last executing test programs: 3.293018561s ago: executing program 3 (id=1272): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@newlink={0x78, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x38, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc}, @IFLA_VLAN_INGRESS_QOS={0x10, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}]}, @IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xa1f}}]}]}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0x3}]}, 0x78}}, 0x0) 3.152162413s ago: executing program 3 (id=1276): openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000200), 0x260000, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r0, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 2.962590369s ago: executing program 3 (id=1281): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x9, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3d86e17aa31106b876c1d0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb5b64f69853362ac3407173ec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) recvmsg$kcm(r0, &(0x7f00000003c0)={0x0, 0x700, 0x0}, 0x0) 2.808729322s ago: executing program 3 (id=1284): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000340), r1) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x1c, r2, 0x5, 0x0, 0x0, {0x7, 0x74, 0x600}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x2, @broadcast}]}, 0x1c}, 0x1, 0xffffffff00000003}, 0x0) 2.630599747s ago: executing program 3 (id=1287): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000c80)=ANY=[@ANYBLOB="12010000000000406d0422c2000000000001090224000100000000090400000103000000092100000001220b0009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000540)={0x2c, &(0x7f0000000680)={0x20, 0x2, 0xc, {0xc, 0x11, "82a96f46aa4bee81908e"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000100)={0x2c, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 2.336510132s ago: executing program 2 (id=1290): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r2}, 0xc) 2.263822169s ago: executing program 2 (id=1293): syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/wakeup_count', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 1.592508025s ago: executing program 4 (id=1304): syz_mount_image$hfs(&(0x7f0000000100), &(0x7f00000000c0)='./file0\x00', 0x204080, &(0x7f0000000140)=ANY=[@ANYBLOB='codepage=cp949,iocharset=iso8859-7,uid=', @ANYRESHEX=0x0, @ANYBLOB=',gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x41, 0x291, &(0x7f00000004c0)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 1.529235171s ago: executing program 1 (id=1306): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xb8}}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000040)=ANY=[]) 1.460676187s ago: executing program 4 (id=1307): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x5, 0x2, 0x1000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000910000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x2, 0x8, 0x8}, 0x48) 1.433166309s ago: executing program 1 (id=1309): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0xffffffff}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}]}}]}, 0x48}}, 0x0) 1.359423035s ago: executing program 2 (id=1310): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', 0x2000c0, &(0x7f0000000780)={[{@fat=@nocase}, {@fat=@codepage={'codepage', 0x3d, '1255'}}, {@fat=@discard}, {@fat=@tz_utc}, {@fat=@flush}, {@fat=@gid={'gid', 0x3d, 0xee00}}, {@nodots}, {@dots}, {@dots}, {@nodots}, {@nodots}, {@nodots}, {@fat=@nocase}, {@dots}, {@dots}, {@dots}, {@fat=@discard}, {@nodots}, {@fat=@showexec}, {@fat=@errors_continue}, {}, {@nodots}]}, 0x0, 0x1c8, &(0x7f00000004c0)="$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") chdir(&(0x7f0000000140)='./file0\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x16, 0xf, &(0x7f0000000000)=@ringbuf={{}, {{}, {}, {}, {}, {0x7, 0x0}}}, 0x0, 0x5}, 0x90) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) 1.352581046s ago: executing program 4 (id=1311): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000000700)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@ip_retopts={{0x10, 0x0, 0x2}}], 0x10}}], 0x2, 0x0) 1.309018149s ago: executing program 1 (id=1313): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000000), 0x10) 1.225831626s ago: executing program 4 (id=1314): sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0xc, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "c4"}]}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0x29, 0x8, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xa4}}, 0x0) 1.175941701s ago: executing program 2 (id=1316): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@RTM_NEWMDB={0x18, 0x54, 0x1e5, 0x0, 0x0, {0x7, r2}}, 0x18}}, 0x0) 1.156845802s ago: executing program 1 (id=1317): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x2e, &(0x7f0000000700)=@ringbuf={{}, {}, {}, [@cb_func, @printk={@li}, @snprintf, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x2}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000d40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8946, &(0x7f0000000900)={'wlan1\x00', @random='\x00\x00\x00 \x00'}) 1.091616678s ago: executing program 4 (id=1318): io_setup(0x1, &(0x7f0000000280)=0x0) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f00000002c0)={0x2a, 0xffffffff}, 0xc) io_submit(r0, 0x1, &(0x7f0000000080)=[&(0x7f00000000c0)={0x2703000000000000, 0x0, 0x3, 0x8, 0x0, r1, 0x0}]) 1.06491509s ago: executing program 2 (id=1319): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='oom_adj\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0xb, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) write$cgroup_subtree(r0, &(0x7f0000000280)=ANY=[@ANYRESHEX=r1], 0xfdef) 986.876667ms ago: executing program 1 (id=1321): r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000180)={0x2, 0xce20, @local}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000180)={0x2, 0xce20, @local}, 0x10) 944.10651ms ago: executing program 1 (id=1322): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000000007112370000000000950000000000000089e2d90aa1795cc26efb1dacf01150510936875c66d6a7d6eb12d4cdbc5c0ce0d29df91940d8ca08008e7aa5b3c9a10909d6e18b263131bf965f55746df5189a2e23905ae4dc5340e0eb74eb523d5b77a763cccb768b4453c8b1b1dd0a71983b5c2cfe11f3d30228772b0b798ebaf5abde2ce3ec34f8c6f13ee1f181ac563ba7a7edc9be94452da6d7eb67ae3243cb393245efd0dd21de9553cbd1a8516282de458c44d1ddae97af584de743d44ed18d20dd3b2c42cf1e8b27788dfc562367d46197198cd19fda89a6feca6c738b1d4b2522"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f010400000009058303"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, 0x0, 0x0}, 0x90) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000080)=ANY=[]) 878.738066ms ago: executing program 4 (id=1324): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_udplite(0xa, 0x2, 0x88) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000100)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005020524", @ANYRES8=r0, @ANYBLOB="05"], 0x0) 504.140458ms ago: executing program 3 (id=1330): timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000001400)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) socket$packet(0x11, 0x0, 0x300) timer_gettime(0x0, &(0x7f00000000c0)) 344.214661ms ago: executing program 0 (id=1332): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)={0x28, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PATH_REFRESH_TIME={0x8}]}]}, 0x28}}, 0x0) 282.662147ms ago: executing program 0 (id=1333): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r1, 0x5, 0x0, 0x0, {{0x60}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 199.989623ms ago: executing program 0 (id=1334): r0 = syz_io_uring_setup(0xd79, &(0x7f00000035c0), &(0x7f0000000300), &(0x7f0000000040)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000480)=[0xffffffffffffffff], 0x1) 186.439835ms ago: executing program 0 (id=1335): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) umount2(&(0x7f0000000000)='./file0/../file0\x00', 0xa) 137.080259ms ago: executing program 0 (id=1336): r0 = syz_open_dev$sg(&(0x7f0000000440), 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@report={0x4c, 0x20, 0x800, 0x70bd2c, 0x25dfdbfd, {0x32, {@in6=@dev={0xfe, 0x80, '\x00', 0x26}, @in6=@private2, 0x4e21, 0x6, 0x4e22, 0xb, 0xa, 0x20, 0x20, 0x5c}}}, 0x4c}}, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000100)) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000040)=ANY=[@ANYRES64=r0]) 105.541001ms ago: executing program 2 (id=1337): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 0 (id=1338): r0 = socket$inet6(0xa, 0x6, 0x0) listen(r0, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="540000001300f5a1abdaff00000000000000001f000000004000000200000000bc72f8e91e884e000000000000000000000000002000000031e9da8bde6e1388e8b71850e98e"], 0x54}}, 0x0) kernel console output (not intermixed with test programs): -speed USB device number 5 using dummy_hcd [ 139.183597][ T5176] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 139.209039][ T5176] BTRFS info (device loop2): setting nodatacow, compression disabled [ 139.238851][ T5176] BTRFS info (device loop2): enabling auto defrag [ 139.266473][ T5176] BTRFS info (device loop2): max_inline at 0 [ 139.277670][ T3644] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 139.307687][ T5176] BTRFS info (device loop2): using free space tree [ 139.318090][ T3644] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 139.347069][ T3644] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 139.401153][ T3644] usb 2-1: New USB device found, idVendor=1e7d, idProduct=31ce, bcdDevice= 0.00 [ 139.426548][ T3644] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.482729][ T3644] usb 2-1: config 0 descriptor?? [ 139.494999][ T7] usb 4-1: Using ep0 maxpacket: 16 [ 139.596322][ T26] audit: type=1800 audit(1724372926.651:7): pid=5176 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.464" name="bus" dev="loop2" ino=263 res=0 errno=0 [ 139.645784][ T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 139.681075][ T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 139.713543][ T7] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 139.763526][ T7] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 139.763939][ T5204] loop4: detected capacity change from 0 to 32768 [ 139.794262][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.866334][ T7] usb 4-1: config 0 descriptor?? [ 139.928218][ T5204] XFS (loop4): Mounting V5 Filesystem [ 139.943415][ T3639] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 139.984906][ T3644] ryos 0003:1E7D:31CE.0003: unknown main item tag 0x0 [ 139.993871][ T3644] ryos 0003:1E7D:31CE.0003: unbalanced delimiter at end of report description [ 140.042324][ T3644] ryos 0003:1E7D:31CE.0003: parse failed [ 140.064689][ T3644] ryos: probe of 0003:1E7D:31CE.0003 failed with error -22 [ 140.215931][ T3689] usb 2-1: USB disconnect, device number 3 [ 140.263172][ T3724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.315259][ T5204] XFS (loop4): Ending clean mount [ 140.351289][ T5204] XFS (loop4): Quotacheck needed: Please wait. [ 140.407290][ T7] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 140.425390][ T7] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 140.441001][ T5204] XFS (loop4): Quotacheck: Done. [ 140.469608][ T7] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 140.510763][ T7] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 140.530125][ T7] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 140.548329][ T5242] loop0: detected capacity change from 0 to 4096 [ 140.550332][ T7] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 140.567795][ T5242] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 140.587742][ T7] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 140.609014][ T5242] ntfs: (device loop0): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 140.631511][ T5242] ntfs: (device loop0): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 140.635267][ T7] microsoft 0003:045E:07DA.0004: No inputs registered, leaving [ 140.672171][ T3640] XFS (loop4): Unmounting Filesystem [ 140.688372][ T5242] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 