic_delete_entry:2727: inode #12: block 13: comm syz.0.430: bad entry in directory: rec_len is too small for name_len - offset=0, inode=12, rec_len=12, size=4096 fake=0 [ 218.249551][ T5350] loop3: detected capacity change from 0 to 40427 [ 218.310997][ T5350] F2FS-fs (loop3): invalid crc value [ 218.449008][ T5350] F2FS-fs (loop3): Failed to start F2FS issue_checkpoint_thread (-12) [ 218.559333][ T5354] EXT4-fs error (device loop0) in ext4_delete_entry:2798: Corrupt filesystem [ 218.849097][ T4503] EXT4-fs (loop0): unmounting filesystem. [ 219.021590][ T27] audit: type=1326 audit(1723212438.160:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5383 comm="syz.4.440" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f273a7779f9 code=0x0 [ 219.048830][ T5386] loop2: detected capacity change from 0 to 512 [ 219.079780][ T5386] EXT4-fs: EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31 [ 219.206921][ T5392] loop1: detected capacity change from 0 to 256 [ 219.254707][ T5392] exfat: Deprecated parameter 'utf8' [ 219.302137][ T5392] exfat: Deprecated parameter 'utf8' [ 219.392415][ T5392] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 219.801486][ T5397] TCP: TCP_TX_DELAY enabled [ 220.199842][ T27] audit: type=1326 audit(1723212439.340:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5382 comm="syz.2.441" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fed333779f9 code=0x0 [ 220.315501][ T5403] loop2: detected capacity change from 0 to 256 [ 220.611724][ T5411] loop1: detected capacity change from 0 to 512 [ 220.796503][ T5411] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 220.842647][ T5411] ext4 filesystem being mounted at /12/file0 supports timestamps until 2038 (0x7fffffff) [ 220.973641][ T5411] EXT4-fs error (device loop1): ext4_add_entry:2484: inode #2: comm syz.1.447: Directory hole found for htree leaf block 0 [ 221.007667][ T26] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 221.191176][ T5425] loop0: detected capacity change from 0 to 256 [ 221.238499][ T5425] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 221.277491][ T26] usb 5-1: Using ep0 maxpacket: 8 [ 221.312660][ T5425] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 221.353503][ T4792] EXT4-fs (loop1): unmounting filesystem. [ 221.409370][ T26] usb 5-1: New USB device found, idVendor=0763, idProduct=1021, bcdDevice=1c.62 [ 221.451522][ T26] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.488793][ T26] usb 5-1: config 0 descriptor?? [ 221.656538][ T26] snd-usb-audio: probe of 5-1:0.0 failed with error -2 [ 221.787699][ T5430] udevd[5430]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 222.944325][ T3660] Bluetooth: hci6: command 0x0406 tx timeout [ 223.093753][ C0] vkms_vblank_simulate: vblank timer overrun [ 224.013648][ T5470] loop1: detected capacity change from 0 to 512 [ 224.088996][ T3870] usb 5-1: USB disconnect, device number 8 [ 224.158221][ T5470] EXT4-fs error (device loop1): __ext4_fill_super:5399: inode #2: comm syz.1.472: iget: special inode unallocated [ 224.188888][ T5470] EXT4-fs (loop1): get root inode failed [ 224.209205][ T5470] EXT4-fs (loop1): mount failed [ 224.641656][ T5482] netlink: 4 bytes leftover after parsing attributes in process `syz.2.476'. [ 225.377542][ T3870] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 225.423148][ T5487] loop1: detected capacity change from 0 to 256 [ 225.430224][ T5462] loop3: detected capacity change from 0 to 32768 [ 225.517597][ T5462] XFS (loop3): Mounting V5 Filesystem [ 225.518415][ T5487] exfat: Deprecated parameter 'utf8' [ 225.544739][ T5487] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xc61f63e4, utbl_chksum : 0xe619d30d) [ 225.549497][ T5466] loop0: detected capacity change from 0 to 32768 [ 225.617496][ T3870] usb 5-1: Using ep0 maxpacket: 32 [ 225.737736][ T3870] usb 5-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 225.767598][ T3870] usb 5-1: config 7 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 225.837715][ T3870] usb 