last executing test programs: 10.127223761s ago: executing program 1 (id=665): syz_mount_image$xfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x245, &(0x7f0000000400)={[{@inode32}, {@qnoenforce}, {}, {@norecovery}, {@nogrpid}, {@dax}, {@nolargeio}, {@sysvgroups}, {@nolazytime}]}, 0x0, 0x97b1, &(0x7f0000009640)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') unlink(&(0x7f0000000100)='./file0/file0\x00') rmdir(&(0x7f00000002c0)='./file0\x00') 7.865513256s ago: executing program 1 (id=672): syz_usb_connect(0x0, 0x49, &(0x7f00000004c0)=ANY=[@ANYBLOB="120100007916ae20e20424140a8a0102030109023700010000000009040000000266b900052406"], 0x0) 7.599376778s ago: executing program 2 (id=673): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f0000000380)={[{@uni_xlate}, {@numtail}, {@fat=@codepage={'codepage', 0x3d, '949'}}, {@utf8}, {@shortname_lower}, {@shortname_win95}, {@shortname_winnt}, {@iocharset={'iocharset', 0x3d, 'default'}}, {@uni_xlate}, {@shortname_mixed}]}, 0x2, 0x21a, &(0x7f0000000700)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)={'#! ', './bus', [{0x20, '\xd7\x99\x06!6$\xa2R\vA\xeeP;\xb0W\x81\xc9T\xb6\xb9\xed\xbd\xe96\xe4UF\x1e\x02\x85\xec\xc9X\xdc\x15\xd0\b\xe5\x18\x98\x11\xd9\xf4\xa1\xb9}\xb6\xa3g\xa7\xbc8\xeck\xa0\xb6\xa6\xbd\x8e\xd1\x1c\x9d\x95\x89\xab\xd8\x0e.\xdc\x8c]K\xd4\xf1\xe4N\xb5\x0f-\xe24\xbc\xff-W\x16\x82\x91>\xb4%\xdd\xeaf\xe2k\xb67C\xe7kE(Vz\xa2A\xcd\x84\xc7\xe3\xd3`C2\xbbe\xd0Y\xbb+\xf4\xb3\xa6s\xa2\xe1\x9c\x00\x00\x00w\x01\xc2h\xf2\xe2\xed3O\xbe\x18\x1d\x8b\x80\x8f\xd03\xc0\xf0\x00'}]}, 0xa1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) 7.301336322s ago: executing program 2 (id=674): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bca) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f0000000040)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r1, &(0x7f00000000c0), 0x2) read(r1, &(0x7f0000000100)=""/85, 0x55) 6.311992454s ago: executing program 3 (id=675): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000000000000000000007f000001000000000000000000000000000000000000000002"], 0xb8}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x67, 0x0, @rand_addr, @multicast1}, @time_exceeded={0x21, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @local}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 6.004485449s ago: executing program 0 (id=677): syz_mount_image$hfs(&(0x7f0000000100), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000002c0)={[{@codepage={'codepage', 0x3d, 'cp860'}}, {@gid}, {@iocharset={'iocharset', 0x3d, 'macinuit'}}, {@creator={'creator', 0x3d, "e1c56d7c"}}, {@dir_umask={'dir_umask', 0x3d, 0xffffffffffffeda3}}, {}, {@dir_umask={'dir_umask', 0x3d, 0x20}}]}, 0x1, 0x2d7, &(0x7f00000023c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000480), 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) getdents64(r2, &(0x7f00000001c0)=""/202, 0xff4) 5.786354116s ago: executing program 2 (id=678): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000004340)=@delchain={0xf28, 0x65, 0x100, 0x0, 0x0, {}, [@TCA_CHAIN={0x8}, @TCA_RATE={0x6, 0x5, {0xfd}}, @TCA_CHAIN={0x8}, @TCA_RATE={0x6, 0x5, {0x0, 0x6a}}, @filter_kind_options=@f_route={{0xa}, {0xed8, 0x2, [@TCA_ROUTE4_POLICE={0xc6c, 0x5, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x7fff}, @TCA_POLICE_RATE={0x404, 0x2, [0x8000, 0x5, 0x548, 0x4, 0x8, 0xb6, 0x6, 0x4, 0xe4, 0x1000, 0x5, 0x401, 0xba, 0x80000001, 0x100, 0x0, 0x9, 0x7, 0x4, 0x8, 0x5, 0x6, 0x2, 0x9, 0x4, 0x758b, 0x3, 0x8, 0x4, 0x10, 0x80000000, 0x2, 0xb99, 0x8, 0x24, 0x7562, 0x7, 0xf73, 0x9, 0x8, 0x0, 0x0, 0x56, 0xf, 0x9ce8, 0x2, 0xf, 0xffffff92, 0x8, 0x12de, 0x1000, 0x1, 0x0, 0x3, 0x41, 0x9, 0x6, 0x0, 0x9, 0xc2, 0x4, 0x5, 0x4, 0x8, 0xf8, 0xfffffffd, 0x1, 0x4, 0x6, 0x7f, 0x2, 0x7, 0x8, 0xcc, 0x9, 0x5, 0xffff, 0x9, 0x5, 0x8, 0x80b, 0x5b5a, 0x5dd, 0xc72b, 0x0, 0x9, 0x7fff, 0x7ff, 0x9, 0xffff8001, 0x80f2, 0x9, 0x9, 0x9, 0x2, 0x52bb6e1e, 0x81, 0x5, 0xffffffff, 0x6c257f53, 0x0, 0xbb94, 0xe11c, 0x9ac, 0x80000000, 0x6, 0x0, 0xd316, 0x1c000000, 0x4, 0x80, 0x0, 0x1, 0xfffffb23, 0x0, 0x5, 0xd, 0xfffff001, 0x9, 0x5, 0x48, 0xfff, 0x8, 0x4, 0x2, 0xa, 0x1ff, 0x9c, 0x207c5896, 0x1, 0x5, 0xc, 0x9, 0x5, 0x5, 0x6b, 0xd, 0x10000, 0x587, 0x8557, 0x7, 0x1, 0x80000001, 0x3, 0x0, 0x7ff, 0x400, 0x0, 0x6, 0x80000001, 0x5, 0x4, 0xd6fc, 0x8, 0x80000001, 0x1ff, 0x200, 0x0, 0x4, 0x4, 0x6, 0x8000000, 0x2, 0xfffffffc, 0x42, 0x9, 0x8000, 0x5, 0x7, 0xac81, 0x40000000, 0x8a2, 0x3, 0x538f, 0x27, 0x3, 0x1, 0x1, 0x9, 0x6c7, 0x7, 0x8, 0x27, 0x7, 0x8, 0x79, 0xce5, 0xfffffe01, 0xff8, 0x0, 0x4, 0x4, 0xfff, 0x2, 0x3, 0x45ce, 0xd6, 0xaee, 0x10, 0x401, 0x52b, 0x3, 0x8, 0x3, 0x4, 0xfffffffd, 0xe, 0x3, 0x7, 0x35, 0x4, 0x779, 0x90, 0x9327, 0x0, 0x101, 0x5, 0x10, 0x0, 0x8, 0x2, 0xffff, 0xffff, 0x1, 0x3, 0x200, 0x4, 0xf80, 0x3, 0x6, 0x4e, 0xbba, 0x6, 0x68, 0xd941, 0x0, 0x80000000, 0x0, 0x4, 0xfffffffc, 0x8, 0x9, 0x80, 0x4, 0x7, 0x3, 0x0, 0xb8, 0xfffffff9, 0x40, 0x8, 0x0, 0x8, 0x1000, 0x3, 0x800]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x4, 0x6, 0x800, 0x0, {0x9, 0x2, 0x6, 0xe576, 0x3ff, 0x800}, {0x6, 0x2, 0xaa7, 0x2, 0x9, 0x188}, 0x4, 0x6, 0x6}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x9}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7fff}, @TCA_POLICE_RATE={0x404, 0x2, [0x2f8, 0x967d, 0x2, 0xf, 0x7fff, 0x7, 0x3, 0x9, 0x48, 0x8, 0xda, 0x4, 0x2, 0x0, 0x100, 0x7fffffff, 0x3, 0x4, 0x4, 0x6897, 0x3, 0x1, 0x1, 0x8, 0x3, 0xf6e, 0x2, 0x5, 0x4, 0xfffffffa, 0xfffffc01, 0x800, 0x5, 0x1, 0xffff, 0x0, 0xffff, 0x9, 0x9, 0xfffffffc, 0x0, 0x0, 0x2, 0x4, 0x0, 0x589980bd, 0x0, 0x8, 0x6, 0x8, 0x80000000, 0xfa, 0xfffffffd, 0x0, 0x5, 0x2, 0x4a, 0xd, 0x3, 0x5, 0x7, 0xb, 0x1, 0x5, 0x0, 0x7, 0x7, 0x0, 0x0, 0x6, 0x1, 0x1, 0x2, 0x5d, 0x1, 0x7ff, 0x9, 0x4, 0x4a6a, 0x80000001, 0x1, 0x4, 0x2, 0x1, 0x3, 0x9, 0xfffffd73, 0x3, 0x910d, 0x0, 0x8, 0x3, 0x10000, 0x15f9, 0x954, 0x5, 0x3, 0x3, 0x6361, 0x0, 0x4, 0xdbaa, 0xd, 0x3ff, 0x1, 0x1000, 0x7, 0x6, 0x8, 0x7, 0x0, 0x5e88, 0x1000, 0x3c, 0x0, 0xac, 0x3, 0x4, 0x5, 0xd, 0xfffffff2, 0x174, 0x100, 0x7f, 0x9, 0x0, 0x10000, 0x3, 0x80000001, 0x200, 0xfffffffd, 0x9, 0x3, 0x0, 0x1, 0x7, 0x61, 0x80000000, 0x2400, 0x1ec3, 0xe, 0x2, 0x97, 0x3, 0xb64, 0x6, 0x2, 0x8, 0x9, 0xca, 0x0, 0x1, 0x6, 0x13800000, 0x1, 0x8, 0x10200, 0x2, 0xfffffffd, 0x646, 0x8000, 0x1, 0xffff5e83, 0x2, 0xb, 0x7, 0x8a6, 0x100, 0x6, 0xfffffffc, 0x5, 0x7ff, 0xeeb, 0x6, 0x10000, 0x2e0, 0x7, 0x3, 0x5, 0x3, 0x0, 0x4, 0xffff441f, 0x1, 0x6, 0x100, 0x5, 0x7, 0x0, 0x3, 0xdb, 0x3e8d, 0xffffff01, 0x3, 0x6, 0xfffffffc, 0x3ff, 0x2, 0x32ab, 0x7, 0xfffffff5, 0x98e, 0xd, 0xe, 0x0, 0xd, 0x1, 0x1, 0xfffffffa, 0x7f, 0xfffffffb, 0xfffffffb, 0x1a4, 0x10001, 0x0, 0x3, 0x40000000, 0x10, 0x4, 0xa000000, 0x1, 0xf350, 0x778f, 0x81, 0xffff, 0xffff, 0x2, 0xd, 0x7, 0x9, 0xfcef, 0x0, 0x2, 0x8001, 0x2, 0xb, 0xd0, 0xc144, 0x1, 0xef, 0x10, 0x0, 0x8, 0x3, 0x8, 0x7fff, 0x7, 0x400, 0xb4, 0x0, 0xc, 0x81, 0x1ff, 0x1, 0x7, 0x9]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x1245, 0x6, 0x9, 0x2, 0x9, 0x2, 0x6, 0xf353, 0x1, 0x0, 0x0, 0x7ff, 0x5, 0xa8, 0x69a94e26, 0x4, 0x8, 0xffffffff, 0x4, 0x6, 0x2, 0xffffffff, 0x7, 0x8, 0x7, 0x7fffffff, 0x1, 0x8, 0x5, 0x7620caf6, 0x6, 0x5, 0x4, 0xcdd, 0x6, 0x4, 0x6, 0xa0a, 0x1, 0x1dfd, 0x1, 0x4, 0x5, 0x5, 0x6, 0x7, 0x6, 0x2, 0xffff7fff, 0x0, 0x9, 0x2, 0x8f51, 0x3d4, 0x0, 0x5, 0xd, 0x9, 0x81, 0x0, 0x9, 0x63, 0x3, 0x739, 0x40, 0x7, 0x1ff, 0x9, 0x3ff, 0x3, 0x821, 0x5, 0x59c, 0x5e85, 0x1d, 0x69, 0x2, 0x3d, 0x1, 0x8, 0x8, 0x9, 0x7, 0x0, 0x4, 0xfffffffd, 0x1000, 0xfe000000, 0xaf, 0x0, 0x1, 0x5d40, 0xffffff0e, 0x0, 0x3, 0x6, 0x4, 0x2, 0xbb5, 0x6, 0x2, 0x6, 0x3, 0x343e, 0x9790, 0x4, 0x8, 0xd, 0xa1d, 0xe8, 0x242, 0x3, 0x8, 0x41c02c90, 0x1, 0x4, 0x5, 0x7fffffff, 0x0, 0x3, 0x1, 0x6, 0xf, 0x88, 0x80, 0x2, 0xfffffff7, 0x5da75430, 0x3, 0x80000000, 0x4216, 0x7, 0xa942, 0x8d3, 0x4, 0x7fffffff, 0x1000, 0x6, 0x2, 0x1ff, 0x80000001, 0x3, 0x7ff, 0x10001, 0x2, 0xfffffffb, 0x6, 0xd7a5, 0x8, 0x0, 0x4, 0x9, 0xee, 0x9bf7, 0xd, 0x8, 0x7f, 0x4, 0x1, 0x0, 0x8001, 0x7, 0x2, 0x4, 0x4, 0x81, 0xfffffffb, 0x10, 0x11, 0x6, 0x700, 0x5, 0x5a3c, 0x9, 0x1, 0x3, 0x8, 0x64, 0x537d, 0xfffffff7, 0x7fff, 0x1ff, 0x800, 0x4, 0x9, 0x7228, 0x2, 0x6, 0x9, 0xffff, 0x40, 0x10, 0x2d, 0x1, 0x3, 0x8001, 0xb3c2, 0x1, 0x68, 0x0, 0x1000, 0x1, 0x3ff, 0x1, 0x4, 0x2, 0x5, 0x11f, 0x9, 0x4e75, 0x7, 0x3, 0x8, 0x2, 0x5, 0xc, 0x0, 0x7fffffff, 0x49, 0x10, 0xfa, 0x4, 0xfc, 0xe76, 0x9, 0x10001, 0x4, 0x5, 0x8, 0x6, 0x8000, 0x397f, 0x9, 0x1, 0x9, 0xb, 0x0, 0xb4, 0x9, 0x1, 0x1, 0x2, 0xe2b, 0x5, 0xf, 0x101, 0x1ff, 0x4, 0x8, 0x9, 0x1, 0x800, 0x10001, 0x800, 0x7fffffff]}]}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_ACT={0x250, 0x6, [@m_ctinfo={0xe0, 0x0, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6}]}, {0xa9, 0x6, "55eb88be72ea2bba577976ef9b5ab407e07afa05e4594274326849c2ec806d7b79f86d10adeb18245c150ce2b9eaeb2380aa7104a6df31aefd38f6b7bb0a45721ccbc5daab0319060053ce464d09642e6bc9ed3d7f4e1d714b45e839ac2719fe34dbba607211f211a9b5b79c059a5c99550373b7bea3b552000000000000000000583ee6aa4994431298558ae4492c31f41354cf3507b98e1159c6ab01743ec121435abf85"}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_connmark={0x128, 0x0, 0x0, 0x0, {{0xd}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0xfffffffe}, 0x4}}, @TCA_CONNMARK_PARMS={0x1c}]}, {0xbd, 0x6, "66396e73dfd00bd4ca2cf67237ecb590a592c571fa73ca19ec26dea927df7162b385d80fe15ca7f5cb6a4d958bd18714cd4f89f48d039d7da0dc8795f6ad32634b6b66cf821e93079c15dda212b0b37b761850342ebe270d64e92b80cf9114d976338d2dbd729e033dcd00b517933d3e64d73a30fc4e9a29d250104fa297e7a7f17405df935efe7e4806b65a797a850f6a8d8e2c8a8b9f56953d1262211f307b4af9617b04c9c48dea9e41ef304ac3365b6d8846ba792c335b"}, {0xc}, {0xc}}}, @m_bpf={0x44, 0x0, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xf28}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x3c}}, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41, 0x2}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 5.586261283s ago: executing program 0 (id=679): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x2010000, &(0x7f0000000740)={[{@shortname_lower}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'cp852'}}, {@uni_xlate}, {@fat=@codepage={'codepage', 0x3d, '932'}}, {@iocharset={'iocharset', 0x3d, 'macceltic'}}, {@shortname_winnt}, {@shortname_mixed}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'cp932'}}, {@shortname_lower}, {@uni_xlate}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'cp1255'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-14'}}]}, 0x2d, 0x342, &(0x7f00000003c0)="$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") syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x2828400, &(0x7f00000001c0)=ANY=[@ANYRESDEC, @ANYRESDEC, @ANYRES32, @ANYRESHEX], 0xc, 0x32a, &(0x7f0000000200)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000280), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) 5.091880334s ago: executing program 4 (id=630): syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f00000015c0)='./file0\x00', 0x0, &(0x7f0000001600), 0x0, 0x559e, &(0x7f0000005680)="$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") chdir(&(0x7f0000000000)='./file0\x00') r0 = open(&(0x7f0000000040)='./bus\x00', 0x64842, 0x0) r1 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) fallocate(r1, 0x0, 0x0, 0x10000) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000080)={0x0, 0x0, 0x1}) 5.091139554s ago: executing program 2 (id=689): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) ioctl$RTC_PLL_SET(0xffffffffffffffff, 0x40207012, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xf, {[@main=@item_4={0x3, 0x0, 0x0, "a8407a73"}, @local=@item_4={0x3, 0x2, 0x0, "93bf0280"}, @main=@item_4={0x3, 0x0, 0x0, "7488dffc"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0) ioctl$HIDIOCGREPORTINFO(r1, 0xc00c4809, &(0x7f0000000b80)={0x1, 0xffffffff}) 4.477227854s ago: executing program 0 (id=680): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_4={0x3, 0x2, 0x0, "3c4041d3"}, @global=@item_012={0x1, 0x1, 0x0, ':'}, @main=@item_4={0x3, 0x0, 0x0, "0000e600"}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "06f9ff00"}, @main=@item_012={0x0, 0x0, 0x8}]}}, 0x0}, 0x0) 4.209242546s ago: executing program 1 (id=681): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x26, 0x4, 0x0, 0x0, 0x98, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x1c, 0x0, 0x0, 0x0, [0x401, 0x1000, 0x5, 0x0, 0x5, 0x0]}, @timestamp_prespec={0x44, 0x34, 0xc0, 0x3, 0x0, [{@multicast1, 0x5}, {@dev, 0x659}, {@broadcast, 0x8000}, {@empty}, {@multicast1, 0xffd200}, {@private=0xfffffffd}]}, @timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@multicast2, 0x3}, {@private=0xa010101}, {}, {@broadcast}]}, @noop, @noop, @lsrr={0x83, 0xb, 0x0, [@private, @rand_addr]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 4.205933036s ago: executing program 3 (id=692): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r1, 0xf, 0x0, 0x0, 0x0, 0x0, 0x2100, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.699982627s ago: executing program 4 (id=682): socket$kcm(0x21, 0x2, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @remote}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast2}}, 0x80, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) close(0x4) 3.699237517s ago: executing program 3 (id=694): recvfrom$inet_nvme(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000000)="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", 0xfc) 3.505346534s ago: executing program 3 (id=683): sendmsg$ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000002880)={0x784, 0x0, 0x0, 0x0, 0x0, {}, [@ETHTOOL_A_WOL_MODES={0x28, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_VALUE={0x15, 0x4, "68423246556607d6b2efc7d6072813aa7b"}]}, @ETHTOOL_A_WOL_MODES={0x748, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x5, 0x5, "e0"}, @ETHTOOL_A_BITSET_VALUE={0x739, 0x4, "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"}]}]}, 0x784}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r0, 0x84, 0x14, &(0x7f0000003140)=""/4111, &(0x7f0000000000)=0x4) 3.30198239s ago: executing program 4 (id=684): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000008000095000040"]) 3.170168551s ago: executing program 3 (id=685): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'gre0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001480)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_SPORT={0x6}]}}}]}, 0x38}}, 0x0) 3.029320803s ago: executing program 3 (id=686): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x6cb, 0x81a7, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f0000000280)={0x0, 0x0, 0x6, {0x6, 0x0, "570b0259"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 2.948010819s ago: executing program 1 (id=687): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bca) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f0000000040)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r1, &(0x7f00000000c0), 0x2) read(r1, &(0x7f0000000100)=""/85, 0x55) 2.846526678s ago: executing program 2 (id=688): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r0, &(0x7f00000001c0)={0x24, @none={0x0, 0x1}}, 0x14) 2.846419978s ago: executing program 4 (id=690): r0 = socket$vsock_stream(0x28, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) io_uring_setup(0x64f1, &(0x7f00000003c0)) sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x3) close_range(r0, 0xffffffffffffffff, 0x0) 2.060262042s ago: executing program 2 (id=691): syz_usb_connect$uac1(0x0, 0xa6, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902940003010000000904000000010100000a2401000000020102132406000006000000400000000000000000000924030000000000000924050000f8431cfd09240300000000040004240504"], 0x0) 1.96701419s ago: executing program 4 (id=693): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x0) 1.72004073s ago: executing program 0 (id=695): r0 = socket$inet(0x2, 0x5, 0x0) setreuid(0xee00, 0x0) r1 = getuid() setreuid(0xee00, r1) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f00000001c0)=0x2, 0x4) 1.638195427s ago: executing program 4 (id=696): socket$nl_route(0x10, 0x3, 0x0) io_setup(0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) recvmmsg(r1, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) readv(r1, &(0x7f0000000300)=[{&(0x7f0000000000)=""/154, 0x9a}], 0x1) sendmsg$NL80211_CMD_SET_PMK(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0xfffffffffffffff6) syz_open_dev$sndctrl(0x0, 0x0, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) kcmp(0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85513, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) brk(0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000003c0)='./bus\x00', 0xe, &(0x7f0000000540)={[{@resuid}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1ff}}, {@stripe}, {@noblock_validity}]}, 0x3, 0x474, &(0x7f0000000600)="$eJzs3M1vFOUfAPDvTF/49QfYqvjCi1pFY+NLSwGVgwc1mnjAxEQPemzaQpCFGloTIUSLMXgyxsS78ei/wEkvxngy8ap3Q0IMF8DTmNmdobvb3W1YdlllP59k4Hlmpn2e7zzzdJ6ZZ3cCGFrT+T9JxI6I+D0iJmvZxh2ma/9dv3p+8cbV84tJZNk7fyXV/a5dPb9Y7lr+3PYiM5NGpJ8nsbdFuatnz51cqFSWzxT5ubVTH86tnj33/IlTC8eXjy+fPnjkyOFD8y+9ePCFnsSZ1+nank9W9u1+8/2v3zr6ZUP8TXH0yHSnjU9lWY+LG6yddelkdIAV4ZaMRETeXGPV/j8ZI7HReJPxxmcDrRzQV1mWZdvbb17PgLtYEo15XR6GRXmhz+9/y6V5EPBK/4YfA3fl1doNUB739WKpbRmNtNhnrOn+tpemI+K99b+/zZfoz3MIAIAGP+Tjn+dajf/SeLBuv3uKuaGpiLg3IiYi4v6I2BURD0RU930oIh5uU062rfX65kmSzeOf9HL30W0tH/+9XMxtNY7/ytFfTI0UuZ3V+MeSYycqyweKYzITY9vy/HyHMn58/bev2m2rH//lS15+ORYs6nF5tOnYLS2sLdxOzPWuXIjYM9oq/uTmTEASEbsjYk+XZZx45vt97bZtij9f2RB/Bz2YZ8q+i3i61v7r0RR/Kek8Pzn3v6gsH5grz4rNfvn14tvtyt+6/fsrb///tzz/b8Y/ldTP167eehkX//ii7T1Nt+f/ePJuNT1erPt4YW3tzHzEeHK0Vun69Qc3frbMl/vn8c/sb93/74uNI7E3IvKT+JGIeDQiHivq/nhEPBER+zvE//NrT37Qffz9lce/dEvtv5EYj+Y1rRMjJ3+61K78Iv4bndv/cDU1U6zZ+u/f0qWIxlqUp1BzBbs/cgAAAPDfkUbEjkjS2ZvpNJ2drX1efldEWllZXXv22MpHp5dq3xGYirG0fNI1Wfc8dL545lLLX4iI2kcLyu2HiufG34xMVPOziyuVpUEHD0Nue5v+n/tzZNC1A/rO97VgeHXf/9d7Wg/gznP9h+Gl/8PwqvX/hqd9ExvJ69ld9q4aoE6r6/+nA6gHcOc19X/TfjBE3P/D8Grb/+/mN/8AVa7/MJRWJzZ9Jb51ItptKn/TFi8BGLpEjP0rqnH7iSxp2biRDrpiw5OYavn+jf4mBvt3CQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoFf+CQAA//9bK982") mkdir(0x0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) 