last executing test programs: 34.582846719s ago: executing program 1 (id=264): timerfd_gettime(0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000240)={0x4, 0x3, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x3, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0xfffc, 0x1, 0x0, 0x2f, 0x0, @multicast2, @local}}}}}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0xeeee8000, 0xeeee0002, 0xc, 0x1, 0x81, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0xff}, {0x10000, 0x5000, 0x3, 0xfc, 0x8, 0x0, 0x0, 0x64, 0xe, 0x0, 0x5, 0xfc}, {0x3000, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, 0x4, 0x2}, {0xffff1000, 0xffff1000, 0xf, 0x0, 0x0, 0x6, 0x3, 0x7}, {0x6000, 0xffff1000, 0xf, 0x2, 0xfe, 0x10, 0x3, 0xc, 0x58, 0x8, 0x6, 0xfd}, {0xeeef0000, 0x1000, 0x0, 0x3, 0x9b, 0xfd, 0xfc, 0x4, 0x3, 0x5, 0xc0, 0x10}, {0x3000, 0x100000, 0x10, 0x0, 0x7, 0xfb, 0x0, 0x7, 0x1a, 0x2, 0x0, 0x2}, {0x41000, 0x3000, 0xe, 0x2, 0x2, 0x6f, 0x1, 0xfd, 0x0, 0x9, 0x3, 0x5}, {0x2000, 0xb}, {}, 0x9df9ffdf, 0x0, 0x2, 0x20, 0xe, 0xd000, 0x2000, [0xdd41, 0x0, 0x2]}) 34.42261298s ago: executing program 1 (id=266): memfd_create(&(0x7f0000000440)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00uKs\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x141<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\xb7>j0S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ\x00'/1136, 0xc) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x1}, 0x18) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='smaps_rollup\x00') fchdir(r0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', &(0x7f0000000140)={0x5750c0}, 0x18) 34.251468142s ago: executing program 1 (id=268): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x88000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000008, 0x13, r4, 0xb3d68000) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, 0x0) 34.046776935s ago: executing program 1 (id=270): syz_mount_image$ext4(&(0x7f0000000ac0)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x1810744, &(0x7f0000000000)={[{@noauto_da_alloc}, {@test_dummy_encryption}, {@nobarrier}, {}, {@nodiscard}, {@init_itable_val={'init_itable', 0x3d, 0x5918}}, {@errors_remount}, {@abort}, {@test_dummy_encryption}]}, 0x0, 0x479, &(0x7f0000000480)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x11080, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005c48, 0x0) read$FUSE(r0, &(0x7f0000004c40)={0x2020}, 0x2020) 33.56516819s ago: executing program 1 (id=275): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003f80)=ANY=[], 0x1, 0x2fb, &(0x7f0000000180)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) open(0x0, 0xc40, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x5, 0x9) fdatasync(r0) 33.115060915s ago: executing program 1 (id=277): openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x101042, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x108) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000080)='./file0\x00', 0x12000092) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000780)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file1\x00', 0x42, 0x5) 33.053913236s ago: executing program 32 (id=277): openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x101042, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x108) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000080)='./file0\x00', 0x12000092) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000780)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file1\x00', 0x42, 0x5) 12.650954767s ago: executing program 0 (id=411): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000100)={0x1, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000000)={0x5, "340b784fceefd131b8e6238c25f5998e5bf421e48f4b0a501922de974a3300", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f0000000180)={"2486970284ed923431d400001f000000a9201be943f06f2f4000", r3, 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_INC(r0, 0x40045701, &(0x7f00000002c0)=0x7) ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f0000000240)={"8c5d2ddcdba01c2b0e062db91ec2209d789c4dcce0ab20c5fa0b8a204e3b856a", r4}) 12.112202983s ago: executing program 0 (id=423): creat(&(0x7f00000000c0)='./file0\x00', 0xdafbe5d6891b6e4) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002240), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002540)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000040)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) read$FUSE(r0, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2092) write$FUSE_INIT(r0, &(0x7f00000046c0)={0x50, 0x0, r1, {0x7, 0x9, 0x4, 0x403a1810, 0xfffe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100}}, 0x50) llistxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x44) syz_fuse_handle_req(r0, &(0x7f0000004c80)="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", 0x2000, &(0x7f0000004bc0)={&(0x7f0000002300)={0x50, 0x0, 0x46, {0x7, 0x2d, 0x9, 0x62800002, 0x1, 0x9, 0x7, 0x3, 0x0, 0x0, 0x20, 0x4}}, 0x0, 0x0, 0x0, &(0x7f0000002280)={0x13, 0x0, 0x3, {0xbaed}}, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004600)={0x20, 0x2f, 0x99d, {0x0, 0x4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 11.982940945s ago: executing program 0 (id=415): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/packet\x00') pread64(r0, &(0x7f0000000000)=""/167, 0xa7, 0xff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x200041a, &(0x7f0000000040)={[{}, {@nobarrier}, {@nls={'nls', 0x3d, 'cp437'}}]}, 0x1, 0x5c8, &(0x7f00000006c0)="$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") openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x206420, 0x0, 0x7, 0x0, &(0x7f0000006380)) link(&(0x7f0000000180)='./file2\x00', &(0x7f0000001040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00') 11.759558517s ago: executing program 0 (id=417): syz_mount_image$xfs(&(0x7f0000009740), &(0x7f0000009780)='./file0\x00', 0x0, &(0x7f00000005c0), 0x1, 0x9730, &(0x7f0000009800)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x143042, 0xc0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x3, 0x0, 0x0, 0x4, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000007700000c00002000", "036c47c678082004cb59d654cb9b1b165263bdbcef549ba197fce47ddfdd753abd950100172a00ffffff00f7ffffff000000f3e7f20000000200000000000600", "b7326736181c208220fffff2ff00000000000000000e00", [0x4]}) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000d40)={0x0, 0x2904c, 0xc, 0x10003, '\x00', [{}, {0xffffffff}]}) 10.763105079s ago: executing program 0 (id=424): syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000400)='./file0\x00', 0x90, &(0x7f0000003280)=ANY=[@ANYBLOB="0001def4774774366f0b8a20db13db64e85fc9322c3fe018b91ff1291b4f4c56de7e4543f49818e1307d98d09daa1e2a7dbf88003e9401dc73aad0b7dbb5685565c7825ba8340621faeae92abed19c524ab06c4303258d253722e159642af447aeb096c6a26d345d82f2925163331b0e9157441a9c61dd1051d3b970f9ac12f5975cf1ad4e45acef1a54921c492a77bcb1858b68758ed339608b8e43c740f821e03bc0e8a497c4d5dde436000090a397637dedb2f3"], 0x1, 0xd99, &(0x7f0000000e00)="$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") r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) syz_usb_connect(0x0, 0x3f, 0x0, 0x0) syz_clone(0xa00200, 0x0, 0xfffffffffffffef2, 0x0, 0x0, 0x0) ftruncate(r0, 0x2007ffc) sendfile(r0, r0, 0x0, 0x800000009) 9.706917191s ago: executing program 0 (id=431): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x30c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="00006003ffffffffffffbbbbbbbbbbbb08060001080b060400"], 0x2e) 9.563343572s ago: executing program 33 (id=431): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x30c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="00006003ffffffffffffbbbbbbbbbbbb08060001080b060400"], 0x2e) 7.98806993s ago: executing program 3 (id=443): syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000080)={[{@metadata_ratio}, {@space_cache_v2}]}, 0xfe, 0x559a, &(0x7f000000ac40)="$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") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0) r1 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) write$UHID_INPUT(r1, &(0x7f0000005600)={0x8, {"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", 0x1000}}, 0x1006) r2 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6a000}], 0x1, 0x7000, 0x0, 0x3) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020660b, &(0x7f0000000880)={0x0, 0xfffffffeffd, 0x0, 0xffffffff, 0x1}) 6.986545351s ago: executing program 3 (id=445): socket$inet6_sctp(0xa, 0x1, 0x84) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f00000000c0)={'pimreg\x00', @random="f39301dff678"}) write$cgroup_subtree(r1, &(0x7f00000000c0)=ANY=[], 0x8) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) 6.831027373s ago: executing program 3 (id=448): openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x14bb42, 0x8c) unshare(0xc040400) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x8, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x20400, 0x20) readahead(r0, 0xffffffffffffff41, 0x2) 6.683495245s ago: executing program 3 (id=450): syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x80000}, &(0x7f0000000340), 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x400) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000580)={0x0, 0x1, &(0x7f0000000180)=[r2], &(0x7f00000000c0)=[0x3], &(0x7f0000000640)=[r4, r3, r3], &(0x7f0000000340), 0x0, 0xffffffffffffffff}) 6.514920056s ago: executing program 3 (id=451): r0 = creat(&(0x7f0000000100)='./file1\x00', 0x12a) close(r0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f00000000c0)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000040)={@host}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r1, 0x7ab, &(0x7f0000000000)={&(0x7f0000000540)={{@host=0x10}, {@host=0x10, 0x800}, 0x400, "d49e0b1f09a3e05cb898141464441748655937bb34d22f02362479246bb6372d891a3b5dafa58a6abc5a678d6874fc8fb5f8a529c6e30103484f2667c174fb6cda19ea0a9301bc3238eb816e9c3882f243bcd4bd7115b26dacf5923f060498d471cb4f789562fcda119739dd1a5b0e4e1a4a64dbd7b398bd4e7a247d81f968f2e945f293fc3860bf11f0424193fce743067d27f0ac187b44b128a4999547f73d8c35d3c2bd8b51bbc9a31123f773be89e109cc71b8ec29a539083c0cba15b0899c7181ba154c28b3c4e2ebe360ac44f942a703b9a3a37fbbefe9ae0de04a32336a6eba07b2fb6ad426d56e17291bb1a9d1fcdaa939378bab6dd2eac37b369ef163c9e0fc8039352c24d8147fcc2e2559b47066abd21a3a5f83f239a2227d17d4ca90f60ed9acc243ed38818e3883a985106b54dc157b67022525a74e8f9cb99852760359278d5d22294a70433ba4cec5147fbb09b1d0008ba76257f1c5af6b8d6bf3bcfd5a468a566a4e98fe5f264f2663b72cb421c90d8b7883ddfb5749b27a3e146f9d8538706fea61b07c6e064446337439b9d5a5dc82f6c63c57d6ba0e709b7c1b15fa8367f8e6df2cf59b0b30740ef47c5cccffce5911569591ce4ab62275964cd147e87a30cc6e71f7e40e161997cdbadcfbfb6c54e0289ac137508b7b5339414e4ab7afcc420148e37d49b664cc07c8178a3b50f566c5bdd3aa9217ef909805972bd63ee1d729b282cd866c183744b20da3227f9d43843236b571c8d3237408c266e08d0699ebd30e0820362664ab323b15d3ae9896d6120aae6ef9085f53a2b39cc31238b031476c86e6b16d7703fcbacc7269ce8622eab1cfdf82a364209ec4ac912db924bb76bc35ddf8d0e7a3aff0d08a48c07be47303b59653d9409f14dc59ac33cae5e010466f54d86772e43e3680863bb9bf10c971f16a731e601d7fcdbb91d7146e7834d89059ad522d70398c2bacf113ed791e32f933dfa23f5d6d11bfc9d9e0f04a34b0eddd99d16cd9712485e0a5c9aaf1ebf3f14d00005f8960b6145cbb7d4522692ebe1f9491f87a29ed67c5fb60f5e69bde2a758742999fc986a2dbf6199977e9b446691bf9f95d0abd84557c77ea13356c977d0f098ab9fec85acbd6447f2e6893e2fa6a0a7b272dab66e69b7def48f8b3583a53a0941fb3e4367fa8d56e05ee3b265f17ca0439fcdcea276f7f0a9bf4c2a324d7143658007cf4019e8da69ba1b7dff4383714cbcb71dfe6f1b1ac5d5e99394cb2c360ddb1889d92cd36f8fc72ac865f1c6445957b2a57c1af59ef8d2e9fe328ec2bde763d65c4dea965042f540515bf2f879d1b26309ebc1d7f76c569fa88fbe61845e96e93d3b6025b6285777e59495943596c128fdacc545263ce458bf99f57d7e5dc77f65cf650902b5b6d5af9359334759843365bf0dfb244817a40e8cc9030"}, 0x418, 0x1}) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 5.656666326s ago: executing program 3 (id=455): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000001180)=0x2000000) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r0, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x5008, 0x0) r1 = epoll_create(0x5) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0xa}) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000200)) 5.082200093s ago: executing program 2 (id=457): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) linkat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x20400, 0x20) fdatasync(r0) 4.980180054s ago: executing program 2 (id=458): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000840)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00220f000000540b4550182195f51584b3"], 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, &(0x7f00000000c0)={0x3, 0xffffffff, 0x3, 0x4, 0x21185045, 0x4}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) 4.295003402s ago: executing program 4 (id=463): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(r2, 0x4068aea3, &(0x7f0000000140)) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [{0x400000b0, 0x0, 0x8003}, {0x400000b1, 0x0, 0x2000000000d}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.961809805s ago: executing program 4 (id=464): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r1, 0x0, 0x8, 0x0) syz_open_procfs(r1, &(0x7f00000002c0)='fdinfo/3\x00') syz_open_procfs(r1, &(0x7f0000000040)='attr/prev\x00') 3.598940269s ago: executing program 4 (id=466): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000000080)="00012c615bc20000") syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB="420601"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RSTATu(0xffffffffffffffff, &(0x7f00000004c0)={0x293, 0x7d, 0x0, {{0x500, 0xf0, 0x0, 0x0, {}, 0x0, 0x40000, 0x0, 0x0, 0x1f, ' nodev{cvfox\x92\xff\xff\xff\x81\x02\x00\x00\x00\x00\x001\xff\xce\xbc\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05\xf7\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00;Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1', 0x12, '\xcf\xc2\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3\x13\xf6\x00', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xd4\x89\xdad\x9a7\x00'}, 0x12c, 'odev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x232) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) read$char_usb(r1, &(0x7f0000000480)=""/74, 0x49) 2.363561103s ago: executing program 2 (id=467): syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f0000000140)) socket(0x10, 0x803, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x2) syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0200", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x5a, &(0x7f0000000540)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x24, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0x4, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @exp_smc={0xfe, 0x6}]}}}}}}}}, 0x0) 2.261380304s ago: executing program 2 (id=468): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74, r2}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STATS_ENABLED={0x5, 0x2a, 0x1}]}}}]}, 0x3c}}, 0x0) r3 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @random="a538f3ff4632", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x2, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, {0x22, 0x7c, 0x0, @local}}}}}, 0x0) sendmsg(r3, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) 2.115047077s ago: executing program 2 (id=469): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1fa, 0x1, 0x0, 0x2000, &(0x7f0000fe5000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d01, 0x0, 0x2e3}]}) syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x61) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.900684799s ago: executing program 2 (id=471): r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000090000402505a8a440000102030109021b00010100000009040000020701010009050102"], 0x0) syz_open_dev$usbfs(0x0, 0x76, 0x101301) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000000)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) userfaultfd(0x1) syz_usb_connect(0x5, 0x24, &(0x7f0000001280)=ANY=[@ANYBLOB="12010003001f66088f0510660548020003010902"], 0x0) 1.299060785s ago: executing program 6 (id=477): r0 = memfd_create(0x0, 0x2) writev(r0, 0x0, 0x0) io_setup(0x443, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0) syz_mount_image$fuse(0x0, 0x0, 0x1000402, 0x0, 0x1, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@multicast, @random="8a0a63cdec59", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}, @remote}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000380)={@local, @random="06ac0111cfab", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x8}, @remote, @local, @remote}}}}, 0x0) 1.203007337s ago: executing program 6 (id=479): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002540)={0x73622a85, 0x1114, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x20, 0x0, &(0x7f0000002580)=[@request_death, @clear_death], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000200)="0ebc406132894962fe4f10af9cd970fa80895a0ab6cabf63e8c52104572f16d388de2d4fe7c4809b5dcab54b1bcb5717be26fb12d870a9fe153b944434f40330f4912fae6ed2a57383f0e385ad2ba4d7"}) 1.177022407s ago: executing program 6 (id=480): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x46, &(0x7f0000000000)={@multicast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x64, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x19}}, @time_exceeded={0x5, 0xea452954ff7d0934, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0xd, 0x1, 0x1, @dev={0xac, 