140.698722][ T5242] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 140.706625][ T7] microsoft 0003:045E:07DA.0004: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 140.727699][ T5242] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 140.745528][ T7] microsoft 0003:045E:07DA.0004: no inputs found [ 140.767250][ T48] Bluetooth: hci5: command tx timeout [ 140.767392][ T7] microsoft 0003:045E:07DA.0004: could not initialize ff, continuing anyway [ 140.790782][ T5242] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 140.826478][ T5242] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 140.843962][ T5242] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 140.954501][ T7] usb 4-1: USB disconnect, device number 5 [ 140.977201][ T5242] ntfs: volume version 3.1. [ 141.061308][ T5250] netlink: 8 bytes leftover after parsing attributes in process `syz.2.489'. [ 141.128535][ T5250] netlink: 'syz.2.489': attribute type 1 has an invalid length. [ 141.139395][ T5250] netlink: 'syz.2.489': attribute type 2 has an invalid length. [ 141.326467][ T3724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.476777][ C1] eth0: bad gso: type: 1, size: 1408 [ 141.491783][ T3689] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.610954][ T5263] loop0: detected capacity change from 0 to 16 [ 141.646773][ T5263] erofs: (device loop0): mounted with root inode @ nid 36. [ 141.697308][ T5263] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 141.792299][ T5265] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 141.797528][ T5263] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -18 in[46, 4050] out[1851] [ 141.824544][ T5265] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 141.824600][ T5265] erofs: (device loop0): z_erofs_readahead: readahead error at page 42 @ nid 36 [ 142.119615][ T5263] erofs: (device loop0): z_erofs_read_folio: failed to read, err [-117] [ 142.164790][ T5265] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 142.192810][ T5265] erofs: (device loop0): z_erofs_readahead: readahead error at page 41 @ nid 36 [ 142.234030][ T5265] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 142.323647][ T5265] erofs: (device loop0): z_erofs_readahead: readahead error at page 40 @ nid 36 [ 142.374407][ T5265] erofs: (device loop0): z_erofs_readahead: readahead error at page 39 @ nid 36 [ 142.392583][ T3687] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.436830][ T5261] loop2: detected capacity change from 0 to 32768 [ 142.459632][ T5265] erofs: (device loop0): z_erofs_readahead: readahead error at page 38 @ nid 36 [ 142.491299][ T5261] BTRFS: device fsid d552757d-9c39-40e3-95f0-16d819589928 devid 1 transid 8 /dev/loop2 scanned by syz.2.494 (5261) [ 142.531990][ T5265] erofs: (device loop0): z_erofs_readahead: readahead error at page 36 @ nid 36 [ 142.576956][ T5265] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 142.620508][ T5261] BTRFS info (device loop2): first mount of filesystem d552757d-9c39-40e3-95f0-16d819589928 [ 142.649266][ T5265] erofs: (device loop0): z_erofs_readahead: readahead error at page 31 @ nid 36 [ 142.694301][ T5261] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 142.703633][ T5261] BTRFS info (device loop2): disabling tree log [ 142.710618][ T5265] erofs: (device loop0): z_erofs_readahead: readahead error at page 25 @ nid 36 [ 142.772435][ T5261] BTRFS warning (device loop2): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 142.792671][ T5265] erofs: (device loop0): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 142.838039][ T5265] erofs: (device loop0): z_erofs_readahead: readahead error at page 19 @ nid 36 [ 142.855649][ T5261] BTRFS info (device loop2): trying to use backup root at mount time [ 142.885181][ T5265] erofs: (device loop0): z_erofs_readahead: readahead error at page 13 @ nid 36 [ 142.922317][ T5261] BTRFS info (device loop2): setting nodatacow, compression disabled [ 142.954482][ T5265] erofs: (device loop0): z_erofs_readahead: readahead error at page 8 @ nid 36 [ 142.974491][ T5261] BTRFS info (device loop2): enabling ssd optimizations [ 142.998993][ T5265] erofs: (device loop0): z_erofs_readahead: readahead error at page 6 @ nid 36 [ 143.014405][ T5261] BTRFS info (device loop2): using spread ssd allocation scheme [ 143.024467][ T5265] erofs: (device loop0): z_erofs_readahead: readahead error at page 4 @ nid 36 [ 143.071202][ T5261] BTRFS info (device loop2): using free space tree [ 143.109326][ T5265] erofs: (device loop0): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 36 [ 143.134493][ T5265] erofs: (device loop0): z_erofs_readahead: readahead error at page 0 @ nid 36 [ 143.180940][ T5289] loop4: detected capacity change from 0 to 4096 [ 143.190727][ T5265] syz.0.492: attempt to access beyond end of device [ 143.190727][ T5265] loop0: rw=524288, sector=296, nr_sectors = 16 limit=16 [ 143.208209][ T5265] syz.0.492: attempt to access beyond end of device [ 143.208209][ T5265] loop0: rw=524288, sector=1049264, nr_sectors = 16 limit=16 [ 143.241708][ T5265] syz.0.492: attempt to access beyond end of device [ 143.241708][ T5265] loop0: rw=524288, sector=16, nr_sectors = 8 limit=16 [ 143.254938][ T5289] ntfs: volume version 3.1. [ 143.266138][ T5265] syz.0.492: attempt to access beyond end of device [ 143.266138][ T5265] loop0: rw=524288, sector=720, nr_sectors = 128 limit=16 [ 143.287737][ T5265] syz.0.492: attempt to access beyond end of device [ 143.287737][ T5265] loop0: rw=524288, sector=13478624080, nr_sectors = 24 limit=16 [ 143.309378][ T5265] syz.0.492: attempt to access beyond end of device [ 143.309378][ T5265] loop0: rw=524288, sector=13478624032, nr_sectors = 48 limit=16 [ 143.329683][ T5265] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -18 in[46, 4050] out[4055] [ 143.406347][ T3724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.446169][ T5265] erofs: (device loop0): z_erofs_readahead: readahead error at page 87 @ nid 36 [ 143.457978][ T5265] erofs: (device loop0): z_erofs_readahead: readahead error at page 86 @ nid 36 [ 143.469375][ T5265] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 