1.637911647s ago: executing program 0 (id=697): r0 = eventfd2(0x0, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.59077686s ago: executing program 1 (id=698): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r4, 0x29, 0x24, &(0x7f00000000c0)=0x5, 0x4) syz_emit_ethernet(0x114e, &(0x7f0000000200)=ANY=[], 0x0) r5 = syz_open_dev$vcsa(&(0x7f0000000040), 0x1, 0x42) writev(r5, &(0x7f0000000580)=[{&(0x7f0000000100)='[', 0x1}], 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b405000000000000611034000000000063012c00000040009500000000040000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) socket$inet_tcp(0x2, 0x1, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) chdir(&(0x7f0000000000)='./file0\x00') open(&(0x7f0000000400)='./file0\x00', 0x400, 0x6a) lseek(r1, 0x100000000000000, 0x1) 410.425947ms ago: executing program 1 (id=699): syz_mount_image$xfs(&(0x7f00000000c0), &(0x7f0000009840)='./file0\x00', 0x300c0c5, &(0x7f0000000340), 0x9, 0x984b, &(0x7f00000130c0)="$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") 0s ago: executing program 0 (id=700): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546000677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289d01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5467a932b77674e802a0d42bc6099ad238af770b5ed8925161729298700000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3ac3209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b135ab6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809b5b9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed3957f813567f7a95435ac15fc0288d9b2a169cdcacc413b48dafb7a2c8cb482bac0ac559eaf39027ceb379a902d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385beef3282830689da6b53b263339863297771429d120000003341bf4abacac94500fca0493cf29b33dcc9ffffffffffffffd39f6ce0c6ff01589646efd1cf870cd7bb2366fdf870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1293b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd000c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c7df8be5877050c91301fb997316dbf17866fb84d4173731efe895ff2e1c55ef08235a0126e01254c44060926e90109b598502d3e959efc71f665c4d75cf2458e3542c9062ece84c99a861887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc74aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7ad333545794f37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f4df90400000000000000d6b2c5ea139376f24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8e3070000001e48418046c216c1f895778cb25122a2a998de0842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec84ac3571f02f647b3385b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba2f58ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df986741517abf11389b751f4e109b60000000000000000d6d5210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750890ae71555b3228b1bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288d139bd3da230ed05a8fe64680b0a3f9f2dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30235b9100000000a55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854356cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c776f4b4ce07e1c6fa66fcfc7a228805f76785efc0ceb1c8e5729c66418d169fc03aa18854693ad2a182068e1e3a0e2505bc7f41019645466ac96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7e478950aa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab848753203b458b97ec1afb079b4b4ba686fcdf240430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7db3c4be290159f6bcd75f0dda9de5532e71ae9e48b0ed1254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6c30ebc660309e1e245b0fdf9743af932cd6db49a47613808bad959719c0000000000378ac2e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6ca0400966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e3030108000000000000c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bffef97dcecc467ace456597685c5870d25f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4cba6e6390a9f302c6eb2df7766411bef0ebb5000000000006065d6735eb7a00e127c0000000000000000000000bfb0bba79344643b1d8daa9f38e4b62c1e2af68c6f5054b078acd74b4a9c944e4505da485a3a4154387a0a88372091cd397b09c5888a06431df3f68abf0b366c4d5f8bea7b29c257ed756dff7a21c6b661cbdd43de65afd7f661d5c84f915c90e3d6ea012b68b787eb01d8320000000000000060176dacba0ec503a37fae6b472ec369c79ee6a420c0fd8d8d82fe136d5af6c30bfeb0a7275babfdb96a127aa9386e0671c6454245a18c1c8c49552cff5d27b547cdc34c0858c77a47a9ff86ee9fbd9ceda428716a4218821176d8067997527230fa67d26950d3e4f2750fa7c872874ad3a2d11f9f6eb08e6d7b6fa257b04d8ce36360f524e3dfd2211641f3d2637d86b80681eca50ce0eecafdd22d41fa515c15591e70ded4b70efac3cb42fb352d82e8f7573e8ed8248da356fa91a252976d3a4d8c1843a8d5bb7f5f1028453a0562a3ea93117076dd4940b7df50d78289fe66197525f6095f8662d232970bef61b03fa83027963a1a2e07cfee30c0d0b4c5877f93b3637ca21eab5afcf5d4638dfe8f9202aaad51c979049dd76d65368cbd4187d9f74257c7c4a23ac4a34eec5aa17e78c5167216f5e72138d20f8325dd5f8f96c32189c904eaef580987f1ce601a7cdc35461db9981ac42f9e24b0699bbe4e3d986e38952b0b7938eefd9e7a292bbb66367ad77045fdc18855c81c031dedd185c723238373fc698d676791d04f1ff5f0825a6619e844882f31ed190233d58ecee949e310bf2b1a51b8a33ae65a06d2b6ad386bf8dc49dd328bcd75d1843a13d68560175a18af7efc3c0f20e32f84f6aaaf000000000000000000000013a6c66bce74a8fb9092023df695da2714a7933d699d42de2bc4a85e0a0e22228290a7a7553ab93a16e42453ed86869a02df2f47d4088fac1772d3cd955c81cbf91c2ca7942942f61723b558079b82547844f92df2499c4b2c2ef2539e5daa8d8727baaa6b5755e6f83bbfca00000000000000000000007925d0f1256330b9e2aa9a18cea8e009116f63c6c7d8f7f95bf0f6731e5eb1dcdc534f357b9f08e7a9a3aebeca145d695053b5bef004ca24e6c57ed10f01488d38b8b0b68d93e3cf630837915d518fde2115e66615786fe7b9216de958119cf762cac77ac829a02f48e72c0d2841880b2c"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) connect$bt_l2cap(r0, &(0x7f0000000240)={0x1f, 0x21, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4}, 0x6) ioctl$AUTOFS_IOC_CATATONIC(r2, 0x400443c8, 0x20000002) kernel console output (not intermixed with test programs): 381][ T4520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 216.718160][ T5633] 8021q: adding VLAN 0 to HW filter on device team0 [ 216.795042][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 216.816215][ T5786] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 216.823322][ T5786] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 216.840798][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 216.850847][ T22] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.858048][ T22] bridge0: port 1(bridge_slave_0) entered forwarding state [ 216.893671][ T5814] loop2: detected capacity change from 0 to 2048 [ 216.962718][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 216.973103][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 216.988882][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 217.005376][ T3686] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.012540][ T3686] bridge0: port 2(bridge_slave_1) entered forwarding state [ 217.019769][ T27] kauditd_printk_skb: 11 callbacks suppressed [ 217.019785][ T27] audit: type=1800 audit(1723289895.295:17): pid=5786 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.412" name="bus" dev="loop3" ino=10 res=0 errno=0 [ 217.020822][ T5814] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 217.026756][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 217.064625][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 217.073591][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 217.096743][ T5502] device veth0_vlan entered promiscuous mode [ 217.105757][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 217.117664][ T5814] ext4 filesystem being mounted at /52/file0 supports timestamps until 2038 (0x7fffffff) [ 217.140996][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 217.165104][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 217.173935][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 217.195075][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 217.242784][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 217.264742][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 217.273779][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 217.301843][ T4520] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 217.311699][ T4520] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 217.325479][ T4352] syz-executor: attempt to access beyond end of device [ 217.325479][ T4352] loop3: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 217.352364][ T4520] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 217.405508][ T4866] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 217.426033][ T4579] EXT4-fs (loop2): unmounting filesystem. [ 217.432010][ T4866] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 217.450002][ T5502] device veth1_vlan entered promiscuous mode [ 217.493104][ T3774] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 217.514810][ T3774] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 217.557171][ T3774] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 217.574830][ T3774] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 217.608420][ T5633] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 217.620492][ T4566] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 217.639313][ T5825] loop2: detected capacity change from 0 to 512 [ 217.655264][ T4566] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 217.687682][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 217.695786][ T5825] EXT4-fs: Ignoring removed i_version option [ 217.701822][ T5825] EXT4-fs: Ignoring removed nobh option [ 217.716564][ T5825] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 217.717467][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 217.784879][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 217.806670][ T5502] device veth0_macvtap entered promiscuous mode [ 217.826899][ T5825] EXT4-fs (loop2): 1 truncate cleaned up [ 217.832606][ T5825] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 217.891902][ T5502] device veth1_macvtap entered promiscuous mode [ 218.026571][ T4579] EXT4-fs (loop2): unmounting filesystem. [ 218.041115][ T5502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.120681][ T5502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.164406][ T5502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.214116][ T5502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.254007][ T5502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.314051][ T5502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.373956][ T5502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.403966][ T5502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.453561][ T5502] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 218.512014][ T5502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.543363][ T5502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.572312][ T5502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.613398][ T5502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.635390][ T5502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.687539][ T5502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.730892][ T5502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.766914][ T5502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.815547][ T5502] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 218.843622][ T4512] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 218.860597][ T4512] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 218.894955][ T4512] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 218.921998][ T4512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 218.951210][ T4512] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 218.978896][ T4512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 219.010204][ T5843] netlink: 8 bytes leftover after parsing attributes in process `syz.2.419'. [ 219.064555][ T5502] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.115026][ T5502] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.157918][ T5502] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.187321][ T5502] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.219918][ T4512] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 219.229154][ T4512] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 219.268726][ T5633] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 219.321932][ T5835] loop0: detected capacity change from 0 to 40427 [ 219.330381][ T5856] option changes via remount are deprecated (pid=5854 comm=syz.2.423) [ 219.365331][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 219.376640][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 219.385635][ T5835] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 219.413997][ T5835] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 219.497028][ T5835] F2FS-fs (loop0): invalid crc value [ 219.556895][ T4515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 219.575443][ T4515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 219.592045][ T5835] F2FS-fs (loop0): Found nat_bits in checkpoint [ 219.607213][ T5633] device veth0_vlan entered promiscuous mode [ 219.630649][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 219.640332][ T4515] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 219.658755][ T4515] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 219.663459][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 219.690515][ T5633] device veth1_vlan entered promiscuous mode [ 220.171091][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 220.191664][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 220.309280][ T5835] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 220.322026][ T5835] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 220.357229][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 220.369479][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 220.407147][ T4866] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 220.452064][ T4520] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 220.468235][ T4520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 220.490746][ T5633] device veth0_macvtap entered promiscuous mode [ 220.705544][ T5633] device veth1_macvtap entered promiscuous mode [ 221.493939][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 221.516637][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 221.627098][ T5633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.671595][ T5633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.702472][ T5633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.729709][ T5857] loop3: detected capacity change from 0 to 32768 [ 221.743641][ T5633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.754741][ T5633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.766769][ T5633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.787539][ T5633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.825106][ T5633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.841269][ T22] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 221.857029][ T5857] XFS (loop3): Mounting V5 Filesystem [ 221.868202][ T5633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.882966][ T5633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.905003][ T4423] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 221.946368][ T5633] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 221.961529][ T4423] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 221.980416][ T4520] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 222.004982][ T4520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 222.058546][ T5857] XFS (loop3): Ending clean mount [ 222.079014][ T5633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.093960][ T22] usb 5-1: Using ep0 maxpacket: 32 [ 222.132810][ T5633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.163574][ T5633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.188704][ T5633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.206848][ T5633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.244199][ T22] usb 5-1: New USB device found, idVendor=0458, idProduct=7006, bcdDevice=69.91 [ 222.250984][ T5633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.253277][ T22] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.273487][ T22] usb 5-1: config 0 descriptor?? [ 222.280469][ T5633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.292501][ T5633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.302692][ T5633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.313417][ T5633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.324590][ T4352] XFS (loop3): Unmounting Filesystem [ 222.325617][ T5633] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 222.336282][ T22] gspca_main: sunplus-2.14.0 probing 0458:7006 [ 222.342166][ T5633] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.352256][ T5633] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.366015][ T5633] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.377876][ T5633] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.389581][ T5888] device pim6reg1 entered promiscuous mode [ 222.526343][ T3053] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 222.535932][ T3053] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 222.843645][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.878725][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.933322][ T4518] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 