last executing test programs: 54.863452154s ago: executing program 1 (id=99): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1d2) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) r2 = fanotify_init(0xf00, 0x800) fanotify_mark(r2, 0x105, 0x40009975, r0, 0x0) 54.724460628s ago: executing program 1 (id=101): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000140)=0x40, 0x4) r2 = socket$xdp(0x2c, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) bind$xdp(r1, &(0x7f0000000240)={0x2c, 0x1, r3, 0x0, r2}, 0x10) 54.593224751s ago: executing program 1 (id=102): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x800, 0xfffffffd}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f00000000c0)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x804}, 0x4) 54.351768906s ago: executing program 1 (id=103): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f00000000c0)='./file0/../file0/file0\x00', &(0x7f0000000100)='./file0/../file0/file0\x00', 0x0, 0x8b101a, 0x0) unshare(0x22020600) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) 54.079892833s ago: executing program 1 (id=105): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r1}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000007c0)={0x28, 0x5, r1, 0x0, &(0x7f0000000000/0x800000)=nil, 0x800000, 0x1004000}) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000040)={0x18, r1}) 53.751917601s ago: executing program 0 (id=108): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000740)={0x30, 0x5, 0x0, {0x0, 0x2, 0x0, 0x3}}, 0x30) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') fchdir(r1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x13, r0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) 53.646360974s ago: executing program 1 (id=109): futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x1) futex(&(0x7f000000cffc)=0x4, 0x10b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000040), &(0x7f0000048000), 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000003, 0x11, r0, 0xec776000) exit(0x0) 53.256991383s ago: executing program 32 (id=109): futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x1) futex(&(0x7f000000cffc)=0x4, 0x10b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000040), &(0x7f0000048000), 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000003, 0x11, r0, 0xec776000) exit(0x0) 53.247488443s ago: executing program 0 (id=111): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6c69f68dc1cf3e78, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x1000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 53.097880927s ago: executing program 0 (id=113): r0 = timerfd_create(0x8, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000100)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = timerfd_create(0x8, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f0000000180)={{0x77359400}, {r2, r3+10000000}}, 0x0) timerfd_gettime(r0, 0x0) 52.861635223s ago: executing program 0 (id=115): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x1210010, &(0x7f0000000340)=ANY=[@ANYBLOB="696f636861727365743d69736f383835392d372c757466383d312c696f636861727365743d63703835372c73686f72746e616d653d6c6f7765722c6e6f6e756d7461696c3d302c7379735f696d6d757461626c652c73686f72746e616d653d6c6f7765722c696f636861727365743d61736369692c73686f72746e616d653d6c6f7765722c756e695f786c6174653d312c757466383d312c71756965742c756e695f786c6174653d312c756e695f786c6174653d3100000000000000026d653d6d697865642c72736469722c756e695f786c6174653d302c757466383d302c00"], 0x1, 0x379, &(0x7f0000000880)="$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") name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@FILEID_UDF_WITH_PARENT={0x14, 0x52, {{0x3, 0x6, 0x7}, 0x0, 0x9}}, &(0x7f0000000000), 0x0) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 51.672072011s ago: executing program 0 (id=118): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x2001, 0x4, 0x1}, 0x10) bind$tipc(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r2, 0x1, 0x70bd2a, 0x0, {{}, {}, {0x14, 0x19, {0x0, 0x1}}}}, 0x30}, 0x1, 0x0, 0x0, 0x14}, 0x4080) 50.917978549s ago: executing program 0 (id=122): setrlimit(0x40000000000008, &(0x7f0000000000)={0x4848, 0xfffffffffffff006}) capset(&(0x7f0000a31000)={0x20080522}, &(0x7f0000000080)) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendto$inet6(r0, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000a80)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)='B', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000600)="ac", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000840)='[', 0x1}], 0x1}}], 0x3, 0x404c444) 50.368578203s ago: executing program 33 (id=122): setrlimit(0x40000000000008, &(0x7f0000000000)={0x4848, 0xfffffffffffff006}) capset(&(0x7f0000a31000)={0x20080522}, &(0x7f0000000080)) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendto$inet6(r0, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000a80)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)='B', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000600)="ac", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000840)='[', 0x1}], 0x1}}], 0x3, 0x404c444) 2.875013811s ago: executing program 3 (id=356): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x32cc0000) syz_open_procfs$namespace(r0, &(0x7f0000000100)='ns/mnt\x00') 2.094163949s ago: executing program 5 (id=358): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000004000)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000500)=""/208, 0xd0}, {&(0x7f0000000600)=""/219, 0xdb}], 0x2}, 0x6}, {{0x0, 0x0, &(0x7f0000003c40)=[{&(0x7f0000000b80)=""/4080, 0xff0}], 0x1}, 0x3}], 0x2, 0x12000, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b40), 0x2328}}, 0x0) 2.06726579s ago: executing program 2 (id=359): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000400000005"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xba7e}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000100850000000100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000010000850000008200000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000a80)={r2, 0x0, 0x0}, 0x10) 1.806118067s ago: executing program 3 (id=360): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100008}, 0x94) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff00}, 0x48) 1.805192167s ago: executing program 5 (id=361): syz_mount_image$vfat(&(0x7f0000001880), &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa18c56, &(0x7f0000001140)={[{@iocharset={'iocharset', 0x3d, 'euc-jp'}}, {@shortname_mixed}, {@shortname_win95}, {@fat=@codepage={'codepage', 0x3d, '932'}}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'koi8-u'}}, {@iocharset={'iocharset', 0x3d, 'cp862'}}, {@shortname_mixed}, {@rodir}, {@shortname_mixed}, {@rodir}, {@uni_xlate}, {@utf8no}]}, 0x1, 0x2c3, &(0x7f0000001500)="$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") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x0, 0x0}) sched_getattr(0x0, 0x0, 0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"a2e3ad214fc752f91b25060987f70e06d038e7ff7fc6e5539b325d078b089b3b08386e090890e0878f0e1ac6e7049b334d959b429a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31303b305d0936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c0428918246d9e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff13d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1ccab2689bee59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae23034202210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ecdf5e08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0xfffffffffffffe2a}}, 0x1006) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) open(&(0x7f0000000a40)='./bus\x00', 0x141a42, 0x8) 1.762008578s ago: executing program 2 (id=362): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000080), 0x12) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read$FUSE(r2, &(0x7f0000000440)={0x2020}, 0x2020) 1.498554984s ago: executing program 5 (id=363): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000080df1f850000005000000085000000a000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r0, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) syz_emit_ethernet(0x66, &(0x7f00000000c0)={@broadcast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x58, 0x65, 0x0, 0x0, 0x2f, 0x0, @private, @empty}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x88a8}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0x7}}}, {}, {0x8, 0x6558, 0xfffffffd}}}}}}, 0x0) 1.462567505s ago: executing program 2 (id=364): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) write(r0, &(0x7f0000000000)="fa", 0xfffffdef) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) syz_clone3(&(0x7f0000000540)={0x81000000, 0x0, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, &(0x7f0000000280)=[0x0], 0x1}, 0x58) 1.404769496s ago: executing program 4 (id=365): socket$kcm(0x10, 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x8200, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000000100)={{0x0, 0x8, 0x7, 0x9346, 0x6, 0x9, 0x69, 0x5, 0x80000001, 0x0, 0x7, 0xc00a, 0x62ba, 0x2}}) unshare(0x2040400) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 1.160256422s ago: executing program 3 (id=366): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x200000005c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xf0ffffff) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 1.159635262s ago: executing program 4 (id=367): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x101002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc4f}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_INTERRUPT(r2, 0x4004ae86, &(0x7f00000000c0)=0xa) ioctl$KVM_RUN(r2, 0xae80, 0x0) 950.182288ms ago: executing program 5 (id=368): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000380)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x2) connect$unix(r0, &(0x7f0000fce000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) sendmmsg$unix(r0, &(0x7f0000004780)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)='A', 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18, 0x40001}}], 0x1, 0xa4ff) 872.185339ms ago: executing program 3 (id=369): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x3, r1, 0x1, 0x1, 0x6, @broadcast}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000080)=ANY=[@ANYRES8=0x0, @ANYRES8=r0], 0xdd12}], 0x1, 0x0, 0x0, 0x4008010}, 0x20040851) 814.901051ms ago: executing program 5 (id=370): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000008c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x58, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x2c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0xfffffffffffffe19, 0x3, 0x1, 0x0, 0x2}]}, {0x4}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}, 0x1, 0x0, 0x0, 0x8000}, 0x40) 672.557834ms ago: executing program 4 (id=371): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xe19f742f7e215dc7}}}, 0x3c}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="034886dd49032800030020000000600000000004730081e949b93897bc3b0000070000007d01ff020000000000000000000000000001"], 0xfdef) 570.344806ms ago: executing program 3 (id=372): r0 = epoll_create1(0x0) r1 = socket$unix(0x1, 0x1, 0x0) close(r1) socket(0x15, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000040)=0x10009, 0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000002c0)={0xa002a014}) 551.152507ms ago: executing program 5 (id=373): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106161154d00000000000109022400010000000009040000010300000009210000000122f80409058103"], 0x0) r1 = syz_usb_connect$hid(0x3, 0x0, 0x0, 0x0) syz_usb_control_io$lan78xx(r1, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x3, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x56, &(0x7f0000000480)=ANY=[@ANYBLOB="050f5600030a1003000a00010701000b10010c8900ff070500d53c1007914d2af4a9f829d1edefff0508a64d5207caae6dc1f8836199cd9d272c4bd5009a50443b1fe9b9d5cad1d2b4412314518370728a471d600cba6f5155df2ed496921926a0"]}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 407.07623ms ago: executing program 3 (id=374): r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f00000011c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 346.331642ms ago: executing program 2 (id=375): r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)=[0x8000, 0x8], 0x0, 0x0, 0x2, 0x1}}, 0x40) mmap(&(0x7f00001f8000/0x4000)=nil, 0x4000, 0x0, 0x12012, r1, 0x0) 293.410413ms ago: executing program 4 (id=376): ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110e22fff6) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000001680)=0x1, 0x4) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e20, 0x9, @loopback, 0x2000005}, 0x1c) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000380)={@in6={{0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x0, 0x0, 0x4c, 0x0, "5aa1f50a3cb63c3635852b1d0b0ac8bbc455e170385fefb683affb65799f7a308ec96cd29e9b33df174bcdcf78a7bccda39e047719afe332de441e7e8e68bf5adbf7a35d75885fb07c3e40612a459451"}, 0xd8) sendmmsg$inet6(r0, &(0x7f0000000140)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @empty, 0xfffffffe}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1}}], 0x1, 0x20080058) 233.787635ms ago: executing program 2 (id=377): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x10000042, 0x3}, 0x10) bind$tipc(r0, 0x0, 0x0) 86.325758ms ago: executing program 4 (id=378): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000400000005"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x6, 0x4, 0x1003, 0x9, 0x0, 0xffffffffffffffff, 0x7}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000100850000000100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000010000850000008200000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000a80)={r2, 0x0, 0x0}, 0x10) 86.058688ms ago: executing program 2 (id=379): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00220f000000b01b4550182185f57586b3"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000009c0)={0x84, &(0x7f00000005c0)={0x40, 0x31, 0x2, "890a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, 0x0) 0s ago: executing program 4 (id=380): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0) write(r1, &(0x7f00000002c0)='0000:00:03.0', 0xc) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.30' (ED25519) to the list of known hosts. [ 79.172521][ T5763] cgroup: Unknown subsys name 'net' [ 79.304712][ T5763] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 80.892299][ T5763] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 82.810344][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 82.827244][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 82.834770][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 82.842847][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 82.856691][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 82.864023][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 82.972656][ T5781] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 82.991682][ T5776] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 83.006260][ T5776] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 83.015287][ T5787] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 83.025394][ T5787] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 83.047382][ T5787] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 83.054558][ T5787] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 83.074494][ T5784] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 83.087086][ T5784] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 83.094171][ T5789] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 83.101900][ T5784] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 83.109367][ T5784] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 83.117159][ T5789] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 83.124632][ T5784] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 83.163348][ T5776] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 83.179231][ T5776] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 83.187214][ T5776] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 83.194605][ T5776] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 83.342139][ T5773] chnl_net:caif_netlink_parms(): no params data found [ 83.504598][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.512024][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.520730][ T5773] bridge_slave_0: entered allmulticast mode [ 83.528197][ T5773] bridge_slave_0: entered promiscuous mode [ 83.560252][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.567905][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.575024][ T5773] bridge_slave_1: entered allmulticast mode [ 83.582457][ T5773] bridge_slave_1: entered promiscuous mode [ 83.658693][ T5773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.671029][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.737838][ T5773] team0: Port device team_slave_0 added [ 83.757265][ T5773] team0: Port device team_slave_1 added [ 83.767478][ T5779] chnl_net:caif_netlink_parms(): no params data found [ 83.809862][ T5777] chnl_net:caif_netlink_parms(): no params data found [ 83.843455][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.850584][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.877099][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.894988][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.902134][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.928250][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.948769][ T5778] chnl_net:caif_netlink_parms(): no params data found [ 84.092924][ T5773] hsr_slave_0: entered promiscuous mode [ 84.099426][ T5773] hsr_slave_1: entered promiscuous mode [ 84.114751][ T5779] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.122129][ T5779] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.132373][ T5779] bridge_slave_0: entered allmulticast mode [ 84.139602][ T5779] bridge_slave_0: entered promiscuous mode [ 84.148048][ T5779] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.155211][ T5779] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.162567][ T5779] bridge_slave_1: entered allmulticast mode [ 84.170188][ T5779] bridge_slave_1: entered promiscuous mode [ 84.253418][ T5777] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.260915][ T5777] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.270977][ T5777] bridge_slave_0: entered allmulticast mode [ 84.278692][ T5777] bridge_slave_0: entered promiscuous mode [ 84.306591][ T5779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.315922][ T5778] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.323272][ T5778] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.330707][ T5778] bridge_slave_0: entered allmulticast mode [ 84.338932][ T5778] bridge_slave_0: entered promiscuous mode [ 84.353188][ T5777] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.360516][ T5777] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.368644][ T5777] bridge_slave_1: entered allmulticast mode [ 84.375604][ T5777] bridge_slave_1: entered promiscuous mode [ 84.393475][ T5779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.411938][ T5778] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.419899][ T5778] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.430270][ T5778] bridge_slave_1: entered allmulticast mode [ 84.437333][ T5778] bridge_slave_1: entered promiscuous mode [ 84.488445][ T5779] team0: Port device team_slave_0 added [ 84.506176][ T5778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.519600][ T5778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.551250][ T5777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.562288][ T5779] team0: Port device team_slave_1 added [ 84.587054][ T5777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.643215][ T5778] team0: Port device team_slave_0 added [ 84.653055][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.660335][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.686757][ T5779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.704005][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.711276][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.737264][ T5779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.761061][ T5778] team0: Port device team_slave_1 added [ 84.789793][ T5777] team0: Port device team_slave_0 added [ 84.838764][ T5777] team0: Port device team_slave_1 added [ 84.864011][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.871252][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.898397][ T5776] Bluetooth: hci0: command tx timeout [ 84.904105][ T5778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.933360][ T5779] hsr_slave_0: entered promiscuous mode [ 84.939741][ T5779] hsr_slave_1: entered promiscuous mode [ 84.945914][ T5779] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.954038][ T5779] Cannot create hsr debugfs directory [ 84.974820][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.990065][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.016719][ T5778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.080903][ T5778] hsr_slave_0: entered promiscuous mode [ 85.087355][ T5778] hsr_slave_1: entered promiscuous mode [ 85.093416][ T5778] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.101331][ T5778] Cannot create hsr debugfs directory [ 85.107540][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.114503][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.143251][ T5777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.153926][ T5776] Bluetooth: hci1: command tx timeout [ 85.163091][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.170125][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.196552][ T5777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.216525][ T5776] Bluetooth: hci2: command tx timeout [ 85.236484][ T5776] Bluetooth: hci3: command tx timeout [ 85.367649][ T5777] hsr_slave_0: entered promiscuous mode [ 85.374163][ T5777] hsr_slave_1: entered promiscuous mode [ 85.380502][ T5777] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.389270][ T5777] Cannot create hsr debugfs directory [ 85.464164][ T5773] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 85.504312][ T5773] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 85.544981][ T5773] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 85.564734][ T5773] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 85.729404][ T5779] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 85.749776][ T5779] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 85.771022][ T5779] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 85.804646][ T5779] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 85.880468][ T5778] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 85.892844][ T5778] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 85.902931][ T5778] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 85.914441][ T5778] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 85.994708][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.017063][ T5777] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 86.033363][ T5777] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 86.058559][ T5777] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 86.070752][ T5777] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 86.087394][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.105195][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.112598][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.143459][ T1097] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.150603][ T1097] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.258941][ T5779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.312244][ T5778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.347789][ T5779] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.392357][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.399526][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.411400][ T5778] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.428619][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.435790][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.473410][ T1097] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.480604][ T1097] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.512363][ T1097] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.519575][ T1097] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.567328][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.653365][ T5778] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 86.704694][ T5777] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.721391][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.728604][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.766282][ T1097] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.773549][ T1097] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.806204][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.941821][ T5777] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 86.977110][ T5776] Bluetooth: hci0: command tx timeout [ 87.078464][ T5773] veth0_vlan: entered promiscuous mode [ 87.146838][ T5773] veth1_vlan: entered promiscuous mode [ 87.217444][ T5776] Bluetooth: hci1: command tx timeout [ 87.296594][ T5776] Bluetooth: hci3: command tx timeout [ 87.298468][ T5085] Bluetooth: hci2: command tx timeout [ 87.333574][ T5779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.345931][ T5773] veth0_macvtap: entered promiscuous mode [ 87.371090][ T5778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.413246][ T5773] veth1_macvtap: entered promiscuous mode [ 87.552602][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.576085][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.601081][ T5779] veth0_vlan: entered promiscuous mode [ 87.623960][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.659639][ T5779] veth1_vlan: entered promiscuous mode [ 87.669595][ T5773] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.679086][ T5773] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.688349][ T5773] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.698239][ T5773] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.725174][ T5778] veth0_vlan: entered promiscuous mode [ 87.753375][ T5778] veth1_vlan: entered promiscuous mode [ 87.837430][ T5777] veth0_vlan: entered promiscuous mode [ 87.869458][ T5778] veth0_macvtap: entered promiscuous mode [ 87.881790][ T5777] veth1_vlan: entered promiscuous mode [ 87.901545][ T5778] veth1_macvtap: entered promiscuous mode [ 87.954811][ T5779] veth0_macvtap: entered promiscuous mode [ 87.959411][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.970514][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.999576][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.011629][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.024094][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.052578][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.064842][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.071437][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.080310][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.096357][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.098501][ T5779] veth1_macvtap: entered promiscuous mode [ 88.132136][ T5778] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.146497][ T5778] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.155261][ T5778] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.165737][ T5778] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.214904][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.230064][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.240147][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.250886][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.269087][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.284501][ T5777] veth0_macvtap: entered promiscuous mode [ 88.302580][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.314031][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.324184][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.334912][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.348085][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.360507][ T5777] veth1_macvtap: entered promiscuous mode [ 88.392453][ T5779] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.422837][ T5779] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.438637][ T5779] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.447863][ T5779] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.535934][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.547280][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.557485][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.579380][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.596503][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.607635][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.624111][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.643380][ T1139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.662945][ T1139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.705900][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.723103][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.733784][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.745807][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.762973][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.773546][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.785282][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.828873][ T5777] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.848588][ T5777] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.857592][ T5777] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.866315][ T5777] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.885874][ T1139] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.895698][ T1139] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.982370][ T1097] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.016472][ T1097] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.056975][ T5085] Bluetooth: hci0: command tx timeout [ 89.132826][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.167078][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.184398][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.221926][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.297388][ T5085] Bluetooth: hci1: command tx timeout [ 89.323140][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.358150][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.376970][ T5085] Bluetooth: hci3: command tx timeout [ 89.377547][ T5776] Bluetooth: hci2: command tx timeout [ 89.650170][ T5859] syz.1.2[5859]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 89.687903][ T5859] loop1: detected capacity change from 0 to 128 [ 89.695121][ T5861] loop2: detected capacity change from 0 to 1024 [ 89.727780][ T5861] ======================================================= [ 89.727780][ T5861] WARNING: The mand mount option has been deprecated and [ 89.727780][ T5861] and is ignored by this kernel. Remove the mand [ 89.727780][ T5861] option from the mount to silence this warning. [ 89.727780][ T5861] ======================================================= [ 89.773284][ T5859] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 89.791153][ T5859] ext4 filesystem being mounted at /0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 89.850850][ T5859] EXT4-fs error (device loop1): htree_dirblock_to_tree:1112: inode #2: block 4: comm syz.1.2: bad entry in directory: inode out of bounds - offset=1012, inode=128, rec_len=12, size=1024 fake=1 [ 89.926171][ T5861] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 89.970868][ T5861] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.057839][ T5777] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 90.163444][ T5779] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 90.393955][ T5876] loop3: detected capacity change from 0 to 2048 [ 91.137379][ T5776] Bluetooth: hci0: command tx timeout [ 91.185359][ T5876] loop3: p1 p4 [ 91.185359][ T5876] p1: [ 91.200716][ T5876] loop3: partition table partially beyond EOD, truncated [ 91.230863][ T5876] loop3: p4 start 184549376 is beyond EOD, truncated [ 91.346695][ T5140] loop3: p1 p4 [ 91.346695][ T5140] p1: [ 91.381826][ T5776] Bluetooth: hci1: command tx timeout [ 91.402002][ T5140] loop3: partition table partially beyond EOD, truncated [ 91.462603][ T5776] Bluetooth: hci3: command tx timeout [ 91.462620][ T5085] Bluetooth: hci2: command tx timeout [ 91.470038][ T5140] loop3: p4 start 184549376 is beyond EOD, truncated [ 91.934820][ T5785] udevd[5785]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory [ 91.949196][ T5791] udevd[5791]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 91.968687][ T55] cfg80211: failed to load regulatory.db [ 92.065842][ T5932] udevd[5932]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory [ 92.078455][ T5791] udevd[5791]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 93.349940][ T5967] loop2: detected capacity change from 0 to 512 [ 93.361532][ T5967] EXT4-fs: Ignoring removed i_version option [ 93.378791][ T5967] EXT4-fs: Ignoring removed bh option [ 93.421542][ T5967] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.34: inode #13: comm syz.2.34: iget: illegal inode # [ 93.466737][ T5967] EXT4-fs (loop2): Remounting filesystem read-only [ 93.486723][ T5967] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 93.680669][ T5779] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.797759][ T5976] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 93.957263][ T5963] loop3: detected capacity change from 0 to 32768 [ 94.010981][ T5984] loop0: detected capacity change from 0 to 2048 [ 94.051469][ T5984] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 94.083556][ T5963] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 94.107843][ T5984] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 94.151361][ T5984] UDF-fs: Scanning with blocksize 512 failed [ 94.209189][ T5996] loop2: detected capacity change from 0 to 128 [ 94.241409][ T5984] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 94.270644][ T5963] XFS (loop3): Ending clean mount [ 94.386879][ T5996] syz.2.40: attempt to access beyond end of device [ 94.386879][ T5996] loop2: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 94.474929][ T28] audit: type=1800 audit(1785256731.251:2): pid=5984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.39" name="file1" dev="loop0" ino=838 res=0 errno=0 [ 94.510080][ T5996] syz.2.40: attempt to access beyond end of device [ 94.510080][ T5996] loop2: rw=2049, sector=138, nr_sectors = 8 limit=128 [ 94.539435][ T5996] syz.2.40: attempt to access beyond end of device [ 94.539435][ T5996] loop2: rw=2049, sector=244, nr_sectors = 2 limit=128 [ 94.555516][ T5996] Buffer I/O error on dev loop2, logical block 122, lost async page write [ 94.611864][ T28] audit: type=1800 audit(1785256731.391:3): pid=5963 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.32" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=6156 res=0 errno=0 [ 94.734608][ T5778] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 94.745521][ T8] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 94.981597][ T8] usb 2-1: config 0 interface 0 altsetting 255 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 95.003183][ T8] usb 2-1: config 0 interface 0 has no altsetting 0 [ 95.019442][ T8] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 95.036668][ T8] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 95.055274][ T8] usb 2-1: Product: syz [ 95.075538][ T8] usb 2-1: Manufacturer: syz [ 95.080261][ T8] usb 2-1: SerialNumber: syz [ 95.108045][ T8] usb 2-1: config 0 descriptor?? [ 95.134443][ T8] usb 2-1: selecting invalid altsetting 0 [ 95.491024][ T1208] usb 2-1: USB disconnect, device number 2 [ 95.497502][ T5998] usb 2-1: cannot submit urb 0, error -19: no device [ 95.504876][ T5998] usb 2-1: cannot submit urb 0, error -19: no device [ 95.722006][ T6007] loop3: detected capacity change from 0 to 40427 [ 95.765900][ T6007] F2FS-fs (loop3): invalid crc value [ 95.789220][ T6007] F2FS-fs (loop3): Found nat_bits in checkpoint [ 95.907893][ T6007] F2FS-fs (loop3): Start checkpoint disabled! [ 95.914351][ T6018] loop0: detected capacity change from 0 to 128 [ 95.935128][ T6007] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 96.034353][ T28] audit: type=1800 audit(1785256732.811:4): pid=6007 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.42" name="file1" dev="loop3" ino=10 res=0 errno=0 [ 96.085819][ T6007] syz.3.42: attempt to access beyond end of device [ 96.085819][ T6007] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 96.142399][ T6007] syz.3.42: attempt to access beyond end of device [ 96.142399][ T6007] loop3: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 96.170445][ T6007] syz.3.42: attempt to access beyond end of device [ 96.170445][ T6007] loop3: rw=2049, sector=45112, nr_sectors = 8 limit=40427 [ 96.202076][ T6007] syz.3.42: attempt to access beyond end of device [ 96.202076][ T6007] loop3: rw=2049, sector=45120, nr_sectors = 8 limit=40427 [ 96.237546][ T6007] syz.3.42: attempt to access beyond end of device [ 96.237546][ T6007] loop3: rw=2049, sector=45128, nr_sectors = 8 limit=40427 [ 96.266979][ T6007] syz.3.42: attempt to access beyond end of device [ 96.266979][ T6007] loop3: rw=2049, sector=45136, nr_sectors = 8 limit=40427 [ 96.297019][ T6007] syz.3.42: attempt to access beyond end of device [ 96.297019][ T6007] loop3: rw=2049, sector=45144, nr_sectors = 8 limit=40427 [ 96.514006][ T3510] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 96.530685][ T3510] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 96.876960][ T8] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 97.076554][ T8] usb 2-1: Using ep0 maxpacket: 32 [ 97.081860][ T6046] loop2: detected capacity change from 0 to 2048 [ 97.088794][ T8] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 97.106037][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 97.118076][ T8] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 97.132774][ T8] usb 2-1: New USB device found, idVendor=046d, idProduct=c517, bcdDevice= 0.00 [ 97.142693][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.153732][ T8] usb 2-1: config 0 descriptor?? [ 97.163412][ T6046] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.179896][ T6046] ext4 filesystem being mounted at /18/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.237943][ T6046] fs-verity: sha512 using implementation "sha512-avx2" [ 97.270409][ T6046] syz.2.58 (6046) used greatest stack depth: 20328 bytes left [ 97.304908][ T5779] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.374982][ T6050] loop2: detected capacity change from 0 to 164 [ 97.401724][ T6050] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 97.431400][ T6050] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 97.549786][ T6052] Zero length message leads to an empty skb [ 97.587954][ T8] logitech-djreceiver 0003:046D:C517.0001: unknown main item tag 0x0 [ 97.601480][ T8] logitech-djreceiver 0003:046D:C517.0001: unknown main item tag 0x0 [ 97.611182][ T8] logitech-djreceiver 0003:046D:C517.0001: unknown main item tag 0x0 [ 97.624898][ T8] logitech-djreceiver 0003:046D:C517.0001: unknown main item tag 0x0 [ 97.633724][ T8] logitech-djreceiver 0003:046D:C517.0001: unknown main item tag 0x0 [ 97.649796][ T8] logitech-djreceiver 0003:046D:C517.0001: unknown main item tag 0x0 [ 97.662600][ T8] logitech-djreceiver 0003:046D:C517.0001: unknown main item tag 0x0 [ 97.671224][ T8] logitech-djreceiver 0003:046D:C517.0001: unknown main item tag 0x0 [ 97.683695][ T8] logitech-djreceiver 0003:046D:C517.0001: unknown main item tag 0x0 [ 97.693567][ T8] logitech-djreceiver 0003:046D:C517.0001: unknown main item tag 0x0 [ 97.710425][ T8] logitech-djreceiver 0003:046D:C517.0001: unknown main item tag 0x0 [ 97.718851][ T8] logitech-djreceiver 0003:046D:C517.0001: unknown main item tag 0x0 [ 97.728906][ T8] logitech-djreceiver 0003:046D:C517.0001: unknown main item tag 0x0 [ 97.737387][ T8] logitech-djreceiver 0003:046D:C517.0001: unknown main item tag 0x0 [ 97.755331][ T8] logitech-djreceiver 0003:046D:C517.0001: hidraw0: USB HID v5.40 Device [HID 046d:c517] on usb-dummy_hcd.1-1/input0 [ 97.849486][ T8] usb 2-1: USB disconnect, device number 3 [ 97.957969][ T6055] fido_id[6055]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 98.096515][ T5822] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 98.297961][ T5822] usb 4-1: not running at top speed; connect to a high speed hub [ 98.310648][ T5822] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 98.321957][ T5822] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.00 [ 98.335546][ T5822] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.356760][ T5822] garmin_gps 4-1:1.0: Garmin GPS usb/tty converter detected [ 98.370107][ T5822] usb 4-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 98.641025][ T6069] bond0: (slave ip6gretap0): Enslaving as an active interface with an up link [ 98.672936][ T5822] usb 4-1: USB disconnect, device number 2 [ 98.704931][ T5822] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 98.728698][ T5822] garmin_gps 4-1:1.0: device disconnected [ 98.784740][ T6070] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 98.831003][ T6070] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 98.856236][ T6070] bond0 (unregistering): (slave ip6gretap0): Releasing backup interface [ 98.874850][ T6070] bond0 (unregistering): Released all slaves [ 98.885429][ T6074] loop1: detected capacity change from 0 to 1024 [ 98.896289][ T6074] EXT4-fs: Ignoring removed bh option [ 98.951929][ T6074] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 98.980158][ T6074] ext4 filesystem being mounted at /proc/29/cgroup supports timestamps until 2038-01-19 (0x7fffffff) [ 98.995630][ T6074] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 99.406582][ T5821] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 99.510205][ T6088] ip6erspan0: entered allmulticast mode [ 99.588427][ T5821] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 99.625309][ T5821] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 99.643717][ T5822] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 99.650883][ T5821] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 99.665132][ T5821] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 99.680077][ T5821] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.698630][ T5821] usb 3-1: config 0 descriptor?? [ 99.828611][ T5822] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 99.853046][ T5822] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 99.863390][ T5822] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.891591][ T5822] usb 4-1: config 0 descriptor?? [ 100.119461][ T5822] usbhid 4-1:0.0: can't add hid device: -71 [ 100.135355][ T5821] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 100.136771][ T5822] usbhid: probe of 4-1:0.0 failed with error -71 [ 100.167077][ T5822] usb 4-1: USB disconnect, device number 3 [ 100.198893][ T5821] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 100.616164][ T6111] input: syz1 as /devices/virtual/input/input5 [ 100.807313][ T5822] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 100.950225][ T6118] loop0: detected capacity change from 0 to 512 [ 100.969040][ T6118] EXT4-fs: Ignoring removed bh option [ 101.006743][ T5822] usb 4-1: Using ep0 maxpacket: 32 [ 101.027480][ T5822] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.055930][ T6118] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 101.087056][ T5822] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 101.112687][ T5822] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.134726][ T6118] EXT4-fs error (device loop0): ext4_iget_extra_inode:4740: inode #15: comm syz.0.86: corrupted in-inode xattr: e_value size too large [ 101.152268][ T5822] usb 4-1: config 0 descriptor?? [ 101.169385][ T6118] EXT4-fs error (device loop0): ext4_orphan_get:1409: comm syz.0.86: couldn't read orphan inode 15 (err -117) [ 101.185332][ T6118] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.205854][ T5822] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 101.265760][ T5822] ldusb 4-1:0.0: LD USB Device #1 now attached to major 180 minor 1 [ 101.344337][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.372078][ T6113] loop1: detected capacity change from 0 to 40427 [ 101.385315][ T6113] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 101.405754][ T6113] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 101.420271][ T6113] F2FS-fs (loop1): invalid crc value [ 101.465757][ T6113] F2FS-fs (loop1): Found nat_bits in checkpoint [ 101.532300][ T5782] usb 3-1: USB disconnect, device number 2 [ 101.575782][ T6113] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 101.588596][ T6113] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 101.705622][ T6129] loop0: detected capacity change from 0 to 1024 [ 101.734027][ T6129] EXT4-fs: Ignoring removed orlov option [ 101.773057][ T6129] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.819769][ T23] usb 4-1: USB disconnect, device number 4 [ 101.838656][ T23] ldusb 4-1:0.0: LD USB Device #1 now disconnected [ 101.991931][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.234844][ T6139] loop2: detected capacity change from 0 to 512 [ 102.306788][ T6139] EXT4-fs error (device loop2): ext4_orphan_get:1404: inode #15: comm syz.2.91: inode has both inline data and extents flags [ 102.338492][ T6139] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.91: couldn't read orphan inode 15 (err -117) [ 102.429018][ T6139] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.056608][ T8] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 103.222712][ T5779] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.276720][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.329729][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 103.366446][ T8] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 103.408149][ T8] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 103.425474][ T6170] netlink: 'syz.2.100': attribute type 3 has an invalid length. [ 103.434369][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.466168][ T8] usb 4-1: config 0 descriptor?? [ 103.604661][ T6174] loop2: detected capacity change from 0 to 128 [ 103.627102][ T6174] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 103.650639][ T6174] ext4 filesystem being mounted at /29/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 103.742693][ T6174] EXT4-fs error (device loop2): ext4_read_inode_bitmap:140: comm syz.2.104: Invalid inode bitmap blk 7016996765293437281 in block_group 0 [ 103.888210][ T5779] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 103.901627][ T8] plantronics 0003:047F:FFFF.0003: unknown main item tag 0xd [ 103.948795][ T8] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 103.980619][ T8] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 104.193860][ T5822] usb 4-1: USB disconnect, device number 5 [ 104.300289][ T5917] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.439465][ T5917] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.553103][ T5917] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.649452][ T5917] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.103392][ T6196] loop0: detected capacity change from 0 to 256 [ 105.266924][ T6196] FAT-fs (loop0): Directory bread(block 64) failed [ 105.297180][ T6196] FAT-fs (loop0): Directory bread(block 65) failed [ 105.314480][ T6196] FAT-fs (loop0): Directory bread(block 66) failed [ 105.345681][ T6196] FAT-fs (loop0): Directory bread(block 67) failed [ 105.353292][ T5776] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 105.364647][ T5776] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 105.367710][ T6196] FAT-fs (loop0): Directory bread(block 68) failed [ 105.382210][ T5776] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 105.393087][ T6196] FAT-fs (loop0): Directory bread(block 69) failed [ 105.400522][ T5776] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 105.419663][ T5776] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 105.430711][ T5776] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 105.457793][ T6196] FAT-fs (loop0): Directory bread(block 70) failed [ 105.464410][ T6196] FAT-fs (loop0): Directory bread(block 71) failed [ 105.503590][ T6196] FAT-fs (loop0): Directory bread(block 72) failed [ 105.516613][ T6196] FAT-fs (loop0): Directory bread(block 73) failed [ 106.137523][ T6213] loop2: detected capacity change from 0 to 32768 [ 106.159455][ T6213] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.117 (6213) [ 106.203984][ T6213] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 106.215011][ T6213] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 106.224552][ T6213] BTRFS info (device loop2): using free space tree [ 106.362942][ T6213] BTRFS info (device loop2): enabling ssd optimizations [ 106.371350][ T6213] BTRFS info (device loop2): auto enabling async discard [ 106.384844][ T6231] netlink: 432 bytes leftover after parsing attributes in process `syz.3.119'. [ 106.409935][ T5773] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 106.481217][ T6236] warning: `syz.3.119' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 106.628002][ T5779] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 106.962841][ T5782] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 106.998666][ T6201] chnl_net:caif_netlink_parms(): no params data found [ 107.209420][ T5782] usb 4-1: config 1 interface 0 has no altsetting 0 [ 107.232079][ T5782] usb 4-1: string descriptor 0 read error: -22 [ 107.246578][ T5782] usb 4-1: New USB device found, idVendor=0853, idProduct=0148, bcdDevice= 0.40 [ 107.255657][ T5782] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.540326][ T5085] Bluetooth: hci1: command tx timeout [ 107.680950][ T5917] hsr_slave_0: left promiscuous mode [ 107.693741][ T5917] hsr_slave_1: left promiscuous mode [ 107.722561][ T5782] hid (null): report_id 15267 is invalid [ 107.737221][ T5917] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 107.786862][ T5917] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 107.829161][ T5917] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.857885][ T5917] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 107.892062][ T5917] bridge_slave_1: left allmulticast mode [ 107.901991][ T5917] bridge_slave_1: left promiscuous mode [ 107.914670][ T5782] topre 0003:0853:0148.0004: unknown main item tag 0x6 [ 107.924848][ T5917] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.946817][ T5782] topre 0003:0853:0148.0004: unknown main item tag 0xe [ 107.953729][ T5782] topre 0003:0853:0148.0004: unknown main item tag 0x7 [ 107.972294][ T5782] topre 0003:0853:0148.0004: unknown main item tag 0x5 [ 107.985542][ T5917] bridge_slave_0: left allmulticast mode [ 107.991987][ T5782] topre 0003:0853:0148.0004: report_id 15267 is invalid [ 108.001195][ T5917] bridge_slave_0: left promiscuous mode [ 108.007522][ T5782] topre 0003:0853:0148.0004: item 0 2 1 8 parsing failed [ 108.015459][ T5917] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.028719][ T5782] topre: probe of 0003:0853:0148.0004 failed with error -22 [ 108.067167][ T5782] usb 4-1: USB disconnect, device number 6 [ 108.104673][ T5917] veth1_macvtap: left promiscuous mode [ 108.116315][ T5917] veth0_macvtap: left promiscuous mode [ 108.123047][ T5917] veth1_vlan: left promiscuous mode [ 108.130171][ T5917] veth0_vlan: left promiscuous mode [ 108.308482][ T5776] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 108.323138][ T5776] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 108.337494][ T5776] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 108.353558][ T5776] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 108.376221][ T5776] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 108.400398][ T5776] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 108.562502][ T6272] loop3: detected capacity change from 0 to 64 [ 109.060544][ T5917] team0 (unregistering): Port device team_slave_1 removed [ 109.106939][ T1208] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 109.107348][ T5917] team0 (unregistering): Port device team_slave_0 removed [ 109.156959][ T5917] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 109.200921][ T5917] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 109.301206][ T1208] usb 4-1: unable to get BOS descriptor or descriptor too short [ 109.315966][ T1208] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 109.330134][ T1208] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 109.345194][ T1208] usb 4-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 109.356423][ T1208] usb 4-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 109.370269][ T1208] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 109.381213][ T1208] usb 4-1: config 1 interface 1 has no altsetting 0 [ 109.391779][ T1208] usb 4-1: string descriptor 0 read error: -22 [ 109.398956][ T1208] usb 4-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 109.414192][ T1208] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.596056][ T5917] bond0 (unregistering): Released all slaves [ 109.619904][ T5776] Bluetooth: hci1: command tx timeout [ 109.702535][ T6201] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.710287][ T6201] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.718833][ T6201] bridge_slave_0: entered allmulticast mode [ 109.726096][ T6201] bridge_slave_0: entered promiscuous mode [ 109.746886][ T6201] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.756856][ T6201] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.764098][ T6201] bridge_slave_1: entered allmulticast mode [ 109.777007][ T6201] bridge_slave_1: entered promiscuous mode [ 109.784545][ T6269] netlink: 12 bytes leftover after parsing attributes in process `syz.2.126'. [ 109.813922][ T6269] xfrm1: entered promiscuous mode [ 109.822285][ T6269] xfrm1: entered allmulticast mode [ 109.879903][ T6269] netlink: 12 bytes leftover after parsing attributes in process `syz.2.126'. [ 109.897872][ T6201] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 109.922539][ T6201] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 110.060651][ T6201] team0: Port device team_slave_0 added [ 110.122291][ T6201] team0: Port device team_slave_1 added [ 110.214414][ T6201] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 110.225880][ T6201] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.254184][ T6201] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 110.309577][ T6201] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 110.323660][ T6201] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.370215][ T6201] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 110.500900][ T5776] Bluetooth: hci0: command tx timeout [ 110.505157][ T6201] hsr_slave_0: entered promiscuous mode [ 110.515719][ T6201] hsr_slave_1: entered promiscuous mode [ 110.523105][ T6201] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 110.531550][ T6201] Cannot create hsr debugfs directory [ 110.581237][ T1208] usb 4-1: USB disconnect, device number 7 [ 110.757004][ T5917] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.892149][ T5917] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.959394][ T6266] chnl_net:caif_netlink_parms(): no params data found [ 110.985104][ T5917] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.069684][ T5917] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.150922][ T6201] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 111.174413][ T6201] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 111.301498][ T6201] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 111.349797][ T6308] loop3: detected capacity change from 0 to 164 [ 111.366853][ T6201] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 111.404739][ T6266] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.420720][ T6308] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 111.432354][ T6266] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.447284][ T6266] bridge_slave_0: entered allmulticast mode [ 111.464702][ T6266] bridge_slave_0: entered promiscuous mode [ 111.493883][ T6308] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 111.505494][ T6266] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.527019][ T6266] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.534396][ T6266] bridge_slave_1: entered allmulticast mode [ 111.557443][ T6266] bridge_slave_1: entered promiscuous mode [ 111.706688][ T5776] Bluetooth: hci1: command tx timeout [ 111.796206][ T6266] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 111.839288][ T6266] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 111.986525][ T5782] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 111.998778][ T6266] team0: Port device team_slave_0 added [ 112.024453][ T6266] team0: Port device team_slave_1 added [ 112.153936][ T6266] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 112.168532][ T5782] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.176518][ T6266] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.205348][ T5782] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 112.205373][ T5782] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 112.205423][ T5782] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 112.205446][ T5782] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.220859][ T5782] usb 4-1: config 0 descriptor?? [ 112.253218][ T6266] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 112.326033][ T6266] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 112.333372][ T6266] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.361418][ T6266] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 112.409052][ T6312] loop2: detected capacity change from 0 to 40427 [ 112.425460][ T6312] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 112.433320][ T6312] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 112.463338][ T6312] F2FS-fs (loop2): invalid crc value [ 112.508010][ T6312] F2FS-fs (loop2): Found nat_bits in checkpoint [ 112.536008][ T6266] hsr_slave_0: entered promiscuous mode [ 112.554619][ T6266] hsr_slave_1: entered promiscuous mode [ 112.569552][ T6266] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 112.586645][ T5776] Bluetooth: hci0: command tx timeout [ 112.587312][ T6266] Cannot create hsr debugfs directory [ 112.619564][ T6312] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 112.644335][ T6312] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 112.724815][ T5782] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 112.754111][ T5782] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 113.125847][ T6201] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.385224][ T6201] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.494411][ T5917] hsr_slave_0: left promiscuous mode [ 113.507726][ T5917] hsr_slave_1: left promiscuous mode [ 113.527577][ T5917] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 113.535001][ T5917] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 113.563360][ T5917] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 113.573646][ T5917] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 113.625421][ T5917] bridge_slave_1: left allmulticast mode [ 113.638057][ T5917] bridge_slave_1: left promiscuous mode [ 113.643833][ T5917] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.668726][ T5917] bridge_slave_0: left allmulticast mode [ 113.674505][ T5917] bridge_slave_0: left promiscuous mode [ 113.686861][ T5917] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.748535][ T5917] veth1_macvtap: left promiscuous mode [ 113.754119][ T5917] veth0_macvtap: left promiscuous mode [ 113.767678][ T5917] veth1_vlan: left promiscuous mode [ 113.773023][ T5917] veth0_vlan: left promiscuous mode [ 113.787062][ T5776] Bluetooth: hci1: command tx timeout [ 114.425868][ T5917] team0 (unregistering): Port device team_slave_1 removed [ 114.467097][ T5917] team0 (unregistering): Port device team_slave_0 removed [ 114.507799][ T5917] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 114.592311][ T5917] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 114.656557][ T5776] Bluetooth: hci0: command tx timeout [ 114.784865][ T6349] loop3: detected capacity change from 0 to 128 [ 114.828152][ T789] usb 4-1: USB disconnect, device number 8 [ 114.868856][ T28] audit: type=1326 audit(1785256751.651:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6348 