0x14, 0x14, 0x9a}, @remote}, "001863714ab99043"}}}}}, 0x0) 1.103341668s ago: executing program 5 (id=481): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010002000000000000000000000a20000000000a0500000000000000000001000000f5ff7caf73797a30000000004c000000090a010400000000000000000100000008000a4000000003"], 0x94}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xe}, {0x5, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0xc0000000, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xd3ee}, @TCA_FQ_PIE_TARGET={0x8, 0x3, 0x4}]}}]}, 0x44}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.050987089s ago: executing program 6 (id=482): r0 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000240)={0x1, 0x0, [{0x4, 0x4, 0x0, 0x0, @irqchip={0xfffffffc, 0x3}}]}) r2 = eventfd2(0x8, 0x1) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000080)={r2, 0x4}) write$eventfd(r2, &(0x7f0000000080)=0x430f, 0x8) 869.11857ms ago: executing program 6 (id=483): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x214802, &(0x7f0000000980)={[{@nojournal_checksum}, {@nombcache}, {@barrier}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@usrquota}, {@noauto_da_alloc}, {@bh}, {@init_itable}]}, 0xff, 0x551, &(0x7f0000000cc0)="$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") open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x2a) chown(&(0x7f0000000080)='./file1\x00', 0x0, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) unlink(&(0x7f0000000100)='./file1\x00') 868.84093ms ago: executing program 4 (id=484): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=@newlink={0x38, 0x10, 0x439, 0x0, 0x60000, {0x0, 0x0, 0x0, r3, 0x9801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @remote}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_route(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)=@bridge_delneigh={0x3c, 0x1c, 0xc07, 0x50bd2e, 0x25dfdbfe, {0x2, 0x0, 0x0, r3, 0x4, 0x10, 0x8}, [@NDA_DST_IPV6={0x14, 0x1, @mcast2}, @NDA_LLADDR={0xa, 0x2, @broadcast}]}, 0x3c}}, 0x20024090) 475.647455ms ago: executing program 4 (id=485): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000040), &(0x7f0000000180)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 386.996125ms ago: executing program 5 (id=486): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x40}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd25, 0x25df9bfb, {0x0, 0x0, 0x0, r3, {0xd, 0xe}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0x54, 0x2, [@TCA_ROUTE4_ACT={0x50, 0x6, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xa, 0x5, 0x20, 0x7, 0x8}, 0x39}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xfc, 0x3}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8010}, 0x4000) 386.796385ms ago: executing program 6 (id=487): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = eventfd2(0xffffffff, 0x80800) r3 = eventfd2(0xfffffffd, 0x80000) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000040)={r3, 0x8, 0x2, r2}) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r3, 0x6, 0x0, r2}) 282.079747ms ago: executing program 4 (id=488): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022d000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) socket$inet(0x2, 0x3, 0x5) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000003850000002c00000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x40040) ioctl$HIDIOCGUSAGE(r1, 0x501c4814, &(0x7f0000000000)={0x2, 0xffffffff, 0x0, 0xfffff800}) 192.508498ms ago: executing program 5 (id=489): syz_open_dev$loop(0x0, 0x7, 0x180862) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000500)={0xa0, 0x0, 0x0, {{0x6, 0x0, 0x2, 0x6, 0x7, 0xfe380000, {0x0, 0x10000, 0x6, 0x2, 0x0, 0x0, 0x6, 0x60d, 0x0, 0x8000, 0x10, 0x0, 0x0, 0x0, 0x400}}}}, 0xa0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 110.929629ms ago: executing program 5 (id=490): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x2, 0xfffd, 0x1, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x78, 0x24, 0xd0f, 0x70bd2c, 0x25dfdbfb, {0x60, 0x0, 0x0, r2, {}, {0xffe0, 0xa}, {0x8, 0xe}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x18, 0x3, 0x8, 0x800}, 0x7, 0x0, 0x75541b46, 0x4, 0x8, 0x18, 0x12, 0x8, 0x1, 0x1, {0x4, 0x38e1, 0xfffffbfd, 0xc, 0x7, 0x80000001}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x55}, 0xc010) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) write$binfmt_misc(r3, &(0x7f0000000040), 0xfe46) 90.621289ms ago: executing program 5 (id=491): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x845, 0x9, 0xfffffffffffffffd, 0x8, 0x10000, 0x0, 0x4002004c2, 0x2000000001000, 0x1400000000000000, 0x0, 0x3fd, 0x80, 0x3, 0x0, 0x8, 0x4000000000008d], 0x100000, 0x80}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 0s ago: executing program 5 (id=492): syz_usb_connect(0x0, 0x24, &(0x7f0000000900)=ANY=[@ANYBLOB="120100004b41460860163209ea800102030109021e0001000000000904", @ANYRES16], 0x0) r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$SYNC_IOC_FILE_INFO(0xffffffffffffffff, 0xc0383e04, 0x0) kernel console output (not intermixed with test programs): recommended to keep mac addresses unique to avoid problems! [ 66.601945][ T4202] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.618491][ T559] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.626796][ T559] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.634956][ T559] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.642995][ T4229] Bluetooth: hci4: command 0x040f tx timeout [ 66.645081][ T559] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.653001][ T4229] Bluetooth: hci1: command 0x040f tx timeout [ 66.660399][ T559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.679564][ T4202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.692775][ T4202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.702723][ T4202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.713223][ T4202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.723892][ T4202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.734483][ T4202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.744646][ T4202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.755404][ T4202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.769317][ T4202] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.785839][ T559] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.786707][ T151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.803319][ T151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.804648][ T559] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.821604][ T559] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.830007][ T559] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.838240][ T559] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.850591][ T4202] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.866342][ T4202] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.875921][ T4202] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.886365][ T4202] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.898519][ T559] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.942176][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.964576][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.993258][ T559] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.004548][ T559] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.010477][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.027321][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.085995][ T1214] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.096293][ T1214] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.141042][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.169758][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.202441][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.214611][ T4277] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 67.223644][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.304686][ T151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.317015][ T151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.327135][ T559] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.527056][ T4290] syz.2.8 uses obsolete (PF_INET,SOCK_PACKET) [ 67.748164][ T23] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 67.965799][ T4280] loop1: detected capacity change from 0 to 32768 [ 68.004919][ T4280] ======================================================= [ 68.004919][ T4280] WARNING: The mand mount option has been deprecated and [ 68.004919][ T4280] and is ignored by this kernel. Remove the mand [ 68.004919][ T4280] option from the mount to silence this warning. [ 68.004919][ T4280] ======================================================= [ 68.056028][ T4285] loop0: detected capacity change from 0 to 32768 [ 68.145037][ T4280] XFS (loop1): Mounting V5 Filesystem [ 68.156743][ T4285] XFS (loop0): Mounting V5 Filesystem [ 68.178610][ T23] usb 4-1: unable to get BOS descriptor or descriptor too short [ 68.249629][ T4231] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 68.283095][ T23] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 185, changing to 7 [ 68.286426][ T4294] loop4: detected capacity change from 0 to 32768 [ 68.332286][ T4285] XFS (loop0): Ending clean mount [ 68.358354][ T4294] XFS (loop4): Mounting V5 Filesystem [ 68.391049][ T4280] XFS (loop1): Ending clean mount [ 68.454348][ T4294] XFS (loop4): Ending clean mount [ 68.499831][ T4189] XFS (loop0): Unmounting Filesystem [ 68.558420][ T23] usb 4-1: string descriptor 0 read error: -22 [ 68.577148][ T4323] XFS (loop4): User initiated shutdown received. [ 68.606804][ T4323] XFS (loop4): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x6d/0x150 (fs/xfs/xfs_fsops.c:495). Shutting down filesystem. [ 68.628680][ T23] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 68.638787][ T4267] Bluetooth: hci3: command 0x0419 tx timeout [ 68.646062][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.649638][ T4323] XFS (loop4): Please unmount the filesystem and rectify the problem(s) [ 68.658345][ T21] Bluetooth: hci0: command 0x0419 tx timeout [ 68.689610][ T21] Bluetooth: hci2: command 0x0419 tx timeout [ 68.702097][ T4231] usb 3-1: unable to get BOS descriptor or descriptor too short [ 68.729109][ T21] Bluetooth: hci1: command 0x0419 tx timeout [ 68.744617][ T4195] XFS (loop1): Unmounting Filesystem [ 68.753768][ T21] Bluetooth: hci4: command 0x0419 tx timeout [ 68.858636][ T4231] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 68.870670][ T4231] usb 3-1: can't read configurations, error -71 [ 69.526509][ T4328] loop0: detected capacity change from 0 to 131072 [ 69.575642][ T4328] F2FS-fs (loop0): invalid crc value [ 69.587316][ T4328] F2FS-fs (loop0): Found nat_bits in checkpoint [ 69.632219][ T4328] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 69.685264][ T4202] XFS (loop4): Unmounting Filesystem [ 70.065616][ T4350] loop2: detected capacity change from 0 to 4096 [ 70.271482][ T23] usb 4-1: BAAD HEADSET c_chmask mismatch [ 70.293732][ T4357] loop1: detected capacity change from 0 to 256 [ 70.379801][ T23] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 70.395462][ T4357] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 70.429802][ T4357] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 70.490871][ T4266] udevd[4266]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 70.512766][ T4357] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5bf, utbl_chksum : 0xe619d30d) [ 70.599124][ T23] usb 4-1: USB disconnect, device number 2 [ 70.656352][ T4362] loop2: detected capacity change from 0 to 16 [ 70.669050][ T1336] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 70.698372][ T4362] erofs: (device loop2): mounted with root inode @ nid 36. [ 70.937913][ T1336] usb 5-1: Using ep0 maxpacket: 32 [ 71.078682][ T1336] usb 5-1: config 4 has an invalid interface number: 201 but max is 0 [ 71.087403][ T1336] usb 5-1: config 4 has no interface number 0 [ 71.093885][ T1336] usb 5-1: config 4 interface 201 has no altsetting 0 [ 71.209604][ T4376] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 71.218196][ T23] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 71.225902][ T4376] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 71.235339][ T4380] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 71.243531][ T4380] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 71.298163][ T1336] usb 5-1: New USB device found, idVendor=47ed, idProduct=31ab, bcdDevice=a6.55 [ 71.307251][ T1336] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.325864][ T1336] usb 5-1: Product: syz [ 71.337777][ T1336] usb 5-1: Manufacturer: syz [ 71.342515][ T1336] usb 5-1: SerialNumber: syz [ 71.373511][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.457982][ T23] usb 3-1: Using ep0 maxpacket: 32 [ 71.578047][ T23] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 71.587881][ T23] usb 3-1: config 0 has no interface number 0 [ 71.671548][ T1336] usb 5-1: USB disconnect, device number 2 [ 71.705995][ T4397] loop1: detected capacity change from 0 to 4096 [ 71.758358][ T23] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 71.789132][ T4271] wlan1: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 71.800899][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.809508][ T23] usb 3-1: Product: syz [ 71.815885][ T23] usb 3-1: Manufacturer: syz [ 71.821302][ T23] usb 3-1: SerialNumber: syz [ 71.828127][ T4271] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.846602][ T23] usb 3-1: config 0 descriptor?? [ 71.853249][ T4271] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.899334][ T23] smsc95xx v2.0.0 [ 72.028735][ T4407] vivid-006: disconnect [ 72.066057][ T4195] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22. [ 72.075034][ T4195] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 72.338047][ T23] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 72.352016][ T4413] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4068521576 (4068521576 ns) > initial count (2794446801 ns). Using initial count to start timer. [ 72.374178][ T23] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 72.435134][ T4409] kvm [4408]: vcpu0, guest rIP: 0x9114 disabled perfctr wrmsr: 0xc2 data 0x9d00 [ 72.465365][ T4409] kvm [4408]: vcpu0, guest rIP: 0x9114 disabled perfctr wrmsr: 0xc1 data 0x9d00 [ 72.502613][ T4409] APIC base relocation is unsupported by KVM [ 72.809080][ T4406] vivid-006: reconnect [ 73.075325][ T4435] loop0: detected capacity change from 0 to 512 [ 73.213586][ T4435] EXT4-fs (loop0): Ignoring removed bh option [ 73.288058][ T23] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000108: -71 [ 73.322935][ T4435] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpjquota=,nogrpid,bh,,errors=continue. Quota mode: writeback. [ 73.338058][ T4435] ext4 filesystem being mounted at /10/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 73.349885][ T23] smsc95xx: probe of 3-1:0.67 failed with error -71 [ 73.457177][ T4449] EXT4-fs (loop0): shut down requested (2) [ 73.467597][ T23] usb 3-1: USB disconnect, device number 4 [ 73.896683][ T4439] loop4: detected capacity change from 0 to 32768 [ 74.012016][ T4439] XFS (loop4): Mounting V5 Filesystem [ 74.110301][ T4439] XFS (loop4): Ending clean mount [ 74.267226][ T4439] XFS (loop4): User initiated shutdown received. [ 74.301592][ T4439] XFS (loop4): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x6d/0x150 (fs/xfs/xfs_fsops.c:495). Shutting down filesystem. [ 74.331846][ T4439] XFS (loop4): Please unmount the filesystem and rectify the problem(s) [ 74.430242][ T4202] XFS (loop4): Unmounting Filesystem [ 74.750457][ T4483] Illegal XDP return value 4294967274, expect packet loss! [ 75.020075][ T4494] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 75.084604][ T4494] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 75.172131][ T4489] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 75.204360][ T4489] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 75.468032][ T7] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 75.638802][ T4510] netlink: 'syz.2.71': attribute type 1 has an invalid length. [ 75.898253][ T7] usb 1-1: unable to get BOS descriptor or descriptor too short [ 76.044189][ T4491] loop1: detected capacity change from 0 to 40427 [ 76.103514][ T4522] capability: warning: `syz.4.76' uses deprecated v2 capabilities in a way that may be insecure [ 76.115236][ T4491] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 76.123147][ T4491] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 76.145986][ T4522] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 76.156768][ T4491] F2FS-fs (loop1): invalid crc value [ 76.210749][ T4491] F2FS-fs (loop1): Found nat_bits in checkpoint [ 76.218019][ T7] usb 1-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 76.227389][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.236217][ T7] usb 1-1: Product: syz [ 76.247778][ T7] usb 1-1: Manufacturer: syz [ 76.252417][ T7] usb 1-1: SerialNumber: syz [ 76.392750][ T4491] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 76.415280][ T4491] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 76.802217][ T4551] loop4: detected capacity change from 0 to 512 [ 76.938730][ T4555] loop2: detected capacity change from 0 to 512 [ 76.963353][ T4551] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 76.992871][ T4551] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 76.999673][ T4555] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 77.074725][ T4555] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.89: bg 0: block 255: padding at end of block bitmap is not set [ 77.074778][ T4551] System zones: 0-1, 15-15, 18-18, 34-34 [ 77.139202][ T4551] EXT4-fs (loop4): orphan cleanup on readonly fs [ 77.145673][ T4551] Quota error (device loop4): v2_read_header: Failed header read: expected=8 got=0 [ 77.204790][ T4555] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 77.209190][ T4549] loop3: detected capacity change from 0 to 32768 [ 77.239850][ T4551] EXT4-fs warning (device loop4): ext4_enable_quotas:6488: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 77.277348][ T4555] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.89: invalid indirect mapped block 65536 (level 0) [ 77.284186][ T4549] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.85 (4549) [ 77.321313][ T4551] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 77.343533][ T4551] EXT4-fs (loop4): 1 truncate cleaned up [ 77.370049][ T4555] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.89: invalid indirect mapped block 32768 (level 2) [ 77.386872][ T4551] EXT4-fs (loop4): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000008,,errors=continue. Quota mode: writeback. [ 77.412822][ T4555] EXT4-fs (loop2): 1 truncate cleaned up [ 77.460576][ T4555] EXT4-fs (loop2): mounted filesystem without journal. Opts: lazytime,,errors=continue. Quota mode: none. [ 77.495849][ T4551] fscrypt (loop4, inode 16): Error -61 getting encryption context [ 77.547463][ T4549] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 77.597950][ T4549] BTRFS info (device loop3): enabling auto defrag [ 77.614642][ T4549] BTRFS info (device loop3): use no compression [ 77.634925][ T4549] BTRFS info (device loop3): max_inline at 4096 [ 77.648462][ T4549] BTRFS info (device loop3): using free space tree [ 77.652755][ T7] usb 1-1: current rate 48014 is different from the runtime rate 48000 [ 77.665640][ T4549] BTRFS info (device loop3): has skinny extents [ 77.670403][ T4553] loop1: detected capacity change from 0 to 32768 [ 77.779358][ T4570] UBIFS error (pid: 4570): cannot open "./file0", error -22 [ 77.814050][ T4576] loop4: detected capacity change from 0 to 512 [ 77.867606][ T4553] XFS (loop1): Mounting V5 Filesystem [ 77.918287][ T21] usb 1-1: USB disconnect, device number 2 [ 77.971410][ T4576] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 78.000871][ T4549] BTRFS info (device loop3): enabling ssd optimizations [ 78.009016][ T4553] XFS (loop1): Ending clean mount [ 78.041710][ T4576] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.170813][ T26] audit: type=1800 audit(1778171605.127:2): pid=4553 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.88" name="file1" dev="loop1" ino=4426 res=0 errno=0 [ 78.192806][ T4359] udevd[4359]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 78.236085][ T4598] EXT4-fs error (device loop4): ext4_get_first_dir_block:3619: inode #12: comm syz.4.91: directory missing '..' [ 78.287101][ T26] audit: type=1804 audit(1778171605.197:3): pid=4553 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.88" name="/newroot/20/file1/bus/file1" dev="loop1" ino=4426 res=1 errno=0 [ 78.325180][ T4553] syz.1.88 (4553) used greatest stack depth: 19952 bytes left [ 78.336139][ T4195] XFS (loop1): Unmounting Filesystem [ 78.800519][ T4618] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 79.059172][ T4625] loop0: detected capacity change from 0 to 64 [ 79.377516][ T4614] loop4: detected capacity change from 0 to 32768 [ 79.399067][ T4614] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.99 (4614) [ 79.446172][ T4634] overlayfs: upper fs needs to support d_type. [ 79.487647][ T4614] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 79.496423][ T4625] loop_set_status: loop0 () has still dirty pages (nrpages=1) [ 79.512622][ T4634] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 79.525920][ T4634] overlayfs: failed to set xattr on upper [ 79.552175][ T4634] overlayfs: ...falling back to index=off,metacopy=off. [ 79.554686][ T4614] BTRFS info (device loop4): using free space tree [ 79.578768][ T4614] BTRFS info (device loop4): has skinny extents [ 79.711788][ T4657] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 79.747550][ T4654] loop2: detected capacity change from 0 to 512 [ 79.835733][ T4654] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #12: comm syz.2.105: missing EA_INODE flag [ 79.994445][ T4614] BTRFS info (device loop4): enabling ssd optimizations [ 80.019742][ T4654] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.105: error while reading EA inode 12 err=-117 [ 80.080560][ T4654] EXT4-fs (loop2): 1 orphan inode deleted [ 80.116950][ T4654] EXT4-fs (loop2): mounted filesystem without journal. Opts: nombcache,nogrpid,,errors=continue. Quota mode: writeback. [ 80.123742][ T4674] loop3: detected capacity change from 0 to 512 [ 80.266794][ T4674] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 80.353513][ T4681] input: syz0 as /devices/virtual/input/input5 [ 80.408476][ T4674] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.765699][ T4692] loop3: detected capacity change from 0 to 256 [ 80.826103][ T4692] exfat: Deprecated parameter 'namecase' [ 80.922715][ T4692] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 80.955466][ T4699] device ipip0 entered promiscuous mode [ 81.067285][ T4697] loop2: detected capacity change from 0 to 4096 [ 81.159415][ T4706] loop4: detected capacity change from 0 to 512 [ 81.213403][ T4708] loop3: detected capacity change from 0 to 256 [ 81.282193][ T4706] EXT4-fs error (device loop4): ext4_orphan_get:1406: inode #15: comm syz.4.120: iget: bad i_size value: 38620345925642 [ 81.320211][ T4706] EXT4-fs error (device loop4): ext4_orphan_get:1411: comm syz.4.120: couldn't read orphan inode 15 (err -117) [ 81.363467][ T4708] FAT-fs (loop3): Directory bread(block 64) failed [ 81.438978][ T4708] FAT-fs (loop3): Directory bread(block 65) failed [ 81.445643][ T4708] FAT-fs (loop3): Directory bread(block 66) failed [ 81.481801][ T4706] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 81.517840][ T4708] FAT-fs (loop3): Directory bread(block 67) failed [ 81.524486][ T4708] FAT-fs (loop3): Directory bread(block 68) failed [ 81.597408][ T4708] FAT-fs (loop3): Directory bread(block 69) failed [ 81.601668][ T1111] cfg80211: failed to load regulatory.db [ 81.660552][ T4715] loop1: detected capacity change from 0 to 1024 [ 81.680306][ T4716] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.120: bg 0: block 5: invalid block bitmap [ 81.698531][ T4708] FAT-fs (loop3): Directory bread(block 70) failed [ 81.714300][ T4708] FAT-fs (loop3): Directory bread(block 71) failed [ 81.741547][ T4708] FAT-fs (loop3): Directory bread(block 72) failed [ 81.764707][ T4716] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 244 with error 28 [ 81.767681][ T4708] FAT-fs (loop3): Directory bread(block 73) failed [ 81.790013][ T4715] EXT4-fs (loop1): Ignoring removed bh option [ 81.839547][ T4716] EXT4-fs (loop4): This should not happen!! Data will be lost [ 81.839547][ T4716] [ 81.864592][ T4715] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000010,bh,init_itable,. Quota mode: none. [ 81.887788][ T4716] EXT4-fs (loop4): Total free blocks count 0 [ 81.908038][ T4716] EXT4-fs (loop4): Free/Dirty block details [ 81.911744][ T4722] af_packet: tpacket_rcv: packet too big, clamped from 343 to 4294967286. macoff=82 [ 81.914024][ T4716] EXT4-fs (loop4): free_blocks=0 [ 81.948095][ T4716] EXT4-fs (loop4): dirty_blocks=244 [ 81.953445][ T4716] EXT4-fs (loop4): Block reservation details [ 82.000313][ T4716] EXT4-fs (loop4): i_reserved_data_blocks=244 [ 82.055536][ T26] audit: type=1800 audit(1778171609.007:4): pid=4715 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.123" name=".log" dev="loop1" ino=18 res=0 errno=0 [ 82.060704][ T4715] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2807: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 82.184180][ T4701] loop0: detected capacity change from 0 to 32768 [ 82.328373][ T4701] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.117 (4701) [ 82.577965][ T4701] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 82.586649][ T4701] BTRFS info (device loop0): using free space tree [ 82.667774][ T4701] BTRFS info (device loop0): has skinny extents [ 82.701285][ T4741] Bluetooth: hci0: service_discovery: too big uuid_count value 63764 [ 82.720949][ T4739] EXT4-fs (loop3): Ignoring removed nobh option [ 82.829761][ T4739] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,nobh,,errors=continue. Quota mode: writeback. [ 82.900648][ T4739] ext4 filesystem being mounted at /20/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 83.063463][ T4701] BTRFS info (device loop0): enabling ssd optimizations [ 83.138590][ T4739] EXT4-fs error (device loop3): ext4_find_dest_de:2115: inode #2: block 3: comm syz.3.131: bad entry in directory: inode out of bounds - offset=92, inode=117440528, rec_len=16, size=2048 fake=0 [ 83.165440][ T4729] XFS (loop4): Mounting V5 Filesystem [ 83.263163][ T4729] XFS (loop4): Ending clean mount [ 83.298207][ T4701] BTRFS warning (device loop0): can't set the free_space_tree,verity feature bits while mounted [ 83.368913][ T4729] XFS (loop4): Quotacheck needed: Please wait. [ 83.566811][ T4729] XFS (loop4): Quotacheck: Done. [ 83.896789][ T4202] XFS (loop4): Unmounting Filesystem [ 84.473543][ T4789] set_capacity_and_notify: 3 callbacks suppressed [ 84.473565][ T4789] loop3: detected capacity change from 0 to 131072 [ 84.530226][ T4789] F2FS-fs (loop3): invalid crc value [ 84.649701][ T4789] F2FS-fs (loop3): Found nat_bits in checkpoint [ 84.701638][ T4789] F2FS-fs (loop3): Cannot turn on quotas: -2 on 2 [ 84.738535][ T4789] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 84.761757][ T4788] loop2: detected capacity change from 0 to 32768 [ 85.082773][ T4788] XFS (loop2): Mounting V5 Filesystem [ 85.243019][ T4788] XFS (loop2): Ending clean mount [ 85.250514][ T4793] loop1: detected capacity change from 0 to 40427 [ 85.345098][ T4793] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 85.407548][ T4793] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 85.508107][ T4793] F2FS-fs (loop1): invalid crc value [ 85.639624][ T4793] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 85.661414][ T4194] XFS (loop2): Unmounting Filesystem [ 85.685136][ T4804] loop4: detected capacity change from 0 to 131072 [ 85.785305][ T4793] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 85.807978][ T4804] F2FS-fs (loop4): invalid crc value [ 85.815102][ T4793] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 85.906456][ T4804] F2FS-fs (loop4): Found nat_bits in checkpoint [ 85.967878][ T4804] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 86.036364][ T4195] attempt to access beyond end of device [ 86.036364][ T4195] loop1: rw=2049, want=45104, limit=40427 [ 86.551652][ T4833] loop0: detected capacity change from 0 to 256 [ 86.650520][ T4835] loop3: detected capacity change from 0 to 1024 [ 86.695749][ T4835] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 86.713231][ T4837] binfmt_misc: register: failed to install interpreter file éq‰Y’3aK [ 86.738865][ T4833] FAT-fs (loop0): Directory bread(block 64) failed [ 86.745449][ T4833] FAT-fs (loop0): Directory bread(block 65) failed [ 86.774117][ T4835] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (27642!=20869) [ 86.774671][ T4839] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 86.799958][ T4835] JBD2: no valid journal superblock found [ 86.827877][ T4833] FAT-fs (loop0): Directory bread(block 66) failed [ 86.847617][ T4835] EXT4-fs (loop3): error loading journal [ 86.857078][ T4833] FAT-fs (loop0): Directory bread(block 67) failed [ 86.883613][ T4833] FAT-fs (loop0): Directory bread(block 68) failed [ 86.904116][ T4833] FAT-fs (loop0): Directory bread(block 69) failed [ 86.924067][ T4833] FAT-fs (loop0): Directory bread(block 70) failed [ 86.931237][ T4833] FAT-fs (loop0): Directory bread(block 71) failed [ 86.968028][ T4833] FAT-fs (loop0): Directory bread(block 72) failed [ 87.002524][ T4833] FAT-fs (loop0): Directory bread(block 73) failed [ 87.008951][ T4842] loop1: detected capacity change from 0 to 2048 [ 87.129701][ T4846] xt_hashlimit: size too large, truncated to 1048576 [ 87.191405][ T4842] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 87.963997][ T4865] loop3: detected capacity change from 0 to 8 [ 88.133484][ T4865] SQUASHFS error: Failed to read block 0x2d7: -5 [ 88.149461][ T4865] SQUASHFS error: Unable to read metadata cache entry [2d5] [ 88.698522][ T4877] device macvlan2 entered promiscuous mode [ 88.737898][ T4879] loop4: detected capacity change from 0 to 8 [ 88.738916][ T4798] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 88.784041][ T4879] SQUASHFS error: lzo decompression failed, data probably corrupt [ 88.843112][ T4879] SQUASHFS error: Failed to read block 0x91: -5 [ 88.853206][ T4879] SQUASHFS error: Unable to read metadata cache entry [8f] [ 88.873520][ T4879] SQUASHFS error: Unable to read inode 0x11f [ 88.915972][ T4881] loop3: detected capacity change from 0 to 7 [ 88.949616][ T4881] Dev loop3: unable to read RDB block 7 [ 88.955470][ T4881] loop3: unable to read partition table [ 88.993577][ T4881] loop3: partition table beyond EOD, truncated [ 89.007891][ T4798] usb 1-1: Using ep0 maxpacket: 8 [ 89.052563][ T4881] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 89.256092][ T4875] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 89.293573][ T4875] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 89.332201][ T4875] F2FS-fs (loop3): invalid crc value [ 89.338079][ T4798] usb 1-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 89.355769][ T4798] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.373507][ T4798] usb 1-1: Product: syz [ 89.374962][ T4875] F2FS-fs (loop3): Found nat_bits in checkpoint [ 89.382703][ T4798] usb 1-1: Manufacturer: syz [ 89.396145][ T4798] usb 1-1: SerialNumber: syz [ 89.480627][ T4875] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 89.492978][ T4875] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 89.755375][ T4193] attempt to access beyond end of device [ 89.755375][ T4193] loop3: rw=2049, want=40968, limit=40427 [ 89.863364][ T4798] usb 1-1: selecting invalid altsetting 1 [ 89.908705][ T4798] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 89.932502][ T4798] usb 1-1: USB disconnect, device number 3 [ 90.212601][ T4274] udevd[4274]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 90.511856][ T4913] syzkaller0: tun_chr_ioctl cmd 2147767506 [ 90.748014][ T4229] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 90.782605][ T4924] set_capacity_and_notify: 1 callbacks suppressed [ 90.782620][ T4924] loop0: detected capacity change from 0 to 16 [ 90.821166][ T4924] erofs: (device loop0): mounted with root inode @ nid 36. [ 91.074912][ T4930] loop3: detected capacity change from 0 to 2048 [ 91.107461][ T4932] loop0: detected capacity change from 0 to 16 [ 91.118062][ T4229] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 91.130945][ T4229] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 91.137280][ T4917] loop2: detected capacity change from 0 to 32768 [ 91.153929][ T4930] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 91.217276][ T4932] erofs: (device loop0): mounted with root inode @ nid 36. [ 91.245031][ T4917] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.178 (4917) [ 91.248136][ T4229] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 91.289275][ T26] audit: type=1800 audit(1778171618.247:5): pid=4930 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.184" name="file1" dev="loop3" ino=1415 res=0 errno=0 [ 91.303816][ T4229] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 91.357413][ T4932] erofs: (device loop0): find_target_block_classic: corrupted dir block 72 @ nid 36 [ 91.378639][ T4229] usb 2-1: Manufacturer: syz [ 91.399652][ T4229] usb 2-1: config 0 descriptor?? [ 91.417806][ T4917] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 91.445633][ T4917] BTRFS info (device loop2): turning off barriers [ 91.494889][ T4917] BTRFS info (device loop2): setting nodatasum [ 91.515743][ T4938] loop5: detected capacity change from 0 to 7 [ 91.537682][ T4917] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 91.551195][ T4917] BTRFS info (device loop2): use zstd compression, level 3 [ 91.574167][ T4917] BTRFS info (device loop2): using free space tree [ 91.582772][ T4917] BTRFS info (device loop2): has skinny extents [ 91.597064][ T4938] loop5: p1 p3 p4 [ 91.602607][ T4938] loop5: partition table partially beyond EOD, truncated [ 91.618130][ T4938] loop5: p3 size 8 extends beyond EOD, truncated [ 91.626703][ T4938] loop5: p4 start 58801 is beyond EOD, truncated [ 91.757588][ T4360] udevd[4360]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 91.805049][ T4266] udevd[4266]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 91.810668][ T4934] loop4: detected capacity change from 0 to 32768 [ 91.821479][ T4799] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 91.876502][ T4346] loop4: p1 p3 < > [ 91.885545][ T4957] loop3: detected capacity change from 0 to 8192 [ 91.912216][ T4957] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 91.922146][ T4957] REISERFS (device loop3): using ordered data mode [ 91.928782][ T4957] reiserfs: using flush barriers [ 91.939231][ T4957] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 91.952317][ T4934] loop4: p1 p3 < > [ 91.957455][ T4957] REISERFS (device loop3): checking transaction log (loop3) [ 91.966513][ T26] audit: type=1804 audit(1778171618.917:6): pid=4963 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.178" name="/newroot/40/file0/cgroup.controllers" dev="loop2" ino=263 res=1 errno=0 [ 92.087559][ T4957] REISERFS (device loop3): Using tea hash to sort names [ 92.115941][ T4957] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 92.448024][ T4799] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 92.457439][ T4799] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.480283][ T4595] udevd[4595]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 92.485406][ T4266] udevd[4266]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 92.501312][ T4799] usb 1-1: Product: syz [ 92.505505][ T4799] usb 1-1: Manufacturer: syz [ 92.514800][ T4799] usb 1-1: SerialNumber: syz [ 92.543159][ T4968] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 92.566183][ T4595] udevd[4595]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 92.579784][ T4799] usb 1-1: config 0 descriptor?? [ 92.584235][ T4229] input: syz Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0001/input/input6 [ 92.591859][ T4266] udevd[4266]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 92.614671][ T4968] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 92.683409][ T4229] input: syz Pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0001/input/input7 [ 92.753510][ T4229] uclogic 0003:256C:006D.0001: input,hidraw0: USB HID v0.00 Keypad [syz] on usb-dummy_hcd.1-1/input0 [ 92.817083][ T1336] usb 2-1: USB disconnect, device number 2 [ 92.920695][ T4978] loop2: detected capacity change from 0 to 16 [ 92.937514][ T4976] fido_id[4976]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 93.022702][ T4978] erofs: (device loop2): mounted with root inode @ nid 36. [ 93.235676][ T4980] loop3: detected capacity change from 0 to 32768 [ 93.273988][ T4985] tipc: Started in network mode [ 93.279497][ T1108] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 93.281173][ T4985] tipc: Node identity 9, cluster identity 4711 [ 93.294660][ T4985] tipc: Node number set to 9 [ 93.307961][ T4980] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.193 (4980) [ 93.364492][ T4980] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 93.388518][ T4980] BTRFS info (device loop3): using free space tree [ 93.401670][ T4980] BTRFS info (device loop3): has skinny extents [ 93.529233][ T4971] kernel write not supported for file bpf-prog (pid: 4971 comm: kworker/1:20) [ 93.537862][ T1108] usb 5-1: Using ep0 maxpacket: 8 [ 93.545925][ T4980] BTRFS info (device loop3): enabling ssd optimizations [ 93.696489][ T1336] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 93.736977][ T4799] usb 1-1: ATUSB: AT86RF231 version 17 [ 93.812761][ T4274] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop3 scanned by udevd (4274) [ 93.828528][ T1108] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 93.837630][ T1108] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.866435][ T1108] usb 5-1: Product: syz [ 93.875914][ T1108] usb 5-1: Manufacturer: syz [ 93.882075][ T1108] usb 5-1: SerialNumber: syz [ 93.904940][ T1108] usb 5-1: config 0 descriptor?? [ 93.947971][ T4798] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 93.960897][ T4799] usb 1-1: atusb_control_msg: req 0x00 val 0x0 idx 0x0, error -71 [ 93.969722][ T4799] usb 1-1: Firmware version (0.0) predates our first public release. [ 93.978369][ T4799] usb 1-1: Please update to version 0.2 or newer [ 94.008701][ T4799] usb 1-1: atusb_probe: initialization failed, error = -71 [ 94.028861][ T4799] atusb: probe of 1-1:0.0 failed with error -71 [ 94.041135][ T4799] usb 1-1: USB disconnect, device number 4 [ 94.118043][ T1336] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.134163][ T1336] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 94.159814][ T1108] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 94.170419][ T1336] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 94.184119][ T1336] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 94.194416][ T1336] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.211220][ T1336] usb 2-1: config 0 descriptor?? [ 94.378167][ T4798] usb 3-1: config 0 has no interfaces? [ 94.508092][ T1108] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -71 [ 94.524747][ T1108] usb 5-1: USB disconnect, device number 3 [ 94.568188][ T4798] usb 3-1: New USB device found, idVendor=0e41, idProduct=3061, bcdDevice= 0.40 [ 94.577592][ T4798] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.586112][ T4798] usb 3-1: Product: syz [ 94.590559][ T4798] usb 3-1: Manufacturer: syz [ 94.595268][ T4798] usb 3-1: SerialNumber: syz [ 94.601924][ T4798] usb 3-1: config 0 descriptor?? [ 94.699911][ T1336] plantronics 0003:047F:FFFF.0002: unknown main item tag 0xd [ 94.708866][ T1336] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 94.732448][ T1336] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 94.845446][ T1336] usb 3-1: USB disconnect, device number 5 [ 94.978026][ T1108] usb 2-1: USB disconnect, device number 3 [ 95.287895][ T4632] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 95.527963][ T4632] usb 5-1: Using ep0 maxpacket: 8 [ 95.628045][ T4971] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 97.278541][ T5053] loop2: detected capacity change from 0 to 262144 [ 97.288099][ T4632] usb 5-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 97.297197][ T4632] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.306001][ T4632] usb 5-1: Product: syz [ 97.310835][ T4632] usb 5-1: Manufacturer: syz [ 97.315459][ T4632] usb 5-1: SerialNumber: syz [ 97.324935][ T4632] usb 5-1: config 0 descriptor?? [ 97.370713][ T4632] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 97.379254][ T5053] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop2 scanned by syz.2.218 (5053) [ 97.402766][ T5053] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 97.412388][ T5053] BTRFS info (device loop2): using free space tree [ 97.418980][ T5053] BTRFS info (device loop2): has skinny extents [ 97.425241][ T5053] BTRFS info (device loop2): flagging fs with big metadata feature [ 97.488966][ T4971] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 97.499395][ T4971] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xBA, skipping [ 97.519919][ T5053] BTRFS info (device loop2): enabling ssd optimizations [ 97.533631][ T26] audit: type=1800 audit(1778171624.487:7): pid=5053 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.218" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 97.668096][ T4971] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 97.679426][ T4971] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.688371][ T4971] usb 1-1: Product: syz [ 97.692788][ T4971] usb 1-1: Manufacturer: syz [ 97.699285][ T4971] usb 1-1: SerialNumber: syz [ 97.718407][ T4971] usb 1-1: config 0 descriptor?? [ 97.738104][ T5041] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 97.749403][ T5041] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 97.778702][ T4971] usb 1-1: ucan: probing device on interface #0 [ 97.785018][ T4971] usb 1-1: ucan: invalid EP count (1) [ 97.807808][ T4971] usb 1-1: ucan: probe failed; try to update the device firmware [ 98.286339][ T5107] loop1: detected capacity change from 0 to 32768 [ 98.386124][ T5123] loop2: detected capacity change from 0 to 1024 [ 98.417001][ T5107] XFS (loop1): Mounting V5 Filesystem [ 98.473464][ T5107] XFS (loop1): Ending clean mount [ 98.485192][ T5123] EXT4-fs (loop2): mounted filesystem without journal. Opts: nojournal_checksum,nombcache,barrier,nogrpid,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,usrquota,jqfmt=vfsold,bsdgroups,init_itable,,errors=continue. Quota mode: writeback. [ 98.485370][ T5107] XFS (loop1): Quotacheck needed: Please wait. [ 98.583321][ T5107] XFS (loop1): Quotacheck: Done. [ 98.722633][ T4195] XFS (loop1): Unmounting Filesystem [ 98.937795][ T4632] gspca_sonixj: i2c_w8 err -71 [ 99.024458][ T5111] usb 1-1: USB disconnect, device number 5 [ 99.057965][ T4632] sonixj: probe of 5-1:0.0 failed with error -71 [ 99.080171][ T4632] usb 5-1: USB disconnect, device number 4 [ 99.160851][ T5142] netlink: 'syz.1.236': attribute type 12 has an invalid length. [ 99.169124][ T4689] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 99.184142][ T5142] netlink: 'syz.1.236': attribute type 29 has an invalid length. [ 99.195582][ T5142] netlink: 148 bytes leftover after parsing attributes in process `syz.1.236'. [ 99.216503][ T5142] netlink: 'syz.1.236': attribute type 3 has an invalid length. [ 99.227388][ T5142] Zero length message leads to an empty skb [ 99.391250][ T5070] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 99.500609][ T5156] loop4: detected capacity change from 0 to 128 [ 99.526196][ T5155] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 99.573001][ T4689] usb 3-1: config index 0 descriptor too short (expected 28277, got 36) [ 99.617963][ T4689] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 99.645142][ T4689] usb 3-1: config 0 has no interfaces? [ 99.651309][ T4689] usb 3-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 99.664524][ T4689] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.674817][ T4688] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 99.693601][ T4689] usb 3-1: config 0 descriptor?? [ 99.820739][ T4632] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 99.963429][ T5175] loop4: detected capacity change from 0 to 2048 [ 100.003574][ T5175] EXT4-fs (loop4): Journaled quota options ignored when QUOTA feature is enabled [ 100.055732][ T5175] EXT4-fs (loop4): mounted filesystem without journal. Opts: usrjquota=./file1,noauto_da_alloc,bsddf,,errors=continue. Quota mode: writeback. [ 100.076752][ T4632] usb 4-1: Using ep0 maxpacket: 32 [ 100.078009][ T4688] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 100.095110][ T4688] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.106641][ T4688] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.116712][ T4688] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 100.121572][ T5180] loop0: detected capacity change from 0 to 128 [ 100.137929][ T5175] ext4 filesystem being mounted at /35/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.167195][ T4971] usb 3-1: USB disconnect, device number 6 [ 100.179499][ T5175] fs-verity: sha512 using implementation "sha512-avx2" [ 100.218001][ T4632] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 100.218018][ T4688] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 100.232690][ T4632] usb 4-1: config 0 has no interface number 0 [ 100.237406][ T4688] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 100.251549][ T4688] usb 2-1: Manufacturer: syz [ 100.256160][ T5180] EXT4-fs (loop0): Ignoring removed nobh option [ 100.257961][ T4688] usb 2-1: config 0 descriptor?? [ 100.287050][ T5180] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobh,dioread_lock,,errors=continue. Quota mode: none. [ 100.306290][ T5180] ext4 filesystem being mounted at /48/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 100.324584][ T5180] EXT4-fs warning (device loop0): verify_group_input:147: Cannot add at group 255 (only 1 groups) [ 100.464957][ T4632] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 100.512545][ T4632] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.545224][ T4632] usb 4-1: Product: syz [ 100.552535][ T4632] usb 4-1: Manufacturer: syz [ 100.569206][ T4632] usb 4-1: SerialNumber: syz [ 100.618626][ T4632] usb 4-1: config 0 descriptor?? [ 100.659296][ T4632] smsc95xx v2.0.0 [ 101.102003][ T4632] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 101.114604][ T4632] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 101.125868][ T5185] loop4: detected capacity change from 0 to 131072 [ 101.190994][ T4688] appleir 0003:05AC:8243.0003: unknown main item tag 0x0 [ 101.210176][ T4688] appleir 0003:05AC:8243.0003: No inputs registered, leaving [ 101.223550][ T5185] F2FS-fs (loop4): invalid crc value [ 101.245499][ T4688] appleir 0003:05AC:8243.0003: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 101.283651][ T5185] F2FS-fs (loop4): Found nat_bits in checkpoint [ 101.320124][ T5185] F2FS-fs (loop4): Cannot turn on quotas: -2 on 2 [ 101.336776][ T5185] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 101.411210][ T4688] usb 2-1: USB disconnect, device number 4 [ 101.817937][ T4632] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000020: -71 [ 101.841655][ T4632] smsc95xx: probe of 4-1:0.67 failed with error -71 [ 101.878060][ T4632] usb 4-1: USB disconnect, device number 3 [ 101.950851][ T5210] loop0: detected capacity change from 0 to 512 [ 102.044360][ T5210] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 102.234727][ T5210] EXT4-fs error (device loop0): ext4_quota_enable:6440: comm syz.0.263: Bad quota inum: 2, type: 1 [ 102.313457][ T5210] EXT4-fs warning (device loop0): ext4_enable_quotas:6488: Failed to enable quota tracking (type=1, err=-117, ino=2). Please run e2fsck to fix. [ 102.406970][ T5217] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 102.451377][ T5230] loop4: detected capacity change from 0 to 2048 [ 102.485573][ T5217] EXT4-fs error (device loop0): ext4_quota_enable:6440: comm syz.0.263: Bad quota inum: 2, type: 1 [ 102.526547][ T5217] EXT4-fs warning (device loop0): ext4_enable_quotas:6488: Failed to enable quota tracking (type=1, err=-117, ino=2). Please run e2fsck to fix. [ 102.558471][ T5230] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobarrier,noinit_itable,i_version,init_itable,,errors=continue. Quota mode: none. [ 102.584072][ T5237] loop1: detected capacity change from 0 to 512 [ 102.588290][ T5230] ext4 filesystem being mounted at /38/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.680382][ T26] audit: type=1800 audit(1778171629.637:8): pid=5230 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.261" name="file2" dev="loop4" ino=16 res=0 errno=0 [ 102.872047][ T5237] EXT4-fs (loop1): Test dummy encryption mode enabled [ 102.880150][ T5237] EXT4-fs (loop1): Test dummy encryption mode enabled [ 102.896280][ T5237] EXT4-fs error (device loop1): __ext4_iget:4919: inode #11: block 1: comm syz.1.270: invalid block [ 102.909698][ T5237] EXT4-fs (loop1): Remounting filesystem read-only [ 102.916338][ T5237] EXT4-fs error (device loop1): ext4_orphan_get:1411: comm syz.1.270: couldn't read orphan inode 11 (err -117) [ 102.930591][ T5237] EXT4-fs (loop1): Remounting filesystem read-only [ 102.946391][ T5237] EXT4-fs (loop1): mounted filesystem without journal. Opts: noauto_da_alloc,test_dummy_encryption,nobarrier,bsddf,nodiscard,init_itable=0x0000000000005918,errors=remount-ro,abort,test_dummy_encryption,. Quota mode: none. [ 103.087829][ T4229] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 103.271065][ T5251] loop4: detected capacity change from 0 to 40427 [ 103.286545][ T5251] F2FS-fs (loop4): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 103.295164][ T5251] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 103.324740][ T5251] F2FS-fs (loop4): invalid crc value [ 103.351872][ T5251] F2FS-fs (loop4): Found nat_bits in checkpoint [ 103.386622][ T5251] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 103.394176][ T5251] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 103.459170][ T4229] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.478715][ T4229] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 103.523984][ T4202] attempt to access beyond end of device [ 103.523984][ T4202] loop4: rw=2049, want=45104, limit=40427 [ 103.573349][ T4229] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 103.585933][ T4229] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 103.599917][ T4229] usb 4-1: Manufacturer: syz [ 103.611586][ T4229] usb 4-1: config 0 descriptor?? [ 103.952521][ T5269] loop0: detected capacity change from 0 to 4096 [ 103.979183][ T5263] chnl_net:caif_netlink_parms(): no params data found [ 104.023419][ T5263] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.030751][ T5263] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.040864][ T5263] device bridge_slave_0 entered promiscuous mode [ 104.068015][ T5269] EXT4-fs (loop0): inline encryption not supported [ 104.101303][ T5263] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.108771][ T5263] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.123588][ T5263] device bridge_slave_1 entered promiscuous mode [ 104.158254][ T5263] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.161133][ T5269] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0103] [ 104.171466][ T5263] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.187948][ T5269] System zones: 0-5 [ 104.211627][ T5269] EXT4-fs (loop0): mounted filesystem without journal. Opts: debug,journal_dev=0x0000000000004ce9,inlinecrypt,abort,errors=continue,errors=continue,delalloc,barrier,,errors=continue. Quota mode: writeback. [ 104.235089][ T5263] team0: Port device team_slave_0 added [ 104.250197][ T5263] team0: Port device team_slave_1 added [ 104.273483][ T5263] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.280657][ T5263] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.307899][ T5263] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.322095][ T5263] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.329498][ T5263] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.361815][ T5263] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.436249][ T5282] device