143.480867][ T5265] erofs: (device loop0): z_erofs_readahead: readahead error at page 83 @ nid 36 [ 143.494985][ T5265] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 143.514911][ T5265] erofs: (device loop0): z_erofs_readahead: readahead error at page 82 @ nid 36 [ 143.528482][ T5265] erofs: (device loop0): z_erofs_readahead: readahead error at page 79 @ nid 36 [ 143.540724][ T5265] erofs: (device loop0): z_erofs_readahead: readahead error at page 78 @ nid 36 [ 143.553305][ T5265] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 143.567707][ T5265] erofs: (device loop0): z_erofs_readahead: readahead error at page 76 @ nid 36 [ 143.583474][ T5265] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 143.597252][ T5265] erofs: (device loop0): z_erofs_readahead: readahead error at page 75 @ nid 36 [ 143.611357][ T5265] erofs: (device loop0): z_erofs_readahead: readahead error at page 74 @ nid 36 [ 143.642426][ T5265] erofs: (device loop0): z_erofs_readahead: readahead error at page 72 @ nid 36 [ 143.681974][ T5265] erofs: (device loop0): z_erofs_readahead: readahead error at page 71 @ nid 36 [ 143.756495][ T5265] erofs: (device loop0): z_erofs_readahead: readahead error at page 70 @ nid 36 [ 143.799831][ T5265] erofs: (device loop0): z_erofs_readahead: readahead error at page 63 @ nid 36 [ 143.863610][ T5265] erofs: (device loop0): z_erofs_readahead: readahead error at page 61 @ nid 36 [ 143.875887][ T5265] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 143.890089][ T3639] BTRFS info (device loop2): last unmount of filesystem d552757d-9c39-40e3-95f0-16d819589928 [ 143.911245][ T5265] erofs: (device loop0): z_erofs_readahead: readahead error at page 59 @ nid 36 [ 143.949628][ T5265] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 144.057205][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.071343][ T5265] erofs: (device loop0): z_erofs_readahead: readahead error at page 58 @ nid 36 [ 144.169211][ T5265] erofs: (device loop0): z_erofs_readahead: readahead error at page 56 @ nid 36 [ 144.190179][ T5265] erofs: (device loop0): z_erofs_readahead: readahead error at page 54 @ nid 36 [ 144.215736][ T5265] erofs: (device loop0): z_erofs_readahead: readahead error at page 50 @ nid 36 [ 144.258473][ T5265] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 144.345906][ T5265] erofs: (device loop0): z_erofs_readahead: readahead error at page 47 @ nid 36 [ 144.419012][ T5265] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 144.445752][ T5265] erofs: (device loop0): z_erofs_readahead: readahead error at page 46 @ nid 36 [ 144.472398][ T3688] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.494483][ T5265] erofs: (device loop0): z_erofs_readahead: readahead error at page 45 @ nid 36 [ 144.519168][ T5265] syz.0.492: attempt to access beyond end of device [ 144.519168][ T5265] loop0: rw=524288, sector=32, nr_sectors = 64 limit=16 [ 144.552082][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.602750][ T5265] syz.0.492: attempt to access beyond end of device [ 144.602750][ T5265] loop0: rw=524288, sector=16, nr_sectors = 16 limit=16 [ 144.694930][ T5342] loop4: detected capacity change from 0 to 164 [ 144.744396][ T5265] syz.0.492: attempt to access beyond end of device [ 144.744396][ T5265] loop0: rw=524288, sector=14425508768, nr_sectors = 8 limit=16 [ 144.878235][ T5265] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -18 in[46, 4050] out[5297] [ 145.194383][ T7] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 145.306833][ T5359] loop3: detected capacity change from 0 to 64 [ 145.410209][ T5365] loop2: detected capacity change from 0 to 64 [ 145.498382][ T3724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 145.521877][ T5367] cifs: Unknown parameter 'mode' [ 145.911751][ T5373] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.924482][ T5373] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.039582][ T5375] netlink: 88 bytes leftover after parsing attributes in process `syz.2.530'. [ 146.524565][ T3724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.534150][ C0] sched: RT throttling activated [ 146.535487][ T7] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 146.560020][ T7] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 146.716594][ T5369] loop4: detected capacity change from 0 to 131072 [ 146.816784][ T5369] F2FS-fs (loop4): Found nat_bits in checkpoint [ 146.853224][ T7] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 146.861506][ T5389] loop3: detected capacity change from 0 to 4096 [ 146.875060][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 146.884210][ T7] usb 2-1: SerialNumber: syz [ 146.912388][ T5369] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 146.952488][ T5395] loop2: detected capacity change from 0 to 1764 [ 147.022454][ T5389] ntfs: volume version 3.1. [ 147.068074][ T5395] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 147.178321][ T7] usb 2-1: 0:2 : does not exist [ 147.301798][ T7] usb 2-1: USB disconnect, device number 4 [ 147.342560][ T3719] udevd[3719]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 147.565029][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.577220][ T3688] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.605081][ T5402] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.759720][ T5407] loop3: detected capacity change from 0 to 1024 [ 147.826546][ T5402] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.862112][ T5407] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 147.891851][ T5385] loop0: detected capacity change from 0 to 32768 [ 148.003842][ T5385] XFS (loop0): Mounting V5 Filesystem [ 148.041189][ T4623] EXT4-fs (loop3): unmounting filesystem. [ 148.057819][ T5402] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.084353][ T5402] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.110909][ T5401] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.125399][ T5401] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.148347][ T5401] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.210790][ T5385] XFS (loop0): Ending clean mount [ 148.221514][ T5385] XFS (loop0): Quotacheck needed: Please wait. [ 148.387438][ T5385] XFS (loop0): Quotacheck: Done. [ 148.515610][ T3642] XFS (loop0): Unmounting Filesystem [ 148.647393][ T5435] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 0, id = 0 [ 149.021237][ T5444] loop3: detected capacity change from 0 to 256 [ 149.105972][ T5444] exFAT-fs (loop3): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 149.272245][ T5449] loop0: detected capacity change from 0 to 128 [ 149.296833][ T5451] loop2: detected capacity change from 0 to 64 [ 149.341987][ T5449] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 149.419671][ T5449] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 149.673978][ T5461] loop2: detected capacity change from 0 to 512 [ 149.842617][ T5461] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 149.883153][ T5461] ext4 filesystem being mounted at /126/bus supports timestamps until 2038 (0x7fffffff) [ 149.898880][ T5473] loop3: detected capacity change from 0 to 512 [ 149.930906][ T5472] loop4: detected capacity change from 0 to 2048 [ 149.957183][ T5476] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 150.024508][ T5473] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 150.103472][ T5473] ext4 filesystem being mounted at /59/bus supports timestamps until 2038 (0x7fffffff) [ 150.189299][ T3639] EXT4-fs (loop2): unmounting filesystem. [ 150.339055][ T4623] EXT4-fs (loop3): unmounting filesystem. [ 150.494763][ T5488] loop3: detected capacity change from 0 to 512 [ 150.562447][ T5488] EXT4-fs error (device loop3): ext4_orphan_get:1396: inode #15: comm syz.3.576: casefold flag without casefold feature [ 150.603332][ T5484] loop2: detected capacity change from 0 to 4096 [ 150.670950][ T5484] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512) [ 150.717108][ T5488] EXT4-fs (loop3): Remounting filesystem read-only [ 150.734262][ T5488] EXT4-fs error (device loop3): ext4_orphan_get:1422: comm syz.3.576: bad orphan inode 15 [ 150.771322][ T5488] ext4_test_bit(bit=14, block=18) = 1 [ 150.797770][ T5488] is_bad_inode(inode)=0 [ 150.801983][ T5488] NEXT_ORPHAN(inode)=1023 [ 150.804954][ T5484] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 150.827944][ T5488] max_ino=32 [ 150.833325][ T5488] i_nlink=0 [ 150.850712][ T5497] loop4: detected capacity change from 0 to 128 [ 150.864550][ T5488] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 150.889321][ T5488] ext4 filesystem being mounted at /60/bus supports timestamps until 2038 (0x7fffffff) [ 150.944871][ T5497] VFS: Found a Xenix FS (block size = 512) on device loop4 [ 150.994919][ T4623] EXT4-fs (loop3): unmounting filesystem. [ 151.035877][ T3639] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22. [ 151.141918][ T3640] sysv_free_block: trying to free block not in datazone [ 151.187845][ T3640] sysv_free_block: trying to free block not in datazone [ 151.215416][ T3640] sysv_free_block: trying to free block not in datazone [ 151.268119][ T3640] sysv_free_block: trying to free block not in datazone [ 151.315327][ T3640] sysv_free_block: trying to free block not in datazone [ 151.338805][ T3640] sysv_free_block: trying to free block not in datazone [ 151.361275][ T3640] sysv_free_block: trying to free block not in datazone [ 151.383235][ T5508] loop3: detected capacity change from 0 to 512 [ 151.402504][ T3640] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 151.425446][ T5508] EXT4-fs: Ignoring removed nobh option [ 151.462403][ T5508] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 151.527112][ T5508] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 151.625896][ T5508] EXT4-fs: Ignoring removed orlov option [ 151.634757][ T5508] EXT4-fs: Ignoring sb option on remount [ 151.641070][ T5508] EXT4-fs: can't change dax mount option while remounting [ 151.680142][ T5511] syz.0.587 (5511): drop_caches: 4 [ 151.702244][ T4623] EXT4-fs (loop3): unmounting filesystem. [ 151.725079][ T3688] net_ratelimit: 4 callbacks suppressed [ 151.725096][ T3688] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.744180][ T22] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.243175][ T5526] loop4: detected capacity change from 0 to 4096 [ 152.284076][ T5526] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 152.308180][ T5533] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 152.363183][ T5526] ntfs3: loop4: Failed to load $Extend. [ 152.507997][ T5537] netlink: 32 bytes leftover after parsing attributes in process `syz.0.599'. [ 152.526902][ T5504] loop2: detected capacity change from 0 to 32768 [ 152.674463][ T5504] XFS (loop2): Mounting V5 Filesystem [ 152.764493][ T22] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.764653][ T5551] loop0: detected capacity change from 0 to 1024 [ 152.863404][ T5504] XFS (loop2): Ending clean mount [ 152.998774][ T5551] hfsplus: bad catalog entry type [ 153.086690][ T3639] XFS (loop2): Unmounting Filesystem [ 153.170233][ T11] hfsplus: b-tree write err: -5, ino 4 [ 153.216981][ T5527] loop3: detected capacity change from 0 to 32768 [ 153.657518][ T3690] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.808643][ T3688] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.066650][ T5546] loop4: detected capacity change from 0 to 40427 [ 154.117440][ T5546] F2FS-fs (loop4): invalid crc value [ 154.171706][ T5546] F2FS-fs (loop4): Found nat_bits in checkpoint [ 154.343972][ T5546] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 154.415866][ T26] kauditd_printk_skb: 35 callbacks suppressed [ 154.415882][ T26] audit: type=1804 audit(1724372941.471:12): pid=5546 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.601" name="/newroot/130/file0/cgroup.controllers" dev="loop4" ino=10 res=1 errno=0 [ 154.601263][ T3640] syz-executor: attempt to access beyond end of device [ 154.601263][ T3640] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 154.672878][ T5584] loop2: detected capacity change from 0 to 4096 [ 154.720937][ T5584] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 154.844704][ T22] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.855834][ T22] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 155.245424][ T5604] netlink: 8 bytes leftover after parsing attributes in process `syz.0.624'. [ 155.713449][ T5623] loop2: detected capacity change from 0 to 512 [ 155.759666][ T5625] loop0: detected capacity change from 0 to 2048 [ 155.851861][ T5623] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 155.861584][ T5628] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 155.885039][ T3724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 155.912168][ T5625] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, name_len=0 [ 155.949519][ T5623] ext4 filesystem being mounted at /135/file0 supports timestamps until 2038 (0x7fffffff) [ 155.970296][ T5625] Remounting filesystem read-only [ 155.978304][ T5625] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, name_len=0 [ 156.081757][ T3639] EXT4-fs (loop2): unmounting filesystem. [ 156.090374][ T3642] NILFS (loop0): discard dirty page: offset=0, ino=6 [ 156.114732][ T3642] NILFS (loop0): discard dirty block: blocknr=35, size=1024 [ 156.149007][ T3642] NILFS (loop0): discard dirty block: blocknr=36, size=1024 [ 156.173337][ T3642] NILFS (loop0): discard dirty block: blocknr=37, size=1024 [ 156.213376][ T3642] NILFS (loop0): discard dirty block: blocknr=38, size=1024 [ 156.249307][ T3642] NILFS (loop0): discard dirty page: offset=4096, ino=6 [ 156.279979][ T5639] netlink: 888 bytes leftover after parsing attributes in process `syz.3.640'. [ 156.280870][ T3642] NILFS (loop0): discard dirty block: blocknr=39, size=1024 [ 156.308332][ T3642] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 156.318177][ T3642] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 156.331415][ T3642] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 156.418274][ T5641] loop0: detected capacity change from 0 to 64 [ 156.663785][ T5652] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 0, id = 0 [ 156.816615][ T5618] loop4: detected capacity change from 0 to 40427 [ 156.845761][ T5657] loop0: detected capacity change from 0 to 1024 [ 156.876958][ T5618] F2FS-fs (loop4): invalid crc value [ 156.878590][ T5657] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 156.931816][ T3724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.991058][ T5618] F2FS-fs (loop4): Found nat_bits in checkpoint [ 157.160618][ T5618] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 157.166064][ T3642] EXT4-fs (loop0): unmounting filesystem. [ 157.236635][ T5618] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=ff000000, run fsck to fix. [ 157.661702][ T5671] loop0: detected capacity change from 0 to 512 [ 157.713662][ T5656] loop2: detected capacity change from 0 to 32768 [ 157.775640][ T5671] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 157.814460][ T5671] ext4 filesystem being mounted at /146/file0 supports timestamps until 2038 (0x7fffffff) [ 157.877867][ T5656] XFS (loop2): Mounting V5 Filesystem [ 157.889369][ T3689] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.967028][ T3688] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.083413][ T5656] XFS (loop2): Ending clean mount [ 158.141787][ T3642] EXT4-fs (loop0): unmounting filesystem. [ 158.157618][ T5656] XFS (loop2): Quotacheck needed: Please wait. [ 158.317200][ T5656] XFS (loop2): Quotacheck: Done. [ 158.478765][ T5699] loop0: detected capacity change from 0 to 512 [ 158.502762][ T3639] XFS (loop2): Unmounting Filesystem [ 158.511247][ T5699] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 158.586560][ T5699] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1085: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 158.664487][ T5699] EXT4-fs (loop0): 1 truncate cleaned up [ 158.693422][ T5706] loop4: detected capacity change from 0 to 64 [ 158.701991][ T5699] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 158.756463][ T5706] hfs: request for non-existent node 237 in B*Tree [ 158.774561][ T5706] hfs: request for non-existent node 237 in B*Tree [ 158.776531][ T5699] EXT4-fs (loop0): shut down requested (2) [ 158.781678][ T5706] hfs: request for non-existent node 237 in B*Tree [ 158.861724][ T5706] hfs: request for non-existent node 237 in B*Tree [ 158.905584][ T11] hfs: request for non-existent node 237 in B*Tree [ 158.912135][ T11] hfs: request for non-existent node 237 in B*Tree [ 158.947593][ T11] hfs: request for non-existent node 237 in B*Tree [ 158.975470][ T11] hfs: request for non-existent node 237 in B*Tree [ 159.004459][ T3724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.016400][ T3642] EXT4-fs (loop0): unmounting filesystem. [ 159.282572][ C1] eth0: bad gso: type: 1, size: 1408 [ 159.351625][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.360807][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.338534][ T5753] loop2: detected capacity change from 0 to 1764 [ 160.758243][ T5760] loop2: detected capacity change from 0 to 16 [ 160.821814][ T5760] erofs: (device loop2): mounted with root inode @ nid 36. [ 160.835564][ T3688] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.932168][ T3690] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.966695][ T5760] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 160.989079][ C1] eth0: bad gso: type: 1, size: 1408 [ 161.133382][ T5764] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 161.222165][ T5760] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -18 in[46, 4050] out[1851] [ 161.254737][ T5764] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 161.269900][ T5764] erofs: (device loop2): z_erofs_readahead: readahead error at page 42 @ nid 36 [ 161.296853][ T5764] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 161.324394][ T5760] erofs: (device loop2): z_erofs_read_folio: failed to read, err [-117] [ 161.342652][ T5764] erofs: (device loop2): z_erofs_readahead: readahead error at page 41 @ nid 36 [ 161.355746][ T5764] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 161.379101][ T5764] erofs: (device loop2): z_erofs_readahead: readahead error at page 40 @ nid 36 [ 161.435930][ T5764] erofs: (device loop2): z_erofs_readahead: readahead error at page 39 @ nid 36 [ 161.468622][ T5764] erofs: (device loop2): z_erofs_readahead: readahead error at page 38 @ nid 36 [ 161.520812][ T5764] erofs: (device loop2): z_erofs_readahead: readahead error at page 36 @ nid 36 [ 161.590410][ T5764] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 161.634703][ T5764] erofs: (device loop2): z_erofs_readahead: readahead error at page 31 @ nid 36 [ 161.715199][ T5764] erofs: (device loop2): z_erofs_readahead: readahead error at page 25 @ nid 36 [ 161.768850][ T5764] erofs: (device loop2): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 161.801789][ T5764] erofs: (device loop2): z_erofs_readahead: readahead error at page 19 @ nid 36 [ 161.822161][ T5764] erofs: (device loop2): z_erofs_readahead: readahead error at page 13 @ nid 36 [ 161.854364][ T5764] erofs: (device loop2): z_erofs_readahead: readahead error at page 8 @ nid 36 [ 161.874982][ T5764] erofs: (device loop2): z_erofs_readahead: readahead error at page 6 @ nid 36 [ 161.968855][ T5764] erofs: (device loop2): z_erofs_readahead: readahead error at page 4 @ nid 36 [ 161.995484][ T5764] erofs: (device loop2): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 36 [ 162.008920][ T5764] erofs: (device loop2): z_erofs_readahead: readahead error at page 0 @ nid 36 [ 162.047496][ T5764] syz.2.684: attempt to access beyond end of device [ 162.047496][ T5764] loop2: rw=524288, sector=296, nr_sectors = 16 limit=16 [ 162.098479][ T5764] syz.2.684: attempt to access beyond end of device [ 162.098479][ T5764] loop2: rw=524288, sector=1049264, nr_sectors = 16 limit=16 [ 162.173286][ T5764] syz.2.684: attempt to access beyond end of device [ 162.173286][ T5764] loop2: rw=524288, sector=16, nr_sectors = 8 limit=16 [ 162.206422][ T5764] syz.2.684: attempt to access beyond end of device [ 162.206422][ T5764] loop2: rw=524288, sector=720, nr_sectors = 128 limit=16 [ 162.239323][ T5764] syz.2.684: attempt to access beyond end of device [ 162.239323][ T5764] loop2: rw=524288, sector=13478624080, nr_sectors = 24 limit=16 [ 162.292526][ T5764] syz.2.684: attempt to access beyond end of device [ 162.292526][ T5764] loop2: rw=524288, sector=13478624032, nr_sectors = 48 limit=16 [ 162.328817][ T5785] loop3: detected capacity change from 0 to 4096 [ 162.375009][ T5764] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -18 in[46, 4050] out[4055] [ 162.383774][ T5785] ntfs: (device loop3): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 162.428821][ T5785] ntfs: (device loop3): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 162.483807][ T5785] ntfs: (device loop3): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 162.502308][ T5764] erofs: (device loop2): z_erofs_readahead: readahead error at page 87 @ nid 36 [ 162.531561][ T5792] loop0: detected capacity change from 0 to 1764 [ 162.553006][ T5764] erofs: (device loop2): z_erofs_readahead: readahead error at page 86 @ nid 36 [ 162.571479][ T5785] ntfs: (device loop3): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 162.595754][ T5764] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 162.626740][ T5785] ntfs: (device loop3): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 162.682755][ T5764] erofs: (device loop2): z_erofs_readahead: readahead error at page 83 @ nid 36 [ 162.699564][ T5764] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 162.709871][ T5785] ntfs: (device loop3): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 162.763772][ T5764] erofs: (device loop2): z_erofs_readahead: readahead error at page 82 @ nid 36 [ 162.774354][ T5785] ntfs: (device loop3): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 162.790796][ T5764] erofs: (device loop2): z_erofs_readahead: readahead error at page 79 @ nid 36 [ 162.873448][ T5764] erofs: (device loop2): z_erofs_readahead: readahead error at page 78 @ nid 36 [ 162.916401][ T5764] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 162.928082][ T5785] ntfs: (device loop3): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 162.935849][ T3688] net_ratelimit: 1 callbacks suppressed [ 162.935866][ T3688] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.979510][ T5785] ntfs: (device loop3): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 162.990939][ T5796] loop0: detected capacity change from 0 to 4096 [ 163.003996][ T5764] erofs: (device loop2): z_erofs_readahead: readahead error at page 76 @ nid 36 [ 163.023704][ T5764] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 163.041830][ T5785] ntfs: (device loop3): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 163.080598][ T5764] erofs: (device loop2): z_erofs_readahead: readahead error at page 75 @ nid 36 [ 163.092993][ T5764] erofs: (device loop2): z_erofs_readahead: readahead error at page 74 @ nid 36 [ 163.107906][ T5764] erofs: (device loop2): z_erofs_readahead: readahead error at page 72 @ nid 36 [ 163.119300][ T5785] ntfs: volume version 3.1. [ 163.150464][ T5764] erofs: (device loop2): z_erofs_readahead: readahead error at page 71 @ nid 36 [ 163.181369][ T5764] erofs: (device loop2): z_erofs_readahead: readahead error at page 70 @ nid 36 [ 163.242199][ T5764] erofs: (device loop2): z_erofs_readahead: readahead error at page 63 @ nid 36 [ 163.253400][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.279627][ T5764] erofs: (device loop2): z_erofs_readahead: readahead error at page 61 @ nid 36 [ 163.299640][ T5764] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 163.319507][ T5764] erofs: (device loop2): z_erofs_readahead: readahead error at page 59 @ nid 36 [ 163.371824][ T5764] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 163.403601][ T5764] erofs: (device loop2): z_erofs_readahead: readahead error at page 58 @ nid 36 [ 163.424336][ T5764] erofs: (device loop2): z_erofs_readahead: readahead error at page 56 @ nid 36 [ 163.467217][ T5764] erofs: (device loop2): z_erofs_readahead: readahead error at page 54 @ nid 36 [ 163.525638][ T5764] erofs: (device loop2): z_erofs_readahead: readahead error at page 50 @ nid 36 [ 