last executing test programs: 8.476404322s ago: executing program 3 (id=1298): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905be3b"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000d80)={0x44, &(0x7f0000000b40), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 7.307249819s ago: executing program 2 (id=1303): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), r0) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fdffffff0f000000300007800800010005000000080002"], 0x44}, 0x1, 0x0, 0x0, 0x44}, 0x0) 7.143091858s ago: executing program 2 (id=1305): openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) select(0x20000088, &(0x7f0000000080), 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x300}, &(0x7f0000000200)={0x0, 0x2710}) r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) fchmodat(r4, &(0x7f00000000c0)='./file1\x00', 0xa1) getdents(r4, &(0x7f0000001080)=""/4096, 0x1000) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r5}, 0x10) 6.115556406s ago: executing program 2 (id=1310): bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000009980708b5192100c7980000000109021b00012000ac00090400000107000009090585cf", @ANYBLOB="a400"], 0x0) 6.001877186s ago: executing program 4 (id=1311): r0 = socket(0x10, 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x20881, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xc00}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000014c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r3, {0xf0, 0xfff2}, {}, {0x10}}, [@filter_kind_options=@f_basic={{0xa}, {0x8, 0x2, [@TCA_BASIC_POLICE={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0xc0c5}, 0x850) 5.830040675s ago: executing program 4 (id=1312): r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x2) creat(&(0x7f0000000000)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x1, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095000000000000005e0b5f619ae4f98ccd45e89fadf89313662652d312bc592fb3efa6840b37c47e5e00390a90d4dfe12303360185c827ea2fc24707bc44df5a8fcaf5bb665f0fc9ba1a0dbd084557d54d58f6bf4a75ec4414cde7913c7da1cca05c6e7e540b8bbb23f34fa6a03f714214f18d58df1376cc342f35b3903d521e80792675a37ce4164429589c6235be4c38279ed2aa9e7b482e59338131a1f0491f1dcbcf2138ad2ae0bc78604998ae286d4522cbc50296a92e35944f71db47661a63435cb19307bd329a9c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = syz_open_procfs(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_int(r7, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000240)=ANY=[@ANYBLOB='1-1,'], 0x31) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00'}) preadv(r6, &(0x7f0000000340), 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x26, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x9c}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r9 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000d40)=@newqdisc={0x7c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r11, {}, {0xffff, 0xffff}, {0x9}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, 0x0, 0x6}}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0x0, 0x4, 0x2, 0x1, 0x2, 0x8, 0x338}}, {0x4}}]}]}, 0x7c}}, 0x0) 4.709535262s ago: executing program 4 (id=1314): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) sched_setscheduler(0x0, 0x1, 0x0) getpid() syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") r1 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, 0xffffffffffffffff, 0x0, 0x3ffff) sendfile(r2, 0xffffffffffffffff, 0x0, 0x7ffff000) fallocate(r1, 0x0, 0x0, 0x1001f0) 4.546833012s ago: executing program 3 (id=1315): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb9c, &(0x7f00000017c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xa0242, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) recvmsg$unix(r0, 0x0, 0x60) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000140), 0x8) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x100000000000, 0x0, 0x3}, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 3.80853986s ago: executing program 2 (id=1316): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002800), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000140)) syz_mount_image$ext4(&(0x7f0000000140)='ext2\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000000180), 0xa, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x1, 0x0, &(0x7f0000001500)=""/200, &(0x7f0000000140)=""/90}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, &(0x7f0000000500)=""/4096}) syz_emit_ethernet(0x4e, &(0x7f0000002240)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd60108f8400183afffe8000000000000000000000000000bbfe8000000000000000000000000000aa920090780000000000000000000000000000ffffe000000278364f862c451cde59107622df65b13aa03909a25d6a15040f5357474d"], 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) rt_sigprocmask(0x0, &(0x7f0000000400)={[0xfffff7feffff7ffc]}, 0x0, 0x8) r2 = gettid() syz_mount_image$nilfs2(&(0x7f0000000180), &(0x7f0000000a80)='./file1\x00', 0x41c, &(0x7f00000001c0)=ANY=[], 0x1, 0xa75, &(0x7f0000000ac0)="$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") sendto$inet(0xffffffffffffffff, 0x0, 0x1d, 0x240480d5, 0x0, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/kexec_crash_loaded', 0x101600, 0x8) read$FUSE(r3, &(0x7f0000000200)={0x2020}, 0x2020) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010100"], 0x7c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d300000000000000800050001040f0f080003000000080008000f00f7ffffff08000600040000000800110009000000080002"], 0x5c}}, 0x0) pivot_root(&(0x7f00000001c0)='./file0/file0\x00', 0x0) tkill(r2, 0x12) openat$dlm_plock(0xffffff9c, 0x0, 0xb00, 0x0) futex(0x0, 0x3, 0x0, 0x0, 0x0, 0x2) r6 = gettid() tkill(r6, 0x15) 3.80828271s ago: executing program 4 (id=1317): mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0) syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f00000007c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10000, &(0x7f0000000940)=ANY=[@ANYBLOB="6e6c733d6370313235302c6e6f626172726965722c63726561746f723dbd3c66f52c7569643d", @ANYRESHEX=0x0, @ANYBLOB=',force,umask=000000005,\x00'/38], 0x3, 0x6a4, &(0x7f0000000100)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000280)='./file0/../file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1000, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x91905a, 0x0) mount$bind(&(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000dc0)='./file0/file0\x00', 0x0, 0x1145d10, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') read$FUSE(r0, &(0x7f00000029c0)={0x2020}, 0x2020) 3.64913705s ago: executing program 3 (id=1319): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x7, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000300000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0x7, 0x0, &(0x7f0000000200)="63eced8e46dc3f", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.595076219s ago: executing program 4 (id=1320): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000680)={0x501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000400)='kfree\x00'}, 0x10) syz_usb_connect(0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) socket$igmp(0x2, 0x3, 0x2) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x101000, 0x102) utimensat(r2, 0x0, &(0x7f0000000180)={{0x77359400}, {0x0, 0xffffffffffffffff}}, 0x0) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000a80)={{0x2, 0x0, @empty}, {0x0, @remote}, 0x4a, {}, 'lo\x00'}) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 3.481652249s ago: executing program 3 (id=1321): openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) select(0x20000088, &(0x7f0000000080), 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x300}, &(0x7f0000000200)={0x0, 0x2710}) r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) fchmodat(r4, &(0x7f00000000c0)='./file1\x00', 0xa1) getdents(r4, &(0x7f0000001080)=""/4096, 0x1000) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r5}, 0x10) 2.498253037s ago: executing program 2 (id=1323): close(0xffffffffffffffff) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x8}, @hci_rp_read_link_policy={{0x81}, {0x0, 0xc9, 0x400}}}}, 0xb) 2.430617306s ago: executing program 0 (id=1324): r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x2) creat(&(0x7f0000000000)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x1, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = syz_open_procfs(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_int(r7, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000240)=ANY=[@ANYBLOB='1-1,'], 0x31) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00'}) preadv(r6, &(0x7f0000000340), 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x26, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x9c}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r9 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000d40)=@newqdisc={0x7c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r11, {}, {0xffff, 0xffff}, {0x9}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, 0x0, 0x6}}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0x0, 0x4, 0x2, 0x1, 0x2, 0x8, 0x338}}, {0x4}}]}]}, 0x7c}}, 0x0) 2.430264086s ago: executing program 3 (id=1325): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) process_madvise(r1, &(0x7f0000000240)=[{&(0x7f0000001240)='a', 0x1}], 0x1, 0x3, 0x0) 2.345228136s ago: executing program 4 (id=1327): openat$ipvs(0xffffffffffffff9c, &(0x7f0000000400)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0) socket(0x400000000010, 0x3, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x34004000) socket$packet(0x11, 0x3, 0x300) socket$inet_sctp(0x2, 0x5, 0x84) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1) 2.130212186s ago: executing program 32 (id=1327): openat$ipvs(0xffffffffffffff9c, &(0x7f0000000400)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0) socket(0x400000000010, 0x3, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x34004000) socket$packet(0x11, 0x3, 0x300) socket$inet_sctp(0x2, 0x5, 0x84) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1) 2.123993806s ago: executing program 2 (id=1329): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000640)=ANY=[@ANYBLOB="120100003d9167204f17316a3f26cc0223010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 2.123636376s ago: executing program 3 (id=1330): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xd9, 0x72, 0xa4, 0x40, 0x20b7, 0x1540, 0xb75a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001080)={0x40, 0x21, 0x1, 0x4}}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f00000001c0)={0x40, 0x6, 0x1, "d6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000ec0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e80)={0x40, 0x21, 0x1, 0xff}}) 1.351051403s ago: executing program 1 (id=1331): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./bus\x00', 0x100c000, &(0x7f0000000500)={[{@nolazytime}, {@nouid32}, {@barrier_val}, {@debug}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}, {@resuid}, {@init_itable_val={'init_itable', 0x3d, 0x800}}, {@data_err_ignore}, {@min_batch_time={'min_batch_time', 0x3d, 0x6}}]}, 0xfc, 0x57c, &(0x7f0000000f80)="$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") mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, 0xffffffffffffffff, 0x0) open(0x0, 0x66842, 0x19) r0 = open(&(0x7f0000000040)='./bus\x00', 0x145142, 0x12) ftruncate(r0, 0x2007ffb) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000100000000000000040000850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) sendfile(r0, r0, 0x0, 0x800000009) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000040)={0x0, 0xfffff800}, 0x0) syz_clone3(0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x149a82, 0x0) epoll_pwait(r2, 0x0, 0x0, 0xa, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305839, &(0x7f0000000080)={0x0, 0x0, 0xbd9, 0x400000004}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 1.296494083s ago: executing program 0 (id=1332): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x7, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000300000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xb, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.233850233s ago: executing program 0 (id=1333): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000001540)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 751.048032ms ago: executing program 1 (id=1334): mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000005c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181942, 0x6) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0x5c, 0x1000, 0x5, 0x7, 0x1}) 663.039912ms ago: executing program 1 (id=1335): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, 0x0) 549.048972ms ago: executing program 1 (id=1336): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10802, &(0x7f00000000c0)={[{@journal_async_commit}, {@nodelalloc}, {@minixdf}, {@dax}, {@dax}]}, 0x0, 0x489, &(0x7f0000001280)="$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") 218.487431ms ago: executing program 1 (id=1337): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x2, 0x3, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000800)={{r0}, &(0x7f0000000780), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000010085000000010000001811", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000bc0)={r2, 0x0, 0x0}, 0x10) 180.939441ms ago: executing program 0 (id=1338): r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) mmap(&(0x7f00009ff000/0x600000)=nil, 0x600000, 0x0, 0x11, r0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffeffffff7ffe, &(0x7f0000000140)={0xa, 0x4e20, 0x7, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000003d00)="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", 0x100e}], 0x1}}], 0x1, 0x4000800) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000300)={&(0x7f0000a4c000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000340)=0x40) 174.972531ms ago: executing program 1 (id=1339): syz_read_part_table(0x60d, &(0x7f0000002240)="$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") syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000800)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r1}, 0x10) r2 = io_uring_setup(0x6b90, &(0x7f0000000200)={0x0, 0x4, 0xc2, 0x2, 0x1e1}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r2, 0xb, &(0x7f0000000080), 0x61) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r3, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 51.24189ms ago: executing program 0 (id=1340): r0 = msgget$private(0x0, 0x100) msgsnd(r0, &(0x7f0000002900)=ANY=[@ANYBLOB="0300000000000000"], 0xfd1, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000002880)={{0x2, 0x0, 0x0, 0x0, 0x0, 0x1a, 0x7}, 0x0, 0x0, 0x1, 0x1414, 0x10001, 0x4e, 0xffffffffffffffca, 0x8, 0x8580, 0x3, 0x0, 0xffffffffffffffff}) 0s ago: executing program 0 (id=1341): r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x2) creat(&(0x7f0000000000)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x1, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095000000000000005e0b5f619ae4f98ccd45e89fadf89313662652d312bc592fb3efa6840b37c47e5e00390a90d4dfe12303360185c827ea2fc24707bc44df5a8fcaf5bb665f0fc9ba1a0dbd084557d54d58f6bf4a75ec4414cde7913c7da1cca05c6e7e540b8bbb23f34fa6a03f714214f18d58df1376cc342f35b3903d521e80792675a37ce4164429589c6235be4c38279ed2aa9e7b482e59338131a1f0491f1dcbcf2138ad2ae0bc78604998ae286d4522cbc50296a92e35944f71db47661a63435cb19307bd329a9c873ad880"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = syz_open_procfs(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_int(r7, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000240)=ANY=[@ANYBLOB='1-1,'], 0x31) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00'}) preadv(r6, &(0x7f0000000340), 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x26, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x9c}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r9 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000d40)=@newqdisc={0x7c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r11, {}, {0xffff, 0xffff}, {0x9}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, 0x0, 0x6}}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0x0, 0x4, 0x2, 0x1, 0x2, 0x8, 0x338}}, {0x4}}]}]}, 0x7c}}, 0x0) kernel console output (not intermixed with test programs): S filesystem in 1th superblock [ 83.887406][ T4420] F2FS-fs (loop4): invalid crc value [ 83.945556][ T4420] F2FS-fs (loop4): Found nat_bits in checkpoint [ 84.016230][ T4420] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 84.023382][ T4420] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 84.678344][ T4438] xt_CT: No such helper "snmp" [ 85.348309][ T4444] device pim6reg1 entered promiscuous mode [ 85.435092][ T4427] loop3: detected capacity change from 0 to 40427 [ 86.310433][ T4427] F2FS-fs (loop3): invalid crc value [ 86.390979][ T4427] F2FS-fs (loop3): Found nat_bits in checkpoint [ 86.580507][ T4427] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 86.708823][ T4461] loop0: detected capacity change from 0 to 512 [ 86.836389][ T4461] EXT4-fs (loop0): Unrecognized mount option "permit_directio" or missing value [ 86.857779][ T4457] loop4: detected capacity change from 0 to 2048 [ 87.107660][ T4457] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 87.184438][ T4457] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.800241][ T4474] loop1: detected capacity change from 0 to 40427 [ 88.201718][ T4474] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 88.209491][ T4474] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 88.221365][ T4474] F2FS-fs (loop1): invalid crc value [ 88.419829][ T4474] F2FS-fs (loop1): Found nat_bits in checkpoint [ 88.851615][ T4474] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 88.858740][ T4474] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 89.503296][ T4502] loop2: detected capacity change from 0 to 256 [ 90.213317][ T4505] xt_CT: No such helper "snmp" [ 91.062702][ T4522] loop0: detected capacity change from 0 to 2048 [ 91.202952][ T4522] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 91.243280][ T4522] ext4 filesystem being mounted at /15/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.418958][ T4561] loop1: detected capacity change from 0 to 512 [ 93.496744][ T4557] loop3: detected capacity change from 0 to 40427 [ 93.526542][ T4561] EXT4-fs (loop1): Unrecognized mount option "permit_directio" or missing value [ 93.542983][ T4557] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 93.551178][ T4557] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 93.562943][ T4557] F2FS-fs (loop3): invalid crc value [ 93.621135][ T4557] F2FS-fs (loop3): Found nat_bits in checkpoint [ 93.679015][ T4557] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 93.686706][ T4557] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 95.856509][ T4585] pim6reg: tun_chr_ioctl cmd 1074025677 [ 95.899751][ T4580] xt_CT: No such helper "snmp" [ 95.974229][ T4585] pim6reg: linktype set to 805 [ 96.036040][ T4591] loop2: detected capacity change from 0 to 256 [ 97.196107][ T4614] sch_tbf: burst 824 is lower than device lo mtu (65550) ! [ 99.142722][ T4651] sch_tbf: burst 824 is lower than device lo mtu (65550) ! [ 100.514419][ T4679] loop4: detected capacity change from 0 to 256 [ 101.251272][ T4691] sch_tbf: burst 824 is lower than device lo mtu (65550) ! [ 102.387612][ T4713] loop3: detected capacity change from 0 to 256 [ 103.315194][ T4738] sch_tbf: burst 824 is lower than device lo mtu (65550) ! [ 104.418195][ T4751] loop3: detected capacity change from 0 to 256 [ 105.078410][ T4768] sch_tbf: burst 824 is lower than device lo mtu (65550) ! [ 106.114290][ T4795] loop1: detected capacity change from 0 to 256 [ 106.136162][ T4794] loop0: detected capacity change from 0 to 2048 [ 106.281263][ T4794] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 106.306860][ T4794] ext4 filesystem being mounted at /46/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.107398][ T4840] loop1: detected capacity change from 0 to 2048 [ 108.200575][ T4840] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 108.248773][ T4840] ext4 filesystem being mounted at /30/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.028527][ T4880] loop4: detected capacity change from 0 to 2048 [ 110.291130][ T4880] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 110.322606][ T4880] ext4 filesystem being mounted at /52/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.584630][ T4894] syzkaller0: tun_chr_ioctl cmd 2147767511 [ 112.066239][ T4927] loop0: detected capacity change from 0 to 2048 [ 112.379270][ T4927] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 112.400278][ T4927] ext4 filesystem being mounted at /57/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.438444][ T4966] netlink: 'syz.3.245': attribute type 39 has an invalid length. [ 113.495801][ T4966] device veth0_macvtap left promiscuous mode [ 113.843471][ T4989] syz.3.256[4989] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 113.843646][ T4989] syz.3.256[4989] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 114.018508][ T4992] loop2: detected capacity change from 0 to 2048 [ 114.235179][ T4992] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 114.270339][ T4992] ext4 filesystem being mounted at /48/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.367230][ T5029] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.269'. [ 115.381039][ T5027] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 116.241606][ T5056] loop3: detected capacity change from 0 to 2048 [ 116.379810][ T5056] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 116.398960][ T5056] ext4 filesystem being mounted at /47/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.531669][ T5065] netlink: 'syz.4.286': attribute type 29 has an invalid length. [ 116.647882][ T5065] netlink: 'syz.4.286': attribute type 29 has an invalid length. [ 117.361178][ T5070] netlink: 'syz.4.286': attribute type 29 has an invalid length. [ 117.410325][ T5071] netlink: 'syz.4.286': attribute type 29 has an invalid length. [ 117.769982][ T5093] syz.1.295 uses obsolete (PF_INET,SOCK_PACKET) [ 118.129926][ T5102] loop3: detected capacity change from 0 to 2048 [ 118.272367][ T5102] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 118.333063][ T5102] ext4 filesystem being mounted at /51/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.443128][ T5114] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 122.227994][ T5231] sch_tbf: burst 824 is lower than device lo mtu (65550) ! [ 122.483139][ T5241] netlink: 4 bytes leftover after parsing attributes in process `syz.1.360'. [ 122.785718][ T5255] netlink: 'syz.3.363': attribute type 29 has an invalid length. [ 122.819535][ T5255] netlink: 'syz.3.363': attribute type 29 has an invalid length. [ 123.454757][ T5285] netlink: 'syz.2.380': attribute type 29 has an invalid length. [ 123.481929][ T5285] netlink: 'syz.2.380': attribute type 29 has an invalid length. [ 123.920682][ T5307] netlink: 'syz.4.390': attribute type 2 has an invalid length. [ 123.931853][ T5307] netlink: 164 bytes leftover after parsing attributes in process `syz.4.390'. [ 123.948141][ T5307] netlink: 'syz.4.390': attribute type 2 has an invalid length. [ 123.960990][ T5307] netlink: 164 bytes leftover after parsing attributes in process `syz.4.390'. [ 124.096735][ T5314] netlink: 'syz.3.393': attribute type 10 has an invalid length. [ 124.116411][ T5320] sctp: [Deprecated]: syz.2.396 (pid 5320) Use of struct sctp_assoc_value in delayed_ack socket option. [ 124.116411][ T5320] Use struct sctp_sack_info instead [ 124.142346][ T5314] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.151218][ T5314] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.167703][ T5317] netlink: 'syz.1.395': attribute type 29 has an invalid length. [ 124.186429][ T5324] loop0: detected capacity change from 0 to 256 [ 124.238112][ T5314] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.245408][ T5314] bridge0: port 2(bridge_slave_1) entered forwarding state [ 124.254064][ T5314] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.261216][ T5314] bridge0: port 1(bridge_slave_0) entered forwarding state [ 124.338350][ T5314] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 124.377922][ T5317] netlink: 'syz.1.395': attribute type 29 has an invalid length. [ 124.442262][ T5314] syz.3.393 (5314) used greatest stack depth: 19672 bytes left [ 125.150178][ T5364] netlink: 'syz.2.416': attribute type 10 has an invalid length. [ 125.192559][ T5364] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.200028][ T5364] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.256464][ T5364] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.263660][ T5364] bridge0: port 2(bridge_slave_1) entered forwarding state [ 125.271148][ T5364] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.278250][ T5364] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.302059][ T5374] overlayfs: missing 'workdir' [ 125.539182][ T5371] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 126.261303][ T5364] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 126.358501][ T5375] sch_tbf: burst 824 is lower than device lo mtu (65550) ! [ 126.488543][ T5364] syz.2.416 (5364) used greatest stack depth: 19448 bytes left [ 126.535206][ T5390] netlink: 60 bytes leftover after parsing attributes in process `syz.4.423'. [ 126.557556][ T5390] netlink: 60 bytes leftover after parsing attributes in process `syz.4.423'. [ 126.591275][ T5384] netlink: 60 bytes leftover after parsing attributes in process `syz.4.423'. [ 126.618134][ T5393] loop2: detected capacity change from 0 to 256 [ 126.619976][ T5392] netlink: 60 bytes leftover after parsing attributes in process `syz.4.423'. [ 126.959543][ T5412] overlayfs: missing 'workdir' [ 127.236602][ T5417] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.244201][ T5417] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.429025][ T5417] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.436338][ T5417] bridge0: port 2(bridge_slave_1) entered forwarding state [ 127.443818][ T5417] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.450934][ T5417] bridge0: port 1(bridge_slave_0) entered forwarding state [ 127.901182][ T5417] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 128.141213][ T5422] sch_tbf: burst 824 is lower than device lo mtu (65550) ! [ 128.271288][ T5431] netlink: 60 bytes leftover after parsing attributes in process `syz.0.440'. [ 128.304001][ T5431] netlink: 60 bytes leftover after parsing attributes in process `syz.0.440'. [ 128.361171][ T5429] netlink: 60 bytes leftover after parsing attributes in process `syz.0.440'. [ 128.384643][ T5436] validate_nla: 1 callbacks suppressed [ 128.384662][ T5436] netlink: 'syz.4.444': attribute type 29 has an invalid length. [ 128.420465][ T5438] netlink: 60 bytes leftover after parsing attributes in process `syz.0.440'. [ 128.447663][ T5436] netlink: 'syz.4.444': attribute type 29 has an invalid length. [ 128.496816][ T5441] netlink: 'syz.4.444': attribute type 29 has an invalid length. [ 128.541988][ T5436] netlink: 'syz.4.444': attribute type 29 has an invalid length. [ 128.559452][ T5444] netlink: 'syz.4.444': attribute type 29 has an invalid length. [ 128.611965][ T5449] overlayfs: missing 'workdir' [ 129.960055][ T5466] loop4: detected capacity change from 0 to 128 [ 130.006663][ T5471] capability: warning: `syz.2.456' uses deprecated v2 capabilities in a way that may be insecure [ 130.062454][ T26] audit: type=1800 audit(1740977366.840:2): pid=5466 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.454" name="file1" dev="loop4" ino=1048591 res=0 errno=0 [ 130.722475][ T5493] loop0: detected capacity change from 0 to 2048 [ 130.744697][ T5497] loop2: detected capacity change from 0 to 512 [ 130.793010][ T5493] UDF-fs: bad mount option "+mask=0000000:+‘¨Á‡=000000000200001" or missing value [ 130.818433][ T5497] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 130.867013][ T5497] EXT4-fs (loop2): group descriptors corrupted! [ 131.033792][ T5487] loop1: detected capacity change from 0 to 1024 [ 131.054185][ T5506] netlink: 16 bytes leftover after parsing attributes in process `syz.0.470'. [ 131.121987][ T5506] netlink: 164 bytes leftover after parsing attributes in process `syz.0.470'. [ 131.152427][ T5509] loop2: detected capacity change from 0 to 128 [ 131.174994][ T5487] hfsplus: unable to parse mount options [ 131.276196][ T5509] VFS: Found a Xenix FS (block size = 512) on device loop2 [ 131.343201][ T5509] sysv_free_block: trying to free block not in datazone [ 131.448029][ T5509] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 132.252290][ T5526] netlink: 'syz.2.476': attribute type 16 has an invalid length. [ 132.260056][ T5526] netlink: 'syz.2.476': attribute type 17 has an invalid length. [ 132.309747][ T5526] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 132.322381][ T5526] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 132.329865][ T5526] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 132.353262][ T26] audit: type=1326 audit(1740977369.130:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5528 comm="syz.3.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6948517169 code=0x7ffc0000 [ 132.413062][ T26] audit: type=1326 audit(1740977369.160:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5528 comm="syz.3.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f6948517169 code=0x7ffc0000 [ 132.483332][ T26] audit: type=1326 audit(1740977369.160:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5528 comm="syz.3.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6948517169 code=0x7ffc0000 [ 132.511469][ T5526] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 132.549384][ T26] audit: type=1326 audit(1740977369.160:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5528 comm="syz.3.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f6948515c1f code=0x7ffc0000 [ 132.580614][ T4210] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 132.634855][ T26] audit: type=1326 audit(1740977369.160:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5528 comm="syz.3.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6948517169 code=0x7ffc0000 [ 132.660578][ T1324] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 132.730256][ T26] audit: type=1326 audit(1740977369.160:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5528 comm="syz.3.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6948517169 code=0x7ffc0000 [ 132.762866][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.770350][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.840385][ T26] audit: type=1326 audit(1740977369.160:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5528 comm="syz.3.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6948517169 code=0x7ffc0000 [ 132.922629][ T1324] usb 1-1: Using ep0 maxpacket: 16 [ 132.923731][ T26] audit: type=1326 audit(1740977369.160:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5528 comm="syz.3.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6948517169 code=0x7ffc0000 [ 133.070782][ T1324] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 133.110435][ T1324] usb 1-1: config 0 has no interface number 0 [ 133.230684][ T4210] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 133.250616][ T4210] usb 2-1: New USB device strings: Mfr=223, Product=2, SerialNumber=3 [ 133.258818][ T4210] usb 2-1: Product: syz [ 133.285970][ T4210] usb 2-1: Manufacturer: syz [ 133.310608][ T1324] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 133.319766][ T1324] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.336763][ T4210] usb 2-1: SerialNumber: syz [ 133.365476][ T4210] usb 2-1: config 0 descriptor?? [ 133.374497][ T1324] usb 1-1: Product: syz [ 133.378706][ T1324] usb 1-1: Manufacturer: syz [ 133.393181][ T1324] usb 1-1: SerialNumber: syz [ 133.413473][ T1324] usb 1-1: config 0 descriptor?? [ 133.435186][ T4210] ch341 2-1:0.0: ch341-uart converter detected [ 133.465063][ T1324] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 133.692787][ T5556] sch_tbf: burst 824 is lower than device lo mtu (65550) ! [ 133.920342][ T4274] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 134.261783][ T4274] usb 5-1: Using ep0 maxpacket: 32 [ 134.380346][ T4274] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 134.403202][ T4274] usb 5-1: config 0 has no interface number 0 [ 134.461071][ T4274] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 134.670649][ T4274] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 134.681548][ T4210] usb 2-1: failed to send control message: -71 [ 134.688688][ T4210] ch341-uart: probe of ttyUSB0 failed with error -71 [ 134.690500][ T4274] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.719308][ T4274] usb 5-1: Product: syz [ 134.728787][ T4210] usb 2-1: USB disconnect, device number 2 [ 134.735304][ T4274] usb 5-1: Manufacturer: syz [ 134.735326][ T4274] usb 5-1: SerialNumber: syz [ 134.751100][ T4274] usb 5-1: config 0 descriptor?? [ 134.773382][ T4210] ch341 2-1:0.0: device disconnected [ 134.810035][ T4274] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 134.830291][ T4274] em28xx 5-1:0.132: Video interface 132 found: [ 135.150322][ T7] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 135.230289][ T4274] em28xx 5-1:0.132: unknown em28xx chip ID (0) [ 135.410419][ T7] usb 3-1: Using ep0 maxpacket: 16 [ 135.560262][ T7] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 135.586002][ T7] usb 3-1: config 0 interface 0 has no altsetting 0 [ 135.610580][ T7] usb 3-1: New USB device found, idVendor=046d, idProduct=c517, bcdDevice= 0.00 [ 135.619704][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.631173][ T5581] netlink: 32 bytes leftover after parsing attributes in process `syz.1.499'. [ 135.644540][ T5581] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 135.652287][ T5581] IPv6: NLM_F_CREATE should be set when creating new route [ 135.659560][ T5581] IPv6: NLM_F_CREATE should be set when creating new route [ 135.676066][ T7] usb 3-1: config 0 descriptor?? [ 135.690640][ T4274] em28xx 5-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=0) [ 135.719686][ T5583] loop3: detected capacity change from 0 to 128 [ 135.732211][ T4274] em28xx 5-1:0.132: board has no eeprom [ 135.887305][ T5583] VFS: Found a Xenix FS (block size = 512) on device loop3 [ 135.905267][ T1324] gspca_spca1528: reg_r err -71 [ 135.910276][ T1324] spca1528: probe of 1-1:0.1 failed with error -71 [ 135.917816][ T5583] sysv_free_block: trying to free block not in datazone [ 135.922067][ T1324] usb 1-1: USB disconnect, device number 2 [ 135.937596][ T5583] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 136.056263][ T5587] sch_tbf: burst 824 is lower than device lo mtu (65550) ! [ 136.290927][ T7] logitech-djreceiver 0003:046D:C517.0001: unknown main item tag 0x4 [ 136.705619][ T7] usb 3-1: USB disconnect, device number 3 [ 136.800243][ T4274] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 136.809012][ T4274] em28xx 5-1:0.132: analog set to bulk mode. [ 136.823650][ T4243] em28xx 5-1:0.132: Registering V4L2 extension [ 136.840654][ T4274] usb 5-1: USB disconnect, device number 2 [ 136.847231][ T4274] em28xx 5-1:0.132: Disconnecting em28xx [ 137.005968][ T5596] loop0: detected capacity change from 0 to 1024 [ 137.057806][ T4243] em28xx 5-1:0.132: Config register raw data: 0xffffffed [ 137.068862][ T4243] em28xx 5-1:0.132: AC97 chip type couldn't be determined [ 137.086594][ T4243] em28xx 5-1:0.132: No AC97 audio processor [ 137.132454][ T4243] usb 5-1: Decoder not found [ 137.137088][ T4243] em28xx 5-1:0.132: failed to create media graph [ 137.188318][ T4243] em28xx 5-1:0.132: V4L2 device video103 deregistered [ 137.221073][ T5604] loop1: detected capacity change from 0 to 64 [ 137.241942][ T4243] em28xx 5-1:0.132: Remote control support is not available for this card. [ 137.260692][ T4274] em28xx 5-1:0.132: Closing input extension [ 137.289736][ T4274] em28xx 5-1:0.132: Freeing device [ 137.690347][ T4274] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 138.105997][ T5628] 9pnet: Insufficient options for proto=fd [ 138.200341][ T4274] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 138.228206][ T5632] sch_tbf: burst 824 is lower than device lo mtu (65550) ! [ 138.253786][ T4274] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 138.267633][ T4274] usb 5-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 138.283551][ T4274] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.302453][ T4274] usb 5-1: config 0 descriptor?? [ 138.754597][ T5650] Zero length message leads to an empty skb [ 138.783650][ T4274] playstation 0003:054C:0DF2.0002: unknown main item tag 0x0 [ 138.800225][ T4274] playstation 0003:054C:0DF2.0002: unknown main item tag 0x0 [ 138.807668][ T4274] playstation 0003:054C:0DF2.0002: unknown main item tag 0x0 [ 138.832510][ T7] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 138.850440][ T4274] playstation 0003:054C:0DF2.0002: unknown main item tag 0x0 [ 138.858402][ T4274] playstation 0003:054C:0DF2.0002: unknown main item tag 0x0 [ 138.912592][ T4274] playstation 0003:054C:0DF2.0002: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.4-1/input0 [ 139.060422][ T4274] playstation 0003:054C:0DF2.0002: Invalid byte count transferred, expected 20 got 0 [ 139.070078][ T4274] playstation 0003:054C:0DF2.0002: Failed to retrieve DualSense pairing info: -22 [ 139.086809][ T4274] playstation 0003:054C:0DF2.0002: Failed to get MAC address from DualSense [ 139.095932][ T4274] playstation 0003:054C:0DF2.0002: Failed to create dualsense. [ 139.100248][ T7] usb 1-1: Using ep0 maxpacket: 8 [ 139.125338][ T4274] playstation: probe of 0003:054C:0DF2.0002 failed with error -22 [ 139.250573][ T7] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 139.268835][ T7] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xBE, skipping [ 139.297328][ T7] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 139.516254][ T7] usb 1-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 139.535957][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 139.554489][ T7] usb 1-1: Product: syz [ 139.570717][ T7] usb 1-1: Manufacturer: syz [ 139.575370][ T7] usb 1-1: SerialNumber: syz [ 139.594380][ T7] usb 1-1: config 0 descriptor?? [ 139.618793][ T5662] 9pnet: Insufficient options for proto=fd [ 139.633980][ T7] radio-si470x 1-1:0.0: could not find interrupt in endpoint [ 139.673418][ T7] radio-si470x: probe of 1-1:0.0 failed with error -5 [ 139.692505][ T7] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 140.210356][ T7] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 140.349659][ T1324] usb 5-1: USB disconnect, device number 3 [ 140.370936][ T5687] sch_tbf: burst 824 is lower than device lo mtu (65550) ! [ 140.432936][ T5690] 9pnet: Insufficient options for proto=fd [ 140.615548][ T7] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 140.631499][ T7] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 140.668710][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.697811][ T7] usb 4-1: config 0 descriptor?? [ 140.762714][ T7] pwc: Askey VC010 type 2 USB webcam detected. [ 140.853882][ T5696] loop4: detected capacity change from 0 to 2048 [ 140.959458][ T5696] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 140.989997][ T4263] udevd[4263]: incorrect nilfs2 checksum on /dev/loop4 [ 141.059952][ T5698] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 141.075297][ T4243] usb 1-1: USB disconnect, device number 3 [ 141.206064][ T7] pwc: recv_control_msg error -32 req 02 val 2b00 [ 141.250340][ T7] pwc: recv_control_msg error -32 req 02 val 2700 [ 141.409682][ T5710] loop0: detected capacity change from 0 to 732 [ 141.542455][ T7] pwc: recv_control_msg error -71 req 04 val 1000 [ 141.570896][ T7] pwc: recv_control_msg error -71 req 04 val 1300 [ 141.600383][ T7] pwc: recv_control_msg error -71 req 04 val 1400 [ 141.620531][ T7] pwc: recv_control_msg error -71 req 02 val 2000 [ 141.660565][ T7] pwc: recv_control_msg error -71 req 02 val 2100 [ 141.677876][ T5714] netlink: 'syz.2.550': attribute type 4 has an invalid length. [ 141.690586][ T7] pwc: recv_control_msg error -71 req 04 val 1500 [ 141.733484][ T5714] syz.2.550 (5714) used greatest stack depth: 19224 bytes left [ 141.736551][ T7] pwc: recv_control_msg error -71 req 02 val 2500 [ 141.748135][ T1324] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 141.805256][ T5719] 9pnet: Insufficient options for proto=fd [ 141.810399][ T7] pwc: recv_control_msg error -71 req 02 val 2400 [ 141.840404][ T7] pwc: recv_control_msg error -71 req 02 val 2600 [ 141.880652][ T7] pwc: recv_control_msg error -71 req 02 val 2900 [ 141.920374][ T7] pwc: recv_control_msg error -71 req 02 val 2800 [ 141.965843][ T7] pwc: recv_control_msg error -71 req 04 val 1100 [ 141.990472][ T7] pwc: recv_control_msg error -71 req 04 val 1200 [ 142.005185][ T7] pwc: Registered as video103. [ 142.012879][ T7] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input5 [ 142.040418][ T1324] usb 5-1: Using ep0 maxpacket: 8 [ 142.064889][ T7] usb 4-1: USB disconnect, device number 2 [ 142.186695][ T1324] usb 5-1: config 0 has an invalid interface number: 33 but max is 1 [ 142.215124][ T1324] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 142.239872][ T1324] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 142.257501][ T1324] usb 5-1: config 0 has no interface number 0 [ 142.264096][ T4210] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 142.506404][ T1324] usb 5-1: New USB device found, idVendor=2040, idProduct=2950, bcdDevice=85.f1 [ 142.544448][ T1324] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.559099][ T5746] 9pnet: Insufficient options for proto=fd [ 142.569022][ T5747] sch_tbf: burst 824 is lower than device lo mtu (65550) ! [ 142.580225][ T4210] usb 3-1: Using ep0 maxpacket: 16 [ 142.585571][ T1324] usb 5-1: Product: syz [ 142.589930][ T1324] usb 5-1: Manufacturer: syz [ 142.616900][ T1324] usb 5-1: SerialNumber: syz [ 142.624788][ T1324] usb 5-1: config 0 descriptor?? [ 142.674621][ T1324] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 142.760609][ T4210] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 142.768655][ T4210] usb 3-1: config 0 has no interface number 0 [ 142.790392][ T7] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 142.895124][ T1324] usb 5-1: USB disconnect, device number 4 [ 142.911129][ T2425] usb 5-1: Direct firmware load for v4l-pvrusb2-29xxx-01.fw failed with error -2 [ 142.950074][ T2425] usb 5-1: Falling back to sysfs fallback for: v4l-pvrusb2-29xxx-01.fw [ 142.972605][ T4210] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 142.990211][ T4210] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.000587][ T4210] usb 3-1: Product: syz [ 143.004879][ T4210] usb 3-1: Manufacturer: syz [ 143.019745][ T4210] usb 3-1: SerialNumber: syz [ 143.035554][ T4210] usb 3-1: config 0 descriptor?? [ 143.080789][ T7] usb 4-1: Using ep0 maxpacket: 32 [ 143.112817][ T4210] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 143.220580][ T7] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 143.240279][ T7] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 143.263489][ T7] usb 4-1: config 0 interface 0 has no altsetting 0 [ 143.280231][ T7] usb 4-1: New USB device found, idVendor=258a, idProduct=0033, bcdDevice= 0.00 [ 143.299630][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.327738][ T7] usb 4-1: config 0 descriptor?? [ 143.815002][ T7] glorious 0003:258A:0033.0003: hidraw0: USB HID vff.fc Device [Glorious Model D] on usb-dummy_hcd.3-1/input0 [ 143.980295][ T4210] gspca_spca1528: reg_w err -71 [ 144.010423][ T4210] spca1528: probe of 3-1:0.1 failed with error -71 [ 144.035828][ T4210] usb 3-1: USB disconnect, device number 4 [ 144.067391][ T7] usb 4-1: USB disconnect, device number 3 [ 144.409113][ T5777] 9pnet: Insufficient options for proto=fd [ 144.577412][ T5781] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3219175179 (12876700716 ns) > initial count (598965048 ns). Using initial count to start timer. [ 144.623716][ T5781] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4173937937 (534264055936 ns) > initial count (288537378304 ns). Using initial count to start timer. [ 144.832290][ T5786] sch_tbf: burst 824 is lower than device lo mtu (65550) ! [ 145.071301][ T5802] 9pnet: Insufficient options for proto=fd [ 145.400375][ T1107] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 145.500239][ T4243] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 145.640261][ T1107] usb 3-1: Using ep0 maxpacket: 8 [ 145.792303][ T5822] sch_tbf: burst 824 is lower than device lo mtu (65550) ! [ 145.870588][ T4274] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 145.878984][ T4243] usb 1-1: Using ep0 maxpacket: 16 [ 145.960596][ T1107] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 145.985229][ T1107] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 145.995780][ T1107] usb 3-1: New USB device found, idVendor=046d, idProduct=c088, bcdDevice= 0.00 [ 146.005647][ T1107] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.014238][ T4243] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 146.026972][ T4243] usb 1-1: config 0 interface 0 has no altsetting 0 [ 146.043821][ T1107] usb 3-1: config 0 descriptor?? [ 146.049123][ T4243] usb 1-1: New USB device found, idVendor=046d, idProduct=c517, bcdDevice= 0.00 [ 146.059907][ T4243] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.085004][ T4243] usb 1-1: config 0 descriptor?? [ 146.095089][ T5831] 9pnet: Insufficient options for proto=fd [ 146.110719][ T4274] usb 4-1: Using ep0 maxpacket: 8 [ 146.239427][ T5836] loop1: detected capacity change from 0 to 164 [ 146.270492][ T4274] usb 4-1: unable to get BOS descriptor or descriptor too short [ 146.285998][ T5836] ISOFS: unable to read i-node block [ 146.311068][ T5836] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 146.350772][ T4274] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 146.370289][ T4274] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 146.426095][ T4274] usb 4-1: language id specifier not provided by device, defaulting to English [ 146.428638][ T5840] loop1: detected capacity change from 0 to 512 [ 146.508397][ T5840] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 146.520713][ T5840] ext4 filesystem being mounted at /134/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 146.533738][ T1107] logitech-hidpp-device 0003:046D:C088.0004: hidraw0: USB HID v0.00 Device [HID 046d:c088] on usb-dummy_hcd.2-1/input0 [ 146.550574][ T4274] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 146.566119][ T4274] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.577463][ T4243] logitech-djreceiver 0003:046D:C517.0005: unknown main item tag 0x4 [ 146.595572][ T4274] usb 4-1: Product: syz [ 146.601259][ T4274] usb 4-1: Manufacturer: å±›ë—â±é’†çšÃ‰î°ë”矚鰾娔셢莕ῗൡ蘥뜴㤊䤎眑鬤陃ꦂ缳á¼ïŸ•ã¡ä‡Œë®£è¸›ç£¬æ›£ãœ›â‘ [ 146.616100][ T4274] usb 4-1: SerialNumber: syz [ 146.724020][ T4243] usb 3-1: USB disconnect, device number 5 [ 146.805656][ T4254] usb 1-1: USB disconnect, device number 4 [ 146.986785][ T5854] sch_tbf: burst 824 is lower than device lo mtu (65550) ! [ 147.100569][ T4274] cdc_ncm 4-1:1.0: bind() failure [ 147.131019][ T4274] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 147.138740][ T4274] cdc_ncm 4-1:1.1: bind() failure [ 147.159251][ T5859] 9pnet: Insufficient options for proto=fd [ 147.168394][ T4274] usb 4-1: USB disconnect, device number 4 [ 147.218639][ T5861] loop1: detected capacity change from 0 to 1024 [ 147.375031][ T5865] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 147.415519][ T5865] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 147.459472][ T5869] kvm: pic: level sensitive irq not supported [ 147.543012][ T5874] nbd0: detected capacity change from 0 to 67108884 [ 147.626208][ T5874] block nbd0: Device being setup by another task [ 147.656189][ T150] block nbd0: Send control failed (result -89) [ 147.663224][ T150] block nbd0: Request send failed, requeueing [ 147.670441][ T4178] block nbd0: Receive control failed (result -32) [ 147.671541][ T150] block nbd0: Dead connection, failed to find a fallback [ 147.685895][ T150] block nbd0: shutting down sockets [ 147.692020][ T150] blk_update_request: I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 147.703527][ T150] Buffer I/O error on dev nbd0, logical block 0, async page read [ 147.712732][ T150] blk_update_request: I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 147.723609][ T150] Buffer I/O error on dev nbd0, logical block 0, async page read [ 147.731552][ T1091] blk_update_request: I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 147.742687][ T1091] Buffer I/O error on dev nbd0, logical block 0, async page read [ 147.750217][ T1107] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 147.753471][ T1091] blk_update_request: I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 147.770395][ T1091] Buffer I/O error on dev nbd0, logical block 0, async page read [ 147.779315][ T1091] blk_update_request: I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 147.790204][ T1091] Buffer I/O error on dev nbd0, logical block 0, async page read [ 147.798200][ T1091] blk_update_request: I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 147.809623][ T1091] Buffer I/O error on dev nbd0, logical block 0, async page read [ 147.817818][ T1091] blk_update_request: I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 147.828808][ T1091] Buffer I/O error on dev nbd0, logical block 0, async page read [ 147.836839][ T1091] blk_update_request: I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 147.847798][ T1091] Buffer I/O error on dev nbd0, logical block 0, async page read [ 147.855784][ T4263] ldm_validate_partition_table(): Disk read failed. [ 147.865831][ T1091] blk_update_request: I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 147.876723][ T1091] Buffer I/O error on dev nbd0, logical block 0, async page read [ 147.884802][ T1091] blk_update_request: I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 147.895696][ T1091] Buffer I/O error on dev nbd0, logical block 0, async page read [ 147.903875][ T4263] Dev nbd0: unable to read RDB block 0 [ 147.909976][ T4263] nbd0: unable to read partition table [ 147.950298][ T4263] ldm_validate_partition_table(): Disk read failed. [ 147.960906][ T4263] Dev nbd0: unable to read RDB block 0 [ 147.969051][ T4263] nbd0: unable to read partition table [ 147.990314][ T1107] usb 2-1: Using ep0 maxpacket: 16 [ 148.110677][ T1107] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 148.140969][ T1107] usb 2-1: config 0 has no interface number 0 [ 148.221876][ T5884] input: syz1 as /devices/virtual/input/input6 [ 148.330507][ T1107] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 148.353053][ T1107] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.377882][ T1107] usb 2-1: Product: syz [ 148.398177][ T1107] usb 2-1: Manufacturer: syz [ 148.415007][ T1107] usb 2-1: SerialNumber: syz [ 148.445613][ T1107] usb 2-1: config 0 descriptor?? [ 148.515208][ T1107] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 148.586508][ T5893] netlink: 68 bytes leftover after parsing attributes in process `syz.2.624'. [ 148.669699][ T5892] 9pnet: Insufficient options for proto=fd [ 148.889320][ T5902] sch_tbf: burst 824 is lower than device lo mtu (65550) ! [ 149.091414][ T4254] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 149.107213][ T4254] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 149.115497][ T4254] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 149.130358][ T4254] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 149.138141][ T4254] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 149.151809][ T4254] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 149.159559][ T4254] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 149.172128][ T4254] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 149.179639][ T4254] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 149.192053][ T4254] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 149.208752][ T4254] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 149.219133][ T4254] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 149.226652][ T4254] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 149.235313][ T4254] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 149.245684][ T4254] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 149.253274][ T4254] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 149.260812][ T4254] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 149.268289][ T4254] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 149.275785][ T4254] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 149.283341][ T4254] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 149.290862][ T4254] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 149.299096][ T4254] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 149.306621][ T4254] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 149.314095][ T4254] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 149.321683][ T4254] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 149.329162][ T4254] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 149.337410][ T4254] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 149.344990][ T4254] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 149.352492][ T4254] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 149.359954][ T4254] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 149.367503][ T4254] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 149.374997][ T4254] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 149.491834][ T4254] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [sy] on syz0 [ 149.613619][ T5913] input: syz1 as /devices/virtual/input/input7 [ 149.921717][ T7] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 149.945196][ T5925] 9pnet: Insufficient options for proto=fd [ 149.992291][ T5926] loop3: detected capacity change from 0 to 2048 [ 150.389760][ T5926] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 150.634901][ T5926] ext4 filesystem being mounted at /119/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 150.953997][ T7] usb 1-1: Using ep0 maxpacket: 16 [ 150.960288][ T1107] gspca_spca1528: reg_r err -71 [ 150.965218][ T1107] spca1528: probe of 2-1:0.1 failed with error -71 [ 150.983571][ T1107] usb 2-1: USB disconnect, device number 3 [ 151.095006][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 151.115553][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 151.145466][ T7] usb 1-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 151.168366][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.203879][ T7] usb 1-1: config 0 descriptor?? [ 151.408690][ T5942] sch_tbf: burst 824 is lower than device lo mtu (65550) ! [ 151.550886][ T7] usbhid 1-1:0.0: can't add hid device: -71 [ 151.561598][ T7] usbhid: probe of 1-1:0.0 failed with error -71 [ 151.599415][ T7] usb 1-1: USB disconnect, device number 5 [ 152.009514][ T5952] input: syz1 as /devices/virtual/input/input8 [ 152.264923][ T5962] 9pnet: Insufficient options for proto=fd [ 153.779397][ T4243] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 154.830812][ T4243] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 155.064679][ T4243] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 155.127281][ T4243] usb 2-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 155.160960][ T4243] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.177931][ T4243] usb 2-1: config 0 descriptor?? [ 155.343473][ T4243] usb 2-1: can't set config #0, error -71 [ 155.361388][ T4243] usb 2-1: USB disconnect, device number 4 [ 155.381297][ T5990] loop4: detected capacity change from 0 to 1024 [ 155.452237][ T5990] EXT4-fs (loop4): Ignoring removed nobh option [ 155.529739][ T5990] EXT4-fs (loop4): mounted filesystem without journal. Opts: sysvgroups,data_err=abort,i_version,dioread_lock,usrquota,max_dir_size_kb=0x00000000004007b1,data_err=ignore,noinit_itable,nobh,user_xattr,mb_optimize_scan=0x0000000000000000,journal_dev=0x0000000000000011,,errors=continue. Quota mode: writeback. [ 155.569525][ T6000] loop3: detected capacity change from 0 to 2048 [ 155.610675][ T5990] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.661: bg 0: block 400: padding at end of block bitmap is not set [ 155.720948][ T6000] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 155.745562][ T6000] ext4 filesystem being mounted at /122/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 157.762584][ T6036] netlink: 136 bytes leftover after parsing attributes in process `syz.0.675'. [ 157.820251][ T6036] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 158.978270][ T6049] loop2: detected capacity change from 0 to 256 [ 159.028166][ T6054] netlink: 8 bytes leftover after parsing attributes in process `syz.3.677'. [ 159.083324][ T6049] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 159.123941][ T6049] exFAT-fs (loop2): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 159.557160][ T6066] loop3: detected capacity change from 0 to 64 [ 159.720883][ T6069] loop0: detected capacity change from 0 to 2048 [ 159.777041][ T6069] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 159.789086][ T6069] ext4 filesystem being mounted at /144/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 160.971133][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 160.990167][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #280!!! [ 161.003297][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 161.126333][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 161.135403][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 161.145890][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 161.311703][ T6088] netlink: 20 bytes leftover after parsing attributes in process `syz.2.694'. [ 161.343638][ T6093] loop1: detected capacity change from 0 to 128 [ 161.741181][ T6108] loop1: detected capacity change from 0 to 2048 [ 161.820469][ T7] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 161.870254][ T6108] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 161.888000][ T6108] ext4 filesystem being mounted at /152/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 162.071977][ T6115] sch_tbf: burst 824 is lower than device lo mtu (65550) ! [ 162.080426][ T7] usb 1-1: Using ep0 maxpacket: 8 [ 162.400580][ T7] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 162.419881][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.438638][ T7] usb 1-1: Product: syz [ 162.443714][ T7] usb 1-1: Manufacturer: syz [ 162.448421][ T7] usb 1-1: SerialNumber: syz [ 162.476137][ T7] usb 1-1: config 0 descriptor?? [ 162.730709][ T7] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 162.940320][ T4243] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 163.611467][ T4243] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 163.642950][ T4212] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 163.651743][ T4243] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.670316][ T4243] usb 3-1: Product: syz [ 163.674677][ T4243] usb 3-1: Manufacturer: syz [ 163.699612][ T4243] usb 3-1: SerialNumber: syz [ 163.705306][ T6132] loop4: detected capacity change from 0 to 64 [ 163.716140][ T4243] usb 3-1: config 0 descriptor?? [ 163.818103][ T7] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -71 [ 163.828340][ T7] usb 1-1: USB disconnect, device number 6 [ 164.027909][ T6140] loop3: detected capacity change from 0 to 2048 [ 164.084142][ T4212] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 164.117680][ T6140] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 164.120471][ T4212] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 60633, setting to 1024 [ 164.135206][ T6140] ext4 filesystem being mounted at /133/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 164.204784][ T4212] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 164.255260][ T4212] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 164.308308][ T4212] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.390360][ T6152] sch_tbf: burst 824 is lower than device lo mtu (65550) ! [ 164.401099][ T6124] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 165.030480][ T4212] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 165.098282][ T4243] usb 3-1: non-Atmel transceiver xxxxd604 [ 165.109092][ T4243] usb 3-1: Firmware version (0.0) predates our first public release. [ 165.117470][ T4243] usb 3-1: Please update to version 0.2 or newer [ 165.140828][ T4243] usb 3-1: atusb_probe: initialization failed, error = -19 [ 165.542892][ T4243] usb 3-1: USB disconnect, device number 6 [ 165.990467][ T4212] usb 1-1: Using ep0 maxpacket: 16 [ 166.166842][ T4212] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 166.181204][ T4212] usb 1-1: config 0 has no interface number 0 [ 166.304683][ T7] usb 2-1: USB disconnect, device number 5 [ 166.396582][ T4212] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 166.458613][ T4212] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.480853][ T6184] 9pnet: Could not find request transport: fd0x0000000000000003 [ 166.500279][ T4212] usb 1-1: Product: syz [ 166.505341][ T4212] usb 1-1: Manufacturer: syz [ 166.528898][ T4212] usb 1-1: SerialNumber: syz [ 166.535955][ T4212] usb 1-1: config 0 descriptor?? [ 166.583783][ T4212] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 166.844766][ T6202] sch_tbf: burst 824 is lower than device lo mtu (65550) ! [ 166.985484][ T6208] 9pnet: Insufficient options for proto=fd [ 167.538373][ T6224] 9pnet: Could not find request transport: fd0x0000000000000003 [ 167.644672][ T26] audit: type=1326 audit(1740977404.420:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6226 comm="syz.4.748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b359d3169 code=0x7ffc0000 [ 167.674288][ T26] audit: type=1326 audit(1740977404.420:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6226 comm="syz.4.748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4b359d3169 code=0x7ffc0000 [ 167.762353][ T26] audit: type=1326 audit(1740977404.480:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6226 comm="syz.4.748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b359d3169 code=0x7ffc0000 [ 167.770533][ T4212] gspca_spca1528: reg_w err -71 [ 167.804912][ T6229] loop3: detected capacity change from 0 to 512 [ 167.811620][ T26] audit: type=1326 audit(1740977404.490:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6226 comm="syz.4.748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4b359d3169 code=0x7ffc0000 [ 167.816909][ T4212] spca1528: probe of 1-1:0.1 failed with error -71 [ 167.837210][ T26] audit: type=1326 audit(1740977404.490:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6226 comm="syz.4.748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b359d3169 code=0x7ffc0000 [ 167.864408][ T26] audit: type=1326 audit(1740977404.490:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6226 comm="syz.4.748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4b359ca127 code=0x7ffc0000 [ 167.883545][ T4212] usb 1-1: USB disconnect, device number 7 [ 167.887096][ T26] audit: type=1326 audit(1740977404.490:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6226 comm="syz.4.748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4b3596f359 code=0x7ffc0000 [ 167.919617][ T26] audit: type=1326 audit(1740977404.490:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6226 comm="syz.4.748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4b359ca127 code=0x7ffc0000 [ 167.942273][ T6229] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 167.957641][ T26] audit: type=1326 audit(1740977404.490:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6226 comm="syz.4.748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4b3596f359 code=0x7ffc0000 [ 168.035051][ T6229] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 168.044089][ T26] audit: type=1326 audit(1740977404.490:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6226 comm="syz.4.748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4b359ca127 code=0x7ffc0000 [ 168.068800][ T6229] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.749: invalid indirect mapped block 2683928664 (level 1) [ 168.088117][ T6229] EXT4-fs (loop3): Remounting filesystem read-only [ 168.095323][ T6229] EXT4-fs (loop3): 1 truncate cleaned up [ 168.101049][ T6229] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,dioread_nolock,errors=remount-ro,minixdf,jqfmt=vfsv0,usrjquota=.". Quota mode: writeback. [ 168.151215][ T6229] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2219: inode #15: comm syz.3.749: corrupted in-inode xattr [ 168.179230][ T6229] EXT4-fs (loop3): Remounting filesystem read-only [ 168.207389][ T6235] 9pnet: Insufficient options for proto=fd [ 168.689996][ T6251] 9pnet: Could not find request transport: fd0x0000000000000003 [ 168.902684][ T6255] sch_tbf: burst 824 is lower than device lo mtu (65550) ! [ 169.063936][ T6267] loop1: detected capacity change from 0 to 4096 [ 169.100407][ T4210] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 169.122358][ T6267] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 169.727626][ T6283] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 169.734398][ T6283] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 169.744961][ T6283] vhci_hcd vhci_hcd.0: Device attached [ 169.764131][ T6284] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 0 [ 169.779685][ T9] vhci_hcd: stop threads [ 169.785100][ T9] vhci_hcd: release socket [ 169.793132][ T9] vhci_hcd: disconnect device [ 169.800580][ T7] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 170.001319][ T4210] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 170.015998][ T4210] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.025933][ T4210] usb 3-1: Product: syz [ 170.034250][ T4210] usb 3-1: Manufacturer: syz [ 170.039214][ T4210] usb 3-1: SerialNumber: syz [ 170.060316][ T7] usb 2-1: Using ep0 maxpacket: 16 [ 170.112196][ T4210] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 170.200552][ T7] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 170.208754][ T7] usb 2-1: config 0 has no interface number 0 [ 170.460458][ T7] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 170.476177][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.492857][ T7] usb 2-1: Product: syz [ 170.498715][ T7] usb 2-1: Manufacturer: syz [ 170.510086][ T7] usb 2-1: SerialNumber: syz [ 170.516936][ T7] usb 2-1: config 0 descriptor?? [ 171.361489][ T7] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 171.430634][ T6298] loop3: detected capacity change from 0 to 8 [ 171.558028][ T4212] usb 3-1: USB disconnect, device number 7 [ 171.564208][ T4210] usb 3-1: ath9k_htc: Firmware - ath9k_htc/htc_9271-1.4.0.fw download failed [ 171.581772][ T4212] usb 3-1: ath9k_htc: USB layer deinitialized [ 171.597666][ T6304] 9pnet: Insufficient options for proto=fd [ 171.612462][ T6298] bridge0: port 3(syz_tun) entered blocking state [ 171.620046][ T6298] bridge0: port 3(syz_tun) entered disabled state [ 171.632612][ T6298] device syz_tun entered promiscuous mode [ 171.642194][ T6298] bridge0: port 3(syz_tun) entered blocking state [ 171.649074][ T6298] bridge0: port 3(syz_tun) entered forwarding state [ 171.975860][ T6313] sch_tbf: burst 824 is lower than device lo mtu (65550) ! [ 172.010498][ T7] gspca_spca1528: reg_w err -110 [ 172.040413][ T7] spca1528: probe of 2-1:0.1 failed with error -110 [ 172.388579][ T7] usb 2-1: USB disconnect, device number 6 [ 172.963747][ T6334] loop0: detected capacity change from 0 to 2048 [ 173.344905][ T6334] UDF-fs: bad mount option "gid=00000000000000060929" or missing value [ 173.836960][ T6340] 9pnet: Insufficient options for proto=fd [ 173.929771][ T4210] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 173.951883][ T6343] loop2: detected capacity change from 0 to 2048 [ 174.049018][ T6343] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 174.066297][ T6343] ext4 filesystem being mounted at /159/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 174.311632][ T7] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 174.480415][ T4210] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 174.494580][ T4210] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.507227][ T4210] usb 2-1: Product: syz [ 174.514588][ T4210] usb 2-1: Manufacturer: syz [ 174.519411][ T4210] usb 2-1: SerialNumber: syz [ 174.535299][ T4210] usb 2-1: config 0 descriptor?? [ 174.580391][ T7] usb 4-1: Using ep0 maxpacket: 16 [ 174.730610][ T7] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 174.763599][ T7] usb 4-1: config 0 has no interface number 0 [ 174.950938][ T7] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 174.974062][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.997744][ T7] usb 4-1: Product: syz [ 175.010771][ T6369] sch_tbf: burst 824 is lower than device lo mtu (65550) ! [ 175.027180][ T7] usb 4-1: Manufacturer: syz [ 175.032422][ T7] usb 4-1: SerialNumber: syz [ 175.040355][ T7] usb 4-1: config 0 descriptor?? [ 175.095450][ T7] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 175.418637][ T6374] 9pnet: Insufficient options for proto=fd [ 175.670419][ T4210] usb 2-1: non-Atmel transceiver xxxxd604 [ 175.677744][ T4210] usb 2-1: Firmware version (0.0) predates our first public release. [ 175.704047][ T4210] usb 2-1: Please update to version 0.2 or newer [ 176.530349][ T4210] usb 2-1: atusb_probe: initialization failed, error = -19 [ 176.553390][ T4210] usb 2-1: USB disconnect, device number 7 [ 176.976491][ T6400] loop0: detected capacity change from 0 to 2048 [ 177.219150][ T6400] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 177.230499][ T6400] ext4 filesystem being mounted at /170/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 177.560777][ T6407] sch_tbf: burst 824 is lower than device lo mtu (65550) ! [ 178.213759][ T6412] 9pnet: Insufficient options for proto=fd [ 178.416696][ T4243] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 178.431218][ T7] gspca_spca1528: reg_r err -110 [ 178.436254][ T7] spca1528: probe of 4-1:0.1 failed with error -110 [ 178.445227][ T7] usb 4-1: USB disconnect, device number 5 [ 178.459897][ T6418] loop1: detected capacity change from 0 to 1024 [ 178.467984][ T4243] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 178.538533][ T6418] EXT4-fs (loop1): Mount option "nodioread_nolock" incompatible with ext2 [ 179.081202][ T6437] loop1: detected capacity change from 0 to 2048 [ 179.124390][ T6437] UDF-fs: bad mount option "gid=00000000000000060929" or missing value [ 179.720339][ T4243] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 180.072665][ T6459] loop0: detected capacity change from 0 to 2048 [ 180.090291][ T4243] usb 3-1: Using ep0 maxpacket: 32 [ 180.139150][ T6459] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 180.150016][ T6459] ext4 filesystem being mounted at /176/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 180.340314][ T4243] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 180.350690][ T4243] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 180.361647][ T4243] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xE1, skipping [ 180.372491][ T4243] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 180.382315][ T4243] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 180.392319][ T4243] usb 3-1: config 0 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 180.680374][ T4243] usb 3-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice=55.01 [ 180.698003][ T4243] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.709585][ T4243] usb 3-1: Product: syz [ 180.719055][ T4243] usb 3-1: Manufacturer: syz [ 180.723874][ T4243] usb 3-1: SerialNumber: syz [ 180.736256][ T4243] usb 3-1: config 0 descriptor?? [ 180.760758][ T6444] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 180.824975][ T6469] loop1: detected capacity change from 0 to 256 [ 181.005599][ T6471] batman_adv: batadv0: Adding interface: dummy0 [ 181.012201][ T6471] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 181.020733][ T4243] cxacru 3-1:0.0: usbatm_usb_probe: bind failed: -19! [ 181.041140][ T6471] batman_adv: batadv0: Interface activated: dummy0 [ 181.055466][ T4243] usb 3-1: USB disconnect, device number 8 [ 181.063869][ T6471] batadv0: mtu less than device minimum [ 181.071787][ T6471] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 181.084466][ T6471] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 181.096979][ T6471] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 181.108854][ T6471] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 181.121015][ T6471] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 181.132887][ T6471] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 181.145235][ T6471] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 181.157862][ T6471] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 181.169732][ T6471] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 181.630321][ T4210] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 182.010432][ T4210] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 182.025259][ T4210] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 182.044739][ T4210] usb 1-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.00 [ 182.059731][ T4210] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.073274][ T4210] usb 1-1: config 0 descriptor?? [ 182.370548][ T4211] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 182.518795][ T6500] device syzkaller0 entered promiscuous mode [ 182.562877][ T4210] hid-generic 0003:07B5:0312.0008: unknown main item tag 0x0 [ 182.572192][ T4210] hid-generic 0003:07B5:0312.0008: unknown main item tag 0x0 [ 182.581028][ T4210] hid-generic 0003:07B5:0312.0008: item fetching failed at offset 4/5 [ 182.589725][ T4210] hid-generic: probe of 0003:07B5:0312.0008 failed with error -22 [ 182.714491][ T6502] loop2: detected capacity change from 0 to 2048 [ 182.764289][ T4274] usb 1-1: USB disconnect, device number 8 [ 182.773181][ T6504] loop4: detected capacity change from 0 to 2048 [ 182.808315][ T6502] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 