syzkaller1 entered promiscuous mode [ 104.453539][ T5263] device hsr_slave_0 entered promiscuous mode [ 104.467062][ T5263] device hsr_slave_1 entered promiscuous mode [ 104.498041][ T5263] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 104.534562][ T5263] Cannot create hsr debugfs directory [ 104.675811][ T5289] loop4: detected capacity change from 0 to 1024 [ 104.712037][ T5293] loop2: detected capacity change from 0 to 1024 [ 104.765775][ T5289] EXT4-fs (loop4): inline encryption not supported [ 104.795842][ T4229] input: syz Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0004/input/input10 [ 104.834897][ T5293] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 104.846683][ T5289] EXT4-fs (loop4): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,auto_da_alloc,inlinecrypt,,errors=continue. Quota mode: none. [ 104.876074][ T5263] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 104.908987][ T5263] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 104.919495][ T5289] ext4 filesystem being mounted at /43/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.934104][ T4229] uclogic 0003:256C:006D.0004: input,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 104.944778][ T5293] EXT4-fs error (device loop2): ext4_get_max_inline_size:115: inode #18: comm syz.2.288: can't get inode location 18 [ 104.968951][ T5263] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 104.975333][ T5289] EXT4-fs error (device loop4): ext4_map_blocks:741: inode #15: comm syz.4.287: lblock 0 mapped to illegal pblock 0 (length 1) [ 104.975696][ T26] audit: type=1800 audit(1778171631.927:9): pid=5289 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.287" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 105.000758][ T4229] usb 4-1: USB disconnect, device number 4 [ 105.023765][ T5289] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 105.042782][ T5263] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 105.061331][ T5293] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5873: Out of memory [ 105.086488][ T5289] EXT4-fs (loop4): This should not happen!! Data will be lost [ 105.086488][ T5289] [ 105.113727][ T5293] EXT4-fs error (device loop2): ext4_dirty_inode:6077: inode #18: comm syz.2.288: mark_inode_dirty error [ 105.150459][ T5301] fido_id[5301]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 105.167402][ T5293] EXT4-fs warning (device loop2): ext4_read_block_bitmap_nowait:485: Cannot get buffer for block bitmap - block_group = 0, block_bitmap = 7278273066370725442 [ 105.225423][ T5293] EXT4-fs warning (device loop2): ext4_read_block_bitmap_nowait:485: Cannot get buffer for block bitmap - block_group = 0, block_bitmap = 7278273066370725442 [ 105.251299][ T5263] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.260823][ T5293] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5873: Out of memory [ 105.272655][ T1214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 105.305078][ T1214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 105.316541][ T5263] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.343379][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 105.352094][ T5293] EXT4-fs error (device loop2): ext4_dirty_inode:6077: inode #18: comm syz.2.288: mark_inode_dirty error [ 105.359089][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 105.377103][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.384257][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.393393][ T5303] loop7: detected capacity change from 0 to 16384 [ 105.402276][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 105.411230][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 105.425982][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 105.436454][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.443611][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.459525][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 105.460185][ T5293] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5873: Out of memory [ 105.479716][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 105.493588][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 105.506242][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 105.515617][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 105.531671][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 105.560437][ T5263] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 105.592083][ T5263] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 105.614674][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 105.634662][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 105.645618][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 105.647928][ T5293] EXT4-fs error (device loop2): ext4_ext_truncate:4472: inode #18: comm syz.2.288: mark_inode_dirty error [ 105.656604][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 105.709076][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 105.718747][ T5293] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5873: Out of memory [ 105.756200][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 105.758528][ T5293] EXT4-fs error (device loop2): ext4_truncate:4286: inode #18: comm syz.2.288: mark_inode_dirty error [ 105.840186][ T4641] Bluetooth: hci3: command 0x0409 tx timeout [ 105.975978][ T5314] device syzkaller1 entered promiscuous mode [ 106.058739][ T5319] loop3: detected capacity change from 0 to 16 [ 106.166729][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 106.177051][ T5319] erofs: (device loop3): mounted with root inode @ nid 36. [ 106.208140][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 106.233723][ T5263] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.249811][ T5319] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 106.367902][ T5327] loop0: detected capacity change from 0 to 128 [ 106.370982][ T5324] Bluetooth: (null): Too short H5 packet [ 106.470621][ T5327] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 106.484917][ T5327] ext4 filesystem being mounted at /60/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.897537][ T4626] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 106.922314][ T4626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 107.043481][ T559] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 107.095114][ T559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 107.136417][ T5263] device veth0_vlan entered promiscuous mode [ 107.156226][ T559] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 107.205543][ T559] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 107.286006][ T5263] device veth1_vlan entered promiscuous mode [ 107.322261][ T5361] loop3: detected capacity change from 0 to 1024 [ 107.412206][ T4626] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 107.432637][ T4626] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 107.466184][ T4626] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 107.495246][ T5361] EXT4-fs (loop3): Ignoring removed bh option [ 107.552965][ T4626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 107.610943][ T5263] device veth0_macvtap entered promiscuous mode [ 107.620654][ T5361] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000010,bh,init_itable,. Quota mode: none. [ 107.674108][ T5263] device veth1_macvtap entered promiscuous mode [ 107.703162][ T5354] loop2: detected capacity change from 0 to 131072 [ 107.728100][ T5263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.740023][ T5263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.749995][ T5263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.760763][ T5263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.762295][ T5361] EXT4-fs (loop3): re-mounted. Opts: . Quota mode: none. [ 107.770951][ T5263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.770971][ T5263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.770979][ T5263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.770988][ T5263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.770995][ T5263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.771004][ T5263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.773009][ T5263] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.855299][ T5354] F2FS-fs (loop2): invalid crc value [ 107.877528][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 107.887436][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 107.896787][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 107.899178][ T5354] F2FS-fs (loop2): Found nat_bits in checkpoint [ 107.905987][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 107.930520][ T5263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.931483][ T4641] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 107.950656][ T5263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.954003][ T5354] F2FS-fs (loop2): Cannot turn on quotas: -2 on 2 [ 107.965858][ T5263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.978617][ T5263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.978677][ T5354] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 107.988891][ T5263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 108.009897][ T4229] Bluetooth: hci3: command 0x041b tx timeout [ 108.014279][ T5263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.026500][ T5263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 108.039117][ T5263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.050730][ T5263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 108.061702][ T5263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.073484][ T5263] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.106980][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 108.116630][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 108.129695][ T5263] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.149527][ T5263] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.163527][ T5263] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.197932][ T5263] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.305130][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.336435][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.348015][ T5377] loop4: detected capacity change from 0 to 1024 [ 108.392118][ T4626] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 108.427368][ T4626] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.427903][ T4641] usb 1-1: config 0 has an invalid interface number: 255 but max is 0 [ 108.441155][ T4626] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.458815][ T4626] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 108.499650][ T4641] usb 1-1: config 0 has no interface number 0 [ 108.505782][ T4641] usb 1-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 108.575619][ T4641] usb 1-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 108.583494][ T5379] loop5: detected capacity change from 0 to 1024 [ 108.605466][ T5377] hfsplus: b-tree write err: -5, ino 26 [ 108.605513][ T4641] usb 1-1: config 0 interface 255 has no altsetting 0 [ 108.605546][ T4641] usb 1-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 108.636831][ T4641] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.676176][ T1214] hfsplus: b-tree write err: -5, ino 25 [ 108.681743][ T5379] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 108.682957][ T1214] hfsplus: b-tree write err: -5, ino 4 [ 108.699669][ T1214] hfsplus: b-tree write err: -5, ino 2 [ 108.704784][ T4641] usb 1-1: config 0 descriptor?? [ 108.709086][ T1214] hfsplus: b-tree write err: -5, ino 26 [ 108.818861][ T4641] ums-realtek 1-1:0.255: USB Mass Storage device detected [ 108.961493][ T5388] loop5: detected capacity change from 0 to 256 [ 108.995862][ T5388] exfat: Deprecated parameter 'utf8' [ 109.004058][ T5388] exfat: Deprecated parameter 'utf8' [ 109.015744][ T5388] exfat: Deprecated parameter 'utf8' [ 109.044700][ T4641] usb 1-1: USB disconnect, device number 6 [ 109.058076][ T5388] exfat: Deprecated parameter 'utf8' [ 109.080404][ T5388] exfat: Deprecated parameter 'namecase' [ 109.112765][ T5390] netlink: 4 bytes leftover after parsing attributes in process `syz.4.317'. [ 109.127751][ T5388] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 109.158015][ T5390] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 109.251989][ T5390] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 109.400861][ T5397] loop4: detected capacity change from 0 to 1024 [ 109.414886][ T5397] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 109.588973][ T4641] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 109.667335][ T5404] binder: 5403:5404 ioctl c018620c 200000000240 returned -1 [ 109.906213][ T5414] loop2: detected capacity change from 0 to 8192 [ 109.931945][ T5414] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 109.941601][ T5414] REISERFS (device loop2): using ordered data mode [ 109.948096][ T4641] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.948134][ T4641] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 109.969520][ T5414] reiserfs: using flush barriers [ 109.976418][ T5414] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 110.000147][ T5414] REISERFS (device loop2): checking transaction log (loop2) [ 110.078231][ T4229] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 110.083428][ T4265] Bluetooth: hci3: command 0x040f tx timeout [ 110.100825][ T5414] REISERFS (device loop2): Using tea hash to sort names [ 110.108000][ T4641] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 110.114386][ T5414] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 110.117170][ T4641] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.132609][ T5414] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 110.140063][ T4641] usb 6-1: Product: syz [ 110.153094][ T4641] usb 6-1: Manufacturer: syz [ 110.158002][ T4641] usb 6-1: SerialNumber: syz [ 110.202411][ T5414] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 110.219883][ T4641] cdc_mbim 6-1:1.0: skipping garbage [ 110.226224][ T5414] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 110.241043][ T5414] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 110.426758][ T5393] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 110.458167][ T4229] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.492813][ T5421] loop2: detected capacity change from 0 to 736 [ 110.525053][ T5419] loop4: detected capacity change from 0 to 4096 [ 110.540995][ T5421] rock: directory entry would overflow storage [ 110.548098][ T5421] rock: sig=0x3b10, size=4, remaining=3 [ 110.628684][ T5419] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 110.638577][ T4229] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 110.647644][ T4229] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.665442][ T4229] usb 1-1: Product: syz [ 110.670363][ T4229] usb 1-1: Manufacturer: syz [ 110.675198][ T4229] usb 1-1: SerialNumber: syz [ 110.696326][ T5423] loop2: detected capacity change from 0 to 512 [ 110.710631][ T5419] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 110.730468][ T5419] ntfs3: loop4: Failed to load $Extend. [ 110.756060][ T5423] EXT4-fs (loop2): Ignoring removed oldalloc option [ 110.767197][ T5423] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 110.782185][ T26] audit: type=1800 audit(1778171637.717:10): pid=5419 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.328" name="file1" dev="loop4" ino=30 res=0 errno=0 [ 110.818106][ T5423] EXT4-fs (loop2): 1 truncate cleaned up [ 110.834182][ T5423] EXT4-fs (loop2): mounted filesystem without journal. Opts: quota,oldalloc,barrier=0x0000000000000003,debug_want_extra_isize=0x000000000000007c,block_validity,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 110.867377][ T5423] EXT4-fs (loop2): shut down requested (1) [ 110.902302][ T5423] syz.2.330 (pid 5423) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 111.099215][ T5393] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 111.120425][ T4641] cdc_mbim 6-1:1.0: setting tx_max = 16384 [ 111.143567][ T5431] loop4: detected capacity change from 0 to 512 [ 111.152896][ T4641] cdc_mbim 6-1:1.0: cdc-wdm0: USB WDM device [ 111.194327][ T4641] cdc_mbim 6-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.5-1, CDC MBIM, d2:f0:cd:8c:bc:cf [ 111.212898][ T5431] EXT4-fs error (device loop4): ext4_orphan_get:1406: inode #15: comm syz.4.333: iget: bad i_size value: 38620345925642 [ 111.257904][ T5431] EXT4-fs error (device loop4): ext4_orphan_get:1411: comm syz.4.333: couldn't read orphan inode 15 (err -117) [ 111.322928][ T5431] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=continue,delalloc,data_err=ignore,journal_ioprio=0x0000000000000002,data_err=ignore,nojournal_checksum,,errors=continue. Quota mode: writeback. [ 111.357913][ T5111] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 111.386270][ T4688] usb 6-1: USB disconnect, device number 2 [ 111.393175][ T4688] cdc_mbim 6-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.5-1, CDC MBIM [ 111.451399][ T5431] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.333: bg 0: block 5: invalid block bitmap [ 111.478156][ T5431] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 64 with error 28 [ 111.519112][ T5431] EXT4-fs (loop4): This should not happen!! Data will be lost [ 111.519112][ T5431] [ 111.531327][ T5431] EXT4-fs (loop4): Total free blocks count 0 [ 111.537345][ T5431] EXT4-fs (loop4): Free/Dirty block details [ 111.543758][ T5431] EXT4-fs (loop4): free_blocks=0 [ 111.575253][ T5431] EXT4-fs (loop4): dirty_blocks=64 [ 