5-1: config 7 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 225.868707][ T3870] usb 5-1: config 7 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 225.927867][ T3870] usb 5-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 225.977985][ T3870] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.992425][ T5501] loop0: detected capacity change from 0 to 1024 [ 226.036395][ T5501] EXT4-fs: Ignoring removed nobh option [ 226.068207][ T5462] XFS (loop3): Ending clean mount [ 226.087294][ T5462] XFS (loop3): Quotacheck needed: Please wait. [ 226.218298][ T5501] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 226.274258][ T27] audit: type=1804 audit(1723212445.410:27): pid=5501 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.481" name="/newroot/56/file0/bus" dev="loop0" ino=18 res=1 errno=0 [ 226.307649][ T5462] XFS (loop3): Quotacheck: Done. [ 226.356628][ T5505] EXT4-fs (loop0): shut down requested (2) [ 226.437269][ T3655] XFS (loop3): Unmounting Filesystem [ 226.540388][ T3870] ntrig 0003:1B96:000A.0002: unknown main item tag 0x0 [ 226.553481][ T3870] ntrig 0003:1B96:000A.0002: unknown main item tag 0x0 [ 226.597721][ T3870] ntrig 0003:1B96:000A.0002: unknown main item tag 0x0 [ 226.625223][ T3870] ntrig 0003:1B96:000A.0002: unknown main item tag 0x0 [ 226.637607][ T3870] ntrig 0003:1B96:000A.0002: unknown main item tag 0x0 [ 226.666930][ T3870] ntrig 0003:1B96:000A.0002: hidraw0: USB HID v0.00 Device [HID 1b96:000a] on usb-dummy_hcd.4-1/input0 [ 226.696547][ T5509] loop1: detected capacity change from 0 to 1024 [ 226.724525][ T4503] EXT4-fs (loop0): unmounting filesystem. [ 226.851595][ T5494] loop2: detected capacity change from 0 to 32768 [ 226.976599][ T3870] usb 5-1: USB disconnect, device number 9 [ 227.037190][ T5494] XFS (loop2): Mounting V5 Filesystem [ 227.087535][ T3689] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 227.486872][ T5494] XFS (loop2): Ending clean mount [ 228.086685][ T3689] usb 2-1: Using ep0 maxpacket: 8 [ 228.238996][ T3689] usb 2-1: New USB device found, idVendor=0763, idProduct=1021, bcdDevice=1c.62 [ 228.265739][ T3689] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.302609][ T3689] usb 2-1: config 0 descriptor?? [ 228.506252][ T3689] snd-usb-audio: probe of 2-1:0.0 failed with error -2 [ 228.618762][ T5133] udevd[5133]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 230.706211][ T4747] XFS (loop2): Unmounting Filesystem [ 230.841629][ T5024] usb 2-1: USB disconnect, device number 7 [ 230.877152][ T5546] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 230.947779][ T5546] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 231.027825][ T5546] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 231.151538][ T5533] loop0: detected capacity change from 0 to 32768 [ 231.195044][ T5533] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.489 (5533) [ 231.227988][ T5533] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 231.263913][ T5533] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 231.294389][ T5533] BTRFS info (device loop0): using free space tree [ 231.495368][ T5569] netlink: 16 bytes leftover after parsing attributes in process `syz.2.495'. [ 231.610899][ T5533] BTRFS error (device loop0): open_ctree failed [ 231.857787][ T5575] netlink: 24 bytes leftover after parsing attributes in process `syz.1.500'. [ 231.917501][ T26] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 232.204964][ T5589] loop1: detected capacity change from 0 to 512 [ 232.207479][ T26] usb 5-1: Using ep0 maxpacket: 16 [ 232.320004][ T5589] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 232.329345][ T26] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 232.367437][ T26] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 232.406124][ T5589] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 232.427475][ T26] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.466267][ T5589] System zones: 0-1, 15-15, 18-18, 34-34 [ 232.498957][ T5589] EXT4-fs (loop1): orphan