last executing test programs: 28.294401132s ago: executing program 0 (id=555): openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) fsopen(&(0x7f0000000200)='btrfs\x00', 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r3, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r2], 0x38}, 0x1, 0x0, 0x0, 0x4080}, 0x10) 28.028251028s ago: executing program 0 (id=561): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c6572"], 0x38}}, 0x0) 27.902091381s ago: executing program 0 (id=564): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100fcfffffffcdbdf250700000008000300", @ANYRES32=r4, @ANYBLOB="140004006e69637666300000000000000000000008000500060000"], 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NL80211_CMD_SET_KEY(r1, &(0x7f00000004c0)={&(0x7f0000000300), 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x24, r3, 0x100, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x2, 0x57}}}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4841}, 0x8001) r5 = syz_open_dev$sndctrl(&(0x7f0000000d40), 0x2, 0x800) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r5, 0x80dc5521, &(0x7f0000003440)=""/4096) r6 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000000), &(0x7f0000000040)=0x8) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x74, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @device_a, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0) 27.856051443s ago: executing program 0 (id=565): syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0x101c08a, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x6, 0x2c8, &(0x7f0000002500)="$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") mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) 27.585301699s ago: executing program 0 (id=570): socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x3, 0xa) socket$inet(0x2, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100"], 0x90}}, 0x0) 26.993330103s ago: executing program 0 (id=580): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) syz_clone(0x2b00b100, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fdinfo/3\x00') socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) syz_emit_ethernet(0xd81, 0x0, 0x0) readv(r0, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r2, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r3, @ANYRES32=r3], 0x44}}, 0x2000850) 26.750909219s ago: executing program 32 (id=580): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) syz_clone(0x2b00b100, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fdinfo/3\x00') socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) syz_emit_ethernet(0xd81, 0x0, 0x0) readv(r0, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r2, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r3, @ANYRES32=r3], 0x44}}, 0x2000850) 8.79025652s ago: executing program 1 (id=766): r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000200)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000007802000000000000000000000000000000000000001100"/295], &(0x7f0000000300)=0x2a0) 8.712693282s ago: executing program 1 (id=767): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100fcfffffffcdbdf250700000008000300", @ANYRES32=r4, @ANYBLOB="140004006e69637666300000000000000000000008000500060000"], 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NL80211_CMD_SET_KEY(r1, &(0x7f00000004c0)={&(0x7f0000000300), 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x24, r3, 0x100, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x2, 0x57}}}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4841}, 0x8001) r5 = syz_open_dev$sndctrl(&(0x7f0000000d40), 0x2, 0x800) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r5, 0x80dc5521, &(0x7f0000003440)=""/4096) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000000), &(0x7f0000000040)=0x8) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x74, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @device_a, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0) 7.185174739s ago: executing program 1 (id=776): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62}, 0x94) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) close(r1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000040095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@map=0x1, r2, 0x2e, 0x0, r2, @void, @value=0x0}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[], 0x20) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_SECURITY_LEVEL(r3, 0x0, 0x2, 0x0, 0x0) 7.062221911s ago: executing program 1 (id=780): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x8082, &(0x7f0000000180)={[{@resuid}, {@orlov}]}, 0x1, 0x52e, &(0x7f0000000f00)="$eJzs3d9rZFcdAPDvvclss7upk6pILViLrWSL7kzS2DaIaH3Rp4K6vq8xmYSQmUzITOomFE3xPxBBwSeffBH8A4TSB/FZCgVFEB9ERRHd6kPxR6/MzJ1uMrmTpDTJpJnPB87OOffH+Z5zw5y5v/beAMbWExHxQkRMRMTTEVP96WmeYr+XOsu9ef/l5U5KIsvu/D2JJJ/WX6dTnoyIm/lqncq+9uWIbyZH47Z29zaW6vXadl6uthtb1dbu3u31xtJaba22ubAw/9zi84vPLs5luSE9OGF2bqaf+cmXPv/qp7/1h7t/vfXtTrM+95EoxUA/jvXWiaEO6XW99GDD5tto+13UcZlN5P0pjbohAACcSmcf/4MR8Ynu/n85Jrp7cwMmRtEyAAAA4KxkX5iO/yYPrqIBAAAAV08aEdORpJX8XoDpSNNr+bmBD8eNtN5stT+12tzZXOnMi5iJUrq6Xq/NRUS5V0465fn8Htt++ZmB8kJEPBIR3y9f75Yry836yojPfQAAAMC4uDlw/P+vctrNn6zg/wkAAAAAl9fM0AIAAABwVTjkBwAAgKtv8Pj/1RG1AwAAADgXX3nxxU7K+u+/Xnlpd2ej+dLtlVpro9LYWa4sN7e3KmvN5lr3mX2Nk+qrN5tbn4nNnXvVdq3VrrZ29+42mjub7bvrh16BDQAAAFygRz7+2m+SiNj/7PVuivw5gACH/GnUDQDO0sSoGwCMjKd4w/gq9TPXRtsOYHSSgfJvB8pu3gEAgPe/2Y8evf7fPxVQGmnLgPPmXh8AGD+u/8P4KrkDEMZaGhEf6GUfGrbM0Ov/vzptlCyLeL18cIrziwAAcLGmuylJK/lxwHSkaaUS8XBEOhOlZHW9XpvLjw9+XS491CnPd9dMjtwzDAAAAAAAAAAAAAAAAAAAAAAAAAAUy7IkMgAAAOBKi0j/knSf5h8xW35qevD8wLXkrXL8OS/86M4P7i2129vznen/6L7L61pEtH94p9Sd/szQ14cBAAAAZy3ZHzqrd5yef85faKsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGANv3n95uZ8uMu7fvhgRM0XxJ2Oq+zkVpYi48c8kJg+sl0TExBnE338lIh4tip/E21mWzeStKIp//Zzjz3Q3TXH8NCJunkF8GGevdcafF4q+f2k80f0s/v5N5um9Gj7+pXnkR7vjXNH48/CR2hqFMR5742fVofFfiXhssnj86Y+/yZD4Tx6p7T9Zlh2N8Y2v7+0Ni5/9OGK28PcnORSr2m5sVVu7e7fXG0trtbXa5sLC/HOLzy8+uzhXXV2v1/J/C2N872M/f/u4/t8oiP/73/XG3+P6/9SwSgf874179z/Uy5aK4t96svD3dyqGxE/z375P5vnO/Nl+fr+XP+jxn77++HH9Xxmy/U/6+986Zf+f/up3/3jKRQGAC9Da3dtYqtdr28dkpk6xzPsx84upS9GMd5nJvtP7y516rf5u22Vo/IFMZ2/1wZR+ry5Bww5ksjOp599Zlp20zERcki6/kxnZkAQAAJyTX76z0z/qlgAAAAAAAAAAAAAAAAAAAMD4uojHiQ3G3B9NVwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAjvX/AAAA//9QKut8") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x2000080, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 3.979048425s ago: executing program 1 (id=821): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d3750820c80a2103be6f000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000540)={0x1c, &(0x7f0000000380)={0x40, 0xc}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000f80)=ANY=[@ANYBLOB="00df19"], 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000d00)={0x84, &(0x7f0000000680)={0x0, 0x11}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000440)={0x34, &(0x7f0000000180)={0x0, 0x10}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x1, 0x1, 0x1}, 0x0}) 3.526439646s ago: executing program 2 (id=831): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c040, 0x0) sendmsg$unix(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001600)=[{0x0}], 0x1, &(0x7f0000000040), 0x0, 0x20000820}, 0x890) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000040), 0x4) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='nfs4\x00', 0x0, &(0x7f00000001c0)='\x01') 3.445596588s ago: executing program 2 (id=834): socket$nl_generic(0x10, 0x3, 0x10) openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) fsopen(&(0x7f0000000200)='btrfs\x00', 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4080}, 0x10) 3.303981002s ago: executing program 2 (id=839): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100fcfffffffcdbdf250700000008000300", @ANYRES32=r4, @ANYBLOB="140004006e69637666300000000000000000000008000500060000"], 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NL80211_CMD_SET_KEY(r1, &(0x7f00000004c0)={&(0x7f0000000300), 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x24, r3, 0x100, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x2, 0x57}}}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4841}, 0x8001) r5 = syz_open_dev$sndctrl(&(0x7f0000000d40), 0x2, 0x800) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r5, 0x80dc5521, &(0x7f0000003440)=""/4096) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, &(0x7f0000000040)) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x74, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @device_a, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0) 3.011632608s ago: executing program 2 (id=843): r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="09000000040000000400000007"], 0x48) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00', r2}, 0x18) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000e00)=@generic={&(0x7f0000000dc0)='./file0\x00', 0x0, 0x10}, 0x18) 2.754433015s ago: executing program 2 (id=847): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r0, 0x0, 0x2d, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x1, 0x0, 0x1}}, 0x40) 2.685516326s ago: executing program 2 (id=850): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d3750820c80a2103be6f000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000540)={0x1c, &(0x7f0000000380)={0x40, 0xc}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 1.778276818s ago: executing program 4 (id=859): r0 = socket$kcm(0x10, 0x2, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6142, 0x0) faccessat2(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x3, 0x1000) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000000)=r3, 0x4) mount_setattr(0xffffffffffffff9c, 0x0, 0x8000, &(0x7f0000000140)={0x80000, 0x0, 0x20000}, 0x20) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)='\\', 0x1}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xe, 0x5, &(0x7f0000000000)=@raw=[@map_fd={0x18, 0x2, 0x1, 0x0, r4}, @map_fd={0x18, 0x3, 0x1, 0x0, r4}, @exit], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x9, &(0x7f00000014c0)=ANY=[@ANYBLOB="18010000756c6c2500000000002020207b1af8ff00000000bfa10000000000000701000006feffffb702000008000000b703000000000000850000004100000095"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x2}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002fc0)=@newtaction={0x5c, 0x30, 0xb, 0x70bd2a, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xfdb, 0x0, 0xe4}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10000000) 1.626730981s ago: executing program 4 (id=861): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xc, 0xffe0}, {0x0, 0x9}, {0xe, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_BOS={0x5, 0x44, 0x6}]}}]}, 0x44}}, 0x2000a100) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socket$unix(0x1, 0x1, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, 0x0, 0x4000) 1.456911176s ago: executing program 4 (id=864): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100fcfffffffcdbdf250700000008000300", @ANYRES32=r4, @ANYBLOB="140004006e69637666300000000000000000000008000500060000"], 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NL80211_CMD_SET_KEY(r1, &(0x7f00000004c0)={&(0x7f0000000300), 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x24, r3, 0x100, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x2, 0x57}}}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4841}, 0x8001) r5 = syz_open_dev$sndctrl(&(0x7f0000000d40), 0x2, 0x800) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r5, 0x80dc5521, &(0x7f0000003440)=""/4096) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000000), 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x74, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @device_a, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0) 1.450034916s ago: executing program 5 (id=865): socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x3, 0xa) socket$inet(0x2, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r1], 0x90}}, 0x0) 1.355340668s ago: executing program 5 (id=867): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0xdd86, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b0400000000000000000200fffe4c0004802800018008000100666962001c000280080003400000000608000240000000030800014000000009200001800700010063740000140002800800024000000011080004400000000a0900010073797a30000000000900020073797a32"], 0xa0}}, 0x0) 1.341258059s ago: executing program 4 (id=868): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newtfilter={0x70, 0x2c, 0xf3f, 0x70fd2c, 0x25dddbbf, {0x0, 0x0, 0x0, 0x0, {0x5, 0x3da48c8682330ab8}, {}, {0x7, 0xfffa}}, [@filter_kind_options=@f_basic={{0xa}, {0x40, 0x2, [@TCA_BASIC_EMATCHES={0x3c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x0, 0x7, 0x5}, {{0x1}, {0x0, 0x0, 0x0, 0x1}}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x5, 0x1, 0x1}, {0x4, 0x1, 0x7, 0x2, 0x5, 0x1, 0x1}}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x20045080}, 0x4880) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000280)=@xdp={0x2c, 0x7, r3, 0x41}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000300)="74949ebb27e184548454f16a8d898482", 0x10}], 0x1}, 0x0) 1.210405972s ago: executing program 5 (id=869): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @loopback, 0x5}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x304}, '\x00', "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "9b1f80001b00"}, 0x38) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="e400000000000000000000000700000094040000865400000003051005c3e45b3e088e6f722b0df22b3c00126eacb1ceb7f260dab33486c73af20b59020788c2fdffc9060c47629611bad4427b49310104076002042a03051106b63d39a9a516678325f283800b5d83237b00000000ac1414aaac1414bbe0000002ffffffff00000000ac14142de0000002890327440c7b302e7dc6a00000000807174bac1414aae00000027f0000017f000001ac1e10018317eaac1e0101ac1414aaffffffff64010101e0000001831b0b640101017f00000164010102ffffffffac1414aae0000001000000000014000000000000001a01000001"], 0x11b}, 0x0) 1.151973073s ago: executing program 5 (id=871): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x181001, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000)) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x6) pselect6(0x40, &(0x7f0000000100)={0x2, 0xfffffffffffffffe, 0x9, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x6}, 0x0, 0x0) ioctl$TCXONC(r1, 0x540a, 0x2) 1.094375434s ago: executing program 3 (id=872): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x24, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0x300}}}, 0x24}, 0x1, 0x0, 0x0, 0x20008050}, 0x0) 832.764031ms ago: executing program 4 (id=873): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210080, &(0x7f0000000ac0)={[{@nodelalloc}, {@noblock_validity}, {@noauto_da_alloc}, {@nolazytime}, {@errors_continue}, {@lazytime}, {@inlinecrypt}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@nombcache}, {@resuid}]}, 0x1, 0x5a0, &(0x7f0000000380)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x40441, 0x106) fallocate(r0, 0x8, 0x3800000000000, 0x10000) 741.109123ms ago: executing program 3 (id=874): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000001c0)={'filter\x00', 0x5, 0x4, 0x3f0, 0x220, 0x0, 0x308, 0x220, 0x308, 0x110, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @private, @empty}}}, {{@uncond, 0xc0, 0x308}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @private}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) 622.455106ms ago: executing program 3 (id=875): socket$nl_generic(0x10, 0x3, 0x10) openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) fsopen(&(0x7f0000000200)='btrfs\x00', 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x4080}, 0x10) 529.236128ms ago: executing program 4 (id=876): memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket(0x10, 0x3, 0xa) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendfile(r0, r1, 0x0, 0x7fffffffffffffff) 494.325099ms ago: executing program 3 (id=877): bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x1}}, 0x40) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0) bind(r2, &(0x7f0000000240)=@isdn={0x22, 0x7, 0x3, 0xf, 0x7}, 0x80) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/kernel/mm/hugepages/hugepages-2048kB/free_hugepages\x00', 0x0, 0x0) read(r3, &(0x7f0000000300)=""/256, 0x100) openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x202) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0xfc, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 370.290622ms ago: executing program 3 (id=878): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100fcfffffffcdbdf250700000008000300", @ANYRES32=r4, @ANYBLOB="140004006e69637666300000000000000000000008000500060000"], 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NL80211_CMD_SET_KEY(r1, &(0x7f00000004c0)={&(0x7f0000000300), 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x24, r3, 0x100, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x2, 0x57}}}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4841}, 0x8001) r5 = syz_open_dev$sndctrl(&(0x7f0000000d40), 0x2, 0x800) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r5, 0x80dc5521, &(0x7f0000003440)=""/4096) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000000), 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x74, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @device_a, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0) 258.917395ms ago: executing program 5 (id=879): socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x3, 0xa) socket$inet(0x2, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r1], 0x90}}, 0x0) 204.812095ms ago: executing program 3 (id=880): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) sendfile(r0, r0, 0x0, 0x800007) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000300)={[{@data_err_ignore}, {@noload}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@errors_remount}, {@grpid}, {@noquota}, {@min_batch_time={'min_batch_time', 0x3d, 0x3}}, {@jqfmt_vfsold}]}, 0x1, 0x47a, &(0x7f00000006c0)="$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") 116.575478ms ago: executing