111.599671][ T5431] EXT4-fs (loop4): Block reservation details [ 111.615603][ T5431] EXT4-fs (loop4): i_reserved_data_blocks=64 [ 111.647957][ T5111] usb 3-1: Using ep0 maxpacket: 8 [ 111.838063][ T4229] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 111.856592][ T4229] cdc_ncm 1-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 111.866151][ T4229] cdc_ncm 1-1:1.0: setting rx_max = 2048 [ 111.984014][ T5111] usb 3-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 112.001953][ T5111] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.027163][ T5111] usb 3-1: Product: syz [ 112.031816][ T5111] usb 3-1: Manufacturer: syz [ 112.038248][ T5111] usb 3-1: SerialNumber: syz [ 112.057613][ T5111] usb 3-1: config 0 descriptor?? [ 112.099765][ T5111] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 112.168231][ T4689] Bluetooth: hci3: command 0x0419 tx timeout [ 112.248024][ T4229] cdc_ncm 1-1:1.0: setting tx_max = 88 [ 112.276265][ T4229] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM, 42:42:42:42:42:42 [ 112.328118][ T4229] usb 1-1: USB disconnect, device number 7 [ 112.350658][ T4229] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM [ 112.377065][ T5473] loop3: p1 p2 p3 [ 112.377065][ T5473] p1: [ 112.399368][ T5473] loop3: p1 size 16779263 extends beyond EOD, truncated [ 112.427089][ T5473] loop3: p2 size 458752 extends beyond EOD, truncated [ 112.445309][ T5473] loop3: p3 start 3036741376 is beyond EOD, truncated [ 112.529255][ T5111] gspca_sonixj: reg_r err -71 [ 112.535423][ T5111] sonixj: probe of 3-1:0.0 failed with error -71 [ 112.590780][ T5111] usb 3-1: USB disconnect, device number 7 [ 112.731923][ T5489] set_capacity_and_notify: 2 callbacks suppressed [ 112.731938][ T5489] loop3: detected capacity change from 0 to 16 [ 112.776650][ T5489] erofs: (device loop3): mounted with root inode @ nid 36. [ 112.815613][ T5489] attempt to access beyond end of device [ 112.815613][ T5489] loop3: rw=524288, want=32, limit=16 [ 112.840203][ T4360] udevd[4360]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory [ 112.855102][ T4266] udevd[4266]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 112.868210][ T4274] udevd[4274]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 112.880456][ T5489] erofs: (device loop3): z_erofs_readahead: readahead error at page 7 @ nid 89 [ 112.910093][ T4360] udevd[4360]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory [ 112.910975][ T4266] udevd[4266]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 112.933603][ T4274] udevd[4274]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 112.940372][ T5489] erofs: (device loop3): z_erofs_readahead: readahead error at page 5 @ nid 89 [ 112.997916][ T5489] erofs: (device loop3): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 113.007118][ T5489] attempt to access beyond end of device [ 113.007118][ T5489] loop3: rw=524288, want=56, limit=16 [ 113.071615][ T5489] erofs: (device loop3): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[8192] [ 113.167999][ T5111] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 113.223211][ T26] audit: type=1800 audit(1778171640.177:11): pid=5489 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.345" name="file2" dev="loop3" ino=89 res=0 errno=0 [ 113.306216][ T5498] loop2: detected capacity change from 0 to 32768 [ 113.317975][ T4689] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 113.352605][ T5498] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.349 (5498) [ 113.378847][ T5491] loop4: detected capacity change from 0 to 32768 [ 113.402559][ T5498] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 113.411458][ T5498] BTRFS info (device loop2): turning on sync discard [ 113.418321][ T5498] BTRFS info (device loop2): setting nodatacow, compression disabled [ 113.426424][ T5498] BTRFS info (device loop2): turning on async discard [ 113.433289][ T5498] BTRFS warning (device loop2): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 113.444150][ T5498] BTRFS info (device loop2): trying to use backup root at mount time [ 113.452306][ T5498] BTRFS info (device loop2): enabling auto defrag [ 113.459357][ T5498] BTRFS info (device loop2): using free space tree [ 113.465884][ T5498] BTRFS info (device loop2): has skinny extents [ 113.546321][ T26] audit: type=1800 audit(1778171640.497:12): pid=5491 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.346" name="file1" dev="loop4" ino=4 res=0 errno=0 [ 113.598643][ T4689] usb 6-1: Using ep0 maxpacket: 16 [ 113.617940][ T5111] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 113.643307][ T5111] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 113.718021][ T4689] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.739285][ T4689] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.758605][ T4689] usb 6-1: config 0 interface 0 has no altsetting 0 [ 113.763741][ T4240] BTRFS warning (device loop2): checksum verify failed on 5337088 wanted 0xe63dbdda found 0xc926492d level 0 [ 113.774373][ T4689] usb 6-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 113.786857][ T5111] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 113.827285][ T5498] BTRFS warning (device loop2): failed to read root (objectid=2): -5 [ 113.843542][ T559] BTRFS warning (device loop2): checksum verify failed on 5324800 wanted 0x9f73850b found 0x80379423 level 0 [ 113.861537][ T5111] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 113.892668][ T5498] BTRFS warning (device loop2): couldn't read tree root [ 113.899247][ T4689] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.908802][ T5498] BTRFS error (device loop2): parent transid verify failed on 5255168 wanted 5 found 7 [ 113.909069][ T5111] usb 1-1: SerialNumber: syz [ 113.918866][ T5498] BTRFS warning (device loop2): couldn't read tree root [ 113.969271][ T5498] BTRFS info (device loop2): enabling ssd optimizations [ 113.969739][ T4689] usb 6-1: config 0 descriptor?? [ 113.981821][ T5498] BTRFS info (device loop2): clearing free space tree [ 113.989189][ T5498] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 113.999642][ T5498] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 114.038567][ T5498] BTRFS info (device loop2): creating free space tree [ 114.047315][ T5498] BTRFS info (device loop2): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 114.056999][ T5498] BTRFS info (device loop2): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 114.301215][ T5111] usb 1-1: 0:2 : does not exist [ 114.330740][ T5111] usb 1-1: USB disconnect, device number 8 [ 114.370699][ T5524] loop3: detected capacity change from 0 to 32768 [ 114.543562][ T4689] hid-generic 0003:1E71:2009.0005: unknown main item tag 0x0 [ 114.559138][ T4689] hid-generic 0003:1E71:2009.0005: unknown main item tag 0x0 [ 114.567543][ T4689] hid-generic 0003:1E71:2009.0005: unknown main item tag 0x0 [ 114.579213][ T4689] hid-generic 0003:1E71:2009.0005: unknown main item tag 0x0 [ 114.588920][ T4689] hid-generic 0003:1E71:2009.0005: unknown main item tag 0x0 [ 114.601155][ T4274] udevd[4274]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 114.619251][ T4689] hid-generic 0003:1E71:2009.0005: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.5-1/input0 [ 114.637088][ T5524] JBD2: Ignoring recovery information on journal [ 114.872004][ T5524] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 114.970159][ T5536] serio: Serial port ptm0 [ 115.036667][ T5539] loop2: detected capacity change from 0 to 4096 [ 115.079642][ T4641] usb 6-1: USB disconnect, device number 3 [ 115.116200][ T4193] ocfs2: Unmounting device (7,3) on (node local) [ 115.240146][ T5541] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 115.272070][ T5528] loop4: detected capacity change from 0 to 32768 [ 115.391607][ T26] audit: type=1800 audit(1778171642.337:13): pid=5539 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.355" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 115.466330][ T5552] loop0: detected capacity change from 0 to 128 [ 115.470345][ T5528] XFS (loop4): Mounting V5 Filesystem [ 115.540756][ T5552] FAT-fs (loop0): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 115.639468][ T5528] XFS (loop4): Ending clean mount [ 115.704215][ T5552] FAT-fs (loop0): error, corrupted file size (i_pos 548, 512) [ 115.774539][ T5552] FAT-fs (loop0): Filesystem has been set read-only [ 115.819175][ T5563] FAT-fs (loop0): error, invalid FAT chain (i_pos 548, last_block 8) [ 115.831031][ T4202] XFS (loop4): Unmounting Filesystem [ 115.910946][ T5565] loop5: detected capacity change from 0 to 16 [ 115.978596][ T5565] erofs: (device loop5): mounted with root inode @ nid 36. [ 116.024554][ T5565] attempt to access beyond end of device [ 116.024554][ T5565] loop5: rw=524288, want=32, limit=16 [ 116.041594][ T5565] erofs: (device loop5): z_erofs_readahead: readahead error at page 7 @ nid 89 [ 116.066723][ T5565] erofs: (device loop5): z_erofs_readahead: readahead error at page 5 @ nid 89 [ 116.076742][ T5565] erofs: (device loop5): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 116.103995][ T5565] attempt to access beyond end of device [ 116.103995][ T5565] loop5: rw=524288, want=56, limit=16 [ 116.112123][ T5567] loop3: detected capacity change from 0 to 4096 [ 116.156099][ T5565] erofs: (device loop5): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[8192] [ 116.221590][ T26] audit: type=1800 audit(1778171643.177:14): pid=5565 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.361" name="file2" dev="loop5" ino=89 res=0 errno=0 [ 116.226435][ T5567] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 116.398695][ T5567] ntfs3: loop3: failed to convert "c46c" to iso8859-4 [ 116.410148][ T5565] syz.5.361 (5565) used greatest stack depth: 19888 bytes left [ 116.757925][ T4633] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 116.967142][ T5580] loop4: detected capacity change from 0 to 256 [ 117.176694][ T5576] XFS (loop5): Mounting V5 Filesystem [ 117.203664][ T5578] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 117.226883][ T5578] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 117.254955][ T5578] F2FS-fs (loop3): invalid crc value [ 117.263984][ T5576] XFS (loop5): Ending clean mount [ 117.293332][ T4633] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 117.307824][ T4633] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.313793][ T5578] F2FS-fs (loop3): Found nat_bits in checkpoint [ 117.316079][ T4633] usb 1-1: Product: syz [ 117.326821][ T4633] usb 1-1: Manufacturer: syz [ 117.331575][ T4633] usb 1-1: SerialNumber: syz [ 117.412541][ T5578] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 117.429955][ T5578] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 117.447966][ T4641] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 117.510468][ T5263] XFS (loop5): Unmounting Filesystem [ 117.598010][ T4633] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 117.658115][ T4633] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 117.700992][ T4641] usb 5-1: Using ep0 maxpacket: 32 [ 117.801066][ T4240] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 117.818748][ T4641] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.837905][ T4641] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 117.848297][ T4240] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 117.867888][ T4641] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 117.897527][ T4641] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.941077][ T4641] usb 5-1: config 0 descriptor?? [ 117.986786][ T4641] hub 5-1:0.0: USB hub found [ 118.188027][ T4641] hub 5-1:0.0: 1 port detected [ 118.384991][ T5607] set_capacity_and_notify: 2 callbacks suppressed [ 118.385007][ T5607] loop3: detected capacity change from 0 to 512 [ 118.455052][ T5607] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 118.466778][ T5607] ext4 filesystem being mounted at /syzcgroup/unified/syz3/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 118.474737][ T5607] EXT4-fs error (device loop3): ext4_group_add:1699: inode #7: comm syz.3.371: iget: checksum invalid [ 118.532473][ T4798] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 118.592920][ T5607] EXT4-fs warning (device loop3): ext4_group_add:1701: Error opening resize inode [ 118.618133][ T4633] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x0000011c. ret = -71 [ 118.638014][ T4633] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 118.665490][ T4633] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 118.675514][ T4633] lan78xx: probe of 1-1:1.0 failed with error -71 [ 118.718279][ T4633] usb 1-1: USB disconnect, device number 9 [ 118.838109][ T4971] hub 5-1:0.0: activate --> -90 [ 118.887867][ T4641] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 119.018009][ T4798] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 119.029204][ T4798] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 119.039054][ T4798] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 119.050681][ T4798] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 119.128201][ T4641] usb 3-1: Using ep0 maxpacket: 16 [ 119.220023][ T4798] usb 6-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 119.237758][ T4798] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.245783][ T4798] usb 6-1: Product: syz [ 119.257752][ T4798] usb 6-1: Manufacturer: syz [ 119.257956][ T4641] usb 3-1: config 1 has an invalid interface number: 105 but max is 0 [ 119.262385][ T4798] usb 6-1: SerialNumber: syz [ 119.276375][ T4798] usb 6-1: config 0 descriptor?? [ 119.284134][ T4641] usb 3-1: config 1 has no interface number 0 [ 119.290919][ T4641] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 119.308751][ T4641] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 119.324084][ T4641] usb 3-1: config 1 interface 105 has no altsetting 0 [ 119.449164][ T4229] usb 5-1: USB disconnect, device number 5 [ 119.487969][ T4641] usb 3-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 119.495315][ T5616] loop0: detected capacity change from 0 to 65536 [ 119.504879][ T4641] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 119.514674][ T4641] usb 3-1: Product: syz [ 119.528971][ T4641] usb 3-1: Manufacturer: syz [ 119.533709][ T4641] usb 3-1: SerialNumber: syz [ 119.558576][ T4798] adutux 6-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 119.609729][ T5611] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 119.626335][ T5616] XFS (loop0): Mounting V5 Filesystem [ 119.632912][ T5611] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 119.686849][ T5616] XFS (loop0): Ending clean mount [ 119.711211][ T5616] XFS (loop0): Quotacheck needed: Please wait. [ 119.761901][ T5616] XFS (loop0): Quotacheck: Done. [ 119.794787][ T26] audit: type=1800 audit(1778171646.747:15): pid=5616 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.377" name="file1" dev="loop0" ino=38 res=0 errno=0 [ 119.819505][ T5605] usb 6-1: Couldn't submit interrupt_out_urb -90 [ 119.829461][ T4798] usb 6-1: USB disconnect, device number 4 [ 119.964719][ T5630] loop4: detected capacity change from 0 to 4096 [ 120.027360][ T4189] XFS (loop0): Unmounting Filesystem [ 120.068458][ T5611] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 120.078598][ T5611] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 120.080598][ T5635] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 120.202031][ T26] audit: type=1800 audit(1778171647.157:16): pid=5630 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.380" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 120.455131][ T5639] loop5: detected capacity change from 0 to 16 [ 120.489460][ T5639] erofs: (device loop5): mounted with root inode @ nid 36. [ 120.533979][ T4641] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 120.551850][ T5639] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 120.608153][ T4641] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 120.699324][ T4641] aqc111 3-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.2-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, be:79:e2:10:32:c0 [ 120.886467][ T4798] usb 3-1: USB disconnect, device number 8 [ 120.898722][ T4798] aqc111 3-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.2-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 121.018186][ T4798] aqc111 3-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 121.027617][ T4798] aqc111 3-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 121.068607][ T4798] aqc111 3-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 121.289744][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 121.752310][ T5675] loop2: detected capacity change from 0 to 128 [ 121.793329][ T5647] loop5: detected capacity change from 0 to 32768 [ 121.825038][ T5644] loop0: detected capacity change from 0 to 40427 [ 121.872428][ T5675] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,barrier=0x0000000000000de2,,errors=continue. Quota mode: none. [ 121.897965][ T5675] ext4 filesystem being mounted at /82/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 121.927587][ T5647] ocfs2: Slot 0 on device (7,5) was already allocated to this node! [ 121.972265][ T5644] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 121.996455][ T5644] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 122.015053][ T5647] JBD2: Ignoring recovery information on journal [ 122.035847][ T5675] EXT4-fs error (device loop2): ext4_check_dx_root:2266: inode #2: comm syz.2.394: Corrupt dir, invalid name for '.', running e2fsck is recommended [ 122.068878][ T5644] F2FS-fs (loop0): invalid