last executing test programs: 55.813029653s ago: executing program 2 (id=170): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r0, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000004000000000000000000000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x1f00, 0x0, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) 55.598101636s ago: executing program 2 (id=171): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000000)={0x2, 0x0, 0x81, 0x10001, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x2b}, @remote}, 0x10) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000200)={0x0, 0x4, 0x1, 0x5, @vifc_lcl_addr=@loopback, @rand_addr=0x64010302}, 0x10) 55.149590253s ago: executing program 2 (id=174): r0 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) close(r0) r1 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$binfmt_register(r1, &(0x7f0000000500)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x6, 0x3a, '@', 0x3a, '\\\x9e\xbd\x1d\r6\xea\x12+(\x03z', 0x3a, './file0', 0x3a, [0x43, 0x43, 0x50, 0x50, 0x4f, 0x50, 0x46]}, 0x3b) 54.872291368s ago: executing program 2 (id=177): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2014800, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x204) 54.67545974s ago: executing program 2 (id=179): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x4, &(0x7f0000000640)=ANY=[@ANYBLOB="180100001c0000000000000000100000850000006d00000095"], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=ANY=[@ANYBLOB="30000000180001000000000000000000020000000000000900000000060015000a0000000c001680080002007f00"], 0x30}}, 0x0) 53.785408955s ago: executing program 2 (id=184): r0 = userfaultfd(0x801) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0xa0000001}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f00000003c0)={0x80000008}) 53.296113113s ago: executing program 32 (id=184): r0 = userfaultfd(0x801) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0xa0000001}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f00000003c0)={0x80000008}) 34.069395755s ago: executing program 1 (id=288): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020000000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000480)={@broadcast, @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x81000002, {{0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}}, {0x8, 0x22eb, 0x0, {{}, 0x2, {0x4, 0x5}}}}}}}}, 0x0) 33.979954896s ago: executing program 1 (id=289): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fstat(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) prctl$PR_SET_KEEPCAPS(0x8, 0x1) setreuid(r1, r1) 33.928061887s ago: executing program 1 (id=290): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x40, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 32.730985126s ago: executing program 1 (id=298): syz_mount_image$ext4(&(0x7f00000007c0)='ext4\x00', &(0x7f00000006c0)='./file1\x00', 0x40, &(0x7f00000000c0)={[{@user_xattr}, {@nodioread_nolock}]}, 0x1, 0x576, &(0x7f0000000140)="$eJzs3T1sG2UfAPD/neO3X3nf9JXeVwLUoQKkIlV1kn5AYWpXRKVKHZBYIHLcqIoTV7EDTZQh3StEBwSoS9lgYAQxMCAWRlYWEDNSRSOQmg5g5K80TZzglDouud9POvuee87+P8+d/499pzs5gMw62nhII56OiItJxMi6uqFoVx5trbe6slS8v7JUTKJev/RLEklE3FtZKnbWT9rPhyJiOSKeiohv8hHH081xqwuL0xPlcmmuXR6tzVwdrS4snrgyMzFVmirNnnrp5TNnT58ZPzm+/mX36+tL+Z319caPN9+98d2rt29++tmR5eL7E0mci+F23fp+PE6tbZKPcxuWn+5HsAFKBt0AHkmuneeNVPp/jESunfXd1Ed2tWlAn9X3RdSBjErkP2RU53dA4/i3M+3m748751sHII24q+2pVTPUOjcR+5vHJgd/TR46Mmkcbx7ezYayJy1fj4ixoaHNn/+k/fl7dGOPo4H01dfnWztq8/5P18af6DL+DHfOnf5NnfFvddP49yB+bovx72KPMX5/46ePtox/PeKZrvGTtfhJl/hpRLzVY/xbr395dqu6+scRx6J7/I5k+/PDo5evlEtjrceuMb46duSV7fp/cIv4rXO2+5tfM922f5fT2l198e3nzy5vE/+F57bf/922/4GIeK/H+P+998lrW9XduZ7cbfwK2On+TyIft3uM/+K5oz/0uCoAAAAAAAAAALADafNatiQtrM2naaHQuof3f3EwLVeqteOXK/Ozk61r3g5HPu1caTXSKieN8nj7etxO+eSG8qlcO2DuQLNcKFbKkwPuOwAAAAAAAAAAAAAAAAAAADwpDm24//+3XPP+/41/Vw3sVVv/5Tew18l/yK6H8z8ZWDuA3ef7HzKrLv8hu+Q/ZJf8h+yS/5Bd8h+yS/5Ddsl/AAAAAAAAAAAAAAAAAAAAAAAAAADoi4sXLjSm+v2VpWKjPDm0MD9defvEZKk6XZiZLxaKlbmrhalKZapcKhQrM3/1fkmlcnUsZuevjdZK1dpodWHxzZnK/GznP0VL+b73CAAAAAAAAAAAAAAAAAAAAP55hptTkhYiIm3Op2mhEPHviDicRHL5Srk0FhH/iYjvc/l9jfL4oBsNAAAAAAAAAAAAAAAAAAAAe0x1YXF6olwuzWVkZmgnK0fE8uNtRuMdd/yqfHtfPSnb0EwWZgY8MAEAAAAAAAAAAAAAAAAAQAY9uOm311f80d8GAQAAAAAAAAAAAAAAAAAAQCalPycR0ZiOjTw/vLH2X8lqrvkcEe/cuvTBtYlabW68sfzu2vLah+3lJwfRfqBXnTzt5DEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwQHVhcXqiXC7N9XFm0H0EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeBR/BgAA///eANcP") mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000f80)='./file1\x00', 0x0, 0x1000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8442, 0x5c) ioctl$FS_IOC_RESVSP(r0, 0x40305839, 0x0) 32.305960022s ago: executing program 1 (id=300): ftruncate(0xffffffffffffffff, 0xc17a) prctl$PR_MCE_KILL(0x35, 0x0, 0x8) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') read$FUSE(r0, &(0x7f0000003240)={0x2020}, 0x2020) 30.805267916s ago: executing program 1 (id=313): r0 = socket(0x1e, 0x4, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000480), 0x4) recvmmsg(r0, &(0x7f00000029c0)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000001d80)=""/158, 0x9e}], 0x1, &(0x7f0000000080)=""/72, 0x18}, 0x1}], 0x1, 0x40002002, 0x0) sendmsg$tipc(r0, &(0x7f0000000200)={&(0x7f0000000040)=@id={0x1e, 0x3, 0x3, {0x4e22}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000500)="e8", 0x1}], 0x1, 0x0, 0x0, 0x40040}, 0x4800) 30.56022464s ago: executing program 33 (id=313): r0 = socket(0x1e, 0x4, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000480), 0x4) recvmmsg(r0, &(0x7f00000029c0)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000001d80)=""/158, 0x9e}], 0x1, &(0x7f0000000080)=""/72, 0x18}, 0x1}], 0x1, 0x40002002, 0x0) sendmsg$tipc(r0, &(0x7f0000000200)={&(0x7f0000000040)=@id={0x1e, 0x3, 0x3, {0x4e22}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000500)="e8", 0x1}], 0x1, 0x0, 0x0, 0x40040}, 0x4800) 28.326087915s ago: executing program 3 (id=333): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="0500000001040101000000000000000400d900010001000000"], 0x1c}}, 0x0) close_range(r0, r0, 0x0) 28.148080768s ago: executing program 3 (id=334): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000000480)={0x2020}, 0x2020) 27.921817151s ago: executing program 3 (id=336): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x11) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 26.616898422s ago: executing program 3 (id=343): syz_mount_image$ext4(&(0x7f00000007c0)='ext4\x00', &(0x7f00000006c0)='./file1\x00', 0x40, &(0x7f00000000c0)={[{@user_xattr}, {@nodioread_nolock}]}, 0x1, 0x576, &(0x7f0000000140)="$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") mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000f80)='./file1\x00', 0x0, 0x1000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8442, 0x5c) ioctl$FS_IOC_RESVSP(r0, 0x40305839, 0x0) 26.062739061s ago: executing program 3 (id=346): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x34, r1, 0x1, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0xc, 0x70, [@NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC={0x5}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000) 23.690049468s ago: executing program 3 (id=355): r0 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x707b, 0x0, 0x0, 0x1e7}, &(0x7f0000000340)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x88, 0x14}, &(0x7f0000000240)='./cgroup/../file0\x00', 0x18, 0x0, 0x12345}) io_uring_enter(r0, 0x268f, 0x2fe, 0x0, 0x0, 0x0) 23.119176427s ago: executing program 34 (id=355): r0 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x707b, 0x0, 0x0, 0x1e7}, &(0x7f0000000340)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x88, 0x14}, &(0x7f0000000240)='./cgroup/../file0\x00', 0x18, 0x0, 0x12345}) io_uring_enter(r0, 0x268f, 0x2fe, 0x0, 0x0, 0x0) 4.120219886s ago: executing program 6 (id=447): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x18) syz_emit_ethernet(0x62, &(0x7f0000000640)={@multicast, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x2c, 0x3c, 0x0, @dev={0xfe, 0x80, '\x00', 0x32}, @local, {[@routing={0x87, 0x2, 0x1, 0x2, 0x0, [@local]}], {{0xffff, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 4.018466277s ago: executing program 6 (id=448): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x297f, 0x4) recvmmsg(r0, &(0x7f0000000580)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0xa, @empty}, 0x1c, 0x0}}], 0x1, 0x40040) 3.739814202s ago: executing program 6 (id=451): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000140)={0xbf48ce7, "1803c809800000000800000000000000000000000000d63175876b4c69a600"}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x2, "fa02c80a3a1e38dd031dd7504fe580963900"}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000400)={0x1b, "5660359c3245d1c42317afad7d48ed51000000000000000100"}) 3.651712043s ago: executing program 6 (id=452): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000e80), 0x80141, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000001100)) 3.492748196s ago: executing program 6 (id=453): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4f8}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x6, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x16, &(0x7f0000000240)=@string={0x16, 0x3, "713ff3239b1074418a1ca4a040a4bddaa4a75de3"}}, {0x1b, &(0x7f0000000300)=@string={0x1b, 0x3, "27062ea7878b572876e746150d4d74914ca67cca09c98e4d63"}}]}) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 1.869511721s ago: executing program 0 (id=468): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000000)=0x201, 0x4) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@getstats={0x1c, 0x5e, 0xceb83a978ce77bcb, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x4}}, 0x1c}, 0x1, 0x0, 0x0, 0x4040040}, 0x4c000) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 1.728217033s ago: executing program 0 (id=471): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000040)={0x0, 0x4}, 0x8) 1.670551694s ago: executing program 6 (id=473): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000020b11837000000000000010902240001000000000904004a0103000200092100000d0122030009058103"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="003905"], 0x0, 0x0, 0x0}, 0x0) 1.633671945s ago: executing program 5 (id=474): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f00000002c0)={[{@norecovery}, {@bh}, {@resuid}, {@auto_da_alloc}]}, 0xee, 0x498, &(0x7f0000001b40)="$eJzs3E1sFFUcAPD/bL/5kIr4AYJW8YOotLR8yMGLRhMPmpjoAeOplkKQQg2tiZBG0QMeDYl349HEu4knvRj1YEy86t2QENML6GnMzM4s23a3n0sX3N8v2e17M7N97z9vXuf1vd0NoGMNZU9JxLaI+CMidlSzCw8Yqv64OT838c/83EQSafrm30l+3I35uYny0PJ1W6uZNI3oy5J9Dcq98k7E+NTU5IUiPzJ77v2RmYuXDp45N3568vTk+bHjx48c3td7bOxovj9dZ3yV4mcW1409H03v3f3q21dfnzhx9d2fv8nqu63YXx/HuqRLazhUPbuLPZo9Pbmhwu4ov2ZP2+s2JN3NDx7ehAqxel0RkTVXT55LoisGavt2xCuftrFqwG2Wpmna6P4cdfftFPifSvRv6FDlvT77/7d8bM7I485w/cWIOFhk5ucmbtbi767NHfQs+v+2lYYi4sTlf7/MHtGKeQgAgBV8n41/nms0/qvEA3XH3VOsoQxGxL0RsTMi7ouIXRFxf0R+7IMR5x5aY/mLV0iWjn8q19YV2Cpl478XirWtmwvGf+XoLwa7itz2PP6e5NSZqclDxTk5ED19WX50mTJ+ePn3z8t0/6J99eO/7JGVX44Fi3pc6140QXdyfHY8T6Rp+vHGwo/rn0Ts6W4UfxLlMk4SEbsjYs86yzjzzNd7m+1bOf5lLLPOtFrpVxFPV9v/8sLx/62mSurXJwciorY+Ofr8sbGjI/0xNXlopLwqlvrltytvNCt/Q/G3QNb+Wxpe/7VV4MGkP2Lm4qWz+XrtzNrLuPLnZ3V9esHqchZ/5duINV//vclbebq32Pbh+OzshdGI3uS1pdvHbr22zJfHZ/Ef2N+4/++sq/HDEZFdxPsi4pFiETdru8ci4vGI2L9M/D+99MR7zfY1b/9ms/Ktdb04Ucu2f9S3/9oTXWd//K5Z+UPFGmQU56Fx+x/JUweKLbW/f8tYbQXXddIAAADgLlPJ3wOfVIZr6UpleLj6Hv5dsaUyNT0z++yp6Q/On6y+V34weirlTNeOuvnQ0WJuuMyPLcofLuaNv+gayPPDE9NTJ9sdPHS4rU36f+avrnbXDrjtWrCOBtyl9H/oXPo/dC79HzqX/g+dq1H/3+gHC4C7g/s/dK68/z91ud3VANrA/R86l/4PHanpZ+MrG/rIf9NE0upf2DBRfnfCZpS1cqL8LopNL31g3S/vX/nURaW9Z7VjEt1L2iK6W1pEX8NdbfyjBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0EL/BQAA///5etKr") mount$pvfs2(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000180), 0x14004, 0x0) 1.565900276s ago: executing program 4 (id=475): sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x3c, 0x0, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8}]}, 0x3c}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x24, 0x0, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x10, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x5, 0x4, '\x00'}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x8000) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001200576d100000000000000007"], 0x3c}}, 0x0) 1.461750648s ago: executing program 4 (id=476): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="bf16000000000000b70700000100e0ff5070000028000000770000000000000095000200000000007ae9413df8ff0af5aa35339f4b382c4cad9db6fa7a9b857b72abaca100af1ba23d699b89e890c10500000000000000000000000000ac0e064c27bdfbd301150500000000000000bfdc995279d64072aacbb0595b95060000009ad3bf16a461e48e955a772d4062093f4cb1c3d9532abad2085401f098eb039ae4f4103699b9e079227e98cc07c09c1a72cb6d47cef1595e84d21951010f0274b1445a2ad6a7ad73827cccc21842599e0ae7b91f0b878b9267aa0b28d69a74ffdea613e892f0f9ff94e690b6ad68e4cb6dd65fd7bf3124702c6b1c2aea53ee0cb83ff1807459c7cba77cedca0bff6d8370c33e2bd9cebd29c152ff9dc8c2772fe552fecfcd1778b0838100000031d521207e5223d86508416780983c2f380bc01cefe9773a9a5cd5b24aa24a561e72393c0ce2bf44825b05c138779fe74f884c2472ab45c2af60289cb199963312dd1929096c6f49d116f1612a7b97f77169fa5e8a66a372ef8e3ee7167f7d2a26fc6c3cfa4dc5860277223d6eb3460e3b10a0dc9495635a9fca19d7beb5e700498b43bdadc916c01264d22d7969530633f94b257fbc5da7a96820e31444c0b0f62619c9e351996185e4015510875b774666ba5c0ba9845ad25b578d"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x15}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000005e40)=@newtaction={0x18, 0x30, 0xffff, 0x3, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.371399469s ago: executing program 5 (id=477): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x8015}, 0x4) 1.31444813s ago: executing program 4 (id=478): pipe2$9p(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) 1.201008131s ago: executing program 4 (id=479): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000340)="8224aca5f41b9e0ec5e7a706c919e7c0", 0x10}], 0x1}}], 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100feffffff0000000005000000180001801400020073797a5f74756e000000000000000000240003801c0003800c00018008000100000000000c0401800800010000000000040001"], 0x50}}, 0x0) 1.122276563s ago: executing program 5 (id=480): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x204, 0x65, 0x20, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0xe}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_RATE={0x6, 0x5, {0x8, 0x81}}, @filter_kind_options=@f_bpf={{0x8}, {0x1c8, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x1a8, 0x1, [@m_simple={0xa4, 0x1f, 0x0, 0x0, {{0xb}, {0x78, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x7, 0x3, '-{\x00'}, @TCA_DEF_DATA={0x9, 0x3, '/-@@\x00'}, @TCA_DEF_DATA={0x3d, 0x3, '\x00\x94\xe4\xe2X\xce\xbar\x069\xf3\xff\x8d\x94\x1ao\xa1,\xa4\xc1\xcc\x1e\x9aS>\a\xd2R\x85\v\x80\xea\x1e\xc8W\xea\x99\xacos\x80\x1d\x8b\xd9`Ewb\xa5&iu@\xfd\x8c\xde\x00'}, @TCA_DEF_DATA={0x1e, 0x3, 'cpuacct.usage_percpu_user\x00'}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_mpls={0x100, 0xa, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_MPLS_TC={0x5, 0x6, 0x7}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_LABEL={0x8, 0x5, 0x5d5ff}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8914}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x7ff, 0x1, 0x10000000, 0x2, 0x9}, 0x2}}, @TCA_MPLS_TTL={0x5, 0x7, 0x5}, @TCA_MPLS_LABEL={0x8, 0x5, 0x4b395}, @TCA_MPLS_TTL={0x5}]}, {0x7d, 0x6, "e86a5d083c3fdf2cfcdfc24786db832a29e93f00ad312bcd01e33c382496f6bea198b7d05f8607deb3246b6040b1fba42b946725528ca75db4267003375155c7c5eb7003183cb699040b5ecb43ca8269296800f3dbf66b360589ee36027f6ae99fe88bc8113180528701f766bfd16036640ad335fe131baadb"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x204}, 0x1, 0x0, 0x0, 0x80}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 1.018448254s ago: executing program 4 (id=481): timer_create(0x2, 0x0, &(0x7f0000bbdffc)=0x0) timer_settime(r0, 0x0, &(0x7f00000000c0)={{}, {0x77359400}}, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 928.761336ms ago: executing program 5 (id=482): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd}}, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f8, 0x0, 0x940c, 0x3002, 0x0, 0x2c0, 0x328, 0x3d8, 0x3d8, 0x328, 0x3d8, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private1, [0xffffff00, 0x0, 0xffffffff, 0xffffff00], [0xffffffff, 0xffffffff, 0xff000000, 0xff], 'geneve0\x00', 'veth1_to_bridge\x00', {0xff}, {0xff}, 0x11, 0x81, 0x6, 0x1d}, 0x0, 0x1d0, 0x1f0, 0x0, {}, [@common=@srh={{0x30}, {0x2b, 0x2, 0x5, 0x4, 0x6, 0x401, 0x1}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x11, 0x2, 0x0, 'syz0\x00', 0x4}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x1, 0x2, 