last executing test programs: 10.785836505s ago: executing program 0 (id=1550): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r1, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x17ef, 0x6085, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x4) 7.327394228s ago: executing program 0 (id=1563): socket$inet6(0xa, 0x0, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r1 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00'}) syz_emit_ethernet(0x11, &(0x7f0000001f00)=ANY=[], 0x0) syz_emit_ethernet(0x66, &(0x7f0000000240)={@local, @random="706ab144ffe0", @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0xfffc, 0x0, 0x0, 0x2f, 0x0, @remote, @remote}, {{0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x8, 0x6558, 0x1}}}}}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = syz_open_dev$vbi(&(0x7f00000000c0), 0x0, 0x2) ioctl$VIDIOC_S_STD(r2, 0x40085618, &(0x7f0000002840)=0x800000) socket(0x0, 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000000040)={'ipvs\x00'}, &(0x7f0000000080)=0x1e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r4 = gettid() r5 = syz_open_dev$dmmidi(&(0x7f00000000c0), 0x2, 0x0) readv(r5, &(0x7f0000000280)=[{&(0x7f0000000100)=""/116, 0x74}], 0x1) tkill(r4, 0x7) 6.484174818s ago: executing program 4 (id=1564): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703100000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 6.146790415s ago: executing program 0 (id=1566): r0 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000140)={0x0, 0x0, 0x45, {0x45, 0x0, "a7ea3163fd3b651763d80333dd08e13e0962e15c69cc465ec4c94d51a60f84a4bfa30c43ce1055c03ade799b8692277d8ad7129a6ccb2acddd085986660b01db3d77b3"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 5.763611307s ago: executing program 4 (id=1567): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x0, 0x9}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00'}, 0x10) r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) ioctl$MON_IOCH_MFLUSH(r0, 0x80089203, 0x0) 5.657901275s ago: executing program 1 (id=1568): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000021c0)=@delchain={0x23c, 0x65, 0x0, 0x0, 0x0, {}, [@filter_kind_options=@f_u32={{0x8}, {0x54, 0x2, [@TCA_U32_INDEV={0x14, 0x8, 'veth0_to_team\x00'}, @TCA_U32_INDEV={0x14, 0x8, 'veth0\x00'}, @TCA_U32_HASH={0x8}, @TCA_U32_CLASSID={0x8}, @TCA_U32_MARK={0x10}, @TCA_U32_FLAGS={0x8}]}}, @TCA_CHAIN={0x8}, @TCA_RATE={0x6}, @filter_kind_options=@f_route={{0xa}, {0x1a0, 0x2, [@TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_POLICE={0x24, 0x5, [@TCA_POLICE_AVRATE={0x8}, @TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_RATE64={0xc}]}, @TCA_ROUTE4_TO={0x8}, @TCA_ROUTE4_ACT={0x30, 0x6, [@m_nat={0x2c, 0x0, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}, @TCA_ROUTE4_CLASSID={0x8}, @TCA_ROUTE4_CLASSID={0x8}, @TCA_ROUTE4_ACT={0x124, 0x6, [@m_ctinfo={0x7c, 0x0, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8}, @TCA_CTINFO_ACT={0x18}]}, {0x2d, 0x6, "2d63b5d0c5a0cc700cb2a420cf2d6b309ddaa66d88125b544981c36d05218ab0efc68d90e355fdf9c3"}, {0xc}, {0xc}}}, @m_simple={0xa4, 0x0, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x6, 0x3, ']\x00'}, @TCA_DEF_DATA={0x8, 0x3, 'nat\x00'}, @TCA_DEF_DATA={0x12, 0x3, 'lb_hash_stats\x00'}, @TCA_DEF_DATA={0x17, 0x3, 'mcast_rejoin_count\x00'}]}, {0x39, 0x6, "5f803a8ed8cb953f03abc7c9ec28765aef4191fd6d47d5d97293ea014347cd89864bf3dc120d9c3c2a235d4cbd4091950164b61427"}, {0xc}, {0xc}}}]}, @TCA_ROUTE4_POLICE={0x4}]}}]}, 0x23c}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 5.657582016s ago: executing program 4 (id=1569): syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000040)=""/95) 5.339516671s ago: executing program 0 (id=1571): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = add_key$user(&(0x7f0000000380), &(0x7f0000000000), &(0x7f00000003c0)='X', 0x1, 0xfffffffffffffffe) r4 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000300)='asymmetric\x00', 0x0, &(0x7f0000000380)="1f20", 0x2, r4) keyctl$negate(0xd, r4, 0x0, 0x0) add_key$keyring(&(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) r5 = add_key$user(&(0x7f0000000200), &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000001540)="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", 0x154, r4) keyctl$dh_compute(0x17, &(0x7f0000000100)={r3, r5, r5}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a80)={'crct10dif\x00\x00\x00 \x00\x00\x00+\xcc\xff%\xd2cTH,\x00'}}) prlimit64(r0, 0x3, &(0x7f0000000240)={0xfffffffffffffffc, 0x7}, &(0x7f0000000280)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 4.288630188s ago: executing program 0 (id=1573): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r1, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x17ef, 0x6085, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x4) 4.128084211s ago: executing program 3 (id=1575): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000500)=[{0x0, 0x0, &(0x7f0000000480)}], 0x1, 0x0) io_setup(0xff, &(0x7f0000000380)=0x0) io_submit(r2, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000700)='\x00', 0x1}]) 3.936588927s ago: executing program 2 (id=1576): socket$inet6(0xa, 0x0, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r1 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00'}) syz_emit_ethernet(0x11, &(0x7f0000001f00)=ANY=[], 0x0) syz_emit_ethernet(0x66, &(0x7f0000000240)={@local, @random="706ab144ffe0", @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0xfffc, 0x0, 0x0, 0x2f, 0x0, @remote, @remote}, {{0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x8, 0x6558, 0x1}}}}}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = syz_open_dev$vbi(&(0x7f00000000c0), 0x0, 0x2) ioctl$VIDIOC_S_STD(r2, 0x40085618, &(0x7f0000002840)=0x800000) socket(0x0, 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000000040)={'ipvs\x00'}, &(0x7f0000000080)=0x1e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r4 = gettid() readv(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)=""/116, 0x74}], 0x1) tkill(r4, 0x7) 3.89303642s ago: executing program 3 (id=1577): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2}, 0x48) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.throttle.io_service_bytes\x00', 0x26e1, 0x0) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)) ioctl$SIOCSIFHWADDR(r0, 0x8b26, &(0x7f0000000000)={'wlan1\x00', @broadcast}) ioctl$TUNSETNOCSUM(r0, 0x8914, 0x20000000) 3.693762507s ago: executing program 3 (id=1578): r0 = syz_open_dev$video(&(0x7f0000000080), 0xb1, 0x0) ioctl$VIDIOC_S_FBUF(r0, 0x4030560b, 0x0) 3.478534935s ago: executing program 2 (id=1579): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 3.477840815s ago: executing program 3 (id=1580): openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$vim2m(0x0, 0x0, 0x2) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) pipe(0x0) r3 = memfd_create(&(0x7f0000000b40)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b \x00\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\xfe\xe6\xd2SLR\xa1\x00\x00\x17\x1f$^\xe1\x00\x00\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\x00\x00\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\x9b\xcc\x9b\f\xa7\x8f\x91O\xc9\xb9\x14M\x8b\xd0\xc0\xb8L\xbd\x1c4\xb59\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x1b1\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\xe7\xf6\t\x9dJ\xa4^m\xf3\xb5Y\f\x8f\r\xd5)>A\xe9\xf59\'G[\xf0`\xf3\'\xe4\xb2\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I?^\xf3,\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW', 0x6) fallocate(r3, 0x0, 0x0, 0x400001) fcntl$addseals(r3, 0x409, 0xc) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3}) vmsplice(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) chdir(0x0) open(&(0x7f0000000040)='./bus\x00', 0x46342, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x6628) 3.229014685s ago: executing program 2 (id=1581): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000008000000000000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) ioctl$MON_IOCH_MFLUSH(r1, 0x80089203, 0x0) 3.183684428s ago: executing program 4 (id=1582): r0 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000140)={0x0, 0x0, 0x45, {0x45, 0x0, "a7ea3163fd3b651763d80333dd08e13e0962e15c69cc465ec4c94d51a60f84a4bfa30c43ce1055c03ade799b8692277d8ad7129a6ccb2acddd085986660b01db3d77b3"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 2.386853744s ago: executing program 2 (id=1583): r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x101) setsockopt(0xffffffffffffffff, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(0xffffffffffffffff, &(0x7f0000e5c000)={0x2, 0x4e20, @dev}, 0x3a) r1 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r1) sendmsg$nl_xfrm(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@updsa={0xf0, 0x1a, 0x0, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4e23}, {@in=@private}, @in=@loopback, {}, {0x0, 0x0, 0x8}}}, 0xf0}}, 0x0) 2.299209561s ago: executing program 1 (id=1584): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = add_key$user(&(0x7f0000000380), &(0x7f0000000000), &(0x7f00000003c0)='X', 0x1, 0xfffffffffffffffe) r4 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000300)='asymmetric\x00', 0x0, &(0x7f0000000380)="1f20", 0x2, r4) keyctl$negate(0xd, r4, 0x0, 0x0) add_key$keyring(&(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) r5 = add_key$user(&(0x7f0000000200), &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000001540)="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", 0x154, r4) keyctl$dh_compute(0x17, &(0x7f0000000100)={r3, r5, r5}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a80)={'crct10dif\x00\x00\x00 \x00\x00\x00+\xcc\xff%\xd2cTH,\x00'}}) prlimit64(r0, 0x3, &(0x7f0000000240)={0xfffffffffffffffc, 0x7}, &(0x7f0000000280)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 2.293510202s ago: executing program 3 (id=1585): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000080)=0x2, 0x4) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000040)={0xfffc, [0x0, 0xffffffff]}, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) recvmsg(r0, &(0x7f00000014c0)={0x0, 0x0, 0x0}, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) 1.691489101s ago: executing program 4 (id=1586): r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000008c0)=r1, 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0xd6, 0x0, 0x32}, 0x9c) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) prctl$PR_SCHED_CORE(0x3e, 0x80000000000001, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000e80)=ANY=[@ANYBLOB="010000000000000000003b00", @ANYRES32=r4], 0x44}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000001440)="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", 0x6fb, 0x2004c890, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r6 = syz_io_uring_setup(0x7279, 0x0, &(0x7f0000000180)=0x0, &(0x7f00000001c0)) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000200)={0x43, 0x18000000}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r8, 0x0, 0x0) syz_io_uring_submit(r7, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index}) io_uring_enter(r6, 0x0, 0x0, 0x0, 0x0, 0x0) write$rfkill(r5, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 1.255084367s ago: executing program 1 (id=1587): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$getenv(0x4201, r0, 0x0, 0x0) 1.21980141s ago: executing program 2 (id=1588): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x40000080806, 0x0) listen(r3, 0x20000005) r4 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 1.147581126s ago: executing program 3 (id=1589): socket$inet6(0xa, 0x0, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r1 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00'}) syz_emit_ethernet(0x11, &(0x7f0000001f00)=ANY=[], 0x0) syz_emit_ethernet(0x66, &(0x7f0000000240)={@local, @random="706ab144ffe0", @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0xfffc, 0x0, 0x0, 0x2f, 0x0, @remote, @remote}, {{0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x8, 0x6558, 0x1}}}}}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = syz_open_dev$vbi(&(0x7f00000000c0), 0x0, 0x2) ioctl$VIDIOC_S_STD(r2, 0x40085618, &(0x7f0000002840)=0x800000) socket(0x0, 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000000040)={'ipvs\x00'}, &(0x7f0000000080)=0x1e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r4 = gettid() readv(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)=""/116, 0x74}], 0x1) tkill(r4, 0x7) 286.198287ms ago: executing program 0 (id=1590): r0 = socket(0x10, 0x3, 0x0) setitimer(0x1, &(0x7f0000000580)={{0x77359400}, {0x0, 0xea60}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001200010a0018000000"], 0x14}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) 113.629651ms ago: executing program 4 (id=1591): mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f00000003c0)='./file0\x00', &(0x7f0000000340), 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xff, 0xfffffffffffffffc}, 0x0) getpid() sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) getresgid(0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) open$dir(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x3, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x72}}, &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r0, &(0x7f0000000000), 0x0}, 0x20) r2 = socket$key(0xf, 0x3, 0x2) dup(r2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, 0x0, 0x0, 0x0, 0x1000, &(0x7f000062b000)=""/4096}, 0x90) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r4, r3, 0x25, 0x0, @void}, 0x10) 110.918181ms ago: executing program 2 (id=1601): r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000008c0)=r1, 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0xd6, 0x0, 0x32}, 0x9c) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) prctl$PR_SCHED_CORE(0x3e, 0x80000000000001, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000e80)=ANY=[@ANYBLOB="010000000000000000003b00", @ANYRES32=r4], 0x44}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000001440)="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", 0x6fb, 0x2004c890, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r6 = syz_io_uring_setup(0x7279, 0x0, &(0x7f0000000180)=0x0, &(0x7f00000001c0)) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000200)={0x43, 0x18000000}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r8, 0x0, 0x0) syz_io_uring_submit(r7, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index}) io_uring_enter(r6, 0x0, 0x0, 0x0, 0x0, 0x0) write$rfkill(r5, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 51.680976ms ago: executing program 1 (id=1592): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 49.924476ms ago: executing program 1 (id=1593): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) ioctl$MON_IOCH_MFLUSH(r1, 0x80089203, 0x0) 0s ago: executing program 1 (id=1594): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)) ioctl$SIOCSIFHWADDR(r0, 0x8b26, &(0x7f0000000000)={'wlan1\x00', @broadcast}) ioctl$TUNSETNOCSUM(r0, 0x8914, 0x20000000) kernel console output (not intermixed with test programs): DDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 345.151407][ T4045] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 345.183454][ T4045] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.190591][ T4045] bridge0: port 2(bridge_slave_1) entered forwarding state [ 345.209444][ T4045] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 345.243954][ T4045] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 345.310041][ T4045] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 345.349012][ T4045] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 345.370849][ T4045] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 345.390508][ T4045] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 345.402175][ T4045] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 345.442056][ T4045] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 345.478675][ T4045] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 345.513596][ T4045] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 345.566675][ T7663] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 345.609540][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 345.644827][ T7786] loop4: detected capacity change from 0 to 32768 [ 346.067251][ T7786] XFS (loop4): Mounting V5 Filesystem [ 346.273257][ T7786] XFS (loop4): Ending clean mount [ 346.294761][ T7786] XFS (loop4): Quotacheck needed: Please wait. [ 346.387685][ T7786] XFS (loop4): Quotacheck: Done. [ 346.449116][ T7800] loop1: detected capacity change from 0 to 32768 [ 346.736733][ T26] audit: type=1800 audit(1723109483.032:338): pid=7825 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.887" name="file1" dev="loop1" ino=4 res=0 errno=0 [ 346.993838][ T7387] XFS (loop4): Unmounting Filesystem [ 347.024020][ T7125] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 347.031595][ T7125] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 347.078082][ T7663] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 347.132892][ T3731] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 347.234792][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 347.251043][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 347.354190][ T5852] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 347.386298][ T5852] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 347.439618][ T7663] device veth0_vlan entered promiscuous mode [ 347.485112][ T3905] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 347.515401][ T3905] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 347.564375][ T7663] device veth1_vlan entered promiscuous mode [ 347.583483][ T3731] usb 1-1: not running at top speed; connect to a high speed hub [ 347.638753][ T3905] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 347.656043][ T3905] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 347.693050][ T3731] usb 1-1: config 1 has an invalid descriptor of length 168, skipping remainder of the config [ 347.724968][ T3731] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 347.744045][ T3731] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 347.744695][ T3905] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 347.823710][ T3905] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 347.890299][ T7663] device veth0_macvtap entered promiscuous mode [ 347.950001][ T7663] device veth1_macvtap entered promiscuous mode [ 347.983189][ T3731] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 348.053369][ T3731] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.100612][ T7663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 348.137362][ T7663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.142811][ T3731] usb 1-1: Product: syz [ 348.172024][ T7663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 348.202396][ T7663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.212545][ T3731] usb 1-1: Manufacturer: syz [ 348.243036][ T7663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 348.267909][ T3731] usb 1-1: SerialNumber: syz [ 348.316184][ T7663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.382870][ T7663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 348.447788][ T7663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.501775][ T7663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 348.532161][ T7663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.593995][ T7663] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 348.633923][ T3909] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 348.643399][ T3909] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 348.672446][ T3731] usb 1-1: 0:2 : does not exist [ 348.755153][ T3731] usb 1-1: USB disconnect, device number 18 [ 348.832372][ T3909] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 348.862260][ T3909] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 348.962292][ T7663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 349.002882][ T7663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.037547][ T7490] udevd[7490]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 349.072326][ T7663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 349.099683][ T7663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.125914][ T7663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 349.162908][ T7663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.195907][ T7663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 349.352624][ T7663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.405314][ T7663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 349.473041][ T7663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.609305][ T7855] loop1: detected capacity change from 0 to 40427 [ 349.618322][ T7663] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 349.632722][ T3731] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 349.663250][ T7855] F2FS-fs (loop1): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 349.690038][ T7855] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 349.713719][ T3731] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 349.745861][ T7855] F2FS-fs (loop1): invalid crc value [ 349.826556][ T7855] F2FS-fs (loop1): Found nat_bits in checkpoint [ 349.864001][ T7663] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.882597][ T7663] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.891997][ T7663] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.901108][ T7663] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.114245][ T7855] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 350.152991][ T7855] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 350.171457][ T7852] loop4: detected capacity change from 0 to 40427 [ 350.194360][ T26] audit: type=1800 audit(1723109486.492:339): pid=7855 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.893" name="bus" dev="loop1" ino=10 res=0 errno=0 [ 350.250017][ T7781] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 350.285653][ T7852] F2FS-fs (loop4): Found nat_bits in checkpoint [ 350.292720][ T7781] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 350.305651][ T7855] syz.1.893: attempt to access beyond end of device [ 350.305651][ T7855] loop1: rw=34817, sector=77824, nr_sectors = 848 limit=40427 [ 350.321826][ T26] audit: type=1800 audit(1723109486.562:340): pid=7855 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.893" name="bus" dev="loop1" ino=14 res=0 errno=0 [ 350.386733][ T7125] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 350.415514][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 350.439192][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 350.557449][ T7852] F2FS-fs (loop4): Cannot turn on quotas: -2 on 2 [ 350.717317][ T6811] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 350.735662][ T7852] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 351.113659][ T6949] syz-executor: attempt to access beyond end of device [ 351.113659][ T6949] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 351.214964][ T7896] loop2: detected capacity change from 0 to 64 [ 351.334005][ T7514] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 351.739324][ T3650] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 351.751389][ T3650] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 351.760903][ T3650] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 351.768895][ T3650] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 351.776788][ T3650] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 351.784335][ T3650] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 353.522836][ T26] audit: type=1326 audit(1723109489.112:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7908 comm="syz.0.902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd804d779f9 code=0x7ffc0000 [ 353.629833][ T7914] syz.2.903 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 353.653041][ T26] audit: type=1326 audit(1723109489.112:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7908 comm="syz.0.902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd804d779f9 code=0x7ffc0000 [ 353.737570][ T26] audit: type=1326 audit(1723109489.112:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7908 comm="syz.0.902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fd804d779f9 code=0x7ffc0000 [ 353.813789][ T26] audit: type=1326 audit(1723109489.162:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7908 comm="syz.0.902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd804d779f9 code=0x7ffc0000 [ 353.850368][ T7920] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 353.868265][ T7920] overlayfs: failed to set xattr on upper [ 353.872845][ T5852] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 353.874806][ T3650] Bluetooth: hci3: command tx timeout [ 353.897080][ T7920] overlayfs: ...falling back to index=off,metacopy=off. [ 353.904642][ T26] audit: type=1326 audit(1723109489.172:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7908 comm="syz.0.902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd804d779f9 code=0x7ffc0000 [ 353.957347][ T7920] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 354.010087][ T4595] device hsr_slave_0 left promiscuous mode [ 354.021395][ T4595] device hsr_slave_1 left promiscuous mode [ 354.032239][ T26] audit: type=1326 audit(1723109489.192:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7913 comm="syz.0.902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd804da99e5 code=0x7ffc0000 [ 354.064210][ T26] audit: type=1326 audit(1723109489.192:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7908 comm="syz.0.902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7fd804d779f9 code=0x7ffc0000 [ 354.090475][ T4595] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 354.097163][ T26] audit: type=1326 audit(1723109489.192:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7908 comm="syz.0.902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd804d779f9 code=0x7ffc0000 [ 354.108350][ T4595] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 354.122838][ T3905] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 354.149135][ T4595] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 354.161047][ T26] audit: type=1326 audit(1723109489.192:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7908 comm="syz.0.902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd804d779f9 code=0x7ffc0000 [ 354.172843][ T4595] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 354.204753][ T26] audit: type=1326 audit(1723109489.192:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7908 comm="syz.0.902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=286 compat=0 ip=0x7fd804d779f9 code=0x7ffc0000 [ 354.228260][ T4595] device bridge_slave_1 left promiscuous mode [ 354.244189][ T4595] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.271876][ T4595] device bridge_slave_0 left promiscuous mode [ 354.283579][ T4595] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.359811][ T4595] device veth1_macvtap left promiscuous mode [ 354.370974][ T4595] device veth0_macvtap left promiscuous mode [ 354.391240][ T4595] device veth1_vlan left promiscuous mode [ 354.400531][ T4595] device veth0_vlan left promiscuous mode [ 354.423808][ T3905] usb 3-1: Using ep0 maxpacket: 16 [ 354.433607][ T5852] usb 5-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=9f.d4 [ 354.450602][ T5852] usb 5-1: New USB device strings: Mfr=188, Product=0, SerialNumber=0 [ 354.459077][ T5852] usb 5-1: Manufacturer: syz [ 354.497343][ T5852] usb 5-1: config 0 descriptor?? [ 354.543272][ T3905] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 354.594955][ T3905] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 354.609129][ T3905] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 354.621061][ T3905] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 354.638235][ T3905] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 354.649295][ T3905] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 354.772054][ T7916] loop4: detected capacity change from 0 to 512 [ 354.815098][ T7916] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 354.843039][ T3905] usb 3-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 354.852129][ T3905] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.872741][ T7916] ext4 filesystem being mounted at /18/file0 supports timestamps until 2038 (0x7fffffff) [ 354.892906][ T3905] usb 3-1: Product: syz [ 354.897288][ T3905] usb 3-1: Manufacturer: syz [ 354.914765][ T3905] usb 3-1: SerialNumber: syz [ 354.952297][ T3905] usb 3-1: config 0 descriptor?? [ 355.234349][ T5852] gs_usb 5-1:0.0: Couldn't get device config: (err=-121) [ 355.242304][ T5852] gs_usb: probe of 5-1:0.0 failed with error -121 [ 355.461170][ T4595] team0 (unregistering): Port device team_slave_1 removed [ 355.532989][ T4595] team0 (unregistering): Port device team_slave_0 removed [ 355.610624][ T4595] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 355.655024][ T4595] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 355.873011][ T5852] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 355.950295][ T3650] Bluetooth: hci3: command tx timeout [ 356.243997][ T5852] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 356.425620][ T5852] usb 2-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice= 9.75 [ 356.437052][ T5852] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.448576][ T5852] usb 2-1: Product: syz [ 356.453254][ T5852] usb 2-1: Manufacturer: syz [ 356.457936][ T5852] usb 2-1: SerialNumber: syz [ 356.484649][ T5852] usb 2-1: config 0 descriptor?? [ 356.521493][ T4595] bond0 (unregistering): Released all slaves [ 356.632150][ T3731] usb 5-1: USB disconnect, device number 16 [ 356.658748][ T7387] EXT4-fs (loop4): unmounting filesystem. [ 356.666323][ T5852] viperboard 2-1:0.0: version 0.00 found at bus 002 address 015 [ 356.721975][ T3905] mcba_usb 3-1:0.0 can0: couldn't setup read URBs [ 356.754957][ T3905] mcba_usb 3-1:0.0 can0: couldn't start device: -90 [ 356.802961][ T5852] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100 [ 356.805549][ T7947] loop2: detected capacity change from 0 to 40427 [ 356.813670][ T5852] viperboard-i2c: probe of viperboard-i2c.2.auto failed with error -5 [ 356.847628][ T5852] usb 2-1: USB disconnect, device number 15 [ 356.856490][ T7951] loop4: detected capacity change from 0 to 64 [ 356.890932][ T7947] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 356.907706][ T7947] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 357.057312][ T3905] mcba_usb: probe of 3-1:0.0 failed with error -90 [ 357.095619][ T7947] F2FS-fs (loop2): Found nat_bits in checkpoint [ 357.163198][ T3905] usb 3-1: USB disconnect, device number 17 [ 357.172207][ T7904] chnl_net:caif_netlink_parms(): no params data found [ 357.213920][ T7956] device pim6reg1 entered promiscuous mode [ 357.314692][ T7947] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 357.392238][ T7947] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 357.436848][ T7967] capability: warning: `syz.1.918' uses 32-bit capabilities (legacy support in use) [ 357.468744][ T7965] loop4: detected capacity change from 0 to 1024 [ 357.584639][ T7904] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.592298][ T7904] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.616891][ T7904] device bridge_slave_0 entered promiscuous mode [ 357.637761][ T7965] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 357.649439][ T7904] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.704960][ T7965] ext4 filesystem being mounted at /20/file1 supports timestamps until 2038 (0x7fffffff) [ 357.717332][ T7904] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.768784][ T7904] device bridge_slave_1 entered promiscuous mode [ 357.945296][ T7904] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 358.053158][ T3650] Bluetooth: hci3: command tx timeout [ 358.247683][ T7904] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 358.513749][ T7904] team0: Port device team_slave_0 added [ 358.579539][ T7904] team0: Port device team_slave_1 added [ 358.589362][ T7387] EXT4-fs (loop4): unmounting filesystem. [ 358.693056][ T7978] loop1: detected capacity change from 0 to 64 [ 358.769883][ T7904] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 358.850309][ T7904] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 358.889291][ T7904] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 359.028729][ T7904] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 359.038286][ T7904] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 359.143021][ T7904] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 359.279619][ T7987] loop4: detected capacity change from 0 to 512 [ 359.293413][ T7904] device hsr_slave_0 entered promiscuous mode [ 359.320118][ T7904] device hsr_slave_1 entered promiscuous mode [ 359.354469][ T7987] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 359.409067][ T7991] loop2: detected capacity change from 0 to 512 [ 359.426170][ T7989] loop0: detected capacity change from 0 to 512 [ 359.436349][ T7989] EXT4-fs: Ignoring removed nobh option [ 359.457282][ T7989] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 359.458688][ T7987] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended [ 359.485788][ T7989] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 359.535387][ T7991] EXT4-fs (loop2): 1 orphan inode deleted [ 359.548232][ T7987] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 359.571687][ T7991] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 359.602934][ T7987] System zones: 0-2, 18-18, 34-34 [ 359.650686][ T7987] EXT4-fs error (device loop4): ext4_orphan_get:1422: comm syz.4.925: bad orphan inode 15 [ 359.696206][ T7991] EXT4-fs error (device loop2): ext4_add_entry:2484: inode #2: comm syz.2.927: Directory hole found for htree leaf block 0 [ 359.720367][ T7987] ext4_test_bit(bit=14, block=18) = 1 [ 359.733600][ T7987] is_bad_inode(inode)=0 [ 359.737792][ T7987] NEXT_ORPHAN(inode)=2264924160 [ 359.778154][ T6327] EXT4-fs (loop0): unmounting filesystem. [ 359.799392][ T7987] max_ino=32 [ 359.820785][ T7663] EXT4-fs (loop2): unmounting filesystem. [ 359.843002][ T7987] i_nlink=0 [ 359.846212][ T7987] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1085: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 359.952888][ T7987] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.925: bg 0: block 80: padding at end of block bitmap is not set [ 360.002878][ T7987] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6173: Corrupt filesystem [ 360.032563][ T7987] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 360.163094][ T3650] Bluetooth: hci3: command tx timeout [ 360.205102][ T7904] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.553002][ T8001] tipc: Started in network mode [ 360.557964][ T8001] tipc: Node identity 2, cluster identity 4711 [ 360.594866][ T8001] tipc: Node number set to 2 [ 360.632483][ T8001] tipc: Cannot configure node identity twice [ 360.801526][ T7904] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.825008][ T7387] EXT4-fs (loop4): unmounting filesystem. [ 360.894952][ T8009] loop0: detected capacity change from 0 to 64 [ 361.130123][ T7904] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.310355][ T7904] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.452918][ T3905] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 361.488840][ T7983] loop1: detected capacity change from 0 to 65536 [ 361.532529][ T7904] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 361.541369][ T7983] XFS (loop1): Mounting V5 Filesystem [ 361.552899][ T3680] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 361.565090][ T7904] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 361.616192][ T7904] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 361.651626][ T7904] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 361.678605][ T7983] XFS (loop1): Ending clean mount [ 361.812971][ T3680] usb 5-1: Using ep0 maxpacket: 32 [ 361.823132][ T3905] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 361.838674][ T3905] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 361.872365][ T7904] 8021q: adding VLAN 0 to HW filter on device bond0 [ 361.887441][ T6811] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 361.893443][ T3905] usb 1-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00 [ 361.896374][ T6811] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 361.916032][ T7904] 8021q: adding VLAN 0 to HW filter on device team0 [ 361.932386][ T6811] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 361.938814][ T3905] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.942066][ T6811] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 361.975290][ T3905] usb 1-1: config 0 descriptor?? [ 361.982552][ T6811] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.989709][ T6811] bridge0: port 1(bridge_slave_0) entered forwarding state [ 362.009575][ T6949] XFS (loop1): Unmounting Filesystem [ 362.038438][ T7125] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 362.051047][ T7125] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 362.068098][ T7125] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 362.076844][ T7125] bridge0: port 2(bridge_slave_1) entered blocking state [ 362.083992][ T7125] bridge0: port 2(bridge_slave_1) entered forwarding state [ 362.113757][ T7125] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 362.122850][ T7125] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 362.175552][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 362.203689][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 362.212737][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 362.221889][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 362.231111][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 362.239902][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 362.250523][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 362.259142][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 362.270690][ T7904] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 362.298156][ T7125] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 362.302976][ T3680] usb 5-1: New USB device found, idVendor=0ac8, idProduct=3410, bcdDevice=74.65 [ 362.331659][ T3680] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.352485][ T3680] usb 5-1: Product: ﭤ꺋꼈֦늎⚻낛찳ᣧ [ 362.367526][ T3680] usb 5-1: SerialNumber: syz [ 362.393541][ T3680] usb 5-1: config 0 descriptor?? [ 362.465093][ T3905] pantherlord 0003:0F30:0111.000A: item fetching failed at offset 6/7 [ 362.493530][ T3905] pantherlord 0003:0F30:0111.000A: parse failed [ 362.507066][ T3905] pantherlord: probe of 0003:0F30:0111.000A failed with error -22 [ 362.557240][ T8032] loop2: detected capacity change from 0 to 2048 [ 362.618226][ T8032] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 362.652542][ T8015] loop4: detected capacity change from 0 to 512 [ 362.678633][ T3905] usb 1-1: USB disconnect, device number 19 [ 362.904900][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 362.932975][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 363.001633][ T8015] EXT4-fs (loop4): Test dummy encryption mode enabled [ 363.015388][ T7904] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 363.055203][ T8015] EXT4-fs error (device loop4): __ext4_iget:5044: inode #11: block 1: comm syz.4.933: invalid block [ 363.065778][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 363.073383][ T8015] EXT4-fs error (device loop4): ext4_orphan_get:1401: comm syz.4.933: couldn't read orphan inode 11 (err -117) [ 363.087084][ T8015] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 363.087622][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 363.473852][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 363.482293][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 363.520797][ T8015] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 363.539328][ T8015] EXT4-fs error (device loop4): ext4_add_entry:2484: inode #2: comm syz.4.933: Directory hole found for htree leaf block 0 [ 363.559749][ T7904] device veth0_vlan entered promiscuous mode [ 363.573488][ T8046] EXT4-fs error (device loop4): ext4_add_entry:2484: inode #2: comm syz.4.933: Directory hole found for htree leaf block 0 [ 363.596501][ T7125] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 363.605913][ T7125] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 363.662471][ T7904] device veth1_vlan entered promiscuous mode [ 363.828154][ T7904] device veth0_macvtap entered promiscuous mode [ 363.868785][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 363.883629][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 363.910588][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 363.939974][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 364.043366][ T7125] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 364.067481][ T7904] device veth1_macvtap entered promiscuous mode [ 364.359940][ T8058] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 364.369610][ T8058] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 364.511867][ T7904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 364.562944][ T7904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 364.597390][ T7904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 364.630402][ T7904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 364.704992][ T7904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 364.771532][ T7904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 364.784066][ T3680] usb 5-1: Found UVC 0.00 device ﭤ꺋꼈֦늎⚻낛찳ᣧ (0ac8:3410) [ 364.809278][ T3680] usb 5-1: No valid video chain found. [ 364.817206][ T7904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 364.847747][ T3680] usb 5-1: USB disconnect, device number 17 [ 364.870340][ T7904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 364.889633][ T7904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 364.900768][ T7904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 364.921241][ T7904] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 364.940954][ T7904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 364.958321][ T7904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 364.968894][ T7904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 364.987166][ T7904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.017609][ T7904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 365.047029][ T7904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.092811][ T7904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 365.109748][ T7904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.119859][ T7904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 365.167266][ T7904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.589592][ T7904] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 365.799077][ T3905] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 365.850416][ T7387] EXT4-fs (loop4): unmounting filesystem. [ 365.905311][ T3905] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 365.922000][ T3905] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 365.931482][ T3905] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 366.245441][ T7904] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.347450][ T7904] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.362107][ T7904] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.373246][ T7904] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.146957][ T4595] device hsr_slave_0 left promiscuous mode [ 368.164553][ T4595] device hsr_slave_1 left promiscuous mode [ 368.177589][ T4595] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 368.195484][ T4595] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 368.204575][ T4595] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 368.212687][ T4595] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 368.231106][ T4595] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.241630][ T4595] device bridge_slave_0 left promiscuous mode [ 368.258152][ T4595] bridge0: port 1(bridge_slave_0) entered disabled state [ 368.348884][ T4595] device veth1_macvtap left promiscuous mode [ 368.355269][ T4595] device veth0_macvtap left promiscuous mode [ 368.361394][ T4595] device veth1_vlan left promiscuous mode [ 368.474221][ T4595] device veth0_vlan left promiscuous mode [ 369.090994][ T4595] team0 (unregistering): Port device team_slave_1 removed [ 369.150401][ T4595] team0 (unregistering): Port device team_slave_0 removed [ 369.195761][ T4595] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 369.382484][ T4595] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 370.784314][ T4595] bond0 (unregistering): Released all slaves [ 370.920861][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 370.969230][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 371.014195][ T3902] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 371.034346][ T102] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 371.040437][ T8117] netlink: 60 bytes leftover after parsing attributes in process `syz.1.957'. [ 371.097380][ T102] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 371.122704][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 371.415936][ T8123] loop1: detected capacity change from 0 to 4096 [ 371.488912][ T8123] NILFS (loop1): invalid segment: Inconsistency found [ 371.506525][ T8123] NILFS (loop1): trying rollback from an earlier position [ 371.591223][ T8123] NILFS (loop1): recovery complete [ 371.643850][ T8136] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 372.022907][ T3905] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 372.247086][ T8142] loop1: detected capacity change from 0 to 8192 [ 372.311158][ T8142] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 372.385580][ T8142] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 372.393090][ T3905] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 372.412870][ T3905] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 372.432892][ T3905] usb 1-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00 [ 372.446329][ T8142] REISERFS (device loop1): using ordered data mode [ 372.452220][ T3905] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.464231][ T3905] usb 1-1: config 0 descriptor?? [ 372.483202][ T8142] reiserfs: using flush barriers [ 372.498477][ T8142] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 372.502082][ T8129] loop2: detected capacity change from 0 to 32768 [ 372.558174][ T8142] REISERFS (device loop1): checking transaction log (loop1) [ 372.585632][ T8129] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.962 (8129) [ 372.682901][ T8129] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 372.722882][ T8129] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 372.762231][ T8129] BTRFS info (device loop2): using free space tree [ 372.794257][ T8134] loop4: detected capacity change from 0 to 32768 [ 372.856868][ T8134] XFS (loop4): Mounting V5 Filesystem [ 372.889395][ T8142] REISERFS (device loop1): Using tea hash to sort names [ 372.939705][ T8134] XFS (loop4): Ending clean mount [ 372.956098][ T8142] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 372.970719][ T8142] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 372.985919][ T8134] XFS (loop4): Quotacheck needed: Please wait. [ 373.054070][ T8129] BTRFS info (device loop2): enabling ssd optimizations [ 373.064181][ T3905] pantherlord 0003:0F30:0111.000B: item fetching failed at offset 6/7 [ 373.072664][ T3905] pantherlord 0003:0F30:0111.000B: parse failed [ 373.112866][ T3905] pantherlord: probe of 0003:0F30:0111.000B failed with error -22 [ 373.174960][ T3905] usb 1-1: USB disconnect, device number 20 [ 373.215463][ T8134] XFS (loop4): Quotacheck: Done. [ 373.354243][ T7387] XFS (loop4): Unmounting Filesystem [ 373.631966][ T7663] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 373.815147][ T8189] loop3: detected capacity change from 0 to 64 [ 373.988114][ T3909] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 374.252905][ T3909] usb 2-1: Using ep0 maxpacket: 32 [ 374.487673][ T8203] loop3: detected capacity change from 0 to 4096 [ 374.595686][ T8206] loop2: detected capacity change from 0 to 2048 [ 374.613157][ T3909] usb 2-1: New USB device found, idVendor=1019, idProduct=0c55, bcdDevice= 0.cf [ 374.622265][ T3909] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.657923][ T3909] usb 2-1: Product: syz [ 374.672422][ T3909] usb 2-1: Manufacturer: syz [ 374.690833][ T3909] usb 2-1: SerialNumber: syz [ 374.702895][ T7514] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 374.719956][ T3909] usb 2-1: config 0 descriptor?? [ 374.783856][ T3909] usb-storage 2-1:0.0: USB Mass Storage device detected [ 374.817949][ T8191] dccp_close: ABORT with 272 bytes unread [ 375.411798][ T4045] usb 2-1: USB disconnect, device number 16 [ 375.464702][ T8217] loop3: detected capacity change from 0 to 8 [ 375.484106][ T8217] unable to read inode lookup table [ 375.591719][ T8220] loop2: detected capacity change from 0 to 256 [ 375.692956][ T3681] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 375.953652][ T3681] usb 5-1: Using ep0 maxpacket: 16 [ 376.093085][ T3681] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 376.106064][ T3681] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 376.156932][ T3681] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 376.219562][ T3681] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 376.253903][ T3681] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.293492][ T3681] usb 5-1: config 0 descriptor?? [ 376.609834][ T8220] FAT-fs (loop2): Directory bread(block 64) failed [ 376.618735][ T8220] FAT-fs (loop2): Directory bread(block 65) failed [ 376.626026][ T8220] FAT-fs (loop2): Directory bread(block 66) failed [ 376.641015][ T8220] FAT-fs (loop2): Directory bread(block 67) failed [ 376.648402][ T8220] FAT-fs (loop2): Directory bread(block 68) failed [ 376.655640][ T8220] FAT-fs (loop2): Directory bread(block 69) failed [ 376.710774][ T8220] FAT-fs (loop2): Directory bread(block 70) failed [ 376.717675][ T8220] FAT-fs (loop2): Directory bread(block 71) failed [ 376.727761][ T8220] FAT-fs (loop2): Directory bread(block 72) failed [ 376.734715][ T8220] FAT-fs (loop2): Directory bread(block 73) failed [ 376.805047][ T3681] koneplus 0003:1E7D:2E22.000C: unknown main item tag 0x0 [ 376.836990][ T3681] koneplus 0003:1E7D:2E22.000C: hidraw0: USB HID v0.00 Device [HID 1e7d:2e22] on usb-dummy_hcd.4-1/input0 [ 376.984450][ T8226] loop1: detected capacity change from 0 to 32768 [ 376.992153][ T8226] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.974 (8226) [ 377.010061][ T8226] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 377.032609][ T8226] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 377.043115][ T4045] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 377.079815][ T8226] BTRFS info (device loop1): use zlib compression, level 3 [ 377.120794][ T8226] BTRFS info (device loop1): using free space tree [ 377.292830][ T4045] usb 1-1: Using ep0 maxpacket: 32 [ 