222.983053][ T3879] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.012381][ T3879] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.056383][ T3774] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 223.584076][ T3774] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 223.773974][ T5751] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 223.850871][ T5901] loop3: detected capacity change from 0 to 40427 [ 223.916647][ T5901] F2FS-fs (loop3): invalid crc value [ 223.937355][ T5901] F2FS-fs (loop3): Found nat_bits in checkpoint [ 224.046554][ T4518] usb 5-1: USB disconnect, device number 8 [ 224.050579][ T5901] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 224.114799][ T3774] usb 2-1: New USB device found, idVendor=0c45, idProduct=60a8, bcdDevice=b5.55 [ 224.134114][ T3774] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.144339][ T5751] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 224.164015][ T5751] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 224.175346][ T3774] usb 2-1: Product: syz [ 224.179716][ T3774] usb 2-1: Manufacturer: syz [ 224.184649][ T3774] usb 2-1: SerialNumber: syz [ 224.191423][ T5751] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 224.212687][ T3774] usb 2-1: config 0 descriptor?? [ 224.219261][ T5751] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 224.232905][ T5751] usb 1-1: New USB device found, idVendor=057e, idProduct=2009, bcdDevice= 0.00 [ 224.242387][ T5751] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.261861][ T5751] usb 1-1: config 0 descriptor?? [ 224.269626][ T3774] gspca_main: sonixb-2.14.0 probing 0c45:60a8 [ 224.285596][ T4352] syz-executor: attempt to access beyond end of device [ 224.285596][ T4352] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 224.593720][ T27] audit: type=1326 audit(1723289902.865:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5916 comm="syz.2.436" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcf87b779f9 code=0x0 [ 224.714245][ T3774] sonixb 2-1:0.0: Error writing register 01: -71 [ 224.734218][ T3774] sonixb: probe of 2-1:0.0 failed with error -71 [ 224.743116][ T3774] usb 2-1: USB disconnect, device number 4 [ 224.857006][ T5751] nintendo 0003:057E:2009.0009: hidraw0: USB HID v80.00 Device [HID 057e:2009] on usb-dummy_hcd.0-1/input0 [ 225.146830][ T5927] netlink: 32 bytes leftover after parsing attributes in process `syz.4.438'. [ 225.346336][ T5927] netlink: 32 bytes leftover after parsing attributes in process `syz.4.438'. [ 225.636247][ T5751] nintendo 0003:057E:2009.0009: failed reading SPI flash; ret=-38 [ 225.684200][ T5751] nintendo 0003:057E:2009.0009: using factory cal for left stick [ 225.721013][ T5751] nintendo 0003:057E:2009.0009: failed reading SPI flash; ret=-38 [ 225.738769][ T5751] nintendo 0003:057E:2009.0009: using factory cal for right stick [ 225.785827][ T5751] nintendo 0003:057E:2009.0009: failed reading SPI flash; ret=-38 [ 225.814157][ T5751] nintendo 0003:057E:2009.0009: Failed to read left stick cal, using defaults; e=-38 [ 225.837343][ T5751] nintendo 0003:057E:2009.0009: failed reading SPI flash; ret=-38 [ 225.862255][ T5751] nintendo 0003:057E:2009.0009: Failed to read right stick cal, using defaults; e=-38 [ 225.916332][ T5751] nintendo 0003:057E:2009.0009: failed reading SPI flash; ret=-38 [ 225.924727][ T5751] nintendo 0003:057E:2009.0009: using factory cal for IMU [ 225.938020][ T5751] nintendo 0003:057E:2009.0009: failed reading SPI flash; ret=-38 [ 225.973978][ T5751] nintendo 0003:057E:2009.0009: Failed to read IMU cal, using defaults; ret=-38 [ 225.983091][ T5751] nintendo 0003:057E:2009.0009: Unable to read IMU calibration data [ 226.020610][ T5751] nintendo 0003:057E:2009.0009: Failed to set report mode; ret=-38 [ 226.038928][ T5751] nintendo 0003:057E:2009.0009: Failed to initialize controller; ret=-38 [ 226.184068][ T5751] nintendo 0003:057E:2009.0009: probe - fail = -38 [ 226.236900][ T5751] nintendo: probe of 0003:057E:2009.0009 failed with error -38 [ 226.293008][ T5751] usb 1-1: USB disconnect, device number 6 [ 226.931973][ T5956] netlink: 16 bytes leftover after parsing attributes in process `syz.2.450'. [ 226.988768][ T5956] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 227.001370][ T5956] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 227.011804][ T5956] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 227.034013][ T5956] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 227.108697][ T5950] loop1: detected capacity change from 0 to 4096 [ 227.130701][ T5961] loop4: detected capacity change from 0 to 2048 [ 227.271325][ T5961] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 227.556611][ T5967] loop3: detected capacity change from 0 to 4096 [ 227.608483][ T5967] ntfs: (device loop3): load_attribute_list(): Cannot read attribute list since runlist is missing. [ 227.635496][ T5955] netlink: 'syz.4.449': attribute type 4 has an invalid length. [ 227.667781][ T5967] ntfs: (device loop3): ntfs_read_locked_inode(): Failed to load attribute list attribute. [ 227.702788][ T5967] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 227.753707][ T56] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 227.788525][ T5967] ntfs: (device loop3): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 227.814216][ T56] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 6 with error 28 [ 227.844039][ T5967] ntfs: (device loop3): ntfs_attr_find(): Inode is corrupt. Run chkdsk. [ 227.852553][ T5967] ntfs: (device loop3): ntfs_read_locked_attr_inode(): Failed with error code -5 while reading attribute inode (mft_no 0x0, type 0xb0, name_len 0). Marking corrupt inode and base inode 0x0 as bad. Run chkdsk. [ 227.873163][ T56] EXT4-fs (loop4): This should not happen!! Data will be lost [ 227.873163][ T56] [ 227.908759][ T56] EXT4-fs (loop4): Total free blocks count 0 [ 227.919148][ T5962] loop0: detected capacity change from 0 to 32768 [ 227.926822][ T56] EXT4-fs (loop4): Free/Dirty block details [ 227.932869][ T56] EXT4-fs (loop4): free_blocks=2415919104 [ 227.954424][ T5962] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 scanned by syz.0.452 (5962) [ 227.971023][ T5967] ntfs: (device loop3): load_system_files(): Failed to load $MFT/$BITMAP attribute. [ 227.997378][ T56] EXT4-fs (loop4): dirty_blocks=16 [ 228.005984][ T56] EXT4-fs (loop4): Block reservation details [ 228.013923][ T56] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 228.033513][ T5967] ntfs: (device loop3): ntfs_fill_super(): Failed to load system files. [ 228.047052][ T5502] EXT4-fs (loop4): unmounting filesystem. [ 228.077772][ T5962] BTRFS info (device loop0): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 228.126013][ T4518] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 228.194390][ T5962] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 228.241427][ T5962] BTRFS info (device loop0): force zlib compression, level 3 [ 228.294293][ T5962] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 228.344539][ T5962] BTRFS info (device loop0): use zstd compression, level 3 [ 228.351924][ T5962] BTRFS info (device loop0): enabling ssd optimizations [ 228.381591][ T5962] BTRFS info (device loop0): using free space tree [ 228.497600][ T5989] loop2: detected capacity change from 0 to 512 [ 228.797076][ T4518] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 228.882427][ T5989] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 229.007465][ T4518] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 229.105432][ T5989] ext4 filesystem being mounted at /69/file0 supports timestamps until 2038 (0x7fffffff) [ 229.292966][ T4518] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 229.364065][ T4518] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.484410][ T5976] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 229.762679][ T6022] tipc: Enabling of bearer rejected, failed to enable media [ 229.789958][ T4518] usb 2-1: USB disconnect, device number 5 [ 230.550880][ T5497] BTRFS info (device loop0): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 230.965370][ T5980] udevd[5980]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 231.387189][ T6037] loop3: detected capacity change from 0 to 2048 [ 231.429645][ T6037] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 232.107594][ T4579] EXT4-fs (loop2): unmounting filesystem. [ 232.114049][ T3650] Bluetooth: hci4: command 0x0406 tx timeout [ 232.217692][ T6040] loop1: detected capacity change from 0 to 1024 [ 232.559879][ T6051] loop0: detected capacity change from 0 to 512 [ 232.599015][ T6051] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 232.623773][ T6049] device bridge0 entered promiscuous mode [ 232.627474][ T6051] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 not in group (block 1)! [ 232.671993][ T6049] device bridge0 left promiscuous mode [ 232.734249][ T6051] EXT4-fs (loop0): group descriptors corrupted! [ 233.562034][ T6060] loop1: detected capacity change from 0 to 2048 [ 233.680840][ T6060] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 233.772846][ T3650] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 233.785467][ T3650] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 233.797951][ T33] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 233.825530][ T3650] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 233.837529][ T3650] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 233.846750][ T3650] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 233.860055][ T3650] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 233.864107][ T3053] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 233.953997][ T33] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 33 with error 28 [ 233.975470][ T6058] loop2: detected capacity change from 0 to 32768 [ 233.994143][ T6058] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.477 (6058) [ 234.000765][ T33] EXT4-fs (loop1): This should not happen!! Data will be lost [ 234.000765][ T33] [ 234.031683][ T6058] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 234.080466][ T33] EXT4-fs (loop1): Total free blocks count 0 [ 234.080464][ T6058] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 234.080527][ T6058] BTRFS info (device loop2): using free space tree [ 234.112683][ T33] EXT4-fs (loop1): Free/Dirty block details [ 234.144221][ T3053] usb 4-1: Using ep0 maxpacket: 16 [ 234.154368][ T33] EXT4-fs (loop1): free_blocks=2415919104 [ 234.160293][ T33] EXT4-fs (loop1): dirty_blocks=48 [ 234.179180][ T6067] loop0: detected capacity change from 0 to 8192 [ 234.188426][ T33] EXT4-fs (loop1): Block reservation details [ 234.225629][ T6067] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 234.250301][ T33] EXT4-fs (loop1): i_reserved_data_blocks=3 [ 234.264256][ T3053] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 234.274095][ T6067] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 234.274928][ T6067] REISERFS (device loop0): using ordered data mode [ 234.290464][ T3053] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 234.310904][ T3053] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 234.321162][ T6060] EXT4-fs (loop1): re-mounted. Quota mode: none. [ 234.328014][ T3053] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 234.340575][ T6067] reiserfs: using flush barriers [ 234.353649][ T6067] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 234.371128][ T6067] REISERFS (device loop0): checking transaction log (loop0) [ 234.385156][ T6067] REISERFS (device loop0): Using r5 hash to sort names [ 234.392773][ T6067] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 234.440015][ T6067] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 234.499749][ T6068] chnl_net:caif_netlink_parms(): no params data found [ 234.504315][ T3053] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 234.524016][ T3053] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.532265][ T3053] usb 4-1: Product: syz [ 234.536640][ T3053] usb 4-1: Manufacturer: syz [ 234.541278][ T3053] usb 4-1: SerialNumber: syz [ 234.564095][ T6058] BTRFS info (device loop2): enabling ssd optimizations [ 234.832183][ T3053] usblp 4-1:1.0: usblp0: USB Bidirectional printer dev 9 if 0 alt 0 proto 2 vid 0x0525 pid 0xA4A8 [ 234.955370][ T4579] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 234.985991][ T6068] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.064273][ T6068] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.072626][ T6068] device bridge_slave_0 entered promiscuous mode [ 235.146871][ T6068] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.196792][ T6068] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.222816][ T6068] device bridge_slave_1 entered promiscuous mode [ 235.288249][ T6102] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 235.334226][ T26] usb 4-1: USB disconnect, device number 9 [ 235.348224][ T26] usblp0: removed [ 235.478148][ T6068] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 235.563701][ T6068] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 235.703468][ T6068] team0: Port device team_slave_0 added [ 235.729901][ T6068] team0: Port device team_slave_1 added [ 235.785421][ T6110] syz.0.487[6110] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 235.785579][ T6110] syz.0.487[6110] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 235.954079][ T3654] Bluetooth: hci2: command tx timeout [ 236.031253][ T6068] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 236.054120][ T6068] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 236.151163][ T6068] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 236.190752][ T6122] loop2: detected capacity change from 0 to 512 [ 236.205265][ T6068] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 236.212290][ T6068] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 236.225148][ T6122] ext4: Unknown parameter 'noacl' [ 236.339312][ T6068] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 236.406481][ T3650] Bluetooth: hci1: Malformed Event: 0x02 [ 236.616442][ T6068] device hsr_slave_0 entered promiscuous mode [ 236.641156][ T6068] device hsr_slave_1 entered promiscuous mode [ 236.661921][ T6068] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 236.704074][ T6068] Cannot create hsr debugfs directory [ 236.715401][ T6113] loop1: detected capacity change from 0 to 40427 [ 236.732591][ T6113] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 236.743946][ T4512] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 236.772096][ T6113] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 236.861555][ T6113] F2FS-fs (loop1): Found nat_bits in checkpoint [ 236.944078][ T26] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 236.994309][ T4512] usb 3-1: Using ep0 maxpacket: 8 [ 237.026367][ T6113] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 237.044003][ T6113] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 237.057151][ T6120] loop3: detected capacity change from 0 to 32768 [ 237.078395][ T6120] XFS: attr2 mount option is deprecated. [ 237.086968][ T6120] XFS: ikeep mount option is deprecated. [ 237.092747][ T6120] XFS: noikeep mount option is deprecated. [ 237.114586][ T4512] usb 3-1: config 1 has an invalid descriptor of length 145, skipping remainder of the config [ 237.130234][ T6068] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.182566][ T6113] fscrypt (loop1, inode 3): Error -61 getting encryption context [ 237.223182][ T6120] XFS (loop3): Mounting V5 Filesystem [ 237.300727][ T6068] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.312316][ T4512] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 237.321971][ T4512] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.330984][ T26] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 237.343040][ T26] usb 1-1: config 0 has no interface number 0 [ 237.351895][ T4512] usb 3-1: Product: syz [ 237.373454][ T26] usb 1-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 237.386538][ T6120] XFS (loop3): Ending clean mount [ 237.390887][ T4512] usb 3-1: Manufacturer: syz [ 237.402530][ T26] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.413218][ T6120] XFS (loop3): Quotacheck needed: Please wait. [ 237.419745][ T4512] usb 3-1: SerialNumber: syz [ 237.495835][ T26] usb 1-1: config 0 descriptor?? [ 237.512082][ T6120] XFS (loop3): Quotacheck: Done. [ 237.513325][ T4512] cdc_ether: probe of 3-1:1.0 failed with error -22 [ 237.529998][ T4512] usbtest 3-1:1.0: couldn't get endpoints, -22 [ 237.541600][ T26] usb 1-1: selecting invalid altsetting 1 [ 237.548933][ T4512] usbtest: probe of 3-1:1.0 failed with error -22 [ 237.561507][ T26] dvb_ttusb_budget: ttusb_init_controller: error [ 237.572081][ T26] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 237.654352][ T6068] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.662901][ T26] DVB: Unable to find symbol cx22700_attach() [ 237.766506][ T26] DVB: Unable to find symbol tda10046_attach() [ 237.773207][ T26] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 237.810987][ T26] usb 1-1: USB disconnect, device number 7 [ 237.880685][ T4352] XFS (loop3): Unmounting Filesystem [ 237.926558][ T6068] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.038024][ T3650] Bluetooth: hci2: command tx timeout [ 238.274341][ T22] usb 3-1: USB disconnect, device number 10 [ 238.427690][ T27] audit: type=1326 audit(1723289916.705:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6148 comm="syz.0.498" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7d437779f9 code=0x0 [ 238.504277][ T3053] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 238.556899][ T6068] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 238.574593][ T6155] netlink: 'syz.3.495': attribute type 4 