0xfffffffc, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x458) 840.473327ms ago: executing program 5 (id=483): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file3\x00', 0xcc0, &(0x7f00000001c0)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6865617274626561743d6e6f6e652c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c636f686572656e63793d62756666657265642c6572726f72733d636f6e74696e75652c757365725f78617474722c626172726965723d30303030303030303030303030303032363131352c6469725f726573765f6c6576656c3d30303030303030303030303030303030303030362c696e74722c6a6f75726e616c5f6173796e635f636f6d6d69742c00535d4e036013ec9e6e7ecdee3849b40884b95e94f35cec9600cd19beb0"], 0x1, 0x442a, &(0x7f0000004480)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) fallocate(r0, 0x0, 0x7351, 0x8001) ioctl$FITRIM(r0, 0x40406f06, &(0x7f00000000c0)={0x86, 0x7e4000, 0x20}) 760.278718ms ago: executing program 0 (id=484): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/keys\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) close(r0) 477.558953ms ago: executing program 0 (id=485): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x8, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x4, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x3, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) r0 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000040)=0x3, 0x4) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 340.033195ms ago: executing program 0 (id=486): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000200)="6fb355bb7c1e85390de40d0df22a", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 104.442799ms ago: executing program 4 (id=487): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x17ef, 0x6009, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xc0, 0x9, [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0xffffffff) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\"9'], 0x0}, 0x0) 79.476479ms ago: executing program 0 (id=488): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0) 0s ago: executing program 5 (id=489): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001d40)=@base={0x12, 0x4, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r0}, 0x20) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.239' (ED25519) to the list of known hosts. [ 65.708984][ T5755] cgroup: Unknown subsys name 'net' [ 65.899521][ T5755] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 67.256554][ T5755] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 68.651856][ T50] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 68.660803][ T50] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 68.693637][ T5779] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 68.704937][ T5776] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 68.716474][ T5778] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 68.718853][ T5777] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 68.725911][ T5778] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 68.732632][ T5777] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 68.739685][ T5778] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 68.745021][ T5776] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 68.752296][ T5778] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 68.760657][ T5776] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 68.774243][ T5776] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 68.781912][ T5777] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 68.782268][ T5779] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 68.789529][ T5777] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 68.797455][ T5779] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 68.804426][ T5777] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 68.811285][ T5778] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 68.817854][ T5777] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 68.825827][ T5778] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 68.833572][ T5777] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 68.838742][ T5778] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 68.863969][ T5769] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 69.317387][ T5767] chnl_net:caif_netlink_parms(): no params data found [ 69.418825][ T5764] chnl_net:caif_netlink_parms(): no params data found [ 69.429818][ T5765] chnl_net:caif_netlink_parms(): no params data found [ 69.464952][ T5766] chnl_net:caif_netlink_parms(): no params data found [ 69.516655][ T5767] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.525468][ T5767] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.532721][ T5767] bridge_slave_0: entered allmulticast mode [ 69.540369][ T5767] bridge_slave_0: entered promiscuous mode [ 69.572460][ T5767] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.579664][ T5767] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.587021][ T5767] bridge_slave_1: entered allmulticast mode [ 69.594119][ T5767] bridge_slave_1: entered promiscuous mode [ 69.675142][ T5764] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.682262][ T5764] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.690227][ T5764] bridge_slave_0: entered allmulticast mode [ 69.697598][ T5764] bridge_slave_0: entered promiscuous mode [ 69.708183][ T5767] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.720998][ T5767] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.764459][ T5764] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.771614][ T5764] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.780158][ T5764] bridge_slave_1: entered allmulticast mode [ 69.787594][ T5764] bridge_slave_1: entered promiscuous mode [ 69.823952][ T5765] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.831058][ T5765] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.838484][ T5765] bridge_slave_0: entered allmulticast mode [ 69.846168][ T5765] bridge_slave_0: entered promiscuous mode [ 69.868408][ T5764] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.886159][ T5766] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.893363][ T5766] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.900626][ T5766] bridge_slave_0: entered allmulticast mode [ 69.907888][ T5766] bridge_slave_0: entered promiscuous mode [ 69.916823][ T5765] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.924078][ T5765] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.931209][ T5765] bridge_slave_1: entered allmulticast mode [ 69.938185][ T5765] bridge_slave_1: entered promiscuous mode [ 69.946378][ T5764] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.967991][ T5767] team0: Port device team_slave_0 added [ 69.977470][ T5767] team0: Port device team_slave_1 added [ 69.983853][ T5766] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.990914][ T5766] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.998152][ T5766] bridge_slave_1: entered allmulticast mode [ 70.005293][ T5766] bridge_slave_1: entered promiscuous mode [ 70.064902][ T5764] team0: Port device team_slave_0 added [ 70.072896][ T5765] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.102376][ T5764] team0: Port device team_slave_1 added [ 70.110255][ T5765] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.120634][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.127716][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.154168][ T5767] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.167592][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.174605][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.200836][ T5767] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.214031][ T5766] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.257130][ T5766] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.302031][ T5765] team0: Port device team_slave_0 added [ 70.319753][ T5764] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.327057][ T5764] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.353997][ T5764] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.388960][ T5765] team0: Port device team_slave_1 added [ 70.408402][ T5766] team0: Port device team_slave_0 added [ 70.416987][ T5766] team0: Port device team_slave_1 added [ 70.424103][ T5764] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.431069][ T5764] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.458674][ T5764] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.472709][ T5767] hsr_slave_0: entered promiscuous mode [ 70.479772][ T5767] hsr_slave_1: entered promiscuous mode [ 70.536770][ T5765] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.545378][ T5765] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.571703][ T5765] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.584819][ T5765] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.591780][ T5765] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.617788][ T5765] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.635889][ T5766] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.642852][ T5766] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.669011][ T5766] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.726378][ T5766] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.733682][ T5766] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.759695][ T5766] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.792104][ T5764] hsr_slave_0: entered promiscuous mode [ 70.798937][ T5764] hsr_slave_1: entered promiscuous mode [ 70.805229][ T5764] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.812959][ T5764] Cannot create hsr debugfs directory [ 70.867346][ T5765] hsr_slave_0: entered promiscuous mode [ 70.874873][ T5765] hsr_slave_1: entered promiscuous mode [ 70.880942][ T5765] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.888623][ T5765] Cannot create hsr debugfs directory [ 70.914203][ T5778] Bluetooth: hci1: command tx timeout [ 70.919860][ T5771] Bluetooth: hci3: command tx timeout [ 70.920602][ T5778] Bluetooth: hci2: command tx timeout [ 70.926130][ T5769] Bluetooth: hci0: command tx timeout [ 70.983655][ T5766] hsr_slave_0: entered promiscuous mode [ 70.990051][ T5766] hsr_slave_1: entered promiscuous mode [ 70.998207][ T5766] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.005876][ T5766] Cannot create hsr debugfs directory [ 71.255951][ T5767] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 71.267910][ T5767] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 71.296390][ T5767] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 71.307636][ T5767] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 71.382265][ T5764] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 71.394372][ T5764] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 71.430569][ T5764] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 71.440537][ T5764] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 71.495393][ T5765] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 71.507801][ T5765] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 71.529416][ T5765] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 71.544460][ T5765] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 71.561319][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.568350][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.607816][ T5766] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 71.624681][ T5766] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 71.635979][ T5766] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 71.651982][ T5766] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 71.718562][ T5767] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.788066][ T5767] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.810519][ T5765] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.837701][ T3526] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.845120][ T3526] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.862473][ T5764] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.877136][ T3526] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.884299][ T3526] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.902808][ T5765] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.929536][ T1088] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.936747][ T1088] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.959030][ T5764] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.983245][ T1088] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.990377][ T1088] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.004768][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.011884][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.036046][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.043232][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.088152][ T5766] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.147624][ T5766] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.221224][ T5765] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.249464][ T1088] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.256656][ T1088] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.280962][ T3526] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.288174][ T3526] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.389281][ T5767] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.527451][ T5767] veth0_vlan: entered promiscuous mode [ 72.561746][ T5767] veth1_vlan: entered promiscuous mode [ 72.642012][ T5767] veth0_macvtap: entered promiscuous mode [ 72.661627][ T5767] veth1_macvtap: entered promiscuous mode [ 72.705977][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.732601][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.753111][ T5767] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.776058][ T5767] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.785326][ T5767] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.794119][ T5767] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.818104][ T5764] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.845547][ T5765] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.910911][ T5766] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.971368][ T5765] veth0_vlan: entered promiscuous mode [ 72.993973][ T5769] Bluetooth: hci0: command tx timeout [ 72.994494][ T5778] Bluetooth: hci3: command tx timeout [ 72.999437][ T5779] Bluetooth: hci1: command tx timeout [ 73.009351][ T5771] Bluetooth: hci2: command tx timeout [ 73.038869][ T5764] veth0_vlan: entered promiscuous mode [ 73.048474][ T5765] veth1_vlan: entered promiscuous mode [ 73.060627][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.071225][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.118314][ T5764] veth1_vlan: entered promiscuous mode [ 73.129732][ T5766] veth0_vlan: entered promiscuous mode [ 73.147799][ T5766] veth1_vlan: entered promiscuous mode [ 73.167012][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.186804][ T5765] veth0_macvtap: entered promiscuous mode [ 73.196249][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.221184][ T5765] veth1_macvtap: entered promiscuous mode [ 73.268014][ T5764] veth0_macvtap: entered promiscuous mode [ 73.282217][ T5764] veth1_macvtap: entered promiscuous mode [ 73.298023][ T5765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.316748][ T5765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.328807][ T5765] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.350982][ T5765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.363013][ T5765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.381599][ T5765] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.419025][ T5765] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.432515][ T5765] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.442491][ T5765] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.451824][ T5765] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.466679][ T5766] veth0_macvtap: entered promiscuous mode [ 73.478346][ T5766] veth1_macvtap: entered promiscuous mode [ 73.488281][ T5764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.498904][ T5764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.510026][ T5764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.520762][ T5764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.537546][ T5764] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.575520][ T5764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.592096][ T5764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.602361][ T5764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.613094][ T5764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.624984][ T5764] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.659856][ T5764] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.669501][ T5764] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.679697][ T5764] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.688714][ T5764] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.721870][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.739241][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.749560][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.760195][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.770875][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.781605][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.795744][ T5766] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.820649][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.832434][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.842749][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.854251][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.863678][ T5817] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 73.864689][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.882753][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.897011][ T5766] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.908006][ T5766] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.917095][ T5766] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.926110][ T5766] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.935085][ T5766] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.965692][ T3526] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.977058][ T3526] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.041911][ T3537] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.054756][ T5817] usb 3-1: Using ep0 maxpacket: 32 [ 74.062037][ T3537] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.064901][ T5817] usb 3-1: unable to get BOS descriptor or descriptor too short [ 74.101152][ T5817] usb 3-1: config 128 has an invalid interface number: 127 but max is 3 [ 74.111347][ T5817] usb 3-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 74.125129][ T5817] usb 3-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 74.144180][ T5817] usb 3-1: config 128 has no interface number 0 [ 74.150492][ T5817] usb 3-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid maxpacket 59391, setting to 1024 [ 74.165229][ T5817] usb 3-1: config 128 interface 127 has no altsetting 0 [ 74.174835][ T5817] usb 3-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 74.186048][ T5817] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.209305][ T5817] usb 3-1: Product: syz [ 74.214167][ T5817] usb 3-1: Manufacturer: syz [ 74.218787][ T5817] usb 3-1: SerialNumber: syz [ 74.238194][ T5859] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 74.282231][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.304846][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.358631][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.391589][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.446526][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.473657][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.551334][ T3526] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.584867][ T3526] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.663489][ T5817] usb 3-1: USB disconnect, device number 2 [ 74.734156][ T5869] syz.1.2[5869]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 74.827428][ T5757] udevd[5757]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 74.877248][ T5873] +}[@ calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 75.078314][ T5771] Bluetooth: hci2: command tx timeout [ 75.083813][ T5779] Bluetooth: hci0: command tx timeout [ 75.086811][ T5778] Bluetooth: hci1: command tx timeout [ 75.094679][ T5769] Bluetooth: hci3: command tx timeout [ 75.296359][ T5879] netem: change failed [ 75.419006][ T5881] syzkaller1: tun_chr_ioctl cmd 2148553947 [ 75.471877][ T5869] loop1: detected capacity change from 0 to 40427 [ 75.503564][ T5869] F2FS-fs (loop1): build fault injection attr: rate: 691, type: 0x7ffff [ 75.523572][ T5869] F2FS-fs (loop1): Image doesn't support compression [ 75.556121][ T5869] F2FS-fs (loop1): invalid crc value [ 75.589582][ T5869] F2FS-fs (loop1): Found nat_bits in checkpoint [ 75.722604][ T5875] loop0: detected capacity change from 0 to 32768 [ 75.740981][ T5869] F2FS-fs (loop1): Start checkpoint disabled! [ 75.763769][ T5875] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.9 (5875) [ 75.802453][ T5869] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 75.832938][ T5886] loop2: detected capacity change from 0 to 2048 [ 75.883715][ T5875] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 75.939224][ T5875] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 75.982984][ T5869] ======================================================= [ 75.982984][ T5869] WARNING: The mand mount option has been deprecated and [ 75.982984][ T5869] and is ignored by this kernel. Remove the mand [ 75.982984][ T5869] option from the mount to silence this warning. [ 75.982984][ T5869] ======================================================= [ 76.018327][ T5875] BTRFS info (device loop0): setting nodatacow, compression disabled [ 76.028621][ T5875] BTRFS info (device loop0): max_inline at 0 [ 76.035586][ T5875] BTRFS info (device loop0): enabling disk space caching [ 76.043750][ T5875] BTRFS info (device loop0): turning off barriers [ 76.050206][ T5875] BTRFS info (device loop0): turning on flush-on-commit [ 76.058252][ T5875] BTRFS info (device loop0): doing ref verification [ 76.061691][ T5886] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.064935][ T5875] BTRFS info (device loop0): force clearing of disk cache [ 76.064978][ T5875] BTRFS info (device loop0): enabling ssd optimizations [ 76.065033][ T5875] BTRFS info (device loop0): max_inline at 4096 [ 76.065049][ T5875] BTRFS info (device loop0): disk space caching is enabled [ 76.216076][ T5875] BTRFS info (device loop0): auto enabling async discard [ 76.241053][ T5875] BTRFS info (device loop0): rebuilding free space tree [ 76.354092][ T5875] BTRFS info (device loop0): disabling free space tree [ 76.356876][ T5767] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.361053][ T5875] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 76.401878][ T5875] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 76.718126][ T5765] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 76.798911][ T5914] loop2: detected capacity change from 0 to 4096 [ 76.850045][ T5914] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [ 76.895252][ T5892] syz.3.15 (5892) used greatest stack depth: 20616 bytes left [ 77.013806][ T5914] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 77.153381][ T5778] Bluetooth: hci1: command tx timeout [ 77.158843][ T5778] Bluetooth: hci3: command tx timeout [ 77.164656][ T5769] Bluetooth: hci2: command tx timeout [ 77.165476][ T5771] Bluetooth: hci0: command tx timeout [ 77.289556][ T5923] loop1: detected capacity change from 0 to 2048 [ 77.333015][ T5923] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 77.343339][ T5914] syz.2.17 (5914) used greatest stack depth: 20464 bytes left [ 77.467661][ T5926] netlink: 8 bytes leftover after parsing attributes in process `syz.0.21'. [ 77.535370][ T5926] netlink: 8 bytes leftover after parsing attributes in process `syz.0.21'. [ 77.734605][ T5930] netlink: 24 bytes leftover after parsing attributes in process `syz.2.23'. [ 77.807740][ T5934] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 77.951968][ T5936] loop1: detected capacity change from 0 to 1024 [ 78.810835][ T5961] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 78.949175][ T5944] loop2: detected capacity change from 0 to 32768 [ 79.037218][ T5944] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.30 (5944) [ 79.303440][ T5770] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 79.503308][ T5770] usb 1-1: Using ep0 maxpacket: 16 [ 79.528996][ T5770] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 79.563911][ T5770] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 79.595396][ T5770] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 79.622137][ T5770] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 79.657476][ T5770] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 79.706673][ T5770] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 79.734402][ T5770] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 79.760431][ T5770] usb 1-1: Manufacturer: syz [ 79.803143][ C1] sched: RT throttling activated [ 79.809879][ T5770] usb 1-1: config 0 descriptor?? [ 80.099349][ T5978] netlink: 28 bytes leftover after parsing attributes in process `syz.1.43'. [ 80.303365][ T5770] rc_core: IR keymap rc-hauppauge not found [ 80.321129][ T5770] Registered IR keymap rc-empty [ 80.350722][ T5770] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 80.388860][ T5981] netlink: 277 bytes leftover after parsing attributes in process `syz.1.44'. [ 80.403595][ T5770] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 80.468656][ T5770] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 80.557477][ T5770] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input5 [ 80.708969][ T5770] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 80.786780][ T5944] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 80.797357][ T5770] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 80.816081][ T5944] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 80.828296][ T5944] BTRFS info (device loop2): turning on sync discard [ 80.840638][ T5944] BTRFS info (device loop2): doing ref verification [ 80.848233][ T5770] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 80.877428][ T5944] BTRFS info (device loop2): disabling tree log [ 80.891332][ T5944] BTRFS info (device loop2): enabling ssd optimizations [ 80.898841][ T5770] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 80.917734][ T5944] BTRFS info (device loop2): using spread ssd allocation scheme [ 80.943371][ T5770] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 80.952933][ T5944] BTRFS info (device loop2): not using ssd optimizations [ 80.978346][ T5963] loop3: detected capacity change from 0 to 262144 [ 80.995722][ T5944] BTRFS info (device loop2): not using spread ssd allocation scheme [ 81.004036][ T5944] BTRFS info (device loop2): using free space tree [ 81.030811][ T5963] F2FS-fs (loop3): invalid crc value [ 81.049981][ T5963] F2FS-fs (loop3): Found nat_bits in checkpoint [ 81.053401][ T5770] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 81.122721][ T5963] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 81.143834][ T5770] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 81.228424][ T5770] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 81.313656][ T5770] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 81.331476][ T5983] loop1: detected capacity change from 0 to 32768 [ 81.359289][ T5770] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 81.372869][ T5767] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 81.426355][ T5983] XFS (loop1): DAX unsupported by block device. Turning off DAX. [ 81.433343][ T5770] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 81.488268][ T5983] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 81.514841][ T5770] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 81.551074][ T5770] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 81.633775][ T5770] usb 1-1: USB disconnect, device number 2 [ 81.640375][ T5983] XFS (loop1): Ending clean mount [ 81.713847][ T5771] Bluetooth: hci2: command tx timeout [ 81.718973][ T5983] XFS (loop1): Quotacheck needed: Please wait. [ 81.809151][ T23] cfg80211: failed to load regulatory.db [ 81.918038][ T5983] XFS (loop1): Quotacheck: Done. [ 82.101508][ T5810] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 82.148550][ T5764] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 82.295452][ T5810] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 82.335125][ T5810] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 82.353494][ T5810] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 82.393219][ T5810] usb 3-1: config 0 interface 0 has no altsetting 0 [ 82.411718][ T5810] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 82.425112][ T5810] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 82.456754][ T5810] usb 3-1: config 0 interface 0 has no altsetting 0 [ 82.477162][ T5810] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 82.493375][ T5810] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 82.526325][ T5810] usb 3-1: config 0 interface 0 has no altsetting 0 [ 82.538980][ T5810] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 82.558257][ T5810] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 82.606670][ T6020] loop0: detected capacity change from 0 to 32768 [ 82.613177][ T5810] usb 3-1: config 0 interface 0 has no altsetting 0 [ 82.614542][ T5810] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 82.637708][ T5810] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 82.649014][ T5810] usb 3-1: config 0 interface 0 has no altsetting 0 [ 82.655829][ T6020] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.49 (6020) [ 82.671451][ T5810] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 82.696885][ T6020] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 82.709276][ T5810] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 82.733741][ T6020] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 82.742664][ T6020] BTRFS info (device loop0): using free space tree [ 82.749366][ T5810] usb 3-1: config 0 interface 0 has no altsetting 0 [ 82.764524][ T5810] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 82.802555][ T5810] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 82.873029][ T5810] usb 3-1: config 0 interface 0 has no altsetting 0 [ 82.889231][ T5810] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 82.916585][ T5810] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 82.916872][ T6020] BTRFS info (device loop0): enabling ssd optimizations [ 82.947443][ T6020] BTRFS info (device loop0): auto enabling async discard [ 82.973536][ T5810] usb 3-1: config 0 interface 0 has no altsetting 0 [ 83.015111][ T5810] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 83.033739][ T5810] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 83.101533][ T5810] usb 3-1: Product: syz [ 83.107044][ T5810] usb 3-1: Manufacturer: syz [ 83.113074][ T5810] usb 3-1: SerialNumber: syz [ 83.127977][ T5810] usb 3-1: config 0 descriptor?? [ 83.200651][ T5810] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 83.457000][ T3489] BTRFS info (device loop0): qgroup scan completed (inconsistency flag cleared) [ 83.483045][ T6045] Driver unsupported XDP return value 0 on prog (id 8) dev N/A, expect packet loss! [ 83.576847][ T5770] usb 3-1: USB disconnect, device number 3 [ 83.591797][ T5770] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 83.780970][ T5765] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 83.923552][ T6050] netlink: 88 bytes leftover after parsing attributes in process `syz.1.56'. [ 84.003955][ T8] IPVS: starting estimator thread 0... [ 84.131865][ T6053] IPVS: using max 18 ests per chain, 43200 per kthread [ 84.301951][ T6063] Zero length message leads to an empty skb [ 84.585322][ T6069] veth1_to_batadv: entered promiscuous mode [ 85.071427][ T6088] input: syz1 as /devices/virtual/input/input6 [ 85.326453][ T6090] loop2: detected capacity change from 0 to 1024 [ 85.419703][ T6090] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 85.552692][ T6082] loop0: detected capacity change from 0 to 32768 [ 85.559552][ T6094] loop1: detected capacity change from 0 to 1024 [ 85.634895][ T6082] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 85.758124][ T6094] hfsplus: bad catalog entry type [ 85.816535][ T6082] XFS (loop0): Ending clean mount [ 85.834143][ T6082] XFS (loop0): Quotacheck needed: Please wait. [ 85.861310][ T3526] hfsplus: b-tree write err: -5, ino 4 [ 85.880556][ T6082] XFS (loop0): Quotacheck: Done. [ 85.923358][ T23] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 86.054756][ T5765] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 86.123490][ T23] usb 4-1: Using ep0 maxpacket: 8 [ 86.151704][ T23] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 86.165995][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.222899][ T23] pvrusb2: Hardware description: Terratec Grabster AV400 [ 86.249957][ T23] pvrusb2: ********** [ 86.266117][ T23] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 86.311804][ T23] pvrusb2: Important functionality might not be entirely working. [ 86.323167][ T23] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 