crc value [ 122.086852][ T5644] F2FS-fs (loop0): Found nat_bits in checkpoint [ 122.142188][ T5644] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 122.158785][ T5647] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 122.267749][ T5644] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 122.267858][ T4641] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 122.514819][ T144] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 122.542112][ T144] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 122.702037][ T5263] ocfs2: Unmounting device (7,5) on (node local) [ 122.718227][ T4641] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.737806][ T4641] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.747902][ T4641] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 122.761125][ T4641] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 122.785810][ T4641] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.796038][ T4641] usb 5-1: config 0 descriptor?? [ 122.850042][ T4229] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 123.008480][ T5718] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 123.097923][ T4229] usb 4-1: Using ep0 maxpacket: 32 [ 123.100743][ T5722] loop5: detected capacity change from 0 to 4096 [ 123.113862][ T5724] netlink: 8 bytes leftover after parsing attributes in process `syz.2.406'. [ 123.167945][ T5727] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 123.218070][ T4229] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.237894][ T26] audit: type=1800 audit(1778171650.187:17): pid=5722 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.404" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 123.249472][ T4229] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1280, setting to 1024 [ 123.276532][ T4229] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 123.293419][ T4641] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 123.332372][ T4641] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 123.352222][ T4229] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.366671][ T4229] usb 4-1: config 0 descriptor?? [ 123.419481][ T5712] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 123.445661][ T4229] hub 4-1:0.0: USB hub found [ 123.534713][ T5736] loop2: detected capacity change from 0 to 64 [ 123.601200][ T5736] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing [ 123.648053][ T4229] hub 4-1:0.0: 1 port detected [ 124.502382][ T4233] usb 4-1: USB disconnect, device number 5 [ 124.518238][ T4633] hub 4-1:0.0: hub_ext_port_status failed (err = -71) [ 124.629745][ C1] plantronics 0003:047F:FFFF.0006: usb_submit_urb(ctrl) failed: -1 [ 124.645088][ T4633] usb 5-1: USB disconnect, device number 6 [ 124.671862][ T5753] loop0: detected capacity change from 0 to 1024 [ 125.196090][ T5752] loop5: detected capacity change from 0 to 40427 [ 125.294822][ T5752] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 125.300680][ T5759] loop0: detected capacity change from 0 to 32768 [ 125.313411][ T5752] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 125.327892][ T4633] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 125.336897][ T5752] F2FS-fs (loop5): invalid crc value [ 125.368121][ T4798] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 125.390398][ T5752] F2FS-fs (loop5): Found nat_bits in checkpoint [ 125.479131][ T5752] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 125.489564][ T5759] XFS (loop0): Mounting V5 Filesystem [ 125.514986][ T5752] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 125.574993][ T5759] XFS (loop0): Ending clean mount [ 125.661548][ T1214] F2FS-fs (loop5): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 125.672033][ T1214] F2FS-fs (loop5): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 125.711082][ T4633] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.722224][ T4633] usb 3-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 125.735486][ T5759] loop0: detected capacity change from 32768 to 0 [ 125.747243][ C0] blk_update_request: I/O error, dev loop0, sector 20 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 125.765849][ T5781] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x1db/0x2d0" at daddr 0x14 len 4 error 5 [ 125.818220][ T4798] usb 4-1: config 127 has an invalid interface number: 84 but max is 0 [ 125.831751][ T4798] usb 4-1: config 127 has no interface number 0 [ 125.845351][ T5783] loop4: detected capacity change from 0 to 512 [ 125.855509][ C1] blk_update_request: I/O error, dev loop0, sector 3 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 125.897310][ T4971] XFS (loop0): metadata I/O error in "xfs_alloc_read_agfl+0x1d3/0x360" at daddr 0x3 len 1 error 5 [ 125.951471][ T4633] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 125.957485][ T1214] loop: Write error at byte offset 9223372036854833151, length 4096. [ 125.970554][ T5783] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 125.977101][ T4633] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.014622][ C1] blk_update_request: I/O error, dev loop0, sector 112 op 0x1:(WRITE) flags 0x9800 phys_seg 1 prio class 0 [ 126.026340][ C1] blk_update_request: I/O error, dev loop0, sector 112 op 0x1:(WRITE) flags 0x9800 phys_seg 1 prio class 0 [ 126.027928][ T4798] usb 4-1: New USB device found, idVendor=040a, idProduct=0002, bcdDevice=9c.e5 [ 126.039310][ T150] XFS (loop0): log I/O error -5 [ 126.056198][ T4971] XFS (loop0): Corruption of in-memory data (0x8) detected at xfs_defer_finish_noroll+0x156f/0x1b80 (fs/xfs/libxfs/xfs_defer.c:504). Shutting down filesystem. [ 126.067376][ T4798] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.092444][ T4633] usb 3-1: Product: syz [ 126.094814][ T4798] usb 4-1: Product: syz [ 126.096666][ T4633] usb 3-1: Manufacturer: syz [ 126.105557][ T4971] XFS (loop0): Please unmount the filesystem and rectify the problem(s) [ 126.108445][ T4798] usb 4-1: Manufacturer: syz [ 126.114065][ T4633] usb 3-1: SerialNumber: syz [ 126.147813][ T4798] usb 4-1: SerialNumber: syz [ 126.169208][ T4633] cdc_ncm 3-1:1.0: skipping garbage [ 126.174472][ T4633] cdc_ncm 3-1:1.0: NCM or ECM functional descriptors missing [ 126.196806][ T4633] cdc_ncm 3-1:1.0: bind() failure [ 126.237191][ T4633] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 126.262825][ T4633] cdc_ncm 3-1:1.1: bind() failure [ 126.263061][ T5790] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 126.384567][ T4633] usb 3-1: USB disconnect, device number 9 [ 126.440765][ T4798] gspca_main: spca501-2.14.0 probing 040a:0002 [ 126.572432][ T4189] XFS (loop0): Unmounting Filesystem [ 126.687190][ T1214] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.763048][ T5792] loop4: detected capacity change from 0 to 40427 [ 126.790763][ T5792] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 126.799740][ T5792] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 126.823440][ T5792] F2FS-fs (loop4): invalid crc value [ 126.881776][ T5792] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 126.903943][ T1214] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.983616][ T5792] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 126.998667][ T5792] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 127.050896][ T1214] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.101903][ T5792] attempt to access beyond end of device [ 127.101903][ T5792] loop4: rw=10241, want=53256, limit=40427 [ 127.159170][ T4202] attempt to access beyond end of device [ 127.159170][ T4202] loop4: rw=2049, want=45112, limit=40427 [ 127.249149][ T1214] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.593344][ T5808] chnl_net:caif_netlink_parms(): no params data found [ 127.724905][ T4798] gspca_spca501: reg write: error -71 [ 127.735372][ T4798] spca501 4-1:127.84: Reg write failed for 0x00,0x00,0x05 [ 127.775887][ T4798] spca501: probe of 4-1:127.84 failed with error -22 [ 127.840576][ T4798] usb 4-1: USB disconnect, device number 6 [ 127.859400][ T5828] loop2: detected capacity change from 0 to 128 [ 127.889079][ T5828] FAT-fs (loop2): Unrecognized mount option "utf8=dZsˆÈ?4b>‰¬®1" or missing value [ 128.044597][ T5808] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.084141][ T5808] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.101364][ T5808] device bridge_slave_0 entered promiscuous mode [ 128.119944][ T5808] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.135039][ T5808] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.157049][ T5808] device bridge_slave_1 entered promiscuous mode [ 128.176243][ T5821] loop4: detected capacity change from 0 to 40427 [ 128.202889][ T5808] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 128.209334][ T5821] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 128.239717][ T5808] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 128.285262][ T5821] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 128.298064][ T4971] usb 3-1: new low-speed USB device number 10 using dummy_hcd [ 128.335251][ T5808] team0: Port device team_slave_0 added [ 128.379018][ T5821] F2FS-fs (loop4): invalid crc value [ 128.385744][ T5808] team0: Port device team_slave_1 added [ 128.416660][ T5821] F2FS-fs (loop4): Found nat_bits in checkpoint [ 128.511706][ T5808] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 128.538527][ T5808] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 128.567868][ T5821] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 128.574943][ T5821] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 128.667985][ T5808] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 128.679174][ T4971] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 128.709167][ T4971] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 128.734010][ T4971] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24421, setting to 8 [ 128.734870][ T4233] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 128.756536][ T5808] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 128.774151][ T5808] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 128.777096][ T4971] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 128.826801][ T4971] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.855665][ T5808] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 128.867854][ T4240] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 128.868163][ T5833] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 128.876739][ T4240] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 128.908936][ T4971] hub 3-1:1.0: bad descriptor, ignoring hub [ 128.925163][ T4971] hub: probe of 3-1:1.0 failed with error -5 [ 128.931814][ T4971] cdc_wdm 3-1:1.0: skipping garbage [ 128.947291][ T4971] cdc_wdm 3-1:1.0: skipping garbage [ 128.962660][ T4971] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 128.968882][ T4971] cdc_wdm 3-1:1.0: Unknown control protocol [ 129.073672][ T5808] device hsr_slave_0 entered promiscuous mode [ 129.080887][ T5808] device hsr_slave_1 entered promiscuous mode [ 129.087488][ T5808] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 129.096280][ T5808] Cannot create hsr debugfs directory [ 129.288023][ T4684] Bluetooth: hci0: command 0x0409 tx timeout [ 129.316848][ T4684] usb 3-1: USB disconnect, device number 10 [ 129.488667][ T4233] usb 6-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 129.526442][ T4233] usb 6-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 129.558042][ T4233] usb 6-1: Product: syz [ 129.562298][ T4233] usb 6-1: Manufacturer: syz [ 129.567002][ T4233] usb 6-1: SerialNumber: syz [ 129.638380][ T4233] usb 6-1: config 0 descriptor?? [ 129.690634][ T4233] ch341 6-1:0.0: ch341-uart converter detected [ 129.746667][ T5808] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 129.780534][ T5808] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 129.810819][ T5808] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 129.910341][ T1214] device hsr_slave_0 left promiscuous mode [ 129.934153][ T1214] device hsr_slave_1 left promiscuous mode [ 129.944130][ T1214] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 129.962464][ T1214] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 129.980941][ T1214] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 129.988836][ T1214] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 130.008286][ T1214] device bridge_slave_1 left promiscuous mode [ 130.017429][ T1214] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.063282][ T1214] device bridge_slave_0 left promiscuous mode [ 130.074172][ T1214] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.107529][ T1214] device veth1_macvtap left promiscuous mode [ 130.124617][ T1214] device veth0_macvtap left promiscuous mode [ 130.132960][ T1214] device veth1_vlan left promiscuous mode [ 130.149590][ T1214] device veth0_vlan left promiscuous mode [ 130.271177][ T5883] loop2: detected capacity change from 0 to 32768 [ 130.381472][ T5883] XFS (loop2): Mounting V5 Filesystem [ 130.498412][ T5883] XFS (loop2): Ending clean mount [ 130.517420][ T1214] team0 (unregistering): Port device team_slave_1 removed [ 130.521139][ T5883] XFS (loop2): Quotacheck needed: Please wait. [ 130.600784][ T5883] XFS (loop2): Quotacheck: Done. [ 130.612642][ T1214] team0 (unregistering): Port device team_slave_0 removed [ 130.668815][ T26] audit: type=1800 audit(1778171657.627:18): pid=5883 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.449" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=6157 res=0 errno=0 [ 130.710675][ C0] vkms_vblank_simulate: vblank timer overrun [ 130.727514][ T1214] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 130.759002][ T4233] ch341-uart ttyUSB0: break control not supported, using simulated break [ 130.789213][ T4233] usb 6-1: ch341-uart converter now attached to ttyUSB0 [ 130.789576][ T1214] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 130.857825][ T4194] XFS (loop2): Unmounting Filesystem [ 131.065115][ T1214] bond0 (unregistering): Released all slaves [ 131.160516][ T5808] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 131.315872][ T4684] usb 6-1: USB disconnect, device number 5 [ 131.339275][ T4684] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0 [ 131.366512][ T4684] ch341 6-1:0.0: device disconnected [ 131.373429][ T5808] 8021q: adding VLAN 0 to HW filter on device bond0 [ 131.394096][ T5111] Bluetooth: hci0: command 0x041b tx timeout [ 131.434365][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 131.454933][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 131.510364][ T5808] 8021q: adding VLAN 0 to HW filter on device team0 [ 131.566639][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 131.591124][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 131.607750][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.614919][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 131.629476][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 131.644942][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 131.660905][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.668077][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 131.734440][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 131.771906][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 131.799604][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 131.819165][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 131.837991][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 131.856683][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 131.873390][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 131.907562][ T5808] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 131.926749][ T5808] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 131.939437][ T4684] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 131.940313][ T5926] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 131.956561][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 131.970023][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 131.983885][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 132.006071][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 132.025471][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 132.040337][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 132.276943][ T5938] loop5: detected capacity change from 0 to 4096 [ 132.327517][ T5938] ntfs3: loop5: Different NTFS' sector size (2048) and media sector size (512) [ 132.368247][ T4684] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.394470][ T4684] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 132.439875][ T4684] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 132.468899][ T4684] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 132.493224][ T4684] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.516177][ T4684] usb 3-1: config 0 descriptor?? [ 132.542582][ T4626] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 132.574480][ T4626] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 132.595542][ T5808] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 132.818116][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.992724][ T4684] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving [ 133.012777][ T4684] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 133.076020][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 133.096723][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 133.139894][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 133.155123][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 133.186277][ T5808] device veth0_vlan entered promiscuous mode [ 133.203508][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 133.214504][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 133.222595][ T5111] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 133.243256][ T5808] device veth1_vlan entered promiscuous mode [ 133.247889][ T4641] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 133.275704][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 133.285636][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 133.294673][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 133.305984][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 133.320106][ T5808] device veth0_macvtap entered promiscuous mode [ 133.355076][ T5808] device veth1_macvtap entered promiscuous mode [ 133.390581][ T5808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.407748][ T5808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.426932][ T5808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.438827][ T5808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.450794][ T4798] Bluetooth: hci0: command 0x040f tx timeout [ 133.464684][ T5808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.475292][ T5808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.487875][ T5808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.497875][ T5111] usb 6-1: Using ep0 maxpacket: 8 [ 133.520286][ T5808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.544415][ T5808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.562204][ T5808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.573694][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 133.584035][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 133.603105][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 133.623485][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 133.629204][ T4641] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 133.642810][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 133.655714][ T4641] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 133.656816][ T5808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.681006][ T4798] usb 3-1: USB disconnect, device number 11 [ 133.695628][ T4641] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 133.708034][ T5808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.730149][ T5808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.741513][ T4641] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 133.762913][ T5808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.769254][ T4641] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 133.783832][ T5808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.783859][ T5808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.783884][ T5808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.783896][ T5808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.785194][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 133.870253][ T5111] usb 6-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 133.887758][ T5111] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.906046][ T5111] usb 6-1: Product: syz [ 133.910452][ T5111] usb 6-1: Manufacturer: syz [ 133.915263][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 133.927016][ T5111] usb 6-1: SerialNumber: syz [ 133.933023][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 133.938074][ T4641] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 133.949396][ T5111] usb 6-1: config 0 descriptor?? [ 133.967634][ T5808] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.980100][ T4641] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 133.989476][ T5808] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.003576][ T5808] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.006122][ T4641] usb 5-1: Product: syz [ 134.016536][ T5111] gspca_main: se401-2.14.0 probing 047d:5003 [ 134.026736][ T4641] usb 5-1: Manufacturer: syz [ 134.028172][ T5808] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.088999][ T4641] cdc_wdm 5-1:1.0: skipping garbage [ 134.094476][ T4641] cdc_wdm 5-1:1.0: skipping garbage [ 134.123898][ T4641] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 134.136803][ T4641] cdc_wdm 5-1:1.0: Unknown control protocol [ 134.223284][ T4626] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.268712][ T4626] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.295823][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 134.330591][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.349509][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.357219][ T559] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 134.437874][ T5111] gspca_se401: ExtraFeatures: 48 [ 134.442875][ T5111] gspca_se401: Frame size: 0x256 bayer [ 134.479407][ T5111] gspca_se401: Frame size: 2048x0 bayer [ 134.485012][ T5111] gspca_se401: Frame size: 768x1 bayer [ 134.514355][ T5111] gspca_se401: Frame size: 0x65534 bayer [ 134.534800][ T5111] gspca_se401: Frame size: 0x0 1/16th janggu [ 134.551938][ T5111] gspca_se401: Frame size: 0x0 1/16th janggu [ 134.577813][ T5111] gspca_se401: Frame size: 0x0 1/16th janggu [ 134.592419][ T5111] gspca_se401: Frame size: 0x0 1/16th janggu [ 134.620430][ T5111] gspca_se401: Frame size: 0x0 1/16th janggu [ 134.626467][ T5111] gspca_se401: Frame size: 0x0 1/16th janggu [ 134.684766][ T5111] input: se401 as /devices/platform/dummy_hcd.5/usb6/6-1/input/input11 [ 134.739267][ T6013] device syzkaller1 entered promiscuous mode [ 134.774203][ T5111] usb 6-1: USB disconnect, device number 6 [ 135.011985][ T4641] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 135.161482][ T4971] usb 5-1: USB disconnect, device number 7 [ 135.373603][ T6043] netlink: 20 bytes leftover after parsing attributes in process `syz.5.478'. [ 135.388017][ T4641] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 135.416411][ T4641] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 135.456372][ T4641] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 135.509469][ T6050] netlink: 4 bytes leftover after parsing attributes in process `syz.5.481'. [ 135.518927][ T4798] Bluetooth: hci0: command 0x0419 tx timeout [ 135.542713][ T6050] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 135.552490][ T6050] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 135.561373][ T6050] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 135.570157][ T6050] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 135.606981][ T6050] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 135.616543][ T6050] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 135.625618][ T6050] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 135.635606][ T6050] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 135.648030][ T4641] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 135.657439][ T4641] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.666134][ T4641] usb 3-1: Product: syz [ 135.679574][ T4641] usb 3-1: Manufacturer: syz [ 135.688143][ T4641] usb 3-1: SerialNumber: syz [ 135.769037][ T6050] netlink: 4 bytes leftover after parsing attributes in process `syz.5.481'. [ 135.779050][ T6064] loop6: detected capacity change from 0 to 1024 [ 135.790532][ T4641] hub 3-1:1.0: bad descriptor, ignoring hub [ 135.804144][ T6050] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 135.813069][ T6050] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 135.821970][ T6050] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 135.830756][ T6050] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 135.845660][ T4641] hub: probe of 3-1:1.0 failed with error -5 [ 135.853115][ T6064] EXT4-fs (loop6): Ignoring removed bh option [ 135.861548][ T6050] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 135.870790][ T6050] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 135.880302][ T6050] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 135.890017][ T6050] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 135.920900][ T6064] EXT4-fs (loop6): mounted filesystem without journal. Opts: nojournal_checksum,nombcache,barrier,norecovery,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,usrquota,noauto_da_alloc,bh,init_itable,,errors=continue. Quota mode: writeback. [ 136.002993][ T4641] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 12 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 136.080946][ T6064] loop_set_status: loop6 () has still dirty pages (nrpages=3) [ 136.446720][ T6095] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 136.618013][ T5111] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 136.647501][ T4798] [ 136.650398][ T4798] ============================= [ 136.655251][ T4798] WARNING: suspicious RCU usage [ 136.660173][ T4798] syzkaller #0 Not tainted [ 136.664601][ T4798] ----------------------------- [ 136.669479][ T4798] net/sched/sch_api.c:304 suspicious rcu_dereference_protected() usage! [ 136.677841][ T4798] [ 136.677841][ T4798] other info that might help us debug this: [ 136.677841][ T4798] [ 136.688126][ T4798] [ 136.688126][ T4798] rcu_scheduler_active = 2, debug_locks = 1 [ 136.696202][ T4798] 9 locks held by kworker/0:14/4798: [ 136.701531][ T4798] #0: ffff888060302138 ((wq_completion)wg-crypt-wg2#6){+.+.}-{0:0}, at: process_one_work+0x761/0x1010 [ 136.708745][ T6016] usb 3-1: reset high-speed USB device number 12 using dummy_hcd [ 136.712678][ T4798] #1: ffffc900032ffd00 ((work_completion)(&peer->transmit_packet_work)){+.+.}-{0:0}, at: process_one_work+0x79f/0x1010 [ 136.733512][ T4798] #2: ffff88807931a6f8 (&peer->endpoint_lock){++-.}-{2:2}, at: wg_socket_send_skb_to_peer+0x50/0x1c0 [ 136.744558][ T4798] #3: ffffffff8c31eb80 (rcu_read_lock_bh){....}-{1:2}, at: rcu_lock_acquire+0x9/0x30 [ 136.754193][ T4798] #4: ffffffff8c31eb20 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x9/0x30 [ 136.763592][ T4798] #5: ffffffff8c31eb80 (rcu_read_lock_bh){....}-{1:2}, at: rcu_lock_acquire+0x9/0x30 [ 136.768122][ T6016] usb 3-1: device reset changed ep0 maxpacket size! [ 136.773222][ T4798] #6: ffffffff8c31eb80 (rcu_read_lock_bh){....}-{1:2}, at: rcu_lock_acquire+0x9/0x30 [ 136.788926][ T4229] usb 3-1: USB disconnect, device number 12 [ 136.789473][ T4798] #7: ffff888075ad0908 (&sch->q.lock){+.-.}-{2:2}, at: __dev_queue_xmit+0xa2a/0x2f80 [ 136.804972][ T4798] #8: ffffffff8c31eb20 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 136.814461][ T4798] [ 136.814461][ T4798] stack backtrace: [ 136.820408][ T4798] CPU: 0 PID: 4798 Comm: kworker/0:14 Not tainted syzkaller #0 [ 136.827974][ T4798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 136.838233][ T4798] Workqueue: wg-crypt-wg2 wg_packet_tx_worker [ 136.844344][ T4798] Call Trace: [ 136.847642][ T4798] [ 136.850586][ T4798] dump_stack_lvl+0x188/0x250 [ 136.855291][ T4798] ? show_regs_print_info+0x20/0x20 [ 136.859728][ T4229] usblp0: removed [ 136.860621][ T4798] ? lockdep_rcu_suspicious+0x110/0x180 [ 136.860649][ T4798] qdisc_lookup+0xa6/0x650 [ 136.874606][ T4798] qdisc_tree_reduce_backlog+0x190/0x430 [ 136.880271][ T4798] sfq_enqueue+0x1183/0x2280 [ 136.884911][ T4798] ? decrement_one_qlen+0x550/0x550 [ 136.890156][ T4798] tbf_enqueue+0x224/0x6e0 [ 136.894600][ T4798] ? __rwlock_init+0x140/0x140 [ 136.899391][ T4798] dev_qdisc_enqueue+0x48/0x210 [ 136.904269][ T4798] __dev_queue_xmit+0xc25/0x2f80 [ 136.909239][ T4798] ? rcu_lockdep_current_cpu_online+0x35/0x130 [ 136.915424][ T4798] ? dev_queue_xmit+0x20/0x20 [ 136.920125][ T4798] ? mark_lock+0x94/0x320 [ 136.924494][ T4798] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 136.930508][ T4798] ? lock_chain_count+0x20/0x20 [ 136.935354][ T4798] ? rcu_lock_acquire+0x30/0x30 [ 136.940197][ T4798] ? ip_finish_output2+0x8f7/0x10a0 [ 136.945384][ T4798] ? ip_finish_output2+0xaba/0x10a0 [ 136.950586][ T4798] ip_finish_output2+0xc87/0x10a0 [ 136.955612][ T4798] ? __ip_local_out+0x5e0/0x5e0 [ 136.960457][ T4798] ? ip_fragment+0x210/0x210 [ 136.965041][ T4798] ? ip_mc_finish_output+0x250/0x250 [ 136.970328][ T4798] ? ip_skb_dst_mtu+0x584/0x9b0 [ 136.975260][ T4798] ? ip_finish_output+0x3e8/0x4b0 [ 136.980290][ T4798] ip_output+0x2c0/0x3e0 [ 136.984557][ T4798] iptunnel_xmit+0x4d6/0x8e0 [ 136.989166][ T4798] udp_tunnel_xmit_skb+0x1b7/0x280 [ 136.994415][ T4798] send4+0x982/0xdc0 [ 136.998334][ T4798] ? wg_socket_send_skb_to_peer+0x1c0/0x1c0 [ 137.004226][ T4798] wg_socket_send_skb_to_peer+0xcd/0x1c0 [ 137.009853][ T4798] wg_packet_tx_worker+0x1d3/0x790 [ 137.014971][ T4798] process_one_work+0x85f/0x1010 [ 137.017858][ T4229] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 137.019927][ T4798] ? worker_detach_from_pool+0x240/0x240 [ 137.033097][ T4798] ? lockdep_hardirqs_off+0x70/0x100 [ 137.038395][ T4798] ? _raw_spin_lock_irq+0xb7/0xf0 [ 137.043434][ T4798] ? _raw_spin_lock_irqsave+0x100/0x100 [ 137.049000][ T4798] ? wq_worker_running+0x97/0x170 [ 137.054022][ T4798] worker_thread+0xaa6/0x1290 [ 137.058715][ T4798] kthread+0x436/0x520 [ 137.062778][ T4798] ? rcu_lock_release+0x20/0x20 [ 137.067617][ T4798] ? kthread_blkcg+0xd0/0xd0 [ 137.072200][ T4798] ret_from_fork+0x1f/0x30 [ 137.076621][ T4798] [ 137.237983][ T4689] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 137.267888][ T4229] usb 3-1: Using ep0 maxpacket: 8 [ 137.388003][ T4229] usb 3-1: unable to get BOS descriptor or descriptor too short [ 137.428125][ T5111] usb 5-1: config index 0 descriptor too short (expected 45, got 36) [ 137.436380][ T5111] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 137.447649][ T5111] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 137.453550][ T4229] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 137.457504][ T5111] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 137.465666][ T4229] usb 3-1: can't read configurations, error -71 [ 137.478153][ T5111] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 137.478182][ T5111] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.496649][ T5111] usb 5-1: config 0 descriptor?? [ 137.518247][ T4689] usb 6-1: Using ep0 maxpacket: 8 [ 137.648472][ T4689] usb 6-1: config index 0 descriptor too short (expected 30, got 18) [ 137.656676][ T4689] usb 6-1: config 0 has an invalid interface number: 255 but max is 0 [ 137.665018][ T4689] usb 6-1: config 0 has no interface number 0 [ 137.671200][ T4689] usb 6-1: config 0 interface 255 has no altsetting 0 [ 137.858205][ T4689] usb 6-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 137.867298][ T4689] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.875702][ T4689] usb 6-1: Product: syz [ 137.879992][ T4689] usb 6-1: Manufacturer: syz [ 137.884594][ T4689] usb 6-1: SerialNumber: syz [ 137.897064][ T4689] usb 6-1: config 0 descriptor?? [ 137.940040][ T4689] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 137.948982][ T4689] usb 6-1: setting power ON [ 137.954195][ T4689] dvb-usb: bulk message failed: -22 (2/0) [ 137.973000][ T4689] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 137.984300][ T5111] plantronics 0003:047F:FFFF.0008: unknown main item tag 0xd [ 137.992751][ T5111] plantronics 0003:047F:FFFF.0008: No inputs registered, leaving [ 138.007308][ T5111] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 138.020422][ T4689] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 138.036939][ T4689] usb 6-1: media controller created [ 138.055256][ T4689] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 138.084549][ T4689] usb 6-1: digital interface selection failed (-22) [ 138.092259][ T4689] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 138.138534][ T4689] usb 6-1: setting power OFF [ 138.143930][ T4689] dvb-usb: bulk message failed: -22 (2/0) [ 138.154646][ T4689] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 138.165840][ T4689] (NULL device *): no alternate interface [ 138.185445][ T4689] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 138.210714][ T4689] usb 6-1: USB disconnect, device number 7 [ 138.270072][ T4632] usb 5-1: USB disconnect, device number 8 [ 138.351014][ T1214] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.436643][ T1214] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.495052][ T1214] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.546028][ T1214] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.372027][ T1214] device hsr_slave_0 left promiscuous mode [ 139.386705][ T1214] device hsr_slave_1 left promiscuous mode [ 139.394812][ T1214] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 139.403154][ T1214] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 139.411278][ T1214] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 139.420934][ T1214] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 139.434491][ T1214] device bridge_slave_1 left promiscuous mode [ 139.441184][ T1214] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.451858][ T1214] device bridge_slave_0 left promiscuous mode [ 139.460858][ T1214] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.476790][ T1214] device veth1_macvtap left promiscuous mode [ 139.483202][ T1214] device veth0_macvtap left promiscuous mode [ 139.491024][ T1214] device veth1_vlan left promiscuous mode [ 139.496849][ T1214] device veth0_vlan left promiscuous mode [ 139.745766][ T1214] team0 (unregistering): Port device team_slave_1 removed [ 139.770943][ T1214] team0 (unregistering): Port device team_slave_0 removed [ 139.783562][ T1214] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 139.799727][ T1214] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 139.881262][ T1214] bond0 (unregistering): Released all slaves