377.352366][ T3681] usb 5-1: USB disconnect, device number 18 [ 377.440830][ T8226] BTRFS info (device loop1): enabling ssd optimizations [ 377.633288][ T4045] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 377.652021][ T4045] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.665508][ T4045] usb 1-1: Product: syz [ 377.688839][ T6949] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 377.705731][ T4045] usb 1-1: Manufacturer: syz [ 377.710365][ T4045] usb 1-1: SerialNumber: syz [ 377.730079][ T8251] loop3: detected capacity change from 0 to 512 [ 377.745213][ T4045] usb 1-1: config 0 descriptor?? [ 377.753989][ T8251] EXT4-fs: Ignoring removed oldalloc option [ 377.806456][ T4045] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 377.840088][ T8251] EXT4-fs error (device loop3): ext4_xattr_inode_iget:400: comm syz.3.978: Parent and EA inode have the same ino 15 [ 378.043248][ T8251] EXT4-fs error (device loop3): ext4_xattr_inode_iget:400: comm syz.3.978: Parent and EA inode have the same ino 15 [ 378.083469][ T8251] EXT4-fs (loop3): 1 orphan inode deleted [ 378.103037][ T8251] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 378.520980][ T1260] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.545329][ T4045] gspca_stk1135: reg_w 0x3 err -71 [ 378.584670][ T4045] gspca_stk1135: serial bus timeout: status=0x00 [ 378.790514][ T8274] loop1: detected capacity change from 0 to 64 [ 378.895726][ T4045] gspca_stk1135: Sensor write failed [ 378.932986][ T4045] gspca_stk1135: serial bus timeout: status=0x00 [ 378.965586][ T4045] gspca_stk1135: Sensor write failed [ 378.971307][ T4045] gspca_stk1135: serial bus timeout: status=0x00 [ 378.992530][ T4045] gspca_stk1135: Sensor read failed [ 379.020153][ T4045] gspca_stk1135: serial bus timeout: status=0x00 [ 379.031326][ T4045] gspca_stk1135: Sensor read failed [ 379.042817][ T4045] gspca_stk1135: Detected sensor type unknown (0x0) [ 379.049463][ T4045] gspca_stk1135: serial bus timeout: status=0x00 [ 379.076270][ T4045] gspca_stk1135: Sensor read failed [ 379.110592][ T8276] loop4: detected capacity change from 0 to 4096 [ 379.148292][ T4045] gspca_stk1135: serial bus timeout: status=0x00 [ 379.209371][ T4045] gspca_stk1135: Sensor read failed [ 379.229693][ T4045] gspca_stk1135: serial bus timeout: status=0x00 [ 379.243063][ T4045] gspca_stk1135: Sensor write failed [ 379.248404][ T4045] gspca_stk1135: serial bus timeout: status=0x00 [ 379.270591][ T4045] gspca_stk1135: Sensor write failed [ 379.289574][ T4045] stk1135: probe of 1-1:0.0 failed with error -71 [ 379.291617][ T8265] loop2: detected capacity change from 0 to 4098 [ 379.343131][ T4045] usb 1-1: USB disconnect, device number 21 [ 379.410263][ T7904] EXT4-fs (loop3): unmounting filesystem. [ 379.421377][ T8265] ntfs3: Invalid value for fmask. [ 380.452676][ T8286] loop1: detected capacity change from 0 to 164 [ 380.634063][ T8286] isofs_fill_super: bread failed, dev=loop1, iso_blknum=41, block=82 [ 380.807037][ T8286] loop1: detected capacity change from 0 to 1024 [ 381.107077][ T8286] hfsplus: xattr searching failed [ 381.232409][ T8291] hfsplus: xattr searching failed [ 381.276052][ T8286] hfsplus: xattr searching failed [ 381.511549][ T8278] loop0: detected capacity change from 0 to 32768 [ 381.543788][ T8278] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 381.579138][ T8278] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 381.644322][ T8278] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 381.697808][ T3909] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 381.716362][ T3909] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 381.819868][ T3909] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 103ms [ 381.834095][ T3902] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 381.845013][ T3909] gfs2: fsid=syz:syz.0: jid=0: Done [ 381.853286][ T8278] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 381.979609][ T3746] hfsplus: b-tree write err: -5, ino 3 [ 382.044998][ T6949] hfsplus: node 4:3 still has 1 user(s)! [ 382.084231][ T3902] usb 4-1: Using ep0 maxpacket: 8 [ 382.213245][ T3902] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 382.243222][ T3902] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 382.268572][ T3902] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 382.295431][ T3902] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 382.332925][ T3902] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 382.378111][ T3902] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 382.414769][ T3902] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.433069][ T3680] kernel write not supported for file /uinput (pid: 3680 comm: kworker/0:6) [ 382.446264][ T3902] usb 4-1: config 0 descriptor?? [ 382.491132][ T8293] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 382.656218][ C0] eth0: bad gso: type: 1, size: 1408 [ 382.768625][ T3902] usb 4-1: USB disconnect, device number 11 [ 382.782445][ T8307] loop4: detected capacity change from 0 to 64 [ 382.788841][ T3646] Bluetooth: hci5: Opcode 0x0c03 failed: -19 [ 384.166356][ T8300] loop2: detected capacity change from 0 to 32768 [ 385.073003][ T8300] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.989 (8300) [ 385.161486][ T8330] loop4: detected capacity change from 0 to 512 [ 385.217274][ T8330] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 385.261622][ T8336] loop3: detected capacity change from 0 to 128 [ 385.317882][ T8300] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 385.350207][ T8330] EXT4-fs error (device loop4): __ext4_fill_super:5399: inode #2: comm syz.4.999: iget: special inode unallocated [ 385.350658][ T8330] EXT4-fs (loop4): get root inode failed [ 385.373792][ T8336] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 385.375922][ T8330] EXT4-fs (loop4): mount failed [ 385.393732][ T8336] ext4 filesystem being mounted at /9/file0 supports timestamps until 2038 (0x7fffffff) [ 385.412220][ T26] kauditd_printk_skb: 15 callbacks suppressed [ 385.412234][ T26] audit: type=1800 audit(1723109521.701:366): pid=8329 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.998" name="bus" dev="loop3" ino=12 res=0 errno=0 [ 385.492934][ T8300] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 385.512160][ T8300] BTRFS info (device loop2): use zlib compression, level 3 [ 385.633193][ T8300] BTRFS info (device loop2): using free space tree [ 385.805656][ T8364] loop4: detected capacity change from 0 to 128 [ 385.869343][ T8364] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 385.898377][ T8364] ext4 filesystem being mounted at /37/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 385.942732][ T7904] EXT4-fs (loop3): unmounting filesystem. [ 385.943103][ T8300] BTRFS error (device loop2): open_ctree failed [ 386.006624][ T8342] netlink: 'syz.1.1000': attribute type 6 has an invalid length. [ 386.283481][ T7387] EXT4-fs (loop4): unmounting filesystem. [ 386.513314][ T3902] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 386.893183][ T8373] loop3: detected capacity change from 0 to 256 [ 386.978161][ T8373] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1001'. [ 387.082922][ T3902] usb 4-1: unable to read config index 0 descriptor/all [ 387.090277][ T3902] usb 4-1: can't read configurations, error -71 [ 387.241351][ T8403] device wlan1 entered promiscuous mode [ 387.358617][ T8377] loop1: detected capacity change from 0 to 40427 [ 387.388859][ T8377] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 387.405763][ T8377] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 387.422999][ T3680] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 387.460072][ T8377] F2FS-fs (loop1): Found nat_bits in checkpoint [ 387.591721][ T8377] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 387.620713][ T8377] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 387.783190][ T3680] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 387.810367][ T3680] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 387.933238][ T3680] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 387.942326][ T3680] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 388.012871][ T3680] usb 1-1: SerialNumber: syz [ 388.103896][ T8408] loop2: detected capacity change from 0 to 32768 [ 388.143112][ T8408] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.1013 (8408) [ 388.177902][ T8408] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 388.213774][ T8431] tmpfs: Bad value for 'huge' [ 388.238767][ T8408] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 388.247926][ T8408] BTRFS info (device loop2): use zlib compression, level 3 [ 388.260892][ T8408] BTRFS info (device loop2): using free space tree [ 388.295184][ T3680] usb 1-1: 0:2 : does not exist [ 388.310844][ T3680] usb 1-1: USB disconnect, device number 22 [ 388.375936][ T8408] BTRFS info (device loop2): enabling ssd optimizations [ 388.422527][ T7663] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 388.513091][ T5852] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 388.884990][ T5852] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 388.911896][ T5852] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 388.950289][ T5852] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 388.982350][ T5852] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.033342][ T8431] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 389.229326][ T8496] loop3: detected capacity change from 0 to 64 [ 389.854308][ T5852] usb 2-1: USB disconnect, device number 17 [ 390.062857][ T3679] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 390.257005][ T8505] loop4: detected capacity change from 0 to 32768 [ 390.279004][ T8505] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.1030 (8505) [ 390.320806][ T8505] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 390.342012][ T8505] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 390.372121][ T8505] BTRFS info (device loop4): use zlib compression, level 3 [ 390.396639][ T8505] BTRFS info (device loop4): using free space tree [ 390.593182][ T3679] usb 4-1: New USB device found, idVendor=99fa, idProduct=8988, bcdDevice=98.53 [ 390.627246][ T3679] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.635750][ T3679] usb 4-1: Product: syz [ 390.639940][ T3679] usb 4-1: Manufacturer: syz [ 390.664973][ T8505] BTRFS info (device loop4): enabling ssd optimizations [ 390.733768][ T3679] usb 4-1: SerialNumber: syz [ 390.757054][ T3679] usb 4-1: config 0 descriptor?? [ 390.811158][ T7387] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 390.833910][ T3679] gspca_main: spca506-2.14.0 probing 99fa:8988 [ 392.337139][ T8562] loop1: detected capacity change from 0 to 64 [ 392.522939][ T3903] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 392.913306][ T3903] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 392.930019][ T3903] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.955979][ T3903] usb 1-1: config 0 descriptor?? [ 393.070848][ T8583] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1044'. [ 393.113566][ T8583] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1044'. [ 393.348019][ T8586] loop3: detected capacity change from 0 to 2048 [ 393.400679][ T8586] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 393.517617][ T8590] loop1: detected capacity change from 0 to 512 [ 393.531192][ T8590] EXT4-fs (loop1): VFS: Can't find ext4 filesystem [ 394.927468][ T8611] ubi0: attaching mtd0 [ 394.931872][ T8611] ubi0 error: ubi_attach_mtd_dev: bad VID header (7) or data offsets (71) [ 395.029922][ T8613] loop4: detected capacity change from 0 to 64 [ 395.113733][ T3650] Bluetooth: hci5: sending frame failed (-49) [ 395.124123][ T3646] Bluetooth: hci5: Opcode 0x1003 failed: -49 [ 395.353314][ T3903] usb 1-1: Cannot set autoneg [ 395.358827][ T3903] MOSCHIP usb-ethernet driver: probe of 1-1:0.0 failed with error -71 [ 395.369745][ T3903] usb 1-1: USB disconnect, device number 23 [ 395.376780][ T8619] trusted_key: encrypted_key: hex blob is missing [ 396.258451][ T8634] loop1: detected capacity change from 0 to 512 [ 396.279438][ T8634] EXT4-fs: Ignoring removed oldalloc option [ 396.370870][ T8638] loop4: detected capacity change from 0 to 64 [ 396.408210][ T8634] EXT4-fs error (device loop1): ext4_xattr_inode_iget:400: comm syz.1.1063: Parent and EA inode have the same ino 15 [ 396.440219][ T8634] EXT4-fs error (device loop1): ext4_xattr_inode_iget:400: comm syz.1.1063: Parent and EA inode have the same ino 15 [ 396.479154][ T8634] EXT4-fs (loop1): 1 orphan inode deleted [ 396.499167][ T8634] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 397.828438][ T8630] loop2: detected capacity change from 0 to 262144 [ 397.839729][ T3731] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 397.856788][ T8630] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop2 scanned by syz.2.1061 (8630) [ 398.169785][ T6949] EXT4-fs (loop1): unmounting filesystem. [ 398.224265][ T8630] BTRFS info (device loop2): first mount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 398.234775][ T8630] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 398.244079][ T8630] BTRFS info (device loop2): enabling ssd optimizations [ 398.251271][ T8630] BTRFS info (device loop2): enabling auto defrag [ 398.257911][ T8630] BTRFS info (device loop2): using free space tree [ 398.439280][ T8671] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1072'. [ 398.518704][ T46] BTRFS warning (device loop2): checksum verify failed on logical 22036480 mirror 1 wanted 0x23e101be1e001a29 found 0x98e2f59226e63d74 level 0 [ 398.540213][ T8630] repair_io_failure: 2 callbacks suppressed [ 398.540233][ T8630] BTRFS info (device loop2): read error corrected: ino 0 off 22036480 (dev /dev/loop2 sector 43040) [ 398.558146][ T8630] BTRFS info (device loop2): read error corrected: ino 0 off 22040576 (dev /dev/loop2 sector 43048) [ 398.569259][ T8630] BTRFS info (device loop2): read error corrected: ino 0 off 22044672 (dev /dev/loop2 sector 43056) [ 398.580366][ T8630] BTRFS info (device loop2): read error corrected: ino 0 off 22048768 (dev /dev/loop2 sector 43064) [ 398.583040][ T3731] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 398.624936][ T35] BTRFS warning (device loop2): checksum verify failed on logical 30670848 mirror 1 wanted 0xe9f08ec94c425425 found 0x1a4a9216e61c07c8 level 0 [ 398.697918][ T8630] BTRFS info (device loop2): read error corrected: ino 0 off 30670848 (dev /dev/loop2 sector 76288) [ 398.709169][ T8630] BTRFS info (device loop2): read error corrected: ino 0 off 30674944 (dev /dev/loop2 sector 76296) [ 398.720262][ T8630] BTRFS info (device loop2): read error corrected: ino 0 off 30679040 (dev /dev/loop2 sector 76304) [ 398.731333][ T8630] BTRFS info (device loop2): read error corrected: ino 0 off 30683136 (dev /dev/loop2 sector 76312) [ 398.775137][ T46] BTRFS warning (device loop2): checksum verify failed on logical 30457856 mirror 1 wanted 0x402e75f1de9ccfe6 found 0x64dad595b87aeca8 level 0 [ 398.793104][ T3731] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 398.822574][ T8630] BTRFS info (device loop2): read error corrected: ino 0 off 30457856 (dev /dev/loop2 sector 75872) [ 398.841570][ T8677] device bridge_slave_1 left promiscuous mode [ 398.852872][ T8630] BTRFS info (device loop2): read error corrected: ino 0 off 30461952 (dev /dev/loop2 sector 75880) [ 398.871598][ T3679] usb 4-1: USB disconnect, device number 14 [ 399.059182][ T8677] bridge0: port 2(bridge_slave_1) entered disabled state [ 399.072942][ T3731] usb 1-1: string descriptor 0 read error: -71 [ 399.080869][ T8677] bridge1: port 1(bridge_slave_1) entered blocking state [ 399.441881][ T3731] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 399.481160][ T8677] bridge1: port 1(bridge_slave_1) entered disabled state [ 399.523585][ T8677] device bridge_slave_1 entered promiscuous mode [ 399.540733][ T8677] bridge1: port 1(bridge_slave_1) entered blocking state [ 399.542806][ T3731] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 399.547976][ T8677] bridge1: port 1(bridge_slave_1) entered forwarding state [ 399.579618][ T8689] loop0: detected capacity change from 0 to 64 [ 399.626915][ T8679] bridge1: port 2(veth1_to_bond) entered blocking state [ 399.649417][ T8679] bridge1: port 2(veth1_to_bond) entered disabled state [ 399.674413][ T8679] device veth1_to_bond entered promiscuous mode [ 399.696222][ T8679] bridge1: port 2(veth1_to_bond) entered blocking state [ 399.703248][ T8679] bridge1: port 2(veth1_to_bond) entered forwarding state [ 399.721045][ T3731] usb 1-1: can't set config #1, error -71 [ 399.825444][ T7663] BTRFS info (device loop2): last unmount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 399.850158][ T3731] usb 1-1: USB disconnect, device number 24 [ 400.281610][ T8703] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1081'. [ 400.476364][ T8703] device veth0_macvtap left promiscuous mode [ 401.074352][ T27] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 401.290612][ T8719] loop0: detected capacity change from 0 to 40427 [ 401.304919][ T8719] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 401.320832][ T8737] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1095'. [ 401.332873][ T8719] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 401.373236][ T8719] F2FS-fs (loop0): Found nat_bits in checkpoint [ 401.447444][ T8719] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 401.456443][ T8719] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 401.464422][ T27] usb 2-1: config index 0 descriptor too short (expected 45, got 36) [ 401.473486][ T27] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 401.484832][ T27] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 401.496147][ T27] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 401.522984][ T27] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 401.537510][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.554516][ T27] usb 2-1: config 0 descriptor?? [ 401.593301][ T8725] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 402.044731][ T27] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 402.052666][ T27] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 402.066914][ T27] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 402.076105][ T27] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 402.088042][ T27] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 402.096777][ T27] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 402.108620][ T27] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 402.117462][ T27] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 402.129402][ T27] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 402.138288][ T27] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 402.150077][ T6811] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 402.159285][ T27] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 402.171327][ T27] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 402.180040][ T27] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 402.196532][ T27] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 402.205374][ T27] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 402.217825][ T27] plantronics 0003:047F:FFFF.000D: No inputs registered, leaving [ 402.240372][ T27] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 402.338541][ T3685] usb 2-1: USB disconnect, device number 18 [ 402.372127][ T8774] loop3: detected capacity change from 0 to 40427 [ 402.388379][ T8774] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 402.396322][ T8774] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 402.415390][ T27] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 402.425603][ T8774] F2FS-fs (loop3): Found nat_bits in checkpoint [ 402.467284][ T8774] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 402.474473][ T8774] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 402.738977][ T6811] usb 1-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice= 9.75 [ 402.758824][ T6811] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.771111][ T6811] usb 1-1: Product: syz [ 402.775879][ T6811] usb 1-1: Manufacturer: syz [ 402.784568][ T6811] usb 1-1: SerialNumber: syz [ 402.795055][ T6811] usb 1-1: config 0 descriptor?? [ 402.843170][ T27] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 402.862432][ T27] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 402.963084][ T27] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 402.975219][ C0] eth0: bad gso: type: 1, size: 1408 [ 402.981008][ C0] eth0: bad gso: type: 1, size: 1408 [ 402.981310][ T27] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 403.009548][ T27] usb 3-1: Manufacturer: syz [ 403.014380][ T6811] viperboard 1-1:0.0: version 0.00 found at bus 001 address 025 [ 403.026369][ T27] usb 3-1: config 0 descriptor?? [ 403.063017][ T6811] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100 [ 403.073077][ T6811] viperboard-i2c: probe of viperboard-i2c.2.auto failed with error -5 [ 403.105218][ T6811] usb 1-1: USB disconnect, device number 25 [ 403.253165][ T27] rc_core: IR keymap rc-hauppauge not found [ 403.259723][ T27] Registered IR keymap rc-empty [ 403.278672][ T27] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 403.300119][ T27] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input16 [ 403.349544][ T27] usb 3-1: USB disconnect, device number 18 [ 403.648077][ T26] audit: type=1326 audit(1723109539.941:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8811 comm="syz.0.1124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd804d779f9 code=0x7ffc0000 [ 403.671862][ C0] vkms_vblank_simulate: vblank timer overrun [ 403.683186][ T6811] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 403.703309][ T26] audit: type=1326 audit(1723109539.971:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8811 comm="syz.0.1124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd804d779f9 code=0x7ffc0000 [ 403.725559][ C0] vkms_vblank_simulate: vblank timer overrun [ 403.768013][ T26] audit: type=1326 audit(1723109539.971:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8811 comm="syz.0.1124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7fd804d779f9 code=0x7ffc0000 [ 403.779909][ T8804] loop4: detected capacity change from 0 to 40427 [ 403.790172][ C0] vkms_vblank_simulate: vblank timer overrun [ 403.805664][ T8804] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 403.815949][ T8804] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 403.836099][ T8804] F2FS-fs (loop4): Found nat_bits in checkpoint [ 403.905607][ T8804] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 403.916670][ T8804] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 404.013806][ T8820] netlink: 'syz.2.1126': attribute type 10 has an invalid length. [ 404.038359][ T8820] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1126'. [ 404.063291][ T8820] device team0 entered promiscuous mode [ 404.073546][ T8820] device team_slave_0 entered promiscuous mode [ 404.089183][ T8820] device team_slave_1 entered promiscuous mode [ 404.095910][ T6811] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 404.110289][ T8820] bridge0: port 3(team0) entered blocking state [ 404.117504][ T6811] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 404.126861][ T8820] bridge0: port 3(team0) entered disabled state [ 404.133766][ T6811] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.143671][ T6811] usb 2-1: config 0 descriptor?? [ 404.153319][ T8820] bridge0: port 3(team0) entered blocking state [ 404.159726][ T8820] bridge0: port 3(team0) entered forwarding state [ 404.488934][ T8822] overlayfs: missing 'lowerdir' [ 405.498170][ T8842] loop2: detected capacity change from 0 to 2048 [ 405.554222][ T8842] EXT4-fs error (device loop2): __ext4_fill_super:5399: inode #2: comm syz.2.1134: casefold flag without casefold feature [ 405.588488][ T8842] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 405.613678][ T8842] EXT4-fs (loop2): Errors on filesystem, clearing orphan list. [ 405.621319][ T8842] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 406.261222][ T7663] EXT4-fs (loop2): unmounting filesystem. [ 406.887444][ T8866] loop2: detected capacity change from 0 to 2048 [ 406.915001][ T8866] UDF-fs: bad mount option "umask½00000000000000000000073" or missing value [ 407.309074][ T8868] sg_write: data in/out 196608/1 bytes for SCSI command 0xf2-- guessing data in; [ 407.309074][ T8868] program syz.2.1142 not setting count and/or reply_len properly [ 408.061772][ T8872] loop3: detected capacity change from 0 to 1024 [ 408.087818][ T8870] loop2: detected capacity change from 0 to 4096 [ 408.093467][ T8872] EXT4-fs: Ignoring removed bh option [ 408.099576][ T8872] ext4: Unknown parameter 'appraise_type' [ 408.132361][ T8857] loop0: detected capacity change from 0 to 40427 [ 408.140124][ T8870] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 408.140141][ T8857] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 408.170098][ T8857] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 408.207352][ T8857] F2FS-fs (loop0): Found nat_bits in checkpoint [ 408.248689][ T8857] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 408.256064][ T8857] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 408.261477][ T8877] loop4: detected capacity change from 0 to 128 [ 408.289194][ T8877] FAT-fs (loop4): Unrecognized mount option "./file1" or missing value [ 408.855189][ T8899] loop0: detected capacity change from 0 to 512 [ 408.884447][ T8899] EXT4-fs: Ignoring removed mblk_io_submit option [ 408.907805][ T8899] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 408.967835][ T8899] EXT4-fs (loop0): 1 truncate cleaned up [ 408.981156][ T8899] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 408.992896][ T3731] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 409.000701][ T27] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 409.137592][ T6327] EXT4-fs (loop0): unmounting filesystem. [ 409.251238][ T8903] loop0: detected capacity change from 0 to 2048 [ 409.265630][ T27] usb 5-1: Using ep0 maxpacket: 16 [ 409.302117][ T8903] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 409.552191][ T3731] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 409.560819][ T27] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 409.573929][ T3731] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 409.583988][ T27] usb 5-1: New USB device found, idVendor=17ef, idProduct=6085, bcdDevice= 0.00 [ 409.593622][ T27] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.610626][ T27] usb 5-1: config 0 descriptor?? [ 409.749358][ T3731] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 409.813950][ T6811] usbhid 2-1:0.0: can't add hid device: -32 [ 409.833302][ T6811] usbhid: probe of 2-1:0.0 failed with error -32 [ 409.866218][ T3731] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 409.886124][ T27] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 410.044300][ T3731] usb 3-1: Manufacturer: syz [ 410.240751][ T3731] usb 3-1: config 0 descriptor?? [ 410.245086][ T6327] EXT4-fs (loop0): unmounting filesystem. [ 410.846674][ T26] audit: type=1326 audit(1723109546.931:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8909 comm="syz.3.1156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43c67779f9 code=0x7ffc0000 [ 411.262855][ T3731] rc_core: IR keymap rc-hauppauge not found [ 411.268791][ T3731] Registered IR keymap rc-empty [ 411.286184][ T26] audit: type=1326 audit(1723109546.931:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8909 comm="syz.3.1156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43c67779f9 code=0x7ffc0000 [ 411.315928][ T3731] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 411.332728][ T26] audit: type=1326 audit(1723109546.931:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8909 comm="syz.3.1156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f43c67779f9 code=0x7ffc0000 [ 411.355090][ T3731] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input17 [ 411.374446][ T26] audit: type=1326 audit(1723109546.991:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8909 comm="syz.3.1156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43c67779f9 code=0x7ffc0000 [ 411.406476][ T26] audit: type=1326 audit(1723109546.991:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8909 comm="syz.3.1156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43c67779f9 code=0x7ffc0000 [ 411.429882][ T26] audit: type=1326 audit(1723109547.111:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8916 comm="syz.3.1156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f43c67a99e5 code=0x7ffc0000 [ 411.438261][ T3683] usb 2-1: USB disconnect, device number 19 [ 411.453177][ T26] audit: type=1326 audit(1723109547.141:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8909 comm="syz.3.1156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7f43c67779f9 code=0x7ffc0000 [ 411.466940][ T3731] usb 3-1: USB disconnect, device number 19 [ 411.482538][ T26] audit: type=1326 audit(1723109547.261:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8916 comm="syz.3.1156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f43c67779f9 code=0x7ffc0000 [ 411.527703][ T26] audit: type=1326 audit(1723109547.391:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8909 comm="syz.3.1156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43c67779f9 code=0x7ffc0000 [ 411.624167][ T26] audit: type=1326 audit(1723109547.401:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8909 comm="syz.3.1156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43c67779f9 code=0x7ffc0000 [ 411.786643][ T8925] loop3: detected capacity change from 0 to 4096 [ 411.805100][ T8925] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 411.936439][ T8931] loop2: detected capacity change from 0 to 64 [ 412.138383][ T8936] syz.3.1165[8936] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 412.138480][ T8936] syz.3.1165[8936] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 412.192105][ T3731] usb 5-1: USB disconnect, device number 19 [ 412.375452][ T8923] loop1: detected capacity change from 0 to 40427 [ 412.398506][ T8923] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 412.419766][ T8923] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 412.487314][ T8923] F2FS-fs (loop1): Found nat_bits in checkpoint [ 413.136814][ T8923] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 413.156362][ T8923] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 413.256045][ T8948] ax25_connect(): syz.3.1168 uses autobind, please contact jreuter@yaina.de [ 413.320506][ T8950] binder: 8949:8950 ioctl c0306201 20000300 returned -14 [ 413.495228][ T8952] loop3: detected capacity change from 0 to 2048 [ 413.525303][ T8952] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 413.565392][ T8952] overlayfs: failed to resolve './file2': -5 [ 413.727878][ T8959] loop0: detected capacity change from 0 to 4096 [ 413.772973][ T8963] loop1: detected capacity change from 0 to 1024 [ 413.774520][ T8959] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 413.830427][ T8963] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 413.851813][ T8966] loop2: detected capacity change from 0 to 2048 [ 413.867589][ T8963] EXT4-fs error (device loop1): ext4_xattr_ibody_list:748: inode #2: comm syz.1.1170: corrupted in-inode xattr [ 413.887933][ T8963] EXT4-fs (loop1): Remounting filesystem read-only [ 413.897879][ T8966] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 413.924787][ T6949] EXT4-fs (loop1): unmounting filesystem. [ 413.989684][ T8966] UDF-fs: error (device loop2): udf_read_inode: (ino 1317) failed !bh [ 414.029656][ T8970] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 414.215025][ T8981] loop0: detected capacity change from 0 to 1024 [ 414.215025][ T8983] loop2: detected capacity change from 0 to 64 [ 415.367747][ T8980] loop1: detected capacity change from 0 to 40427 [ 415.392411][ T8980] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 415.401638][ T8980] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 415.407253][ T8997] loop3: detected capacity change from 0 to 128 [ 415.462151][ T8980] F2FS-fs (loop1): Found nat_bits in checkpoint [ 415.482866][ T3731] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 415.504039][ T3679] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 415.556199][ T8980] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 415.564326][ T8980] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 415.588314][ T9002] loop3: detected capacity change from 0 to 4096 [ 415.609560][ T9002] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 415.632542][ C0] eth0: bad gso: type: 1, size: 1408 [ 415.733887][ T3731] usb 5-1: Using ep0 maxpacket: 8 [ 415.753040][ T3679] usb 1-1: Using ep0 maxpacket: 32 [ 415.873050][ T3679] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 415.922251][ T3679] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 415.980985][ T3679] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.992937][ T3731] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 415.999721][ T3679] usb 1-1: config 0 descriptor?? [ 416.013205][ T3731] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 416.022187][ T3731] usb 5-1: New USB device found, idVendor=056a, idProduct=0028, bcdDevice= 0.00 [ 416.073104][ T3731] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.459599][ T3679] hub 1-1:0.0: bad descriptor, ignoring hub [ 416.465606][ T3679] hub: probe of 1-1:0.0 failed with error -5 [ 416.484994][ T3679] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 416.508481][ T3731] usb 5-1: config 0 descriptor?? [ 416.650360][ T9019] loop3: detected capacity change from 0 to 8 [ 416.917361][ T9025] loop1: detected capacity change from 0 to 128 [ 418.361243][ T9029] loop0: detected capacity change from 0 to 64 [ 418.437047][ T3691] usb 1-1: USB disconnect, device number 26 [ 418.476088][ T3731] usb 5-1: USB disconnect, device number 20 [ 419.601680][ T26] audit: type=1326 audit(1723109555.891:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9042 