cleanup on readonly fs [ 232.499859][ T26] usb 5-1: config 0 descriptor?? [ 232.516633][ T5589] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=0 [ 232.539593][ T5595] loop0: detected capacity change from 0 to 1024 [ 232.562763][ T5589] EXT4-fs warning (device loop1): ext4_enable_quotas:7012: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 232.618854][ T5589] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 232.658023][ T5589] EXT4-fs error (device loop1): ext4_orphan_get:1422: comm syz.1.506: bad orphan inode 16 [ 232.694045][ T5589] ext4_test_bit(bit=15, block=18) = 1 [ 232.711347][ T5589] is_bad_inode(inode)=0 [ 232.715661][ T5589] NEXT_ORPHAN(inode)=0 [ 232.731646][ T5589] max_ino=32 [ 232.735014][ T5589] i_nlink=2 [ 232.752021][ T5589] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 232.794624][ T5589] fscrypt (loop1, inode 16): Error -61 getting encryption context [ 232.896159][ T4792] EXT4-fs (loop1): unmounting filesystem. [ 232.947534][ T3696] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 233.049370][ T5565] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 233.076771][ T5565] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 233.149250][ T26] hid (null): unknown global tag 0xd [ 233.155602][ T5582] loop2: detected capacity change from 0 to 32768 [ 233.162540][ T26] hid (null): invalid report_size 29797 [ 233.187767][ T3696] usb 1-1: Using ep0 maxpacket: 8 [ 233.203907][ T26] hid (null): invalid report_size 10752 [ 233.212095][ T5582] Mount JFS Failure: -22 [ 233.217006][ T5582] jfs_mount failed w/return code = -22 [ 233.234031][ T26] hid-generic 0003:0158:0100.0003: unknown main item tag 0x1 [ 233.292338][ T26] hid-generic 0003:0158:0100.0003: unknown main item tag 0x0 [ 233.307658][ T3696] usb 1-1: New USB device found, idVendor=0763, idProduct=1021, bcdDevice=1c.62 [ 233.338501][ T3696] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.340610][ T26] hid-generic 0003:0158:0100.0003: unknown main item tag 0x0 [ 233.395801][ T26] hid-generic 0003:0158:0100.0003: unknown main item tag 0x0 [ 233.399021][ T3696] usb 1-1: config 0 descriptor?? [ 233.440294][ T26] hid-generic 0003:0158:0100.0003: unknown main item tag 0x0 [ 233.483886][ T26] hid-generic 0003:0158:0100.0003: unknown main item tag 0x0 [ 233.522640][ T26] hid-generic 0003:0158:0100.0003: unknown main item tag 0x0 [ 233.552069][ T26] hid-generic 0003:0158:0100.0003: unknown main item tag 0x0 [ 233.588259][ T26] hid-generic 0003:0158:0100.0003: unknown main item tag 0x0 [ 233.616013][ T3696] snd-usb-audio: probe of 1-1:0.0 failed with error -2 [ 233.624044][ T26] hid-generic 0003:0158:0100.0003: unknown main item tag 0x0 [ 233.651788][ T26] hid-generic 0003:0158:0100.0003: unknown main item tag 0x0 [ 233.846170][ T5593] netlink: 16 bytes leftover after parsing attributes in process `syz.3.518'. [ 233.879637][ T26] hid-generic 0003:0158:0100.0003: unknown main item tag 0x0 [ 234.743264][ T26] hid-generic 0003:0158:0100.0003: unknown main item tag 0x0 [ 234.751623][ T5605] udevd[5605]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 234.769081][ T26] hid-generic 0003:0158:0100.0003: unknown main item tag 0x0 [ 234.776909][ T26] hid-generic 0003:0158:0100.0003: unknown main item tag 0x0 [ 234.788601][ T26] hid-generic 0003:0158:0100.0003: unknown main item tag 0x0 [ 234.796320][ T26] hid-generic 0003:0158:0100.0003: unknown main item tag 0x0 [ 234.804535][ T26] hid-generic 0003:0158:0100.0003: unknown main item tag 0x0 [ 234.812974][ T26] hid-generic 0003:0158:0100.0003: unknown main item tag 0x0 [ 234.820894][ T26] hid-generic 0003:0158:0100.0003: unknown main item tag 0x0 [ 234.828586][ T26] hid-generic 0003:0158:0100.0003: unknown main item tag 0x0 [ 234.836378][ T26] hid-generic 0003:0158:0100.0003: unknown main item tag 0x0 [ 234.845015][ T26] hid-generic 0003:0158:0100.0003: unknown main item tag 0x0 [ 234.854408][ T26] hid-generic 0003:0158:0100.0003: unknown main item tag 0x0 [ 234.863174][ T26] hid-generic 0003:0158:0100.0003: unknown main item tag 0x0 [ 234.872091][ T26] hid-generic 0003:0158:0100.0003: unknown main item tag 0x0 [ 234.880147][ T26] hid-generic 0003:0158:0100.0003: unknown main item tag 0x0 [ 234.888795][ T26] hid-generic 0003:0158:0100.0003: unknown main item tag 0x0 [ 234.900636][ T26] hid-generic 0003:0158:0100.0003: unknown main item tag 0x0 [ 234.908700][ T26] hid-generic 0003:0158:0100.0003: unknown main item tag 0x0 [ 234.918852][ T26] hid-generic 0003:0158:0100.0003: unknown main item tag 0x0 [ 234.927300][ T26] hid-generic 0003:0158:0100.0003: unknown main item tag 0x0 [ 234.953712][ T26] hid-generic 0003:0158:0100.0003: unknown main item tag 0x0 [ 234.962211][ T26] hid-generic 0003:0158:0100.0003: unknown main item tag 0x0 [ 234.970561][ T26] hid-generic 0003:0158:0100.0003: unknown main item tag 0x0 [ 234.980406][ T26] hid-generic 0003:0158:0100.0003: unknown main item tag 0x0 [ 234.990042][ T26] hid-generic 0003:0158:0100.0003: unknown main item tag 0x0 [ 235.000211][ T26] hid-generic 0003:0158:0100.0003: unknown main item tag 0x0 [ 235.014483][ T26] hid-generic 0003:0158:0100.0003: unknown main item tag 0x0 [ 235.022662][ T26] hid-generic 0003:0158:0100.0003: unknown main item tag 0x0 [ 235.030802][ T26] hid-generic 0003:0158:0100.0003: unknown main item tag 0x0 [ 235.041874][ T26] hid-generic 0003:0158:0100.0003: unknown main item tag 0x0 [ 235.050026][ T26] hid-generic 0003:0158:0100.0003: unknown main item tag 0x0 [ 235.059435][ T26] hid-generic 0003:0158:0100.0003: unknown main item tag 0x0 [ 235.067294][ T26] hid-generic 0003:0158:0100.0003: unknown main item tag 0x0 [ 235.075721][ T26] hid-generic 0003:0158:0100.0003: unknown main item tag 0x0 [ 235.083808][ T26] hid-generic 0003:0158:0100.0003: unknown main item tag 0x0 [ 235.093809][ T26] hid-generic 0003:0158:0100.0003: unknown main item tag 0x0 [ 235.101793][ T26] hid-generic 0003:0158:0100.0003: unknown main item tag 0x0 [ 235.110286][ T26] hid-generic 0003:0158:0100.0003: unknown main item tag 0x0 [ 235.119096][ T26] hid-generic 0003:0158:0100.0003: unknown main item tag 0x0 [ 235.126802][ T26] hid-generic 0003:0158:0100.0003: unknown main item tag 0x0 [ 235.135033][ T26] hid-generic 0003:0158:0100.0003: unknown main item tag 0x0 [ 235.143089][ T26] hid-generic 0003:0158:0100.0003: unknown main item tag 0x0 [ 235.151194][ T26] hid-generic 0003:0158:0100.0003: unknown main item tag 0x0 [ 235.160159][ T26] hid-generic 0003:0158:0100.0003: unknown global tag 0xd [ 235.167959][ T26] hid-generic 0003:0158:0100.0003: item 0 0 1 13 parsing failed [ 235.182452][ T26] hid-generic: probe of 0003:0158:0100.0003 failed with error -22 [ 235.219916][ T26] usb 5-1: USB disconnect, device number 10 [ 235.811053][ T5614] binder: 5613:5614 ioctl c0306201 200001c0 returned -14 [ 235.814907][ T26] usb 1-1: USB disconnect, device number 4 [ 237.577915][ T5643] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 237.834345][ T5652] netlink: 'syz.1.526': attribute type 1 has an invalid length. [ 237.863315][ T5653] loop0: detected capacity change from 0 to 1024 [ 238.236087][ T5661] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 238.254888][ T3696] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 238.949428][ T5663] netlink: 4 bytes leftover after parsing attributes in process `syz.4.531'. [ 239.074180][ T5670] loop3: detected capacity change from 0 to 256 [ 239.091465][ T5670] exfat: Deprecated parameter 'utf8' [ 239.120624][ T5673] loop1: detected capacity change from 0 to 256 [ 239.135663][ T5670] exfat: Deprecated parameter 'namecase' [ 239.157593][ T5670] exfat: Deprecated parameter 'utf8' [ 239.195689][ T5670] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 239.217532][ T3696] usb 1-1: Using ep0 maxpacket: 8 [ 239.338276][ T3696] usb 1-1: New USB device found, idVendor=0763, idProduct=1021, bcdDevice=1c.62 [ 239.359654][ T3696] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.400445][ T3696] usb 1-1: config 0 descriptor?? [ 239.602164][ T3696] snd-usb-audio: probe of 