program 5 (id=881): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000800)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, @mcast2, 0x0, 0x6, 0x0, 0x100, 0x6, 0x4180107, r1}) 0s ago: executing program 1 (id=882): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a010400000000000000000200000708000240000000020900010073797a31000000004c000000030a01040000000000000000020000070900010073797a31000000000900030073797a320000000014000480080001000000000308000200000000000b00070066696c746572000084000000060a01040000000000000000020000070900010073797a31000000000900020073797a320000000058000480540001800a0001006d61746368000000440002800b0001006e6661636374000008000200000000002c00030073797a30"], 0x120}}, 0x0) kernel console output (not intermixed with test programs): ady [ 69.494346][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.504841][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.520162][ T4188] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.529281][ T4188] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.538991][ T4188] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.548225][ T4188] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.596377][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 69.606874][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 69.617373][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.629857][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.639438][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.650282][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.660400][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.668480][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.676594][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.685810][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.709847][ T4189] device veth0_vlan entered promiscuous mode [ 69.723663][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.732340][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.753325][ T4193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.767962][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.778885][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.805367][ T4190] device veth0_macvtap entered promiscuous mode [ 69.815460][ T4187] device veth0_macvtap entered promiscuous mode [ 69.844879][ T4189] device veth1_vlan entered promiscuous mode [ 69.866522][ T4190] device veth1_macvtap entered promiscuous mode [ 69.889162][ T4187] device veth1_macvtap entered promiscuous mode [ 69.931169][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.943042][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.955493][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.969771][ T493] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.978464][ T493] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.988396][ T493] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.997053][ T493] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.006755][ T493] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.016448][ T493] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.026726][ T493] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.053886][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.066734][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.078337][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.089441][ T4190] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.098976][ T4190] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.104654][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.117663][ T4190] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.127648][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.133271][ T4190] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.150462][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.161230][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.172232][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.182793][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.195189][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.207416][ T4234] Bluetooth: hci1: command 0x040f tx timeout [ 70.208909][ T4189] device veth0_macvtap entered promiscuous mode [ 70.221624][ T4234] Bluetooth: hci3: command 0x040f tx timeout [ 70.223167][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.230691][ T4234] Bluetooth: hci0: command 0x040f tx timeout [ 70.239699][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.253690][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.262499][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.271841][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.280859][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.289572][ T4196] Bluetooth: hci4: command 0x040f tx timeout [ 70.289719][ T4196] Bluetooth: hci2: command 0x040f tx timeout [ 70.297428][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.311218][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.320773][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.330209][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.339076][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.347399][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.369660][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.385884][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.396147][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.407322][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.418858][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.429313][ T4189] device veth1_macvtap entered promiscuous mode [ 70.450012][ T4193] device veth0_vlan entered promiscuous mode [ 70.459563][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.468160][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.478728][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.490397][ T4187] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.500642][ T4187] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.511056][ T4187] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.522332][ T4187] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.542965][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.554253][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.564214][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.575070][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.585693][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.596466][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.608795][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.632709][ T4193] device veth1_vlan entered promiscuous mode [ 70.649356][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.658455][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.667806][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.679856][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.692146][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.702240][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.713221][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.725227][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.736015][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.747460][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.788841][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.800313][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.811701][ T1275] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.812780][ T4189] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.829956][ T4189] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.831241][ T1275] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.841063][ T4189] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.857716][ T4189] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.880476][ T493] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.895885][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.904224][ T493] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.957641][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.980252][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.992707][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.006804][ T4193] device veth0_macvtap entered promiscuous mode [ 71.072924][ T4252] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.089169][ T4193] device veth1_macvtap entered promiscuous mode [ 71.108429][ T4252] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.134585][ T493] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.150997][ T493] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.167531][ T493] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.193996][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.202039][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.244795][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.295306][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.307226][ T1275] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.322268][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.346062][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.351608][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.364342][ T1275] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.369037][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.382395][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.393567][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.404602][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.415698][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.426900][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.442676][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.474566][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.484034][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.497531][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.505146][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.518959][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.548470][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.580197][ T4279] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5'. [ 71.629888][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.641570][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.652762][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.665210][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.676839][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.688056][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.698895][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.710846][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.722667][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.731731][ T4276] netlink: 'syz.4.5': attribute type 1 has an invalid length. [ 71.750830][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.760730][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.780888][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.791460][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.818730][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.874935][ T4193] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.920139][ T4193] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.939489][ T4193] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.983995][ T4193] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.257725][ T4295] device syzkaller0 entered promiscuous mode [ 72.284464][ T13] Bluetooth: hci0: command 0x0419 tx timeout [ 72.299325][ T13] Bluetooth: hci3: command 0x0419 tx timeout [ 72.315452][ T493] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.326346][ T13] Bluetooth: hci1: command 0x0419 tx timeout [ 72.336141][ T493] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.364640][ T4196] Bluetooth: hci2: command 0x0419 tx timeout [ 72.377447][ T4196] Bluetooth: hci4: command 0x0419 tx timeout [ 72.423649][ T493] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.496740][ T1275] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.517224][ T1275] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.543269][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.615844][ T4309] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15'. [ 72.885967][ T4318] device syzkaller0 entered promiscuous mode [ 72.951388][ T4323] netlink: 28 bytes leftover after parsing attributes in process `syz.4.21'. [ 73.052363][ T4326] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 73.080955][ T4321] device syzkaller0 entered promiscuous mode [ 73.215661][ T4335] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 73.313580][ T4236] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 73.519903][ T4346] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 73.566479][ T4346] kvm: pic: single mode not supported [ 73.657899][ T1108] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 73.714039][ T4236] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 73.724154][ T4232] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 73.742065][ T4236] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.766393][ T4236] usb 5-1: config 0 descriptor?? [ 73.818199][ T4236] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 73.953520][ T1108] usb 3-1: Using ep0 maxpacket: 8 [ 74.093983][ T1108] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 74.112074][ T1108] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 74.122553][ T1108] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.133718][ T4232] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 74.148676][ T1108] usb 3-1: config 0 descriptor?? [ 74.154023][ T4232] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 74.186621][ T4232] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 74.219307][ T4232] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.265024][ T4338] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 74.519481][ T1108] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 74.668232][ T13] usb 4-1: USB disconnect, device number 2 [ 74.982474][ T4381] netlink: 15051 bytes leftover after parsing attributes in process `syz.0.38'. [ 75.181935][ T4235] usb 3-1: USB disconnect, device number 2 [ 75.887238][ T4409] tipc: Started in network mode [ 75.892506][ T4409] tipc: Node identity ca2b5aa3ef3b, cluster identity 4711 [ 75.900774][ T4409] tipc: Enabled bearer , priority 0 [ 75.910054][ T4409] device syzkaller0 entered promiscuous mode [ 75.925863][ T4236] usb 5-1: USB disconnect, device number 2 [ 75.947278][ T4409] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 75.962034][ T4409] tipc: Resetting bearer [ 75.994701][ T4408] tipc: Resetting bearer [ 76.008600][ T4235] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 76.018598][ T4408] tipc: Disabling bearer [ 76.043878][ T1108] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 76.187778][ T4413] netlink: 56 bytes leftover after parsing attributes in process `syz.0.51'. [ 76.254152][ T4235] usb 3-1: Using ep0 maxpacket: 32 [ 76.263445][ T1108] usb 2-1: device descriptor read/64, error -71 [ 76.295948][ T4235] usb 3-1: no configurations [ 76.300634][ T4235] usb 3-1: can't read configurations, error -22 [ 76.464109][ T4235] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 76.479874][ T4423] netlink: 56 bytes leftover after parsing attributes in process `syz.0.64'. [ 76.553668][ T1108] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 76.643920][ T4430] netlink: 44 bytes leftover after parsing attributes in process `syz.0.66'. [ 76.716760][ T4431] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 76.725606][ T4235] usb 3-1: Using ep0 maxpacket: 32 [ 76.737583][ T4431] kvm: pic: single mode not supported [ 76.760138][ T1108] usb 2-1: device descriptor read/64, error -71 [ 76.764268][ T4235] usb 3-1: no configurations [ 76.777596][ T4235] usb 3-1: can't read configurations, error -22 [ 76.784437][ T4235] usb usb3-port1: attempt power cycle [ 76.893690][ T1108] usb usb2-port1: attempt power cycle [ 76.905948][ T4435] netlink: 44 bytes leftover after parsing attributes in process `syz.0.68'. [ 77.019726][ T4441] netlink: 44 bytes leftover after parsing attributes in process `syz.0.70'. [ 77.194944][ T4235] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 77.303687][ T4235] usb 3-1: Using ep0 maxpacket: 32 [ 77.323599][ T1108] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 77.343798][ T4235] usb 3-1: no configurations [ 77.348757][ T4235] usb 3-1: can't read configurations, error -22 [ 77.373517][ T4234] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 77.433800][ T1108] usb 2-1: device descriptor read/8, error -71 [ 77.513555][ T4235] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 77.604285][ T4235] usb 3-1: Using ep0 maxpacket: 32 [ 77.653912][ T4235] usb 3-1: no configurations [ 77.660584][ T4235] usb 3-1: can't read configurations, error -22 [ 77.677003][ T4235] usb usb3-port1: unable to enumerate USB device [ 77.714964][ T1108] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 77.734094][ T4234] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 77.754355][ T4234] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 77.774082][ T4234] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 77.792603][ T4234] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.823727][ T1108] usb 2-1: device descriptor read/8, error -71 [ 77.834099][ T4445] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 77.965257][ T1108] usb usb2-port1: unable to enumerate USB device [ 78.131020][ T4454] tipc: Started in network mode [ 78.139037][ T4454] tipc: Node identity aeba82d18047, cluster identity 4711 [ 78.152087][ T4454] tipc: Enabled bearer , priority 0 [ 78.155066][ T4234] usb 1-1: USB disconnect, device number 2 [ 78.161081][ T4454] device syzkaller0 entered promiscuous mode [ 78.183220][ T4454] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 78.207868][ T4454] tipc: Resetting bearer [ 78.216040][ T4453] tipc: Resetting bearer [ 78.270354][ T4453] tipc: Disabling bearer [ 78.643656][ T13] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 78.750676][ T4462] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 78.824673][ T4462] kvm: pic: single mode not