comm="syz.2.143" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f15aeb9de99 code=0x0 [ 114.874195][ T6349] bio_check_eod: 15 callbacks suppressed [ 114.874231][ T6349] syz.3.136: attempt to access beyond end of device [ 114.874231][ T6349] loop3: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 114.971811][ T6349] syz.3.136: attempt to access beyond end of device [ 114.971811][ T6349] loop3: rw=2049, sector=138, nr_sectors = 8 limit=128 [ 114.989960][ T6349] syz.3.136: attempt to access beyond end of device [ 114.989960][ T6349] loop3: rw=2049, sector=244, nr_sectors = 2 limit=128 [ 115.009408][ T6349] Buffer I/O error on dev loop3, logical block 122, lost async page write [ 115.170386][ T5917] bond0 (unregistering): Released all slaves [ 115.340339][ T1139] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.347567][ T1139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.369090][ T1139] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.376415][ T1139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.428898][ T6266] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 115.469205][ T6266] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 115.482533][ T6266] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 115.506306][ T6266] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 115.877035][ T6266] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.924363][ T6266] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.991762][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.998990][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.028236][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.035422][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.178245][ T6201] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.463785][ T6266] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.731286][ T6201] veth0_vlan: entered promiscuous mode [ 116.738020][ T5776] Bluetooth: hci0: command tx timeout [ 116.779920][ T6201] veth1_vlan: entered promiscuous mode [ 116.820892][ T6201] veth0_macvtap: entered promiscuous mode [ 116.835901][ T6201] veth1_macvtap: entered promiscuous mode [ 116.861185][ T6201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.872073][ T6201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.883796][ T6201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.902367][ T6201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.915285][ T6201] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 116.953102][ T6201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.965571][ T6201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.976167][ T6201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.991254][ T6201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.003050][ T6201] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 117.023571][ T6201] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.034190][ T6201] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.048311][ T6201] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.057773][ T6201] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.161505][ T6266] veth0_vlan: entered promiscuous mode [ 117.231563][ T6266] veth1_vlan: entered promiscuous mode [ 117.253484][ T5915] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.277138][ T5915] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.324221][ T6266] veth0_macvtap: entered promiscuous mode [ 117.364572][ T6266] veth1_macvtap: entered promiscuous mode [ 117.369317][ T5915] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.384707][ T5915] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.417246][ T6266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.430151][ T6266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.445007][ T6266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.456065][ T6266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.466455][ T6266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.477847][ T6266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.490665][ T6266] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 117.527747][ T6266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.553761][ T6266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.564646][ T6266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.575622][ T6266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.585897][ T6266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.597349][ T6266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.615835][ T6266] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 117.659624][ T6266] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.696781][ T6266] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.705554][ T6266] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.753218][ T6266] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.888470][ T5917] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.917328][ T5917] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.993030][ T1089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.028861][ T1089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.098057][ T1208] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 118.298815][ T1208] usb 3-1: config 0 interface 0 altsetting 255 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 118.316630][ T5821] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 118.331374][ T1208] usb 3-1: config 0 interface 0 has no altsetting 0 [ 118.360106][ T1208] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 118.380174][ T1208] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 118.400432][ T1208] usb 3-1: Product: syz [ 118.404647][ T1208] usb 3-1: Manufacturer: syz [ 118.425926][ T1208] usb 3-1: SerialNumber: syz [ 118.444103][ T1208] usb 3-1: config 0 descriptor?? [ 118.471140][ T1208] usb 3-1: selecting invalid altsetting 0 [ 118.534396][ T5821] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.556156][ T5821] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.585843][ T5821] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 118.624983][ T5821] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 118.666525][ T5821] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.729339][ T5821] usb 5-1: config 0 descriptor?? [ 118.898979][ T789] usb 3-1: USB disconnect, device number 3 [ 118.905485][ T6414] usb 3-1: cannot submit urb 0, error -19: no device [ 118.933311][ T6445] loop5: detected capacity change from 0 to 128 [ 119.035320][ T6445] syz.5.148: attempt to access beyond end of device [ 119.035320][ T6445] loop5: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 119.104953][ T6445] syz.5.148: attempt to access beyond end of device [ 119.104953][ T6445] loop5: rw=2049, sector=138, nr_sectors = 8 limit=128 [ 119.122835][ T6445] syz.5.148: attempt to access beyond end of device [ 119.122835][ T6445] loop5: rw=2049, sector=244, nr_sectors = 2 limit=128 [ 119.147532][ T6445] Buffer I/O error on dev loop5, logical block 122, lost async page write [ 119.172303][ T5821] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 119.200495][ T5821] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 120.568626][ T5821] usb 5-1: USB disconnect, device number 2 [ 121.230810][ T6508] loop3: detected capacity change from 0 to 512 [ 121.280600][ T6508] EXT4-fs error (device loop3): ext4_orphan_get:1404: inode #15: comm syz.3.160: inode has both inline data and extents flags [ 121.321250][ T6517] loop4: detected capacity change from 0 to 128 [ 121.342379][ T6508] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.160: couldn't read orphan inode 15 (err -117) [ 121.358421][ T6508] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.412089][ T6517] syz.4.162: attempt to access beyond end of device [ 121.412089][ T6517] loop4: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 121.445096][ T6517] syz.4.162: attempt to access beyond end of device [ 121.445096][ T6517] loop4: rw=2049, sector=138, nr_sectors = 8 limit=128 [ 121.468720][ T6517] syz.4.162: attempt to access beyond end of device [ 121.468720][ T6517] loop4: rw=2049, sector=244, nr_sectors = 2 limit=128 [ 121.484868][ T5929] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 121.512995][ T6517] Buffer I/O error on dev loop4, logical block 122, lost async page write [ 121.679856][ T5929] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 121.716955][ T5929] usb 3-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 121.746533][ T5929] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.778892][ T5929] usb 3-1: config 0 descriptor?? [ 122.055247][ T5778] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.137341][ T5821] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 122.215604][ T5929] logitech 0003:046D:C29C.0007: unknown main item tag 0x0 [ 122.223684][ T5929] logitech 0003:046D:C29C.0007: unknown main item tag 0x0 [ 122.232166][ T5929] logitech 0003:046D:C29C.0007: unknown main item tag 0x0 [ 122.239657][ T5929] logitech 0003:046D:C29C.0007: unknown main item tag 0x0 [ 122.247275][ T5929] logitech 0003:046D:C29C.0007: unknown main item tag 0x0 [ 122.254492][ T5929] logitech 0003:046D:C29C.0007: unknown main item tag 0x0 [ 122.263148][ T5929] logitech 0003:046D:C29C.0007: unknown main item tag 0x0 [ 122.270916][ T5929] logitech 0003:046D:C29C.0007: unknown main item tag 0x0 [ 122.278577][ T5929] logitech 0003:046D:C29C.0007: unknown main item tag 0x0 [ 122.285838][ T5929] logitech 0003:046D:C29C.0007: unknown main item tag 0x0 [ 122.293679][ T5929] logitech 0003:046D:C29C.0007: unknown main item tag 0x0 [ 122.302371][ T5929] logitech 0003:046D:C29C.0007: unknown main item tag 0x0 [ 122.311996][ T5929] logitech 0003:046D:C29C.0007: item fetching failed at offset 26/36 [ 122.324260][ T5929] logitech 0003:046D:C29C.0007: parse failed [ 122.334638][ T5821] usb 5-1: config 0 interface 0 altsetting 255 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 122.347155][ T5929] logitech: probe of 0003:046D:C29C.0007 failed with error -22 [ 122.356122][ T5821] usb 5-1: config 0 interface 0 has no altsetting 0 [ 122.379887][ T5821] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 122.389935][ T5821] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 122.398551][ T5821] usb 5-1: Product: syz [ 122.403330][ T5821] usb 5-1: Manufacturer: syz [ 122.408620][ T5821] usb 5-1: SerialNumber: syz [ 122.428600][ T5821] usb 5-1: config 0 descriptor?? [ 122.445941][ T5821] usb 5-1: selecting invalid altsetting 0 [ 122.480791][ T55] usb 3-1: USB disconnect, device number 4 [ 122.759195][ T1208] usb 5-1: USB disconnect, device number 3 [ 122.759202][ C1] usb 5-1: Unable to submit urb #1: -19 at snd_usb_queue_pending_output_urbs [ 122.774959][ T6525] usb 5-1: cannot submit urb 0, error -19: no device [ 123.142345][ T6554] loop5: detected capacity change from 0 to 128 [ 123.222678][ T6554] syz.5.172: attempt to access beyond end of device [ 123.222678][ T6554] loop5: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 123.268241][ T6554] syz.5.172: attempt to access beyond end of device [ 123.268241][ T6554] loop5: rw=2049, sector=138, nr_sectors = 8 limit=128 [ 123.297205][ T6554] syz.5.172: attempt to access beyond end of device [ 123.297205][ T6554] loop5: rw=2049, sector=244, nr_sectors = 2 limit=128 [ 123.319344][ T6554] Buffer I/O error on dev loop5, logical block 122, lost async page write [ 123.969757][ T55] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 124.172424][ T55] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.199959][ T55] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 124.212607][ T55] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 124.228835][ T55] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 124.242036][ T55] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.263957][ T55] usb 6-1: config 0 descriptor?? [ 124.526734][ T6596] loop4: detected capacity change from 0 to 512 [ 124.547549][ T6596] EXT4-fs error (device loop4): ext4_orphan_get:1404: inode #15: comm syz.4.173: inode has both inline data and extents flags [ 124.565086][ T6596] EXT4-fs error (device loop4): ext4_orphan_get:1409: comm syz.4.173: couldn't read orphan inode 15 (err -117) [ 124.598767][ T6596] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.710256][ T55] plantronics 0003:047F:FFFF.0008: No inputs registered, leaving [ 124.718539][ T5822] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 124.748942][ T55] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 124.913984][ T5822] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 124.957077][ T5822] usb 4-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 124.976665][ T5822] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.004939][ T5822] usb 4-1: config 0 descriptor?? [ 125.202413][ T6201] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.443663][ T5822] logitech 0003:046D:C29C.0009: unknown main item tag 0x0 [ 125.480351][ T5822] logitech 0003:046D:C29C.0009: unknown main item tag 0x0 [ 125.496676][ T5822] logitech 0003:046D:C29C.0009: unknown main item tag 0x0 [ 125.503849][ T5822] logitech 0003:046D:C29C.0009: unknown main item tag 0x0 [ 125.529009][ T5822] logitech 0003:046D:C29C.0009: unknown main item tag 0x0 [ 125.554667][ T5822] logitech 0003:046D:C29C.0009: unknown main item tag 0x0 [ 125.574740][ T5822] logitech 0003:046D:C29C.0009: unknown main item tag 0x0 [ 125.595722][ T5822] logitech 0003:046D:C29C.0009: unknown main item tag 0x0 [ 125.618862][ T5822] logitech 0003:046D:C29C.0009: unknown main item tag 0x0 [ 125.639699][ T5822] logitech 0003:046D:C29C.0009: unknown main item tag 0x0 [ 125.669031][ T5822] logitech 0003:046D:C29C.0009: unknown main item tag 0x0 [ 125.683302][ T5822] logitech 0003:046D:C29C.0009: unknown main item tag 0x0 [ 125.709427][ T5822] logitech 0003:046D:C29C.0009: item fetching failed at offset 26/36 [ 125.727390][ T5822] logitech 0003:046D:C29C.0009: parse failed [ 125.745184][ T5822] logitech: probe of 0003:046D:C29C.0009 failed with error -22 [ 125.790155][ T5822] usb 4-1: USB disconnect, device number 9 [ 126.335762][ T6639] loop2: detected capacity change from 0 to 128 [ 126.451317][ T6644] loop4: detected capacity change from 0 to 256 [ 126.460501][ T6639] syz.2.180: attempt to access beyond end of device [ 126.460501][ T6639] loop2: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 126.518147][ T6639] syz.2.180: attempt to access beyond end of device [ 126.518147][ T6639] loop2: rw=2049, sector=138, nr_sectors = 8 limit=128 [ 126.551944][ T6639] syz.2.180: attempt to access beyond end of device [ 126.551944][ T6639] loop2: rw=2049, sector=244, nr_sectors = 2 limit=128 [ 126.567934][ T6639] Buffer I/O error on dev loop2, logical block 122, lost async page write [ 126.589980][ T6644] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x46ae1815, utbl_chksum : 0xe619d30d) [ 126.637319][ T6644] exFAT-fs (loop4): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 126.702625][ T6644] exFAT-fs (loop4): error, invalid access to FAT free cluster (entry 0x00000006) [ 126.706851][ T27] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 126.713819][ T6644] exFAT-fs (loop4): Filesystem has been set read-only [ 126.918647][ T27] usb 4-1: config 0 interface 0 altsetting 255 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 126.932627][ T27] usb 4-1: config 0 interface 0 has no altsetting 0 [ 126.942540][ T27] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 126.954129][ T5821] usb 6-1: USB disconnect, device number 2 [ 126.965498][ T27] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 126.996683][ T27] usb 4-1: Product: syz [ 127.000900][ T27] usb 4-1: Manufacturer: syz [ 127.005518][ T27] usb 4-1: SerialNumber: syz [ 127.042299][ T27] usb 4-1: config 0 descriptor?? [ 127.070442][ T27] usb 4-1: selecting invalid altsetting 0 [ 127.463581][ T5821] usb 4-1: USB disconnect, device number 10 [ 127.463808][ T6641] usb 4-1: cannot submit urb 0, error -19: no device [ 128.059172][ T6684] loop5: detected capacity change from 0 to 512 [ 128.090283][ T6684] EXT4-fs error (device loop5): ext4_orphan_get:1404: inode #15: comm syz.5.185: inode has both inline data and extents flags [ 128.146229][ T6684] EXT4-fs error (device loop5): ext4_orphan_get:1409: comm syz.5.185: couldn't read orphan inode 15 (err -117) [ 128.163654][ T6684] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.008772][ T6266] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.146679][ T27] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 129.148892][ T55] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 129.249709][ T6722] loop5: detected capacity change from 0 to 64 [ 129.342667][ T27] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 129.363438][ T27] usb 5-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 129.373828][ T27] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.381979][ T55] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.392567][ T27] usb 5-1: config 0 descriptor?? [ 129.404671][ T55] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.436871][ T55] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 129.470944][ T55] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 129.497684][ T55] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.534975][ T55] usb 4-1: config 0 descriptor?? [ 129.808175][ T6734] syz.2.202 uses obsolete (PF_INET,SOCK_PACKET) [ 129.865643][ T5822] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 129.870592][ T27] logitech 0003:046D:C29C.000A: unknown main item tag 0x0 [ 129.884564][ T27] logitech 0003:046D:C29C.000A: unknown main item tag 0x0 [ 129.892026][ T27] logitech 0003:046D:C29C.000A: unknown main item tag 0x0 [ 129.906444][ T27] logitech 0003:046D:C29C.000A: unknown main item tag 0x0 [ 129.915511][ T27] logitech 0003:046D:C29C.000A: unknown main item tag 0x0 [ 129.923027][ T27] logitech 0003:046D:C29C.000A: unknown main item tag 0x0 [ 129.936666][ T27] logitech 0003:046D:C29C.000A: unknown main item tag 0x0 [ 129.943851][ T27] logitech 0003:046D:C29C.000A: unknown main item tag 0x0 [ 129.951074][ T27] logitech 0003:046D:C29C.000A: unknown main item tag 0x0 [ 129.961613][ T27] logitech 0003:046D:C29C.000A: unknown main item tag 0x0 [ 129.969045][ T27] logitech 0003:046D:C29C.000A: unknown main item tag 0x0 [ 129.976206][ T27] logitech 0003:046D:C29C.000A: unknown main item tag 0x0 [ 129.984021][ T27] logitech 0003:046D:C29C.000A: item fetching failed at offset 26/36 [ 129.995037][ T27] logitech 0003:046D:C29C.000A: parse failed [ 130.025033][ T27] logitech: probe of 0003:046D:C29C.000A failed with error -22 [ 130.056716][ T55] plantronics 0003:047F:FFFF.000B: No inputs registered, leaving [ 130.078884][ T5822] usb 6-1: config 0 interface 0 altsetting 255 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 130.093265][ T55] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 130.118798][ T5822] usb 6-1: config 0 interface 0 has no altsetting 0 [ 130.143883][ T5822] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 130.161804][ T55] usb 5-1: USB disconnect, device number 4 [ 130.172592][ T6738] loop2: detected capacity change from 0 to 2048 [ 130.178233][ T5822] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 130.203554][ T5822] usb 6-1: Product: syz [ 130.208358][ T5822] usb 6-1: Manufacturer: syz [ 130.213171][ T5822] usb 6-1: SerialNumber: syz [ 130.224319][ T5822] usb 6-1: config 0 descriptor?? [ 130.242446][ T5822] usb 6-1: selecting invalid altsetting 0 [ 130.269188][ T6738] loop2: p1 p4 [ 130.269188][ T6738] p1: [ 130.286712][ T6738] loop2: partition table partially beyond EOD, truncated [ 130.304293][ T6738] loop2: p4 start 184549376 is beyond EOD, truncated [ 130.603032][ T6439] udevd[6439]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 130.636013][ T5791] udevd[5791]: inotify_add_watch(7, /dev/loop2p5, 10) failed: No such file or directory [ 130.660294][ T5821] usb 6-1: USB disconnect, device number 3 [ 130.667111][ T6730] usb 6-1: cannot submit urb 0, error -19: no device [ 130.677143][ T6730] usb 6-1: cannot submit urb 0, error -19: no device [ 130.684268][ T6730] usb 6-1: cannot submit urb 0, error -19: no device [ 130.752535][ T6439] udevd[6439]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 130.771763][ T5791] udevd[5791]: inotify_add_watch(7, /dev/loop2p5, 10) failed: No such file or directory [ 130.849825][ T5932] udevd[5932]: inotify_add_watch(7, /dev/loop2p5, 10) failed: No such file or directory [ 130.864820][ T6439] udevd[6439]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 131.297158][ T28] audit: type=1326 audit(1785256768.071:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6754 comm="syz.2.209" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15aeb9de99 code=0x7ffc0000 [ 131.325759][ T28] audit: type=1326 audit(1785256768.081:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6754 comm="syz.2.209" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15aeb9de99 code=0x7ffc0000 [ 131.335038][ T6755] Bluetooth: MGMT ver 1.22 [ 131.352526][ T28] audit: type=1326 audit(1785256768.091:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6754 comm="syz.2.209" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15aeb9de99 code=0x7ffc0000 [ 131.404212][ T28] audit: type=1326 audit(1785256768.091:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6754 comm="syz.2.209" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f15aeb9de99 code=0x7ffc0000 [ 131.406994][ T789] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 131.495393][ T28] audit: type=1326 audit(1785256768.091:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6754 comm="syz.2.209" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15aeb9de99 code=0x7ffc0000 [ 131.544701][ T28] audit: type=1326 audit(1785256768.091:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6754 comm="syz.2.209" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15aeb9de99 code=0x7ffc0000 [ 131.574598][ T28] audit: type=1326 audit(1785256768.091:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6754 comm="syz.2.209" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15aeb9de99 code=0x7ffc0000 [ 131.583388][ T6760] loop5: detected capacity change from 0 to 128 [ 131.609040][ T28] audit: type=1326 audit(1785256768.101:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6754 comm="syz.2.209" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15aeb9de99 code=0x7ffc0000 [ 131.636589][ T789] usb 5-1: Using ep0 maxpacket: 16 [ 131.650296][ T28] audit: type=1326 audit(1785256768.101:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6754 comm="syz.2.209" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15aeb9de99 code=0x7ffc0000 [ 131.665419][ T789] usb 5-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4 [ 131.702332][ T6760] syz.5.210: attempt to access beyond end of device [ 131.702332][ T6760] loop5: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 131.714042][ T789] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.726270][ T28] audit: type=1326 audit(1785256768.101:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6754 comm="syz.2.209" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f15aeb9de99 code=0x7ffc0000 [ 131.747183][ T789] usb 5-1: Product: syz [ 131.755504][ T789] usb 5-1: Manufacturer: syz [ 131.774638][ T789] usb 5-1: SerialNumber: syz [ 131.777654][ T6760] syz.5.210: attempt to access beyond end of device [ 131.777654][ T6760] loop5: rw=2049, sector=138, nr_sectors = 8 limit=128 [ 131.793174][ T789] usb 5-1: config 0 descriptor?? [ 131.814373][ T789] gspca_main: spca508-2.14.0 probing 041e:4018 [ 131.824259][ T6760] syz.5.210: attempt to access beyond end of device [ 131.824259][ T6760] loop5: rw=2049, sector=244, nr_sectors = 2 limit=128 [ 131.843368][ T6760] Buffer I/O error on dev loop5, logical block 122, lost async page write [ 132.017582][ T789] gspca_spca508: reg_read err -32 [ 132.056516][ T789] gspca_spca508: reg_read err -32 [ 132.068437][ T789] gspca_spca508: reg_read err -32 [ 132.084605][ T789] gspca_spca508: reg_read err -32 [ 132.160604][ T6772] loop2: detected capacity change from 0 to 256 [ 132.185332][ T6770] loop5: detected capacity change from 0 to 2048 [ 132.264465][ T6770] loop5: p1 p4 [ 132.264465][ T6770] p1: [ 132.274513][ T8] usb 4-1: USB disconnect, device number 11 [ 132.293280][ T789] gspca_spca508: reg write: error -71 [ 132.306843][ T789] spca508: probe of 5-1:0.0 failed with error -71 [ 132.316830][ T6770] loop5: partition table partially beyond EOD, truncated [ 132.346831][ T789] usb 5-1: USB disconnect, device number 5 [ 132.362262][ T6770] loop5: p4 start 184549376 is beyond EOD, truncated [ 132.391149][ T6778] loop3: detected capacity change from 0 to 512 [ 132.515336][ T6778] EXT4-fs error (device loop3): ext4_orphan_get:1404: inode #15: comm syz.3.217: inode has both inline data and extents flags [ 132.570270][ T6778] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.217: couldn't read orphan inode 15 (err -117) [ 132.629468][ T6778] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.732348][ T6439] udevd[6439]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 132.754891][ T6777] udevd[6777]: inotify_add_watch(7, /dev/loop5p5, 10) failed: No such file or directory [ 132.799200][ T8] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 132.913345][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.920450][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.028990][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.040087][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 133.057919][ T8] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 133.074227][ T8] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 133.083457][ T55] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 133.091641][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.103371][ T8] usb 3-1: config 0 descriptor?? [ 133.166532][ T789] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 133.234671][ T5778] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.278899][ T55] usb 6-1: config 0 interface 0 altsetting 255 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 133.300777][ T55] usb 6-1: config 0 interface 0 has no altsetting 0 [ 133.321608][ T55] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 133.337671][ T55] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 133.355610][ T55] usb 6-1: Product: syz [ 133.368323][ T55] usb 6-1: Manufacturer: syz [ 133.377753][ T789] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.386849][ T55] usb 6-1: SerialNumber: syz [ 133.394828][ T789] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 133.405279][ T789] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 133.418485][ T55] usb 6-1: config 0 descriptor?? [ 133.429727][ T789] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 133.439265][ T789] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.451779][ T55] usb 6-1: selecting invalid altsetting 0 [ 133.458141][ T789] usb 5-1: config 0 descriptor?? [ 133.573423][ T8] plantronics 0003:047F:FFFF.000C: No inputs registered, leaving [ 133.614949][ T8] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 133.817575][ T6806] loop3: detected capacity change from 0 to 128 [ 133.881693][ T8] usb 6-1: USB disconnect, device number 4 [ 133.881719][ C1] usb 6-1: Unable to submit urb #0: -19 at snd_usb_queue_pending_output_urbs [ 133.897562][ C1] dummy_hcd dummy_hcd.5: timer fired with no URBs pending? [ 133.909911][ T6787] usb 6-1: cannot submit urb 0, error -19: no device [ 133.935903][ T6787] usb 6-1: cannot submit urb 0, error -19: no device [ 133.946073][ T789] plantronics 0003:047F:FFFF.000D: No inputs registered, leaving [ 133.979572][ T6806] syz.3.224: attempt to access beyond end of device [ 133.979572][ T6806] loop3: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 134.011754][ T6787] usb 6-1: cannot submit urb 0, error -19: no device [ 134.041186][ T789] plantronics 0003:047F:FFFF.000D: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 134.131670][ T6806] syz.3.224: attempt to access beyond end of device [ 134.131670][ T6806] loop3: rw=2049, sector=138, nr_sectors = 8 limit=128 [ 134.184210][ T6806] syz.3.224: attempt to access beyond end of device [ 134.184210][ T6806] loop3: rw=2049, sector=244, nr_sectors = 2 limit=128 [ 134.224878][ T6806] Buffer I/O error on dev loop3, logical block 122, lost async page write [ 134.894427][ T6839] loop5: detected capacity change from 0 to 128 [ 134.921729][ T6839] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 134.936879][ T6839] hpfs: filesystem error: improperly stopped [ 134.943141][ T6839] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 134.955342][ T6839] hpfs: You really don't want any checks? You are crazy... [ 134.964183][ T6839] hpfs: Code page index out of array [ 134.972483][ T6839] hpfs: code page support is disabled [ 134.981095][ T6839] hpfs: hpfs_map_4sectors(): unaligned read [ 134.991489][ T6839] hpfs: hpfs_map_4sectors(): unaligned read [ 134.999147][ T6839] hpfs: filesystem error: unable to find root dir [ 135.617774][ T789] usb 3-1: USB disconnect, device number 5 [ 135.846725][ T6867] loop3: detected capacity change from 0 to 512 [ 135.882209][ T6867] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.896566][ T6867] ext4 filesystem being mounted at /syzcgroup/unified/syz3/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 135.935551][ T6867] process 'syz.3.237' launched './file2' with NULL argv: empty string added [ 136.016864][ T8] usb 5-1: USB disconnect, device number 6 [ 136.080278][ T6867] ERROR: Domain ' /sbin/init /etc/init.d/rcS /etc/init.d/S50sshd /sbin/start-stop-daemon /usr/sbin/sshd /usr/libexec/sshd-session /bin/sh /root/ci2-linux-6-6-kasan/syz-executor /root/ci2-linux-6-6-kasan/syz-executor /newroot/syzcgroup/unified/syz3/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 136.241061][ T6875] syzkaller1: entered promiscuous mode [ 136.376414][ T6875] syzkaller1: entered allmulticast mode [ 137.030745][ T6902] loop2: detected capacity change from 0 to 256 [ 137.126862][ T6902] FAT-fs (loop2): Directory bread(block 64) failed [ 137.141485][ T6902] FAT-fs (loop2): Directory bread(block 65) failed [ 137.157533][ T6902] FAT-fs (loop2): Directory bread(block 66) failed [ 137.164223][ T6902] FAT-fs (loop2): Directory bread(block 67) failed [ 137.184561][ T6902] FAT-fs (loop2): Directory