has an invalid length. [ 238.704626][ T6068] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 238.757728][ T6160] netlink: 20 bytes leftover after parsing attributes in process `syz.3.495'. [ 238.771406][ T6068] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 238.787174][ T6155] netlink: 'syz.3.495': attribute type 17 has an invalid length. [ 238.826096][ T6155] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 238.864259][ T3053] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 238.878530][ T3053] usb 2-1: config 179 has no interface number 0 [ 238.892744][ T3053] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 1029, setting to 64 [ 238.911864][ T3053] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 65535, setting to 64 [ 238.933087][ T3053] usb 2-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 238.965053][ T6068] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 238.979882][ T3053] usb 2-1: config 179 interface 65 has no altsetting 0 [ 238.994927][ T3053] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 239.014067][ T3053] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.064374][ T6146] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 239.078430][ T6146] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 239.137837][ T3053] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input11 [ 239.172903][ T6163] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 239.234433][ T26] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 239.335368][ T6146] loop1: detected capacity change from 0 to 8 [ 239.410046][ T3053] usb 2-1: USB disconnect, device number 6 [ 239.420862][ T6068] 8021q: adding VLAN 0 to HW filter on device bond0 [ 239.423979][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 239.449600][ T3053] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 239.494345][ T26] usb 4-1: Using ep0 maxpacket: 32 [ 239.610944][ T6068] 8021q: adding VLAN 0 to HW filter on device team0 [ 239.622831][ T3772] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 239.641944][ T3772] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 239.647297][ T6173] loop2: detected capacity change from 0 to 64 [ 239.745444][ T6173] MINIX-fs: bad superblock or unable to read bitmaps [ 239.771624][ T4520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 239.789375][ T4520] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 239.815669][ T4520] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.823106][ T4520] bridge0: port 1(bridge_slave_0) entered forwarding state [ 239.830891][ T26] usb 4-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 239.840401][ T26] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.848630][ T26] usb 4-1: Product: syz [ 239.871639][ T26] usb 4-1: Manufacturer: syz [ 239.878616][ T26] usb 4-1: SerialNumber: syz [ 239.888927][ T26] usb 4-1: config 0 descriptor?? [ 240.114215][ T3650] Bluetooth: hci2: command tx timeout [ 240.128353][ T4512] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 240.136926][ T4512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 240.172104][ T4512] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 240.185379][ T26] RobotFuzz Open Source InterFace, OSIF 4-1:0.0: version d4.15 found at bus 004 address 010 [ 240.230146][ T4512] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.237464][ T4512] bridge0: port 2(bridge_slave_1) entered forwarding state [ 240.283607][ T3710] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 240.303604][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 240.318558][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 240.434602][ T4520] usb 4-1: USB disconnect, device number 10 [ 240.554013][ T3710] usb 1-1: Using ep0 maxpacket: 16 [ 240.577823][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 240.606984][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 240.633702][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 240.651796][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 240.674683][ T3710] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 240.694891][ T3710] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 240.709049][ T3710] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 240.729513][ T3710] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 240.905751][ T3710] usb 1-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=b4.5b [ 240.923739][ T3710] usb 1-1: New USB device strings: Mfr=1, Product=130, SerialNumber=3 [ 240.979587][ T3710] usb 1-1: Product: syz [ 240.987454][ T33] device hsr_slave_0 left promiscuous mode [ 240.999578][ T33] device hsr_slave_1 left promiscuous mode [ 241.002835][ T3710] usb 1-1: Manufacturer: syz [ 241.023199][ T3710] usb 1-1: SerialNumber: syz [ 241.033269][ T3710] usb 1-1: config 0 descriptor?? [ 241.046238][ T33] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 241.061636][ T33] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 241.084826][ T3710] usb 1-1: NFC: intf ffff88807ddac000 id ffffffff8dbda1e0 [ 241.167489][ T33] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 241.180631][ T33] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 241.199480][ T33] device bridge_slave_1 left promiscuous mode [ 241.215352][ T33] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.235277][ T33] device bridge_slave_0 left promiscuous mode [ 241.247517][ T33] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.292944][ T3710] usb 1-1: USB disconnect, device number 8 [ 241.358672][ T33] device veth1_macvtap left promiscuous mode [ 241.368424][ T33] device veth0_macvtap left promiscuous mode [ 241.375582][ T33] device veth1_vlan left promiscuous mode [ 241.381716][ T33] device veth0_vlan left promiscuous mode [ 242.194414][ T3650] Bluetooth: hci2: command tx timeout [ 242.771389][ T33] team0 (unregistering): Port device team_slave_1 removed [ 242.850759][ T33] team0 (unregistering): Port device team_slave_0 removed [ 242.926552][ T33] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 242.987031][ T33] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 244.140090][ T33] bond0 (unregistering): Released all slaves [ 244.305342][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 244.318495][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 244.345084][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 244.370270][ T6187] netlink: 8 bytes leftover after parsing attributes in process `syz.2.508'. [ 244.393096][ T3053] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 244.412320][ T3053] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 244.471801][ T6068] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 245.393781][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 245.405650][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 245.414186][ T3053] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 245.457497][ T6068] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 245.661202][ T3053] usb 1-1: Using ep0 maxpacket: 8 [ 246.025174][ T3053] usb 1-1: New USB device found, idVendor=05f9, idProduct=4002, bcdDevice=a9.13 [ 246.056023][ T3053] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.096574][ T3053] usb 1-1: Product: syz [ 246.100806][ T3053] usb 1-1: Manufacturer: syz [ 246.136255][ T3053] usb 1-1: SerialNumber: syz [ 246.163400][ T3053] usb 1-1: config 0 descriptor?? [ 246.312617][ T6208] loop3: detected capacity change from 0 to 32768 [ 246.325502][ T6201] loop2: detected capacity change from 0 to 40427 [ 246.352511][ T6208] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.518 (6208) [ 246.426439][ T6201] F2FS-fs (loop2): invalid crc value [ 246.484243][ T4866] usb 1-1: USB disconnect, device number 9 [ 246.497593][ T6201] F2FS-fs (loop2): Found nat_bits in checkpoint [ 246.522014][ T6208] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 246.563636][ T6208] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 246.603235][ T6208] BTRFS info (device loop3): setting nodatacow, compression disabled [ 246.643823][ T6208] BTRFS info (device loop3): setting datacow [ 246.674475][ T6208] BTRFS info (device loop3): doing ref verification [ 246.681379][ T6208] BTRFS info (device loop3): force clearing of disk cache [ 246.705977][ T6208] BTRFS info (device loop3): turning off barriers [ 246.744067][ T6201] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 246.764463][ T6208] BTRFS info (device loop3): enabling ssd optimizations [ 246.766672][ T3053] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 246.771444][ T6208] BTRFS info (device loop3): using spread ssd allocation scheme [ 246.842211][ T3053] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 246.879461][ T6208] BTRFS info (device loop3): not using ssd optimizations [ 246.904049][ T6208] BTRFS info (device loop3): not using spread ssd allocation scheme [ 246.946190][ T6208] BTRFS info (device loop3): using free space tree [ 246.973755][ T4579] syz-executor: attempt to access beyond end of device [ 246.973755][ T4579] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 246.974745][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 247.089954][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 247.177349][ T6068] device veth0_vlan entered promiscuous mode [ 247.240483][ T6068] device veth1_vlan entered promiscuous mode [ 247.371469][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 247.384764][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 247.393039][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 247.429185][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 247.448470][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 247.451784][ T6208] BTRFS info (device loop3): rebuilding free space tree [ 247.479033][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 247.511758][ T6068] device veth0_macvtap entered promiscuous mode [ 247.557027][ T6068] device veth1_macvtap entered promiscuous mode [ 247.619073][ T27] audit: type=1800 audit(1723289925.895:20): pid=6208 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.518" name="bus" dev="loop3" ino=263 res=0 errno=0 [ 247.660613][ T6068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 247.767758][ T6068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.824983][ T6068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 247.886512][ T6068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.917221][ T6068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 247.959550][ T6068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.014101][ T6068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.064154][ T6068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.134078][ T6068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.199742][ T6068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.272359][ T6068] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 248.329242][ T4512] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 248.346379][ T4512] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 248.384141][ T4512] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 248.584348][ T4512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 248.615269][ T6068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.955098][ T6068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.494086][ T6068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 249.526195][ T6068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.564064][ T6068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 249.583988][ T6068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.606213][ T6068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 249.628285][ T6068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.655858][ T6068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 249.674136][ T6068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.696140][ T6068] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 249.716825][ T3053] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 249.731908][ T3053] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 249.766328][ T6068] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.802749][ T6068] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.831831][ T6068] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.840819][ T4352] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 249.861480][ T6068] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.632682][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 250.691416][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 250.756179][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 250.766341][ T3879] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 250.766436][ T3879] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 250.774151][ T4520] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 251.117901][ T3654] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 251.128911][ T3654] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 251.140669][ T3654] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 251.151928][ T3654] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 251.160866][ T3654] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 251.168240][ T3654] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 251.222273][ T6267] loop4: detected capacity change from 0 to 512 [ 251.259279][ T6267] EXT4-fs (loop4): Test dummy encryption mode enabled [ 251.307696][ T6267] EXT4-fs error (device loop4): __ext4_fill_super:5399: inode #2: comm syz.4.475: casefold flag without casefold feature [ 251.321989][ T6267] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 251.360491][ T6267] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 251.599168][ T4520] usb 3-1: new low-speed USB device number 11 using dummy_hcd [ 251.732456][ T6267] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 251.896756][ T33] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.037916][ T6272] loop3: detected capacity change from 0 to 32768 [ 252.305185][ T4518] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 252.341913][ T6272] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.529 (6272) [ 252.374434][ T4520] usb 3-1: config index 0 descriptor too short (expected 1307, got 27) [ 252.606282][ T4520] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 252.644232][ T4520] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 252.663658][ T4520] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 252.703665][ T4520] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 252.763066][ T6272] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 252.800913][ T6068] EXT4-fs (loop4): unmounting filesystem. [ 252.814150][ T4518] usb 1-1: Using ep0 maxpacket: 16 [ 252.822311][ T33] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.823608][ T6272] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 252.911439][ T6272] BTRFS info (device loop3): turning off barriers [ 252.918451][ T6272] BTRFS info (device loop3): max_inline at 20 [ 252.932844][ T6272] BTRFS info (device loop3): use zlib compression, level 3 [ 252.942469][ T6272] BTRFS info (device loop3): force clearing of disk cache [ 252.953823][ T6260] chnl_net:caif_netlink_parms(): no params data found [ 252.986037][ T6272] BTRFS info (device loop3): disabling free space tree [ 253.009257][ T6272] BTRFS info (device loop3): allowing degraded mounts [ 253.017061][ T4520] usb 3-1: string descriptor 0 read error: -22 [ 253.023364][ T4520] usb 3-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 253.026493][ T6272] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 253.033115][ T4520] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.061933][ T6272] BTRFS info (device loop3): use zstd compression, level 3 [ 253.070102][ T6272] BTRFS info (device loop3): disabling tree log [ 253.082367][ T4520] usb 3-1: config 0 descriptor?? [ 253.089691][ T6272] BTRFS info (device loop3): enabling auto defrag [ 253.098031][ T33] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.129771][ T6272] BTRFS info (device loop3): enabling ssd optimizations [ 253.137581][ T4518] usb 1-1: New USB device found, idVendor=2040, idProduct=d864, bcdDevice=37.62 [ 253.141382][ T6272] BTRFS info (device loop3): rebuilding free space tree [ 253.147697][ T4520] hub 3-1:0.0: bad descriptor, ignoring hub [ 253.163619][ T4520] hub: probe of 3-1:0.0 failed with error -5 [ 253.170061][ T4518] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.188512][ T4518] usb 1-1: Product: syz [ 253.195782][ T4520] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input12 [ 253.204122][ T3774] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 253.207195][ T4518] usb 1-1: Manufacturer: syz [ 253.220650][ T4518] usb 1-1: SerialNumber: syz [ 253.222353][ T6272] BTRFS info (device loop3): disabling free space tree [ 253.234181][ T3654] Bluetooth: hci3: command tx timeout [ 253.234872][ T6272] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 253.251498][ T4518] usb 1-1: config 0 descriptor?? [ 253.252834][ T6272] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 253.307774][ T4518] usb 1-1: dvb_usb_v2: found a 'Hauppauge 138xxx DVBT' in warm state [ 253.310681][ T33] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.346249][ T4520] input: failed to attach handler mousedev to device input12, error: -5 [ 253.361159][ T4518] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 253.388669][ T4520] usb 3-1: USB disconnect, device number 11 [ 253.404541][ T4518] dvbdev: DVB: registering new adapter (Hauppauge 138xxx DVBT) [ 253.412234][ T4518] usb 1-1: media controller created [ 253.457073][ T27] audit: type=1804 audit(1723289931.735:21): pid=6272 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.529" name="/newroot/100/bus/file1" dev="loop3" ino=260 