supported [ 78.829309][ T4468] netlink: 28 bytes leftover after parsing attributes in process `syz.2.71'. [ 78.909672][ T13] usb 5-1: Using ep0 maxpacket: 8 [ 79.003108][ T4476] netlink: 48 bytes leftover after parsing attributes in process `syz.0.74'. [ 79.018672][ T4477] device syzkaller0 entered promiscuous mode [ 79.073756][ T13] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 79.086334][ T13] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 79.123502][ T13] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.182014][ T13] usb 5-1: config 0 descriptor?? [ 79.295527][ T4490] tipc: Started in network mode [ 79.320281][ T4490] tipc: Node identity 86a606e20473, cluster identity 4711 [ 79.338623][ T4490] tipc: Enabled bearer , priority 0 [ 79.365210][ T4491] device syzkaller0 entered promiscuous mode [ 79.378984][ T4490] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 79.417111][ T4490] tipc: Resetting bearer [ 79.433218][ T4486] tipc: Resetting bearer [ 79.450974][ T4486] tipc: Disabling bearer [ 79.475971][ T13] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 79.863625][ T13] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 80.062559][ T1108] usb 5-1: USB disconnect, device number 3 [ 80.164405][ T13] usb 3-1: Using ep0 maxpacket: 32 [ 80.169605][ T4235] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 80.213815][ T13] usb 3-1: no configurations [ 80.218466][ T13] usb 3-1: can't read configurations, error -22 [ 80.385467][ T13] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 80.446352][ T4235] usb 2-1: Using ep0 maxpacket: 32 [ 80.493714][ T4235] usb 2-1: no configurations [ 80.498377][ T4235] usb 2-1: can't read configurations, error -22 [ 80.683632][ T13] usb 3-1: Using ep0 maxpacket: 32 [ 80.688985][ T4235] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 80.733926][ T13] usb 3-1: no configurations [ 80.738582][ T13] usb 3-1: can't read configurations, error -22 [ 80.746765][ T13] usb usb3-port1: attempt power cycle [ 80.955248][ T4235] usb 2-1: Using ep0 maxpacket: 32 [ 81.003795][ T4235] usb 2-1: no configurations [ 81.008540][ T4235] usb 2-1: can't read configurations, error -22 [ 81.014922][ T4234] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 81.023159][ T4235] usb usb2-port1: attempt power cycle [ 81.183574][ T13] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 81.283687][ T13] usb 3-1: Using ep0 maxpacket: 32 [ 81.333514][ T13] usb 3-1: no configurations [ 81.338171][ T13] usb 3-1: can't read configurations, error -22 [ 81.393630][ T4234] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 81.406101][ T4234] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 81.416127][ T4234] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 81.425801][ T4234] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.443496][ T4235] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 81.453977][ T4511] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 81.493573][ T13] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 81.533668][ T4235] usb 2-1: Using ep0 maxpacket: 32 [ 81.573944][ T4235] usb 2-1: no configurations [ 81.578598][ T4235] usb 2-1: can't read configurations, error -22 [ 81.585260][ T13] usb 3-1: Using ep0 maxpacket: 32 [ 81.623751][ T13] usb 3-1: no configurations [ 81.628411][ T13] usb 3-1: can't read configurations, error -22 [ 81.635038][ T13] usb usb3-port1: unable to enumerate USB device [ 81.733498][ T4235] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 81.762369][ T1108] usb 5-1: USB disconnect, device number 4 [ 81.833587][ T4235] usb 2-1: Using ep0 maxpacket: 32 [ 81.873599][ T4235] usb 2-1: no configurations [ 81.878590][ T4235] usb 2-1: can't read configurations, error -22 [ 81.885815][ T4235] usb usb2-port1: unable to enumerate USB device [ 82.597722][ T4529] netlink: 48 bytes leftover after parsing attributes in process `syz.3.87'. [ 82.687297][ T4532] netlink: 8 bytes leftover after parsing attributes in process `syz.2.88'. [ 82.900134][ T4548] device syzkaller0 entered promiscuous mode [ 82.926317][ T4548] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 85.673784][ T4533] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 85.896585][ T4571] netlink: 48 bytes leftover after parsing attributes in process `syz.4.103'. [ 86.123483][ T1108] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 86.263540][ T4236] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 86.383458][ T1108] usb 3-1: Using ep0 maxpacket: 32 [ 86.503872][ T1108] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 86.523667][ T4236] usb 4-1: Using ep0 maxpacket: 32 [ 86.535168][ T1108] usb 3-1: config 0 has no interfaces? [ 86.542364][ T1108] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 86.554674][ T1108] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.564838][ T4236] usb 4-1: no configurations [ 86.568558][ T4591] netlink: 8 bytes leftover after parsing attributes in process `syz.0.108'. [ 86.569603][ T4236] usb 4-1: can't read configurations, error -22 [ 86.571778][ T1108] usb 3-1: config 0 descriptor?? [ 86.713447][ T4236] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 86.782419][ T4600] tipc: Enabled bearer , priority 0 [ 86.790633][ T4603] netlink: 28 bytes leftover after parsing attributes in process `syz.1.114'. [ 86.801939][ T4603] netlink: 'syz.1.114': attribute type 7 has an invalid length. [ 86.810357][ T4603] netlink: 4 bytes leftover after parsing attributes in process `syz.1.114'. [ 86.827393][ T4600] device syzkaller0 entered promiscuous mode [ 86.838827][ T4600] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 86.854167][ T7] cfg80211: failed to load regulatory.db [ 86.855829][ T4600] Zero length message leads to an empty skb [ 86.870520][ T4600] tipc: Resetting bearer [ 86.883163][ T4598] tipc: Resetting bearer [ 86.913312][ T4598] tipc: Disabling bearer [ 86.973668][ T4236] usb 4-1: Using ep0 maxpacket: 32 [ 86.999220][ T4607] syz.4.116 uses obsolete (PF_INET,SOCK_PACKET) [ 87.013744][ T4236] usb 4-1: no configurations [ 87.018651][ T4236] usb 4-1: can't read configurations, error -22 [ 87.043718][ T4236] usb usb4-port1: attempt power cycle [ 87.312279][ T4627] netlink: 12 bytes leftover after parsing attributes in process `syz.0.125'. [ 87.391518][ T4627] netlink: 20 bytes leftover after parsing attributes in process `syz.0.125'. [ 87.418566][ T4627] netlink: 76 bytes leftover after parsing attributes in process `syz.0.125'. [ 87.440307][ T4627] netlink: 52 bytes leftover after parsing attributes in process `syz.0.125'. [ 87.463484][ T4236] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 87.465377][ T4627] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.479813][ T4627] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.512449][ T4635] netlink: 'syz.1.129': attribute type 7 has an invalid length. [ 87.530721][ T4627] syz.0.125 (4627) used greatest stack depth: 20080 bytes left [ 87.554969][ T4635] device syz_tun entered promiscuous mode [ 87.561789][ T4635] device gretap0 entered promiscuous mode [ 87.568384][ T4236] usb 4-1: Using ep0 maxpacket: 32 [ 87.579612][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 87.619395][ T4236] usb 4-1: no configurations [ 87.624413][ T4236] usb 4-1: can't read configurations, error -22 [ 87.697166][ T4643] tipc: Enabled bearer , priority 0 [ 87.705575][ T4643] device syzkaller0 entered promiscuous mode [ 87.715293][ T4643] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 87.730988][ T4643] tipc: Resetting bearer [ 87.740357][ T4642] tipc: Resetting bearer [ 87.749166][ T4642] tipc: Disabling bearer [ 87.783555][ T4236] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 87.873986][ T4236] usb 4-1: Using ep0 maxpacket: 32 [ 87.923870][ T4236] usb 4-1: no configurations [ 87.929604][ T4236] usb 4-1: can't read configurations, error -22 [ 87.938423][ T4236] usb usb4-port1: unable to enumerate USB device [ 88.410163][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802c3b9c00: rx timeout, send abort [ 88.628398][ T4679] __nla_validate_parse: 2 callbacks suppressed [ 88.628417][ T4679] netlink: 28 bytes leftover after parsing attributes in process `syz.4.143'. [ 88.645920][ T4679] netlink: 'syz.4.143': attribute type 7 has an invalid length. [ 88.654161][ T4679] netlink: 4 bytes leftover after parsing attributes in process `syz.4.143'. [ 88.688480][ T4679] device syz_tun entered promiscuous mode [ 88.695781][ T4679] device gretap0 entered promiscuous mode [ 88.702615][ T4679] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 88.710407][ T4679] Cannot create hsr debugfs directory [ 88.720407][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 88.835991][ T4271] usb 3-1: USB disconnect, device number 11 [ 88.840372][ T4683] tipc: Started in network mode [ 88.847459][ T4683] tipc: Node identity c619df8dfbdd, cluster identity 4711 [ 88.870064][ T4683] tipc: Enabled bearer , priority 0 [ 88.887007][ T4686] device syzkaller0 entered promiscuous mode [ 88.910559][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802c3b8400: rx timeout, send abort [ 88.913086][ T4683] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 88.919274][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802c3b9c00: abort rx timeout. Force session deactivation [ 89.008995][ T4683] tipc: Resetting bearer [ 89.058701][ T4681] tipc: Resetting bearer [ 89.090612][ T4681] tipc: Disabling bearer [ 89.377040][ T4710] bridge0: port 1(bridge_slave_0) entered listening state [ 89.419046][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802c3b8400: abort rx timeout. Force session deactivation [ 89.429662][ T4714] netlink: 28 bytes leftover after parsing attributes in process `syz.0.155'. [ 89.449362][ T4714] netlink: 'syz.0.155': attribute type 7 has an invalid length. [ 89.465670][ T4714] netlink: 4 bytes leftover after parsing attributes in process `syz.0.155'. [ 89.555818][ T4720] netlink: 'syz.1.158': attribute type 1 has an invalid length. [ 89.595050][ T4720] netlink: 'syz.1.158': attribute type 2 has an invalid length. [ 89.617193][ T4720] device syzkaller0 entered promiscuous mode [ 89.763429][ T4271] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 89.781166][ T4727] tipc: Enabled bearer , priority 0 [ 89.795955][ T4727] device syzkaller0 entered promiscuous mode [ 89.816095][ T4727] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 89.836936][ T4727] tipc: Resetting bearer [ 89.851519][ T4726] tipc: Resetting bearer [ 89.853639][ T1108] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 89.894185][ T4726] tipc: Disabling bearer [ 90.006227][ T4271] usb 3-1: Using ep0 maxpacket: 32 [ 90.044016][ T4735] netlink: 60 bytes leftover after parsing attributes in process `syz.0.165'. [ 90.124111][ T1108] usb 5-1: Using ep0 maxpacket: 32 [ 90.140168][ T4271] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 90.156563][ T4271] usb 3-1: config 0 has no interfaces? [ 90.162110][ T4271] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 90.173315][ T4271] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.183684][ T1108] usb 5-1: no configurations [ 90.191203][ T1108] usb 5-1: can't read configurations, error -22 [ 90.200853][ T4271] usb 3-1: config 0 descriptor?? [ 90.282234][ T4748] netlink: 32 bytes leftover after parsing attributes in process `syz.1.170'. [ 90.317705][ T4753] netlink: 28 bytes leftover after parsing attributes in process `syz.3.172'. [ 90.356755][ T4753] netlink: 'syz.3.172': attribute type 7 has an invalid length. [ 90.363518][ T1108] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 90.413909][ T4753] netlink: 4 bytes leftover after parsing attributes in process `syz.3.172'. [ 90.518230][ T4761] tipc: Started in network mode [ 90.523153][ T4761] tipc: Node identity 8ae51798da2e, cluster identity 4711 [ 90.532034][ T4761] tipc: Enabled bearer , priority 0 [ 90.540411][ T4761] device syzkaller0 entered promiscuous mode [ 90.552165][ T4761] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 90.591677][ T4761] tipc: Resetting bearer [ 90.601520][ T4760] tipc: Resetting bearer [ 90.613609][ T1108] usb 5-1: Using ep0 maxpacket: 32 [ 90.620373][ T4760] tipc: Disabling bearer [ 90.629375][ T4764] device syzkaller0 entered promiscuous mode [ 90.653752][ T1108] usb 5-1: no configurations [ 90.659649][ T1108] usb 5-1: can't read configurations, error -22 [ 90.668262][ T1108] usb usb5-port1: attempt power cycle [ 91.083621][ T1108] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 91.122406][ T4794] netlink: 28 bytes leftover after parsing attributes in process `syz.0.189'. [ 91.139563][ T4794] netlink: 'syz.0.189': attribute type 7 has an invalid length. [ 91.149813][ T4794] netlink: 4 bytes leftover after parsing attributes in process `syz.0.189'. [ 91.171962][ T4792] device syzkaller0 entered promiscuous mode [ 91.173597][ T1108] usb 5-1: Using ep0 maxpacket: 32 [ 91.223963][ T1108] usb 5-1: no configurations [ 91.229025][ T1108] usb 5-1: can't read configurations, error -22 [ 91.336634][ T4799] tipc: Enabled bearer , priority 0 [ 91.347958][ T4799] device syzkaller0 entered promiscuous mode [ 91.370658][ T4799] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 91.383562][ T1108] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 91.394878][ T4799] tipc: Resetting bearer [ 91.423249][ T4798] tipc: Resetting bearer [ 91.450717][ T4798] tipc: Disabling bearer [ 91.471743][ T4803] device syzkaller0 entered promiscuous mode [ 91.493669][ T1108] usb 5-1: Using ep0 maxpacket: 32 [ 91.548929][ T1108] usb 5-1: no configurations [ 91.580104][ T1108] usb 5-1: can't read configurations, error -22 [ 91.607067][ T1108] usb usb5-port1: unable to enumerate USB device [ 91.614413][ T7] usb 3-1: USB disconnect, device number 12 [ 91.855731][ T4828] netlink: 'syz.0.202': attribute type 7 has an invalid length. [ 92.373502][ T4232] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 92.613423][ T4232] usb 4-1: Using ep0 maxpacket: 32 [ 92.733682][ T4232] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 92.743930][ T4232] usb 4-1: config 0 has no interfaces? [ 92.749409][ T4232] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 92.758501][ T4232] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.768746][ T4232] usb 4-1: config 0 descriptor?? [ 94.906189][ T4836] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 95.082226][ T4863] device syzkaller0 entered promiscuous mode [ 95.115139][ T4867] tipc: Enabled bearer , priority 0 [ 95.175570][ T4236] usb 4-1: USB disconnect, device number 7 [ 95.208355][ T4867] device syzkaller0 entered promiscuous mode [ 95.227460][ T4873] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 95.325129][ T4867] tipc: Resetting bearer [ 95.403833][ T4866] tipc: Resetting bearer [ 95.452509][ T4866] tipc: Disabling bearer [ 95.483535][ T4888] __nla_validate_parse: 3 callbacks suppressed [ 95.483554][ T4888] netlink: 28 bytes leftover after parsing attributes in process `syz.3.215'. [ 95.513762][ T4888] netlink: 'syz.3.215': attribute type 7 has an invalid length. [ 95.521477][ T4888] netlink: 4 bytes leftover after parsing attributes in process `syz.3.215'. [ 95.675799][ T4898] netlink: 52 bytes leftover after parsing attributes in process `syz.3.222'. [ 95.743767][ T1108] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 95.881014][ T4907] device syzkaller0 entered promiscuous mode [ 95.993800][ T4236] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 96.003463][ T1108] usb 5-1: Using ep0 maxpacket: 32 [ 96.134028][ T1108] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 96.148868][ T4919] tipc: Enabled bearer , priority 0 [ 96.155916][ T1108] usb 5-1: config 0 has no interfaces? [ 96.161652][ T1108] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 96.171726][ T4919] device syzkaller0 entered promiscuous mode [ 96.187409][ T4919] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 96.200939][ T1108] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.215948][ T1108] usb 5-1: config 0 descriptor?? [ 96.230830][ T4919] tipc: Resetting bearer [ 96.245619][ T4917] tipc: Resetting bearer [ 96.262658][ T4917] tipc: Disabling bearer [ 96.293859][ T4236] usb 3-1: Using ep0 maxpacket: 32 [ 96.368896][ T4928] netlink: 28 bytes leftover after parsing attributes in process `syz.3.233'. [ 96.382059][ T4928] netlink: 'syz.3.233': attribute type 7 has an invalid length. [ 96.390367][ T4928] netlink: 4 bytes leftover after parsing attributes in process `syz.3.233'. [ 96.423755][ T4236] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 96.443940][ T4236] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 96.470920][ T4236] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 96.493783][ T4236] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.512728][ T4236] usb 3-1: config 0 descriptor?? [ 96.667366][ T4940] device ip6gretap0 entered promiscuous mode [ 96.685908][ T4940] device batadv0 entered promiscuous mode [ 96.699956][ T493] IPv6: ADDRCONF(NETDEV_CHANGE): hsr2: link becomes ready [ 96.757266][ T4942] device syzkaller0 entered promiscuous mode [ 97.189374][ T4961] tipc: Enabled bearer , priority 0 [ 97.199968][ T4961] device syzkaller0 entered promiscuous mode [ 97.208783][ T4961] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 97.226501][ T4961] tipc: Resetting bearer [ 97.234933][ T4960] tipc: Resetting bearer [ 97.246490][ T4960] tipc: Disabling bearer [ 97.321770][ T4964] netlink: 52 bytes leftover after parsing attributes in process `syz.1.246'. [ 97.443977][ T4971] netlink: 28 bytes leftover after parsing attributes in process `syz.1.248'. [ 97.453800][ T4971] netlink: 'syz.1.248': attribute type 7 has an invalid length. [ 97.461599][ T4971] netlink: 4 bytes leftover after parsing attributes in process `syz.1.248'. [ 97.950276][ T4985] device syzkaller0 entered promiscuous mode [ 97.982590][ T13] usb 3-1: USB disconnect, device number 13 [ 98.072511][ T4997] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 98.098179][ T4994] tipc: Enabled bearer , priority 0 [ 98.113202][ T4994] device syzkaller0 entered promiscuous mode [ 98.132489][ T4994] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 98.184603][ T4992] tipc: Resetting bearer [ 98.269656][ T4992] tipc: Disabling bearer [ 98.298194][ T5009] netlink: 28 bytes leftover after parsing attributes in process `syz.3.261'. [ 98.317677][ T5009] netlink: 'syz.3.261': attribute type 7 has an invalid length. [ 98.337400][ T5009] netlink: 4 bytes leftover after parsing attributes in process `syz.3.261'. [ 98.399836][ T5009] device syz_tun entered promiscuous mode [ 98.420388][ T5009] device gretap0 entered promiscuous mode [ 98.435803][ T5009] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 98.463558][ T5009] Cannot create hsr debugfs directory [ 98.482028][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 98.545350][ T13] usb 5-1: USB disconnect, device number 9 [ 98.625529][ T5028] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 99.035914][ T5051] device syzkaller0 entered promiscuous mode [ 99.055338][ T13] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 99.235835][ T5056] tipc: Enabled bearer , priority 0 [ 99.252463][ T5056] device syzkaller0 entered promiscuous mode [ 99.271402][ T5056] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 99.283695][ T5060] netlink: 'syz.1.276': attribute type 1 has an invalid length. [ 99.296094][ T5055] tipc: Resetting bearer [ 99.302094][ T5060] netlink: 'syz.1.276': attribute type 2 has an invalid length. [ 99.306204][ T13] usb 3-1: Using ep0 maxpacket: 32 [ 99.339305][ T5055] tipc: Disabling bearer [ 99.398466][ T5064] netlink: 'syz.1.278': attribute type 7 has an invalid length. [ 99.447416][ T13] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 99.460387][ T13] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 99.476160][ T13] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 99.490327][ T13] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.515894][ T13] usb 3-1: config 0 descriptor?? [ 99.673706][ T4235] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 99.913579][ T4235] usb 5-1: Using ep0 maxpacket: 32 [ 100.033614][ T4235] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 100.044222][ T4235] usb 5-1: config 0 has no interfaces? [ 100.049828][ T4235] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 100.059082][ T4235] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.069466][ T4235] usb 5-1: config 0 descriptor?? [ 100.846616][ T4235] usb 3-1: USB disconnect, device number 14 [ 100.898457][ T5088] device syzkaller0 entered promiscuous mode [ 101.401765][ T4233] usb 5-1: USB disconnect, device number 10 [ 102.614283][ T5072] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 102.802998][ T5104] tipc: Enabled bearer , priority 0 [ 102.840559][ T5111] __nla_validate_parse: 2 callbacks suppressed [ 102.840578][ T5111] netlink: 4 bytes leftover after parsing attributes in process `syz.2.289'. [ 102.911104][ T5118] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 102.930825][ T5114] device syzkaller0 entered promiscuous mode [ 102.949694][ T5113] netlink: 28 bytes leftover after parsing attributes in process `syz.4.293'. [ 102.981338][ T5113] netlink: 'syz.4.293': attribute type 7 has an invalid length. [ 102.989817][ T5113] netlink: 4 bytes leftover after parsing attributes in process `syz.4.293'. [ 103.037830][ T5104] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 103.072542][ T5102] tipc: Resetting bearer [ 103.096168][ T5102] tipc: Disabling bearer [ 103.119784][ T5124] device syzkaller0 entered promiscuous mode [ 103.203514][ T1108] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 103.437130][ T5142] netlink: 20 bytes leftover after parsing attributes in process `syz.1.302'. [ 103.448760][ T1108] usb 1-1: Using ep0 maxpacket: 32 [ 103.463558][ T4233] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 103.583659][ T1108] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 103.613519][ T1108] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 103.636889][ T1108] usb 1-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 103.659654][ T1108] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.701058][ T1108] usb 1-1: config 0 descriptor?? [ 103.728379][ T4233] usb 5-1: Using ep0 maxpacket: 32 [ 103.775793][ T5156] netlink: 28 bytes leftover after parsing attributes in process `syz.2.309'. [ 103.785504][ T5156] netlink: 'syz.2.309': attribute type 7 has an invalid length. [ 103.795616][ T5156] netlink: 4 bytes leftover after parsing attributes in process `syz.2.309'. [ 103.853671][ T4233] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 103.885777][ T4233] usb 5-1: config 0 has no interfaces? [ 103.891604][ T4233] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 103.902225][ T4233] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.940393][ T4233] usb 5-1: config 0 descriptor?? [ 104.013304][ T5169] netlink: 8 bytes leftover after parsing attributes in process `syz.3.314'. [ 104.048919][ T5171] netlink: 20 bytes leftover after parsing attributes in process `syz.2.315'. [ 104.258365][ T5183] netlink: 'syz.2.321': attribute type 1 has an invalid length. [ 104.305636][ T5183] 8021q: adding VLAN 0 to HW filter on device bond1 [ 104.368295][ T5183] bond1: (slave dummy0): Enslaving as a backup interface with an up link [ 104.387158][ T5183] netlink: 'syz.2.321': attribute type 10 has an invalid length. [ 104.399533][ T5183] netlink: 40 bytes leftover after parsing attributes in process `syz.2.321'. [ 104.411518][ T5183] device dummy0 entered promiscuous mode [ 104.424525][ T493] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 104.450191][ T493] bond1: (slave dummy0): link status up again after 0 ms [ 104.460170][ T5183] bond1: (slave dummy0): Removing an active aggregator [ 104.468573][ T5183] bond1: (slave dummy0): Releasing backup interface [ 104.788218][ T5217] netlink: 20 bytes leftover after parsing attributes in process `syz.2.332'. [ 105.225303][ T5239] loop2: detected capacity change from 0 to 4096 [ 105.379671][ T5239] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 105.401668][ T4235] usb 5-1: USB disconnect, device number 11 [ 105.564462][ T5258] loop1: detected capacity change from 0 to 256 [ 105.616140][ T5258] ======================================================= [ 105.616140][ T5258] WARNING: The mand mount option has been deprecated and [ 105.616140][ T5258] and is ignored by this kernel. Remove the mand [ 105.616140][ T5258] option from the mount to silence this warning. [ 105.616140][ T5258] ======================================================= [ 105.961233][ T5275] scsi_dev_info_list_add_str: bad dev info string '¼QTò?¬Ý]Ð+É,r' '' '(null)' [ 106.098505][ T1108] usb 1-1: USB disconnect, device number 3 [ 106.357180][ T5286] loop2: detected capacity change from 0 to 256 [ 106.366642][ T5288] loop3: detected capacity change from 0 to 128 [ 106.500642][ T5288] EXT4-fs (loop3): mounted filesystem without journal. Opts: usrquota,nodelalloc,,errors=continue. Quota mode: writeback. [ 106.569947][ T5288] ext4 filesystem being mounted at /78/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.893854][ T13] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 107.042850][ T5304] loop2: detected capacity change from 0 to 1024 [ 107.097746][ T5306] device syz_tun entered promiscuous mode [ 107.120503][ T5306] device gretap0 entered promiscuous mode [ 107.127931][ T5306] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 107.136532][ T5306] Cannot create hsr debugfs directory [ 107.175644][ T3076] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 107.186687][ T13] usb 5-1: Using ep0 maxpacket: 32 [ 107.241329][ T5304] EXT4-fs (loop2): mounted filesystem without journal. Opts: user_xattr,nogrpid,noinit_itable,nogrpid,block_validity,max_dir_size_kb=0x0000000000000006,nojournal_checksum,errors=remount-ro,init_itable=0x0000000000001000,jqfmt=vfsv0,data_err=ignore,. Quota mode: none. [ 107.281126][ T5304] EXT4-fs (loop2): shut down requested (2) [ 107.333837][ T13] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 107.359906][ T13] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 107.389323][ T7] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 107.398641][ T13] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 107.432922][ T13] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.455966][ T13] usb 5-1: config 0 descriptor?? [ 107.673626][ T7] usb 4-1: Using ep0 maxpacket: 32 [ 107.802041][ T5329] loop2: detected capacity change from 0 to 1024 [ 107.822499][ T7] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 107.835588][ T7] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 107.853294][ T5329] EXT4-fs (loop2): Ignoring removed oldalloc option [ 107.857922][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.862520][ T5329] EXT4-fs (loop2): Ignoring removed bh option [ 107.890275][ T5333] __nla_validate_parse: 5 callbacks suppressed [ 107.890293][ T5333] netlink: 28 bytes leftover after parsing attributes in process `syz.1.375'. [ 107.898317][ T7] usb 4-1: config 0 descriptor?? [ 107.929765][ T5333] netlink: 28 bytes leftover after parsing attributes in process `syz.1.375'. [ 107.947450][ T5329] EXT4-fs (loop2): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,oldalloc,errors=remount-ro,nodioread_nolock,bh,. Quota mode: none. [ 107.957832][ T5337] loop0: detected capacity change from 0 to 512 [ 107.970921][ T5329] ext4 filesystem being mounted at /47/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.000717][ T5329] EXT4-fs error (device loop2): ext4_free_blocks:6231: comm syz.2.373: Freeing blocks not in datazone - block = 0, count = 16 [ 108.018353][ T5329] EXT4-fs (loop2): Remounting filesystem read-only [ 108.033582][ T5337] EXT4-fs (loop0): Ignoring removed nobh option [ 108.082488][ T5337] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 108.206874][ T5337] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.376: bg 0: block 169: padding at end of block bitmap is not set [ 108.240360][ T5337] Quota error (device loop0): write_blk: dquota write failed [ 108.264194][ T5337] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 108.291302][ T5337] EXT4-fs error (device loop0): ext4_acquire_dquot:6236: comm syz.0.376: Failed to acquire dquot type 0 [ 108.354677][ T5337] EXT4-fs (loop0): 1 truncate cleaned up [ 108.392290][ T5353] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 108.427307][ T5337] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobh,usrjquota=,barrier,,errors=continue. Quota mode: writeback. [ 108.460725][ T5358] netlink: 20 bytes leftover after parsing attributes in process `syz.1.384'. [ 108.468137][ T5337] ext4 filesystem being mounted at /98/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.715111][ T5370] netlink: 28 bytes leftover after parsing attributes in process `syz.2.389'. [ 108.734620][ T5370] netlink: 28 bytes leftover after parsing attributes in process `syz.2.389'. [ 108.938913][ T4196] usb 5-1: USB disconnect, device number 12 [ 109.031416][ T5385] netlink: 20 bytes leftover after parsing attributes in process `syz.4.395'. [ 109.418884][ T4196] usb 4-1: USB disconnect, device number 8 [ 109.728119][ T5392] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.736980][ T5392] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.933634][ T4196] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 110.152341][ T5392] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 110.172122][ T5392] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 110.179994][ T4196] usb 4-1: Using ep0 maxpacket: 32 [ 110.333667][ T4196] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 110.348000][ T4196] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 110.357108][ T4196] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 110.366403][ T4196] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.380069][ T4196] usb 4-1: config 0 descriptor?? [ 110.600893][ T5392] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.610090][ T5392] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.619366][ T5392] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.628499][ T5392] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.743487][ T5402] netlink: 28 bytes leftover after parsing attributes in process `syz.1.403'. [ 110.753556][ T5402] netlink: 28 bytes leftover after parsing attributes in process `syz.1.403'. [ 110.866532][ T5427] netlink: 20 bytes leftover after parsing attributes in process `syz.4.408'. [ 110.889075][ T5429] netlink: 'syz.2.409': attribute type 1 has an invalid length. [ 111.005988][ T5436] raw_sendmsg: syz.2.412 forgot to set AF_INET. Fix it! [ 111.358425][ T1325] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 111.446516][ T5463] netlink: 20 bytes leftover after parsing attributes in process `syz.1.424'. [ 111.633698][ T1325] usb 5-1: Using ep0 maxpacket: 32 [ 111.641863][ T5471] loop0: detected capacity change from 0 to 1024 [ 111.753624][ T1325] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 111.770606][ T1325] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 111.771182][ T5471] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 111.801029][ T1325] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.850451][ T1325] usb 5-1: config 0 descriptor?? [ 111.861839][ T4232] usb 4-1: USB disconnect, device number 9 [ 111.931211][ T5471] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,errors=remount-ro,noquota,barrier,auto_da_alloc,dioread_nolock,. Quota mode: none. [ 111.955579][ T5471] ext4 filesystem being mounted at /109/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.072790][ T5471] EXT4-fs error (device loop0): ext4_map_blocks:741: inode #15: comm syz.0.428: lblock 0 mapped to illegal pblock 0 (length 1) [ 112.112298][ T5494] loop1: detected capacity change from 0 to 512 [ 112.139321][ T5471] EXT4-fs (loop0): Remounting filesystem read-only [ 112.180826][ T5494] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 112.203126][ T5494] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 112.285351][ T5494] EXT4-fs (loop1): 1 truncate cleaned up [ 112.291405][ T5494] EXT4-fs (loop1): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000007,bsddf,nomblk_io_submit,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 112.298400][ T5502] device syzkaller0 entered promiscuous mode [ 112.545998][ T5511] autofs4:pid:5511:autofs_fill_super: called with bogus options [ 112.793465][ T1108] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 112.873058][ T5530] capability: warning: `syz.0.448' uses 32-bit capabilities (legacy support in use) [ 112.939600][ T5538] __nla_validate_parse: 2 callbacks suppressed [ 112.939618][ T5538] netlink: 8 bytes leftover after parsing attributes in process `syz.0.450'. [ 112.995135][ T5538] device gretap1 entered promiscuous mode [ 113.019951][ T5541] netlink: 8 bytes leftover after parsing attributes in process `syz.0.450'. [ 113.063456][ T1108] usb 4-1: Using ep0 maxpacket: 32 [ 113.086568][ T5545] netlink: 20 bytes leftover after parsing attributes in process `syz.0.452'. [ 113.193642][ T1108] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 113.210336][ T1108] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 113.230406][ T1108] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 113.241914][ T1108] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.270680][ T1108] usb 4-1: config 0 descriptor?? [ 113.293305][ T5413] usb 5-1: USB disconnect, device number 13 [ 113.408223][ T5557] device syzkaller0 entered promiscuous mode [ 113.817168][ T5594] netlink: 20 bytes leftover after parsing attributes in process `syz.0.460'. [ 113.917948][ T5600] device syzkaller0 entered promiscuous mode [ 113.938674][ T5603] netlink: 20 bytes leftover after parsing attributes in process `syz.4.463'. [ 114.147727][ T5612] loop4: detected capacity change from 0 to 512 [ 114.239631][ T5612] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 114.239938][ T5616] device syzkaller1 entered promiscuous mode [ 114.251654][ T5612] ext4 filesystem being mounted at /55/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.271064][ T1108] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 114.432995][ T5629] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 114.471979][ T5626] device syzkaller0 entered promiscuous mode [ 114.513505][ T1108] usb 1-1: Using ep0 maxpacket: 32 [ 114.653636][ T1108] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 114.662911][ T1108] usb 1-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 114.701292][ T1108] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.716303][ T5640] netlink: 20 bytes leftover after parsing attributes in process `syz.4.478'. [ 114.743840][ T4233] usb 4-1: USB disconnect, device number 10 [ 114.770460][ T1108] usb 1-1: config 0 descriptor?? [ 114.889873][ T5647] netlink: 'syz.4.481': attribute type 1 has an invalid length. [ 115.079246][ T5658] loop2: detected capacity change from 0 to 2048 [ 115.210921][ T5658] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 115.250396][ T5658] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 115.277431][ T5658] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 28 [ 115.296080][ T5667] device syzkaller0 entered promiscuous mode [ 115.328583][ T5658] EXT4-fs (loop2): This should not happen!! Data will be lost [ 115.328583][ T5658] [ 115.339148][ T5658] EXT4-fs (loop2): Total free blocks count 0 [ 115.346236][ T5658] EXT4-fs (loop2): Free/Dirty block details [ 115.354456][ T5658] EXT4-fs (loop2): free_blocks=4096 [ 115.360928][ T5658] EXT4-fs (loop2): dirty_blocks=32 [ 115.366929][ T5658] EXT4-fs (loop2): Block reservation details [ 115.373292][ T5658] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 115.412452][ T5573] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 115.427146][ T5573] EXT4-fs (loop2): This should not happen!! Data will be lost [ 115.427146][ T5573] [ 115.494380][ T5674] netlink: 20 bytes leftover after parsing attributes in process `syz.4.492'. [ 115.683640][ T4233] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 115.911985][ T5697] loop2: detected capacity change from 0 to 512 [ 115.923486][ T4233] usb 2-1: Using ep0 maxpacket: 32 [ 115.942080][ T5699] netlink: 104 bytes leftover after parsing attributes in process `syz.3.501'. [ 116.041531][ T5701] device syzkaller0 entered promiscuous mode [ 116.048588][ T4233] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 116.049991][ T5703] netlink: 20 bytes leftover after parsing attributes in process `syz.3.503'. [ 116.073481][ T4233] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 116.139228][ T4233] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.170657][ T4233] usb 2-1: config 0 descriptor?? [ 116.197046][ T1108] usb 1-1: USB disconnect, device number 4 [ 116.740561][ T5734] netlink: 20 bytes leftover after parsing attributes in process `syz.3.516'. [ 116.821409][ T5738] device syzkaller0 entered promiscuous mode [ 116.890246][ T5745] netlink: 'syz.0.520': attribute type 1 has an invalid length. [ 116.913951][ T26] audit: type=1326 audit(1786334885.788:2): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=unconfined pid=5740 comm="syz.3.519" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7c7f7120d9 code=0x0 [ 116.975851][ T5413] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 117.254086][ T5413] usb 5-1: Using ep0 maxpacket: 32 [ 117.303736][ T5766] loop0: detected capacity change from 0 to 512 [ 117.339091][ T5766] EXT4-fs warning (device loop0): ext4_xattr_inode_get:492: inode #11: comm syz.0.528: ea_inode file size=4294967295 entry size=4 [ 117.356738][ T5766] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 117.382390][ T5766] EXT4-fs error (device loop0): ext4_do_update_inode:5229: inode #15: comm syz.0.528: corrupted inode contents [ 117.399040][ T5766] EXT4-fs (loop0): Remounting filesystem read-only [ 117.407047][ T5766] EXT4-fs error (device loop0): ext4_dirty_inode:6077: inode #15: comm syz.0.528: mark_inode_dirty error [ 117.419138][ T5766] EXT4-fs (loop0): Remounting filesystem read-only [ 117.426529][ T5413] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 117.439349][ T5766] EXT4-fs error (device loop0): ext4_do_update_inode:5229: inode #15: comm syz.0.528: corrupted inode contents [ 117.443548][ T5413] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.461811][ T5766] EXT4-fs (loop0): Remounting filesystem read-only [ 117.468683][ T5766] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2954: inode #15: comm syz.0.528: mark_inode_dirty error [ 117.479512][ T5413] usb 5-1: config 0 descriptor?? [ 117.498912][ T5766] EXT4-fs (loop0): Remounting filesystem read-only [ 117.507789][ T5766] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2957: inode #15: comm syz.0.528: mark inode dirty (error -117) [ 117.535812][ T5413] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 117.538235][ T1108] usb 2-1: USB disconnect, device number 10 [ 117.565842][ T5766] EXT4-fs (loop0): Remounting filesystem read-only [ 117.582758][ T5766] EXT4-fs warning (device loop0): ext4_evict_inode:304: xattr delete (err -117) [ 117.620061][ T5766] EXT4-fs (loop0): 1 orphan inode deleted [ 117.628241][ T5766] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobarrier,user_xattr,debug_want_extra_isize=0x000000000000005c,nouid32,noauto_da_alloc,acl,errors=remount-ro,. Quota mode: none. [ 117.666983][ T5776] loop1: detected capacity change from 0 to 256 [ 117.744475][ T5413] gspca_vc032x: reg_r err -32 [ 117.749417][ T5413] gspca_vc032x: I2c Bus Busy Wait 00 [ 117.765342][ T5413] gspca_vc032x: I2c Bus Busy Wait 00 [ 117.789700][ T5413] gspca_vc032x: I2c Bus Busy Wait 00 [ 117.808133][ T5413] gspca_vc032x: I2c Bus Busy Wait 00 [ 117.852186][ T5776] FAT-fs (loop1): Directory bread(block 64) failed [ 117.861362][ T5413] gspca_vc032x: I2c Bus Busy Wait 00 [ 117.873534][ T5776] FAT-fs (loop1): Directory bread(block 65) failed [ 117.877742][ T5413] gspca_vc032x: I2c Bus Busy Wait 00 [ 117.880194][ T5776] FAT-fs (loop1): Directory bread(block 66) failed [ 117.887095][ T5413] gspca_vc032x: I2c Bus Busy Wait 00 [ 117.898389][ T5413] gspca_vc032x: I2c Bus Busy Wait 00 [ 117.904417][ T5413] gspca_vc032x: I2c Bus Busy Wait 00 [ 117.910298][ T5413] gspca_vc032x: I2c Bus Busy Wait 00 [ 117.910643][ T5776] FAT-fs (loop1): Directory bread(block 67) failed [ 117.916398][ T5413] gspca_vc032x: I2c Bus Busy Wait 00 [ 117.928487][ T5776] FAT-fs (loop1): Directory bread(block 68) failed [ 117.928535][ T5776] FAT-fs (loop1): Directory bread(block 69) failed [ 117.928610][ T5776] FAT-fs (loop1): Directory bread(block 70) failed [ 117.928643][ T5776] FAT-fs (loop1): Directory bread(block 71) failed [ 117.928712][ T5776] FAT-fs (loop1): Directory bread(block 72) failed [ 117.928745][ T5776] FAT-fs (loop1): Directory bread(block 73) failed [ 117.970692][ T5413] gspca_vc032x: I2c Bus Busy Wait 00 [ 117.976525][ T5413] gspca_vc032x: I2c Bus Busy Wait 00 [ 117.982122][ T5413] gspca_vc032x: I2c Bus Busy Wait 00 [ 117.987919][ T5413] gspca_vc032x: I2c Bus Busy Wait 00 [ 117.993248][ T5413] gspca_vc032x: I2c Bus Busy Wait 00 [ 118.019423][ T5413] gspca_vc032x: I2c Bus Busy Wait 00 [ 118.032632][ T5413] gspca_vc032x: I2c Bus Busy Wait 00 [ 118.038267][ T5413] gspca_vc032x: Unknown sensor... [ 118.044796][ T5413] vc032x: probe of 5-1:0.0 failed with error -22 [ 118.975993][ T5784] device syzkaller0 entered promiscuous mode [ 119.001889][ T4196] usb 5-1: USB disconnect, device number 14 [ 119.070902][ T5802] __nla_validate_parse: 1 callbacks suppressed [ 119.071005][ T5802] netlink: 20 bytes leftover after parsing attributes in process `syz.4.540'. [ 119.196786][ T5809] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 119.338153][ T7] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 119.713695][ T7] usb 3-1: Using ep0 maxpacket: 32 [ 119.832964][ T5827] loop1: detected capacity change from 0 to 512 [ 119.853729][ T7] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 119.899951][ T7] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 119.923564][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.950770][ T7] usb 3-1: config 0 descriptor?? [ 120.010987][ T5827] EXT4-fs (loop1): mounted filesystem without journal. Opts: stripe=0x0000000000000007,errors=continue,errors=remount-ro,. Quota mode: none. [ 120.330789][ T5835] netlink: 20 bytes leftover after parsing attributes in process `syz.1.552'. [ 120.363521][ T7] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 120.488021][ T5839] device syzkaller0 entered promiscuous mode [ 120.623527][ T7] usb 4-1: Using ep0 maxpacket: 32 [ 120.640524][ T5848] netlink: 12 bytes leftover after parsing attributes in process `syz.4.558'. [ 120.684611][ T5848] netlink: 40 bytes leftover after parsing attributes in process `syz.4.558'. [ 120.703150][ T5848] netlink: 40 bytes leftover after parsing attributes in process `syz.4.558'. [ 120.769078][ T7] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 120.799065][ T5855] tipc: Enabling of bearer rejected, failed to enable media [ 120.799156][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.851796][ T7] usb 4-1: config 0 descriptor?? [ 120.879510][ T5860] netlink: 20 bytes leftover after parsing attributes in process `syz.0.564'. [ 120.906514][ T7] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 120.989199][ T5865] loop0: detected capacity change from 0 to 256 [ 121.058284][ T5870] device syzkaller0 entered promiscuous mode [ 121.125752][ T7] gspca_vc032x: reg_r err -32 [ 121.130787][ T7] gspca_vc032x: I2c Bus Busy Wait 00 [ 121.137176][ T7] gspca_vc032x: I2c Bus Busy Wait 00 [ 121.152873][ T7] gspca_vc032x: I2c Bus Busy Wait 00 [ 121.169524][ T5872] device ip6gre1 entered promiscuous mode [ 121.181454][ T4187] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 121.189571][ T7] gspca_vc032x: I2c Bus Busy Wait 00 [ 121.193547][ T4232] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 121.211799][ T5872] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 121.213429][ T7] gspca_vc032x: I2c Bus Busy Wait 00 [ 121.221104][ T4232] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 121.239813][ T7] gspca_vc032x: I2c Bus Busy Wait 00 [ 121.249176][ T7] gspca_vc032x: I2c Bus Busy Wait 00 [ 121.251237][ T4187] FAT-fs (loop0): Filesystem has been set read-only [ 121.269556][ T7] gspca_vc032x: I2c Bus Busy Wait 00 [ 121.280919][ T7] gspca_vc032x: I2c Bus Busy Wait 00 [ 121.282274][ T4232] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 121.293559][ T7] gspca_vc032x: I2c Bus Busy Wait 00 [ 121.306365][ T7] gspca_vc032x: I2c Bus Busy Wait 00 [ 121.308403][ T4187] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 121.311828][ T7] gspca_vc032x: I2c Bus Busy Wait 00 [ 121.359477][ T1108] usb 3-1: USB disconnect, device number 15 [ 121.366846][ T7] gspca_vc032x: I2c Bus Busy Wait 00 [ 121.401104][ T7] gspca_vc032x: I2c Bus Busy Wait 00 [ 121.420051][ T7] gspca_vc032x: I2c Bus Busy Wait 00 [ 121.438613][ T7] gspca_vc032x: I2c Bus Busy Wait 00 [ 121.461032][ T7] gspca_vc032x: I2c Bus Busy Wait 00 [ 121.487693][ T7] gspca_vc032x: I2c Bus Busy Wait 00 [ 121.501652][ T7] gspca_vc032x: Unknown sensor... [ 121.505639][ T4187] device syz_tun left promiscuous mode [ 121.517639][ T7] vc032x: probe of 4-1:0.0 failed with error -22 [ 121.583945][ T1108] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 121.591688][ T5886] netlink: 20 bytes leftover after parsing attributes in process `syz.4.575'. [ 121.729570][ T5891] loop4: detected capacity change from 0 to 4096 [ 121.802122][ T5891] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 121.936802][ T5902] device syzkaller0 entered promiscuous mode [ 122.242323][ T5414] usb 4-1: USB disconnect, device number 11 [ 122.283671][ T4233] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 122.325054][ T5916] netlink: 20 bytes leftover after parsing attributes in process `syz.3.587'. [ 122.333942][ T5914] loop2: detected capacity change from 0 to 512 [ 122.345279][ T7] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 122.369693][ T5914] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 122.443745][ T5914] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 122.475790][ T5914] EXT4-fs (loop2): 1 truncate cleaned up [ 122.482967][ T5914] EXT4-fs (loop2): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,dioread_nolock,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,bsdgroups,grpjquota=,,errors=continue. Quota mode: none. [ 122.497964][ T5923] netlink: 28 bytes leftover after parsing attributes in process `syz.3.590'. [ 122.527441][ T5923] netlink: 28 bytes leftover after parsing attributes in process `syz.3.590'. [ 122.653439][ T7] usb 5-1: Using ep0 maxpacket: 32 [ 122.736823][ T5929] device syzkaller0 entered promiscuous mode [ 122.773877][ T7] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 122.793278][ T7] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 122.813545][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.826838][ T7] usb 5-1: config 0 descriptor?? [ 122.896956][ T5915] chnl_net:caif_netlink_parms(): no params data found [ 122.941494][ T5942] binder: 5941:5942 ioctl 4018620d 0 returned -22 [ 123.056811][ T1108] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 123.106254][ T5915] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.113882][ T5915] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.122795][ T5915] device bridge_slave_0 entered promiscuous mode [ 123.140637][ T5915] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.152695][ T5915] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.167118][ T5915] device bridge_slave_1 entered promiscuous mode [ 123.233154][ T5915] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 123.235943][ T5957] loop3: detected capacity change from 0 to 128 [ 123.266894][ T5915] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 123.297070][ T5957] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 123.306688][ T1108] usb 3-1: Using ep0 maxpacket: 32 [ 123.368848][ T5915] team0: Port device team_slave_0 added [ 123.400873][ T5915] team0: Port device team_slave_1 added [ 123.437405][ T1108] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 123.455843][ T5915] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 123.459227][ T1108] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.463096][ T5915] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 123.511912][ T1108] usb 3-1: config 0 descriptor?? [ 123.526156][ T5915] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 123.562030][ T5915] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 123.572094][ T1108] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 123.586602][ T5915] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 123.622393][ T5915] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 123.747732][ T5915] device hsr_slave_0 entered promiscuous mode [ 123.783762][ T1108] gspca_vc032x: reg_r err -32 [ 123.788696][ T1108] gspca_vc032x: I2c Bus Busy Wait 00 [ 123.794999][ T5915] device hsr_slave_1 entered promiscuous mode [ 123.803977][ T1108] gspca_vc032x: I2c Bus Busy Wait 00 [ 123.817707][ T1108] gspca_vc032x: I2c Bus Busy Wait 00 [ 123.825652][ T1108] gspca_vc032x: I2c Bus Busy Wait 00 [ 123.831118][ T1108] gspca_vc032x: I2c Bus Busy Wait 00 [ 123.837248][ T1108] gspca_vc032x: I2c Bus Busy Wait 00 [ 123.842662][ T1108] gspca_vc032x: I2c Bus Busy Wait 00 [ 123.855749][ T1108] gspca_vc032x: I2c Bus Busy Wait 00 [ 123.862868][ T1108] gspca_vc032x: I2c Bus Busy Wait 00 [ 123.877532][ T1108] gspca_vc032x: I2c Bus Busy Wait 00 [ 123.890032][ T1108] gspca_vc032x: I2c Bus Busy Wait 00 [ 123.900060][ T1108] gspca_vc032x: I2c Bus Busy Wait 00 [ 123.910894][ T1108] gspca_vc032x: I2c Bus Busy Wait 00 [ 123.920916][ T1108] gspca_vc032x: I2c Bus Busy Wait 00 [ 123.930900][ T1108] gspca_vc032x: I2c Bus Busy Wait 00 [ 123.941424][ T1108] gspca_vc032x: I2c Bus Busy Wait 00 [ 123.961792][ T1108] gspca_vc032x: I2c Bus Busy Wait 00 [ 123.982606][ T1108] gspca_vc032x: I2c Bus Busy Wait 00 [ 124.000764][ T1108] gspca_vc032x: Unknown sensor... [ 124.017703][ T1108] vc032x: probe of 3-1:0.0 failed with error -22 [ 124.072520][ T5915] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 124.084124][ T5915] Cannot create hsr debugfs directory [ 124.236611][ T5987] __nla_validate_parse: 3 callbacks suppressed [ 124.236627][ T5987] netlink: 20 bytes leftover after parsing attributes in process `syz.3.611'. [ 124.312449][ T5988] binder: 5986:5988 ioctl 4018620d 0 returned -22 [ 124.363504][ T4271] Bluetooth: hci2: command 0x0409 tx timeout [ 124.394264][ T4271] usb 5-1: USB disconnect, device number 15 [ 124.606606][ T5995] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 124.734811][ T5915] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 124.773334][ C0] sched: RT throttling activated [ 124.822107][ T5997] netlink: 28 bytes leftover after parsing attributes in process `syz.3.614'. [ 124.913631][ T5997] netlink: 24 bytes leftover after parsing attributes in process `syz.3.614'. [ 124.968222][ T5915] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 124.992146][ T6002] loop4: detected capacity change from 0 to 128 [ 125.026326][ T5915] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 125.077382][ T4233] usb 3-1: USB disconnect, device number 16 [ 125.105277][ T5915] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 125.455062][ T5915] 8021q: adding VLAN 0 to HW filter on device bond0 [ 125.479103][ T26] audit: type=1800 audit(1786334894.358:3): pid=6002 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.615" name="file2" dev="loop4" ino=1048598 res=0 errno=0 [ 125.482893][ T5915] 8021q: adding VLAN 0 to HW filter on device team0 [ 125.536826][ T6002] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 125.566368][ T6002] FAT-fs (loop4): Filesystem has been set read-only [ 125.601551][ T6002] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 125.633736][ T5566] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 125.643600][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 125.647351][ T6002] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 125.681575][ T6023] netlink: 20 bytes leftover after parsing attributes in process `syz.1.622'. [ 125.683851][ T5566] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 125.710799][ T6002] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 125.734439][ T7] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 125.742739][ T6025] binder: 6022:6025 ioctl 4018620d 0 returned -22 [ 125.801195][ T5566] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 125.820829][ T5566] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 125.840123][ T5566] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.847328][ T5566] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.862253][ T6002] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 125.862573][ T5566] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 125.883042][ T5566] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 125.896720][ T6002] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 125.913986][ T5566] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.921191][ T5566] bridge0: port 2(bridge_slave_1) entered forwarding state [ 125.921479][ T6002] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 125.944487][ T6002] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 125.947478][ T5566] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 125.974675][ T6002] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 125.988511][ T5566] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 125.999338][ T5998] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 126.033503][ T7] usb 4-1: Using ep0 maxpacket: 32 [ 126.054200][ T5566] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 126.064291][ T5566] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 126.080668][ T5566] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 126.146320][ T5566] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 126.155299][ T7] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 126.185121][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.200325][ T5566] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 126.217721][ T7] usb 4-1: config 0 descriptor?? [ 126.234186][ T5566] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 126.242882][ T5566] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 126.258765][ T5566] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 126.295747][ T7] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 126.407211][ T5915] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 126.428607][ T5915] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 126.437718][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 126.443474][ T4231] Bluetooth: hci2: command 0x041b tx timeout [ 126.482402][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 127.265900][ T7] gspca_vc032x: reg_r err -32 [ 127.270653][ T7] gspca_vc032x: I2c Bus Busy Wait 00 [ 127.276506][ T7] gspca_vc032x: I2c Bus Busy Wait 00 [ 127.281926][ T7] gspca_vc032x: I2c Bus Busy Wait 00 [ 127.304036][ T7] gspca_vc032x: I2c Bus Busy Wait 00 [ 127.309662][ T7] gspca_vc032x: I2c Bus Busy Wait 00 [ 127.315511][ T7] gspca_vc032x: I2c Bus Busy Wait 00 [ 127.321170][ T7] gspca_vc032x: I2c Bus Busy Wait 00 [ 127.333444][ T7] gspca_vc032x: I2c Bus Busy Wait 00 [ 127.338790][ T7] gspca_vc032x: I2c Bus Busy Wait 00 [ 127.347271][ T7] gspca_vc032x: I2c Bus Busy Wait 00 [ 127.352609][ T7] gspca_vc032x: I2c Bus Busy Wait 00 [ 127.357275][ T6051] netlink: 28 bytes leftover after parsing attributes in process `syz.2.629'. [ 127.373419][ T7] gspca_vc032x: I2c Bus Busy Wait 00 [ 127.378835][ T7] gspca_vc032x: I2c Bus Busy Wait 00 [ 127.384332][ T7] gspca_vc032x: I2c Bus Busy Wait 00 [ 127.389647][ T7] gspca_vc032x: I2c Bus Busy Wait 00 [ 127.395334][ T7] gspca_vc032x: I2c Bus Busy Wait 00 [ 127.399930][ T6051] netlink: 24 bytes leftover after parsing attributes in process `syz.2.629'. [ 127.400636][ T7] gspca_vc032x: I2c Bus Busy Wait 00 [ 127.415290][ T7] gspca_vc032x: I2c Bus Busy Wait 00 [ 127.420609][ T7] gspca_vc032x: Unknown sensor... [ 127.426118][ T7] vc032x: probe of 4-1:0.0 failed with error -22 [ 127.608525][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 127.616703][ T4196] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 127.625006][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 127.638822][ T5915] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 127.691736][ T6069] loop2: detected capacity change from 0 to 256 [ 127.797725][ T1108] usb 4-1: USB disconnect, device number 12 [ 127.877482][ T6077] netlink: 20 bytes leftover after parsing attributes in process `syz.3.634'. [ 127.893377][ T4196] usb 2-1: Using ep0 maxpacket: 32 [ 127.997867][ T6081] netlink: 12 bytes leftover after parsing attributes in process `syz.4.635'. [ 128.040454][ T4196] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 128.077790][ T4196] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.123304][ T4196] usb 2-1: config 0 descriptor?? [ 128.193723][ T4196] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 128.280152][ T6096] netlink: 28 bytes leftover after parsing attributes in process `syz.3.640'. [ 128.325451][ T6096] netlink: 24 bytes leftover after parsing attributes in process `syz.3.640'. [ 128.351638][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 128.369130][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 128.413703][ T4196] gspca_vc032x: reg_r err -32 [ 128.418630][ T4196] gspca_vc032x: I2c Bus Busy Wait 00 [ 128.435683][ T4196] gspca_vc032x: I2c Bus Busy Wait 00 [ 128.451875][ T5566] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 128.471192][ T4196] gspca_vc032x: I2c Bus Busy Wait 00 [ 128.481056][ T5566] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 128.498927][ T4196] gspca_vc032x: I2c Bus Busy Wait 00 [ 128.515098][ T5566] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 128.523552][ T1108] Bluetooth: hci2: command 0x040f tx timeout [ 128.526154][ T4196] gspca_vc032x: I2c Bus Busy Wait 00 [ 128.544381][ T5566] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 128.551866][ T4196] gspca_vc032x: I2c Bus Busy Wait 00 [ 128.566311][ T4196] gspca_vc032x: I2c Bus Busy Wait 00 [ 128.568727][ T5915] device veth0_vlan entered promiscuous mode [ 128.572788][ T4196] gspca_vc032x: I2c Bus Busy Wait 00 [ 128.591870][ T4196] gspca_vc032x: I2c Bus Busy Wait 00 [ 128.597985][ T4196] gspca_vc032x: I2c Bus Busy Wait 00 [ 128.605150][ T5915] device veth1_vlan entered promiscuous mode [ 128.611335][ T4196] gspca_vc032x: I2c Bus Busy Wait 00 [ 128.617227][ T4196] gspca_vc032x: I2c Bus Busy Wait 00 [ 128.625685][ T4196] gspca_vc032x: I2c Bus Busy Wait 00 [ 128.631645][ T4196] gspca_vc032x: I2c Bus Busy Wait 00 [ 128.643518][ T4196] gspca_vc032x: I2c Bus Busy Wait 00 [ 128.653705][ T4196] gspca_vc032x: I2c Bus Busy Wait 00 [ 128.659964][ T5566] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 128.667997][ T4196] gspca_vc032x: I2c Bus Busy Wait 00 [ 128.672068][ T5566] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 128.675461][ T4196] gspca_vc032x: I2c Bus Busy Wait 00 [ 128.691811][ T5566] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 128.700101][ T4196] gspca_vc032x: Unknown sensor... [ 128.700157][ T4196] vc032x: probe of 2-1:0.0 failed with error -22 [ 128.713870][ T5566] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 128.728245][ T5915] device veth0_macvtap entered promiscuous mode [ 128.778089][ T5915] device veth1_macvtap entered promiscuous mode [ 128.845772][ T5915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.884014][ T5915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.931550][ T5915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.951127][ T6123] loop2: detected capacity change from 0 to 512 [ 128.969690][ T5915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.996594][ T5915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.034186][ T5413] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 129.043699][ T5915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.063414][ T5915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.082382][ T6123] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 129.102281][ T6123] FAT-fs (loop2): Filesystem has been set read-only [ 129.105829][ T5915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.144506][ T5915] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 129.163273][ T5915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.176562][ T5915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.189065][ T5915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.200314][ T5915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.210478][ T5915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.221446][ T5915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.231482][ T5915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.243474][ T5915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.255145][ T5915] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 129.272468][ T5569] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 129.323982][ T5413] usb 4-1: Using ep0 maxpacket: 32 [ 129.334176][ T5569] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 129.346898][ T6133] loop4: detected capacity change from 0 to 256 [ 129.359907][ T5569] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 129.369123][ T5569] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 129.372810][ T6135] netlink: 20 bytes leftover after parsing attributes in process `syz.2.646'. [ 129.385069][ T5569] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 129.429921][ T5569] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 129.431104][ T4196] usb 2-1: USB disconnect, device number 11 [ 129.473924][ T5413] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 129.487553][ T5915] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.510245][ T5413] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.524905][ T5915] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.545324][ T5915] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.557551][ T5413] usb 4-1: config 0 descriptor?? [ 129.562838][ T5915] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.626249][ T5413] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 129.665087][ T6142] netlink: 28 bytes leftover after parsing attributes in process `syz.1.651'. [ 129.715793][ T6142] netlink: 24 bytes leftover after parsing attributes in process `syz.1.651'. [ 129.833513][ T5413] gspca_vc032x: reg_r err -32 [ 129.838421][ T5413] gspca_vc032x: I2c Bus Busy Wait 00 [ 129.863468][ T5413] gspca_vc032x: I2c Bus Busy Wait 00 [ 129.879500][ T5413] gspca_vc032x: I2c Bus Busy Wait 00 [ 129.910204][ T5413] gspca_vc032x: I2c Bus Busy Wait 00 [ 129.935936][ T5413] gspca_vc032x: I2c Bus Busy Wait 00 [ 129.957629][ T5413] gspca_vc032x: I2c Bus Busy Wait 00 [ 129.966372][ T5413] gspca_vc032x: I2c Bus Busy Wait 00 [ 129.971926][ T5413] gspca_vc032x: I2c Bus Busy Wait 00 [ 129.983118][ T5413] gspca_vc032x: I2c Bus Busy Wait 00 [ 129.989677][ T5413] gspca_vc032x: I2c Bus Busy Wait 00 [ 130.010725][ T5413] gspca_vc032x: I2c Bus Busy Wait 00 [ 130.037695][ T5413] gspca_vc032x: I2c Bus Busy Wait 00 [ 130.050950][ T5413] gspca_vc032x: I2c Bus Busy Wait 00 [ 130.073591][ T5413] gspca_vc032x: I2c Bus Busy Wait 00 [ 130.094562][ T5413] gspca_vc032x: I2c Bus Busy Wait 00 [ 130.111659][ T5413] gspca_vc032x: I2c Bus Busy Wait 00 [ 130.120959][ T5413] gspca_vc032x: I2c Bus Busy Wait 00 [ 130.132017][ T5413] gspca_vc032x: I2c Bus Busy Wait 00 [ 130.147214][ T5413] gspca_vc032x: Unknown sensor... [ 130.160589][ T5413] vc032x: probe of 4-1:0.0 failed with error -22 [ 130.384458][ T5566] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.402441][ T5566] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.435624][ T6166] loop1: detected capacity change from 0 to 8192 [ 130.437974][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.456961][ T5573] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 130.498542][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.546818][ T5566] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 130.608322][ T4271] Bluetooth: hci2: command 0x0419 tx timeout [ 130.641589][ T4188] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000e1b1) [ 130.683511][ T5414] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 130.694601][ T4188] FAT-fs (loop1): Filesystem has been set read-only [ 130.725066][ T6187] loop5: detected capacity change from 0 to 512 [ 130.868900][ T6192] netlink: 20 bytes leftover after parsing attributes in process `syz.1.661'. [ 130.910515][ T6187] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 130.944375][ T4271] usb 4-1: USB disconnect, device number 13 [ 130.956647][ T6187] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.973724][ T5414] usb 5-1: Using ep0 maxpacket: 32 [ 131.036616][ T6202] netlink: 28 bytes leftover after parsing attributes in process `syz.3.664'. [ 131.058882][ T26] audit: type=1800 audit(1786334899.938:4): pid=6187 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.583" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 131.100373][ T6202] netlink: 24 bytes leftover after parsing attributes in process `syz.3.664'. [ 131.110662][ T5414] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 131.132151][ T5414] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.162836][ T5414] usb 5-1: config 0 descriptor?? [ 131.206025][ T5414] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 131.423548][ T5414] gspca_vc032x: reg_r err -32 [ 131.428436][ T5414] gspca_vc032x: I2c Bus Busy Wait 00 [ 131.447934][ T5414] gspca_vc032x: I2c Bus Busy Wait 00 [ 131.483683][ T5414] gspca_vc032x: I2c Bus Busy Wait 00 [ 131.499975][ T5414] gspca_vc032x: I2c Bus Busy Wait 00 [ 131.544089][ T5414] gspca_vc032x: I2c Bus Busy Wait 00 [ 131.565543][ T5414] gspca_vc032x: I2c Bus Busy Wait 00 [ 131.606912][ T5414] gspca_vc032x: I2c Bus Busy Wait 00 [ 131.629508][ T5414] gspca_vc032x: I2c Bus Busy Wait 00 [ 131.660987][ T5414] gspca_vc032x: I2c Bus Busy Wait 00 [ 131.687631][ T5414] gspca_vc032x: I2c Bus Busy Wait 00 [ 131.701290][ T5414] gspca_vc032x: I2c Bus Busy Wait 00 [ 131.707424][ T5414] gspca_vc032x: I2c Bus Busy Wait 00 [ 131.731683][ T5414] gspca_vc032x: I2c Bus Busy Wait 00 [ 131.763277][ T5414] gspca_vc032x: I2c Bus Busy Wait 00 [ 131.776267][ T5414] gspca_vc032x: I2c Bus Busy Wait 00 [ 131.788619][ T5414] gspca_vc032x: I2c Bus Busy Wait 00 [ 131.807375][ T5414] gspca_vc032x: I2c Bus Busy Wait 00 [ 131.820213][ T5414] gspca_vc032x: I2c Bus Busy Wait 00 [ 131.832857][ T5414] gspca_vc032x: Unknown sensor... [ 131.846002][ T5414] vc032x: probe of 5-1:0.0 failed with error -22 [ 132.059566][ T6253] netlink: 20 bytes leftover after parsing attributes in process `syz.1.675'. [ 132.099410][ T6253] binder: 6252:6253 ioctl c0306201 0 returned -14 [ 132.301633][ T5414] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 132.396495][ T6269] netlink: 28 bytes leftover after parsing attributes in process `syz.5.679'. [ 132.424970][ T6269] netlink: 24 bytes leftover after parsing attributes in process `syz.5.679'. [ 132.585967][ T5413] usb 5-1: USB disconnect, device number 16 [ 132.613592][ T5414] usb 4-1: Using ep0 maxpacket: 32 [ 132.753747][ T5414] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 132.785724][ T5414] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.799784][ T6293] netlink: 20 bytes leftover after parsing attributes in process `syz.5.687'. [ 132.831242][ T5414] usb 4-1: config 0 descriptor?? [ 132.910474][ T6299] binder: 6288:6299 ioctl c0306201 0 returned -14 [ 132.926137][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.932549][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.942213][ T5414] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 133.029109][ T6302] loop2: detected capacity change from 0 to 1024 [ 133.154388][ T5414] gspca_vc032x: reg_r err -32 [ 133.160017][ T5414] gspca_vc032x: I2c Bus Busy Wait 00 [ 133.169276][ T6302] EXT4-fs (loop2): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000000,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,,errors=continue. Quota mode: none. [ 133.193786][ T6302] ext4 filesystem being mounted at /132/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 133.236354][ T5414] gspca_vc032x: I2c Bus Busy Wait 00 [ 133.264355][ T6302] EXT4-fs error (device loop2): ext4_lookup:1862: inode #2: comm syz.2.689: deleted inode referenced: 15 [ 133.286896][ T5414] gspca_vc032x: I2c Bus Busy Wait 00 [ 133.292570][ T5414] gspca_vc032x: I2c Bus Busy Wait 00 [ 133.339253][ T5414] gspca_vc032x: I2c Bus Busy Wait 00 [ 133.369746][ T5414] gspca_vc032x: I2c Bus Busy Wait 00 [ 133.382794][ T5414] gspca_vc032x: I2c Bus Busy Wait 00 [ 133.424063][ T5414] gspca_vc032x: I2c Bus Busy Wait 00 [ 133.432203][ T5414] gspca_vc032x: I2c Bus Busy Wait 00 [ 133.451278][ T5414] gspca_vc032x: I2c Bus Busy Wait 00 [ 133.459831][ T5414] gspca_vc032x: I2c Bus Busy Wait 00 [ 133.471427][ T5414] gspca_vc032x: I2c Bus Busy Wait 00 [ 133.479998][ T5414] gspca_vc032x: I2c Bus Busy Wait 00 [ 133.500407][ T5414] gspca_vc032x: I2c Bus Busy Wait 00 [ 133.522834][ T5414] gspca_vc032x: I2c Bus Busy Wait 00 [ 133.535351][ T5414] gspca_vc032x: I2c Bus Busy Wait 00 [ 133.541186][ T5414] gspca_vc032x: I2c Bus Busy Wait 00 [ 133.561491][ T5414] gspca_vc032x: I2c Bus Busy Wait 00 [ 133.575147][ T5414] gspca_vc032x: Unknown sensor... [ 133.580898][ T5414] vc032x: probe of 4-1:0.0 failed with error -22 [ 133.606235][ T1108] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 133.761034][ T6327] loop2: detected capacity change from 0 to 512 [ 133.804663][ T6329] program syz.4.698 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 133.863551][ T1108] usb 6-1: Using ep0 maxpacket: 32 [ 133.927424][ T6327] EXT4-fs (loop2): 1 orphan inode deleted [ 133.947501][ T6327] EXT4-fs (loop2): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 133.962597][ T6327] ext4 filesystem being mounted at /133/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 133.983940][ T1108] usb 6-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 134.006187][ T1108] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.044227][ T6327] EXT4-fs (loop2): re-mounted. Opts: . Quota mode: writeback. [ 134.078077][ T1108] usb 6-1: config 0 descriptor?? [ 134.135865][ T1108] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 134.203474][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 134.353542][ T1108] gspca_vc032x: reg_r err -32 [ 134.358569][ T1108] gspca_vc032x: I2c Bus Busy Wait 00 [ 134.373932][ T4271] usb 4-1: USB disconnect, device number 14 [ 134.379062][ T6350] loop1: detected capacity change from 0 to 512 [ 134.400633][ T1108] gspca_vc032x: I2c Bus Busy Wait 00 [ 134.423605][ T1108] gspca_vc032x: I2c Bus Busy Wait 00 [ 134.454592][ T1108] gspca_vc032x: I2c Bus Busy Wait 00 [ 134.475253][ T6354] __nla_validate_parse: 2 callbacks suppressed [ 134.475272][ T6354] netlink: 20 bytes leftover after parsing attributes in process `syz.2.703'. [ 134.494070][ T6358] netlink: 28 bytes leftover after parsing attributes in process `syz.3.706'. [ 134.503736][ T1108] gspca_vc032x: I2c Bus Busy Wait 00 [ 134.520882][ T1108] gspca_vc032x: I2c Bus Busy Wait 00 [ 134.543885][ T26] audit: type=1800 audit(1786334903.428:5): pid=6350 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.704" name="file2" dev="loop1" ino=1048614 res=0 errno=0 [ 134.543964][ T1108] gspca_vc032x: I2c Bus Busy Wait 00 [ 134.577236][ T6359] binder: 6353:6359 ioctl c0306201 0 returned -14 [ 134.578368][ T6358] netlink: 28 bytes leftover after parsing attributes in process `syz.3.706'. [ 134.595760][ T1108] gspca_vc032x: I2c Bus Busy Wait 00 [ 134.601457][ T1108] gspca_vc032x: I2c Bus Busy Wait 00 [ 134.607562][ T1108] gspca_vc032x: I2c Bus Busy Wait 00 [ 134.624816][ T1108] gspca_vc032x: I2c Bus Busy Wait 00 [ 134.630578][ T1108] gspca_vc032x: I2c Bus Busy Wait 00 [ 134.638247][ T1108] gspca_vc032x: I2c Bus Busy Wait 00 [ 134.653872][ T1108] gspca_vc032x: I2c Bus Busy Wait 00 [ 134.659221][ T1108] gspca_vc032x: I2c Bus Busy Wait 00 [ 134.671042][ T1108] gspca_vc032x: I2c Bus Busy Wait 00 [ 134.683946][ T1108] gspca_vc032x: I2c