182.819224][ T6502] ext4 filesystem being mounted at /167/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 182.941846][ T6508] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 183.290319][ T4211] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 183.310179][ T4211] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.318234][ T4211] usb 2-1: Product: syz [ 183.330171][ T4211] usb 2-1: Manufacturer: syz [ 183.334806][ T4211] usb 2-1: SerialNumber: syz [ 183.390808][ T4211] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 183.998829][ T6534] loop2: detected capacity change from 0 to 4096 [ 184.055883][ T6534] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512) [ 184.190281][ T4211] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 184.479353][ T6541] loop4: detected capacity change from 0 to 2048 [ 184.540916][ T6541] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 184.574862][ T6541] UDF-fs: warning (device loop4): udf_fill_super: No partition found (2) [ 184.745215][ T6553] loop4: detected capacity change from 0 to 2048 [ 184.895266][ T13] usb 2-1: USB disconnect, device number 8 [ 184.947239][ T6538] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.954563][ T6538] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.082368][ T6563] loop4: detected capacity change from 0 to 2048 [ 185.153892][ T6563] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 185.171729][ T6563] ext4 filesystem being mounted at /162/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 185.480496][ T4211] usb 2-1: Service connection timeout for: 256 [ 185.486705][ T4211] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 185.504422][ T4211] ath9k_htc: Failed to initialize the device [ 185.510780][ T13] usb 2-1: ath9k_htc: USB layer deinitialized [ 185.681308][ T6538] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 185.735041][ T6538] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 186.040298][ T13] Bluetooth: hci0: command 0x0406 tx timeout [ 186.068605][ T4211] Bluetooth: hci1: command 0x0406 tx timeout [ 186.075236][ T4211] Bluetooth: hci3: command 0x0406 tx timeout [ 186.081544][ T4211] Bluetooth: hci2: command 0x0406 tx timeout [ 186.087567][ T4211] Bluetooth: hci4: command 0x0406 tx timeout [ 186.443566][ T6538] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.453239][ T6538] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.462192][ T6538] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.476249][ T6538] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.841119][ T6591] loop0: detected capacity change from 0 to 2048 [ 186.844805][ T6595] 9pnet: Insufficient options for proto=fd [ 186.907408][ T6591] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 186.944272][ T6597] loop1: detected capacity change from 0 to 2048 [ 187.066473][ T6597] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 187.106505][ T6597] ext4 filesystem being mounted at /190/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 187.846243][ T4216] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 188.114915][ T6630] 9pnet: Insufficient options for proto=fd [ 188.121242][ T4216] usb 1-1: Using ep0 maxpacket: 16 [ 188.271625][ T4216] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping [ 188.642953][ T4216] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 188.671375][ T4216] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.695361][ T4216] usb 1-1: Product: syz [ 188.699696][ T4216] usb 1-1: Manufacturer: syz [ 188.706898][ T4216] usb 1-1: SerialNumber: syz [ 188.723615][ T4216] usb 1-1: config 0 descriptor?? [ 188.774869][ T26] kauditd_printk_skb: 61 callbacks suppressed [ 188.774884][ T26] audit: type=1800 audit(1740977425.550:82): pid=6646 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.3.898" name="/" dev="sockfs" ino=40830 res=0 errno=0 [ 188.811239][ T6655] loop2: detected capacity change from 0 to 2048 [ 188.857553][ T6655] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 188.868424][ T6655] ext4 filesystem being mounted at /181/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 189.354825][ T6661] 9pnet: Insufficient options for proto=fd [ 189.397961][ T6666] loop1: detected capacity change from 0 to 512 [ 189.485438][ T6666] EXT4-fs (loop1): mounted filesystem without journal. Opts: usrquota,grpjquota=,nodelalloc,,errors=continue. Quota mode: writeback. [ 189.506644][ T6666] ext4 filesystem being mounted at /195/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 189.545049][ T26] audit: type=1800 audit(1740977426.320:83): pid=6666 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.903" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 190.188653][ T4243] usb 1-1: USB disconnect, device number 9 [ 190.286951][ T6683] netlink: 48 bytes leftover after parsing attributes in process `syz.0.917'. [ 190.329961][ T6682] loop4: detected capacity change from 0 to 2048 [ 190.441581][ T6682] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 190.509375][ T6685] loop3: detected capacity change from 0 to 8192 [ 191.042841][ T6705] 9pnet: Insufficient options for proto=fd [ 191.137600][ T6708] loop3: detected capacity change from 0 to 2048 [ 191.191048][ T6708] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 191.203183][ T6708] ext4 filesystem being mounted at /176/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 191.441477][ T6712] netlink: 36 bytes leftover after parsing attributes in process `syz.4.916'. [ 191.466279][ T6712] netlink: 64 bytes leftover after parsing attributes in process `syz.4.916'. [ 192.037975][ T6733] loop4: detected capacity change from 0 to 128 [ 192.061420][ T6732] 9pnet: Insufficient options for proto=fd [ 192.160500][ T6733] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_dev=0x0000000000000000,nouid32,,errors=continue. Quota mode: none. [ 192.214741][ T4216] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 192.229885][ T6733] ext4 filesystem being mounted at /172/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 192.500251][ T4216] usb 3-1: Using ep0 maxpacket: 16 [ 192.560315][ T4172] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 192.620443][ T4216] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping [ 192.810655][ T4172] usb 2-1: Using ep0 maxpacket: 16 [ 192.824872][ T6759] loop0: detected capacity change from 0 to 2048 [ 192.832497][ T4216] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 192.842190][ T4216] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.850731][ T4216] usb 3-1: Product: syz [ 192.854995][ T4216] usb 3-1: Manufacturer: syz [ 192.859599][ T4216] usb 3-1: SerialNumber: syz [ 192.865660][ T4216] usb 3-1: config 0 descriptor?? [ 192.905290][ T6759] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 192.925467][ T6759] ext4 filesystem being mounted at /197/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 192.950451][ T4172] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 192.967524][ T4172] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 192.977697][ T4172] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.992203][ T4172] usb 2-1: config 0 descriptor?? [ 193.332801][ T6764] 9pnet: Insufficient options for proto=fd [ 193.425066][ T6768] loop4: detected capacity change from 0 to 164 [ 193.463369][ T4172] mcp2221 0003:04D8:00DD.0009: unknown main item tag 0x0 [ 193.470590][ T4172] mcp2221 0003:04D8:00DD.0009: unknown main item tag 0x0 [ 193.477710][ T4172] mcp2221 0003:04D8:00DD.0009: unknown main item tag 0x0 [ 193.484926][ T4172] mcp2221 0003:04D8:00DD.0009: unknown main item tag 0x0 [ 193.492114][ T4172] mcp2221 0003:04D8:00DD.0009: unknown main item tag 0x0 [ 193.499660][ T4172] mcp2221 0003:04D8:00DD.0009: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 193.584121][ T6771] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 193.743125][ T23] usb 2-1: USB disconnect, device number 9 [ 194.203529][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.209847][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.295171][ T23] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 194.657591][ T6796] loop4: detected capacity change from 0 to 2048 [ 194.660470][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 194.675006][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 194.685135][ T23] usb 1-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 194.694612][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.711080][ T23] usb 1-1: config 0 descriptor?? [ 194.726760][ T6796] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 194.916763][ T21] usb 3-1: USB disconnect, device number 9 [ 195.098022][ T6802] loop2: detected capacity change from 0 to 2048 [ 195.178146][ T6802] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 195.389395][ T6808] loop2: detected capacity change from 0 to 2048 [ 195.505833][ T6808] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 195.538715][ T6808] ext4 filesystem being mounted at /187/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 195.761807][ T23] hid-led: probe of 0003:27B8:01ED.000A failed with error -71 [ 195.771727][ T23] usb 1-1: USB disconnect, device number 10 [ 196.759550][ T6853] capability: warning: `syz.3.971' uses 32-bit capabilities (legacy support in use) [ 196.796740][ T6855] netlink: 'syz.2.966': attribute type 10 has an invalid length. [ 196.853390][ T6855] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 196.868327][ T6859] loop2: detected capacity change from 0 to 1024 [ 196.983046][ T6860] sch_tbf: burst 824 is lower than device lo mtu (65550) ! [ 197.584626][ T6863] loop3: detected capacity change from 0 to 256 [ 197.594684][ T6859] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,,errors=continue. Quota mode: none. [ 197.717406][ T6868] loop4: detected capacity change from 0 to 1024 [ 197.731382][ T6869] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 197.805948][ T6874] loop0: detected capacity change from 0 to 2048 [ 197.832203][ T26] audit: type=1800 audit(1740977434.610:84): pid=6868 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.974" name="file1" dev="loop4" ino=20 res=0 errno=0 [ 197.915626][ T6874] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 197.941383][ T6874] ext4 filesystem being mounted at /204/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 198.035883][ T3099] hfsplus: b-tree write err: -5, ino 4 [ 199.060217][ T4216] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 199.137358][ T6908] loop2: detected capacity change from 0 to 2048 [ 199.231875][ T6908] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 199.301054][ T6908] EXT4-fs (loop2): mounted filesystem without journal. Opts: nombcache,usrjquota=,errors=remount-ro,norecovery,barrier=0x0000000000000008,mblk_io_submit,minixdf,resuid=0x0000000000000000,grpjquota=,bsddf,. Quota mode: none. [ 199.329772][ T4216] usb 4-1: Using ep0 maxpacket: 8 [ 199.450470][ T6917] sch_tbf: burst 824 is lower than device lo mtu (65550) ! [ 200.300043][ T6925] loop0: detected capacity change from 0 to 2048 [ 200.310597][ T4216] usb 4-1: config 6 has an invalid interface number: 2 but max is 0 [ 200.318667][ T4216] usb 4-1: config 6 has no interface number 0 [ 200.338651][ T6928] loop4: detected capacity change from 0 to 2048 [ 200.350204][ T4216] usb 4-1: config 6 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 200.366693][ T4216] usb 4-1: config 6 interface 2 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 200.511363][ T6928] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 200.590954][ T6925] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 200.781918][ T4216] usb 4-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 200.818946][ T4216] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.830911][ T6925] ext4 filesystem being mounted at /207/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 201.005721][ T4216] usb 4-1: Product: syz [ 201.148301][ T4216] usb 4-1: Manufacturer: syz [ 201.349631][ T4216] usb 4-1: SerialNumber: syz [ 201.390417][ T4216] usb 4-1: can't set config #6, error -71 [ 201.470054][ T4216] usb 4-1: USB disconnect, device number 6 [ 203.805408][ T4172] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 204.221168][ T4172] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 204.230305][ T4172] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.240239][ T4172] usb 1-1: config 0 descriptor?? [ 204.291819][ T4172] cp210x 1-1:0.0: cp210x converter detected [ 204.452538][ T2425] pvrusb2: request_firmware fatal error with code=-110 [ 204.459424][ T2425] pvrusb2: Failure uploading firmware1 [ 204.500148][ T2425] pvrusb2: Device initialization was not successful. [ 204.506926][ T2425] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 204.520335][ T2425] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 204.534450][ T1324] pvrusb2: Device being rendered inoperable [ 204.544290][ T4266] udevd[4266]: failed to send result of seq 11659 to main daemon: Connection refused [ 204.746538][ T4172] cp210x 1-1:0.0: failed to get vendor val 0x0010 size 3: -71 [ 204.780407][ T4172] cp210x 1-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 204.792770][ T4172] cp210x 1-1:0.0: GPIO initialisation failed: -71 [ 204.825094][ T4172] usb 1-1: cp210x converter now attached to ttyUSB0 [ 204.845370][ T4172] usb 1-1: USB disconnect, device number 11 [ 204.868440][ T4172] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 204.897261][ T4172] cp210x 1-1:0.0: device disconnected [ 204.915149][ T6993] loop3: detected capacity change from 0 to 2048 [ 204.960256][ T1324] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 204.995783][ T6993] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 205.073415][ T6993] EXT4-fs (loop3): mounted filesystem without journal. Opts: nombcache,usrjquota=,errors=remount-ro,norecovery,barrier=0x0000000000000008,mblk_io_submit,minixdf,resuid=0x0000000000000000,grpjquota=,bsddf,. Quota mode: none. [ 205.430306][ T1324] usb 5-1: device not accepting address 5, error -71 [ 205.465304][ T7003] loop3: detected capacity change from 0 to 256 [ 205.544436][ T7003] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 205.568611][ T7003] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 205.593230][ T7003] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 205.719221][ T7010] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1020'. [ 205.785693][ T7010] net_ratelimit: 10 callbacks suppressed [ 205.785716][ T7010] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 205.816045][ T7010] openvswitch: netlink: Message has 5 unknown bytes. [ 205.830578][ T1324] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 205.962481][ T7017] sch_tbf: burst 824 is lower than device lo mtu (65550) ! [ 206.813846][ T7030] loop2: detected capacity change from 0 to 4096 [ 206.874822][ T7030] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 206.899835][ T7038] loop1: detected capacity change from 0 to 2048 [ 206.936945][ T1324] usb 5-1: Using ep0 maxpacket: 32 [ 206.974822][ T7038] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 207.040667][ T7038] EXT4-fs (loop1): mounted filesystem without journal. Opts: nombcache,usrjquota=,errors=remount-ro,norecovery,barrier=0x0000000000000008,mblk_io_submit,minixdf,resuid=0x0000000000000000,grpjquota=,bsddf,. Quota mode: none. [ 207.090873][ T1324] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 207.107789][ T1324] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 207.136440][ T1324] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 207.163233][ T7047] loop0: detected capacity change from 0 to 64 [ 207.173980][ T1324] usb 5-1: config 1 has no interface number 0 [ 207.192897][ T1324] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 207.210610][ T1324] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 207.230115][ T1324] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 207.239357][ T1324] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.306729][ T7047] hfs: walked past end of dir [ 207.315458][ T1324] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 207.380369][ T21] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 207.436696][ T7051] 9pnet: Could not find request transport: fd0x0000000000000003 [ 207.537540][ T1324] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached [ 207.738134][ T7063] loop0: detected capacity change from 0 to 512 [ 207.750540][ T21] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 207.771812][ T21] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 207.785658][ T21] usb 3-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 207.812159][ T21] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.820255][ T7063] EXT4-fs error (device loop0): ext4_orphan_get:1427: comm syz.0.1042: bad orphan inode 13 [ 207.831556][ T21] usb 3-1: config 0 descriptor?? [ 207.833539][ T7063] ext4_test_bit(bit=12, block=4) = 1 [ 207.860530][ T7063] is_bad_inode(inode)=0 [ 207.864722][ T7063] NEXT_ORPHAN(inode)=0 [ 207.880997][ T7063] max_ino=32 [ 207.884238][ T7063] i_nlink=1 [ 207.887442][ T7063] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 207.910636][ T7063] EXT4-fs warning (device loop0): dx_probe:833: inode #2: comm syz.0.1042: Unrecognised inode hash code 20 [ 207.922767][ T7063] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.1042: Corrupt directory, running e2fsck is recommended [ 207.939622][ T7063] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 13: comm syz.0.1042: path /221/file0: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0 [ 207.963175][ T1324] usb 5-1: USB disconnect, device number 6 [ 207.969233][ T7063] EXT4-fs error (device loop0): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.0.1042: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0 [ 207.991006][ T1324] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 208.071669][ T7076] 9pnet: Could not find request transport: fd0x0000000000000003 [ 208.170261][ T23] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 208.178018][ T4243] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 208.495117][ T7087] loop4: detected capacity change from 0 to 256 [ 208.549879][ T7087] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 208.550596][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 208.572081][ T4243] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 208.582259][ T4243] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xBA, skipping [ 208.593355][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 208.750422][ T4243] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 208.759606][ T4243] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.768021][ T21] hid-led: probe of 0003:27B8:01ED.000B failed with error -71 [ 208.776484][ T23] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 208.785599][ T4243] usb 2-1: Product: syz [ 208.789772][ T4243] usb 2-1: Manufacturer: syz [ 208.797002][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.805067][ T21] usb 3-1: USB disconnect, device number 10 [ 208.811227][ T4243] usb 2-1: SerialNumber: syz [ 208.818268][ T23] usb 4-1: Product: syz [ 208.824443][ T4243] usb 2-1: config 0 descriptor?? [ 208.829510][ T23] usb 4-1: Manufacturer: syz [ 208.834181][ T23] usb 4-1: SerialNumber: syz [ 208.840573][ T7073] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 208.857421][ T23] usb 4-1: config 0 descriptor?? [ 208.862933][ T7073] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 208.880970][ T4243] usb 2-1: ucan: probing device on interface #0 [ 208.889013][ T4243] usb 2-1: ucan: invalid EP count (1) [ 208.894705][ T4243] usb 2-1: ucan: probe failed; try to update the device firmware [ 209.000284][ T4211] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 209.137017][ T23] usb 4-1: USB disconnect, device number 7 [ 209.320217][ T4211] usb 5-1: Using ep0 maxpacket: 8 [ 209.601801][ T4211] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 209.675190][ T4211] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.858303][ T4211] usb 5-1: config 0 descriptor?? [ 210.217343][ T7102] 9pnet: Could not find request transport: fd0x0000000000000003 [ 210.588370][ T7116] loop0: detected capacity change from 0 to 4096 [ 210.616577][ T7116] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 211.131744][ T1324] usb 2-1: USB disconnect, device number 10 [ 211.487310][ T7116] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 211.496388][ T7125] loop1: detected capacity change from 0 to 256 [ 211.564145][ T7125] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 211.577509][ T7125] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 211.588307][ T7125] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 211.604313][ T7125] UDF-fs: Scanning with blocksize 512 failed [ 211.613550][ T7125] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 211.632047][ T7125] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 211.746491][ T7129] 9pnet: Insufficient options for proto=fd [ 211.749304][ T23] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 211.792845][ T26] audit: type=1326 audit(1740977448.570:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7131 comm="syz.0.1073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2772429169 code=0x7ffc0000 [ 211.815710][ T26] audit: type=1326 audit(1740977448.570:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7131 comm="syz.0.1073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2772429169 code=0x7ffc0000 [ 211.839149][ T26] audit: type=1326 audit(1740977448.570:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7131 comm="syz.0.1073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7f2772429169 code=0x7ffc0000 [ 211.863540][ T26] audit: type=1326 audit(1740977448.570:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7131 comm="syz.0.1073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2772429169 code=0x7ffc0000 [ 212.141321][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 84, setting to 64 [ 212.160475][ T26] audit: type=1326 audit(1740977448.570:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7131 comm="syz.0.1073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2772429169 code=0x7ffc0000 [ 212.243970][ T23] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 212.300739][ T4211] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 212.365305][ T4211] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 212.522190][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.548048][ T7136] loop1: detected capacity change from 0 to 512 [ 212.559348][ T4211] asix: probe of 5-1:0.0 failed with error -71 [ 212.575376][ T4211] usb 5-1: USB disconnect, device number 7 [ 212.601673][ T23] usb 3-1: config 0 descriptor?? [ 212.646982][ T7139] loop3: detected capacity change from 0 to 1024 [ 212.662100][ T7136] EXT4-fs error (device loop1): ext4_orphan_get:1427: comm syz.1.1072: bad orphan inode 13 [ 212.673648][ T7139] EXT4-fs (loop3): Ignoring removed orlov option [ 212.676489][ T7136] ext4_test_bit(bit=12, block=4) = 1 [ 212.682703][ T7139] EXT4-fs (loop3): Ignoring removed orlov option [ 212.685772][ T7136] is_bad_inode(inode)=0 [ 212.685786][ T7136] NEXT_ORPHAN(inode)=0 [ 212.685797][ T7136] max_ino=32 [ 212.685806][ T7136] i_nlink=1 [ 212.685878][ T7136] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 212.705678][ T7136] EXT4-fs warning (device loop1): dx_probe:833: inode #2: comm syz.1.1072: Unrecognised inode hash code 20 [ 212.728158][ T7139] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsv1,resgid=0x0000000000000000,barrier=0x0000000000000000,norecovery,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,orlov,orlov,. Quota mode: none. [ 212.730426][ T7136] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.1072: Corrupt directory, running e2fsck is recommended [ 212.767074][ T7136] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 13: comm syz.1.1072: path /227/file0: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0 [ 212.777409][ T7139] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2816: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 212.789598][ T7136] EXT4-fs error (device loop1): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.1.1072: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0 [ 212.860352][ T23] ath6kl: Failed to submit usb control message: -71 [ 212.867493][ T23] ath6kl: unable to send the bmi data to the device: -71 [ 212.876334][ T23] ath6kl: Unable to send get target info: -71 [ 212.890216][ T21] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 212.916172][ T23] ath6kl: Failed to init ath6kl core: -71 [ 212.958671][ T23] ath6kl_usb: probe of 3-1:0.0 failed with error -71 [ 212.979294][ T23] usb 3-1: USB disconnect, device number 11 [ 213.410375][ T21] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 213.443002][ T21] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 213.465983][ T21] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 213.486903][ T21] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.513036][ T21] usb 1-1: config 0 descriptor?? [ 213.519579][ T7161] 9pnet: Insufficient options for proto=fd [ 214.054801][ T21] cp2112 0003:10C4:EA90.000C: unknown main item tag 0x0 [ 214.116800][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 214.703522][ T21] cp2112 0003:10C4:EA90.000C: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 214.900363][ T21] cp2112 0003:10C4:EA90.000C: Part Number: 0x82 Device Version: 0xFE [ 215.121333][ T21] cp2112 0003:10C4:EA90.000C: error requesting SMBus config [ 215.334479][ T21] cp2112: probe of 0003:10C4:EA90.000C failed with error -71 [ 215.677260][ T21] usb 1-1: USB disconnect, device number 12 [ 215.754303][ T7175] loop1: detected capacity change from 0 to 2048 [ 215.874474][ T7175] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 215.983110][ T7193] loop2: detected capacity change from 0 to 1024 [ 216.055280][ T7193] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 217.126975][ T21] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 217.263230][ T7211] loop0: detected capacity change from 0 to 2048 [ 217.454663][ T7219] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 217.538876][ T21] usb 2-1: Using ep0 maxpacket: 16 [ 217.680875][ T21] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 217.790917][ T21] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 217.937912][ T21] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 218.209526][ T21] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 218.248920][ T21] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.294187][ T21] usb 2-1: config 0 descriptor?? [ 218.860408][ T21] usbhid 2-1:0.0: can't add hid device: -71 [ 218.866906][ T21] usbhid: probe of 2-1:0.0 failed with error -71 [ 218.883127][ T21] usb 2-1: USB disconnect, device number 11 [ 219.296744][ T7250] loop4: detected capacity change from 0 to 16 [ 219.349229][ T7250] erofs: (device loop4): mounted with root inode @ nid 36. [ 220.885189][ T7297] loop0: detected capacity change from 0 to 4096 [ 220.926927][ T7305] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1133'. [ 220.944678][ T7297] ntfs3: Unknown parameter 'windows_names' [ 221.941094][ T7315] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1137'. [ 221.993061][ T7317] netlink: 'syz.3.1138': attribute type 4 has an invalid length. [ 222.043129][ T26] audit: type=1326 audit(1740977458.820:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7318 comm="syz.2.1139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc75e3ed169 code=0x7ffc0000 [ 222.140252][ T26] audit: type=1326 audit(1740977458.820:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7318 comm="syz.2.1139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc75e3ed169 code=0x7ffc0000 [ 222.163347][ T1324] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 222.178117][ T26] audit: type=1326 audit(1740977458.880:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7318 comm="syz.2.1139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7fc75e3ed169 code=0x7ffc0000 [ 222.237244][ T26] audit: type=1326 audit(1740977458.890:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7318 comm="syz.2.1139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc75e3ed169 code=0x7ffc0000 [ 222.266522][ T7327] loop4: detected capacity change from 0 to 2048 [ 222.353323][ T7327] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 222.432830][ T1324] usb 2-1: Using ep0 maxpacket: 16 [ 222.470194][ T4243] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 222.570680][ T1324] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping [ 222.621207][ T7338] loop4: detected capacity change from 0 to 4096 [ 222.720277][ T4243] usb 1-1: Using ep0 maxpacket: 16 [ 222.726963][ T7341] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 222.762920][ T7340] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 222.769488][ T7340] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 222.790546][ T1324] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 222.799717][ T1324] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.820185][ T1324] usb 2-1: Product: syz [ 222.825087][ T1324] usb 2-1: Manufacturer: syz [ 222.832137][ T7340] vhci_hcd vhci_hcd.0: Device attached [ 222.842428][ T4243] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 222.850197][ T1324] usb 2-1: SerialNumber: syz [ 222.866944][ T1324] usb 2-1: config 0 descriptor?? [ 222.868539][ T4243] usb 1-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 222.888760][ T4243] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.899786][ T4243] usb 1-1: config 0 descriptor?? [ 222.963846][ T4243] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input9 [ 223.060279][ T6545] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 223.150194][ T7] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 223.162881][ T7323] input: syz1 as /devices/virtual/input/input10 [ 223.300289][ T6545] usb 4-1: Using ep0 maxpacket: 16 [ 223.580335][ T6545] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 223.590179][ T6545] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.598235][ T6545] usb 4-1: Product: syz [ 223.602605][ T6545] usb 4-1: Manufacturer: syz [ 223.607222][ T6545] usb 4-1: SerialNumber: syz [ 223.613873][ T6545] usb 4-1: config 0 descriptor?? [ 223.651327][ T6545] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 223.659547][ T6545] usb 4-1: Detected FT232H [ 223.838426][ T7356] loop4: detected capacity change from 0 to 128 [ 223.852590][ T7342] vhci_hcd: connection reset by peer [ 223.858546][ T4340] vhci_hcd: stop threads [ 223.863482][ T6545] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 223.870288][ T4340] vhci_hcd: release socket [ 223.872476][ T4340] vhci_hcd: disconnect device [ 223.890309][ T6545] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 223.920381][ T6545] ftdi_sio 4-1:0.0: GPIO initialisation failed: -71 [ 223.932355][ T6545] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 223.940353][ T7] vhci_hcd: vhci_device speed not set [ 223.952236][ T6545] usb 4-1: USB disconnect, device number 8 [ 223.964726][ T6545] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 223.975173][ T6545] ftdi_sio 4-1:0.0: device disconnected [ 224.138192][ T4172] usb 2-1: USB disconnect, device number 12 [ 224.170064][ T7363] loop1: detected capacity change from 0 to 256 [ 224.270476][ T7363] FAT-fs (loop1): Directory bread(block 64) failed [ 224.277677][ T7363] FAT-fs (loop1): Directory bread(block 65) failed [ 224.297838][ T7363] FAT-fs (loop1): Directory bread(block 66) failed [ 224.310183][ T7363] FAT-fs (loop1): Directory bread(block 67) failed [ 224.316853][ T7363] FAT-fs (loop1): Directory bread(block 68) failed [ 224.330343][ T1324] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 224.333620][ T7363] FAT-fs (loop1): Directory bread(block 69) failed [ 224.360261][ T7363] FAT-fs (loop1): Directory bread(block 70) failed [ 224.366874][ T7363] FAT-fs (loop1): Directory bread(block 71) failed [ 224.383711][ T7363] FAT-fs (loop1): Directory bread(block 72) failed [ 224.400194][ T7363] FAT-fs (loop1): Directory bread(block 73) failed [ 224.532877][ T7370] loop3: detected capacity change from 0 to 2048 [ 224.614352][ T7370] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 224.947421][ T1324] usb 5-1: New USB device found, idVendor=046d, idProduct=08b4, bcdDevice= e.32 [ 224.959680][ T1324] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.973047][ T1324] usb 5-1: Product: syz [ 224.977249][ T1324] usb 5-1: Manufacturer: syz [ 224.985579][ T1324] usb 5-1: SerialNumber: syz [ 225.009421][ T1324] usb 5-1: config 0 descriptor?? [ 225.058357][ T1324] pwc: Logitech QuickCam Zoom (new model) USB webcam detected. [ 225.106535][ T7392] loop2: detected capacity change from 0 to 24 [ 225.160828][ T3532] bcm5974 1-1:0.0: could not read from device [ 225.173574][ T4243] usb 1-1: USB disconnect, device number 13 [ 225.262939][ T7359] loop4: detected capacity change from 0 to 512 [ 225.403972][ T7401] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1167'. [ 225.405456][ T7359] EXT4-fs (loop4): Test dummy encryption mode enabled [ 225.423075][ T7403] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 225.431272][ T7359] EXT4-fs (loop4): old and new quota format mixing [ 225.439059][ T7403] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 225.519120][ T7412] loop0: detected capacity change from 0 to 1024 [ 225.595124][ T7412] hfsplus: bad catalog entry type [ 225.754176][ T7415] loop0: detected capacity change from 0 to 2048 [ 225.890285][ T7415] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 226.062834][ T7429] loop3: detected capacity change from 0 to 24 [ 226.220939][ T21] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 226.590283][ T21] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 226.610194][ T21] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 226.700295][ T21] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 226.709377][ T21] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 226.730172][ T21] usb 2-1: SerialNumber: syz [ 227.034610][ T21] usb 2-1: 0:2 : does not exist [ 227.048893][ T21] usb 2-1: USB disconnect, device number 13 [ 227.088945][ T1324] pwc: Failed to set LED on/off time (-71) [ 227.120318][ T1324] pwc: send_video_command error -71 [ 227.126751][ T1324] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 227.142743][ T1324] Philips webcam: probe of 5-1:0.0 failed with error -71 [ 227.160475][ T1324] usb 5-1: USB disconnect, device number 8 [ 227.217919][ T7467] loop4: detected capacity change from 0 to 2048 [ 227.302190][ T7467] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 227.354930][ T7479] loop3: detected capacity change from 0 to 8 [ 227.915227][ T7492] loop3: detected capacity change from 0 to 32768 [ 227.969338][ T7492] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.1198 (7492) [ 228.075330][ T7492] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 228.084618][ T7492] BTRFS info (device loop3): enabling auto defrag [ 228.091111][ T7492] BTRFS info (device loop3): doing ref verification [ 228.097723][ T7492] BTRFS info (device loop3): use no compression [ 228.104080][ T7492] BTRFS info (device loop3): max_inline at 4096 [ 228.110790][ T7492] BTRFS info (device loop3): enabling ssd optimizations [ 228.118132][ T7492] BTRFS info (device loop3): using spread ssd allocation scheme [ 228.125987][ T7492] BTRFS info (device loop3): using free space tree [ 228.132692][ T7492] BTRFS info (device loop3): has skinny extents [ 228.521533][ T7543] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1217'. [ 228.547182][ T7538] loop4: detected capacity change from 0 to 2048 [ 228.687117][ T7538] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 228.969878][ T7562] loop2: detected capacity change from 0 to 512 [ 229.490438][ T4172] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 229.716693][ T7589] loop4: detected capacity change from 0 to 2048 [ 229.780017][ T7589] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 229.890308][ T4172] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 229.903058][ T4172] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 229.915782][ T4172] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.932172][ T4172] usb 3-1: config 0 descriptor?? [ 229.954731][ T7607] loop4: detected capacity change from 0 to 128 [ 229.970340][ T7565] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 229.982756][ T4172] pwc: Askey VC010 type 2 USB webcam detected. [ 230.094150][ T7609] loop4: detected capacity change from 0 to 512 [ 230.249465][ T7611] syz.4.1237[7611] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 230.249574][ T7611] syz.4.1237[7611] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 230.279516][ T7613] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1238'. [ 230.400378][ T7565] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 230.420331][ T4172] pwc: recv_control_msg error -32 req 02 val 2b00 [ 230.455448][ T7623] loop1: detected capacity change from 0 to 2048 [ 230.462191][ T4172] pwc: recv_control_msg error -32 req 02 val 2700 [ 230.501485][ T4172] pwc: recv_control_msg error -32 req 02 val 2c00 [ 230.520396][ T7565] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.4b [ 230.529782][ T7565] usb 1-1: New USB device strings: Mfr=0, Product=64, SerialNumber=0 [ 230.537796][ T7623] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 230.538194][ T7565] usb 1-1: Product: syz [ 230.549860][ T4172] pwc: recv_control_msg error -32 req 04 val 1000 [ 230.566338][ T7565] usb 1-1: config 0 descriptor?? [ 230.600462][ T4172] pwc: recv_control_msg error -32 req 04 val 1300 [ 230.640606][ T4172] pwc: recv_control_msg error -32 req 04 val 1400 [ 230.686375][ T4172] pwc: recv_control_msg error -32 req 02 val 2000 [ 230.730286][ T4172] pwc: recv_control_msg error -32 req 02 val 2100 [ 230.759654][ T7] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 230.770301][ T4172] pwc: recv_control_msg error -32 req 04 val 1500 [ 230.786968][ T7634] loop3: detected capacity change from 0 to 1024 [ 230.791116][ T7] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 230.810265][ T4172] pwc: recv_control_msg error -32 req 02 val 2500 [ 230.831879][ T7638] loop1: detected capacity change from 0 to 512 [ 230.846541][ T7634] EXT4-fs (loop3): Mount option "nodioread_nolock" incompatible with ext2 [ 230.850422][ T4172] pwc: recv_control_msg error -32 req 02 val 2400 [ 230.900434][ T4172] pwc: recv_control_msg error -32 req 02 val 2600 [ 230.940343][ T4172] pwc: recv_control_msg error -32 req 02 val 2900 [ 230.980417][ T4172] pwc: recv_control_msg error -32 req 02 val 2800 [ 231.060393][ T7565] ath6kl: Unsupported hardware version: 0x16691e22 [ 231.080888][ T7565] ath6kl: Failed to init ath6kl core: -22 [ 231.103455][ T7565] ath6kl_usb: probe of 1-1:0.0 failed with error -22 [ 231.240582][ T4172] pwc: recv_control_msg error -71 req 04 val 1200 [ 231.248050][ T4172] pwc: Registered as video103. [ 231.254248][ T4172] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input11 [ 231.275851][ T4172] usb 3-1: USB disconnect, device number 12 [ 231.300793][ T13] usb 1-1: USB disconnect, device number 14 [ 231.397397][ T7647] process 'syz.4.1250' launched './file0' with NULL argv: empty string added [ 231.748831][ T7654] sch_tbf: burst 824 is lower than device lo mtu (65550) ! [ 232.572907][ T7662] loop4: detected capacity change from 0 to 2048 [ 232.709696][ T7673] loop1: detected capacity change from 0 to 1024 [ 232.728663][ T7662] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 232.841443][ T7673] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 233.685020][ T7680] loop1: detected capacity change from 0 to 2048 [ 233.779730][ T7680] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 233.874028][ T7695] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 233.874657][ T7680] attempt to access beyond end of device [ 233.874657][ T7680] loop1: rw=524288, want=33554432, limit=2048 [ 233.977947][ T7680] attempt to access beyond end of device [ 233.977947][ T7680] loop1: rw=0, want=33554432, limit=2048 [ 234.076826][ T7680] NILFS (loop1): I/O error reading meta-data file (ino=6, block-offset=3) [ 234.099180][ T7680] NILFS (loop1): error -5 reading inode: ino=12 [ 234.170203][ T4172] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 234.184617][ T7706] sch_tbf: burst 824 is lower than device lo mtu (65550) ! [ 234.966954][ T7704] fuse: Unknown parameter '0x0000000000000007' [ 235.027781][ T7711] loop3: detected capacity change from 0 to 2048 [ 235.250373][ T4172] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 235.287498][ T7720] loop2: detected capacity change from 0 to 64 [ 235.301040][ T7711] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 236.016850][ T4172] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.4b [ 236.029729][ T4172] usb 5-1: New USB device strings: Mfr=0, Product=64, SerialNumber=0 [ 236.047283][ T4172] usb 5-1: Product: syz [ 236.057967][ T4172] usb 5-1: config 0 descriptor?? [ 236.377561][ T7733] loop3: detected capacity change from 0 to 4096 [ 236.430946][ T7733] ntfs3: Unknown parameter 'windows_names' [ 236.640523][ T4172] ath6kl: Unsupported hardware version: 0x16691e22 [ 236.672301][ T4172] ath6kl: Failed to init ath6kl core: -22 [ 236.688631][ T7744] loop3: detected capacity change from 0 to 1024 [ 236.699083][ T4172] ath6kl_usb: probe of 5-1:0.0 failed with error -22 [ 236.815188][ T7745] sch_tbf: burst 824 is lower than device lo mtu (65550) ! [ 237.430413][ T154] hfsplus: b-tree write err: -5, ino 4 [ 237.543874][ T4172] usb 5-1: USB disconnect, device number 9 [ 237.696833][ T7755] loop3: detected capacity change from 0 to 2048 [ 237.820909][ T7755] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 238.742372][ T7785] loop0: detected capacity change from 0 to 47 [ 238.928497][ T7793] loop4: detected capacity change from 0 to 1024 [ 239.026703][ T7793] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 239.918710][ T7805] loop4: detected capacity change from 0 to 2048 [ 240.010278][ T6546] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 240.038148][ T7811] loop2: detected capacity change from 0 to 2048 [ 240.044301][ T7805] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 240.064983][ T7812] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 240.065577][ T7805] attempt to access beyond end of device [ 240.065577][ T7805] loop4: rw=524288, want=33554432, limit=2048 [ 240.096426][ T7811] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 240.115977][ T7805] attempt to access beyond end of device [ 240.115977][ T7805] loop4: rw=0, want=33554432, limit=2048 [ 240.128215][ T13] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 240.133900][ T7805] NILFS (loop4): I/O error reading meta-data file (ino=6, block-offset=3) [ 240.144974][ T7805] NILFS (loop4): error -5 reading inode: ino=12 [ 240.237759][ T7816] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1303'. [ 240.250474][ T7565] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 240.370420][ T13] usb 4-1: Using ep0 maxpacket: 8 [ 240.490452][ T13] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 240.504287][ T13] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xBE, skipping [ 240.515394][ T13] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 240.750960][ T6546] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 240.761722][ T7565] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 240.802270][ T7565] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 240.911125][ T7565] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 240.923085][ T6546] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.4b [ 240.964030][ T6546] usb 2-1: New USB device strings: Mfr=0, Product=64, SerialNumber=0 [ 241.045128][ T7565] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 241.087269][ T6546] usb 2-1: Product: syz [ 241.278332][ T7565] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 241.308809][ T7829] loop4: detected capacity change from 0 to 128 [ 241.334979][ T6546] usb 2-1: config 0 descriptor?? [ 241.399191][ T7829] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 241.412002][ T7829] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 241.432562][ T7565] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 241.441990][ T7565] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 241.450017][ T7565] usb 1-1: Product: syz [ 241.454572][ T7565] usb 1-1: Manufacturer: syz [ 241.510546][ T13] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 241.511587][ T7565] cdc_wdm 1-1:1.0: skipping garbage [ 241.530005][ T13] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 241.531300][ T7565] cdc_wdm 1-1:1.0: skipping garbage [ 241.540201][ T13] usb 4-1: Product: syz [ 241.547538][ T13] usb 4-1: Manufacturer: syz [ 241.558213][ T7565] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 241.564726][ T7565] cdc_wdm 1-1:1.0: Unknown control protocol [ 241.574782][ T13] usb 4-1: SerialNumber: syz [ 241.595224][ T13] usb 4-1: config 0 descriptor?? [ 241.642787][ T13] radio-si470x 4-1:0.0: could not find interrupt in endpoint [ 241.650730][ T1324] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 241.658467][ T13] radio-si470x: probe of 4-1:0.0 failed with error -5 [ 241.666423][ T13] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 241.826031][ T7565] usb 1-1: USB disconnect, device number 15 [ 241.828420][ T26] audit: type=1326 audit(1740977478.600:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7806 comm="syz.0.1300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2772429169 code=0x7ffc0000 [ 241.855114][ T26] audit: type=1326 audit(1740977478.600:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7806 comm="syz.0.1300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2772429169 code=0x7ffc0000 [ 241.878132][ T6546] ath6kl: Unsupported hardware version: 0x16691e22 [ 241.884186][ T26] audit: type=1326 audit(1740977478.600:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7806 comm="syz.0.1300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=323 compat=0 ip=0x7f2772429169 code=0x7ffc0000 [ 241.885907][ T6546] ath6kl: Failed to init ath6kl core: -22 [ 241.906854][ C0] vkms_vblank_simulate: vblank timer overrun [ 241.910189][ T1324] usb 3-1: Using ep0 maxpacket: 8 [ 241.929624][ T6546] ath6kl_usb: probe of 2-1:0.0 failed with error -22 [ 242.001046][ T7843] sch_tbf: burst 824 is lower than device lo mtu (65550) ! [ 242.333710][ T26] audit: type=1326 audit(1740977478.600:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7806 comm="syz.0.1300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2772429169 code=0x7ffc0000 [ 242.654679][ T7565] usb 2-1: USB disconnect, device number 14 [ 242.662705][ T26] audit: type=1326 audit(1740977478.600:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7806 comm="syz.0.1300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2772429169 code=0x7ffc0000 [ 242.702440][ T26] audit: type=1326 audit(1740977478.600:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7806 comm="syz.0.1300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f2772429169 code=0x7ffc0000 [ 242.733124][ T26] audit: type=1326 audit(1740977478.600:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7806 comm="syz.0.1300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2772429169 code=0x7ffc0000 [ 242.765010][ T26] audit: type=1326 audit(1740977478.600:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7806 comm="syz.0.1300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2772429169 code=0x7ffc0000 [ 242.782176][ T7849] loop4: detected capacity change from 0 to 2048 [ 242.794494][ T26] audit: type=1326 audit(1740977478.600:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7806 comm="syz.0.1300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f2772429169 code=0x7ffc0000 [ 242.817514][ T26] audit: type=1326 audit(1740977478.600:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7806 comm="syz.0.1300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2772429169 code=0x7ffc0000 [ 242.850440][ T1324] usb 3-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 242.866419][ T1324] usb 3-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 242.875739][ T1324] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.904291][ T7849] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 242.906663][ T13] usb 4-1: USB disconnect, device number 9 [ 242.983249][ T7854] loop3: detected capacity change from 0 to 4096 [ 243.000405][ T6546] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 243.038927][ T7854] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 243.160432][ T1324] usb 3-1: string descriptor 0 read error: -71 [ 243.167699][ T1324] hub 3-1:32.0: USB hub found [ 243.230436][ T1324] hub 3-1:32.0: config failed, can't read hub descriptor (err -22) [ 243.291054][ T1324] usb 3-1: USB disconnect, device number 13 [ 243.600373][ T6546] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 243.609765][ T6546] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.617836][ T6546] usb 1-1: Product: syz [ 243.622099][ T6546] usb 1-1: Manufacturer: syz [ 243.626714][ T6546] usb 1-1: SerialNumber: syz [ 243.641931][ T6546] usb 1-1: config 0 descriptor?? [ 243.688494][ T7858] loop4: detected capacity change from 0 to 1024 [ 243.731639][ T7862] loop2: detected capacity change from 0 to 1024 [ 243.787417][ T7865] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1318'. [ 243.792551][ T7862] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 243.838232][ T4181] hfsplus: bad catalog entry type [ 243.853124][ T7866] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1318'. [ 243.933215][ T7565] usb 1-1: USB disconnect, device number 16 [ 244.024996][ T7869] loop2: detected capacity change from 0 to 2048 [ 244.075919][ T7869] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 244.105552][ T7869] attempt to access beyond end of device [ 244.105552][ T7869] loop2: rw=524288, want=33554432, limit=2048 [ 244.128452][ T7872] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 244.209554][ T7869] attempt to access beyond end of device [ 244.209554][ T7869] loop2: rw=0, want=33554432, limit=2048 [ 244.223926][ T7869] NILFS (loop2): I/O error reading meta-data file (ino=6, block-offset=3) [ 244.232863][ T7869] NILFS (loop2): error -5 reading inode: ino=12 [ 244.611444][ T9] hfsplus: b-tree write err: -5, ino 4 [ 244.993579][ T7876] loop1: detected capacity change from 0 to 512 [ 245.113279][ T7876] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 245.136674][ T7876] ext4 filesystem being mounted at /275/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 245.183510][ T1185] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.254538][ T7876] syz.1.1322[7876] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 245.254646][ T7876] syz.1.1322[7876] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 245.455000][ T7892] sch_tbf: burst 824 is lower than device lo mtu (65550) ! [ 245.780574][ T7564] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 245.843685][ T1185] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.154212][ T1185] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.180305][ T7564] usb 3-1: Using ep0 maxpacket: 32 [ 246.247893][ T1185] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.289968][ T7896] loop1: detected capacity change from 0 to 1024 [ 246.320491][ T13] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 246.414556][ T7896] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a800e018, mo2=0002] [ 246.430241][ T7896] System zones: 0-1, 3-12 [ 246.441625][ T7896] EXT4-fs (loop1): mounted filesystem without journal. Opts: nolazytime,nouid32,barrier=0x0000000000000000,debug,debug_want_extra_isize=0x0000000000000008,resuid=0x0000000000000000,init_itable=0x0000000000000800,data_err=ignore,min_batch_time=0x0000000000000006,,errors=continue. Quota mode: none. [ 246.510495][ T7564] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 246.519608][ T7564] usb 3-1: New USB device strings: Mfr=204, Product=2, SerialNumber=35 [ 246.540174][ T7564] usb 3-1: Product: syz [ 246.544373][ T7564] usb 3-1: Manufacturer: syz [ 246.548985][ T7564] usb 3-1: SerialNumber: syz [ 246.572104][ T7564] usb 3-1: config 0 descriptor?? [ 246.628330][ T7564] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 246.750494][ T7899] chnl_net:caif_netlink_parms(): no params data found [ 246.840352][ T13] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 246.854383][ T13] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.862763][ T13] usb 4-1: Product: syz [ 246.866982][ T13] usb 4-1: Manufacturer: syz [ 246.871722][ T13] usb 4-1: SerialNumber: syz [ 246.886793][ T7899] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.891198][ T13] usb 4-1: config 0 descriptor?? [ 246.901336][ T7899] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.909850][ T7899] device bridge_slave_0 entered promiscuous mode [ 246.924702][ T7899] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.933501][ T7899] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.945704][ T7899] device bridge_slave_1 entered promiscuous mode [ 246.951119][ T7916] loop1: detected capacity change from 0 to 512 [ 246.991264][ T7899] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 247.002911][ T7899] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 247.035865][ T7916] EXT4-fs (loop1): Mount option "journal_async_commit" incompatible with ext3 [ 247.057586][ T7899] team0: Port device team_slave_0 added [ 247.068070][ T7899] team0: Port device team_slave_1 added [ 247.101414][ T7899] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 247.108574][ T7899] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 247.135259][ T7899] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 247.148734][ T7899] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 247.156161][ T7899] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 247.184743][ T7899] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 247.296918][ T7899] device hsr_slave_0 entered promiscuous mode [ 247.304251][ T7899] device hsr_slave_1 entered promiscuous mode [ 247.322883][ T7899] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 247.331005][ T7899] Cannot create hsr debugfs directory [ 247.407257][ T7922] loop1: detected capacity change from 0 to 2048 [ 247.470607][ T7922] loop1: p1 < > p4 [ 247.481226][ T7922] loop1: p4 size 8388608 extends beyond EOD, truncated [ 247.994897][ T7932] sch_tbf: burst 824 is lower than device lo mtu (65550) ! [ 248.040438][ T7922] [ 248.042797][ T7922] ====================================================== [ 248.049819][ T7922] WARNING: possible circular locking dependency detected [ 248.056922][ T7922] 5.15.178-syzkaller #0 Not tainted [ 248.062119][ T7922] ------------------------------------------------------ [ 248.069133][ T7922] syz.1.1339/7922 is trying to acquire lock: [ 248.075114][ T7922] ffff88802a620c28 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}, at: __flush_work+0xcf/0x1a0 [ 248.086212][ T7922] [ 248.086212][ T7922] but task is already holding lock: [ 248.093585][ T7922] ffffffff8ded0008 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x1a5/0x790 [ 248.103268][ T7922] [ 248.103268][ T7922] which lock already depends on the new lock. [ 248.103268][ T7922] [ 248.113687][ T7922] [ 248.113687][ T7922] the existing dependency chain (in reverse order) is: [ 248.122844][ T7922] [ 248.122844][ T7922] -> #4 (rfkill_global_mutex){+.+.