bread(block 68) failed [ 137.204701][ T6902] FAT-fs (loop2): Directory bread(block 69) failed [ 137.211394][ T789] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 137.236626][ T6902] FAT-fs (loop2): Directory bread(block 70) failed [ 137.245637][ T6902] FAT-fs (loop2): Directory bread(block 71) failed [ 137.267001][ T6902] FAT-fs (loop2): Directory bread(block 72) failed [ 137.273595][ T6902] FAT-fs (loop2): Directory bread(block 73) failed [ 137.408498][ T789] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 137.425079][ T789] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 137.445219][ T789] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 137.460844][ T6902] syz.2.250: attempt to access beyond end of device [ 137.460844][ T6902] loop2: rw=1, sector=1224, nr_sectors = 4 limit=256 [ 137.473484][ T789] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 137.513950][ T789] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.545450][ T789] usb 6-1: config 0 descriptor?? [ 137.992612][ T789] plantronics 0003:047F:FFFF.000E: No inputs registered, leaving [ 138.039941][ T789] plantronics 0003:047F:FFFF.000E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 138.242303][ T6930] loop4: detected capacity change from 0 to 1024 [ 138.325721][ T6930] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.777711][ T6201] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.187674][ T28] kauditd_printk_skb: 21 callbacks suppressed [ 139.187717][ T28] audit: type=1804 audit(1785256775.971:37): pid=6952 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.258" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="ramfs" ino=11773 res=1 errno=0 [ 140.139648][ T1208] usb 6-1: USB disconnect, device number 5 [ 140.668088][ T7004] netlink: 4 bytes leftover after parsing attributes in process `syz.5.277'. [ 140.885644][ T7015] loop5: detected capacity change from 0 to 512 [ 140.989621][ T7015] EXT4-fs error (device loop5): ext4_orphan_get:1404: inode #15: comm syz.5.273: inode has both inline data and extents flags [ 141.073702][ T7015] EXT4-fs error (device loop5): ext4_orphan_get:1409: comm syz.5.273: couldn't read orphan inode 15 (err -117) [ 141.162208][ T7015] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.471383][ T7005] loop2: detected capacity change from 0 to 32768 [ 141.496307][ T7005] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.270 (7005) [ 141.585701][ T7005] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 141.612574][ T7005] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 141.641998][ T7005] BTRFS info (device loop2): setting nodatacow, compression disabled [ 141.662225][ T7005] BTRFS info (device loop2): turning on flush-on-commit [ 141.679857][ T7005] BTRFS info (device loop2): trying to use backup root at mount time [ 141.710932][ T7005] BTRFS info (device loop2): enabling auto defrag [ 141.743825][ T7005] BTRFS info (device loop2): max_inline at 0 [ 141.763695][ T7005] BTRFS info (device loop2): using free space tree [ 141.930048][ T7005] BTRFS info (device loop2): enabling ssd optimizations [ 141.943388][ T7005] BTRFS info (device loop2): auto enabling async discard [ 142.141486][ T28] audit: type=1804 audit(1785256778.901:38): pid=7005 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.270" name="/newroot/82/file1/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=263 res=1 errno=0 [ 142.190337][ T6266] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.467943][ T5779] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 142.609968][ T6439] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop2 scanned by udevd (6439) [ 142.694219][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806634d000: rx timeout, send abort [ 143.195208][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806634dc00: rx timeout, send abort [ 143.204102][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806634d000: abort rx timeout. Force session deactivation [ 143.534460][ T8] kernel write not supported for file bpf-prog (pid: 8 comm: kworker/0:0) [ 143.703629][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806634dc00: abort rx timeout. Force session deactivation [ 144.024467][ T7082] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 144.605193][ T7098] loop5: detected capacity change from 0 to 32768 [ 144.793331][ T7121] loop4: detected capacity change from 0 to 512 [ 144.849626][ T7121] EXT4-fs error (device loop4): ext4_orphan_get:1430: comm syz.4.295: bad orphan inode 13 [ 144.877213][ T7125] ERROR: (device loop5): dbAdjCtl: the maximum free buddy is not the old root [ 144.877213][ T7125] [ 144.906483][ T7121] ext4_test_bit(bit=12, block=4) = 1 [ 144.926539][ T7121] is_bad_inode(inode)=0 [ 144.958789][ T7121] NEXT_ORPHAN(inode)=0 [ 144.980867][ T7125] ERROR: (device loop5): remounting filesystem as read-only [ 144.992633][ T7121] max_ino=32 [ 144.995875][ T7121] i_nlink=1 [ 145.043973][ T7121] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.161511][ T7121] EXT4-fs warning (device loop4): dx_probe:845: inode #2: comm syz.4.295: Hash code is SIPHASH, but hash not in dirent [ 145.210856][ T7121] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.295: Corrupt directory, running e2fsck is recommended [ 145.457097][ T6201] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.471178][ T7133] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 145.507955][ T7133] overlayfs: failed to set xattr on upper [ 145.532828][ T7133] overlayfs: ...falling back to redirect_dir=nofollow. [ 145.559737][ T7133] overlayfs: ...falling back to index=off. [ 145.575701][ T7133] overlayfs: ...falling back to uuid=null. [ 145.591841][ T7133] overlayfs: maximum fs stacking depth exceeded [ 145.986480][ T5822] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 146.198686][ T5822] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 146.236568][ T5822] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 146.267538][ T5822] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 146.295043][ T5822] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 146.330084][ T5822] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.372444][ T5822] usb 3-1: config 0 descriptor?? [ 146.705908][ T7161] loop4: detected capacity change from 0 to 128 [ 146.732005][ T7161] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 146.794516][ T7161] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 146.831882][ T5822] plantronics 0003:047F:FFFF.000F: No inputs registered, leaving [ 146.859815][ T28] audit: type=1800 audit(1785256783.641:39): pid=7161 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.304" name="bus" dev="loop4" ino=1048634 res=0 errno=0 [ 146.891803][ T5822] plantronics 0003:047F:FFFF.000F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 147.048221][ T12] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 148.709148][ T7193] syz.4.310 (7193) used greatest stack depth: 20008 bytes left [ 149.048654][ T7212] input: syz1 as /devices/virtual/input/input7 [ 149.093489][ T5822] usb 3-1: USB disconnect, device number 6 [ 149.546130][ T7225] loop5: detected capacity change from 0 to 128 [ 149.682753][ T7225] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 149.716479][ T7225] hpfs: filesystem error: improperly stopped [ 149.722531][ T7225] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 149.766617][ T7225] hpfs: You really don't want any checks? You are crazy... [ 149.796542][ T7225] hpfs: Code page index out of array [ 149.801870][ T7225] hpfs: code page support is disabled [ 149.826696][ T7225] hpfs: hpfs_map_4sectors(): unaligned read [ 149.843038][ T7225] hpfs: hpfs_map_4sectors(): unaligned read [ 149.857064][ T7225] hpfs: filesystem error: unable to find root dir [ 149.940919][ T7225] hpfs: hpfs_map_4sectors(): unaligned read [ 150.035917][ T7235] 9pnet: p9_errstr2errno: server reported unknown error 00000000000000000004ÿ€Œ [ 150.116921][ T7216] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 150.874005][ T5822] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 151.076544][ T5822] usb 6-1: Using ep0 maxpacket: 8 [ 151.189950][ T5822] usb 6-1: unable to get BOS descriptor or descriptor too short [ 151.223743][ T5822] usb 6-1: no configurations [ 151.229430][ T5822] usb 6-1: can't read configurations, error -22 [ 151.515481][ T7284] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 151.600137][ T7287] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 151.985514][ T7299] loop5: detected capacity change from 0 to 512 [ 151.997021][ T7302] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 152.060851][ T7299] EXT4-fs error (device loop5): ext4_orphan_get:1404: inode #15: comm syz.5.337: inode has both inline data and extents flags [ 152.077771][ T7299] EXT4-fs error (device loop5): ext4_orphan_get:1409: comm syz.5.337: couldn't read orphan inode 15 (err -117) [ 152.150078][ T7299] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.363106][ T7314] loop6: detected capacity change from 0 to 7 [ 152.371105][ T7310] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 152.380782][ T7310] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 152.389980][ T7310] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 152.399218][ T7310] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 152.408403][ T7310] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 152.417560][ T7310] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 152.421843][ T7314] Dev loop6: unable to read RDB block 7 [ 152.426671][ T7310] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 152.426827][ T7310] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 152.450489][ T7310] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 152.469719][ T7314] loop6: unable to read partition table [ 152.475678][ T7314] loop6: partition table beyond EOD, truncated [ 152.532241][ T7314] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 152.545608][ C0] operation not supported error, dev loop6, sector 0 op 0x9:(WRITE_ZEROES) flags 0x8000800 phys_seg 0 prio class 2 [ 153.092446][ T6266] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.846469][ T1208] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 153.874339][ T7331] loop2: detected capacity change from 0 to 32768 [ 153.976509][ T7331] XFS (loop2): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 154.049092][ T1208] usb 6-1: Using ep0 maxpacket: 8 [ 154.051862][ T7331] XFS (loop2): Ending clean mount [ 154.063959][ T1208] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 154.090379][ T1208] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 154.107456][ T1208] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.136715][ T1208] usb 6-1: config 0 descriptor?? [ 154.162265][ T28] audit: type=1800 audit(1785256790.941:40): pid=7331 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.345" name="file1" dev="loop2" ino=4422 res=0 errno=0 [ 154.435610][ T1208] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 154.582089][ T5779] XFS (loop2): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 154.706734][ T6921] usb 6-1: USB disconnect, device number 8 [ 154.712638][ C1] iowarrior 6-1:0.0: iowarrior_callback - usb_submit_urb failed with result -19 [ 156.153840][ T7415] loop5: detected capacity change from 0 to 256 [ 156.820777][ T7435] mmap: syz.3.366 (7435) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 157.178846][ T7445] netlink: 8 bytes leftover after parsing attributes in process `syz.5.370'. [ 157.686758][ T789] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 157.796577][ T5821] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 157.888049][ T789] usb 6-1: Using ep0 maxpacket: 16 [ 157.897157][ T789] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 157.910922][ T789] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 157.935830][ T789] usb 6-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 157.946119][ T789] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.992081][ T5821] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 158.005710][ T789] usb 6-1: config 0 descriptor?? [ 158.016885][ T5821] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.037431][ T5821] usb 4-1: Product: syz [ 158.046329][ T5821] usb 4-1: Manufacturer: syz [ 158.057975][ T7473] [ 158.064970][ T7473] ====================================================== [ 158.072015][ T7473] WARNING: possible circular locking dependency detected [ 158.079079][ T7473] syzkaller #0 Not tainted [ 158.083525][ T7473] ------------------------------------------------------ [ 158.090566][ T7473] syz.4.380/7473 is trying to acquire lock: [ 158.096481][ T7473] ffff88814da960e0 (&type->s_umount_key#31){++++}-{3:3}, at: super_lock+0x189/0x390 [ 158.105931][ T7473] [ 158.105931][ T7473] but task is already holding lock: [ 158.113320][ T7473] ffff888020378108 (&bdev->bd_holder_lock){+.+.}-{3:3}, at: bdev_mark_dead+0x31/0x1a0 [ 158.122944][ T7473] [ 158.122944][ T7473] which lock already depends on the new lock. [ 158.122944][ T7473] [ 158.133435][ T7473] [ 158.133435][ T7473] the existing dependency chain (in reverse order) is: [ 158.142451][ T7473] [ 158.142451][ T7473] -> #4 (&bdev->bd_holder_lock){+.+.}-{3:3}: [ 158.150711][ T7473] __mutex_lock+0x135/0xc80 [ 158.155859][ T7473] bd_finish_claiming+0x229/0x3f0 [ 158.161416][ T7473] blkdev_get_by_dev+0x469/0x610 [ 158.166879][ T7473] bdev_open_by_dev+0x77/0x100 [ 158.172169][ T7473] setup_bdev_super+0x59/0x660 [ 158.177461][ T7473] mount_bdev+0x1ce/0x2c0 [ 158.182332][ T7473] legacy_get_tree+0xea/0x180 [ 158.187545][ T7473] vfs_get_tree+0x8c/0x280 [ 158.192501][ T7473] do_new_mount+0x24a/0xa40 [ 158.197561][ T7473] init_mount+0xde/0x130 [ 158.202344][ T7473] do_mount_root+0x97/0x230 [ 158.207409][ T7473] mount_root_generic+0x1a6/0x3e0 [ 158.212999][ T7473] prepare_namespace+0xc2/0x100 [ 158.218392][ T7473] kernel_init_freeable+0x41a/0x560 [ 158.224132][ T7473] kernel_init+0x1d/0x1c0 [ 158.229018][ T7473] ret_from_fork+0x48/0x80 [ 158.233969][ T7473] ret_from_fork_asm+0x11/0x20 [ 158.239270][ T7473] [ 158.239270][ T7473] -> #3 (bdev_lock){+.+.