Bus Busy Wait 00 [ 134.698938][ T1108] gspca_vc032x: I2c Bus Busy Wait 00 [ 134.707081][ T1108] gspca_vc032x: Unknown sensor... [ 134.713291][ T1108] vc032x: probe of 6-1:0.0 failed with error -22 [ 134.850504][ T6371] program syz.3.711 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 135.233726][ T6396] netlink: 20 bytes leftover after parsing attributes in process `syz.1.719'. [ 135.261743][ T6396] binder: 6394:6396 ioctl c0306201 0 returned -14 [ 135.351740][ T6399] netlink: 28 bytes leftover after parsing attributes in process `syz.4.721'. [ 135.361429][ T6399] netlink: 28 bytes leftover after parsing attributes in process `syz.4.721'. [ 135.383468][ T4233] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 135.460243][ T6402] device ip6gre1 left promiscuous mode [ 135.465642][ T7] usb 6-1: USB disconnect, device number 2 [ 135.589741][ T6407] team0: Device bridge0 is up. Set it down before adding it as a team port [ 135.653606][ T4233] usb 3-1: Using ep0 maxpacket: 32 [ 135.773746][ T4233] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 135.807170][ T4233] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.846652][ T4233] usb 3-1: config 0 descriptor?? [ 135.885812][ T4233] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 135.939929][ T6420] netlink: 20 bytes leftover after parsing attributes in process `syz.4.730'. [ 135.987978][ T6420] binder: 6417:6420 ioctl c0306201 0 returned -14 [ 136.093508][ T4233] gspca_vc032x: reg_r err -32 [ 136.098549][ T4233] gspca_vc032x: I2c Bus Busy Wait 00 [ 136.118504][ T6429] netlink: 28 bytes leftover after parsing attributes in process `syz.3.732'. [ 136.138522][ T4233] gspca_vc032x: I2c Bus Busy Wait 00 [ 136.148780][ T4233] gspca_vc032x: I2c Bus Busy Wait 00 [ 136.163764][ T6429] netlink: 28 bytes leftover after parsing attributes in process `syz.3.732'. [ 136.180773][ T4233] gspca_vc032x: I2c Bus Busy Wait 00 [ 136.195523][ T4233] gspca_vc032x: I2c Bus Busy Wait 00 [ 136.213191][ T4233] gspca_vc032x: I2c Bus Busy Wait 00 [ 136.229954][ T4233] gspca_vc032x: I2c Bus Busy Wait 00 [ 136.243451][ T4233] gspca_vc032x: I2c Bus Busy Wait 00 [ 136.260755][ T4233] gspca_vc032x: I2c Bus Busy Wait 00 [ 136.278694][ T4233] gspca_vc032x: I2c Bus Busy Wait 00 [ 136.288353][ T6436] program syz.1.734 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 136.297690][ T4233] gspca_vc032x: I2c Bus Busy Wait 00 [ 136.301000][ T6438] loop3: detected capacity change from 0 to 128 [ 136.302998][ T4233] gspca_vc032x: I2c Bus Busy Wait 00 [ 136.303011][ T4233] gspca_vc032x: I2c Bus Busy Wait 00 [ 136.303021][ T4233] gspca_vc032x: I2c Bus Busy Wait 00 [ 136.303031][ T4233] gspca_vc032x: I2c Bus Busy Wait 00 [ 136.303041][ T4233] gspca_vc032x: I2c Bus Busy Wait 00 [ 136.303051][ T4233] gspca_vc032x: I2c Bus Busy Wait 00 [ 136.303060][ T4233] gspca_vc032x: I2c Bus Busy Wait 00 [ 136.303070][ T4233] gspca_vc032x: Unknown sensor... [ 136.354857][ T4233] vc032x: probe of 3-1:0.0 failed with error -22 [ 136.643913][ T4233] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 136.924256][ T4233] usb 5-1: Using ep0 maxpacket: 32 [ 137.045051][ T4233] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 137.062676][ T4233] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.314393][ T4233] usb 5-1: config 0 descriptor?? [ 137.365106][ T6456] capability: warning: `syz.1.741' uses deprecated v2 capabilities in a way that may be insecure [ 137.379002][ T4233] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 137.407364][ T5414] usb 3-1: USB disconnect, device number 17 [ 137.512697][ T6460] netlink: 20 bytes leftover after parsing attributes in process `syz.1.743'. [ 137.536417][ T6460] binder: 6458:6460 ioctl c0306201 0 returned -14 [ 137.546254][ T6453] loop5: detected capacity change from 0 to 8192 [ 137.682865][ T6453] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 137.803257][ T26] audit: type=1326 audit(1786334906.678:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6466 comm="syz.1.747" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75f89b80d9 code=0x7ffc0000 [ 137.905692][ T26] audit: type=1326 audit(1786334906.688:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6466 comm="syz.1.747" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75f89b80d9 code=0x7ffc0000 [ 137.955459][ T6477] loop1: detected capacity change from 0 to 256 [ 138.003547][ T26] audit: type=1326 audit(1786334906.688:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6466 comm="syz.1.747" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75f89b80d9 code=0x7ffc0000 [ 138.114251][ T26] audit: type=1326 audit(1786334906.688:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6466 comm="syz.1.747" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=129 compat=0 ip=0x7f75f89b80d9 code=0x7ffc0000 [ 138.246343][ T26] audit: type=1326 audit(1786334906.688:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6466 comm="syz.1.747" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75f89b80d9 code=0x7ffc0000 [ 138.328644][ T6492] binder: 6491:6492 ioctl c0306201 0 returned -14 [ 138.333049][ T26] audit: type=1326 audit(1786334906.688:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6466 comm="syz.1.747" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75f89b80d9 code=0x7ffc0000 [ 138.371727][ T26] audit: type=1326 audit(1786334906.688:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6466 comm="syz.1.747" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f75f89b80d9 code=0x7ffc0000 [ 138.406929][ T26] audit: type=1326 audit(1786334906.688:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6466 comm="syz.1.747" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f75f89b80d9 code=0x7ffc0000 [ 138.441377][ T7] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 138.739451][ T7] usb 6-1: Using ep0 maxpacket: 32 [ 138.739596][ T6510] loop1: detected capacity change from 0 to 128 [ 138.802686][ T6510] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 138.813937][ T6510] ext4 filesystem being mounted at /204/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 138.873785][ T7] usb 6-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 138.883218][ T7] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.966396][ T7] usb 6-1: config 0 descriptor?? [ 139.034881][ T7] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 139.253502][ T7] gspca_vc032x: reg_r err -32 [ 139.258616][ T7] gspca_vc032x: I2c Bus Busy Wait 00 [ 139.270585][ T7] gspca_vc032x: I2c Bus Busy Wait 00 [ 139.278185][ T7] gspca_vc032x: I2c Bus Busy Wait 00 [ 139.284016][ T7] gspca_vc032x: I2c Bus Busy Wait 00 [ 139.289456][ T7] gspca_vc032x: I2c Bus Busy Wait 00 [ 139.295355][ T7] gspca_vc032x: I2c Bus Busy Wait 00 [ 139.300841][ T7] gspca_vc032x: I2c Bus Busy Wait 00 [ 139.306714][ T7] gspca_vc032x: I2c Bus Busy Wait 00 [ 139.312154][ T7] gspca_vc032x: I2c Bus Busy Wait 00 [ 139.313478][ T4233] gspca_vc032x: reg_r err -32 [ 139.318236][ T7] gspca_vc032x: I2c Bus Busy Wait 00 [ 139.331941][ T4233] gspca_vc032x: I2c Bus Busy Wait 00 [ 139.337726][ T4233] gspca_vc032x: I2c Bus Busy Wait 00 [ 139.343060][ T4233] gspca_vc032x: I2c Bus Busy Wait 00 [ 139.344700][ T7] gspca_vc032x: I2c Bus Busy Wait 00 [ 139.355491][ T4233] gspca_vc032x: I2c Bus Busy Wait 00 [ 139.361074][ T4233] gspca_vc032x: I2c Bus Busy Wait 00 [ 139.363799][ T7] gspca_vc032x: I2c Bus Busy Wait 00 [ 139.371915][ T4233] gspca_vc032x: I2c Bus Busy Wait 00 [ 139.374322][ T7] gspca_vc032x: I2c Bus Busy Wait 00 [ 139.379922][ T4233] gspca_vc032x: I2c Bus Busy Wait 00 [ 139.391735][ T7] gspca_vc032x: I2c Bus Busy Wait 00 [ 139.395690][ T4233] gspca_vc032x: I2c Bus Busy Wait 00 [ 139.403054][ T7] gspca_vc032x: I2c Bus Busy Wait 00 [ 139.408231][ T4233] gspca_vc032x: I2c Bus Busy Wait 00 [ 139.414729][ T7] gspca_vc032x: I2c Bus Busy Wait 00 [ 139.414750][ T7] gspca_vc032x: I2c Bus Busy Wait 00 [ 139.414760][ T7] gspca_vc032x: I2c Bus Busy Wait 00 [ 139.414770][ T7] gspca_vc032x: Unknown sensor... [ 139.414829][ T7] vc032x: probe of 6-1:0.0 failed with error -22 [ 139.456518][ T4233] gspca_vc032x: I2c Bus Busy Wait 00 [ 139.462398][ T4233] gspca_vc032x: I2c Bus Busy Wait 00 [ 139.475519][ T4233] gspca_vc032x: I2c Bus Busy Wait 00 [ 139.481212][ T4233] gspca_vc032x: I2c Bus Busy Wait 00 [ 139.498191][ T4233] gspca_vc032x: I2c Bus Busy Wait 00 [ 139.506424][ T4233] gspca_vc032x: I2c Bus Busy Wait 00 [ 139.512027][ T4233] gspca_vc032x: I2c Bus Busy Wait 00 [ 139.522826][ T4233] gspca_vc032x: I2c Bus Busy Wait 00 [ 139.531434][ T4233] gspca_vc032x: I2c Bus Busy Wait 00 [ 139.542085][ T4233] gspca_vc032x: Unknown sensor... [ 139.550413][ T4233] vc032x: probe of 5-1:0.0 failed with error -22 [ 139.763682][ T6522] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.771785][ T6522] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.119443][ T6538] __nla_validate_parse: 7 callbacks suppressed [ 140.119460][ T6538] netlink: 20 bytes leftover after parsing attributes in process `syz.1.767'. [ 140.173136][ T6539] binder: 6537:6539 ioctl c0306201 0 returned -14 [ 140.343108][ T4233] usb 5-1: USB disconnect, device number 17 [ 140.434397][ T4236] usb 6-1: USB disconnect, device number 3 [ 140.570876][ T6548] loop5: detected capacity change from 0 to 256 [ 140.601876][ T6522] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 140.646779][ T26] audit: type=1800 audit(1786334909.528:14): pid=6548 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.770" name="file2" dev="loop5" ino=1048619 res=0 errno=0 [ 140.715288][ T6522] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 141.364267][ T6522] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.374558][ T6522] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.383896][ T6522] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.392849][ T6522] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.502971][ T6555] netlink: 28 bytes leftover after parsing attributes in process `syz.5.772'. [ 141.523487][ T6555] netlink: 24 bytes leftover after parsing attributes in process `syz.5.772'. [ 141.725023][ T6565] netem: change failed [ 141.741067][ T6565] device syzkaller0 entered promiscuous mode [ 141.764600][ T6565] tipc: Started in network mode [ 141.770850][ T6571] loop1: detected capacity change from 0 to 512 [ 141.777340][ T6565] tipc: Node identity cadc63cb12c4, cluster identity 4711 [ 141.787335][ T6565] tipc: Enabled bearer , priority 0 [ 141.805650][ T6564] tipc: Resetting bearer [ 141.830760][ T6564] tipc: Disabling bearer [ 141.877343][ T6571] EXT4-fs (loop1): Ignoring removed orlov option [ 141.971244][ T6571] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #3: comm syz.1.780: corrupted inode contents [ 141.993463][ T4236] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 142.003707][ T4233] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 142.011160][ T6571] EXT4-fs error (device loop1): ext4_dirty_inode:6077: inode #3: comm syz.1.780: mark_inode_dirty error [ 142.069972][ T6589] netlink: 20 bytes leftover after parsing attributes in process `syz.5.787'. [ 142.082076][ T6589] binder: 6588:6589 ioctl c0306201 0 returned -14 [ 142.086957][ T6571] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #3: comm syz.1.780: corrupted inode contents [ 142.126118][ T6585] device syzkaller0 entered promiscuous mode [ 142.134684][ T6571] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #3: comm syz.1.780: mark_inode_dirty error [ 142.143554][ T6591] netlink: 28 bytes leftover after parsing attributes in process `syz.5.788'. [ 142.181566][ T6571] Quota error (device loop1): write_blk: dquota write failed [ 142.189158][ T6591] netlink: 24 bytes leftover after parsing attributes in process `syz.5.788'. [ 142.199896][ T6571] EXT4-fs error (device loop1): ext4_acquire_dquot:6236: comm syz.1.780: Failed to acquire dquot type 0 [ 142.235276][ T4236] usb 3-1: Using ep0 maxpacket: 32 [ 142.248485][ T4233] usb 5-1: Using ep0 maxpacket: 32 [ 142.254169][ T6571] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #16: comm syz.1.780: corrupted inode contents [ 142.282321][ T6571] EXT4-fs error (device loop1): ext4_dirty_inode:6077: inode #16: comm syz.1.780: mark_inode_dirty error [ 142.295822][ T6571] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #16: comm syz.1.780: corrupted inode contents [ 142.309630][ T6571] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #16: comm syz.1.780: mark_inode_dirty error [ 142.322534][ T6571] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #16: comm syz.1.780: corrupted inode contents [ 142.363709][ T6571] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 142.389897][ T4236] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 142.399404][ T4233] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 142.413369][ T4233] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.421371][ T6571] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #16: comm syz.1.780: corrupted inode contents [ 142.423164][ T4236] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.451893][ T6571] EXT4-fs error (device loop1): ext4_truncate:4286: inode #16: comm syz.1.780: mark_inode_dirty error [ 142.460307][ T4233] usb 5-1: config 0 descriptor?? [ 142.481806][ T4236] usb 3-1: config 0 descriptor?? [ 142.503815][ T6571] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 142.515648][ T4233] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 142.536379][ T4236] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 142.557758][ T6571] EXT4-fs (loop1): 1 truncate cleaned up [ 142.563954][ T6571] EXT4-fs (loop1): mounted filesystem without journal. Opts: resuid=0x0000000000000000,orlov,,errors=continue. Quota mode: writeback. [ 142.593698][ T6571] ext4 filesystem being mounted at /209/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 142.747525][ T6608] loop3: detected capacity change from 0 to 4096 [ 142.754296][ T4236] gspca_vc032x: reg_r err -32 [ 142.759013][ T4236] gspca_vc032x: I2c Bus Busy Wait 00 [ 142.761894][ T6610] loop5: detected capacity change from 0 to 1024 [ 142.771060][ T4236] gspca_vc032x: I2c Bus Busy Wait 00 [ 142.781601][ T4236] gspca_vc032x: I2c Bus Busy Wait 00 [ 142.808498][ T6608] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 142.819867][ T4236] gspca_vc032x: I2c Bus Busy Wait 00 [ 142.851270][ T4236] gspca_vc032x: I2c Bus Busy Wait 00 [ 142.857069][ T4236] gspca_vc032x: I2c Bus Busy Wait 00 [ 142.874320][ T4236] gspca_vc032x: I2c Bus Busy Wait 00 [ 142.878208][ T6610] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 142.880920][ T4236] gspca_vc032x: I2c Bus Busy Wait 00 [ 142.902118][ T4236] gspca_vc032x: I2c Bus Busy Wait 00 [ 142.908201][ T4236] gspca_vc032x: I2c Bus Busy Wait 00 [ 142.919896][ T4236] gspca_vc032x: I2c Bus Busy Wait 00 [ 142.944755][ T4236] gspca_vc032x: I2c Bus Busy Wait 00 [ 142.950750][ T4236] gspca_vc032x: I2c Bus Busy Wait 00 [ 142.963260][ T4236] gspca_vc032x: I2c Bus Busy Wait 00 [ 142.969818][ T4236] gspca_vc032x: I2c Bus Busy Wait 00 [ 142.975835][ T4236] gspca_vc032x: I2c Bus Busy Wait 00 [ 142.981584][ T4236] gspca_vc032x: I2c Bus Busy Wait 00 [ 142.987205][ T4236] gspca_vc032x: I2c Bus Busy Wait 00 [ 142.992491][ T4236] gspca_vc032x: Unknown sensor... [ 142.998092][ T4236] vc032x: probe of 3-1:0.0 failed with error -22 [ 143.148699][ T6618] netlink: 20 bytes leftover after parsing attributes in process `syz.3.798'. [ 143.153105][ T6617] netlink: 28 bytes leftover after parsing attributes in process `syz.5.799'. [ 143.168258][ T6617] netlink: 24 bytes leftover after parsing attributes in process `syz.5.799'. [ 143.182857][ T6618] binder: 6616:6618 ioctl c0306201 0 returned -14 [ 143.414597][ T6624] device syzkaller0 entered promiscuous mode [ 143.612117][ T6631] loop3: detected capacity change from 0 to 1764 [ 143.877056][ T6640] loop3: detected capacity change from 0 to 512 [ 143.915664][ T6640] EXT4-fs (loop3): old and new quota format mixing [ 143.930615][ T1108] usb 3-1: USB disconnect, device number 18 [ 143.996285][ T6643] netlink: 100 bytes leftover after parsing attributes in process `syz.5.810'. [ 144.041340][ T6645] binder: 6644:6645 ioctl c0306201 0 returned -14 [ 144.186247][ T6651] loop3: detected capacity change from 0 to 512 [ 144.219779][ T6653] loop2: detected capacity change from 0 to 164 [ 144.250753][ T6655] device syzkaller0 entered promiscuous mode [ 144.493798][ T4233] gspca_vc032x: reg_r err -32 [ 144.498627][ T4233] gspca_vc032x: I2c Bus Busy Wait 00 [ 144.500032][ T6660] loop2: detected capacity change from 0 to 128 [ 144.510524][ T4233] gspca_vc032x: I2c Bus Busy Wait 00 [ 144.517541][ T4233] gspca_vc032x: I2c Bus Busy Wait 00 [ 144.523679][ T4233] gspca_vc032x: I2c Bus Busy Wait 00 [ 144.541875][ T4233] gspca_vc032x: I2c Bus Busy Wait 00 [ 144.562766][ T6660] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 144.571887][ T4233] gspca_vc032x: I2c Bus Busy Wait 00 [ 144.585527][ T4233] gspca_vc032x: I2c Bus Busy Wait 00 [ 144.590901][ T4233] gspca_vc032x: I2c Bus Busy Wait 00 [ 144.600142][ T6660] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 144.623098][ T4233] gspca_vc032x: I2c Bus Busy Wait 00 [ 144.640881][ T4233] gspca_vc032x: I2c Bus Busy Wait 00 [ 144.667555][ T4233] gspca_vc032x: I2c Bus Busy Wait 00 [ 144.673011][ T4233] gspca_vc032x: I2c Bus Busy Wait 00 [ 144.688942][ T4233] gspca_vc032x: I2c Bus Busy Wait 00 [ 144.694763][ T4233] gspca_vc032x: I2c Bus Busy Wait 00 [ 144.711065][ T4233] gspca_vc032x: I2c Bus Busy Wait 00 [ 144.716780][ T4233] gspca_vc032x: I2c Bus Busy Wait 00 [ 144.732388][ T4233] gspca_vc032x: I2c Bus Busy Wait 00 [ 144.738295][ T4233] gspca_vc032x: I2c Bus Busy Wait 00 [ 144.757946][ T4233] gspca_vc032x: Unknown sensor... [ 144.769517][ T4233] vc032x: probe of 5-1:0.0 failed with error -22 [ 145.069871][ T6682] binder: 6681:6682 ioctl c0306201 0 returned -14 [ 145.102434][ T6685] loop3: detected capacity change from 0 to 256 [ 145.233678][ T5414] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 145.505117][ T4236] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 145.513513][ T5414] usb 2-1: Using ep0 maxpacket: 32 [ 