res=1 errno=0 [ 253.471192][ T3774] usb 5-1: Using ep0 maxpacket: 8 [ 253.500469][ T4518] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 253.542775][ T4518] usb 1-1: selecting invalid altsetting 2 [ 253.549058][ T4518] set interface failed [ 253.549797][ T4518] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 253.562885][ T4518] error writing reg: 0xff, val: 0x00 [ 253.628290][ T4518] dvb_usb_mxl111sf: probe of 1-1:0.0 failed with error -22 [ 253.671422][ T4518] usb 1-1: USB disconnect, device number 10 [ 253.704483][ T4352] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 253.740841][ T6260] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.765372][ T6260] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.783940][ T6260] device bridge_slave_0 entered promiscuous mode [ 253.789177][ T3774] usb 5-1: New USB device found, idVendor=0abf, idProduct=3370, bcdDevice=9b.54 [ 253.816290][ T6260] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.819962][ T3774] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.830768][ T6260] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.843408][ T6260] device bridge_slave_1 entered promiscuous mode [ 253.848790][ T3774] usb 5-1: Product: syz [ 253.871202][ T3774] usb 5-1: Manufacturer: syz [ 253.877345][ T3774] usb 5-1: SerialNumber: syz [ 253.896310][ T3774] usb 5-1: config 0 descriptor?? [ 254.128273][ T6260] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 254.153093][ T6260] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 254.185973][ T3835] usb 5-1: USB disconnect, device number 9 [ 254.391409][ T6260] team0: Port device team_slave_0 added [ 254.421680][ T6315] netlink: 40 bytes leftover after parsing attributes in process `syz.0.536'. [ 254.448994][ T6260] team0: Port device team_slave_1 added [ 254.546316][ T6260] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 254.594047][ T6260] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 254.654198][ T6260] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 254.683329][ T6260] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 254.690827][ T6260] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 254.719435][ T6260] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 254.742206][ T6324] netlink: 'syz.2.539': attribute type 6 has an invalid length. [ 254.768635][ T6325] loop0: detected capacity change from 0 to 1024 [ 254.811566][ T6325] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 254.811721][ C0] eth0: bad gso: type: 1, size: 1408 [ 254.832035][ C0] eth0: bad gso: type: 1, size: 1408 [ 254.859339][ T6325] EXT4-fs (loop0): orphan cleanup on readonly fs [ 254.871412][ T6325] EXT4-fs error (device loop0): ext4_free_blocks:6213: comm syz.0.538: Freeing blocks not in datazone - block = 0, count = 4096 [ 254.889874][ T6325] EXT4-fs (loop0): 1 orphan inode deleted [ 254.896213][ T6325] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 255.014038][ T5497] EXT4-fs (loop0): unmounting filesystem. [ 255.041565][ C0] eth0: bad gso: type: 1, size: 1408 [ 255.111262][ T6260] device hsr_slave_0 entered promiscuous mode [ 255.145177][ T6260] device hsr_slave_1 entered promiscuous mode [ 255.304039][ T4520] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 255.324195][ T3650] Bluetooth: hci3: command tx timeout [ 255.374714][ T6340] netlink: 'syz.0.541': attribute type 21 has an invalid length. [ 255.393003][ T6340] netlink: 4 bytes leftover after parsing attributes in process `syz.0.541'. [ 255.641766][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.692681][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.764106][ T4520] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 256.242705][ T4520] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 256.524094][ T4520] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 256.568411][ T4520] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.596841][ T4520] usb 5-1: config 0 descriptor?? [ 256.793932][ T3835] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 257.001365][ T6362] loop0: detected capacity change from 0 to 4096 [ 257.002780][ T6344] loop3: detected capacity change from 0 to 40427 [ 257.038842][ T6362] ntfs3: loop0: Failed to load $MFT. [ 257.045293][ T3835] usb 3-1: Using ep0 maxpacket: 16 [ 257.078113][ T4520] kye 0003:0458:5013.000A: unknown main item tag 0x0 [ 257.093971][ T6344] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 257.108661][ T4520] kye 0003:0458:5013.000A: unknown main item tag 0x0 [ 257.132802][ T6344] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 257.142212][ T4520] kye 0003:0458:5013.000A: unknown main item tag 0x0 [ 257.162907][ T4520] kye 0003:0458:5013.000A: unknown main item tag 0x0 [ 257.165429][ T3835] usb 3-1: config 0 interface 0 has no altsetting 0 [ 257.179675][ T4520] kye 0003:0458:5013.000A: unknown main item tag 0x0 [ 257.202626][ T6344] F2FS-fs (loop3): Found nat_bits in checkpoint [ 257.204250][ T4520] kye 0003:0458:5013.000A: hidraw0: USB HID v0.00 Device [HID 0458:5013] on usb-dummy_hcd.4-1/input0 [ 257.228384][ T4520] kye 0003:0458:5013.000A: tablet-enabling feature report not found [ 257.240743][ T4520] kye 0003:0458:5013.000A: tablet enabling failed [ 257.266042][ T5533] I/O error, dev loop0, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 257.291701][ T3686] usb 5-1: USB disconnect, device number 10 [ 257.334307][ T3835] usb 3-1: New USB device found, idVendor=05ac, idProduct=abdf, bcdDevice=3d.49 [ 257.343409][ T3835] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.386290][ T3835] usb 3-1: Product: syz [ 257.390515][ T3835] usb 3-1: Manufacturer: syz [ 257.395255][ T3654] Bluetooth: hci3: command tx timeout [ 257.420823][ T3835] usb 3-1: SerialNumber: syz [ 257.459827][ T3835] usb 3-1: config 0 descriptor?? [ 257.481017][ T6344] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 257.505158][ T3835] ipheth 3-1:0.0: Unable to find endpoints [ 257.505383][ T6344] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 257.714260][ T3650] Bluetooth: hci0: command 0x0406 tx timeout [ 257.738291][ T4520] usb 3-1: USB disconnect, device number 12 [ 258.728712][ T27] audit: type=1326 audit(1723289936.915:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6392 comm="syz.4.554" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4b5dd779f9 code=0x0 [ 259.460616][ T6260] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 259.484247][ T3649] Bluetooth: hci3: command tx timeout [ 259.523632][ T6260] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 259.594608][ T6260] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 259.613984][ T3857] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 259.827483][ T6422] loop2: detected capacity change from 0 to 2048 [ 259.852574][ T6260] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 259.864202][ T3857] usb 5-1: Using ep0 maxpacket: 16 [ 259.994334][ T3857] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 260.194273][ T3857] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 260.212564][ T3857] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.263940][ T3857] usb 5-1: Product: syz [ 260.289068][ T3857] usb 5-1: Manufacturer: syz [ 260.298839][ T3857] usb 5-1: SerialNumber: syz [ 260.328756][ T3857] usb 5-1: config 0 descriptor?? [ 260.335210][ T33] device hsr_slave_0 left promiscuous mode [ 260.342668][ T33] device hsr_slave_1 left promiscuous mode [ 260.373263][ T3649] Bluetooth: hci0: unexpected event for opcode 0x0c23 [ 260.384958][ T3857] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input13 [ 260.394424][ T33] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 260.448641][ T6432] loop2: detected capacity change from 0 to 64 [ 260.456924][ T33] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 260.474138][ T7] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 260.515054][ T33] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 260.560978][ T33] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 260.620856][ T33] device bridge_slave_1 left promiscuous mode [ 260.644428][ T33] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.708470][ T33] device bridge_slave_0 left promiscuous mode [ 260.717814][ T33] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.788675][ T33] device hsr_slave_0 left promiscuous mode [ 260.844181][ T7] usb 1-1: config index 0 descriptor too short (expected 3133, got 61) [ 260.858763][ T33] device hsr_slave_1 left promiscuous mode [ 260.866354][ T7] usb 1-1: config 0 has an invalid interface number: 156 but max is 1 [ 260.883990][ T7] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 260.911383][ T7] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 260.924448][ T7] usb 1-1: config 0 has no interface number 0 [ 260.930603][ T7] usb 1-1: config 0 interface 156 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 260.940983][ T3857] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 260.949365][ T7] usb 1-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 260.970867][ T7] usb 1-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 260.991861][ T7] usb 1-1: config 0 interface 156 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 261.012399][ T7] usb 1-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 261.032019][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.057360][ T7] usb 1-1: config 0 descriptor?? [ 261.062784][ T33] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 261.071500][ T33] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 261.081830][ T33] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 261.096151][ T7] gspca_main: spca561-2.14.0 probing abcd:cdee [ 261.105862][ T33] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 261.133756][ T33] device bridge_slave_1 left promiscuous mode [ 261.141718][ T33] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.156649][ T3835] usb 5-1: USB disconnect, device number 11 [ 261.196459][ T3774] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 261.221861][ T33] device bridge_slave_0 left promiscuous mode [ 261.244398][ T33] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.296081][ T6448] loop4: detected capacity change from 0 to 128 [ 261.324502][ T3857] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 261.351257][ T3857] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 261.374196][ T7] spca561: probe of 1-1:0.156 failed with error -22 [ 261.400754][ T7] usb 1-1: MIDIStreaming interface descriptor not found [ 261.424233][ T3857] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 261.454165][ T3774] usb 4-1: Using ep0 maxpacket: 8 [ 261.459594][ T3857] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 261.553033][ T7] usb 1-1: USB disconnect, device number 11 [ 261.579418][ T3774] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 261.614776][ T3857] usb 3-1: New USB device found, idVendor=044f, idProduct=b653, bcdDevice= 0.00 [ 262.367594][ T3774] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 262.383795][ T3857] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.394260][ T3774] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.404913][ T3857] usb 3-1: config 0 descriptor?? [ 262.411004][ T3774] usb 4-1: config 0 descriptor?? [ 262.456294][ T3774] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 262.541375][ T33] device veth1_macvtap left promiscuous mode [ 262.614302][ T33] device veth0_macvtap left promiscuous mode [ 262.620939][ T33] device veth1_vlan left promiscuous mode [ 262.900068][ T33] device veth0_vlan left promiscuous mode [ 263.406726][ T3857] thrustmaster 0003:044F:B653.000B: unknown main item tag 0x0 [ 263.453544][ T3857] thrustmaster 0003:044F:B653.000B: unknown main item tag 0x0 [ 263.483686][ T6461] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 263.499264][ T33] device veth1_macvtap left promiscuous mode [ 263.505802][ T33] device veth0_macvtap left promiscuous mode [ 263.510557][ T3857] thrustmaster 0003:044F:B653.000B: unknown main item tag 0x0 [ 263.511944][ T33] device veth1_vlan left promiscuous mode [ 263.527091][ T6461] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 264.186182][ T33] device veth0_vlan left promiscuous mode [ 264.228128][ T3857] thrustmaster 0003:044F:B653.000B: unknown main item tag 0x0 [ 264.241119][ T3857] thrustmaster 0003:044F:B653.000B: unknown main item tag 0x0 [ 264.262879][ T3857] thrustmaster 0003:044F:B653.000B: unknown main item tag 0x0 [ 264.270928][ T3857] thrustmaster 0003:044F:B653.000B: unknown main item tag 0x0 [ 264.319923][ T3857] thrustmaster 0003:044F:B653.000B: hidraw0: USB HID v0.00 Device [HID 044f:b653] on usb-dummy_hcd.2-1/input0 [ 264.344321][ T3857] thrustmaster 0003:044F:B653.000B: no inputs found [ 264.391661][ T3857] usb 3-1: USB disconnect, device number 13 [ 264.484154][ T3774] gspca_vc032x: reg_w err -71 [ 264.489957][ T3774] vc032x: probe of 4-1:0.0 failed with error -71 [ 264.524469][ T3774] usb 4-1: USB disconnect, device number 11 [ 265.492597][ T6490] loop3: detected capacity change from 0 to 40427 [ 265.518204][ T6490] F2FS-fs (loop3): invalid crc value [ 265.552524][ T33] team0 (unregistering): Port device team_slave_1 removed [ 265.553025][ T6490] F2FS-fs (loop3): Found nat_bits in checkpoint [ 265.627280][ T33] team0 (unregistering): Port device team_slave_0 removed [ 265.682675][ T6490] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 265.693317][ T33] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 265.766041][ T4352] syz-executor: attempt to access beyond end of device [ 265.766041][ T4352] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 265.805003][ T33] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 266.612741][ T33] bond0 (unregistering): Released all slaves [ 266.881410][ T33] bond1 (unregistering): Released all slaves [ 267.390075][ T33] team0 (unregistering): Port device team_slave_1 removed [ 267.450726][ T33] team0 (unregistering): Port device team_slave_0 removed [ 267.508870][ T33] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 267.563727][ T33] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 268.171690][ T33] bond0 (unregistering): Released all slaves [ 268.408083][ T6482] device syzkaller0 entered promiscuous mode [ 268.845764][ T6508] loop4: detected capacity change from 0 to 4096 [ 268.979513][ T6508] ntfs3: loop4: Failed to load $MFT. [ 272.013495][ T6513] netlink: 12 bytes leftover after parsing attributes in process `syz.3.580'. [ 272.024513][ T6513] tc_dump_action: action bad kind [ 272.176406][ T6260] 8021q: adding VLAN 0 to HW filter on device bond0 [ 272.246951][ T4518] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 272.264986][ T4518] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 272.302620][ T6260] 8021q: adding VLAN 0 to HW filter on device team0 [ 272.443589][ T4518] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 272.461887][ T4518] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 272.501337][ T4518] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.508562][ T4518] bridge0: port 1(bridge_slave_0) entered forwarding state [ 272.531086][ T4518] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 272.541340][ T4518] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 272.564602][ T4518] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.571895][ T4518] bridge0: port 2(bridge_slave_1) entered forwarding state [ 272.631078][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 272.642474][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 272.652225][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 272.688566][ T6553] device bond1 entered promiscuous mode [ 272.695953][ T6553] 8021q: adding VLAN 0 to HW filter on device bond1 [ 272.730288][ T4514] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 272.753116][ T4514] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 272.774046][ T4518] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 272.795027][ T4514] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 272.809801][ T4514] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 272.819701][ T4514] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 272.864109][ T6556] netlink: 'syz.3.596': attribute type 10 has an invalid length. [ 272.871889][ T6556] netlink: 40 bytes leftover after parsing attributes in process `syz.3.596'. [ 272.888075][ T6556] bridge0: port 3(hsr_slave_1) entered blocking state [ 272.895941][ T6556] bridge0: port 3(hsr_slave_1) entered disabled state [ 272.905784][ T6556] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 272.964989][ T3857] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 272.975022][ T3857] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 272.983537][ T3857] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 273.036390][ T4518] usb 5-1: Using ep0 maxpacket: 16 [ 273.045672][ T3857] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 273.334193][ T4518] usb 5-1: New USB device found, idVendor=2040, idProduct=d864, bcdDevice=37.62 [ 273.364166][ T4518] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.372232][ T4518] usb 5-1: Product: syz [ 273.393911][ T4518] usb 5-1: Manufacturer: syz [ 273.404258][ T4518] usb 5-1: SerialNumber: syz [ 273.428889][ T4518] usb 5-1: config 0 descriptor?? [ 273.477427][ T4518] usb 5-1: dvb_usb_v2: found a 'Hauppauge 138xxx DVBT' in warm state [ 273.502184][ T4518] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 273.544167][ T4518] dvbdev: DVB: registering new adapter (Hauppauge 138xxx DVBT) [ 273.551828][ T4518] usb 5-1: media controller created [ 273.606970][ T4518] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 273.647442][ T6260] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 273.695472][ T4518] usb 5-1: selecting invalid altsetting 2 [ 273.722085][ T4518] set