1-1:0.0 failed with error -2 [ 239.682552][ T5605] udevd[5605]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 239.747674][ T3690] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 239.814061][ T5684] loop3: detected capacity change from 0 to 512 [ 239.908519][ T5684] EXT4-fs: Ignoring removed nobh option [ 239.914182][ T5684] EXT4-fs: quotafile must be on filesystem root [ 241.096865][ T5691] loop3: detected capacity change from 0 to 8192 [ 241.123564][ T5691] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 241.147631][ T3690] usb 5-1: config 0 has an invalid interface number: 156 but max is 1 [ 241.181582][ T3690] usb 5-1: config 0 has no interface number 1 [ 241.204392][ T3690] usb 5-1: config 0 interface 156 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 241.227737][ T5691] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 241.304834][ T3690] usb 5-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 241.350291][ T5691] REISERFS (device loop3): using ordered data mode [ 241.397642][ T3690] usb 5-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 241.417427][ T5691] reiserfs: using flush barriers [ 241.469394][ T3690] usb 5-1: config 0 interface 156 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 241.492944][ T5691] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 241.529371][ T5691] REISERFS (device loop3): checking transaction log (loop3) [ 241.550879][ T3690] usb 5-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 241.597746][ T5691] REISERFS (device loop3): Using r5 hash to sort names [ 241.608162][ T5691] REISERFS (device loop3): using 3.5.x disk format [ 241.639858][ T5691] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 241.667785][ T3690] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.681219][ T5697] netlink: 40 bytes leftover after parsing attributes in process `syz.2.543'. [ 241.728519][ T3690] usb 5-1: config 0 descriptor?? [ 241.928625][ T3690] usb 5-1: MIDIStreaming interface descriptor not found [ 241.941137][ T3689] usb 1-1: USB disconnect, device number 5 [ 242.171983][ T3690] snd-usb-audio: probe of 5-1:0.156 failed with error -12 [ 242.195340][ T5703] loop2: detected capacity change from 0 to 64 [ 242.292588][ T3690] gspca_main: spca561-2.14.0 probing abcd:cdee [ 242.408317][ T3690] spca561: probe of 5-1:0.0 failed with error -22 [ 242.428344][ T5133] udevd[5133]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.156/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 242.434647][ T3690] usb 5-1: USB disconnect, device number 11 [ 243.361487][ T5715] netlink: 20 bytes leftover after parsing attributes in process `syz.3.549'. [ 245.057948][ T3690] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 245.204313][ T5756] netlink: 4 bytes leftover after parsing attributes in process `syz.3.560'. [ 245.327994][ T3690] usb 1-1: Using ep0 maxpacket: 32 [ 245.467762][ T3690] usb 1-1: config 0 has an invalid interface number: 253 but max is 0 [ 245.476620][ T3690] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 245.516922][ T3690] usb 1-1: config 0 has no interface number 0 [ 245.894541][ T5767] binder: 5761:5767 ioctl 40046205 9999999999999999 returned -22 [ 248.707776][ T3690] usb 1-1: New USB device found, idVendor=0c45, idProduct=6019, bcdDevice=3d.ae [ 248.736082][ T3690] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.767462][ T3690] usb 1-1: Product: syz [ 248.779080][ T3690] usb 1-1: config 0 descriptor?? [ 248.797693][ T3690] usb 1-1: can't set config #0, error -71 [ 248.816438][ T3690] usb 1-1: USB disconnect, device number 6 [ 249.259701][ T3691] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 249.428384][ T3690] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 249.907914][ T3690] usb 1-1: Using ep0 maxpacket: 16 [ 250.028142][ T3690] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 250.057911][ T3690] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 250.201431][ T28] INFO: task syz.1.50:3934 blocked for more than 144 seconds. [ 