86.361002][ T23] pvrusb2: ********** [ 86.435677][ T2315] pvrusb2: Invalid write control endpoint [ 86.566894][ T2315] pvrusb2: Invalid write control endpoint [ 86.584165][ T2315] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 86.597360][ T2315] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 86.605468][ T2315] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 86.633916][ T2315] pvrusb2: Device being rendered inoperable [ 86.664590][ T2315] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 86.672028][ T2315] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 86.681689][ T23] usb 4-1: USB disconnect, device number 2 [ 86.725210][ T2315] pvrusb2: Attached sub-driver cx25840 [ 86.730858][ T2315] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 86.780692][ T2315] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 86.836942][ T6110] loop1: detected capacity change from 0 to 32768 [ 86.861343][ T6110] XFS: noikeep mount option is deprecated. [ 86.932398][ T6135] loop0: detected capacity change from 0 to 128 [ 86.945603][ T6135] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 86.956713][ T6110] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 87.132027][ T6110] XFS (loop1): Ending clean mount [ 87.151628][ T6110] XFS (loop1): Quotacheck needed: Please wait. [ 87.222056][ T6110] XFS (loop1): Quotacheck: Done. [ 87.684899][ T5764] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 87.887077][ T6154] capability: warning: `syz.3.93' uses deprecated v2 capabilities in a way that may be insecure [ 87.947175][ T6154] program syz.3.93 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 88.139648][ T6160] input: syz1 as /devices/virtual/input/input7 [ 88.856236][ T6184] loop3: detected capacity change from 0 to 64 [ 88.923450][ T23] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 88.959246][ T6184] hfs: walked past end of dir [ 89.032018][ T6166] loop2: detected capacity change from 0 to 40427 [ 89.061851][ T6188] warning: `syz.1.110' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 89.089750][ T6166] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x7ffff [ 89.121972][ T6166] F2FS-fs (loop2): Image doesn't support compression [ 89.139958][ T6166] F2FS-fs (loop2): heap/no_heap options were deprecated [ 89.154418][ T6166] F2FS-fs (loop2): Image doesn't support compression [ 89.155777][ T23] usb 1-1: Using ep0 maxpacket: 16 [ 89.188549][ T6166] F2FS-fs (loop2): invalid crc value [ 89.199480][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 89.241318][ T23] usb 1-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 89.254813][ T6166] F2FS-fs (loop2): Found nat_bits in checkpoint [ 89.263945][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.294990][ T23] usb 1-1: config 0 descriptor?? [ 89.445647][ T6166] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 89.575357][ T6202] netlink: 8 bytes leftover after parsing attributes in process `syz.1.115'. [ 89.677011][ T5767] syz-executor: attempt to access beyond end of device [ 89.677011][ T5767] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 89.717108][ T5767] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 89.770502][ T23] steelseries 0003:1038:1410.0001: not enough fields in HID_OUTPUT_REPORT 0 [ 89.998592][ T23] usb 1-1: USB disconnect, device number 3 [ 90.064435][ T8] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 90.273456][ T8] usb 4-1: Using ep0 maxpacket: 16 [ 90.286221][ T8] usb 4-1: config 0 interface 0 has no altsetting 0 [ 90.306949][ T8] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 90.319731][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.337163][ T8] usb 4-1: config 0 descriptor?? [ 90.526109][ T6227] loop2: detected capacity change from 0 to 512 [ 90.606067][ T6227] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.636120][ T6227] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.798627][ T8] hid (null): invalid report_size 41201 [ 90.812764][ T8] hid (null): unknown global tag 0xe [ 90.819532][ T8] hid (null): unknown global tag 0xe [ 90.829942][ T8] hid (null): bogus close delimiter [ 90.904843][ T5767] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.056491][ T8] usb 4-1: USB disconnect, device number 3 [ 91.245514][ T6241] loop2: detected capacity change from 0 to 1024 [ 91.348218][ T6241] hfsplus: xattr search failed [ 91.451639][ T6232] loop0: detected capacity change from 0 to 40427 [ 91.479045][ T6232] F2FS-fs (loop0): build fault injection attr: rate: 4, type: 0x7ffff [ 91.508021][ T6232] F2FS-fs (loop0): Image doesn't support compression [ 91.525592][ T6232] F2FS-fs (loop0): Image doesn't support compression [ 91.532907][ T6232] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x4 [ 91.562791][ T6232] F2FS-fs (loop0): invalid crc value [ 91.593061][ T6232] F2FS-fs (loop0): inject page alloc in f2fs_grab_cache_page of __get_meta_page+0x156/0x580 [ 91.635472][ T6232] F2FS-fs (loop0): inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x644/0x920 [ 91.693413][ T6232] F2FS-fs (loop0): Found nat_bits in checkpoint [ 91.789887][ T6232] F2FS-fs (loop0): inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x644/0x920 [ 91.814534][ T6232] F2FS-fs (loop0): inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x644/0x920 [ 91.843520][ T6232] F2FS-fs (loop0): inject page alloc in f2fs_grab_cache_page of __get_meta_page+0x156/0x580 [ 91.913770][ T6232] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 92.044606][ T6232] F2FS-fs (loop0): inject page alloc in f2fs_grab_cache_page of __get_node_page+0x17b/0xf40 [ 92.098169][ T6232] F2FS-fs (loop0): inject page alloc in f2fs_grab_cache_page of f2fs_new_node_page+0x13a/0x910 [ 92.321584][ T5765] syz-executor: attempt to access beyond end of device [ 92.321584][ T5765] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 92.343113][ T5765] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 92.351354][ T5765] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 92.390835][ T6265] loop2: detected capacity change from 0 to 2048 [ 92.429622][ T6265] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 92.501303][ T6268] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 92.533308][ T5810] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 92.733789][ T5810] usb 2-1: Using ep0 maxpacket: 8 [ 92.749605][ T5810] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 92.767404][ T5810] usb 2-1: config 179 has no interface number 0 [ 92.783322][ T5810] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 92.810010][ T5810] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 92.840007][ T5810] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 92.863650][ T5810] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 92.881723][ T5810] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 92.903470][ T5810] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 92.922721][ T5810] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.948387][ T6260] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 93.270187][ T6278] loop3: detected capacity change from 0 to 512 [ 93.290030][ T6278] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 93.343605][ T6278] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 93.419615][ T6278] EXT4-fs (loop3): 1 truncate cleaned up [ 93.434560][ T6278] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 93.450239][ T5810] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input8 [ 93.541059][ T6274] loop2: detected capacity change from 0 to 32768 [ 93.690958][ T5766] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.722790][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 93.731213][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 93.744624][ T23] usb 2-1: USB disconnect, device number 2 [ 93.759161][ T23] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 93.821195][ T6276] loop0: detected capacity change from 0 to 32768 [ 93.822331][ T6274] JBD2: Ignoring recovery information on journal [ 93.829254][ T6276] XFS: noikeep mount option is deprecated. [ 93.929936][ T6274] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 93.940521][ T6276] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 93.981175][ T6288] loop3: detected capacity change from 0 to 1024 [ 94.061952][ T6288] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.154920][ T6276] XFS (loop0): Ending clean mount [ 94.175426][ T6276] XFS (loop0): Quotacheck needed: Please wait. [ 94.196292][ T5766] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.230486][ T6276] XFS (loop0): Quotacheck: Done. [ 94.246034][ T5767] ocfs2: Unmounting device (7,2) on (node local) [ 94.465327][ T5765] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 95.184770][ T6301] loop3: detected capacity change from 0 to 32768 [ 95.320581][ T6301] read_mapping_page failed! [ 95.356664][ T6301] ERROR: (device loop3): txCommit: [ 95.356664][ T6301] [ 95.419176][ T6301] find_entry called with index = 0 [ 95.443878][ T6301] read_mapping_page failed! [ 95.457510][ T6301] ERROR: (device loop3): txCommit: [ 95.457510][ T6301] [ 95.962174][ T6332] loop0: detected capacity change from 0 to 1024 [ 96.568841][ T6346] loop0: detected capacity change from 0 to 4096 [ 96.813320][ T6357] netdevsim netdevsim2 netdevsim2: entered allmulticast mode [ 96.913978][ T6362] pimreg: entered allmulticast mode [ 97.008996][ T6346] ntfs3: loop0: failed to convert "0080" to koi8-ru [ 97.059659][ T6346] ntfs3: loop0: failed to convert name for inode 1e. [ 97.081454][ T6346] ntfs3: loop0: failed to convert "256c" to koi8-ru [ 97.464319][ T6375] loop0: detected capacity change from 0 to 512 [ 97.473877][ T6375] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 97.537806][ T6375] EXT4-fs (loop0): 1 truncate cleaned up [ 97.562883][ T6375] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.583565][ T27] audit: type=1326 audit(1751312087.749:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6379 comm="syz.3.178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f921538e929 code=0x7ffc0000 [ 97.646589][ T27] audit: type=1326 audit(1751312087.819:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6379 comm="syz.3.178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f921538e929 code=0x7ffc0000 [ 97.669755][ T27] audit: type=1326 audit(1751312087.819:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6379 comm="syz.3.178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f921538e929 code=0x7ffc0000 [ 97.692862][ T27] audit: type=1326 audit(1751312087.819:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6379 comm="syz.3.178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f921538e929 code=0x7ffc0000 [ 97.715324][ T27] audit: type=1326 audit(1751312087.839:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6379 comm="syz.3.178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f921538e929 code=0x7ffc0000 [ 97.743981][ T5142] udevd[5142]: worker [5866] terminated by signal 33 (Unknown signal 33) [ 97.759981][ T5142] udevd[5142]: worker [5866] failed while handling '/devices/virtual/block/loop0' [ 97.785266][ T27] audit: type=1326 audit(1751312087.839:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6379 comm="syz.3.178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f921538e929 code=0x7ffc0000 [ 97.870313][ T27] audit: type=1326 audit(1751312087.839:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6379 comm="syz.3.178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f92153858e7 code=0x7ffc0000 [ 97.911022][ T5765] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.948048][ T27] audit: type=1326 audit(1751312087.839:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6379 comm="syz.3.178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f921532ab19 code=0x7ffc0000 [ 98.072776][ T27] audit: type=1326 audit(1751312087.839:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6379 comm="syz.3.178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f92153858e7 code=0x7ffc0000 [ 98.152910][ T27] audit: type=1326 audit(1751312087.839:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6379 comm="syz.3.178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f921532ab19 code=0x7ffc0000 [ 98.285851][ T6394] loop0: detected capacity change from 0 to 4096 [ 98.333934][ T6394] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 98.338365][ T5767] syz-executor (5767) used greatest stack depth: 19976 bytes left [ 98.532684][ T3526] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.797420][ T3526] netdevsim netdevsim2 netdevsim2 (unregistering): left allmulticast mode [ 98.825150][ T3526] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.913596][ T3526] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.990570][ T6405] loop0: detected capacity change from 0 to 512 [ 99.047123][ T6405] EXT4-fs (loop0): orphan cleanup on readonly fs [ 99.067168][ T3526] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.182723][ T6405] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.186: bg 0: block 248: padding at end of block bitmap is not set [ 99.273903][ T6405] EXT4-fs error (device loop0): ext4_acquire_dquot:6938: comm syz.0.186: Failed to acquire dquot type 1 [ 99.339149][ T6405] EXT4-fs (loop0): 1 truncate cleaned up [ 99.386428][ T6405] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 99.574345][ T6405] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 99.689458][ T6405] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 99.887332][ T5765] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.928447][ T5778] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 99.929800][ T6372] loop1: detected capacity change from 0 to 40427 [ 99.942353][ T5778] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 99.982537][ T5778] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 100.008836][ T5778] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 100.022890][ T5778] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 100.032385][ T5778] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 100.206449][ T6372] F2FS-fs (loop1): build fault injection attr: rate: 690, type: 0x7ffff [ 100.273235][ T6372] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x2 [ 100.304264][ T6372] F2FS-fs (loop1): Image doesn't support compression [ 100.351646][ T6372] F2FS-fs (loop1): Image doesn't support compression [ 100.427493][ T6372] F2FS-fs (loop1): invalid crc value [ 100.448564][ T6372] F2FS-fs (loop1): Failed to initialize F2FS segment manager (-4) [ 100.958578][ T6424] loop0: detected capacity change from 0 to 40427 [ 100.976679][ T6424] F2FS-fs (loop0): heap/no_heap options were deprecated [ 101.030641][ T6424] F2FS-fs (loop0): invalid crc value [ 101.117785][ T6424] F2FS-fs (loop0): Found nat_bits in checkpoint [ 101.287539][ T6437] loop3: detected capacity change from 0 to 4096 [ 101.302394][ T6424] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 101.458597][ T6416] chnl_net:caif_netlink_parms(): no params data found [ 102.113259][ T5771] Bluetooth: hci2: command tx timeout [ 102.200228][ T6457] loop1: detected capacity change from 0 to 2048 [ 102.278966][ T6466] netlink: 8 bytes leftover after parsing attributes in process `syz.3.195'. [ 102.381132][ T6457] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.417895][ T6457] EXT4-fs error (device loop1): ext4_find_extent:936: inode #2: comm syz.1.194: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 102.446255][ T6457] EXT4-fs (loop1): Remounting filesystem read-only [ 102.454011][ T6416] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.472985][ T6416] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.480262][ T6416] bridge_slave_0: entered allmulticast mode [ 102.487599][ T6416] bridge_slave_0: entered promiscuous mode [ 102.536713][ T6416] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.570941][ T6416] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.594309][ T6416] bridge_slave_1: entered allmulticast mode [ 102.629145][ T6416] bridge_slave_1: entered promiscuous mode [ 102.736788][ T5764] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.879430][ T3526] hsr_slave_0: left promiscuous mode [ 102.933279][ T3526] hsr_slave_1: left promiscuous mode [ 102.991341][ T3526] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 103.013338][ T3526] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 103.044866][ T3526] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 103.052313][ T3526] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 103.114295][ T3526] bridge_slave_1: left allmulticast mode [ 103.120124][ T3526] bridge_slave_1: left promiscuous mode [ 103.137657][ T3526] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.150031][ T6467] loop0: detected capacity change from 0 to 32768 [ 103.174390][ T3526] bridge_slave_0: left allmulticast mode [ 103.181048][ T3526] bridge_slave_0: left promiscuous mode [ 103.188165][ T3526] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.208927][ T6467] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 103.328724][ T3526] veth1_macvtap: left promiscuous mode [ 103.341084][ T3526] veth0_macvtap: left promiscuous mode [ 103.357611][ T6467] XFS (loop0): Ending clean mount [ 103.365908][ T3526] veth1_vlan: left promiscuous mode [ 103.372742][ T3526] veth0_vlan: left promiscuous mode [ 103.382417][ T6467] XFS (loop0): Quotacheck needed: Please wait. [ 103.457000][ T6467] XFS (loop0): Quotacheck: Done. [ 103.672449][ T5765] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 103.784679][ T3526] pimreg (unregistering): left allmulticast mode [ 104.027872][ T23] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 104.197384][ T5771] Bluetooth: hci2: command tx timeout [ 104.253520][ T23] usb 2-1: Using ep0 maxpacket: 8 [ 104.279071][ T23] usb 2-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 104.288330][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.296826][ T23] usb 2-1: Product: syz [ 104.301083][ T23] usb 2-1: Manufacturer: syz [ 104.306144][ T23] usb 2-1: SerialNumber: syz [ 104.318826][ T23] usb 2-1: config 0 descriptor?? [ 104.337351][ T23] gspca_main: sq930x-2.14.0 probing 2770:930c [ 104.378033][ T3526] team0 (unregistering): Port device team_slave_1 removed [ 104.414728][ T3526] team0 (unregistering): Port device team_slave_0 removed [ 104.455858][ T3526] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 104.497996][ T3526] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 104.909573][ T3526] bond0 (unregistering): Released all slaves [ 105.014809][ T6416] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 105.093039][ T6416] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 105.154718][ T23] gspca_sq930x: ucbus_write failed -71 [ 105.226155][ T6416] team0: Port device team_slave_0 added [ 105.242714][ T6416] team0: Port device team_slave_1 added [ 105.346742][ T6416] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.365762][ T6416] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.409143][ T23] gspca_sq930x: Sensor ov9630 not yet treated [ 105.420474][ T23] sq930x: probe of 2-1:0.0 failed with error -22 [ 105.428378][ T6416] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.454502][ T23] usb 2-1: USB disconnect, device number 3 [ 105.471128][ T6416] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.484653][ T9] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 105.508117][ T6416] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.549572][ T6416] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.603766][ T6515] syz.3.209 uses obsolete (PF_INET,SOCK_PACKET) [ 105.699807][ T6416] hsr_slave_0: entered promiscuous mode [ 105.710169][ T6416] hsr_slave_1: entered promiscuous mode [ 105.724985][ T9] usb 1-1: config 0 has an invalid interface number: 120 but max is 0 [ 105.739726][ T9] usb 1-1: config 0 has no interface number 0 [ 105.748539][ T9] usb 1-1: config 0 interface 120 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 105.783222][ T9] usb 1-1: config 0 interface 120 altsetting 0 endpoint 0x8A has invalid maxpacket 255, setting to 64 [ 105.833963][ T9] usb 1-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 105.862254][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.885311][ T9] usb 1-1: config 0 descriptor?? [ 105.891113][ T6506] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 105.923900][ T9] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.120/input/input9 [ 105.989991][ C0] usbtouchscreen 1-1:0.120: usbtouch_irq - usb_submit_urb failed with result: -1 [ 106.041230][ C0] usbtouchscreen 1-1:0.120: usbtouch_irq - usb_submit_urb failed with result: -1 [ 106.163579][ C0] usbtouchscreen 1-1:0.120: usbtouch_irq - usb_submit_urb failed with result: -1 [ 106.284086][ T5771] Bluetooth: hci2: command tx timeout [ 106.410636][ C0] usbtouchscreen 1-1:0.120: usbtouch_irq - usb_submit_urb failed with result: -1 [ 106.439005][ T5810] usb 1-1: USB disconnect, device number 4 [ 106.521700][ T6416] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 106.601651][ T6416] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 106.627545][ T6416] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 106.658280][ T6416] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 106.757047][ T6524] loop3: detected capacity change from 0 to 40427 [ 106.779736][ T6524] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 106.827253][ T6524] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 106.874662][ T6524] F2FS-fs (loop3): invalid crc value [ 106.900250][ T6524] F2FS-fs (loop3): Found nat_bits in checkpoint [ 106.930972][ T6416] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.031307][ T6416] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.068811][ T6524] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 107.107419][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.114643][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.134296][ T6524] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 107.217263][ T3537] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.224497][ T3537] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.606278][ T6577] netlink: 'syz.0.221': attribute type 13 has an invalid length. [ 107.624967][ T6577] netlink: 24859 bytes leftover after parsing attributes in process `syz.0.221'. [ 107.948199][ T6416] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.117291][ T6594] loop3: detected capacity change from 0 to 256 [ 108.353680][ T5771] Bluetooth: hci2: command tx timeout [ 108.669416][ T6611] netlink: 8 bytes leftover after parsing attributes in process `syz.3.226'. [ 108.722444][ T6416] veth0_vlan: entered promiscuous mode [ 108.765619][ T6416] veth1_vlan: entered promiscuous mode [ 108.867523][ T6416] veth0_macvtap: entered promiscuous mode [ 108.916096][ T6416] veth1_macvtap: entered promiscuous mode [ 108.987193][ T6416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.020442][ T6416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.059253][ T6416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.095629][ T6416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.123255][ T6416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.158916][ T6416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.191074][ T6416] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.230476][ T6416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.271604][ T6416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.291669][ T6416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.312619][ T6416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.337888][ T6416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.363178][ T6416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.383742][ T6416] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.397288][ T6628] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 109.417117][ T6416] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.443200][ T6416] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.451934][ T6416] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.474335][ T6416] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.627817][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.653827][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.744897][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.767823][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.326616][ T6630] loop1: detected capacity change from 0 to 40427 [ 110.344877][ T6630] F2FS-fs (loop1): build fault injection attr: rate: 4, type: 0x7ffff [ 110.370002][ T6630] F2FS-fs (loop1): Image doesn't support compression [ 110.382419][ T6655] tipc: Started in network mode [ 110.391601][ T6630] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x2ac [ 110.403335][ T6655] tipc: Node identity , cluster identity 4711 [ 110.409439][ T6655] tipc: Failed to set node id, please configure manually [ 110.436137][ T6630] F2FS-fs (loop1): invalid crc value [ 110.471768][ T6655] tipc: Enabling of bearer rejected, failed to enable media [ 110.487893][ T6630] F2FS-fs (loop1): inject page alloc in f2fs_grab_cache_page of __get_meta_page+0x156/0x580 [ 110.504255][ T6630] F2FS-fs (loop1): inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x644/0x920 [ 110.517546][ T6661] netlink: 12 bytes leftover after parsing attributes in process `syz.0.241'. [ 110.544703][ T6630] F2FS-fs (loop1): Found nat_bits in checkpoint [ 110.642986][ T6630] F2FS-fs (loop1): inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x644/0x920 [ 110.714700][ T6630] F2FS-fs (loop1): inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x644/0x920 [ 110.774446][ T6630] F2FS-fs (loop1): inject page alloc in f2fs_grab_cache_page of __get_meta_page+0x156/0x580 [ 110.869977][ T6630] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 110.947700][ T6675] netlink: 20 bytes leftover after parsing attributes in process `syz.0.246'. [ 110.963733][ T6675] netem: invalid attributes len -18 [ 110.968976][ T6675] netem: change failed [ 111.033800][ T6630] F2FS-fs (loop1): inject page alloc in f2fs_grab_cache_page of f2fs_get_read_data_page+0xc0/0x5c0 [ 111.131365][ T6681] F2FS-fs (loop1): inject page alloc in f2fs_grab_cache_page of f2fs_new_node_page+0x13a/0x910 [ 111.201379][ T6630] F2FS-fs (loop1): inject alloc nid in f2fs_alloc_nid of f2fs_new_inode+0xff/0x1020 [ 111.246251][ T6684] loop4: detected capacity change from 0 to 512 [ 111.330645][ T5764] F2FS-fs (loop1): inject page alloc in f2fs_grab_cache_page of f2fs_grab_meta_page+0x67/0x210 [ 111.434854][ T6684] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 111.453024][ T6684] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 111.502749][ T6684] EXT4-fs (loop4): 1 truncate cleaned up [ 111.534538][ T6684] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.655508][ T6693] netlink: 'syz.0.251': attribute type 4 has an invalid length. [ 111.776689][ T6416] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.247545][ T6712] loop1: detected capacity change from 0 to 4096 [ 112.336090][ T6712] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 112.387691][ T6712] ntfs3: loop1: Failed to load $Extend (-22). [ 112.425256][ T6712] ntfs3: loop1: Failed to initialize $Extend. [ 112.623005][ T6720] loop0: detected capacity change from 0 to 4096 [ 113.090688][ T6732] loop3: detected capacity change from 0 to 2048 [ 113.172884][ T6739] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 113.195289][ T6720] overlayfs: upper fs does not support tmpfile. [ 113.227061][ T6720] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 114.638841][ T6745] loop1: detected capacity change from 0 to 32768 [ 114.679743][ T6745] XFS: ikeep mount option is deprecated. [ 114.763492][ T5810] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 114.806253][ T6745] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 114.986934][ T5810] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 115.023266][ T5810] usb 1-1: config 0 has no interface number 0 [ 115.063955][ T5810] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 115.110907][ T5810] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.130865][ T6745] XFS (loop1): Ending clean mount [ 115.167547][ T6745] XFS (loop1): Quotacheck needed: Please wait. [ 115.176285][ T5810] usb 1-1: Product: syz [ 115.190170][ T6750] loop3: detected capacity change from 0 to 32768 [ 115.203799][ T5810] usb 1-1: Manufacturer: syz [ 115.229637][ T5810] usb 1-1: SerialNumber: syz [ 115.295827][ T5810] usb 1-1: config 0 descriptor?? [ 115.391730][ T6745] XFS (loop1): Quotacheck: Done. [ 115.402434][ T6750] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 115.646580][ T6750] XFS (loop3): Ending clean mount [ 115.653874][ T5810] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 115.755865][ T5810] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 115.833754][ T5810] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 115.892417][ T5810] usb 1-1: media controller created [ 115.965524][ T6760] loop4: detected capacity change from 0 to 262144 [ 115.983394][ T6760] F2FS-fs (loop4): invalid crc value [ 116.012863][ T5810] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 116.050451][ T6760] F2FS-fs (loop4): Found nat_bits in checkpoint [ 116.099696][ T6760] F2FS-fs (loop4): Start checkpoint disabled! [ 116.106416][ T5810] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 116.125604][ T6760] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 116.170252][ T5766] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 116.227120][ T5764] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 116.296160][ T5810] usb 1-1: USB disconnect, device number 5 [ 116.828556][ T6803] loop1: detected capacity change from 0 to 256 [ 116.858822][ T6803] exfat: Deprecated parameter 'namecase' [ 116.873703][ T6803] exfat: Deprecated parameter 'utf8' [ 116.908909][ T6803] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001ff53, chksum : 0xd72bb7d8, utbl_chksum : 0xe619d30d) [ 117.071712][ T6807] netlink: 36 bytes leftover after parsing attributes in process `syz.0.278'. [ 117.075460][ T6803] autofs4:pid:6803:autofs_fill_super: could not open pipe file descriptor [ 117.766087][ T6824] binder: 6819:6824 ioctl c018620c 200000000000 returned -22 [ 118.043940][ T6830] loop3: detected capacity change from 0 to 512 [ 118.160055][ T6830] EXT4-fs (loop3): 1 orphan inode deleted [ 118.173546][ T6830] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.181200][ T3489] __quota_error: 21 callbacks suppressed [ 118.181214][ T3489] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 118.208573][ T6830] ext4 filesystem being mounted at /76/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.261962][ T3489] EXT4-fs error (device loop3): ext4_release_dquot:6974: comm kworker/u4:9: Failed to release dquot type 1 [ 118.413112][ T5766] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.426912][ T3489] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 118.454503][ T3489] EXT4-fs error (device loop3): ext4_release_dquot:6974: comm kworker/u4:9: Failed to release dquot type 1 [ 118.630424][ T6842] netlink: 8 bytes leftover after parsing attributes in process `syz.3.291'. [ 118.666519][ T6845] loop0: detected capacity change from 0 to 512 [ 118.709117][ T6845] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.764744][ T6845] ext4 filesystem being mounted at /70/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.009879][ T6840] mmap: syz.1.290 (6840) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 119.024822][ T6858] loop4: detected capacity change from 0 to 1024 [ 119.036712][ T5765] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.042477][ T6858] EXT4-fs: Ignoring removed i_version option [ 119.095345][ T6858] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 119.157964][ T6858] EXT4-fs error (device loop4): ext4_map_blocks:718: inode #3: block 1: comm syz.4.296: lblock 1 mapped to illegal pblock 1 (length 1) [ 119.176525][ T6858] Quota error (device loop4): write_blk: dquota write failed [ 119.187458][ T6858] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 119.197747][ T6858] EXT4-fs error (device loop4): ext4_acquire_dquot:6938: comm syz.4.296: Failed to acquire dquot type 0 [ 119.210599][ T6858] EXT4-fs error (device loop4): ext4_free_blocks:6681: comm syz.4.296: Freeing blocks not in datazone - block = 0, count = 4096 [ 119.234150][ T6858] EXT4-fs error (device loop4): ext4_read_inode_bitmap:140: comm syz.4.296: Invalid inode bitmap blk 0 in block_group 0 [ 119.253421][ T6858] EXT4-fs error (device loop4) in ext4_free_inode:363: Corrupt filesystem [ 119.262938][ T3537] EXT4-fs error (device loop4): ext4_map_blocks:608: inode #3: block 1: comm kworker/u4:11: lblock 1 mapped to illegal pblock 1 (length 1) [ 119.286152][ T6858] EXT4-fs (loop4): 1 orphan inode deleted [ 119.300026][ T6858] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.316302][ T3537] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 119.328217][ T3537] EXT4-fs error (device loop4): ext4_release_dquot:6974: comm kworker/u4:11: Failed to release dquot type 0 [ 119.432845][ T6858] EXT4-fs error (device loop4): ext4_nfs_get_inode:1551: inode #12: comm syz.4.296: iget: bad extra_isize 65535 (inode size 256) [ 119.531244][ T6416] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.544879][ T6865] loop1: detected capacity change from 0 to 1024 [ 119.619937][ T6865] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.696528][ T6865] ext4 filesystem being mounted at /79/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.903727][ T5764] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 16: comm syz-executor: path /79/file1: bad entry in directory: rec_len is smaller than minimal - offset=876, inode=0, rec_len=0, size=1024 fake=0 [ 119.966218][ T5764] EXT4-fs error (device loop1): ext4_readdir:263: inode #11: block 37: comm syz-executor: path /79/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1279, size=1024 fake=0 [ 120.008422][ T6863] loop0: detected capacity change from 0 to 32768 [ 120.024117][ T5764] EXT4-fs error (device loop1): ext4_empty_dir:3177: inode #11: block 37: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=5120, inode=0, rec_len=1279, size=1024 fake=0 [ 120.060289][ T6869] loop4: detected capacity change from 0 to 32768 [ 120.068926][ T6863] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 120.088545][ T5764] EXT4-fs error (device loop1): ext4_readdir:263: inode #11: block 37: comm syz-executor: path /79/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1279, size=1024 fake=0 [ 120.144281][ T5764] EXT4-fs error (device loop1): ext4_empty_dir:3177: inode #11: block 37: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=5120, inode=0, rec_len=1279, size=1024 fake=0 [ 120.147036][ T6869] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 120.192100][ T5764] EXT4-fs error (device loop1): ext4_readdir:263: inode #11: block 37: comm syz-executor: path /79/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1279, size=1024 fake=0 [ 120.262927][ T6863] XFS (loop0): Ending clean mount [ 120.287799][ T5764] EXT4-fs error (device loop1): ext4_empty_dir:3177: inode #11: block 37: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=5120, inode=0, rec_len=1279, size=1024 fake=0 [ 120.337106][ T5764] EXT4-fs error (device loop1): ext4_readdir:263: inode #11: block 37: comm syz-executor: path /79/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1279, size=1024 fake=0 [ 120.408915][ T5764] EXT4-fs error (device loop1): ext4_empty_dir:3177: inode #11: block 37: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=5120, inode=0, rec_len=1279, size=1024 fake=0 [ 120.436697][ T5764] EXT4-fs error (device loop1): ext4_readdir:263: inode #11: block 37: comm syz-executor: path /79/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1279, size=1024 fake=0 [ 120.595401][ T5765] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 120.605866][ T6416] ocfs2: Unmounting device (7,4) on (node local) [ 121.263443][ T5764] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.361916][ T1088] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.564447][ T1088] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.736559][ T1088] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.798923][ T6914] ALSA: mixer_oss: invalid OSS volume '·' [ 121.947163][ T1088] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.277946][ T6924] loop3: detected capacity change from 0 to 512 [ 122.292069][ T5778] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 122.307042][ T5778] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 122.316318][ T5778] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 122.344161][ T5778] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 122.352456][ T5778] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 122.360967][ T5778] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 122.382128][ T6924] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.450909][ T6924] ext4 filesystem being mounted at /90/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 122.458294][ T6935] loop0: detected capacity change from 0 to 1024 [ 122.650213][ T42] hfsplus: b-tree write err: -5, ino 8 [ 122.655010][ T5766] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.138705][ T6927] chnl_net:caif_netlink_parms(): no params data found [ 124.120604][ T6927] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.143533][ T6927] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.163614][ T6927] bridge_slave_0: entered allmulticast mode [ 124.172040][ T6927] bridge_slave_0: entered promiscuous mode [ 124.204905][ T6927] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.217478][ T6960] loop0: detected capacity change from 0 to 32768 [ 124.220491][ T6927] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.236965][ T6927] bridge_slave_1: entered allmulticast mode [ 124.254684][ T6927] bridge_slave_1: entered promiscuous mode [ 124.274169][ T6960] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop0 scanned by syz.0.327 (6960) [ 124.337790][ T6960] BTRFS info (device loop0): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 124.382375][ T6960] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 124.428050][ T6960] BTRFS info (device loop0): setting nodatacow, compression disabled [ 124.438658][ T5771] Bluetooth: hci3: command tx timeout [ 124.488339][ T6960] BTRFS info (device loop0): turning on flush-on-commit [ 124.518650][ T6960] BTRFS info (device loop0): using free space tree [ 124.611576][ T6989] can0: slcan on ttyS3. [ 124.680479][ T6960] BTRFS info (device loop0): enabling ssd optimizations [ 124.692331][ T6927] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 124.720593][ T6960] BTRFS info (device loop0): auto enabling async discard [ 124.844278][ T6994] can0 (unregistered): slcan off ttyS3. [ 124.959456][ T6927] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 125.022214][ T5765] BTRFS info (device loop0): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 125.046893][ T6996] can0: slcan on ttyS3. [ 125.458749][ T6927] team0: Port device team_slave_0 added [ 125.488400][ T6927] team0: Port device team_slave_1 added [ 125.513201][ T6987] can0 (unregistered): slcan off ttyS3. [ 125.673368][ T5783] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 125.717175][ T1088] hsr_slave_0: left promiscuous mode [ 125.739027][ T7032] loop3: detected capacity change from 0 to 1024 [ 125.753830][ T1088] hsr_slave_1: left promiscuous mode [ 125.778168][ T1088] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 125.821610][ T1088] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 125.831920][ T7032] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 125.864050][ T5783] usb 5-1: too many configurations: 151, using maximum allowed: 8 [ 125.875908][ T1088] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 125.884723][ T1088] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 125.896714][ T5783] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 125.905041][ T7032] ext4 filesystem being mounted at /98/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.913920][ T1088] bridge_slave_1: left allmulticast mode [ 125.922885][ T5783] usb 5-1: config 0 has no interfaces? [ 125.929144][ T1088] bridge_slave_1: left promiscuous mode [ 125.936075][ T5783] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 125.946520][ T1088] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.954193][ T5783] usb 5-1: config 0 has no interfaces? [ 125.962505][ T5783] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 125.983200][ T5783] usb 5-1: config 0 has no interfaces? [ 125.999000][ T5783] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 126.018785][ T1088] bridge_slave_0: left allmulticast mode [ 126.045691][ T5783] usb 5-1: config 0 has no interfaces? [ 126.051324][ T1088] bridge_slave_0: left promiscuous mode [ 126.067856][ T5783] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 126.088780][ T1088] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.107754][ T5783] usb 5-1: config 0 has no interfaces? [ 126.122402][ T5783] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 126.154686][ T5766] EXT4-fs error (device loop3): ext4_readdir:263: inode #2: block 16: comm syz-executor: path /98/file1: bad entry in directory: rec_len is smaller than minimal - offset=876, inode=0, rec_len=0, size=1024 fake=0 [ 126.190019][ T5783] usb 5-1: config 0 has no interfaces? [ 126.214351][ T5783] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 126.230943][ T1088] veth1_macvtap: left promiscuous mode [ 126.236805][ T5783] usb 5-1: config 0 has no interfaces? [ 126.242438][ T1088] veth0_macvtap: left promiscuous mode [ 126.250741][ T5783] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 126.262769][ T1088] veth1_vlan: left promiscuous mode [ 126.263919][ T5766] EXT4-fs error (device loop3): ext4_readdir:263: inode #11: block 37: comm syz-executor: path /98/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1279, size=1024 fake=0 [ 126.288439][ T5783] usb 5-1: config 0 has no interfaces? [ 126.296400][ T5783] usb 5-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7 [ 126.298632][ T1088] veth0_vlan: left promiscuous mode [ 126.311423][ T5766] EXT4-fs error (device loop3): ext4_empty_dir:3177: inode #11: block 37: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=5120, inode=0, rec_len=1279, size=1024 fake=0 [ 126.332511][ T5783] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130 [ 126.340964][ T5783] usb 5-1: Product: syz [ 126.345202][ T5783] usb 5-1: Manufacturer: syz [ 126.349810][ T5783] usb 5-1: SerialNumber: syz [ 126.357747][ T5783] usb 5-1: config 0 descriptor?? [ 126.368272][ T5766] EXT4-fs error (device loop3): ext4_readdir:263: inode #11: block 37: comm syz-executor: path /98/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1279, size=1024 fake=0 [ 126.409167][ T5766] EXT4-fs error (device loop3): ext4_empty_dir:3177: inode #11: block 37: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=5120, inode=0, rec_len=1279, size=1024 fake=0 [ 126.440220][ T5766] EXT4-fs error (device loop3): ext4_readdir:263: inode #11: block 37: comm syz-executor: path /98/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1279, size=1024 fake=0 [ 126.461966][ T5766] EXT4-fs error (device loop3): ext4_empty_dir:3177: inode #11: block 37: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=5120, inode=0, rec_len=1279, size=1024 fake=0 [ 126.495875][ T5766] EXT4-fs error (device loop3): ext4_readdir:263: inode #11: block 37: comm syz-executor: path /98/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1279, size=1024 fake=0 [ 126.518511][ T5771] Bluetooth: hci3: command tx timeout [ 126.527468][ T5766] EXT4-fs error (device loop3): ext4_empty_dir:3177: inode #11: block 37: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=5120, inode=0, rec_len=1279, size=1024 fake=0 [ 126.553856][ T5766] EXT4-fs error (device loop3): ext4_readdir:263: inode #11: block 37: comm syz-executor: path /98/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1279, size=1024 fake=0 [ 126.728758][ T7052] loop0: detected capacity change from 0 to 1024 [ 126.730342][ T9] usb 5-1: USB disconnect, device number 2 [ 126.781341][ T7052] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 126.799327][ T7052] ext4 filesystem being mounted at /82/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 126.822937][ T27] audit: type=1800 audit(1751312117.019:31): pid=7052 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.348" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 126.881134][ T5765] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.417087][ T1088] team0 (unregistering): Port device team_slave_1 removed [ 127.502222][ T1088] team0 (unregistering): Port device team_slave_0 removed [ 127.542580][ T1088] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 127.581779][ T1088] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 128.000855][ T1088] bond0 (unregistering): Released all slaves [ 128.078995][ T6927] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 128.087347][ T6927] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 128.114812][ T6927] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 128.241704][ T6927] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 128.260359][ T6927] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 128.289732][ T6927] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 128.413865][ T5766] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.502312][ T6927] hsr_slave_0: entered promiscuous mode [ 128.565861][ T6927] hsr_slave_1: entered promiscuous mode [ 128.593857][ T6927] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 128.595396][ T5771] Bluetooth: hci3: command tx timeout [ 128.601433][ T6927] Cannot create hsr debugfs directory [ 128.704759][ T7072] loop0: detected capacity change from 0 to 1024 [ 128.799643][ T7072] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 129.200534][ T7086] loop0: detected capacity change from 0 to 2048 [ 129.244459][ T7086] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.298461][ T1088] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.413840][ T1088] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.490405][ T5765] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.564519][ T1088] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.677928][ T6927] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 129.717100][ T6927] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 129.729873][ T7093] loop4: detected capacity change from 0 to 4096 [ 129.767830][ T7093] ntfs3: loop4: Different NTFS sector size (1024) and media sector size (512). [ 129.810435][ T1088] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.898317][ T6927] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 129.957277][ T5778] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 129.968871][ T6927] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 129.978390][ T5778] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 129.988575][ T5778] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 129.998050][ T5778] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 130.008369][ T5778] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 130.023349][ T5778] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 130.037864][ T7093] ntfs3: loop4: ino=1e, "file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" failed to parse mft record [ 130.074701][ T7093] ntfs3: loop4: ino=1e, "file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" failed to parse mft record [ 130.301037][ T42] ntfs3: loop4: ino=1e, failed to parse mft record [ 130.322249][ T7100] loop0: detected capacity change from 0 to 32768 [ 130.457032][ T7100] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 130.612713][ T5765] ocfs2: Unmounting device (7,0) on (node local) [ 130.683404][ T5771] Bluetooth: hci3: command tx timeout [ 131.115289][ T7099] chnl_net:caif_netlink_parms(): no params data found [ 131.289241][ T6927] 8021q: adding VLAN 0 to HW filter on device bond0 [ 131.487610][ T6927] 8021q: adding VLAN 0 to HW filter on device team0 [ 131.496794][ T7099] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.504549][ T7099] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.511846][ T7099] bridge_slave_0: entered allmulticast mode [ 131.519161][ T7099] bridge_slave_0: entered promiscuous mode [ 131.540555][ T7099] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.549789][ T7099] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.557202][ T7099] bridge_slave_1: entered allmulticast mode [ 131.564907][ T7099] bridge_slave_1: entered promiscuous mode [ 131.604845][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.612008][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 131.780085][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.787260][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 131.917504][ T7099] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 131.964141][ T7099] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 132.113657][ T5778] Bluetooth: hci1: command tx timeout [ 132.171047][ T7169] loop0: detected capacity change from 0 to 1024 [ 132.200601][ T7169] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 132.274961][ T7169] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.396486][ T7099] team0: Port device team_slave_0 added [ 132.423360][ T7169] EXT4-fs error (device loop0): ext4_xattr_block_find:1886: inode #15: comm syz.0.373: corrupted xattr block 161: invalid header [ 132.454308][ T7169] EXT4-fs (loop0): Remounting filesystem read-only [ 132.516067][ T5765] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.532910][ T7099] team0: Port device team_slave_1 added [ 132.657099][ T7099] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 132.673513][ T7099] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.713214][ T7099] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 132.757733][ T7099] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 132.793878][ T7099] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.826221][ T7099] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 132.891957][ T1088] hsr_slave_0: left promiscuous mode [ 132.912393][ T1088] hsr_slave_1: left promiscuous mode [ 132.939285][ T1088] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 132.951634][ T1088] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 132.961474][ T1088] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 132.971511][ T1088] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 133.002193][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.008831][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.024003][ T1088] bridge_slave_1: left allmulticast mode [ 133.043233][ T1088] bridge_slave_1: left promiscuous mode [ 133.049052][ T1088] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.070467][ T1088] bridge_slave_0: left allmulticast mode [ 133.084580][ T1088] bridge_slave_0: left promiscuous mode [ 133.090323][ T1088] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.150772][ T1088] veth1_to_batadv: left promiscuous mode [ 133.175218][ T1088] veth1_macvtap: left promiscuous mode [ 133.180812][ T1088] veth0_macvtap: left promiscuous mode [ 133.193387][ T1088] veth1_vlan: left promiscuous mode [ 133.193676][ T9] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 133.198771][ T1088] veth0_vlan: left promiscuous mode [ 133.235985][ T7179] loop4: detected capacity change from 0 to 40427 [ 133.263197][ T7179] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 133.284107][ T7179] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 133.317036][ T7179] F2FS-fs (loop4): invalid crc value [ 133.371462][ T7179] F2FS-fs (loop4): Found nat_bits in checkpoint [ 133.397198][ T9] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 133.422775][ T9] usb 1-1: config 0 has no interface number 0 [ 133.442099][ T9] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 133.460576][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.483599][ T9] usb 1-1: Product: syz [ 133.487807][ T9] usb 1-1: Manufacturer: syz [ 133.507833][ T9] usb 1-1: SerialNumber: syz [ 133.518436][ T9] usb 1-1: config 0 descriptor?? [ 133.556046][ T7179] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 133.583587][ T7179] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 133.768923][ T9] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 133.807251][ T9] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 133.822615][ T7179] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 133.824710][ T9] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 133.832023][ T7179] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 133.845977][ T9] usb 1-1: media controller created [ 133.858343][ T7179] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 133.879773][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 133.883682][ T7179] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 133.915372][ T7179] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 133.922979][ T7179] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 133.942838][ T7179] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 134.193291][ T5778] Bluetooth: hci1: command tx timeout [ 134.428151][ T7205] loop4: detected capacity change from 0 to 256 [ 134.452885][ T27] audit: type=1800 audit(1751312124.649:32): pid=7205 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.378" name="file1" dev="loop4" ino=1048597 res=0 errno=0 [ 134.502337][ T27] audit: type=1800 audit(1751312124.679:33): pid=7205 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.378" name="file1" dev="loop4" ino=1048597 res=0 errno=0 [ 134.538103][ T7206] FAT-fs (loop4): error, corrupted file size (i_pos 196, 2097152) [ 134.559191][ T7206] FAT-fs (loop4): error, corrupted file size (i_pos 196, 2097152) [ 134.648827][ T1088] team0 (unregistering): Port device team_slave_1 removed [ 134.738357][ T1088] team0 (unregistering): Port device team_slave_0 removed [ 134.797304][ T7208] PKCS8: Unsupported PKCS#8 version [ 134.825673][ T1088] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 134.900987][ T1088] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 134.998327][ T9] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 135.059836][ T9] usb 1-1: USB disconnect, device number 6 [ 135.432725][ T1088] bond0 (unregistering): Released all slaves [ 135.654460][ T7099] hsr_slave_0: entered promiscuous mode [ 135.694988][ T7099] hsr_slave_1: entered promiscuous mode [ 135.717308][ T7099] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 135.732092][ T7099] Cannot create hsr debugfs directory [ 135.932200][ T6927] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 136.221638][ T7228] loop0: detected capacity change from 0 to 4096 [ 136.239544][ T7228] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 136.273274][ T5778] Bluetooth: hci1: command tx timeout [ 136.301738][ T1088] IPVS: stop unused estimator thread 0... [ 136.365826][ T7228] ntfs: volume version 3.1. [ 136.565799][ T7099] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 136.604784][ T7243] 9pnet: p9_errstr2errno: server reported unknown error [ 136.624826][ T7099] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 136.701299][ T7099] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 136.745677][ T7099] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 136.952240][ T6927] veth0_vlan: entered promiscuous mode [ 137.015173][ T6927] veth1_vlan: entered promiscuous mode [ 137.082732][ T7099] 8021q: adding VLAN 0 to HW filter on device bond0 [ 137.119080][ T6927] veth0_macvtap: entered promiscuous mode [ 137.132807][ T7099] 8021q: adding VLAN 0 to HW filter on device team0 [ 137.142953][ T6927] veth1_macvtap: entered promiscuous mode [ 137.161541][ T3489] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.168721][ T3489] bridge0: port 1(bridge_slave_0) entered forwarding state [ 137.211221][ T3489] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.219609][ T3489] bridge0: port 2(bridge_slave_1) entered forwarding state [ 137.281338][ T6927] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 137.297133][ T6927] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.310377][ T6927] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 137.321246][ T788] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 137.329154][ T6927] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.342840][ T6927] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 137.379188][ T7099] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 137.403892][ T6927] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 137.424964][ T6927] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.453401][ T6927] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 137.478285][ T6927] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.500339][ T6927] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 137.528204][ T788] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 137.545363][ T6927] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.551513][ T7258] loop0: detected capacity change from 0 to 32768 [ 137.571017][ T788] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 137.591089][ T6927] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.600466][ T788] usb 5-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 137.613386][ T6927] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.632405][ T788] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.641574][ T6927] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.646834][ T27] audit: type=1800 audit(1751312127.849:34): pid=7258 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.389" name="file1" dev="loop0" ino=7 res=0 errno=0 [ 137.654891][ T788] usb 5-1: config 0 descriptor?? [ 137.874643][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.882509][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 138.005496][ T142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 138.031763][ T142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 138.180714][ T7099] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 138.189738][ T788] isku 0003:1E7D:319C.0003: unknown main item tag 0x0 [ 138.213669][ T788] isku 0003:1E7D:319C.0003: unknown main item tag 0x0 [ 138.251316][ T788] isku 0003:1E7D:319C.0003: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.4-1/input0 [ 138.356063][ T5778] Bluetooth: hci1: command tx timeout [ 138.783437][ T5817] usb 5-1: USB disconnect, device number 3 [ 139.059016][ T7099] veth0_vlan: entered promiscuous mode [ 139.100693][ T7305] loop0: detected capacity change from 0 to 2048 [ 139.114562][ T7099] veth1_vlan: entered promiscuous mode [ 139.203416][ T7305] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 139.221935][ T7099] veth0_macvtap: entered promiscuous mode [ 139.266950][ T7099] veth1_macvtap: entered promiscuous mode [ 139.360529][ T7099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.396374][ T7099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.425118][ T7099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.471490][ T7099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.502847][ T7099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.529543][ T7099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.577869][ T7099] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 139.627780][ T7099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.683319][ T7099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.720347][ T7099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.751238][ T7099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.775690][ T7099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.783309][ T7322] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 139.827638][ T7099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.851236][ T7323] iommufd_mock iommufd_mock2: Adding to iommu group 1 [ 139.871862][ T7099] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 139.913069][ T7099] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.929542][ T7099] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.955670][ T7099] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.971638][ T7099] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.161479][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.163302][ T1525] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 140.188290][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.238052][ T3489] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.261025][ T3489] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.373887][ T1525] usb 6-1: Using ep0 maxpacket: 16 [ 140.390029][ T1525] usb 6-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 140.403544][ T1525] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.422180][ T1525] usb 6-1: config 0 descriptor?? [ 140.430001][ T1525] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 140.437717][ T5778] Bluetooth: hci1: command tx timeout [ 140.599755][ T7320] loop4: detected capacity change from 0 to 32768 [ 140.640641][ T1525] usb 6-1: Detected FT232B [ 140.661150][ T7320] JBD2: Ignoring recovery information on journal [ 140.690607][ T7344] loop6: detected capacity change from 0 to 2048 [ 140.751555][ T7320] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 140.785276][ T7344] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.847319][ T1525] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 140.877026][ T1525] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 141.152653][ T7099] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.189463][ T1525] usb 6-1: USB disconnect, device number 2 [ 141.238252][ T1525] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 141.264055][ T1525] ftdi_sio 6-1:0.0: device disconnected [ 141.264092][ T6416] ocfs2: Unmounting device (7,4) on (node local) [ 141.854342][ T7374] loop4: detected capacity change from 0 to 4096 [ 141.879118][ T7374] ntfs3: loop4: Different NTFS sector size (2048) and media sector size (512). [ 142.252982][ T7384] netem: unknown loss type 0 [ 142.273420][ T7384] netem: change failed [ 142.471736][ T7369] loop6: detected capacity change from 0 to 32768 [ 142.507105][ T7369] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 scanned by syz.6.408 (7369) [ 142.580228][ T7369] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 142.653370][ T7369] BTRFS info (device loop6): using crc32c (crc32c-intel) checksum algorithm [ 142.672875][ T7369] BTRFS info (device loop6): force clearing of disk cache [ 142.712251][ T7369] BTRFS info (device loop6): setting nodatacow, compression disabled [ 142.736245][ T7389] loop4: detected capacity change from 0 to 4096 [ 142.737699][ T7369] BTRFS info (device loop6): turning off barriers [ 142.784486][ T7369] BTRFS info (device loop6): enabling auto defrag [ 142.789965][ T7389] ntfs3: loop4: Different NTFS sector size (2048) and media sector size (512). [ 142.790934][ T7369] BTRFS info (device loop6): turning on sync discard [ 142.852795][ T7369] BTRFS warning (device loop6): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 142.883961][ T7369] BTRFS info (device loop6): trying to use backup root at mount time [ 142.892092][ T7369] BTRFS info (device loop6): enabling ssd optimizations [ 142.928990][ T7369] BTRFS info (device loop6): using spread ssd allocation scheme [ 142.962307][ T7369] BTRFS info (device loop6): using free space tree [ 143.081635][ T7408] process 'syz.0.415' launched './file2' with NULL argv: empty string added [ 143.084610][ T1088] BTRFS warning (device loop6): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0xb6fb6650 level 0 [ 143.206505][ T7369] BTRFS warning (device loop6): couldn't read tree root [ 143.226338][ T7369] BTRFS warning (device loop6): try to load backup roots slot 1 [ 143.271579][ T3489] BTRFS warning (device loop6): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x7a216cc0 level 0 [ 143.325141][ T7381] loop5: detected capacity change from 0 to 40427 [ 143.347373][ T7369] BTRFS warning (device loop6): couldn't read tree root [ 143.373560][ T7369] BTRFS warning (device loop6): try to load backup roots slot 2 [ 143.397964][ T3526] BTRFS error (device loop6): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 143.453409][ T7381] F2FS-fs (loop5): invalid crc value [ 143.472323][ T7369] BTRFS warning (device loop6): couldn't read tree root [ 143.502921][ T7369] BTRFS warning (device loop6): try to load backup roots slot 3 [ 143.540718][ T7381] F2FS-fs (loop5): Found nat_bits in checkpoint [ 143.628540][ T7369] BTRFS info (device loop6): rebuilding free space tree [ 143.720321][ T7381] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 143.739047][ T7369] BTRFS info (device loop6): checking UUID tree [ 143.789327][ T7428] loop4: detected capacity change from 0 to 4096 [ 143.853231][ T7428] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 143.978818][ T7428] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 143.994315][ T6927] syz-executor: attempt to access beyond end of device [ 143.994315][ T6927] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 144.005295][ T7428] ntfs3: loop4: Failed to initialize $Extend/$ObjId. [ 144.030232][ T6927] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 144.138007][ T7099] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 144.514169][ T27] audit: type=1326 audit(1751312134.709:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7444 comm="syz.4.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11dc78e929 code=0x7ffc0000 [ 144.603902][ T27] audit: type=1326 audit(1751312134.709:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7444 comm="syz.4.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11dc78e929 code=0x7ffc0000 [ 144.710052][ T27] audit: type=1326 audit(1751312134.709:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7444 comm="syz.4.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7f11dc78e929 code=0x7ffc0000 [ 144.806775][ T7453] loop0: detected capacity change from 0 to 64 [ 144.813291][ T27] audit: type=1326 audit(1751312134.709:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7444 comm="syz.4.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11dc78e929 code=0x7ffc0000 [ 144.908984][ T27] audit: type=1326 audit(1751312134.719:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7444 comm="syz.4.