}-{3:3}: [ 248.130864][ T7922] lock_acquire+0x1db/0x4f0 [ 248.135907][ T7922] __mutex_lock_common+0x1da/0x25a0 [ 248.141650][ T7922] mutex_lock_nested+0x17/0x20 [ 248.146941][ T7922] rfkill_register+0x30/0x880 [ 248.152146][ T7922] hci_register_dev+0x4dd/0xa50 [ 248.157531][ T7922] vhci_create_device+0x310/0x590 [ 248.163089][ T7922] vhci_write+0x382/0x430 [ 248.167952][ T7922] vfs_write+0xacd/0xe50 [ 248.172715][ T7922] ksys_write+0x1a2/0x2c0 [ 248.177585][ T7922] do_syscall_64+0x3b/0xb0 [ 248.182540][ T7922] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 248.189000][ T7922] [ 248.189000][ T7922] -> #3 (&data->open_mutex){+.+.}-{3:3}: [ 248.190690][ T7899] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 248.196923][ T7922] lock_acquire+0x1db/0x4f0 [ 248.208690][ T7922] __mutex_lock_common+0x1da/0x25a0 [ 248.214433][ T7922] mutex_lock_nested+0x17/0x20 [ 248.219741][ T7922] vhci_send_frame+0x8a/0xf0 [ 248.224876][ T7922] hci_send_frame+0x1af/0x2f0 [ 248.230126][ T7922] hci_tx_work+0xb2e/0x1a30 [ 248.235166][ T7922] process_one_work+0x8a1/0x10c0 [ 248.240649][ T7922] worker_thread+0xaca/0x1280 [ 248.245868][ T7922] kthread+0x3f6/0x4f0 [ 248.250477][ T7922] ret_from_fork+0x1f/0x30 [ 248.255434][ T7922] [ 248.255434][ T7922] -> #2 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}: [ 248.264663][ T7922] lock_acquire+0x1db/0x4f0 [ 248.269720][ T7922] __flush_work+0xeb/0x1a0 [ 248.274679][ T7922] hci_dev_do_close+0x20a/0x1070 [ 248.280157][ T7922] hci_unregister_dev+0x2d7/0x580 [ 248.285718][ T7922] vhci_release+0x73/0xc0 [ 248.290593][ T7922] __fput+0x3fe/0x8e0 [ 248.295120][ T7922] task_work_run+0x129/0x1a0 [ 248.300258][ T7922] do_exit+0x6a3/0x2480 [ 248.304951][ T7922] do_group_exit+0x144/0x310 [ 248.310092][ T7922] __x64_sys_exit_group+0x3b/0x40 [ 248.315681][ T7922] do_syscall_64+0x3b/0xb0 [ 248.320632][ T7922] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 248.327067][ T7922] [ 248.327067][ T7922] -> #1 (&hdev->req_lock){+.+.}-{3:3}: [ 248.334740][ T7922] lock_acquire+0x1db/0x4f0 [ 248.339785][ T7922] __mutex_lock_common+0x1da/0x25a0 [ 248.345537][ T7922] mutex_lock_nested+0x17/0x20 [ 248.350856][ T7922] bg_scan_update+0xa1/0x4a0 [ 248.355985][ T7922] process_one_work+0x8a1/0x10c0 [ 248.360286][ T7] Bluetooth: hci4: command 0x0409 tx timeout [ 248.361459][ T7922] worker_thread+0xaca/0x1280 [ 248.372616][ T7922] kthread+0x3f6/0x4f0 [ 248.377223][ T7922] ret_from_fork+0x1f/0x30 [ 248.382179][ T7922] [ 248.382179][ T7922] -> #0 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}: [ 248.392019][ T7922] validate_chain+0x1649/0x5930 [ 248.397403][ T7922] __lock_acquire+0x1295/0x1ff0 [ 248.402809][ T7922] lock_acquire+0x1db/0x4f0 [ 248.407843][ T7922] __flush_work+0xeb/0x1a0 [ 248.412772][ T7922] __cancel_work_timer+0x519/0x6a0 [ 248.418394][ T7922] hci_request_cancel_all+0xcb/0x300 [ 248.424187][ T7922] hci_dev_do_close+0x51/0x1070 [ 248.429585][ T7922] hci_rfkill_set_block+0x114/0x1a0 [ 248.435292][ T7922] rfkill_set_block+0x1e7/0x430 [ 248.440656][ T7922] rfkill_fop_write+0x5b7/0x790 [ 248.446033][ T7922] vfs_write+0x30c/0xe50 [ 248.450806][ T7922] ksys_write+0x1a2/0x2c0 [ 248.455646][ T7922] do_syscall_64+0x3b/0xb0 [ 248.460576][ T7922] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 248.467016][ T7922] [ 248.467016][ T7922] other info that might help us debug this: [ 248.467016][ T7922] [ 248.477317][ T7922] Chain exists of: [ 248.477317][ T7922] (work_completion)(&hdev->bg_scan_update) --> &data->open_mutex --> rfkill_global_mutex [ 248.477317][ T7922] [ 248.493126][ T7922] Possible unsafe locking scenario: [ 248.493126][ T7922] [ 248.500572][ T7922] CPU0 CPU1 [ 248.505935][ T7922] ---- ---- [ 248.511372][ T7922] lock(rfkill_global_mutex); [ 248.516124][ T7922] lock(&data->open_mutex); [ 248.523220][ T7922] lock(rfkill_global_mutex); [ 248.530507][ T7922] lock((work_completion)(&hdev->bg_scan_update)); [ 248.537086][ T7922] [ 248.537086][ T7922] *** DEADLOCK *** [ 248.537086][ T7922] [ 248.545213][ T7922] 1 lock held by syz.1.1339/7922: [ 248.550219][ T7922] #0: ffffffff8ded0008 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x1a5/0x790 [ 248.560302][ T7922] [ 248.560302][ T7922] stack backtrace: [ 248.566186][ T7922] CPU: 1 PID: 7922 Comm: syz.1.1339 Not tainted 5.15.178-syzkaller #0 [ 248.574345][ T7922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 248.584385][ T7922] Call Trace: [ 248.587650][ T7922] [ 248.590586][ T7922] dump_stack_lvl+0x1e3/0x2d0 [ 248.595261][ T7922] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 248.600889][ T7922] ? print_circular_bug+0x12b/0x1a0 [ 248.606095][ T7922] check_noncircular+0x2f8/0x3b0 [ 248.611028][ T7922] ? add_chain_block+0x850/0x850 [ 248.615965][ T7922] ? lockdep_lock+0x11f/0x2a0 [ 248.620661][ T7922] validate_chain+0x1649/0x5930 [ 248.625539][ T7922] ? __lock_acquire+0x1295/0x1ff0 [ 248.630568][ T7922] ? reacquire_held_locks+0x660/0x660 [ 248.635935][ T7922] ? mark_lock+0x98/0x340 [ 248.640259][ T7922] ? look_up_lock_class+0x77/0x120 [ 248.645381][ T7922] ? register_lock_class+0x100/0x9a0 [ 248.650654][ T7922] ? mark_lock+0x98/0x340 [ 248.654991][ T7922] ? is_dynamic_key+0x1f0/0x1f0 [ 248.659841][ T7922] ? __lock_acquire+0x1295/0x1ff0 [ 248.664853][ T7922] ? mark_lock+0x98/0x340 [ 248.669172][ T7922] __lock_acquire+0x1295/0x1ff0 [ 248.674028][ T7922] lock_acquire+0x1db/0x4f0 [ 248.678516][ T7922] ? __flush_work+0xcf/0x1a0 [ 248.683098][ T7922] ? rcu_lock_release+0x5/0x20 [ 248.687854][ T7922] ? read_lock_is_recursive+0x10/0x10 [ 248.693217][ T7922] ? start_flush_work+0x776/0x820 [ 248.698233][ T7922] __flush_work+0xeb/0x1a0 [ 248.702642][ T7922] ? __flush_work+0xcf/0x1a0 [ 248.707239][ T7922] ? flush_work+0x20/0x20 [ 248.711572][ T7922] ? print_irqtrace_events+0x210/0x210 [ 248.717172][ T7922] ? lock_timer_base+0x260/0x260 [ 248.722224][ T7922] ? __cancel_work_timer+0x467/0x6a0 [ 248.728236][ T7922] __cancel_work_timer+0x519/0x6a0 [ 248.733509][ T7922] ? cancel_work_sync+0x20/0x20 [ 248.738419][ T7922] ? lockdep_hardirqs_on+0x94/0x130 [ 248.743636][ T7922] ? __cancel_work+0x2ef/0x380 [ 248.748398][ T7922] ? cancel_work+0x20/0x20 [ 248.752803][ T7922] ? print_irqtrace_events+0x210/0x210 [ 248.758275][ T7922] hci_request_cancel_all+0xcb/0x300 [ 248.763578][ T7922] hci_dev_do_close+0x51/0x1070 [ 248.768448][ T7922] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 248.774334][ T7922] ? _raw_spin_unlock+0x40/0x40 [ 248.779196][ T7922] ? kmem_cache_alloc_trace+0x143/0x290 [ 248.784737][ T7922] hci_rfkill_set_block+0x114/0x1a0 [ 248.789932][ T7922] ? rcu_lock_release+0x20/0x20 [ 248.794768][ T7922] rfkill_set_block+0x1e7/0x430 [ 248.799617][ T7922] rfkill_fop_write+0x5b7/0x790 [ 248.804465][ T7922] ? rfkill_fop_read+0x470/0x470 [ 248.809393][ T7922] ? fsnotify_perm+0x64/0x590 [ 248.814059][ T7922] ? security_file_permission+0x75/0xa0 [ 248.819593][ T7922] ? rfkill_fop_read+0x470/0x470 [ 248.824531][ T7922] vfs_write+0x30c/0xe50 [ 248.828826][ T7922] ? file_end_write+0x250/0x250 [ 248.833673][ T7922] ? __fget_files+0x413/0x480 [ 248.838351][ T7922] ? __fdget_pos+0x1e9/0x380 [ 248.842979][ T7922] ? ksys_write+0x77/0x2c0 [ 248.847429][ T7922] ksys_write+0x1a2/0x2c0 [ 248.851771][ T7922] ? print_irqtrace_events+0x210/0x210 [ 248.857221][ T7922] ? __ia32_sys_read+0x80/0x80 [ 248.861981][ T7922] ? syscall_enter_from_user_mode+0x2e/0x240 [ 248.867981][ T7922] ? lockdep_hardirqs_on+0x94/0x130 [ 248.873173][ T7922] ? syscall_enter_from_user_mode+0x2e/0x240 [ 248.879165][ T7922] do_syscall_64+0x3b/0xb0 [ 248.883572][ T7922] ? clear_bhb_loop+0x15/0x70 [ 248.888256][ T7922] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 248.894139][ T7922] RIP: 0033:0x7f2e63a49169 [ 248.898551][ T7922] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 248.918169][ T7922] RSP: 002b:00007f2e618b2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 248.926582][ T7922] RAX: ffffffffffffffda RBX: 00007f2e63c61fa0 RCX: 00007f2e63a49169 [ 248.934556][ T7922] RDX: 0000000000000008 RSI: 0000400000000080 RDI: 0000000000000004 [ 248.942534][ T7922] RBP: 00007f2e63aca2a0 R08: 0000000000000000 R09: 0000000000000000 [ 248.950535][ T7922] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 248.958606][ T7922] R13: 0000000000000000 R14: 00007f2e63c61fa0 R15: 00007ffd593335e8 [ 248.966597][ T7922] [ 249.000205][ T7564] gspca_stk1135: reg_w 0xf err -110 [ 249.006640][ T7564] gspca_stk1135: serial bus timeout: status=0x00 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 249.071008][ T13] usb 4-1: atusb_control_msg: req 0x21 val 0x0 idx 0x1d, error -71 [ 249.073968][ T7899] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 249.083013][ T13] usb 4-1: Firmware version (0.0) predates our first public release. [ 249.099967][ T13] usb 4-1: Please update to version 0.2 or newer [ 249.114594][ T7564] gspca_stk1135: Sensor write failed [ 249.130717][ T7564] gspca_stk1135: serial bus timeout: status=0x00 [ 249.130842][ T13] usb 4-1: atusb_probe: initialization failed, error = -71 [ 249.137068][ T7564] gspca_stk1135: Sensor write failed [ 249.137102][ T7564] gspca_stk1135: serial bus timeout: status=0x00 [ 249.162323][ T7564] gspca_stk1135: Sensor read failed [ 249.167576][ T7564] gspca_stk1135: serial bus timeout: status=0x00 [ 249.174281][ T13] atusb: probe of 4-1:0.0 failed with error -71 [ 249.176751][ T7564] gspca_stk1135: Sensor read failed [ 249.185777][ T7564] gspca_stk1135: Detected sensor type unknown (0x0) [ 249.194998][ T7564] gspca_stk1135: serial bus timeout: status=0x00 [ 249.201625][ T7564] gspca_stk1135: Sensor read failed [ 249.202893][ T13] usb 4-1: USB disconnect, device number 10 [ 249.206871][ T7564] gspca_stk1135: serial bus timeout: status=0x00 [ 249.219057][ T7564] gspca_stk1135: Sensor read failed [ 249.226877][ T7564] gspca_stk1135: serial bus timeout: status=0x00 [ 249.244438][ T7564] gspca_stk1135: Sensor write failed [ 249.249783][ T7564] gspca_stk1135: serial bus timeout: status=0x00 [ 249.265148][ T7564] gspca_stk1135: Sensor write failed [ 249.270658][ T7564] stk1135: probe of 3-1:0.0 failed with error -110 [ 249.287259][ T7564] usb 3-1: USB disconnect, device number 14 [ 249.586432][ T1185] device hsr_slave_0 left promiscuous mode [ 249.593246][ T1185] device hsr_slave_1 left promiscuous mode [ 249.617738][ T1185] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 249.631163][ T1185] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 249.650718][ T1185] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 249.658171][ T1185] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 249.680347][ T1185] device bridge_slave_1 left promiscuous mode [ 249.686705][ T1185] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.698320][ T1185] device bridge_slave_0 left promiscuous mode [ 249.705021][ T1185] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.716091][ T1185] device veth1_macvtap left promiscuous mode [ 249.722541][ T1185] device veth0_macvtap left promiscuous mode [ 249.728605][ T1185] device veth1_vlan left promiscuous mode [ 249.736155][ T1185] device veth0_vlan left promiscuous mode [ 249.886228][ T1185] team0 (unregistering): Port device team_slave_1 removed [ 249.901874][ T1185] team0 (unregistering): Port device team_slave_0 removed [ 249.917158][ T1185] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 249.931101][ T1185] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 249.993845][ T1185] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 250.004975][ T1185] bond0 (unregistering): Released all slaves [ 250.083384][ T7890] bridge0: port 3(syz_tun) entered disabled state [ 250.095119][ T7890] device syz_tun left promiscuous mode [ 250.100770][ T7890] bridge0: port 3(syz_tun) entered disabled state [ 250.180892][ T4175] syz-executor (4175) used greatest stack depth: 19064 bytes left [ 250.856601][ T1185] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.923298][ T1185] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.985075][ T1185] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.063730][ T1185] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.139629][ T1185] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.223694][ T1185] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.273139][ T1185] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.334422][ T1185] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.429945][ T1185] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.474557][ T1185] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.543043][ T1185] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.603767][ T1185] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.701051][ T1185] IPVS: stopping master sync thread 6869 ... [ 253.144004][ T1185] device hsr_slave_0 left promiscuous mode [ 253.150310][ T1185] device hsr_slave_1 left promiscuous mode [ 253.156547][ T1185] batman_adv: batadv0: Interface deactivated: dummy0 [ 253.163420][ T1185] batman_adv: batadv0: Removing interface: dummy0 [ 253.170395][ T1185] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 253.177827][ T1185] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 253.185654][ T1185] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 253.193122][ T1185] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 253.200671][ T1185] device bridge_slave_1 left promiscuous mode [ 253.206830][ T1185] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.214924][ T1185] device bridge_slave_0 left promiscuous mode [ 253.221229][ T1185] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.232515][ T1185] device hsr_slave_0 left promiscuous mode [ 253.238668][ T1185] device hsr_slave_1 left promiscuous mode [ 253.245236][ T1185] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 253.252816][ T1185] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 253.260672][ T1185] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 253.268064][ T1185] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 253.275563][ T1185] device bridge_slave_1 left promiscuous mode [ 253.281757][ T1185] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.289692][ T1185] device bridge_slave_0 left promiscuous mode [ 253.295981][ T1185] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.305983][ T1185] device hsr_slave_0 left promiscuous mode [ 253.312392][ T1185] device hsr_slave_1 left promiscuous mode [ 253.318556][ T1185] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 253.326029][ T1185] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 253.333591][ T1185] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 253.341020][ T1185] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 253.348513][ T1185] device bridge_slave_1 left promiscuous mode [ 253.354730][ T1185] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.362570][ T1185] device bridge_slave_0 left promiscuous mode [ 253.368694][ T1185] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.378728][ T1185] device hsr_slave_0 left promiscuous mode [ 253.385045][ T1185] device hsr_slave_1 left promiscuous mode [ 253.391397][ T1185] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 253.398817][ T1185] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 253.406474][ T1185] device bridge_slave_1 left promiscuous mode [ 253.412653][ T1185] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.420472][ T1185] device bridge_slave_0 left promiscuous mode [ 253.426613][ T1185] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.437101][ T1185] device hsr_slave_0 left promiscuous mode [ 253.443304][ T1185] device hsr_slave_1 left promiscuous mode [ 253.449514][ T1185] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 253.457254][ T1185] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 253.464858][ T1185] device bridge_slave_1 left promiscuous mode [ 253.471359][ T1185] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.479092][ T1185] device bridge_slave_0 left promiscuous mode [ 253.485427][ T1185] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.498300][ T1185] device veth1_macvtap left promiscuous mode [ 253.504340][ T1185] device veth0_macvtap left promiscuous mode [ 253.510376][ T1185] device veth1_vlan left promiscuous mode [ 253.516138][ T1185] device veth0_vlan left promiscuous mode [ 253.522694][ T1185] device veth1_macvtap left promiscuous mode [ 253.528688][ T1185] device veth0_macvtap left promiscuous mode [ 253.534888][ T1185] device veth1_vlan left promiscuous mode [ 253.540830][ T1185] device veth0_vlan left promiscuous mode [ 253.547109][ T1185] device veth1_macvtap left promiscuous mode [ 253.553343][ T1185] device veth1_vlan left promiscuous mode [ 253.559133][ T1185] device veth0_vlan left promiscuous mode [ 253.754276][ T1185] team0 (unregistering): Port device team_slave_1 removed [ 253.766693][ T1185] team0 (unregistering): Port device team_slave_0 removed [ 253.777559][ T1185] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 253.789326][ T1185] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 253.833914][ T1185] bond0 (unregistering): Released all slaves [ 253.924396][ T1185] team0 (unregistering): Port device team_slave_1 removed [ 253.937982][ T1185] team0 (unregistering): Port device team_slave_0 removed [ 253.948037][ T1185] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 253.959891][ T1185] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 254.006674][ T1185] bond0 (unregistering): Released all slaves [ 254.082788][ T1185] team0 (unregistering): Port device team_slave_1 removed [ 254.096075][ T1185] team0 (unregistering): Port device team_slave_0 removed [ 254.106387][ T1185] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 254.118050][ T1185] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 254.167283][ T1185] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 254.176088][ T1185] bond0 (unregistering): Released all slaves [ 254.247016][ T1185] team0 (unregistering): Port device team_slave_1 removed [ 254.257515][ T1185] team0 (unregistering): Port device team_slave_0 removed [ 254.268068][ T1185] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 254.279609][ T1185] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 254.323146][ T1185] bond0 (unregistering): Released all slaves [ 254.417271][ T1185] bond0 (unregistering): (slave macvlan0): Releasing backup interface [ 254.451944][ T1185] team0 (unregistering): Port device team_slave_1 removed [ 254.465916][ T1185] team0 (unregistering): Port device team_slave_0 removed [ 254.476696][ T1185] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 254.488428][ T1185] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 254.534769][ T1185] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 254.543651][ T1185] bond0 (unregistering): Released all slaves [ 255.643335][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.649639][ T1421] ieee802154 phy1 wpan1: encryption failed: -22