250.211060][ T28] Not tainted 6.1.103-syzkaller #0 [ 250.216741][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 250.273489][ T28] task:syz.1.50 state:D stack:25696 pid:3934 ppid:3647 flags:0x00004004 [ 250.291677][ T3691] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 250.302086][ T3690] usb 1-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 250.315756][ T3690] usb 1-1: config 0 interface 0 has no altsetting 0 [ 250.322530][ T3690] usb 1-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00 [ 250.331655][ T3690] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.349635][ T3690] usb 1-1: config 0 descriptor?? [ 250.354811][ T28] Call Trace: [ 250.369421][ T28] [ 250.372421][ T28] __schedule+0x143f/0x4570 [ 250.377029][ T28] ? release_firmware_map_entry+0x186/0x186 [ 250.383292][ T28] ? __mutex_trylock_common+0x8d/0x2e0 [ 250.397687][ T28] ? do_raw_spin_unlock+0x137/0x8a0 [ 250.416667][ T28] schedule+0xbf/0x180 [ 250.421512][ T28] schedule_preempt_disabled+0xf/0x20 [ 250.427879][ T28] __mutex_lock+0x6b9/0xd80 [ 250.439747][ T28] ? __mutex_lock+0x53c/0xd80 [ 250.444484][ T28] ? exfat_sync_fs+0x67/0x100 [ 250.458633][ T3691] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 250.467796][ T28] ? mutex_lock_nested+0x10/0x10 [ 250.472798][ T28] ? do_raw_spin_unlock+0x137/0x8a0 [ 250.478130][ T3691] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.497469][ T3689] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 250.505164][ T28] exfat_sync_fs+0x67/0x100 [ 250.514869][ T28] iterate_supers+0x127/0x1e0 [ 250.531811][ T28] ? sync_inodes_one_sb+0x60/0x60 [ 250.536908][ T28] ksys_sync+0xd7/0x1c0 [ 250.548689][ T3691] cdc_ether 3-1:1.0: skipping garbage [ 250.554315][ T3691] usb 3-1: bad CDC descriptors [ 250.567433][ T28] ? sync_filesystem+0x220/0x220 [ 250.572420][ T28] ? syscall_enter_from_user_mode+0x2e/0x230 [ 250.597412][ T28] ? syscall_enter_from_user_mode+0x2e/0x230 [ 250.603545][ T28] __do_sys_sync+0xa/0x10 [ 250.617291][ T28] do_syscall_64+0x3b/0xb0 [ 250.622854][ T28] ? clear_bhb_loop+0x45/0xa0 [ 250.637393][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 250.643368][ T28] RIP: 0033:0x7f68b5f779f9 [ 250.656591][ T28] RSP: 002b:00007f68b6c9e038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 250.667446][ T28] RAX: ffffffffffffffda RBX: 00007f68b6106130 RCX: 00007f68b5f779f9 [ 250.681577][ T28] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 250.713620][ T28] RBP: 00007f68b5fe58ee R08: 0000000000000000 R09: 0000000000000000 [ 250.722802][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 250.731094][ T28] R13: 0000000000000000 R14: 00007f68b6106130 R15: 00007ffe37cf0aa8 [ 250.739221][ T28] [ 250.742522][ T28] [ 250.742522][ T28] Showing all locks held in the system: [ 250.754409][ T28] 1 lock held by rcu_tasks_kthre/12: [ 250.764666][ T28] #0: ffffffff8d32b190 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30 [ 250.775427][ T28] 1 lock held by rcu_tasks_trace/13: [ 250.781004][ T28] #0: ffffffff8d32b990 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30 [ 250.792338][ T28] 1 lock held by khungtaskd/28: [ 250.796603][ T3691] usb 3-1: USB disconnect, device number 8 [ 250.797293][ T28] #0: ffffffff8d32afc0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 250.815616][ T28] 2 locks held by kworker/u4:4/56: [ 250.821212][ T28] 2 locks held by getty/3394: [ 250.827289][ T28] #0: ffff8880289e6098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 250.830074][ T3690] hid (null): usage index exceeded [ 250.838195][ T28] #1: ffffc900031262f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a7/0x1db0 [ 250.853199][ T28] 3 locks held by syz-executor/3652: [ 250.862958][ T28] 3 locks held by kworker/1:3/3689: [ 250.867591][ T3690] hid (null): usage index exceeded [ 250.873432][ T3690] hid (null): usage index exceeded [ 250.874711][ T28] #0: ffff888143ae4d38 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 250.891415][ T3690] hid-generic 0003:045E:05DA.0004: ignoring exceeding usage max [ 