145.525048][ T4236] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 145.526806][ T7] usb 5-1: USB disconnect, device number 18 [ 145.564695][ T6708] __nla_validate_parse: 3 callbacks suppressed [ 145.564714][ T6708] netlink: 20 bytes leftover after parsing attributes in process `syz.2.839'. [ 145.595158][ T6711] netlink: 100 bytes leftover after parsing attributes in process `syz.3.838'. [ 145.660379][ T5414] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 145.675199][ T6708] binder: 6707:6708 ioctl c0306201 0 returned -14 [ 145.681008][ T5414] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.706641][ T5414] usb 2-1: config 0 descriptor?? [ 145.785980][ T5414] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 146.254957][ T6741] netlink: 100 bytes leftover after parsing attributes in process `syz.3.852'. [ 146.277406][ T6743] netlink: 20 bytes leftover after parsing attributes in process `syz.4.853'. [ 146.305401][ T6743] binder: 6742:6743 ioctl c0306201 0 returned -14 [ 146.384963][ T5422] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 146.409675][ T6745] loop4: detected capacity change from 0 to 512 [ 146.437510][ T6747] loop3: detected capacity change from 0 to 512 [ 146.457245][ T6745] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 146.483762][ T6745] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 146.586914][ T6745] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #16: comm syz.4.854: invalid indirect mapped block 32768 (level 2) [ 146.613688][ T6745] EXT4-fs (loop4): Remounting filesystem read-only [ 146.620909][ T6745] EXT4-fs (loop4): 1 orphan inode deleted [ 146.653506][ T5422] usb 3-1: Using ep0 maxpacket: 32 [ 146.681922][ T6745] EXT4-fs (loop4): 1 truncate cleaned up [ 146.702029][ T6745] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv0,errors=remount-ro,noblock_validity,lazytime,jqfmt=vfsv0,nolazytime,dioread_nolock,journal_ioprio=0x0000000000000004,. Quota mode: none. [ 146.725788][ T6753] loop3: detected capacity change from 0 to 512 [ 146.793572][ T5422] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 146.822325][ T6745] EXT4-fs error (device loop4): ext4_search_dir:1549: inode #12: block 7: comm syz.4.854: bad entry in directory: directory entry overrun - offset=0, inode=13, rec_len=784, size=56 fake=0 [ 146.828843][ T5422] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.879432][ T6745] EXT4-fs (loop4): Remounting filesystem read-only [ 146.915875][ T5422] usb 3-1: config 0 descriptor?? [ 146.970930][ T5422] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 147.032801][ T6758] device syzkaller0 entered promiscuous mode [ 147.357831][ T6769] netlink: 20 bytes leftover after parsing attributes in process `syz.4.864'. [ 147.374974][ T6771] netlink: 100 bytes leftover after parsing attributes in process `syz.5.865'. [ 147.387257][ T6769] binder: 6767:6769 ioctl c0306201 0 returned -14 [ 147.564103][ T6776] device syzkaller0 entered promiscuous mode [ 147.735328][ T5414] gspca_vc032x: reg_r err -32 [ 147.741028][ T5414] gspca_vc032x: I2c Bus Busy Wait 00 [ 147.746815][ T5414] gspca_vc032x: I2c Bus Busy Wait 00 [ 147.754646][ T5414] gspca_vc032x: I2c Bus Busy Wait 00 [ 147.760161][ T5414] gspca_vc032x: I2c Bus Busy Wait 00 [ 147.766662][ T5414] gspca_vc032x: I2c Bus Busy Wait 00 [ 147.772408][ T5414] gspca_vc032x: I2c Bus Busy Wait 00 [ 147.782221][ T5414] gspca_vc032x: I2c Bus Busy Wait 00 [ 147.791704][ T5414] gspca_vc032x: I2c Bus Busy Wait 00 [ 147.802047][ T5414] gspca_vc032x: I2c Bus Busy Wait 00 [ 147.814148][ T5414] gspca_vc032x: I2c Bus Busy Wait 00 [ 147.821080][ T5414] gspca_vc032x: I2c Bus Busy Wait 00 [ 147.834044][ T5414] gspca_vc032x: I2c Bus Busy Wait 00 [ 147.839542][ T5414] gspca_vc032x: I2c Bus Busy Wait 00 [ 147.852060][ T5414] gspca_vc032x: I2c Bus Busy Wait 00 [ 147.859302][ T5414] gspca_vc032x: I2c Bus Busy Wait 00 [ 147.871935][ T5414] gspca_vc032x: I2c Bus Busy Wait 00 [ 147.879464][ T5414] gspca_vc032x: I2c Bus Busy Wait 00 [ 147.893665][ T5414] gspca_vc032x: I2c Bus Busy Wait 00 [ 147.899130][ T5414] gspca_vc032x: Unknown sensor... [ 147.911564][ T5414] vc032x: probe of 2-1:0.0 failed with error -22 [ 147.999033][ T6789] loop4: detected capacity change from 0 to 1024 [ 148.026145][ T6789] EXT4-fs (loop4): inline encryption not supported [ 148.036232][ T6789] EXT4-fs (loop4): Ignoring removed bh option [ 148.103075][ T6789] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodelalloc,noblock_validity,noauto_da_alloc,nolazytime,errors=continue,lazytime,inlinecrypt,stripe=0x0000000000000005,bh,nombcache,resuid=0x0000000000000000,,errors=continue. Quota mode: none. [ 148.432072][ T6805] netlink: 20 bytes leftover after parsing attributes in process `syz.3.878'. [ 148.454500][ T6805] binder: 6804:6805 ioctl c0306201 0 returned -14 [ 148.559943][ T6807] netlink: 100 bytes leftover after parsing attributes in process `syz.5.879'. [ 148.650843][ T6809] loop3: detected capacity change from 0 to 512 [ 148.757608][ T5414] usb 2-1: USB disconnect, device number 12 [ 148.827011][ T6809] [ 148.829421][ T6809] ====================================================== [ 148.836548][ T6809] WARNING: possible circular locking dependency detected [ 148.843594][ T6809] syzkaller #0 Not tainted [ 148.848289][ T6809] ------------------------------------------------------ [ 148.855322][ T6809] syz.3.880/6809 is trying to acquire lock: [ 148.861245][ T6809] ffff88801e426c58 (&sbi->s_writepages_rwsem){.+.+}-{0:0}, at: ext4_writepages+0x213/0x2d40 [ 148.869545][ T6815] xt_nfacct: accounting object `syz0' does not exist [ 148.871928][ T6809] [ 148.871928][ T6809] but task is already holding lock: [ 148.871938][ T6809] ffff888060e828a8 (&ei->xattr_sem){++++}-{3:3} [ 148.883634][ T5422] gspca_vc032x: reg_r err -32 [ 148.886311][ T6809] , at: __ext4_mark_inode_dirty+0x3bd/0x6c0 [ 148.886342][ T6809] [ 148.886342][ T6809] which lock already depends on the new lock. [ 148.886342][ T6809] [ 148.896874][ T5422] gspca_vc032x: I2c Bus Busy Wait 00 [ 148.897522][ T6809] [ 148.897522][ T6809] the existing dependency chain (in reverse order) is: [ 148.897531][ T6809] [ 148.897531][ T6809] -> #1 [ 148.919428][ T5422] gspca_vc032x: I2c Bus Busy Wait 00 [ 148.919599][ T6809] (&ei->xattr_sem){++++}-{3:3}: [ 148.944812][ T6809] down_write+0x38/0x60 [ 148.946445][ T6817] device syzkaller0 entered promiscuous mode [ 148.949627][ T6809] ext4_destroy_inline_data+0x24/0xe0 [ 148.949655][ T6809] ext4_writepages+0x599/0x2d40 [ 148.949673][ T6809] do_writepages+0x493/0x700 [ 148.956894][ T5422] gspca_vc032x: I2c Bus Busy Wait 00 [ 148.961928][ T6809] filemap_fdatawrite_wbc+0x1eb/0x240 [ 148.961965][ T6809] file_write_and_wait_range+0x14d/0x220 [ 148.976168][ T5422] gspca_vc032x: I2c Bus Busy Wait 00 [ 148.977733][ T6809] ext4_sync_file+0x20e/0xb10 [ 148.977767][ T6809] ext4_buffered_write_iter+0x323/0x3a0 [ 148.991602][ T5422] gspca_vc032x: I2c Bus Busy Wait 00 [ 148.995833][ T6809] ext4_file_write_iter+0x73f/0x1720 [ 148.995865][ T6809] vfs_write+0x748/0xd70 [ 148.995882][ T6809] __x64_sys_pwrite64+0x197/0x220 [ 148.995899][ T6809] do_syscall_64+0x4c/0xa0 [ 149.006730][ T5422] gspca_vc032x: I2c Bus Busy Wait 00 [ 149.007316][ T6809] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 149.015936][ T5422] gspca_vc032x: I2c Bus Busy Wait 00 [ 149.018408][ T6809] [ 149.018408][ T6809] -> #0 (&sbi->s_writepages_rwsem){.+.+}-{0:0} [ 149.032408][ T5422] gspca_vc032x: I2c Bus Busy Wait 00 [ 149.033848][ T6809] : [ 149.033856][ T6809] __lock_acquire+0x2c66/0x7b50 [ 149.033884][ T6809] lock_acquire+0x19e/0x400 [ 149.033903][ T6809] percpu_down_read+0x46/0x1b0 [ 149.033922][ T6809] ext4_writepages+0x213/0x2d40 [ 149.033939][ T6809] do_writepages+0x493/0x700 [ 149.033957][ T6809] __writeback_single_inode+0x153/0xda0 [ 149.033975][ T6809] writeback_single_inode+0x3d2/0x8e0 [ 149.033991][ T6809] write_inode_now+0x23b/0x2c0 [ 149.034007][ T6809] iput+0x599/0x880 [ 149.034025][ T6809] ext4_xattr_set_entry+0x1d76/0x3f70 [ 149.034054][ T6809] ext4_xattr_block_set+0x4d7/0x2ce0 [ 149.034075][ T6809] ext4_expand_extra_isize_ea+0xebe/0x18e0 [ 149.034096][ T6809] __ext4_expand_extra_isize+0x301/0x3e0 [ 149.034114][ T6809] __ext4_mark_inode_dirty+0x444/0x6c0 [ 149.034131][ T6809] ext4_evict_inode+0xa55/0x1050 [ 149.034146][ T6809] evict+0x4b6/0x8b0 [ 149.044667][ T5422] gspca_vc032x: I2c Bus Busy Wait 00 [ 149.046409][ T6809] ext4_orphan_cleanup+0xad8/0x1320 [ 149.046436][ T6809] ext4_fill_super+0x8c65/0x93f0 [ 149.056603][ T5422] gspca_vc032x: I2c Bus Busy Wait 00 [ 149.060023][ T6809] mount_bdev+0x28a/0x3c0 [ 149.069879][ T5422] gspca_vc032x: I2c Bus Busy Wait 00 [ 149.073174][ T6809] legacy_get_tree+0xe6/0x180 [ 149.073203][ T6809] vfs_get_tree+0x88/0x270 [ 149.082700][ T5422] gspca_vc032x: I2c Bus Busy Wait 00 [ 149.083495][ T6809] do_new_mount+0x247/0xa40 [ 149.083517][ T6809] __se_sys_mount+0x2e3/0x3d0 [ 149.083535][ T6809] do_syscall_64+0x4c/0xa0 [ 149.083552][ T6809] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 149.083570][ T6809] [ 149.083570][ T6809] other info that might help us debug this: [ 149.083570][ T6809] [ 149.083576][ T6809] Possible unsafe locking scenario: [ 149.083576][ T6809] [ 149.083580][ T6809] CPU0 CPU1 [ 149.083585][ T6809] ---- ---- [ 149.083591][ T6809] lock(&ei->xattr_sem); [ 149.083608][ T6809] lock(&sbi->s_writepages_rwsem); [ 149.083624][ T6809] lock(&ei->xattr_sem); [ 149.083638][ T6809] lock(&sbi->s_writepages_rwsem); [ 149.083652][ T6809] [ 149.083652][ T6809] *** DEADLOCK *** [ 149.083652][ T6809] [ 149.083657][ T6809] 3 locks held by syz.3.880/6809: [ 149.083669][ T6809] #0: ffff8880506360e0 (&type->s_umount_key#28/1){+.+.}-{3:3} [ 149.095707][ T5422] gspca_vc032x: I2c Bus Busy Wait 00 [ 149.100241][ T6809] , at: alloc_super+0x200/0x970 [ 149.100270][ T6809] #1: [ 149.111939][ T5422] gspca_vc032x: I2c Bus Busy Wait 00 [ 149.112308][ T6809] ffff888050636650 [ 149.118977][ T5422] gspca_vc032x: I2c Bus Busy Wait 00 [ 149.122559][ T6809] (sb_internal){.+.+}-{0:0}, at: ext4_evict_inode+0x41f/0x1050 [ 149.136460][ T5422] gspca_vc032x: I2c Bus Busy Wait 00 [ 149.140920][ T6809] #2: ffff888060e828a8 (&ei->xattr_sem){++++}-{3:3}, at: __ext4_mark_inode_dirty+0x3bd/0x6c0 [ 149.153250][ T5422] gspca_vc032x: I2c Bus Busy Wait 00 [ 149.156842][ T6809] [ 149.156842][ T6809] stack backtrace: [ 149.156849][ T6809] CPU: 1 PID: 6809 Comm: syz.3.880 Not tainted syzkaller #0 [ 149.156870][ T6809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 149.156882][ T6809] Call Trace: [ 149.156890][ T6809] [ 149.167094][ T5422] gspca_vc032x: I2c Bus Busy Wait 00 [ 149.168041][ T6809] dump_stack_lvl+0x188/0x250 [ 149.176907][ T5422] gspca_vc032x: Unknown sensor... [ 149.178783][ T6809] ? load_image+0x410/0x410 [ 149.178811][ T6809] ? show_regs_print_info+0x20/0x20 [ 149.201535][ T5422] vc032x: probe of 3-1:0.0 failed with error -22 [ 149.204658][ T6809] ? print_circular_bug+0x12b/0x1a0 [ 149.204690][ T6809] check_noncircular+0x296/0x330 [ 149.204709][ T6809] ? look_up_lock_class+0x71/0x110 [ 149.204731][ T6809] ? add_chain_block+0x9b0/0x9b0 [ 149.437964][ T6809] ? lockdep_lock+0xf1/0x1f0 [ 149.442850][ T6809] ? lockdep_lock+0xf1/0x1f0 [ 149.447445][ T6809] ? mark_lock+0x94/0x320 [ 149.451859][ T6809] ? _find_first_zero_bit+0xd1/0xf0 [ 149.457072][ T6809] __lock_acquire+0x2c66/0x7b50 [ 149.462638][ T6809] ? lock_chain_count+0x20/0x20 [ 149.467490][ T6809] ? verify_lock_unused+0x140/0x140 [ 149.472693][ T6809] ? verify_lock_unused+0x140/0x140 [ 149.477889][ T6809] ? mark_lock+0x94/0x320 [ 149.482214][ T6809] lock_acquire+0x19e/0x400 [ 149.486721][ T6809] ? ext4_writepages+0x213/0x2d40 [ 149.491749][ T6809] ? __might_sleep+0xf0/0xf0 [ 149.496334][ T6809] ? read_lock_is_recursive+0x10/0x10 [ 149.501705][ T6809] ? mark_lock+0x94/0x320 [ 149.506043][ T6809] percpu_down_read+0x46/0x1b0 [ 149.510815][ T6809] ? ext4_writepages+0x213/0x2d40 [ 149.515855][ T6809] ext4_writepages+0x213/0x2d40 [ 149.520703][ T6809] ? lock_release+0xb5/0x8a0 [ 149.525292][ T6809] ? verify_lock_unused+0x140/0x140 [ 149.530575][ T6809] ? mark_lock+0x94/0x320 [ 149.535047][ T6809] ? ext4_readpage+0x2e0/0x2e0 [ 149.539953][ T6809] ? mark_lock+0x94/0x320 [ 149.544367][ T6809] ? __lock_acquire+0x13dc/0x7b50 [ 149.549399][ T6809] ? __lock_acquire+0x7b50/0x7b50 [ 149.554444][ T6809] ? do_raw_spin_lock+0x128/0x2f0 [ 149.559483][ T6809] ? do_raw_spin_unlock+0x11d/0x230 [ 149.564822][ T6809] ? ext4_readpage+0x2e0/0x2e0 [ 149.569731][ T6809] do_writepages+0x493/0x700 [ 149.574430][ T6809] ? __writepage+0x130/0x130 [ 149.579025][ T6809] ? writeback_single_inode+0x3c7/0x8e0 [ 149.584838][ T6809] ? slab_post_alloc_hook+0x4c/0x380 [ 149.590158][ T6809] ? __lock_acquire+0x7b50/0x7b50 [ 149.595196][ T6809] ? do_raw_spin_lock+0x128/0x2f0 [ 149.600327][ T6809] __writeback_single_inode+0x153/0xda0 [ 149.605989][ T6809] writeback_single_inode+0x3d2/0x8e0 [ 149.611706][ T6809] ? write_inode_now+0x2c0/0x2c0 [ 149.616758][ T6809] write_inode_now+0x23b/0x2c0 [ 149.621548][ T6809] ? bdi_split_work_to_wbs+0x8a0/0x8a0 [ 149.627015][ T6809] ? do_raw_spin_unlock+0x11d/0x230 [ 149.632243][ T6809] iput+0x599/0x880 [ 149.636062][ T6809] ext4_xattr_set_entry+0x1d76/0x3f70 [ 149.641475][ T6809] ? ext4_xattr_ibody_set+0x330/0x330 [ 149.646980][ T6809] ? kmem_cache_free+0x14c/0x210 [ 149.651937][ T6809] ? mb_cache_entry_delete_or_get+0x1bc/0x1d0 [ 149.658015][ T6809] ext4_xattr_block_set+0x4d7/0x2ce0 [ 149.663312][ T6809] ? __getblk_gfp+0x51/0xb20 [ 149.667920][ T6809] ? __ext4_xattr_check_block+0x7f3/0x8f0 [ 149.673644][ T6809] ? ext4_xattr_block_find+0x500/0x500 [ 149.679098][ T6809] ? ext4_xattr_block_find+0x433/0x500 [ 149.684562][ T6809] ext4_expand_extra_isize_ea+0xebe/0x18e0 [ 149.690408][ T6809] __ext4_expand_extra_isize+0x301/0x3e0 [ 149.696073][ T6809] __ext4_mark_inode_dirty+0x444/0x6c0 [ 149.701724][ T6809] ext4_evict_inode+0xa55/0x1050 [ 149.706678][ T6809] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 149.712744][ T6809] ? do_raw_spin_unlock+0x11d/0x230 [ 149.718028][ T6809] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 149.723920][ T6809] evict+0x4b6/0x8b0 [ 149.728097][ T6809] ? proc_nr_inodes+0x320/0x320 [ 149.733055][ T6809] ? do_raw_spin_unlock+0x11d/0x230 [ 149.738358][ T6809] ? _raw_spin_unlock+0x24/0x40 [ 149.743304][ T6809] ? iput+0x6ea/0x880 [ 149.747396][ T6809] ext4_orphan_cleanup+0xad8/0x1320 [ 149.752706][ T6809] ? ext4_orphan_del+0xc90/0xc90 [ 149.757825][ T6809] ? errseq_check_and_advance+0x62/0x120 [ 149.763456][ T6809] ext4_fill_super+0x8c65/0x93f0 [ 149.768388][ T6809] ? format_decode+0x8b1/0x1330 [ 149.773341][ T6809] ? ext4_mount+0x40/0x40 [ 149.777746][ T6809] ? set_blocksize+0x1f1/0x360 [ 149.782538][ T6809] ? sb_set_blocksize+0xa5/0xe0 [ 149.787411][ T6809] mount_bdev+0x28a/0x3c0 [ 149.791760][ T6809] ? ext4_mount+0x40/0x40 [ 149.796101][ T6809] legacy_get_tree+0xe6/0x180 [ 149.800784][ T6809] ? ext4_errno_to_code+0x160/0x160 [ 149.805987][ T6809] vfs_get_tree+0x88/0x270 [ 149.810616][ T6809] do_new_mount+0x247/0xa40 [ 149.815155][ T6809] __se_sys_mount+0x2e3/0x3d0 [ 149.819972][ T6809] ? __x64_sys_mount+0xc0/0xc0 [ 149.824766][ T6809] ? lockdep_hardirqs_on+0x94/0x140 [ 149.829964][ T6809] ? __x64_sys_mount+0x1c/0xc0 [ 149.834735][ T6809] do_syscall_64+0x4c/0xa0 [ 149.839168][ T6809] ? clear_bhb_loop+0x30/0x80 [ 149.843944][ T6809] ? clear_bhb_loop+0x30/0x80 [ 149.849914][ T6809] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 149.855857][ T6809] RIP: 0033:0x7f7c7f71334a [ 149.860287][ T6809] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 149.880209][ T6809] RSP: 002b:00007f7c7d969e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 149.888674][ T6809] RAX: ffffffffffffffda RBX: 00007f7c7d969ee0 RCX: 00007f7c7f71334a [ 149.895006][ T5414] usb 3-1: USB disconnect, device number 19 [ 149.896671][ T6809] RDX: 0000200000000240 RSI: 0000200000000000 RDI: 00007f7c7d969ea0 [ 149.896691][ T6809] RBP: 0000200000000240 R08: 00007f7c7d969ee0 R09: 0000000000000000 [ 149.896706][ T6809] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000000 [ 149.926813][ T6809] R13: 00007f7c7d969ea0 R14: 000000000000047a R15: 000000000000002c [ 149.934917][ T6809] [ 149.946557][ T6809] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: inode #11: comm syz.3.880: iget: bad extra_isize 90 (inode size 256) [ 149.967031][ T6809] EXT4-fs (loop3): Remounting filesystem read-only [ 150.006630][ T6809] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.880: error while reading EA inode 11 err=-117 [ 150.035126][ T6809] EXT4-fs (loop3): Remounting filesystem read-only [ 150.041808][ T6809] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: inode #11: comm syz.3.880: iget: bad extra_isize 90 (inode size 256) [ 150.056431][ T6809] EXT4-fs (loop3): Remounting filesystem read-only [ 150.063183][ T6809] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.880: error while reading EA inode 11 err=-117 [ 150.076555][ T6809] EXT4-fs (loop3): Remounting filesystem read-only [ 150.083218][ T6809] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: inode #18: comm syz.3.880: iget: bad extra_isize 90 (inode size 256) [ 150.100664][ T6809] EXT4-fs (loop3): Remounting filesystem read-only [ 150.107361][ T6809] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.880: error while reading EA inode 18 err=-117 [ 150.119922][ T6809] EXT4-fs (loop3): Remounting filesystem read-only [ 150.126883][ T6809] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: inode #18: comm syz.3.880: iget: bad extra_isize 90 (inode size 256) [ 150.140437][ T6809] EXT4-fs (loop3): Remounting filesystem read-only [ 150.147131][ T6809] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.880: error while reading EA inode 18 err=-117 [ 150.159993][ T6809] EXT4-fs (loop3): Remounting filesystem read-only [ 150.168954][ T6809] EXT4-fs (loop3): 1 orphan inode deleted [ 150.175119][ T6809] EXT4-fs (loop3): mounted filesystem without journal. Opts: data_err=ignore,noload,debug_want_extra_isize=0x000000000000005a,errors=remount-ro,grpid,noquota,min_batch_time=0x0000000000000003,jqfmt=vfsold,. Quota mode: none.