}-{3:3}: [ 158.246424][ T7473] __mutex_lock+0x135/0xc80 [ 158.251464][ T7473] bd_prepare_to_claim+0x1d9/0x4a0 [ 158.257109][ T7473] truncate_bdev_range+0x4e/0x260 [ 158.262667][ T7473] blkdev_fallocate+0x428/0x6a0 [ 158.268055][ T7473] vfs_fallocate+0x585/0x6f0 [ 158.273188][ T7473] do_madvise+0x166b/0x3790 [ 158.278238][ T7473] __x64_sys_madvise+0xa6/0xc0 [ 158.283545][ T7473] do_syscall_64+0x55/0xb0 [ 158.288496][ T7473] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 158.294926][ T7473] [ 158.294926][ T7473] -> #2 (mapping.invalidate_lock){++++}-{3:3}: [ 158.303286][ T7473] down_write+0x97/0x200 [ 158.308074][ T7473] set_blocksize+0x247/0x4b0 [ 158.313197][ T7473] sb_min_blocksize+0xbe/0x190 [ 158.318489][ T7473] ext4_fill_super+0x6e7/0x6870 [ 158.323918][ T7473] get_tree_bdev+0x3e5/0x520 [ 158.329050][ T7473] vfs_get_tree+0x8c/0x280 [ 158.334027][ T7473] do_new_mount+0x24a/0xa40 [ 158.339063][ T7473] init_mount+0xde/0x130 [ 158.343849][ T7473] do_mount_root+0x97/0x230 [ 158.348903][ T7473] mount_root_generic+0x1a6/0x3e0 [ 158.354470][ T7473] prepare_namespace+0xc2/0x100 [ 158.359906][ T7473] kernel_init_freeable+0x41a/0x560 [ 158.365655][ T7473] kernel_init+0x1d/0x1c0 [ 158.370533][ T7473] ret_from_fork+0x48/0x80 [ 158.375486][ T7473] ret_from_fork_asm+0x11/0x20 [ 158.380798][ T7473] [ 158.380798][ T7473] -> #1 (&sb->s_type->i_mutex_key#8){++++}-{3:3}: [ 158.389424][ T7473] down_write+0x97/0x200 [ 158.394201][ T7473] set_blocksize+0x1ff/0x4b0 [ 158.399332][ T7473] sb_min_blocksize+0xbe/0x190 [ 158.404657][ T7473] ext4_fill_super+0x6e7/0x6870 [ 158.410056][ T7473] get_tree_bdev+0x3e5/0x520 [ 158.415196][ T7473] vfs_get_tree+0x8c/0x280 [ 158.420159][ T7473] do_new_mount+0x24a/0xa40 [ 158.425216][ T7473] init_mount+0xde/0x130 [ 158.430013][ T7473] do_mount_root+0x97/0x230 [ 158.435089][ T7473] mount_root_generic+0x1a6/0x3e0 [ 158.440649][ T7473] prepare_namespace+0xc2/0x100 [ 158.446043][ T7473] kernel_init_freeable+0x41a/0x560 [ 158.451795][ T7473] kernel_init+0x1d/0x1c0 [ 158.456686][ T7473] ret_from_fork+0x48/0x80 [ 158.461659][ T7473] ret_from_fork_asm+0x11/0x20 [ 158.466963][ T7473] [ 158.466963][ T7473] -> #0 (&type->s_umount_key#31){++++}-{3:3}: [ 158.475240][ T7473] __lock_acquire+0x37ef/0x7d80 [ 158.480632][ T7473] lock_acquire+0x19e/0x420 [ 158.485675][ T7473] down_read+0x46/0x2e0 [ 158.490366][ T7473] super_lock+0x189/0x390 [ 158.495227][ T7473] fs_bdev_mark_dead+0xad/0x1f0 [ 158.500614][ T7473] bdev_mark_dead+0x83/0x1a0 [ 158.505742][ T7473] blk_report_disk_dead+0x21c/0x3e0 [ 158.511478][ T7473] del_gendisk+0x2cb/0x8f0 [ 158.516479][ T7473] sd_remove+0x8d/0x100 [ 158.521175][ T7473] device_release_driver_internal+0x458/0x6f0 [ 158.527794][ T7473] bus_remove_device+0x43b/0x520 [ 158.533335][ T7473] device_del+0x51f/0x910 [ 158.538203][ T7473] __scsi_remove_device+0x1a2/0x390 [ 158.543954][ T7473] scsi_forget_host+0xd0/0x110 [ 158.549256][ T7473] scsi_remove_host+0x1b3/0x730 [ 158.554630][ T7473] virtscsi_remove+0x130/0x1a0 [ 158.559928][ T7473] virtio_dev_remove+0x96/0x1a0 [ 158.565323][ T7473] device_release_driver_internal+0x408/0x6f0 [ 158.571923][ T7473] bus_remove_device+0x43b/0x520 [ 158.577400][ T7473] device_del+0x51f/0x910 [ 158.582295][ T7473] device_unregister+0x20/0xc0 [ 158.587592][ T7473] unregister_virtio_device+0x37/0x60 [ 158.593494][ T7473] virtio_pci_remove+0x7f/0xf0 [ 158.598791][ T7473] pci_device_remove+0x97/0x230 [ 158.604175][ T7473] device_release_driver_internal+0x408/0x6f0 [ 158.610791][ T7473] unbind_store+0x1a1/0x1d0 [ 158.615854][ T7473] kernfs_fop_write_iter+0x3a4/0x520 [ 158.621704][ T7473] vfs_write+0x474/0x9a0 [ 158.626479][ T7473] ksys_write+0x151/0x260 [ 158.631342][ T7473] do_syscall_64+0x55/0xb0 [ 158.636288][ T7473] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 158.642743][ T7473] [ 158.642743][ T7473] other info that might help us debug this: [ 158.642743][ T7473] [ 158.652977][ T7473] Chain exists of: [ 158.652977][ T7473] &type->s_umount_key#31 --> bdev_lock --> &bdev->bd_holder_lock [ 158.652977][ T7473] [ 158.666647][ T7473] Possible unsafe locking scenario: [ 158.666647][ T7473] [ 158.674114][ T7473] CPU0 CPU1 [ 158.679487][ T7473] ---- ---- [ 158.684854][ T7473] lock(&bdev->bd_holder_lock); [ 158.689799][ T7473] lock(bdev_lock); [ 158.696217][ T7473] lock(&bdev->bd_holder_lock); [ 158.703675][ T7473] rlock(&type->s_umount_key#31); [ 158.708801][ T7473] [ 158.708801][ T7473] *** DEADLOCK *** [ 158.708801][ T7473] [ 158.716957][ T7473] 8 locks held by syz.4.380/7473: [ 158.721995][ T7473] #0: ffff88807e2fa848 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2a3/0x330 [ 158.731241][ T7473] #1: ffff88805ec54418 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x21e/0x9a0 [ 158.740137][ T7473] #2: ffff88805dc6ec88 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1dc/0x520 [ 158.749910][ T7473] #3: ffff8880192e41f0 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xa7/0x6f0 [ 158.760458][ T7473] #4: ffff888018f9f1b8 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xa7/0x6f0 [ 158.771005][ T7473] #5: ffff8881417e00e0 (&shost->scan_mutex){+.+.}-{3:3}, at: scsi_remove_host+0x32/0x730 [ 158.780945][ T7473] #6: ffff888022caa3b8 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xa7/0x6f0 [ 158.791573][ T7473] #7: ffff888020378108 (&bdev->bd_holder_lock){+.+.}-{3:3}, at: bdev_mark_dead+0x31/0x1a0 [ 158.801583][ T7473] [ 158.801583][ T7473] stack backtrace: [ 158.807491][ T7473] CPU: 1 PID: 7473 Comm: syz.4.380 Not tainted syzkaller #0 [ 158.814779][ T7473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 158.824847][ T7473] Call Trace: [ 158.828136][ T7473] [ 158.831086][ T7473] dump_stack_lvl+0x18c/0x250 [ 158.835772][ T7473] ? load_image+0x420/0x420 [ 158.840302][ T7473] ? show_regs_print_info+0x20/0x20 [ 158.845515][ T7473] ? print_circular_bug+0x12b/0x1a0 [ 158.850724][ T7473] check_noncircular+0x2fc/0x400 [ 158.855676][ T7473] ? print_deadlock_bug+0x5d0/0x5d0 [ 158.860898][ T7473] ? lockdep_lock+0xf5/0x230 [ 158.865504][ T7473] ? _find_first_zero_bit+0xd6/0x100 [ 158.870813][ T7473] __lock_acquire+0x37ef/0x7d80 [ 158.875705][ T7473] ? __lock_acquire+0x1262/0x7d80 [ 158.880752][ T7473] ? verify_lock_unused+0x140/0x140 [ 158.885970][ T7473] ? verify_lock_unused+0x140/0x140 [ 158.891188][ T7473] ? find_lock_entries+0x120/0x1020 [ 158.896400][ T7473] lock_acquire+0x19e/0x420 [ 158.900931][ T7473] ? super_lock+0x189/0x390 [ 158.905461][ T7473] ? __might_sleep+0xe0/0xe0 [ 158.910114][ T7473] ? read_lock_is_recursive+0x20/0x20 [ 158.915514][ T7473] ? __mutex_trylock_common+0x160/0x270 [ 158.921109][ T7473] ? trace_raw_output_contention_end+0xd0/0xd0 [ 158.927287][ T7473] ? mapping_try_invalidate+0x4bf/0x570 [ 158.932854][ T7473] down_read+0x46/0x2e0 [ 158.937143][ T7473] ? super_lock+0x189/0x390 [ 158.941686][ T7473] super_lock+0x189/0x390 [ 158.946047][ T7473] ? lock_chain_count+0x20/0x20 [ 158.950919][ T7473] ? user_get_super+0x180/0x180 [ 158.955777][ T7473] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 158.961949][ T7473] ? lockdep_hardirqs_on+0x98/0x150 [ 158.967169][ T7473] fs_bdev_mark_dead+0xad/0x1f0 [ 158.972051][ T7473] ? super_s_dev_set+0xa0/0xa0 [ 158.976834][ T7473] bdev_mark_dead+0x83/0x1a0 [ 158.981440][ T7473] ? blk_report_disk_dead+0x88/0x3e0 [ 158.986783][ T7473] blk_report_disk_dead+0x21c/0x3e0 [ 158.991997][ T7473] ? __blk_mark_disk_dead+0x120/0x120 [ 158.997390][ T7473] ? xa_find_after+0xaf/0x430 [ 159.002115][ T7473] del_gendisk+0x2cb/0x8f0 [ 159.006561][ T7473] ? blk_report_disk_dead+0x3e0/0x3e0 [ 159.011949][ T7473] ? __pm_runtime_resume+0x129/0x170 [ 159.017261][ T7473] sd_remove+0x8d/0x100 [ 159.021436][ T7473] ? sd_probe+0x11c0/0x11c0 [ 159.026447][ T7473] device_release_driver_internal+0x458/0x6f0 [ 159.032599][ T7473] bus_remove_device+0x43b/0x520 [ 159.037575][ T7473] ? bus_probe_device+0x260/0x260 [ 159.042630][ T7473] ? up_write+0x1be/0x410 [ 159.046984][ T7473] ? kernfs_remove_by_name_ns+0x117/0x150 [ 159.052729][ T7473] device_del+0x51f/0x910 [ 159.057112][ T7473] ? kill_device+0x160/0x160 [ 159.061749][ T7473] ? kobject_put+0x421/0x450 [ 159.066369][ T7473] __scsi_remove_device+0x1a2/0x390 [ 159.071593][ T7473] scsi_forget_host+0xd0/0x110 [ 159.076386][ T7473] scsi_remove_host+0x1b3/0x730 [ 159.081265][ T7473] virtscsi_remove+0x130/0x1a0 [ 159.086057][ T7473] virtio_dev_remove+0x96/0x1a0 [ 159.090932][ T7473] ? virtio_dev_probe+0xae0/0xae0 [ 159.095970][ T7473] device_release_driver_internal+0x408/0x6f0 [ 159.102094][ T7473] bus_remove_device+0x43b/0x520 [ 159.107064][ T7473] ? bus_probe_device+0x260/0x260 [ 159.112112][ T7473] ? up_write+0x1be/0x410 [ 159.116464][ T7473] ? kernfs_remove_by_name_ns+0x117/0x150 [ 159.122212][ T7473] device_del+0x51f/0x910 [ 159.126571][ T7473] ? kill_device+0x160/0x160 [ 159.131181][ T7473] ? pci_device_is_present+0x175/0x240 [ 159.136659][ T7473] ? pci_real_dma_dev+0x20/0x20 [ 159.141534][ T7473] ? _raw_spin_lock_irq+0xbb/0xf0 [ 159.146604][ T7473] device_unregister+0x20/0xc0 [ 159.151398][ T7473] unregister_virtio_device+0x37/0x60 [ 159.156795][ T7473] virtio_pci_remove+0x7f/0xf0 [ 159.161587][ T7473] pci_device_remove+0x97/0x230 [ 159.166457][ T7473] ? pci_device_probe+0x8d0/0x8d0 [ 159.171496][ T7473] device_release_driver_internal+0x408/0x6f0 [ 159.177595][ T7473] unbind_store+0x1a1/0x1d0 [ 159.182124][ T7473] ? sysfs_kf_read+0x360/0x360 [ 159.186897][ T7473] kernfs_fop_write_iter+0x3a4/0x520 [ 159.192225][ T7473] vfs_write+0x474/0x9a0 [ 159.196491][ T7473] ? file_end_write+0x250/0x250 [ 159.201373][ T7473] ? __fget_files+0x3fc/0x460 [ 159.206081][ T7473] ? __fdget_pos+0x2a3/0x330 [ 159.210715][ T7473] ? ksys_write+0x74/0x260 [ 159.215154][ T7473] ksys_write+0x151/0x260 [ 159.219521][ T7473] ? __ia32_sys_read+0x90/0x90 [ 159.224403][ T7473] ? lockdep_hardirqs_on+0x98/0x150 [ 159.229633][ T7473] do_syscall_64+0x55/0xb0 [ 159.234069][ T7473] ? clear_bhb_loop+0x40/0x90 [ 159.238769][ T7473] ? clear_bhb_loop+0x40/0x90 [ 159.243491][ T7473] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 159.249409][ T7473] RIP: 0033:0x7fdbae19de99 [ 159.253841][ T7473] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 159.273546][ T7473] RSP: 002b:00007fdbaf000028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 159.281990][ T7473] RAX: ffffffffffffffda RBX: 00007fdbae425fa0 RCX: 00007fdbae19de99 [ 159.289976][ T7473] RDX: 000000000000000c RSI: 00002000000002c0 RDI: 0000000000000003 [ 159.297965][ T7473] RBP: 00007fdbae233eaf R08: 0000000000000000 R09: 0000000000000000 [ 159.305953][ T7473] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 159.314023][ T7473] R13: 00007fdbae426038 R14: 00007fdbae425fa0 R15: 00007ffefe4c02c8 [ 159.322014][ T7473] [ 159.327540][ T5821] usb 4-1: SerialNumber: syz [ 159.333840][ T5102] device offline error, dev sda, sector 1050766 op 0x1:(WRITE) flags 0x9800 phys_seg 3 prio class 2 [ 159.344786][ T5102] Aborting journal on device sda1-8. [ 159.352971][ T56] device offline error, dev sda, sector 1048886 op 0x1:(WRITE) flags 0x9800 phys_seg 1 prio class 2 [ 159.363952][ T56] device offline error, dev sda, sector 1048886 op 0x1:(WRITE) flags 0x9800 phys_seg 1 prio class 2 [ 159.366778][ T5782] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 159.374736][ T56] Buffer I/O error on dev sda1, logical block 131072, lost sync page write [ 159.375419][ T56] device offline error, dev sda, sector 704838 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 159.396200][ T7451] EXT4-fs error (device sda1): ext4_journal_check_start:84: comm syz.5.373: Detected aborted journal [ 159.401910][ T56] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2022 starting block 88104) [ 159.424302][ T56] Buffer I/O error on device sda1, logical block 88066 [ 159.431235][ T56] Buffer I/O error on device sda1, logical block 88067 [ 159.438313][ T56] Buffer I/O error on device sda1, logical block 88068 [ 159.445189][ T56] Buffer I/O error on device sda1, logical block 88069 [ 159.452071][ T56] Buffer I/O error on device sda1, logical block 88070 [ 159.460531][ T56] Buffer I/O error on device sda1, logical block 88071 [ 159.475299][ T56] device offline error, dev sda, sector 704894 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 159.482120][ T5102] JBD2: I/O error when updating journal superblock for sda1-8. [ 159.486117][ T56] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2022 starting block 88111) [ 159.505142][ T56] Buffer I/O error on device sda1, logical block 88073 [ 159.512352][ T56] device offline error, dev sda, sector 704918 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 159.523011][ T56] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2022 starting block 88114) [ 159.535975][ T56] Buffer I/O error on device sda1, logical block 88076 [ 159.542956][ T56] Buffer I/O error on device sda1, logical block 88077 [ 159.550021][ T56] Buffer I/O error on device sda1, logical block 88078 [ 159.556984][ T56] device offline error, dev sda, sector 704974 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 159.569622][ T56] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2022 starting block 88121) [ 159.581486][ T56] device offline error, dev sda, sector 705014 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 159.591983][ T56] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2022 starting block 88126) [ 159.603537][ T56] device offline error, dev sda, sector 705046 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 159.614009][ T56] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2022 starting block 88130) [ 159.625766][ T56] device offline error, dev sda, sector 705142 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 159.636453][ T56] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2022 starting block 88142) [ 159.648025][ T56] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2022 starting block 88148) [ 159.659735][ T56] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2022 starting block 88150) [ 159.671294][ T56] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2022 starting block 88158) [ 159.690898][ T5782] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 159.691496][ T56] Buffer I/O error on dev sda1, logical block 0, lost sync page write [ 159.709988][ T7451] EXT4-fs (sda1): I/O error while writing superblock [ 159.725814][ T5821] net_ratelimit: 3320 callbacks suppressed [ 159.725832][ T5821] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 159.744844][ T7451] EXT4-fs (sda1): Remounting filesystem read-only [ 159.755443][ T7473] Buffer I/O error on dev sda1, logical block 1, lost async page write [ 159.764525][ T5782] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 159.780330][ T5821] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 159.799974][ T5782] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 159.802444][ T7473] Buffer I/O error on dev sda1, logical block 130, lost async page write [ 159.827847][ T7473] Buffer I/O error on dev sda1, logical block 131, lost async page write [ 159.851760][ T7473] Buffer I/O error on dev sda1, logical block 132, lost async page write [ 159.869776][ T5782] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 159.883875][ T5782] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.912916][ T5782] usb 3-1: config 0 descriptor?? [ 160.021662][ T7473] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 160.195564][ T789] usb 6-1: string descriptor 0 read error: -71 [ 160.238677][ T789] usb 6-1: Max retries (5) exceeded reading string descriptor 200 [ 160.255533][ T789] letsketch: probe of 0003:6161:4D15.0010 failed with error -32 [ 160.282946][ T789] usb 6-1: USB disconnect, device number 9 [ 160.351071][ T5782] plantronics 0003:047F:FFFF.0011: No inputs registered, leaving [ 160.377243][ T5782] plantronics 0003:047F:FFFF.0011: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 160.403598][ T7490] udevd[7490]: failed to execute '/lib/udev/fido_id' 'fido_id': Input/output error [ 160.476455][ T5821] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -71 [ 160.490020][ T5821] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 160.501114][ T5821] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 160.511617][ T5821] lan78xx: probe of 4-1:1.0 failed with error -71 [ 160.525678][ T5821] usb 4-1: USB disconnect, device number 12 [ 162.508606][ T5822] usb 3-1: USB disconnect, device number 7