250.899951][ T28] #1: ffffc9000456fd20 [ 250.900561][ T3689] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 250.904738][ T3689] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.915395][ T3690] hid-generic 0003:045E:05DA.0004: usage index exceeded [ 250.929032][ T28] ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 250.940240][ T28] #2: ffff888022e7c190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1fe/0x5730 [ 250.942700][ T3689] usb 5-1: config 0 descriptor?? [ 250.950113][ T28] 6 locks held by kworker/1:4/3690: [ 250.960024][ T28] 3 locks held by kworker/1:5/3691: [ 250.965934][ T28] #0: ffff888143ae4d38 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 250.987699][ T3690] hid-generic 0003:045E:05DA.0004: item 0 1 2 0 parsing failed [ 250.988783][ T28] #1: ffffc9000458fd20 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 251.001543][ T3690] hid-generic: probe of 0003:045E:05DA.0004 failed with error -22 [ 251.016891][ T3689] cp210x 5-1:0.0: cp210x converter detected [ 251.026901][ T28] #2: ffff88814537c190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1fe/0x5730 [ 251.056703][ T3690] usb 1-1: USB disconnect, device number 7 [ 251.066712][ T28] 2 locks held by syz.1.50/3934: [ 251.079492][ T28] #0: ffff8880538800e0 (&type->s_umount_key#62){++++}-{3:3}, at: iterate_supers+0xac/0x1e0 [ 251.105988][ T28] #1: ffff888056abe0e0 (&sbi->s_lock){+.+.}-{3:3}, at: exfat_sync_fs+0x67/0x100 [ 251.115552][ T28] 4 locks held by udevd/5781: [ 251.120344][ T28] #0: ffff888018f372f0 (&p->lock){+.+.}-{3:3}, at: seq_read_iter+0xae/0xd10 [ 251.130217][ T28] #1: ffff888058f6f888 (&of->mutex){+.+.}-{3:3}, at: kernfs_seq_start+0x4f/0x3a0 [ 251.139816][ T28] #2: ffff88804f4270f0 (kn->active#5){.+.+}-{0:0}, at: kernfs_seq_start+0x6e/0x3a0 [ 251.149643][ T28] #3: ffff88807c5b1190 (&dev->mutex){....}-{3:3}, at: uevent_show+0x176/0x330 [ 251.158840][ T28] [ 251.161275][ T28] ============================================= [ 251.161275][ T28] [ 251.171489][ T28] NMI backtrace for cpu 1 [ 251.175850][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted 6.1.103-syzkaller #0 [ 251.183759][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 251.193829][ T28] Call Trace: [ 251.197123][ T28] [ 251.200059][ T28] dump_stack_lvl+0x1e3/0x2cb [ 251.204775][ T28] ? nf_tcp_handle_invalid+0x642/0x642 [ 251.210270][ T28] ? panic+0x764/0x764 [ 251.214391][ T28] ? vprintk_emit+0x622/0x740 [ 251.219097][ T28] ? printk_sprint+0x490/0x490 [ 251.223882][ T28] ? nmi_cpu_backtrace+0x252/0x560 [ 251.229126][ T28] nmi_cpu_backtrace+0x4e1/0x560 [ 251.234101][ T28] ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0 [ 251.240281][ T28] ? _printk+0xd1/0x111 [ 251.244451][ T28] ? panic+0x764/0x764 [ 251.248536][ T28] ? __wake_up_klogd+0xcc/0x100 [ 251.253411][ T28] ? panic+0x764/0x764 [ 251.257505][ T28] ? nmi_trigger_cpumask_backtrace+0xe2/0x3f0 [ 251.263612][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 251.269724][ T28] nmi_trigger_cpumask_backtrace+0x1b0/0x3f0 [ 251.275760][ T28] watchdog+0xf88/0xfd0 [ 251.279957][ T28] ? watchdog+0x1f8/0xfd0 [ 251.284301][ T28] kthread+0x28d/0x320 [ 251.288378][ T28] ? hungtask_pm_notify+0x50/0x50 [ 251.293413][ T28] ? kthread_blkcg+0xd0/0xd0 [ 251.298019][ T28] ret_from_fork+0x1f/0x30 [ 251.302472][ T28] [ 251.306497][ T28] Sending NMI from CPU 1 to CPUs 0: [ 251.312228][ C0] NMI backtrace for cpu 0 [ 251.312240][ C0] CPU: 0 PID: 56 Comm: kworker/u4:4 Not tainted 6.1.103-syzkaller #0 [ 251.312258][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 251.312269][ C0] Workqueue: bat_events batadv_nc_worker [ 251.312312][ C0] RIP: 0010:lock_release+0x5d0/0xa20 [ 251.312342][ C0] Code: 24 48 e8 03 84 00 00 4c 8b 64 24 08 4c 8b 6c 24 20 4c 8d b4 24 90 00 00 00 48 c7 c7 e0 13 0c 8b e8 c5 96 3a 09 b8 ff ff ff ff <65> 0f c1 05 b8 da 97 7e 83 f8 01 0f 85 94 00 00 00 4c 89 f3 48 c1 [ 251.312357][ C0] RSP: 0018:ffffc90001577a00 EFLAGS: 00000086 [ 251.312371][ C0] RAX: 00000000ffffffff RBX: ffff888015ac2890 RCX: ffffc90001577a03 [ 251.312384][ C0] RDX: 0000000000000002 RSI: ffffffff8b0c13e0 RDI: ffffffff8b5d5de0 [ 251.312396][ C0] RBP: ffffc90001577b38 R08: dffffc0000000000 R09: fffffbfff1d33896 [ 251.312409][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff920002aef4c [ 251.312421][ C0] R13: 0000000000000246 R14: ffffc90001577a90 R15: dffffc0000000000 [ 251.312433][ C0] FS: 0000000000000000(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 251.312448][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 251.312459][ C0] CR2: 000000110c3805b5 CR3: 000000001367b000 CR4: 00000000003506f0 [ 251.312474][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 251.312484][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 251.312499][ C0] Call Trace: [ 251.312509][ C0] [ 251.312515][ C0] ? nmi_cpu_backtrace+0x3de/0x560 [ 251.312542][ C0] ? read_lock_is_recursive+0x10/0x10 [ 251.312568][ C0] ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0 [ 251.312602][ C0] ? nmi_cpu_backtrace_handler+0x8/0x10 [ 251.312630][ C0] ? nmi_handle+0x12e/0x440 [ 251.312657][ C0] ? nmi_handle+0x25/0x440 [ 251.312681][ C0] ? lock_release+0x5d0/0xa20 [ 251.312705][ C0] ? default_do_nmi+0x62/0x150 [ 251.312731][ C0] ? exc_nmi+0xa8/0x100 [ 251.312755][ C0] ? end_repeat_nmi+0x16/0x31 [ 251.312784][ C0] ? lock_release+0x5d0/0xa20 [ 251.312808][ C0] ? lock_release+0x5d0/0xa20 [ 251.312832][ C0] ? lock_release+0x5d0/0xa20 [ 251.312856][ C0] [ 251.312860][ C0] [ 251.312868][ C0] ? batadv_nc_purge_paths+0x30e/0x3b0 [ 251.312903][ C0] ? __lock_acquire+0x1f80/0x1f80 [ 251.312925][ C0] ? do_raw_spin_lock+0x14a/0x370 [ 251.312952][ C0] ? __bpf_trace_softirq+0x10/0x10 [ 251.312979][ C0] ? __rwlock_init+0x140/0x140 [ 251.312995][ C0] ? batadv_nc_purge_paths+0xe8/0x3b0 [ 251.313015][ C0] ? batadv_nc_purge_paths+0x30e/0x3b0 [ 251.313035][ C0] _raw_spin_unlock_bh+0x17/0x30 [ 251.313053][ C0] ? batadv_nc_purge_paths+0x3b0/0x3b0 [ 251.313074][ C0] batadv_nc_purge_paths+0x30e/0x3b0 [ 251.313100][ C0] batadv_nc_worker+0x324/0x610 [ 251.313119][ C0] ? batadv_nc_worker+0xc7/0x610 [ 251.313140][ C0] ? process_one_work+0x7a9/0x11d0 [ 251.313158][ C0] process_one_work+0x8a9/0x11d0 [ 251.313182][ C0] ? worker_detach_from_pool+0x260/0x260 [ 251.313201][ C0] ? _raw_spin_lock_irqsave+0x120/0x120 [ 251.313218][ C0] ? kthread_data+0x4e/0xc0 [ 251.313241][ C0] ? wq_worker_running+0x97/0x190 [ 251.313267][ C0] worker_thread+0xa47/0x1200 [ 251.313285][ C0] ? _raw_spin_unlock+0x40/0x40 [ 251.313301][ C0] ? release_firmware_map_entry+0x186/0x186 [ 251.313332][ C0] ? _raw_spin_unlock+0x40/0x40 [ 251.313353][ C0] kthread+0x28d/0x320 [ 251.313366][ C0] ? worker_clr_flags+0x190/0x190 [ 251.313382][ C0] ? kthread_blkcg+0xd0/0xd0 [ 251.313396][ C0] ret_from_fork+0x1f/0x30 [ 251.313423][ C0] [ 251.705358][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 251.712300][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted 6.1.103-syzkaller #0 [ 251.720231][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 251.730304][ T28] Call Trace: [ 251.733597][ T28] [ 251.736538][ T28] dump_stack_lvl+0x1e3/0x2cb [ 251.741244][ T28] ? nf_tcp_handle_invalid+0x642/0x642 [ 251.746825][ T28] ? panic+0x764/0x764 [ 251.750930][ T28] ? llist_add_batch+0x160/0x1d0 [ 251.755904][ T28] ? vscnprintf+0x59/0x80 [ 251.760255][ T28] panic+0x318/0x764 [ 251.764180][ T28] ? nmi_trigger_cpumask_backtrace+0x2c1/0x3f0 [ 251.770364][ T28] ? memcpy_page_flushcache+0xfc/0xfc [ 251.775760][ T28] ? nmi_trigger_cpumask_backtrace+0x2c1/0x3f0 [ 251.781938][ T28] ? nmi_trigger_cpumask_backtrace+0x33a/0x3f0 [ 251.788150][ T28] ? nmi_trigger_cpumask_backtrace+0x33f/0x3f0 [ 251.794356][ T28] watchdog+0xfc7/0xfd0 [ 251.798554][ T28] ? watchdog+0x1f8/0xfd0 [ 251.803010][ T28] kthread+0x28d/0x320 [ 251.807129][ T28] ? hungtask_pm_notify+0x50/0x50 [ 251.812173][ T28] ? kthread_blkcg+0xd0/0xd0 [ 251.816780][ T28] ret_from_fork+0x1f/0x30 [ 251.821321][ T28] [ 251.824678][ T28] Kernel Offset: disabled [ 251.829017][ T28] Rebooting in 86400 seconds..