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11dc78e929 code=0x7ffc0000 [ 145.463307][ T1525] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 145.673335][ T1525] usb 6-1: Using ep0 maxpacket: 16 [ 145.686970][ T1525] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 145.708779][ T1525] usb 6-1: config 0 has no interface number 0 [ 145.730967][ T1525] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 145.765681][ T1525] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 145.790973][ T1525] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 145.812867][ T1525] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 145.839433][ T1525] usb 6-1: Product: syz [ 145.846371][ T1525] usb 6-1: SerialNumber: syz [ 145.867446][ T1525] usb 6-1: config 0 descriptor?? [ 145.882027][ T1525] cm109 6-1:0.8: invalid payload size 0, expected 4 [ 145.916717][ T1525] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.8/input/input10 [ 145.975591][ T7262] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 146.030870][ T6788] udevd[6788]: failed to send result of seq 13043 to main daemon: Connection refused [ 146.175187][ T7262] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 146.207634][ T7262] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 146.207680][ T7262] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 146.207701][ T7262] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.214975][ T7480] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 146.231748][ T7262] usb 7-1: Quirk or no altest; falling back to MIDI 1.0 [ 146.567367][ T5860] usb 7-1: USB disconnect, device number 2 [ 146.582423][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 146.588590][ T7262] usb 6-1: USB disconnect, device number 3 [ 146.589409][ C1] cm109 6-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 146.610206][ T5778] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 146.618866][ T5778] Bluetooth: hci0: Injecting HCI hardware error event [ 146.629449][ T5778] Bluetooth: hci0: hardware error 0x00 [ 146.654268][ T7262] cm109 6-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 146.971842][ T7504] loop4: detected capacity change from 0 to 4096 [ 146.998124][ T7504] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.186817][ T7503] EXT4-fs error (device loop4): ext4_do_update_inode:5230: inode #15: comm syz.4.434: corrupted inode contents [ 147.230336][ T7503] EXT4-fs error (device loop4): ext4_dirty_inode:6106: inode #15: comm syz.4.434: mark_inode_dirty error [ 147.262879][ T7503] EXT4-fs error (device loop4): ext4_do_update_inode:5230: inode #15: comm syz.4.434: corrupted inode contents [ 147.299901][ T7503] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #15: comm syz.4.434: mark_inode_dirty error [ 147.321986][ T7503] EXT4-fs error (device loop4): ext4_do_update_inode:5230: inode #15: comm syz.4.434: corrupted inode contents [ 147.346828][ T7503] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #15: comm syz.4.434: mark_inode_dirty error [ 147.359764][ T7503] EXT4-fs error (device loop4): ext4_do_update_inode:5230: inode #15: comm syz.4.434: corrupted inode contents [ 147.408674][ T7513] bridge0: entered promiscuous mode [ 147.428483][ T7503] EXT4-fs error (device loop4): ext4_truncate:4288: inode #15: comm syz.4.434: mark_inode_dirty error [ 147.483567][ T7503] EXT4-fs error (device loop4): ext4_evict_inode:263: comm syz.4.434: couldn't truncate inode 15 (err -117) [ 147.562566][ T6416] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.910301][ T7544] kvm: kvm [7543]: vcpu2, guest rIP: 0xfff0 Unhandled RDMSR(0x40000061) [ 148.013584][ T7262] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 148.113331][ T1525] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 148.260940][ T7262] usb 6-1: unable to get BOS descriptor or descriptor too short [ 148.281774][ T7262] usb 6-1: no configurations [ 148.292645][ T7262] usb 6-1: can't read configurations, error -22 [ 148.314638][ T1525] usb 5-1: Using ep0 maxpacket: 32 [ 148.335943][ T1525] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 148.346190][ T1525] usb 5-1: config 0 has no interface number 0 [ 148.358625][ T1525] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 148.384039][ T1525] usb 5-1: config 0 interface 85 has no altsetting 0 [ 148.405563][ T1525] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 148.423229][ T1525] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.431279][ T1525] usb 5-1: Product: syz [ 148.458579][ T1525] usb 5-1: Manufacturer: syz [ 148.473309][ T1525] usb 5-1: SerialNumber: syz [ 148.480227][ T1525] usb 5-1: config 0 descriptor?? [ 148.500927][ T7572] loop0: detected capacity change from 0 to 2048 [ 148.545707][ T7572] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 148.563461][ T7572] UDF-fs: Scanning with blocksize 512 failed [ 148.598750][ T7572] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 148.763020][ T5778] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 149.013393][ T28] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 149.139311][ T1525] appletouch 5-1:0.85: Geyser mode initialized. [ 149.155115][ T1525] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.85/input/input11 [ 149.213646][ T28] usb 7-1: Using ep0 maxpacket: 16 [ 149.221150][ T28] usb 7-1: config 0 interface 0 has no altsetting 0 [ 149.227963][ T28] usb 7-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 149.237324][ T28] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.248026][ T28] usb 7-1: config 0 descriptor?? [ 149.385119][ T7262] usb 5-1: USB disconnect, device number 4 [ 149.417026][ T7262] appletouch 5-1:0.85: input: appletouch disconnected [ 149.492980][ T7610] loop0: detected capacity change from 0 to 1764 [ 149.717029][ T28] hid (null): global environment stack overflow [ 149.726979][ T28] hid (null): invalid report_size 18151 [ 149.732708][ T28] hid (null): global environment stack overflow [ 149.939111][ T28] usb 7-1: USB disconnect, device number 3 [ 150.651062][ T7660] loop5: detected capacity change from 0 to 512 [ 150.660735][ T7660] EXT4-fs: Ignoring removed bh option [ 150.677271][ T7660] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 150.691161][ T7660] EXT4-fs (loop5): invalid journal inode [ 150.700782][ T7660] EXT4-fs (loop5): can't get journal size [ 150.729408][ T7660] EXT4-fs (loop5): 1 truncate cleaned up [ 150.738896][ T7660] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 150.777602][ T7660] ERROR: device name not specified. [ 150.836667][ T6927] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.873547][ T1525] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 150.959956][ T7673] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 150.985821][ T7673] netlink: 'syz.5.477': attribute type 12 has an invalid length. [ 151.001037][ T7673] netlink: 'syz.5.477': attribute type 29 has an invalid length. [ 151.009420][ T7673] netlink: 148 bytes leftover after parsing attributes in process `syz.5.477'. [ 151.053932][ T1525] usb 7-1: Using ep0 maxpacket: 32 [ 151.071040][ T1525] usb 7-1: config 0 interface 0 altsetting 74 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 151.092788][ T1525] usb 7-1: config 0 interface 0 altsetting 74 endpoint 0x81 has invalid wMaxPacketSize 0 [ 151.112838][ T1525] usb 7-1: config 0 interface 0 has no altsetting 0 [ 151.120018][ T1525] usb 7-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 151.139935][ T1525] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.153588][ T5771] Bluetooth: hci1: command tx timeout [ 151.172845][ T1525] usb 7-1: config 0 descriptor?? [ 151.625758][ T1525] petalynx 0003:18B1:0037.0005: unknown main item tag 0x0 [ 151.632927][ T1525] petalynx 0003:18B1:0037.0005: unknown main item tag 0x0 [ 151.665469][ T1525] petalynx 0003:18B1:0037.0005: item fetching failed at offset 2/3 [ 151.688959][ T1525] petalynx 0003:18B1:0037.0005: parse failed [ 151.705692][ T1525] petalynx: probe of 0003:18B1:0037.0005 failed with error -22 [ 151.885207][ T5860] usb 7-1: USB disconnect, device number 4 [ 151.925958][ T7693] loop5: detected capacity change from 0 to 32768 [ 151.964540][ T7693] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 152.171601][ T7715] vivid-007: ================= START STATUS ================= [ 152.183050][ T7715] vivid-007: Enable Output Cropping: true [ 152.198582][ T7715] vivid-007: Enable Output Composing: true [ 152.204837][ T7715] vivid-007: Enable Output Scaler: true [ 152.210623][ T7715] vivid-007: Tx RGB Quantization Range: Automatic [ 152.221870][ T7715] vivid-007: Transmit Mode: HDMI [ 152.227580][ T7715] vivid-007: Display Present: true inactive [ 152.234771][ T7715] vivid-007: Hotplug Present: 0x00000001 [ 152.237983][ T6927] [ 152.240466][ T7715] vivid-007: RxSense Present: [ 152.242734][ T6927] ====================================================== [ 152.242741][ T6927] WARNING: possible circular locking dependency detected [ 152.242758][ T6927] 6.6.95-syzkaller #0 Not tainted [ 152.247899][ T7715] 0x00000001 [ 152.254484][ T6927] ------------------------------------------------------ [ 152.254491][ T6927] syz-executor/6927 is trying to acquire lock: [ 152.254499][ T6927] ffff888076fbd118 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6){+.+.}-{3:3}, at: __ocfs2_flush_truncate_log+0x351/0x10b0 [ 152.261654][ T7715] [ 152.266524][ T6927] [ 152.266524][ T6927] but task is already holding lock: [ 152.266530][ T6927] ffff88805c8f42d8 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5){+.+.}-{3:3}, at: ocfs2_flush_truncate_log+0x47/0x60 [ 152.266576][ T6927] [ 152.266576][ T6927] which lock already depends on the new lock. [ 152.266576][ T6927] [ 152.266581][ T6927] [ 152.266581][ T6927] the existing dependency chain (in reverse order) is: [ 152.266585][ T6927] [ 152.266585][ T6927] -> #1 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5){+.+.}-{3:3}: [ 152.266620][ T6927] down_write+0x97/0x1f0 [ 152.269819][ T7715] vivid-007: EDID Present: [ 152.276777][ T6927] __ocfs2_move_extents_range+0x1a65/0x3360 [ 152.276799][ T6927] ocfs2_move_extents+0x379/0x940 [ 152.276818][ T6927] ocfs2_ioctl_move_extents+0x4e1/0x6c0 [ 152.276837][ T6927] ocfs2_ioctl+0x195/0x750 [ 152.276850][ T6927] __se_sys_ioctl+0xfd/0x170 [ 152.276869][ T6927] do_syscall_64+0x55/0xb0 [ 152.276889][ T6927] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 152.276911][ T6927] [ 152.276911][ T6927] -> #0 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6){+.+.}-{3:3}: [ 152.276941][ T6927] __lock_acquire+0x2ddb/0x7c80 [ 152.276957][ T6927] lock_acquire+0x197/0x410 [ 152.276972][ T6927] down_write+0x97/0x1f0 [ 152.276989][ T6927] __ocfs2_flush_truncate_log+0x351/0x10b0 [ 152.277008][ T6927] ocfs2_flush_truncate_log+0x4f/0x60 [ 152.277027][ T6927] ocfs2_sync_fs+0x117/0x310 [ 152.277044][ T6927] sync_filesystem+0x1c2/0x220 [ 152.277059][ T6927] generic_shutdown_super+0x6f/0x2b0 [ 152.277074][ T6927] kill_block_super+0x44/0x90 [ 152.277088][ T6927] deactivate_locked_super+0x97/0x100 [ 152.277107][ T6927] cleanup_mnt+0x429/0x4c0 [ 152.290965][ T7715] 0x00000001 [ 152.296313][ T6927] task_work_run+0x1ce/0x250 [ 152.296336][ T6927] exit_to_user_mode_loop+0xe6/0x110 [ 152.296355][ T6927] exit_to_user_mode_prepare+0xb1/0x140 [ 152.298724][ T7715] [ 152.306003][ T6927] syscall_exit_to_user_mode+0x1a/0x50 [ 152.306021][ T6927] do_syscall_64+0x61/0xb0 [ 152.306039][ T6927] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 152.306060][ T6927] [ 152.306060][ T6927] other info that might help us debug this: [ 152.306060][ T6927] [ 152.306065][ T6927] Possible unsafe locking scenario: [ 152.306065][ T6927] [ 152.306070][ T6927] CPU0 CPU1 [ 152.306074][ T6927] ---- ---- [ 152.306079][ T6927] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5); [ 152.306103][ T6927] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6); [ 152.306122][ T6927] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5); [ 152.306139][ T6927] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6); [ 152.306155][ T6927] [ 152.306155][ T6927] *** DEADLOCK *** [ 152.306155][ T6927] [ 152.306160][ T6927] 2 locks held by syz-executor/6927: [ 152.306169][ T6927] #0: ffff888066a500e0 (&type->s_umount_key#69){+.+.}-{3:3}, at: deactivate_super+0xa4/0xe0 [ 152.306215][ T6927] #1: ffff88805c8f42d8 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5){+.+.}-{3:3}, at: ocfs2_flush_truncate_log+0x47/0x60 [ 152.306266][ T6927] [ 152.306266][ T6927] stack backtrace: [ 152.306281][ T6927] CPU: 0 PID: 6927 Comm: syz-executor Not tainted 6.6.95-syzkaller #0 [ 152.306297][ T6927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 152.306309][ T6927] Call Trace: [ 152.306316][ T6927] [ 152.319163][ T7715] vivid-007: ================== END STATUS ================== [ 152.329342][ T6927] dump_stack_lvl+0x16c/0x230 [ 152.329373][ T6927] ? load_image+0x3b0/0x3b0 [ 152.329391][ T6927] ? show_regs_print_info+0x20/0x20 [ 152.329415][ T6927] ? print_circular_bug+0x12b/0x1a0 [ 152.662853][ T6927] check_noncircular+0x2bd/0x3c0 [ 152.667790][ T6927] ? print_deadlock_bug+0x5d0/0x5d0 [ 152.672975][ T6927] ? lockdep_lock+0xe0/0x220 [ 152.677556][ T6927] ? _find_first_zero_bit+0xd3/0x100 [ 152.682826][ T6927] __lock_acquire+0x2ddb/0x7c80 [ 152.687673][ T6927] ? ocfs2_get_system_file_inode+0x1e3/0x7b0 [ 152.693643][ T6927] ? __lock_acquire+0x7c80/0x7c80 [ 152.698651][ T6927] ? verify_lock_unused+0x140/0x140 [ 152.703835][ T6927] ? __mutex_unlock_slowpath+0x1a2/0x6a0 [ 152.709452][ T6927] ? do_raw_spin_lock+0x121/0x2c0 [ 152.714480][ T6927] ? mutex_unlock+0x10/0x10 [ 152.718993][ T6927] lock_acquire+0x197/0x410 [ 152.723490][ T6927] ? __ocfs2_flush_truncate_log+0x351/0x10b0 [ 152.729469][ T6927] ? ocfs2_get_system_file_inode+0x1f1/0x7b0 [ 152.735441][ T6927] ? __might_sleep+0xe0/0xe0 [ 152.740021][ T6927] ? read_lock_is_recursive+0x20/0x20 [ 152.745383][ T6927] ? ocfs2_fast_symlink_read_folio+0x530/0x530 [ 152.751532][ T6927] ? __wake_up+0x11f/0x190 [ 152.755934][ T6927] down_write+0x97/0x1f0 [ 152.760168][ T6927] ? __ocfs2_flush_truncate_log+0x351/0x10b0 [ 152.766136][ T6927] ? down_read_killable+0x340/0x340 [ 152.771325][ T6927] ? _raw_write_unlock+0x28/0x40 [ 152.776243][ T6927] ? jbd2_journal_unlock_updates+0x84/0xe0 [ 152.782036][ T6927] __ocfs2_flush_truncate_log+0x351/0x10b0 [ 152.787833][ T6927] ? ocfs2_truncate_log_needs_flush+0x2e0/0x2e0 [ 152.794062][ T6927] ? read_lock_is_recursive+0x20/0x20 [ 152.799420][ T6927] ? down_write+0x162/0x1f0 [ 152.803907][ T6927] ? down_read_killable+0x340/0x340 [ 152.809089][ T6927] ? __rwlock_init+0x150/0x150 [ 152.813838][ T6927] ocfs2_flush_truncate_log+0x4f/0x60 [ 152.819196][ T6927] ocfs2_sync_fs+0x117/0x310 [ 152.823771][ T6927] ? ocfs2_put_super+0x1c0/0x1c0 [ 152.828690][ T6927] ? writeback_inodes_sb_nr+0x30/0x30 [ 152.834055][ T6927] ? get_nr_dirty_inodes+0x1d4/0x220 [ 152.839327][ T6927] sync_filesystem+0x1c2/0x220 [ 152.844091][ T6927] generic_shutdown_super+0x6f/0x2b0 [ 152.849388][ T6927] kill_block_super+0x44/0x90 [ 152.854062][ T6927] deactivate_locked_super+0x97/0x100 [ 152.859424][ T6927] cleanup_mnt+0x429/0x4c0 [ 152.863831][ T6927] task_work_run+0x1ce/0x250 [ 152.868412][ T6927] ? task_work_cancel+0x240/0x240 [ 152.873428][ T6927] ? exit_to_user_mode_loop+0x3b/0x110 [ 152.878879][ T6927] exit_to_user_mode_loop+0xe6/0x110 [ 152.884159][ T6927] exit_to_user_mode_prepare+0xb1/0x140 [ 152.889699][ T6927] syscall_exit_to_user_mode+0x1a/0x50 [ 152.895153][ T6927] do_syscall_64+0x61/0xb0 [ 152.899555][ T6927] ? clear_bhb_loop+0x40/0x90 [ 152.904218][ T6927] ? clear_bhb_loop+0x40/0x90 [ 152.908896][ T6927] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 152.914790][ T6927] RIP: 0033:0x7fe22c18fc57 [ 152.919208][ T6927] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 152.938804][ T6927] RSP: 002b:00007ffdd7b31da8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 152.947209][ T6927] RAX: 0000000000000000 RBX: 00007fe22c210925 RCX: 00007fe22c18fc57 [ 152.955167][ T6927] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdd7b31e60 [ 152.963126][ T6927] RBP: 00007ffdd7b31e60 R08: 0000000000000000 R09: 0000000000000000 [ 152.971085][ T6927] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffdd7b32ef0 [ 152.979040][ T6927] R13: 00007fe22c210925 R14: 000000000002521e R15: 00007ffdd7b32f30 [ 152.986999][ T6927] [ 153.017963][ T6927] ocfs2: Unmounting device (7,5) on (node local) [ 153.213209][ T5860] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 153.393222][ T5860] usb 5-1: Using ep0 maxpacket: 16 [ 153.399626][ T5860] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 153.410537][ T5860] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 153.420343][ T5860] usb 5-1: config 0 interface 0 has no altsetting 0 [ 153.426965][ T5860] usb 5-1: New USB device found, idVendor=17ef, idProduct=6009, bcdDevice= 0.00 [ 153.436437][ T5860] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.449268][ T5860] usb 5-1: config 0 descriptor?? [ 153.862936][ T5860] lenovo 0003:17EF:6009.0006: unknown main item tag 0x0 [ 153.871113][ T5860] lenovo 0003:17EF:6009.0006: unknown main item tag 0x0 [ 153.878111][ T5860] lenovo 0003:17EF:6009.0006: unknown main item tag 0x0 [ 153.885212][ T5860] lenovo 0003:17EF:6009.0006: unknown main item tag 0x0 [ 153.897680][ T5860] lenovo 0003:17EF:6009.0006: hidraw0: USB HID v0.00 Device [HID 17ef:6009] on usb-dummy_hcd.4-1/input0 [ 154.081449][ T5810] usb 5-1: USB disconnect, device number 5