comm="syz.3.1205" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f43c67779f9 code=0x0 [ 420.004857][ T9046] loop4: detected capacity change from 0 to 4096 [ 420.028193][ T9046] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 420.041531][ T9041] loop1: detected capacity change from 0 to 40427 [ 420.049452][ T9041] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 420.058741][ T9041] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 420.262844][ T9041] F2FS-fs (loop1): Found nat_bits in checkpoint [ 420.468719][ T9055] fuse: Bad value for 'fd' [ 420.787578][ T9041] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 420.865961][ T9041] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 421.104059][ C0] eth0: bad gso: type: 1, size: 1408 [ 421.313754][ T3679] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 421.552981][ T3679] usb 4-1: Using ep0 maxpacket: 8 [ 421.673006][ T3679] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 421.694288][ T3679] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 421.738295][ T3679] usb 4-1: New USB device found, idVendor=046a, idProduct=0027, bcdDevice= 0.00 [ 421.761880][ T3679] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.780896][ T3679] usb 4-1: config 0 descriptor?? [ 421.817446][ T9072] loop4: detected capacity change from 0 to 40427 [ 421.851482][ T9072] F2FS-fs (loop4): invalid crc value [ 421.870461][ T9072] F2FS-fs (loop4): Found nat_bits in checkpoint [ 421.981374][ T9072] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 422.059029][ T7387] syz-executor: attempt to access beyond end of device [ 422.059029][ T7387] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 422.274655][ T3679] cherry 0003:046A:0027.000E: unknown main item tag 0x0 [ 422.282677][ T3679] cherry 0003:046A:0027.000E: unknown main item tag 0xe [ 422.302918][ T3679] cherry 0003:046A:0027.000E: unknown main item tag 0x5 [ 422.310009][ T3679] cherry 0003:046A:0027.000E: unknown main item tag 0x4 [ 422.318908][ T3679] cherry 0003:046A:0027.000E: ignoring exceeding usage max [ 422.328778][ T3679] cherry 0003:046A:0027.000E: usage index exceeded [ 422.335461][ T3679] cherry 0003:046A:0027.000E: item 0 0 2 0 parsing failed [ 422.343436][ T3679] cherry: probe of 0003:046A:0027.000E failed with error -22 [ 422.483659][ T3731] usb 4-1: USB disconnect, device number 15 [ 422.734420][ T9088] loop0: detected capacity change from 0 to 32768 [ 422.743013][ T9088] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.1217 (9088) [ 422.772973][ T9088] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 422.787474][ T9088] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 422.797257][ T9088] BTRFS info (device loop0): use zlib compression, level 3 [ 422.804663][ T9088] BTRFS info (device loop0): using free space tree [ 423.025515][ T9088] BTRFS info (device loop0): enabling ssd optimizations [ 423.110459][ T9110] loop3: detected capacity change from 0 to 4096 [ 423.118189][ T9110] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 423.212898][ T6327] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 424.046211][ T9116] loop3: detected capacity change from 0 to 40427 [ 424.065170][ T9118] loop0: detected capacity change from 0 to 40427 [ 424.087598][ T9116] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 424.091624][ T9118] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 424.095415][ T9116] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 424.112223][ T9118] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 424.130050][ T9116] F2FS-fs (loop3): Found nat_bits in checkpoint [ 424.135286][ T9118] F2FS-fs (loop0): invalid crc value [ 424.190180][ T9116] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 424.191685][ T9118] F2FS-fs (loop0): Found nat_bits in checkpoint [ 424.202010][ T9116] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 424.263498][ T9118] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 424.270673][ T9118] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 425.547650][ T9148] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1228'. [ 425.768118][ T9147] loop3: detected capacity change from 0 to 4096 [ 425.805133][ T9147] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 426.007953][ T9160] loop0: detected capacity change from 0 to 1024 [ 426.008363][ T8563] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 426.028947][ T9160] EXT4-fs: Ignoring removed orlov option [ 426.054187][ T9160] EXT4-fs (loop0): Test dummy encryption mode enabled [ 426.101884][ T9160] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 426.332848][ T3684] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 426.393524][ T8563] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 426.420731][ T8563] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 426.448911][ T9160] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 426.505727][ T9160] overlayfs: failed to resolve './file0': -2 [ 426.553737][ T8563] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 426.577380][ T8563] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 426.617073][ T8563] usb 3-1: SerialNumber: syz [ 426.618771][ T9158] loop1: detected capacity change from 0 to 40427 [ 426.658712][ T9158] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 426.689072][ T9158] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 426.692094][ T6327] EXT4-fs (loop0): unmounting filesystem. [ 426.723022][ T3684] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 426.742806][ T3684] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 426.773505][ T3684] usb 4-1: New USB device found, idVendor=09da, idProduct=022b, bcdDevice= 0.00 [ 426.782828][ T3684] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.796374][ T9158] F2FS-fs (loop1): Found nat_bits in checkpoint [ 426.804332][ T3684] usb 4-1: config 0 descriptor?? [ 426.896423][ T9158] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 426.905648][ T9158] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 426.915260][ T8563] usb 3-1: 0:2 : does not exist [ 426.955343][ T8563] usb 3-1: USB disconnect, device number 20 [ 427.284544][ T3684] a4tech 0003:09DA:022B.000F: item fetching failed at offset 3/5 [ 427.292951][ T3684] a4tech 0003:09DA:022B.000F: parse failed [ 427.298804][ T3684] a4tech: probe of 0003:09DA:022B.000F failed with error -22 [ 427.486461][ T3684] usb 4-1: USB disconnect, device number 16 [ 427.616714][ T9188] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1241'. [ 428.034447][ T9202] loop2: detected capacity change from 0 to 4096 [ 428.088197][ T9206] loop0: detected capacity change from 0 to 512 [ 428.094926][ T9202] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 428.215830][ T9206] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 428.334689][ T9206] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.1248: bg 0: block 144: padding at end of block bitmap is not set [ 428.494741][ T6327] EXT4-fs (loop0): unmounting filesystem. [ 428.609161][ T9210] loop1: detected capacity change from 0 to 40427 [ 428.624506][ T9210] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 428.634967][ T9210] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 428.650780][ T9210] F2FS-fs (loop1): Found nat_bits in checkpoint [ 428.726742][ T9210] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 428.734827][ T9210] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 428.755341][ T4269] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 429.125316][ T4269] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 429.154697][ T4269] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 429.267205][ T4269] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 429.287073][ T4269] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 429.308328][ T4269] usb 3-1: SerialNumber: syz [ 429.588594][ T9253] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 429.595713][ T9253] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 429.611715][ T9253] vhci_hcd vhci_hcd.0: Device attached [ 430.004766][ T4269] usb 3-1: 0:2 : does not exist [ 430.039699][ T4269] usb 3-1: USB disconnect, device number 21 [ 430.873079][ T27] usb 17-1: new high-speed USB device number 2 using vhci_hcd [ 430.884316][ C0] eth0: bad gso: type: 1, size: 1408 [ 431.114591][ T9272] ubi0: attaching mtd0 [ 431.118697][ T9272] ubi0 error: ubi_attach_mtd_dev: bad VID header (7) or data offsets (71) [ 431.126260][ T9273] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1270'. [ 431.173223][ T9273] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 431.215269][ T9274] loop3: detected capacity change from 0 to 512 [ 431.272930][ T4269] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 431.366262][ T9274] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 431.379740][ T9274] ext4 filesystem being mounted at /85/file0 supports timestamps until 2038 (0x7fffffff) [ 431.518128][ T9274] EXT4-fs error (device loop3): ext4_add_entry:2484: inode #2: comm syz.3.1269: Directory hole found for htree leaf block 0 [ 431.522878][ T4269] usb 5-1: Using ep0 maxpacket: 8 [ 431.773017][ T4269] usb 5-1: config 0 has no interfaces? [ 431.937908][ T4269] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 431.960554][ T4269] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.970805][ T7904] EXT4-fs (loop3): unmounting filesystem. [ 432.001509][ T4269] usb 5-1: Product: syz [ 432.011981][ T4269] usb 5-1: Manufacturer: syz [ 432.039482][ T4269] usb 5-1: SerialNumber: syz [ 432.052559][ T4269] usb 5-1: config 0 descriptor?? [ 432.116367][ T9276] loop2: detected capacity change from 0 to 40427 [ 432.137742][ T9276] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 432.148589][ T9276] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 432.171538][ T9276] F2FS-fs (loop2): invalid crc value [ 432.211486][ T9276] F2FS-fs (loop2): Found nat_bits in checkpoint [ 432.352210][ T9276] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 432.362821][ T9276] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 432.400415][ T9257] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1264'. [ 432.656767][ T46] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 432.732389][ T46] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 433.082953][ T4269] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 433.107484][ T3907] usb 5-1: USB disconnect, device number 21 [ 433.147000][ T9254] vhci_hcd: connection reset by peer [ 433.172181][ T46] vhci_hcd: stop threads [ 433.201746][ T46] vhci_hcd: release socket [ 433.235406][ T46] vhci_hcd: disconnect device [ 433.463212][ T4269] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 433.496919][ T4269] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 433.621891][ T4269] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 433.889609][ T4269] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 433.898962][ T4269] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.924422][ T4269] usb 2-1: config 0 descriptor?? [ 434.190878][ T9300] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 434.241153][ T9300] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 434.363952][ T9300] loop1: detected capacity change from 0 to 256 [ 434.449013][ T9300] FAT-fs (loop1): Directory bread(block 64) failed [ 434.462262][ T9300] FAT-fs (loop1): Directory bread(block 65) failed [ 434.513093][ T9300] FAT-fs (loop1): Directory bread(block 66) failed [ 434.550216][ T9300] FAT-fs (loop1): Directory bread(block 67) failed [ 434.580696][ T9300] FAT-fs (loop1): Directory bread(block 68) failed [ 434.610095][ T9312] netlink: 'syz.0.1281': attribute type 5 has an invalid length. [ 434.639161][ T9300] FAT-fs (loop1): Directory bread(block 69) failed [ 434.693450][ T9300] FAT-fs (loop1): Directory bread(block 70) failed [ 434.740833][ T9300] FAT-fs (loop1): Directory bread(block 71) failed [ 434.762971][ T9300] FAT-fs (loop1): Directory bread(block 72) failed [ 434.769541][ T9300] FAT-fs (loop1): Directory bread(block 73) failed [ 435.123086][ T3731] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 435.533637][ T3731] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 435.564038][ T3731] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 435.789155][ T26] audit: type=1800 audit(1723109572.081:381): pid=9300 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1277" name="bus" dev="loop1" ino=1048660 res=0 errno=0 [ 435.810469][ T3731] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 435.830622][ T3731] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 435.850067][ T3731] usb 5-1: SerialNumber: syz [ 435.891200][ T9308] loop2: detected capacity change from 0 to 32768 [ 435.898462][ T9308] XFS: attr2 mount option is deprecated. [ 435.967343][ T9308] XFS (loop2): Mounting V5 Filesystem [ 435.994739][ T4269] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 436.015446][ T4269] plantronics 0003:047F:FFFF.0010: No inputs registered, leaving [ 436.033188][ T27] vhci_hcd: vhci_device speed not set [ 436.043069][ T4269] plantronics 0003:047F:FFFF.0010: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 436.174600][ T9335] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1287'. [ 436.194407][ T9335] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1287'. [ 436.199340][ T9308] XFS (loop2): Ending clean mount [ 436.215125][ T3731] usb 5-1: 0:2 : does not exist [ 436.261736][ T3731] usb 5-1: USB disconnect, device number 22 [ 436.384832][ T4269] usb 2-1: USB disconnect, device number 20 [ 436.405671][ T9300] usb 2-1: string descriptor 0 read error: -19 [ 437.006598][ T9343] loop3: detected capacity change from 0 to 256 [ 437.097391][ T9343] FAT-fs (loop3): Directory bread(block 64) failed [ 437.122560][ T9343] FAT-fs (loop3): Directory bread(block 65) failed [ 437.153985][ T9343] FAT-fs (loop3): Directory bread(block 66) failed [ 437.181277][ T9343] FAT-fs (loop3): Directory bread(block 67) failed [ 437.204143][ T9308] XFS (loop2): Quotacheck needed: Please wait. [ 437.227101][ T9343] FAT-fs (loop3): Directory bread(block 68) failed [ 437.257858][ T9343] FAT-fs (loop3): Directory bread(block 69) failed [ 437.264605][ T9343] FAT-fs (loop3): Directory bread(block 70) failed [ 437.271422][ T9343] FAT-fs (loop3): Directory bread(block 71) failed [ 437.278284][ T9343] FAT-fs (loop3): Directory bread(block 72) failed [ 437.278353][ T9308] XFS (loop2): Quotacheck: Done. [ 437.285473][ T9343] FAT-fs (loop3): Directory bread(block 73) failed [ 437.343733][ T7663] XFS (loop2): Unmounting Filesystem [ 438.922481][ T9374] fuse: Bad value for 'fd' [ 439.053339][ T9377] loop0: detected capacity change from 0 to 2048 [ 439.111916][ T9377] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 440.005469][ T1260] ieee802154 phy0 wpan0: encryption failed: -22 [ 441.020350][ T9410] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 441.092664][ T9410] team0: Port device batadv0 added [ 441.465069][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 442.126140][ T27] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 442.392831][ T27] usb 3-1: Using ep0 maxpacket: 8 [ 442.523183][ T27] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 442.555383][ T27] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 442.571217][ T9425] loop0: detected capacity change from 0 to 32768 [ 442.633821][ T9425] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.1315 (9425) [ 442.737885][ T27] usb 3-1: New USB device found, idVendor=046a, idProduct=0027, bcdDevice= 0.00 [ 442.753956][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.770775][ T27] usb 3-1: config 0 descriptor?? [ 442.819771][ T9425] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 442.850589][ T9425] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 442.892880][ T9425] BTRFS info (device loop0): setting nodatacow, compression disabled [ 442.916083][ T9425] BTRFS info (device loop0): disabling tree log [ 442.930391][ T9425] BTRFS info (device loop0): enabling auto defrag [ 442.938015][ T9425] BTRFS info (device loop0): max_inline at 0 [ 442.982493][ T9425] BTRFS info (device loop0): using free space tree [ 443.324758][ T26] audit: type=1804 audit(1723109579.611:382): pid=9461 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1315" name="/newroot/152/file1/bus" dev="loop0" ino=263 res=1 errno=0 [ 443.363173][ T27] usbhid 3-1:0.0: can't add hid device: -71 [ 443.369261][ T27] usbhid: probe of 3-1:0.0 failed with error -71 [ 443.399564][ T27] usb 3-1: USB disconnect, device number 22 [ 443.497317][ T26] audit: type=1804 audit(1723109579.791:383): pid=9464 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.1315" name="/newroot/152/file1/bus" dev="loop0" ino=263 res=1 errno=0 [ 443.682294][ T6327] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 445.413670][ T9463] loop1: detected capacity change from 0 to 40427 [ 445.657286][ T9463] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 445.666128][ T9463] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 446.016524][ T9463] F2FS-fs (loop1): Found nat_bits in checkpoint [ 447.669941][ T9510] loop0: detected capacity change from 0 to 256 [ 447.720523][ T9510] FAT-fs (loop0): Directory bread(block 64) failed [ 447.752847][ T9510] FAT-fs (loop0): Directory bread(block 65) failed [ 447.759492][ T9510] FAT-fs (loop0): Directory bread(block 66) failed [ 447.802778][ T9510] FAT-fs (loop0): Directory bread(block 67) failed [ 447.809423][ T9510] FAT-fs (loop0): Directory bread(block 68) failed [ 447.884175][ T9510] FAT-fs (loop0): Directory bread(block 69) failed [ 447.901174][ T9510] FAT-fs (loop0): Directory bread(block 70) failed [ 447.982869][ T9510] FAT-fs (loop0): Directory bread(block 71) failed [ 447.989777][ T9510] FAT-fs (loop0): Directory bread(block 72) failed [ 447.999859][ T9510] FAT-fs (loop0): Directory bread(block 73) failed [ 449.196287][ T9541] loop1: detected capacity change from 0 to 4096 [ 449.216783][ T9541] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 449.736862][ T9539] loop4: detected capacity change from 0 to 40427 [ 449.768378][ T9539] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 449.797261][ T9539] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 449.851282][ T9539] F2FS-fs (loop4): Found nat_bits in checkpoint [ 450.153256][ T9539] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 450.171038][ T9539] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 451.202971][ T3680] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 451.372357][ T9599] tipc: Started in network mode [ 451.391808][ T9599] tipc: Node identity 2, cluster identity 4711 [ 451.399735][ T9599] tipc: Node number set to 2 [ 451.443076][ T3680] usb 2-1: Using ep0 maxpacket: 16 [ 451.525818][ T3682] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 451.576043][ T3680] usb 2-1: config 0 has no interfaces? [ 451.585597][ T3680] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 451.612887][ T3680] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.639756][ T3680] usb 2-1: config 0 descriptor?? [ 452.294070][ T3731] usb 2-1: USB disconnect, device number 21 [ 452.473075][ T3682] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 452.489856][ T3682] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 452.499050][ T3682] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 452.665988][ T27] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 452.673262][ T3682] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 452.689145][ T3682] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.697431][ T3682] usb 1-1: Product: syz [ 452.701601][ T3682] usb 1-1: Manufacturer: syz [ 452.712867][ T3682] usb 1-1: SerialNumber: syz [ 452.753843][ T3682] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 452.761890][ T3682] cdc_ncm 1-1:1.0: bind() failure [ 452.912335][ T9623] loop4: detected capacity change from 0 to 40427 [ 452.920307][ T9623] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 452.928405][ T9623] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 452.936906][ T27] usb 4-1: Using ep0 maxpacket: 32 [ 452.965975][ T9623] F2FS-fs (loop4): Found nat_bits in checkpoint [ 453.002276][ T9623] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 453.012971][ T9623] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 453.074772][ T27] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 453.085858][ T27] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 453.095859][ T27] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 453.105696][ T27] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 453.115622][ T27] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 453.125328][ T27] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 453.243027][ T3682] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 453.293001][ T27] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 453.309141][ T9639] loop2: detected capacity change from 0 to 256 [ 453.312132][ T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.324062][ T9639] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xff6f124c, utbl_chksum : 0xe619d30d) [ 453.339143][ T9641] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1367'. [ 453.342825][ T27] usb 4-1: Product: syz [ 453.373063][ T27] usb 4-1: Manufacturer: 𴇪 [ 453.377914][ T27] usb 4-1: SerialNumber: syz [ 453.492843][ T3682] usb 2-1: Using ep0 maxpacket: 8 [ 453.613053][ T3682] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 453.632539][ T3682] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 453.642690][ T3682] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 453.652633][ T3682] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 453.665641][ T3682] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 453.673115][ T27] cdc_ncm 4-1:1.0: bind() failure [ 453.674734][ T3682] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 453.686625][ T27] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 453.711263][ T27] cdc_ncm 4-1:1.1: bind() failure [ 453.720142][ T27] usb 4-1: USB disconnect, device number 17 [ 453.947340][ T3682] usb 2-1: usb_control_msg returned -32 [ 453.955159][ T3682] usbtmc 2-1:16.0: can't read capabilities [ 454.810249][ T3907] usb 1-1: USB disconnect, device number 27 [ 454.938966][ T9652] sp0: Synchronizing with TNC [ 455.079798][ T9657] syz.3.1382[9657] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 455.079905][ T9657] syz.3.1382[9657] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 455.707567][ T3682] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 455.996023][ T3682] usb 3-1: Using ep0 maxpacket: 16 [ 456.113193][ T3682] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 456.141124][ T3682] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 456.181503][ T3682] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 456.235188][ T3682] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 456.272017][ T3682] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.334841][ T3680] usb 2-1: USB disconnect, device number 22 [ 456.344256][ T3682] usb 3-1: config 0 descriptor?? [ 456.447464][ T9675] loop1: detected capacity change from 0 to 256 [ 456.491791][ T9673] loop0: detected capacity change from 0 to 40427 [ 456.499668][ T9673] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 456.509452][ T9673] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 456.520817][ T9675] FAT-fs (loop1): Directory bread(block 64) failed [ 456.543928][ T9675] FAT-fs (loop1): Directory bread(block 65) failed [ 456.557647][ T9673] F2FS-fs (loop0): Found nat_bits in checkpoint [ 456.571336][ T9675] FAT-fs (loop1): Directory bread(block 66) failed [ 456.601597][ T9675] FAT-fs (loop1): Directory bread(block 67) failed [ 456.621887][ T9675] FAT-fs (loop1): Directory bread(block 68) failed [ 456.637392][ T9675] FAT-fs (loop1): Directory bread(block 69) failed [ 456.650206][ T9675] FAT-fs (loop1): Directory bread(block 70) failed [ 456.668708][ T9675] FAT-fs (loop1): Directory bread(block 71) failed [ 456.678887][ T9675] FAT-fs (loop1): Directory bread(block 72) failed [ 456.692895][ T9675] FAT-fs (loop1): Directory bread(block 73) failed [ 456.740736][ T9673] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 456.750337][ T9673] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 456.827986][ T3682] koneplus 0003:1E7D:2E22.0011: unknown main item tag 0x0 [ 456.873444][ T3682] koneplus 0003:1E7D:2E22.0011: hidraw0: USB HID v0.00 Device [HID 1e7d:2e22] on usb-dummy_hcd.2-1/input0 [ 457.964628][ T9699] device wlan1 entered promiscuous mode [ 459.279990][ T3731] usb 3-1: USB disconnect, device number 23 [ 459.342180][ T9720] loop1: detected capacity change from 0 to 256 [ 459.491754][ T9720] FAT-fs (loop1): Directory bread(block 64) failed [ 459.531970][ T9720] FAT-fs (loop1): Directory bread(block 65) failed [ 459.539287][ T9720] FAT-fs (loop1): Directory bread(block 66) failed [ 459.546002][ T9720] FAT-fs (loop1): Directory bread(block 67) failed [ 459.553254][ T9720] FAT-fs (loop1): Directory bread(block 68) failed [ 459.559801][ T9720] FAT-fs (loop1): Directory bread(block 69) failed [ 459.566465][ T9720] FAT-fs (loop1): Directory bread(block 70) failed [ 459.578187][ T9720] FAT-fs (loop1): Directory bread(block 71) failed [ 459.584969][ T9720] FAT-fs (loop1): Directory bread(block 72) failed [ 459.591529][ T9720] FAT-fs (loop1): Directory bread(block 73) failed [ 460.694526][ T9726] loop2: detected capacity change from 0 to 40427 [ 460.711876][ T9726] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 460.733587][ T9726] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 460.803067][ T6811] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 461.003869][ T9726] F2FS-fs (loop2): Found nat_bits in checkpoint [ 461.083251][ T6811] usb 5-1: Using ep0 maxpacket: 16 [ 461.224048][ T6811] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 461.402286][ T9726] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 461.413316][ T9726] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 461.555806][ T6811] usb 5-1: New USB device found, idVendor=97ab, idProduct=dfca, bcdDevice=58.fc [ 461.573724][ T6811] usb 5-1: New USB device strings: Mfr=45, Product=19, SerialNumber=3 [ 461.582399][ T6811] usb 5-1: Product: syz [ 461.599133][ T6811] usb 5-1: Manufacturer: syz [ 461.615982][ T6811] usb 5-1: SerialNumber: syz [ 461.628588][ T6811] usb 5-1: config 0 descriptor?? [ 461.869266][ T9761] loop2: detected capacity change from 0 to 512 [ 461.908967][ T6811] usb 5-1: USB disconnect, device number 23 [ 461.928635][ T9761] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 461.938141][ T9761] ext4 filesystem being mounted at /99/file0 supports timestamps until 2038 (0x7fffffff) [ 462.781190][ T7663] EXT4-fs (loop2): unmounting filesystem. [ 462.782172][ T9779] loop1: detected capacity change from 0 to 256 [ 462.834492][ T9779] FAT-fs (loop1): Directory bread(block 64) failed [ 462.841147][ T9779] FAT-fs (loop1): Directory bread(block 65) failed [ 462.848059][ T9779] FAT-fs (loop1): Directory bread(block 66) failed [ 462.854861][ T9779] FAT-fs (loop1): Directory bread(block 67) failed [ 462.861653][ T9779] FAT-fs (loop1): Directory bread(block 68) failed [ 462.868892][ T9779] FAT-fs (loop1): Directory bread(block 69) failed [ 462.881917][ T9779] FAT-fs (loop1): Directory bread(block 70) failed [ 462.888635][ T9779] FAT-fs (loop1): Directory bread(block 71) failed [ 462.895995][ T9779] FAT-fs (loop1): Directory bread(block 72) failed [ 462.902592][ T9779] FAT-fs (loop1): Directory bread(block 73) failed [ 463.044117][ T3680] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 463.413061][ T3680] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 463.431403][ T3680] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 463.543030][ T3680] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 463.558792][ T9775] dccp_close: ABORT with 272 bytes unread [ 463.559964][ T3680] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 463.595337][ T3680] usb 1-1: SerialNumber: syz [ 463.914266][ T3680] usb 1-1: 0:2 : does not exist [ 463.933868][ T3680] usb 1-1: USB disconnect, device number 28 [ 464.738333][ T9792] loop1: detected capacity change from 0 to 40427 [ 464.781187][ T9792] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 464.812312][ T9792] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 464.895120][ T9792] F2FS-fs (loop1): Found nat_bits in checkpoint [ 464.991200][ T9792] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 465.001140][ T9792] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 465.112606][ C0] eth0: bad gso: type: 1, size: 1408 [ 465.268800][ T9813] loop2: detected capacity change from 0 to 512 [ 465.303598][ T9813] journal_path: Lookup failure for './bus' [ 465.318439][ T9813] EXT4-fs: error: could not find journal device path [ 465.394459][ T9815] syz.3.1431[9815] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 465.394557][ T9815] syz.3.1431[9815] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 465.429459][ T9813] loop2: detected capacity change from 0 to 2048 [ 465.478515][ T9818] loop1: detected capacity change from 0 to 512 [ 465.492422][ T9818] journal_path: Lookup failure for './bus' [ 465.498892][ T9818] EXT4-fs: error: could not find journal device path [ 465.515913][ T9813] EXT4-fs error (device loop2): __ext4_fill_super:5399: inode #2: comm syz.2.1429: casefold flag without casefold feature [ 465.539919][ T9813] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 465.584422][ T9813] EXT4-fs (loop2): Errors on filesystem, clearing orphan list. [ 465.592034][ T9813] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 465.613663][ T9818] loop1: detected capacity change from 0 to 2048 [ 465.747219][ T9818] EXT4-fs error (device loop1): __ext4_fill_super:5399: inode #2: comm syz.1.1428: casefold flag without casefold feature [ 465.788295][ T9818] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 465.989323][ T9826] EXT4-fs error (device loop2): ext4_add_entry:2484: inode #2: comm syz.2.1429: Directory hole found for htree leaf block 0 [ 466.359784][ T9818] EXT4-fs (loop1): Errors on filesystem, clearing orphan list. [ 466.370313][ T9818] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 466.387579][ T7663] EXT4-fs (loop2): unmounting filesystem. [ 466.519408][ T9838] EXT4-fs error (device loop1): ext4_add_entry:2484: inode #2: comm syz.1.1428: Directory hole found for htree leaf block 0 [ 467.705316][ T6949] EXT4-fs (loop1): unmounting filesystem. [ 467.797582][ T26] audit: type=1326 audit(1723109604.091:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9858 comm="syz.4.1439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd79f779f9 code=0x7ffc0000 [ 467.800244][ T26] audit: type=1326 audit(1723109604.091:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9858 comm="syz.4.1439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdd79f779f9 code=0x7ffc0000 [ 467.833132][ T26] audit: type=1326 audit(1723109604.131:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9858 comm="syz.4.1439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd79f779f9 code=0x7ffc0000 [ 467.833911][ T26] audit: type=1326 audit(1723109604.131:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9858 comm="syz.4.1439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdd79f779f9 code=0x7ffc0000 [ 467.834101][ T26] audit: type=1326 audit(1723109604.131:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9858 comm="syz.4.1439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd79f779f9 code=0x7ffc0000 [ 467.834261][ T26] audit: type=1326 audit(1723109604.131:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9858 comm="syz.4.1439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd79f779f9 code=0x7ffc0000 [ 467.834471][ T26] audit: type=1326 audit(1723109604.131:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9858 comm="syz.4.1439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdd79f779f9 code=0x7ffc0000 [ 467.834655][ T26] audit: type=1326 audit(1723109604.131:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9858 comm="syz.4.1439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd79f779f9 code=0x7ffc0000 [ 467.834884][ T26] audit: type=1326 audit(1723109604.131:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9858 comm="syz.4.1439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdd79f779f9 code=0x7ffc0000 [ 467.835690][ T26] audit: type=1326 audit(1723109604.131:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9858 comm="syz.4.1439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd79f779f9 code=0x7ffc0000 [ 469.569096][ T9879] device wlan1 entered promiscuous mode [ 469.705058][ T9855] loop3: detected capacity change from 0 to 40427 [ 469.738757][ T9855] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 469.840534][ T9855] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 470.453523][ T9855] F2FS-fs (loop3): Found nat_bits in checkpoint [ 471.728198][ T3680] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 472.243572][ T3680] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 472.243834][ T3680] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 472.323550][ T3680] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 472.323660][ T3680] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 472.323992][ T3680] usb 3-1: SerialNumber: syz [ 472.635264][ T3680] usb 3-1: 0:2 : does not exist [ 472.702979][ T3680] usb 3-1: USB disconnect, device number 24 [ 472.718898][ T9924] dccp_close: ABORT with 240 bytes unread [ 473.915331][ T4269] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 474.283338][ T4269] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 474.295112][ T9950] team0: Port device batadv0 removed [ 474.309352][ T4269] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.362274][ T4269] usb 5-1: config 0 descriptor?? [ 474.772849][ T3685] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 475.042851][ T3685] usb 4-1: Using ep0 maxpacket: 8 [ 475.177614][ T3685] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 475.198740][ T3685] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 475.210655][ T3685] usb 4-1: New USB device found, idVendor=046a, idProduct=0027, bcdDevice= 0.00 [ 