interface failed [ 273.722124][ T4518] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 273.763561][ T4518] error writing reg: 0xff, val: 0x00 [ 273.782764][ T6558] loop0: detected capacity change from 0 to 32768 [ 273.786935][ T6260] device veth0_vlan entered promiscuous mode [ 273.810111][ T6558] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.587 (6558) [ 273.840731][ T4518] dvb_usb_mxl111sf: probe of 5-1:0.0 failed with error -22 [ 273.859447][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 273.880168][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 273.895638][ T4518] usb 5-1: USB disconnect, device number 12 [ 273.911415][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 273.931072][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 273.951379][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 273.971695][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 273.990890][ T6260] device veth1_vlan entered promiscuous mode [ 274.020190][ T6558] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 274.041304][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 274.050551][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 274.054136][ T6558] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 274.073064][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 274.084012][ T6558] BTRFS info (device loop0): setting nodatacow, compression disabled [ 274.108665][ T6558] BTRFS info (device loop0): setting datacow [ 274.123943][ T6558] BTRFS info (device loop0): doing ref verification [ 274.130616][ T6558] BTRFS info (device loop0): force clearing of disk cache [ 274.142865][ T6545] loop2: detected capacity change from 0 to 65536 [ 274.163658][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 274.164051][ T6558] BTRFS info (device loop0): turning off barriers [ 274.175778][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 274.216398][ T6260] device veth0_macvtap entered promiscuous mode [ 274.232021][ T6260] device veth1_macvtap entered promiscuous mode [ 274.244104][ T6558] BTRFS info (device loop0): enabling ssd optimizations [ 274.251172][ T6558] BTRFS info (device loop0): using spread ssd allocation scheme [ 274.263301][ T6545] XFS (loop2): Mounting V5 Filesystem [ 274.291205][ T6558] BTRFS info (device loop0): not using ssd optimizations [ 274.314919][ T6260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 274.335897][ T6545] XFS (loop2): Ending clean mount [ 274.344202][ T6558] BTRFS info (device loop0): not using spread ssd allocation scheme [ 274.352256][ T6558] BTRFS info (device loop0): using free space tree [ 274.355487][ T6545] XFS (loop2): Quotacheck needed: Please wait. [ 274.395297][ T6260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.415787][ T6260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 274.437449][ T6260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.443593][ T6545] XFS (loop2): Quotacheck: Done. [ 274.473948][ T6260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 274.513634][ T6260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.552285][ T6558] BTRFS info (device loop0): rebuilding free space tree [ 274.554008][ T6260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 274.594222][ T6260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.617763][ T6260] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 274.656354][ T27] audit: type=1800 audit(1723289952.935:23): pid=6558 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.587" name="bus" dev="loop0" ino=263 res=0 errno=0 [ 274.679762][ T3774] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 274.720401][ T3774] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 274.730874][ T3774] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 274.776868][ T3774] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 274.811081][ T6260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 274.842413][ T6260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.873066][ T6260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 274.899692][ T6260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.933957][ T6260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 274.963899][ T6260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.983966][ T6260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 275.014203][ T6260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.043212][ T6260] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 275.074521][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 275.083412][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 275.117495][ T6260] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.134094][ T6260] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.142892][ T6260] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.173895][ T6260] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.290336][ T4565] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 276.335383][ T4565] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 276.358869][ T6602] loop3: detected capacity change from 0 to 256 [ 276.360706][ T5497] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 276.376607][ T4424] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 276.390134][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 276.401033][ T4424] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 276.431596][ T6602] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 276.488563][ T3773] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 276.603549][ T3710] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 276.859503][ T3710] usb 5-1: Using ep0 maxpacket: 16 [ 277.154145][ T3710] usb 5-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 277.163431][ T3710] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.194102][ T3710] usb 5-1: Product: syz [ 277.198347][ T3710] usb 5-1: Manufacturer: syz [ 277.202983][ T3710] usb 5-1: SerialNumber: syz [ 277.249285][ T3710] usb 5-1: config 0 descriptor?? [ 277.315798][ T3710] visor 5-1:0.0: Sony Clie 3.5 converter detected [ 277.641939][ T6617] loop0: detected capacity change from 0 to 164 [ 277.667279][ T6617] isofs_fill_super: bread failed, dev=loop0, iso_blknum=41, block=164 [ 277.714218][ T3774] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 277.747367][ T3710] usb 5-1: clie_3_5_startup: get interface number failed: -32 [ 277.758855][ T3710] visor: probe of 5-1:0.0 failed with error -32 [ 277.843746][ T6630] loop0: detected capacity change from 0 to 512 [ 277.903792][ T5982] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 278.085439][ T3774] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 278.085484][ T3774] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.091732][ T3774] usb 4-1: config 0 descriptor?? [ 278.125797][ T3774] cp210x 4-1:0.0: cp210x converter detected [ 279.187311][ T3774] usb 4-1: cp210x converter now attached to ttyUSB0 [ 279.199473][ T3774] usb 4-1: USB disconnect, device number 12 [ 279.210331][ T3774] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 279.229044][ T3774] cp210x 4-1:0.0: device disconnected [ 279.544064][ T3649] Bluetooth: hci4: unexpected event for opcode 0x2003 [ 279.653114][ T6646] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 280.416025][ T6652] netlink: 12 bytes leftover after parsing attributes in process `syz.1.608'. [ 280.529963][ T4516] usb 5-1: USB disconnect, device number 13 [ 280.672410][ T6660] loop3: detected capacity change from 0 to 736 [ 280.780694][ T6664] loop0: detected capacity change from 0 to 256 [ 280.823288][ T6662] loop4: detected capacity change from 0 to 1024 [ 280.831599][ T6662] hfsplus: unable to parse mount options [ 281.057559][ T6664] FAT-fs (loop0): Directory bread(block 64) failed [ 281.387428][ T6666] erofs: (device loop4): erofs_read_superblock: cannot find valid erofs superblock [ 281.954099][ T6354] wlan1: Trigger new scan to find an IBSS to join [ 281.976209][ T6664] FAT-fs (loop0): Directory bread(block 65) failed [ 282.003473][ T6664] FAT-fs (loop0): Directory bread(block 66) failed [ 282.134314][ T6664] FAT-fs (loop0): Directory bread(block 67) failed [ 282.141020][ T6664] FAT-fs (loop0): Directory bread(block 68) failed [ 282.199446][ T6664] FAT-fs (loop0): Directory bread(block 69) failed [ 282.236410][ T6664] FAT-fs (loop0): Directory bread(block 70) failed [ 282.255340][ T6670] loop1: detected capacity change from 0 to 128 [ 282.286425][ T6664] FAT-fs (loop0): Directory bread(block 71) failed [ 282.293096][ T6664] FAT-fs (loop0): Directory bread(block 72) failed [ 282.352814][ T6664] FAT-fs (loop0): Directory bread(block 73) failed [ 282.762883][ T6677] loop1: detected capacity change from 0 to 2048 [ 282.840438][ T6677] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 283.226912][ T3649] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 283.238292][ T3649] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 283.263077][ T3649] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 283.271320][ T3649] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 283.301462][ T3649] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 283.309018][ T3649] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 283.556398][ T3649] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 283.565545][ T3649] Bluetooth: hci4: Injecting HCI hardware error event [ 283.579351][ T3650] Bluetooth: hci4: hardware error 0x00 [ 283.674004][ T27] audit: type=1326 audit(1723289961.945:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6696 comm="syz.3.636" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f27e2b779f9 code=0x0 [ 284.646288][ T9] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.791959][ T9] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.829189][ T6694] chnl_net:caif_netlink_parms(): no params data found [ 284.956382][ T9] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.142820][ T9] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.285735][ T6694] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.293033][ T6694] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.308244][ T6706] loop1: detected capacity change from 0 to 32768 [ 285.344159][ T6706] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.629 (6706) [ 285.365258][ T6694] device bridge_slave_0 entered promiscuous mode [ 285.394532][ T3649] Bluetooth: hci5: command tx timeout [ 285.423321][ T6694] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.437456][ T6706] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 285.454626][ T6694] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.490427][ T6694] device bridge_slave_1 entered promiscuous mode [ 285.507182][ T3649] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 285.508580][ T6706] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 285.527398][ T3649] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 285.537389][ T3649] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 285.547850][ T3649] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 285.555345][ T6706] BTRFS info (device loop1): setting nodatasum [ 285.561680][ T6706] BTRFS info (device loop1): enabling auto defrag [ 285.568655][ T6706] BTRFS info (device loop1): disabling tree log [ 285.575319][ T6706] BTRFS info (device loop1): using free space tree [ 285.582161][ T3649] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 285.591373][ T3649] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 285.711458][ T6694] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 285.755478][ T6706] BTRFS info (device loop1): enabling ssd optimizations [ 285.788840][ T6694] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 285.821302][ T6704] loop3: detected capacity change from 0 to 32768 [ 285.848369][ T6704] XFS: attr2 mount option is deprecated. [ 285.854209][ T6704] XFS: ikeep mount option is deprecated. [ 285.859900][ T6704] XFS: noikeep mount option is deprecated. [ 285.874011][ T3650] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 285.924314][ T6260] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 285.952654][ T6704] XFS (loop3): Mounting V5 Filesystem [ 286.015173][ T6694] team0: Port device team_slave_0 added [ 286.023766][ T6694] team0: Port device team_slave_1 added [ 286.220938][ T6694] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 286.242684][ T6704] XFS (loop3): Ending clean mount [ 286.246323][ T6694] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 286.279066][ T6704] XFS (loop3): Quotacheck needed: Please wait. [ 286.300974][ T6694] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 286.367080][ T6704] XFS (loop3): Quotacheck: Done. [ 286.455473][ T6694] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 286.462802][ T6694] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 286.503483][ T6694] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 286.623086][ T6750] netlink: 28 bytes leftover after parsing attributes in process `syz.0.637'. [ 286.671212][ T4352] XFS (loop3): Unmounting Filesystem [ 286.834362][ T33] wlan1: Trigger new scan to find an IBSS to join [ 286.913991][ T3773] usb 2-1: new low-speed USB device number 7 using dummy_hcd [ 287.006248][ T6694] device hsr_slave_0 entered promiscuous mode [ 287.020205][ T6694] device hsr_slave_1 entered promiscuous mode [ 287.028433][ T6694] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 287.036843][ T6694] Cannot create hsr debugfs directory [ 287.276066][ T6718] chnl_net:caif_netlink_parms(): no params data found [ 287.287655][ T3773] usb 2-1: LPM exit latency is zeroed, disabling LPM. [ 287.383729][ T3773] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 287.475934][ T3650] Bluetooth: hci5: command tx timeout [ 287.645835][ T3650] Bluetooth: hci2: command tx timeout [ 287.844563][ T3773] usb 2-1: string descriptor 0 read error: -22 [ 287.908709][ T3773] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 288.011461][ T3773] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.043243][ T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 288.173792][ T6718] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.182116][ T6718] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.191311][ T6718] device bridge_slave_0 entered promiscuous mode [ 288.215108][ T6718] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.227450][ T6718] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.237402][ T6718] device bridge_slave_1 entered promiscuous mode [ 288.311885][ T6718] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 288.320331][ T4516] usb 2-1: USB disconnect, device number 7 [ 288.381721][ T6718] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 288.523736][ T6694] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.543178][ T6694] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 288.818906][ T6694] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.870933][ T6694] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 288.899625][ T6718] team0: Port device team_slave_0 added [ 289.095584][ T6718] team0: Port device team_slave_1 added [ 289.359294][ T6694] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.398665][ T6694] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 289.624040][ T3650] Bluetooth: hci5: command tx timeout [ 289.747605][ T3650] Bluetooth: hci2: command tx timeout [ 290.357694][ T6694] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.368236][ T6694] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 290.564139][ T6718] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 290.571140][ T6718] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 290.571869][ T6821] loop0: detected capacity change from 0 to 1024 [ 290.606529][ T6718] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 290.652480][ T6718] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 290.665892][ T6718] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 290.679486][ T6822] loop1: detected capacity change from 0 to 128 [ 290.881038][ T6718] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 290.934557][ T9] device hsr_slave_0 left promiscuous mode [ 290.941409][ T9] device hsr_slave_1 left promiscuous mode [ 291.261608][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 291.386074][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 291.485991][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 291.524073][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 291.547649][ T9] device bridge_slave_1 left promiscuous mode [ 291.562691][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.634121][ T3650] Bluetooth: hci5: command tx timeout [ 291.719388][ T9] device bridge_slave_0 left promiscuous mode [ 291.734113][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.794208][ T3650] Bluetooth: hci2: command tx timeout [ 291.815195][ T9] device veth1_macvtap left promiscuous mode [ 291.821295][ T9] device veth0_macvtap left promiscuous mode [ 291.844158][ T9] device veth1_vlan left promiscuous mode [ 291.850010][ T9] device veth0_vlan left promiscuous mode [ 293.277071][ T152] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 293.379885][ T9] team0 (unregistering): Port device team_slave_1 removed [ 293.435296][ T9] team0 (unregistering): Port device team_slave_0 removed [ 293.489835][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 293.548619][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 293.663003][ T152] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 293.826256][ T152] usb 4-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice= 9.75 [ 293.835951][ T152] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.844359][ T152] usb 4-1: Product: syz [ 293.848557][ T152] usb 4-1: Manufacturer: syz [ 293.853160][ T152] usb 4-1: SerialNumber: syz [ 293.872444][ T152] usb 4-1: config 0 descriptor?? [ 293.884037][ T3650] Bluetooth: hci2: command tx timeout [ 294.054049][ T152] viperboard 4-1:0.0: version 0.00 found at bus 004 address 013 [ 294.095695][ T152] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100 [ 294.104547][ T152] viperboard-i2c: probe of viperboard-i2c.2.auto failed with error -5 [ 294.171683][ T152] usb 4-1: USB disconnect, device number 13 [ 294.341229][ T9] bond0 (unregistering): Released all slaves [ 294.622782][ T6718] device hsr_slave_0 entered promiscuous mode [ 294.658393][ T6718] device hsr_slave_1 entered promiscuous mode [ 294.675973][ T6718] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 294.696386][ T6718] Cannot create hsr debugfs directory [ 294.876574][ T6854] netlink: 'syz.0.656': attribute type 1 has an invalid length. [ 294.888313][ T6854] netlink: 'syz.0.656': attribute type 3 has an invalid length. [ 294.896974][ T6854] netlink: 76 bytes leftover after parsing attributes in process `syz.0.656'. [ 294.949642][ T6694] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 294.986168][ T3857] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 295.017324][ T6694] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 295.073582][ T6694] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 295.157066][ T6694] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 295.364292][ T3857] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 295.385271][ T3857] usb 2-1: config 1 has an invalid descriptor of length 110, skipping remainder of the config [ 295.413386][ T3857] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 295.439286][ T3857] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 101, changing to 10 [ 295.477765][ T3857] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 10100, setting to 1024 [ 295.624896][ T3857] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 295.641912][ T3857] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 295.666674][ T3857] usb 2-1: Product: syz [ 295.683391][ T3857] usb 2-1: Manufacturer: syz [ 295.764356][ T6852] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 295.805049][ T3857] cdc_wdm 2-1:1.0: skipping garbage [ 295.817182][ T3857] cdc_wdm 2-1:1.0: skipping garbage [ 295.851624][ T3857] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 295.874508][ T3857] cdc_wdm 2-1:1.0: Unknown control protocol [ 296.017970][ T6694] 8021q: adding VLAN 0 to HW filter on device bond0 [ 296.104224][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 296.114639][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 296.133962][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 296.140635][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 296.175371][ T3710] usb 2-1: USB disconnect, device number 8 [ 296.258910][ T6694] 8021q: adding VLAN 0 to HW filter on device team0 [ 296.304317][ T3857] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 296.318997][ T3857] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 296.384868][ T3773] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 296.417243][ T3773] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 296.441679][ T3773] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.448954][ T3773] bridge0: port 1(bridge_slave_0) entered forwarding state [ 296.471664][ T3773] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 296.498011][ T3773] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 296.508275][ T3773] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.515488][ T3773] bridge0: port 2(bridge_slave_1) entered forwarding state [ 296.542168][ T3857] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 296.556423][ T3857] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 296.567586][ T3857] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 296.585801][ T3857] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 296.608334][ T3857] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 296.724322][ T6694] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 296.784270][ T6694] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 296.836821][ T3773] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 296.866962][ T3773] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 296.885053][ T3773] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 296.922634][ T3773] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 296.949253][ T3773] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 296.967687][ T3773] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 296.981434][ T3773] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 297.054796][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 297.154345][ T4513] usb 2-1: new low-speed USB device number 9 using dummy_hcd [ 297.164128][ T3773] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 297.191131][ T6718] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 297.231976][ T6718] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 297.263338][ T6718] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 297.307087][ T6718] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 297.413990][ T3773] usb 1-1: Using ep0 maxpacket: 32 [ 297.571142][ T4513] usb 2-1: config index 0 descriptor too short (expected 1307, got 27) [ 297.594483][ T4513] usb 2-1: config 0 has an invalid interface number: 0 but max is -1 [ 297.602673][ T4513] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 297.613682][ T6718] 8021q: adding VLAN 0 to HW filter on device bond0 [ 297.643965][ T4513] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 297.663892][ T4513] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 297.691546][ T3857] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 297.699418][ T3773] usb 1-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 297.720468][ T3857] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 297.728750][ T3773] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.745501][ T3773] usb 1-1: Product: syz [ 297.756766][ T6718] 8021q: adding VLAN 0 to HW filter on device team0 [ 297.764006][ T3773] usb 1-1: Manufacturer: syz [ 297.768660][ T3773] usb 1-1: SerialNumber: syz [ 297.814416][ T3773] usb 1-1: config 0 descriptor?? [ 297.820760][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 297.842037][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 297.861426][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.868679][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 297.897720][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 297.914288][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 297.932385][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 297.953237][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 297.964521][ T4513] usb 2-1: string descriptor 0 read error: -22 [ 297.970870][ T4513] usb 2-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 297.984665][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.991811][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 297.999534][ T4513] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.025999][ T4513] usb 2-1: config 0 descriptor?? [ 298.033080][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 298.064817][ T4513] hub 2-1:0.0: bad descriptor, ignoring hub [ 298.070832][ T4513] hub: probe of 2-1:0.0 failed with error -5 [ 298.092312][ T3857] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 298.108120][ T4513] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input15 [ 298.112235][ T3857] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 298.131080][ T3773] RobotFuzz Open Source InterFace, OSIF 1-1:0.0: version d4.15 found at bus 001 address 012 [ 298.164033][ T3857] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 298.192074][ T3857] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 298.200386][ T4513] input: failed to attach handler mousedev to device input15, error: -5 [ 298.220616][ T6694] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 298.251817][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 298.301523][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 298.311217][ T3716] usb 2-1: USB disconnect, device number 9 [ 298.346800][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 298.404647][ T3773] usb 1-1: USB disconnect, device number 12 [ 298.405393][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 298.440442][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 298.487869][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 298.522864][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 298.533303][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 298.551780][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 298.566593][ T6718] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 298.602917][ T6893] netlink: 830 bytes leftover after parsing attributes in process `syz.3.661'. [ 298.644644][ T3857] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 298.653697][ T3857] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 298.697276][ T6694] device veth0_vlan entered promiscuous mode [ 298.715592][ T3773] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 298.723657][ T3773] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 298.781639][ T6694] device veth1_vlan entered promiscuous mode [ 298.874836][ T3773] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 298.883721][ T3773] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 298.911131][ T6694] device veth0_macvtap entered promiscuous mode [ 298.965227][ T6694] device veth1_macvtap entered promiscuous mode [ 299.060416][ T6694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 299.123911][ T6694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.136545][ T6908] loop0: detected capacity change from 0 to 512 [ 299.165169][ T6694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 299.194083][ T6694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.216953][ T6908] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 299.254648][ T6694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 299.291641][ T6908] EXT4-fs (loop0): orphan cleanup on readonly fs [ 299.297698][ T6694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.308036][ T6694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 299.318851][ T6694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.330892][ T6694] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 299.350103][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 299.359279][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 299.368558][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 299.384845][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 299.395876][ T6694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 299.411100][ T6694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.421941][ T6694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 299.432751][ T6694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.433486][ T6908] EXT4-fs error (device loop0): ext4_orphan_get:1422: comm syz.0.663: bad orphan inode 15 [ 299.442889][ T6694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 299.463404][ T6694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.475173][ T6694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 299.504299][ T6694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.540667][ T6694] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 299.552693][ T6908] ext4_test_bit(bit=14, block=18) = 1 [ 299.558665][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 299.572749][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 299.576391][ T6908] is_bad_inode(inode)=0 [ 299.606374][ T6908] NEXT_ORPHAN(inode)=1023 [ 299.610775][ T6908] max_ino=32 [ 299.614834][ T6694] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.633886][ T6908] i_nlink=0 [ 299.650683][ T6694] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.680149][ T6694] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.694202][ T6908] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2932: inode #15: comm syz.0.663: corrupted xattr block 19 [ 299.708923][ T6694] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.745128][ T3857] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 299.754221][ T3857] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 299.774539][ T6908] EXT4-fs warning (device loop0): ext4_evict_inode:299: xattr delete (err -117) [ 299.805464][ T6908] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 299.827491][ T6718] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 300.087901][ T5497] EXT4-fs (loop0): unmounting filesystem. [ 300.262107][ C0] eth0: bad gso: type: 1, size: 1408 [ 300.274168][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 300.282719][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 300.430730][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 300.453619][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 300.474776][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 300.524127][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 300.634397][ T4514] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 300.840060][ T6918] loop1: detected capacity change from 0 to 32768 [ 300.850076][ C0] eth0: bad gso: type: 1, size: 1408 [ 300.952491][ T6918] XFS (loop1): DAX unsupported by block device. Turning off DAX. [ 300.998485][ T6918] XFS (loop1): Mounting V5 filesystem in no-recovery mode. Filesystem will be inconsistent. [ 301.040370][ T4514] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 301.064813][ T4514] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 301.138714][ T6918] XFS (loop1): Quotacheck needed: Please wait. [ 301.138791][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 301.155160][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 301.264175][ T4514] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 301.279583][ T4514] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.308416][ T4514] usb 1-1: Product: syz [ 301.327971][ T4514] usb 1-1: Manufacturer: syz [ 301.344399][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 301.352952][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 301.364113][ T4514] usb 1-1: SerialNumber: syz [ 301.377120][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 301.395859][ T6918] XFS (loop1): Quotacheck: Done. [ 301.416952][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 301.431862][ T6718] device veth0_vlan entered promiscuous mode [ 301.445158][ T6962] netlink: 8 bytes leftover after parsing attributes in process `syz.2.670'. [ 301.488457][ T6718] device veth1_vlan entered promiscuous mode [ 301.545726][ T6935] loop3: detected capacity change from 0 to 32768 [ 301.605275][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 301.615738][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 301.631565][ T6935] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 scanned by syz.3.668 (6935) [ 301.660058][ T6934] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 301.673587][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 301.682132][ T6260] XFS (loop1): Unmounting Filesystem [ 301.709629][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 301.724893][ T6718] device veth0_macvtap entered promiscuous mode [ 301.767272][ T6718] device veth1_macvtap entered promiscuous mode [ 301.790381][ T6935] BTRFS info (device loop3): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 301.817646][ T6935] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 301.830920][ T6718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 301.863989][ T6935] BTRFS info (device loop3): force zlib compression, level 3 [ 301.871545][ T6935] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 301.874017][ T6718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.933206][ T6935] BTRFS info (device loop3): use zstd compression, level 3 [ 301.948526][ T6718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 301.959429][ T6935] BTRFS info (device loop3): enabling ssd optimizations [ 301.978721][ T6935] BTRFS info (device loop3): using free space tree [ 301.993268][ T6718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.034896][ T6718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 302.104500][ T6718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.157558][ T6718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 302.214592][ T6718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.275719][ T6718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 302.286532][ T6718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.327938][ T6934] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 302.529715][ T6718] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 302.559186][ T4514] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 302.566500][ T4514] cdc_ncm 1-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 302.574880][ T4514] cdc_ncm 1-1:1.0: setting rx_max = 2048 [ 302.706356][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 302.719337][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 302.732421][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 302.774846][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 302.794477][ T4514] cdc_ncm 1-1:1.0: setting tx_max = 184 [ 302.884645][ T4514] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 302.933438][ T4514] usb 1-1: USB disconnect, device number 13 [ 302.945155][ T4514] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM (NO ZLP) [ 303.102309][ T6718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 303.133518][ T6718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.171119][ T6718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 303.209809][ T6718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.234129][ T6718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 303.253885][ T6718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.273903][ T6718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 303.294667][ T6718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.334755][ T6718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 303.353645][ T6718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.384275][ T6718] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 303.393497][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 303.404314][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 303.416712][ T6718] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.431193][ T4352] BTRFS info (device loop3): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 303.451857][ T6718] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.481580][ T6718] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.555706][ T6718] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.629142][ T7003] loop0: detected capacity change from 0 to 64 [ 303.635158][ T3833] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 303.904163][ T3833] usb 2-1: Using ep0 maxpacket: 32 [ 304.039154][ T3833] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 304.143496][ T7010] loop0: detected capacity change from 0 to 256 [ 304.159047][ T6354] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 304.177981][ T6354] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 304.217680][ T3773] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 304.234224][ T3833] usb 2-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=8a.0a [ 304.252808][ T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 304.252945][ T3833] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.288816][ T3833] usb 2-1: Product: syz [ 304.300096][ T3833] usb 2-1: Manufacturer: syz [ 304.302030][ T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 304.312902][ T7010] FAT-fs (loop0): Directory bread(block 64) failed [ 304.313583][ T3833] usb 2-1: SerialNumber: syz [ 304.330367][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 304.344264][ T7010] FAT-fs (loop0): Directory bread(block 65) failed [ 304.354934][ T7010] FAT-fs (loop0): Directory bread(block 66) failed [ 304.362579][ T3833] usb 2-1: config 0 descriptor?? [ 304.392790][ T7010] FAT-fs (loop0): Directory bread(block 67) failed [ 304.426257][ T3833] xr_serial 2-1:0.0: failed to claim sibling interface: -16 [ 304.433747][ T3833] xr_serial: probe of 2-1:0.0 failed with error -16 [ 304.451696][ T7010] FAT-fs (loop0): Directory bread(block 68) failed [ 304.471886][ T7010] FAT-fs (loop0): Directory bread(block 69) failed [ 304.507042][ T7010] FAT-fs (loop0): Directory bread(block 70) failed [ 304.534038][ T7010] FAT-fs (loop0): Directory bread(block 71) failed [ 304.550932][ T7010] FAT-fs (loop0): Directory bread(block 72) failed [ 304.567638][ T7010] FAT-fs (loop0): Directory bread(block 73) failed [ 304.696956][ T4516] usb 2-1: USB disconnect, device number 10 [ 304.764064][ T3833] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 305.039479][ T6354] kworker/u4:13: attempt to access beyond end of device [ 305.039479][ T6354] loop0: rw=1, sector=1224, nr_sectors = 128 limit=256 [ 305.134309][ T3833] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 305.156014][ T3833] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 305.173908][ T3833] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 305.186509][ T7016] loop4: detected capacity change from 0 to 32768 [ 305.213047][ T3833] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 305.233301][ T3833] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.242491][ T7016] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.630 (7016) [ 305.256455][ T3833] usb 3-1: config 0 descriptor?? [ 305.338993][ T7016] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 305.361861][ T7016] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 305.422497][ T7016] BTRFS info (device loop4): using free space tree [ 305.465242][ T4516] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 305.630276][ T7016] BTRFS info (device loop4): enabling ssd optimizations [ 305.685704][ T27] audit: type=1800 audit(1723289983.965:25): pid=7016 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.630" name="bus" dev="loop4" ino=263 res=0 errno=0 [ 305.727164][ T3833] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 305.750627][ T4516] usb 1-1: Using ep0 maxpacket: 16 [ 305.760404][ T3833] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 305.782395][ T3833] plantronics 0003:047F:FFFF.000C: No inputs registered, leaving [ 305.862401][ T6718] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 305.862811][ T3833] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 305.895297][ T4516] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 305.904763][ T7046] netlink: 'syz.3.694': attribute type 3 has an invalid length. [ 305.921141][ T4516] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 305.943530][ T4516] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 305.972314][ T4516] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 305.989586][ T4516] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.036827][ T4516] usb 1-1: config 0 descriptor?? [ 306.099730][ T3685] usb 3-1: USB disconnect, device number 14 [ 306.161332][ T7049] sctp: [Deprecated]: syz.3.683 (pid 7049) Use of int in max_burst socket option. [ 306.161332][ T7049] Use struct sctp_assoc_value instead [ 306.536520][ T4516] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 306.576157][ T4516] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.000D/input/input17 [ 306.605577][ T4516] microsoft 0003:045E:07DA.000D: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 306.804384][ T3833] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 307.205737][ T3685] usb 1-1: USB disconnect, device number 14 [ 307.304821][ T3833] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 307.380761][ T3833] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 307.400167][ T7069] Unsupported ieee802154 address type: 0 [ 307.417193][ T3833] usb 4-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 307.430059][ T3833] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.463550][ T3833] usb 4-1: config 0 descriptor?? [ 307.744104][ T6254] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 308.048831][ T7083] loop4: detected capacity change from 0 to 512 [ 308.152201][ T6254] usb 3-1: Using ep0 maxpacket: 16 [ 308.170018][ T7083] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 309.021078][ T3833] hid-rmi 0003:06CB:81A7.000E: item fetching failed at offset 3/5 [ 309.029901][ T3833] hid-rmi 0003:06CB:81A7.000E: parse failed [ 309.035924][ T3833] hid-rmi: probe of 0003:06CB:81A7.000E failed with error -22 [ 309.051513][ T3833] usb 4-1: USB disconnect, device number 14 [ 309.145892][ T7083] EXT4-fs error (device loop4): ext4_orphan_get:1396: inode #11: comm syz.4.696: iget: bad extended attribute block 2047 [ 309.159327][ T7083] EXT4-fs error (device loop4): ext4_orphan_get:1401: comm syz.4.696: couldn't read orphan inode 11 (err -117) [ 309.173522][ T7083] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 309.274246][ T6254] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 309.304615][ T6254] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 309.535483][ T6254] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 309.571179][ T6254] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.613704][ T6254] usb 3-1: Product: syz [ 309.635515][ T6254] usb 3-1: Manufacturer: syz [ 309.669360][ T6254] usb 3-1: SerialNumber: syz [ 309.985360][ T7095] [ 309.987746][ T7095] ====================================================== [ 309.994784][ T7095] WARNING: possible circular locking dependency detected [ 310.001816][ T7095] 6.1.103-syzkaller #0 Not tainted [ 310.006941][ T7095] ------------------------------------------------------ [ 310.013980][ T7095] syz.3.701/7095 is trying to acquire lock: [ 310.019887][ T7095] ffff88814b948170 (&journal->j_barrier){+.+.}-{3:3}, at: jbd2_journal_lock_updates+0x2b0/0x380 [ 310.030387][ T7095] [ 310.030387][ T7095] but task is already holding lock: [ 310.037854][ T7095] ffff88814b93eb98 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_change_inode_journal_flag+0x1a0/0x6e0 [ 310.049220][ T7095] [ 310.049220][ T7095] which lock already depends on the new lock. [ 310.049220][ T7095] [ 310.059643][ T7095] [ 310.059643][ T7095] the existing dependency chain (in reverse order) is: [ 310.068687][ T7095] [ 310.068687][ T7095] -> #4 (&sbi->s_writepages_rwsem){++++}-{0:0}: [ 310.077154][ T7095] lock_acquire+0x1f8/0x5a0 [ 310.082216][ T7095] percpu_down_read+0x44/0x1a0 [ 310.087536][ T7095] ext4_writepages+0x1e5/0x3de0 [ 310.092943][ T7095] do_writepages+0x3a2/0x670 [ 310.098082][ T7095] filemap_fdatawrite_wbc+0x121/0x180 [ 310.104008][ T7095] filemap_write_and_wait_range+0x1a4/0x290 [ 310.110460][ T7095] ext4_change_inode_journal_flag+0x143/0x6e0 [ 310.117082][ T7095] ext4_fileattr_set+0xe04/0x1770 [ 310.122753][ T7095] vfs_fileattr_set+0x8f3/0xd30 [ 310.128161][ T7095] do_vfs_ioctl+0x1cd1/0x2a90 [ 310.133380][ T7095] __se_sys_ioctl+0x81/0x160 [ 310.138533][ T7095] do_syscall_64+0x3b/0xb0 [ 310.143504][ T7095] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 310.149951][ T7095] [ 310.149951][ T7095] -> #3 (mapping.invalidate_lock){++++}-{3:3}: [ 310.158412][ T7095] lock_acquire+0x1f8/0x5a0 [ 310.163467][ T7095] down_write+0x36/0x60 [ 310.168184][ T7095] ext4_setattr+0xec7/0x1a00 [ 310.173322][ T7095] notify_change+0xce3/0xfc0 [ 310.178464][ T7095] do_truncate+0x21c/0x300 [ 310.183429][ T7095] do_sys_ftruncate+0x2e2/0x380 [ 310.188831][ T7095] do_syscall_64+0x3b/0xb0 [ 310.193801][ T7095] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 310.200243][ T7095] [ 310.200243][ T7095] -> #2 (&sb->s_type->i_mutex_key#8){++++}-{3:3}: [ 310.208883][ T7095] lock_acquire+0x1f8/0x5a0 [ 310.213940][ T7095] down_read+0xad/0xa30 [ 310.218649][ T7095] ext4_bmap+0x4b/0x410 [ 310.223350][ T7095] bmap+0xa1/0xd0 [ 310.227536][ T7095] jbd2_journal_flush+0x5b5/0xc40 [ 310.233120][ T7095] ext4_ioctl+0x3986/0x5f60 [ 310.238175][ T7095] __se_sys_ioctl+0xf1/0x160 [ 310.243321][ T7095] do_syscall_64+0x3b/0xb0 [ 310.248289][ T7095] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 310.254731][ T7095] [ 310.254731][ T7095] -> #1 (&journal->j_checkpoint_mutex){+.+.}-{3:3}: [ 310.263539][ T7095] lock_acquire+0x1f8/0x5a0 [ 310.268621][ T7095] mutex_lock_io_nested+0x134/0xab0 [ 310.274406][ T7095] jbd2_journal_flush+0x29b/0xc40 [ 310.280002][ T7095] ext4_ioctl+0x3986/0x5f60 [ 310.285070][ T7095] __se_sys_ioctl+0xf1/0x160 [ 310.290227][ T7095] do_syscall_64+0x3b/0xb0 [ 310.295205][ T7095] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 310.301660][ T7095] [ 310.301660][ T7095] -> #0 (&journal->j_barrier){+.+.}-{3:3}: [ 310.309693][ T7095] validate_chain+0x1661/0x5950 [ 310.315101][ T7095] __lock_acquire+0x125b/0x1f80 [ 310.320519][ T7095] lock_acquire+0x1f8/0x5a0 [ 310.325683][ T7095] __mutex_lock+0x132/0xd80 [ 310.330839][ T7095] jbd2_journal_lock_updates+0x2b0/0x380 [ 310.337030][ T7095] ext4_change_inode_journal_flag+0x1a8/0x6e0 [ 310.343658][ T7095] ext4_fileattr_set+0xe04/0x1770 [ 310.349242][ T7095] vfs_fileattr_set+0x8f3/0xd30 [ 310.354660][ T7095] do_vfs_ioctl+0x1cd1/0x2a90 [ 310.359886][ T7095] __se_sys_ioctl+0x81/0x160 [ 310.365039][ T7095] do_syscall_64+0x3b/0xb0 [ 310.370014][ T7095] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 310.376466][ T7095] [ 310.376466][ T7095] other info that might help us debug this: [ 310.376466][ T7095] [ 310.386815][ T7095] Chain exists of: [ 310.386815][ T7095] &journal->j_barrier --> mapping.invalidate_lock --> &sbi->s_writepages_rwsem [ 310.386815][ T7095] [ 310.389666][ T7090] loop1: detected capacity change from 0 to 32768 [ 310.401733][ T7095] Possible unsafe locking scenario: [ 310.401733][ T7095] [ 310.401743][ T7095] CPU0 CPU1 [ 310.401749][ T7095] ---- ---- [ 310.401754][ T7095] lock(&sbi->s_writepages_rwsem); [ 310.401770][ T7095] lock(mapping.invalidate_lock); [ 310.401785][ T7095] lock(&sbi->s_writepages_rwsem); [ 310.401802][ T7095] lock(&journal->j_barrier); [ 310.401816][ T7095] [ 310.401816][ T7095] *** DEADLOCK *** [ 310.401816][ T7095] [ 310.401821][ T7095] 4 locks held by syz.3.701/7095: [ 310.401834][ T7095] #0: ffff88814b93c460 (sb_writers#4){.+.+}-{0:0}, at: mnt_want_write_file+0x5a/0x1f0 [ 310.401902][ T7095] #1: ffff88807435d440 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: vfs_fileattr_set+0x135/0xd30 [ 310.485399][ T7095] #2: ffff88807435d5e0 (mapping.invalidate_lock){++++}-{3:3}, at: ext4_change_inode_journal_flag+0x115/0x6e0 [ 310.497129][ T7095] #3: ffff88814b93eb98 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_change_inode_journal_flag+0x1a0/0x6e0 [ 310.508922][ T7095] [ 310.508922][ T7095] stack backtrace: [ 310.514811][ T7095] CPU: 1 PID: 7095 Comm: syz.3.701 Not tainted 6.1.103-syzkaller #0 [ 310.522797][ T7095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 310.532886][ T7095] Call Trace: [ 310.536189][ T7095] [ 310.539211][ T7095] dump_stack_lvl+0x1e3/0x2cb [ 310.543917][ T7095] ? nf_tcp_handle_invalid+0x642/0x642 [ 310.549414][ T7095] ? print_circular_bug+0x12b/0x1a0 [ 310.554635][ T7095] check_noncircular+0x2fa/0x3b0 [ 310.559592][ T7095] ? add_chain_block+0x850/0x850 [ 310.564544][ T7095] ? lockdep_lock+0x11f/0x2a0 [ 310.569342][ T7095] ? trace_event_buffer_commit+0x274/0x7f0 [ 310.575175][ T7095] ? _find_first_zero_bit+0xd0/0x100 [ 310.580492][ T7095] validate_chain+0x1661/0x5950 [ 310.585379][ T7095] ? __lock_acquire+0x125b/0x1f80 [ 310.590440][ T7095] ? reacquire_held_locks+0x660/0x660 [ 310.595885][ T7095] ? mark_lock+0x9a/0x340 [ 310.600268][ T7095] ? mark_lock+0x9a/0x340 [ 310.604629][ T7095] __lock_acquire+0x125b/0x1f80 [ 310.609527][ T7095] lock_acquire+0x1f8/0x5a0 [ 310.614049][ T7095] ? jbd2_journal_lock_updates+0x2b0/0x380 [ 310.619865][ T7095] ? read_lock_is_recursive+0x10/0x10 [ 310.625360][ T7095] ? __might_sleep+0xb0/0xb0 [ 310.629984][ T7095] ? release_firmware_map_entry+0x186/0x186 [ 310.635904][ T7095] __mutex_lock+0x132/0xd80 [ 310.640424][ T7095] ? jbd2_journal_lock_updates+0x2b0/0x380 [ 310.646253][ T7095] ? preempt_schedule+0xd9/0xe0 [ 310.651139][ T7095] ? preempt_schedule_common+0xa6/0xd0 [ 310.656629][ T7095] ? preempt_schedule+0xd9/0xe0 [ 310.661490][ T7095] ? jbd2_journal_lock_updates+0x2b0/0x380 [ 310.667382][ T7095] ? schedule_preempt_disabled+0x20/0x20 [ 310.673032][ T7095] ? mutex_lock_nested+0x10/0x10 [ 310.677989][ T7095] ? preempt_schedule_thunk+0x16/0x18 [ 310.683407][ T7095] jbd2_journal_lock_updates+0x2b0/0x380 [ 310.689056][ T7095] ? jbd2_journal_wait_updates+0x2d0/0x2d0 [ 310.694876][ T7095] ? rcu_is_watching+0x11/0xb0 [ 310.699642][ T7095] ? _find_next_bit+0x11b/0x120 [ 310.704544][ T7095] ? percpu_down_write+0x2b7/0x2f0 [ 310.709687][ T7095] ? rcu_is_watching+0x11/0xb0 [ 310.714455][ T7095] ext4_change_inode_journal_flag+0x1a8/0x6e0 [ 310.720549][ T7095] ext4_fileattr_set+0xe04/0x1770 [ 310.725636][ T7095] ? ext4_fileattr_get+0x200/0x200 [ 310.730822][ T7095] ? rwsem_write_trylock+0x166/0x210 [ 310.736127][ T7095] ? clear_nonspinnable+0x60/0x60 [ 310.741168][ T7095] ? memset+0x1f/0x40 [ 310.745166][ T7095] ? fileattr_fill_flags+0x1d0/0x300 [ 310.750575][ T7095] ? fscrypt_prepare_setflags+0x5d/0x220 [ 310.756228][ T7095] vfs_fileattr_set+0x8f3/0xd30 [ 310.761098][ T7095] ? copy_fsxattr_to_user+0x3a0/0x3a0 [ 310.766512][ T7095] do_vfs_ioctl+0x1cd1/0x2a90 [ 310.771213][ T7095] ? __x64_compat_sys_ioctl+0x80/0x80 [ 310.776593][ T7095] ? __lock_acquire+0x1f80/0x1f80 [ 310.781629][ T7095] ? lockdep_hardirqs_on+0x94/0x130 [ 310.786835][ T7095] ? __kmem_cache_free+0x25c/0x3c0 [ 310.791953][ T7095] ? tomoyo_path_number_perm+0x61b/0x7f0 [ 310.797593][ T7095] ? tomoyo_path_number_perm+0x68a/0x7f0 [ 310.803261][ T7095] ? tomoyo_path_number_perm+0x1f2/0x7f0 [ 310.808916][ T7095] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 310.814416][ T7095] ? __fget_files+0x28/0x4a0 [ 310.819043][ T7095] ? __fget_files+0x435/0x4a0 [ 310.823751][ T7095] ? __fget_files+0x28/0x4a0 [ 310.828362][ T7095] ? bpf_lsm_file_ioctl+0x5/0x10 [ 310.833312][ T7095] ? security_file_ioctl+0x7d/0xa0 [ 310.838479][ T7095] __se_sys_ioctl+0x81/0x160 [ 310.843096][ T7095] do_syscall_64+0x3b/0xb0 [ 310.847533][ T7095] ? clear_bhb_loop+0x45/0xa0 [ 310.852543][ T7095] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 310.858504][ T7095] RIP: 0033:0x7f27e2b779f9 [ 310.862932][ T7095] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 310.882550][ T7095] RSP: 002b:00007f27e39b0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 310.890973][ T7095] RAX: ffffffffffffffda RBX: 00007f27e2d05f80 RCX: 00007f27e2b779f9 [ 310.898961][ T7095] RDX: 0000000020000380 RSI: 0000000040086602 RDI: 0000000000000007 [ 310.906949][ T7095] RBP: 00007f27e2be58ee R08: 0000000000000000 R09: 0000000000000000 [ 310.914940][ T7095] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 310.922916][ T7095] R13: 0000000000000000 R14: 00007f27e2d05f80 R15: 00007ffee842cf38 [ 310.931006][ T7095] [ 310.947802][ T7092] Bluetooth: Found 0 CAPI controller(s) on device 10:aa:aa:aa:aa:aa [ 310.984109][ T6254] usb 3-1: 0:2 : does not exist [ 311.008006][ T6254] usb 3-1: USB disconnect, device number 15 [ 311.244516][ T5982] udevd[5982]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 311.489959][ T6718] EXT4-fs (loop4): unmounting filesystem. [ 317.075265][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.081621][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.153976][ T3650] Bluetooth: hci1: command 0x0406 tx timeout