475.224313][ T3685] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.238008][ T3685] usb 4-1: config 0 descriptor?? [ 475.573175][ T3680] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 475.823192][ T3685] usbhid 4-1:0.0: can't add hid device: -71 [ 475.830523][ T3685] usbhid: probe of 4-1:0.0 failed with error -71 [ 475.843076][ T3685] usb 4-1: USB disconnect, device number 18 [ 475.992895][ T3680] usb 3-1: Using ep0 maxpacket: 16 [ 476.113423][ T3680] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 476.179642][ T3680] usb 3-1: New USB device found, idVendor=17ef, idProduct=6085, bcdDevice= 0.00 [ 476.234402][ T3680] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.306494][ T3680] usb 3-1: config 0 descriptor?? [ 476.370874][ T3680] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 476.583093][ T4269] usb 5-1: Cannot set autoneg [ 476.587940][ T4269] MOSCHIP usb-ethernet driver: probe of 5-1:0.0 failed with error -71 [ 476.759929][ T4269] usb 5-1: USB disconnect, device number 24 [ 477.132870][ T3731] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 478.223038][ T3731] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 478.270595][ T3731] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 478.493434][ T3731] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 478.509233][ T3731] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 478.538012][ T3731] usb 1-1: SerialNumber: syz [ 481.011244][ T3731] usb 1-1: 0:2 : does not exist [ 481.077200][ T3731] usb 1-1: USB disconnect, device number 29 [ 481.146001][ T6811] usb 3-1: USB disconnect, device number 25 [ 488.673400][ T3650] Bluetooth: hci5: command 0x1003 tx timeout [ 488.683116][ T3646] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 488.762873][ T3731] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 489.082978][ T3731] usb 1-1: Using ep0 maxpacket: 16 [ 489.142924][ T3731] usb 1-1: device descriptor read/all, error -71 [ 489.244041][T10085] loop3: detected capacity change from 0 to 4096 [ 489.263120][T10085] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 490.992895][ T3684] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 491.252956][ T3684] usb 3-1: Using ep0 maxpacket: 16 [ 491.373081][ T3684] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 491.403030][ T3684] usb 3-1: New USB device found, idVendor=17ef, idProduct=6085, bcdDevice= 0.00 [ 491.432466][ T3684] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 491.468727][ T3684] usb 3-1: config 0 descriptor?? [ 491.525115][ T3684] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 493.869928][ T3680] usb 3-1: USB disconnect, device number 26 [ 494.157416][T10167] loop2: detected capacity change from 0 to 4096 [ 494.165286][T10167] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 496.308953][T10193] dccp_close: ABORT with 272 bytes unread [ 496.738185][ T4269] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 496.841385][T10216] loop2: detected capacity change from 0 to 4096 [ 496.871495][T10216] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 496.988371][ T4269] usb 1-1: Using ep0 maxpacket: 16 [ 497.123176][ T4269] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 497.160294][ T4269] usb 1-1: New USB device found, idVendor=17ef, idProduct=6085, bcdDevice= 0.00 [ 497.198499][ T4269] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.238230][ T4269] usb 1-1: config 0 descriptor?? [ 497.294841][ T4269] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 498.440906][T10218] loop1: detected capacity change from 0 to 262144 [ 498.483140][T10218] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop1 scanned by syz.1.1555 (10218) [ 498.499444][T10218] BTRFS info (device loop1): first mount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 498.509684][T10218] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 498.519026][T10218] BTRFS info (device loop1): enabling ssd optimizations [ 498.525979][T10218] BTRFS info (device loop1): enabling auto defrag [ 498.532468][T10218] BTRFS info (device loop1): using free space tree [ 498.639633][ T4595] BTRFS warning (device loop1): checksum verify failed on logical 22036480 mirror 1 wanted 0x23e101be1e001a29 found 0x98e2f59226e63d74 level 0 [ 498.819831][ T6811] usb 1-1: USB disconnect, device number 32 [ 499.725084][T10218] repair_io_failure: 2 callbacks suppressed [ 499.725104][T10218] BTRFS info (device loop1): read error corrected: ino 0 off 22036480 (dev /dev/loop1 sector 43040) [ 499.743064][T10218] BTRFS info (device loop1): read error corrected: ino 0 off 22040576 (dev /dev/loop1 sector 43048) [ 499.754154][T10218] BTRFS info (device loop1): read error corrected: ino 0 off 22044672 (dev /dev/loop1 sector 43056) [ 499.765358][T10218] BTRFS info (device loop1): read error corrected: ino 0 off 22048768 (dev /dev/loop1 sector 43064) [ 499.777504][ T46] BTRFS warning (device loop1): checksum verify failed on logical 30670848 mirror 1 wanted 0xe9f08ec94c425425 found 0x1a4a9216e61c07c8 level 0 [ 499.880137][T10218] BTRFS info (device loop1): read error corrected: ino 0 off 30670848 (dev /dev/loop1 sector 76288) [ 499.891746][T10218] BTRFS info (device loop1): read error corrected: ino 0 off 30674944 (dev /dev/loop1 sector 76296) [ 499.902964][T10218] BTRFS info (device loop1): read error corrected: ino 0 off 30679040 (dev /dev/loop1 sector 76304) [ 499.917265][T10218] BTRFS info (device loop1): read error corrected: ino 0 off 30683136 (dev /dev/loop1 sector 76312) [ 499.943093][T10218] BTRFS error (device loop1): open_ctree failed [ 499.968074][T10264] netlink: 'syz.4.1564': attribute type 10 has an invalid length. [ 500.008876][T10264] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1564'. [ 500.074514][T10264] device team0 entered promiscuous mode [ 500.083091][T10264] device team_slave_0 entered promiscuous mode [ 500.119243][T10264] device team_slave_1 entered promiscuous mode [ 500.146343][T10264] bridge0: port 2(team0) entered blocking state [ 500.223081][T10264] bridge0: port 2(team0) entered disabled state [ 500.373026][T10264] bridge0: port 2(team0) entered blocking state [ 500.379436][T10264] bridge0: port 2(team0) entered forwarding state [ 500.782144][T10265] dccp_close: ABORT with 272 bytes unread [ 500.843224][T10275] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 501.385935][ T1260] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.393057][T10275] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 501.430328][T10275] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 501.923020][T10275] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 501.960768][T10275] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 501.984425][T10275] usb 5-1: Manufacturer: syz [ 502.017963][T10275] usb 5-1: config 0 descriptor?? [ 502.250450][T10275] rc_core: IR keymap rc-hauppauge not found [ 502.262818][T10275] Registered IR keymap rc-empty [ 502.268486][T10275] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 502.332908][ T3682] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 502.334861][T10275] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input18 [ 502.407512][T10275] usb 5-1: USB disconnect, device number 25 [ 502.412683][T10302] device wlan1 entered promiscuous mode [ 502.572928][ T3682] usb 1-1: Using ep0 maxpacket: 16 [ 502.693212][ T3682] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 502.712125][ T3682] usb 1-1: New USB device found, idVendor=17ef, idProduct=6085, bcdDevice= 0.00 [ 502.729166][ T3682] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.739176][ T3682] usb 1-1: config 0 descriptor?? [ 502.794713][ T3682] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 505.170374][ T8262] usb 1-1: USB disconnect, device number 33 [ 562.826081][ T1260] ieee802154 phy0 wpan0: encryption failed: -22 [ 615.232766][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 615.239745][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P10360/1:b..l P10355/1:b..l [ 615.249668][ C1] (detected by 1, t=10502 jiffies, g=57893, q=341 ncpus=2) [ 615.256929][ C1] task:modprobe state:R running task stack:23880 pid:10355 ppid:4595 flags:0x00004002 [ 615.269276][ C1] Call Trace: [ 615.272538][ C1] [ 615.275453][ C1] __schedule+0x143f/0x4570 [ 615.279945][ C1] ? kasan_set_track+0x60/0x70 [ 615.284697][ C1] ? ____kasan_slab_free+0xd6/0x120 [ 615.289874][ C1] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 615.295925][ C1] ? release_firmware_map_entry+0x186/0x186 [ 615.301795][ C1] ? print_irqtrace_events+0x210/0x210 [ 615.307243][ C1] ? preempt_schedule_irq+0xec/0x1c0 [ 615.312511][ C1] preempt_schedule_irq+0xf7/0x1c0 [ 615.317603][ C1] ? preempt_schedule_notrace+0x140/0x140 [ 615.323306][ C1] ? rcu_is_watching+0x11/0xb0 [ 615.328048][ C1] irqentry_exit+0x53/0x80 [ 615.332438][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 615.338399][ C1] RIP: 0010:lock_is_held_type+0x0/0x180 [ 615.344012][ C1] Code: 00 75 d6 48 c7 c7 00 01 0c 8b 48 c7 c6 40 01 0c 8b e8 e4 73 ad f6 0f 0b eb bf e8 ab fd ff ff 66 2e 0f 1f 84 00 00 00 00 00 90 <55> 41 57 41 56 41 55 41 54 53 48 83 ec 10 65 48 8b 04 25 28 00 00 [ 615.363594][ C1] RSP: 0018:ffffc9000344f538 EFLAGS: 00000246 [ 615.369641][ C1] RAX: 1ffff1100fa30e10 RBX: 0000000000000300 RCX: dffffc0000000000 [ 615.377693][ C1] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: ffff88807d1871d8 [ 615.385651][ C1] RBP: ffffc9000344f730 R08: ffffffff8a9c2b1e R09: ffffffff8a9c2c0b [ 615.393601][ C1] R10: 0000000000000003 R11: ffff88801ee93b80 R12: 1ffff92000689ec7 [ 615.401565][ C1] R13: ffffc9000344f638 R14: ffff88807d1871d8 R15: 0000000000000000 [ 615.409530][ C1] ? mt_validate+0x511b/0x5ad0 [ 615.414287][ C1] ? mt_validate+0x502e/0x5ad0 [ 615.419049][ C1] mt_validate+0x507c/0x5ad0 [ 615.423630][ C1] ? __vma_adjust+0x8df/0x1f40 [ 615.428383][ C1] ? __x64_sys_mprotect+0x7c/0x90 [ 615.433392][ C1] ? mt_validate+0x1be/0x5ad0 [ 615.438053][ C1] ? mt_dump_node+0x1700/0x1700 [ 615.442888][ C1] ? mas_destroy+0x1c8c/0x2310 [ 615.447644][ C1] validate_mm_mt+0x165/0x670 [ 615.452306][ C1] ? mas_store_prealloc+0x460/0x460 [ 615.457491][ C1] ? __split_vma+0x530/0x530 [ 615.462068][ C1] validate_mm+0x16e/0x380 [ 615.466466][ C1] ? vma_expand+0x8f0/0x8f0 [ 615.470953][ C1] ? anon_vma_interval_tree_insert+0x441/0x490 [ 615.477090][ C1] __vma_adjust+0x1d41/0x1f40 [ 615.481766][ C1] ? slab_post_alloc_hook+0x71/0x3a0 [ 615.487135][ C1] ? validate_mm+0x380/0x380 [ 615.491716][ C1] ? memset+0x1f/0x40 [ 615.495683][ C1] ? anon_vma_interval_tree_insert+0x3cc/0x490 [ 615.501824][ C1] ? vma_interval_tree_augment_rotate+0x1c0/0x1c0 [ 615.508223][ C1] ? anon_vma_clone+0x47d/0x4d0 [ 615.513062][ C1] __split_vma+0x36e/0x530 [ 615.517466][ C1] mprotect_fixup+0x753/0x840 [ 615.522128][ C1] ? change_protection+0x3dc0/0x3dc0 [ 615.527403][ C1] ? bpf_lsm_file_mprotect+0x5/0x10 [ 615.532600][ C1] ? security_file_mprotect+0x81/0xc0 [ 615.537961][ C1] do_mprotect_pkey+0x8b6/0xbe0 [ 615.542811][ C1] ? prot_none_test+0x10/0x10 [ 615.547481][ C1] ? syscall_enter_from_user_mode+0x2e/0x230 [ 615.553444][ C1] ? lockdep_hardirqs_on+0x94/0x130 [ 615.558621][ C1] __x64_sys_mprotect+0x7c/0x90 [ 615.563457][ C1] do_syscall_64+0x3b/0xb0 [ 615.567858][ C1] ? clear_bhb_loop+0x45/0xa0 [ 615.572514][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 615.578383][ C1] RIP: 0033:0x7efdf39efbb7 [ 615.582781][ C1] RSP: 002b:00007ffe9b9908b8 EFLAGS: 00000206 ORIG_RAX: 000000000000000a [ 615.591184][ C1] RAX: ffffffffffffffda RBX: 00007efdf39d3570 RCX: 00007efdf39efbb7 [ 615.599132][ C1] RDX: 0000000000000001 RSI: 0000000000001000 RDI: 00007efdf3725000 [ 615.607080][ C1] RBP: 00007ffe9b9909d0 R08: 00007ffe9b990848 R09: 00007efdf39d25c0 [ 615.615026][ C1] R10: 00007efdf36d2928 R11: 0000000000000206 R12: 00007efdf39d3570 [ 615.622977][ C1] R13: 00007efdf39f7eda R14: 00007efdf3725fb0 R15: 00007efdf3725e58 [ 615.631021][ C1] [ 615.634019][ C1] task:modprobe state:R running task stack:23880 pid:10360 ppid:3748 flags:0x00004000 [ 615.644765][ C1] Call Trace: [ 615.648026][ C1] [ 615.651022][ C1] __schedule+0x143f/0x4570 [ 615.655522][ C1] ? release_firmware_map_entry+0x186/0x186 [ 615.661398][ C1] ? print_irqtrace_events+0x210/0x210 [ 615.666855][ C1] ? preempt_schedule_irq+0xec/0x1c0 [ 615.672140][ C1] preempt_schedule_irq+0xf7/0x1c0 [ 615.677248][ C1] ? preempt_schedule_notrace+0x140/0x140 [ 615.682955][ C1] ? step_into+0x4b6/0x1070 [ 615.687452][ C1] irqentry_exit+0x53/0x80 [ 615.691852][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 615.697816][ C1] RIP: 0010:__sanitizer_cov_trace_const_cmp4+0x7c/0x80 [ 615.704735][ C1] Code: 8d 42 28 4c 39 c8 77 22 89 f8 89 f6 49 ff c2 4c 89 11 48 c7 44 0a 08 05 00 00 00 48 89 44 0a 10 48 89 74 0a 18 4c 89 44 0a 20 0f 1f 00 4c 8b 04 24 65 48 8b 0d b4 ca 77 7e 65 8b 05 b5 ca 77 [ 615.724406][ C1] RSP: 0018:ffffc900030ef788 EFLAGS: 00000293 [ 615.730454][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffff888021719dc0 [ 615.738424][ C1] RDX: ffff888021719dc0 RSI: 0000000000000000 RDI: 0000000000000000 [ 615.746465][ C1] RBP: ffff8880229b16c0 R08: ffffffff81f3ad1a R09: fffff5200061df76 [ 615.754439][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff8880229b16c2 [ 615.762389][ C1] R13: ffffffff8d1d5520 R14: 0000000000000081 R15: dffffc0000000000 [ 615.770345][ C1] ? inode_permission+0xea/0x450 [ 615.775271][ C1] inode_permission+0xea/0x450 [ 615.780016][ C1] link_path_walk+0x283/0xee0 [ 615.784682][ C1] ? set_root+0x332/0x3b0 [ 615.789006][ C1] ? handle_lookup_down+0x130/0x130 [ 615.794188][ C1] path_openat+0x23d/0x2e60 [ 615.798672][ C1] ? mark_lock+0x9a/0x340 [ 615.802997][ C1] ? do_filp_open+0x480/0x480 [ 615.807747][ C1] do_filp_open+0x230/0x480 [ 615.812267][ C1] ? vfs_tmpfile+0x4a0/0x4a0 [ 615.816846][ C1] ? _raw_spin_unlock+0x24/0x40 [ 615.821739][ C1] ? alloc_fd+0x5a0/0x640 [ 615.826051][ C1] do_sys_openat2+0x13b/0x4f0 [ 615.830714][ C1] ? __x64_sys_newfstatat+0x15c/0x1e0 [ 615.836071][ C1] ? do_sys_open+0x220/0x220 [ 615.840641][ C1] ? __x64_sys_newfstatat+0x170/0x1e0 [ 615.845995][ C1] ? __ia32_sys_newlstat+0x180/0x180 [ 615.851261][ C1] __x64_sys_openat+0x243/0x290 [ 615.856094][ C1] ? __ia32_sys_open+0x270/0x270 [ 615.861011][ C1] ? syscall_enter_from_user_mode+0x2e/0x230 [ 615.866971][ C1] ? lockdep_hardirqs_on+0x94/0x130 [ 615.872143][ C1] ? syscall_enter_from_user_mode+0x2e/0x230 [ 615.878098][ C1] do_syscall_64+0x3b/0xb0 [ 615.882492][ C1] ? clear_bhb_loop+0x45/0xa0 [ 615.887149][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 615.893112][ C1] RIP: 0033:0x7f72b1f48a46 [ 615.897503][ C1] RSP: 002b:00007ffe3314e5c8 EFLAGS: 00000287 ORIG_RAX: 0000000000000101 [ 615.905898][ C1] RAX: ffffffffffffffda RBX: 00007ffe3314e828 RCX: 00007f72b1f48a46 [ 615.913851][ C1] RDX: 0000000000080000 RSI: 00007ffe3314e640 RDI: 00000000ffffff9c [ 615.921799][ C1] RBP: 00007ffe3314e630 R08: 0000000000080000 R09: 00007ffe3314e640 [ 615.929835][ C1] R10: 0000000000000000 R11: 0000000000000287 R12: 00007ffe3314e640 [ 615.937784][ C1] R13: 0000000000000008 R14: 00007ffe3314e80f R15: 00000000ffffffff [ 615.945766][ C1] [ 615.948763][ C1] rcu: rcu_preempt kthread starved for 10073 jiffies! g57893 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 615.959951][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 615.969896][ C1] rcu: RCU grace-period kthread stack dump: [ 615.975776][ C1] task:rcu_preempt state:R running task stack:26752 pid:16 ppid:2 flags:0x00004000 [ 615.987094][ C1] Call Trace: [ 615.990360][ C1] [ 615.993278][ C1] __schedule+0x143f/0x4570 [ 615.997770][ C1] ? _raw_spin_unlock+0x40/0x40 [ 616.002613][ C1] ? release_firmware_map_entry+0x186/0x186 [ 616.008488][ C1] ? lockdep_softirqs_off+0x420/0x420 [ 616.013857][ C1] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 616.019754][ C1] ? _raw_spin_unlock+0x40/0x40 [ 616.024593][ C1] schedule+0xbf/0x180 [ 616.028738][ C1] schedule_timeout+0x1b9/0x300 [ 616.033569][ C1] ? console_conditional_schedule+0x40/0x40 [ 616.039440][ C1] ? update_process_times+0x1b0/0x1b0 [ 616.044792][ C1] ? prepare_to_swait_event+0x329/0x350 [ 616.050320][ C1] rcu_gp_fqs_loop+0x2d2/0x1150 [ 616.055181][ C1] ? dyntick_save_progress_counter+0x2b0/0x2b0 [ 616.061311][ C1] ? lockdep_hardirqs_on+0x94/0x130 [ 616.066488][ C1] ? rcu_gp_init+0x15f0/0x15f0 [ 616.071231][ C1] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 616.077127][ C1] ? finish_swait+0xcf/0x1e0 [ 616.081700][ C1] rcu_gp_kthread+0xa3/0x3b0 [ 616.086644][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 616.091732][ C1] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 616.097609][ C1] ? __kthread_parkme+0x168/0x1c0 [ 616.102635][ C1] kthread+0x28d/0x320 [ 616.106695][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 616.111791][ C1] ? kthread_blkcg+0xd0/0xd0 [ 616.116375][ C1] ret_from_fork+0x1f/0x30 [ 616.120873][ C1] [ 616.123872][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 616.130176][ C1] Sending NMI from CPU 1 to CPUs 0: [ 616.135380][ C0] NMI backtrace for cpu 0 skipped: idling at acpi_idle_do_entry+0x10f/0x340 [ 624.265894][ T1260] ieee802154 phy0 wpan0: encryption failed: -22