163.569030][ T5764] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 163.579287][ T5764] erofs: (device loop2): z_erofs_readahead: readahead error at page 47 @ nid 36 [ 163.604198][ T5764] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 163.648671][ T5764] erofs: (device loop2): z_erofs_readahead: readahead error at page 46 @ nid 36 [ 163.672833][ T5764] erofs: (device loop2): z_erofs_readahead: readahead error at page 45 @ nid 36 [ 163.690221][ T5764] syz.2.684: attempt to access beyond end of device [ 163.690221][ T5764] loop2: rw=524288, sector=32, nr_sectors = 64 limit=16 [ 163.717766][ T5764] syz.2.684: attempt to access beyond end of device [ 163.717766][ T5764] loop2: rw=524288, sector=16, nr_sectors = 16 limit=16 [ 163.754319][ T5764] syz.2.684: attempt to access beyond end of device [ 163.754319][ T5764] loop2: rw=524288, sector=14425508768, nr_sectors = 8 limit=16 [ 163.814500][ T5764] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -18 in[46, 4050] out[5297] [ 163.945462][ T7] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 163.965026][ T3688] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.977701][ T3689] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.987678][ T5800] loop4: detected capacity change from 0 to 32768 [ 164.031590][ T5814] netlink: 4 bytes leftover after parsing attributes in process `syz.3.706'. [ 164.094879][ T5800] XFS: noikeep mount option is deprecated. [ 164.191185][ T7] usb 1-1: Using ep0 maxpacket: 8 [ 164.193186][ T5821] netlink: 32 bytes leftover after parsing attributes in process `syz.3.708'. [ 164.220425][ T5800] XFS (loop4): Mounting V5 Filesystem [ 164.314457][ T7] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 164.322778][ T7] usb 1-1: config 179 has no interface number 0 [ 164.404256][ T7] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 164.430498][ T5830] loop2: detected capacity change from 0 to 256 [ 164.445323][ T5800] XFS (loop4): Ending clean mount [ 164.457668][ T7] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 164.467689][ T5800] XFS (loop4): Quotacheck needed: Please wait. [ 164.473598][ T7] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 164.495997][ T7] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 164.510620][ T7] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 164.551829][ T5800] XFS (loop4): Quotacheck: Done. [ 164.567579][ T3719] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 164.609124][ T5830] netlink: 8 bytes leftover after parsing attributes in process `syz.2.709'. [ 164.620017][ T7] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 164.653117][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.744633][ T5810] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 164.831572][ T3640] XFS (loop4): Unmounting Filesystem [ 164.846667][ T3688] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 165.005020][ T153] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.090086][ T7] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input7 [ 165.114377][ T3688] usb 2-1: Using ep0 maxpacket: 16 [ 165.245718][ T3688] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 165.276798][ T3689] usb 1-1: USB disconnect, device number 4 [ 165.285370][ C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 165.285421][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 165.313414][ T5846] loop4: detected capacity change from 0 to 64 [ 165.315498][ T3689] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 165.384543][ T5846] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing [ 165.424663][ T3688] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 165.454303][ T3688] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.484288][ T3688] usb 2-1: Product: syz [ 165.490441][ T3688] usb 2-1: Manufacturer: syz [ 165.499698][ T3688] usb 2-1: SerialNumber: syz [ 165.508334][ T3688] usb 2-1: config 0 descriptor?? [ 165.530614][ T5840] loop3: detected capacity change from 0 to 32768 [ 165.565705][ T3688] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 165.597449][ T5853] netlink: 340 bytes leftover after parsing attributes in process `syz.4.720'. [ 165.612611][ T3688] usb 2-1: Detected FT232R [ 165.655286][ T5840] XFS (loop3): Mounting V5 Filesystem [ 165.784385][ T3688] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 165.801778][ T5840] XFS (loop3): Ending clean mount [ 165.827822][ T5840] XFS (loop3): Quotacheck needed: Please wait. [ 165.936383][ T5840] XFS (loop3): Quotacheck: Done. [ 166.045176][ T153] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.065483][ T3688] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 166.127865][ T5870] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.288639][ T3688] usb 2-1: USB disconnect, device number 5 [ 166.313377][ T3688] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 166.327560][ T3688] ftdi_sio 2-1:0.0: device disconnected [ 166.361735][ T4623] XFS (loop3): Unmounting Filesystem [ 166.411819][ T5865] loop4: detected capacity change from 0 to 32768 [ 166.496166][ T5865] XFS (loop4): Mounting V5 Filesystem [ 166.551109][ T5865] XFS (loop4): Ending clean mount [ 166.571192][ T5865] XFS (loop4): Quotacheck needed: Please wait. [ 166.621499][ T5865] XFS (loop4): Quotacheck: Done. [ 166.704616][ T3640] XFS (loop4): Unmounting Filesystem [ 166.755973][ T5884] loop2: detected capacity change from 0 to 1024 [ 166.815865][ T5884] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 166.863463][ T5891] loop3: detected capacity change from 0 to 256 [ 167.004386][ T4103] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.075730][ T3639] EXT4-fs (loop2): unmounting filesystem. [ 167.084923][ T3688] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.263454][ T5903] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.407057][ T5909] rose0: tun_chr_ioctl cmd 2147767519 [ 167.654330][ T3689] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 167.793814][ T5926] netlink: 12 bytes leftover after parsing attributes in process `syz.4.748'. [ 168.057832][ T3689] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 168.091963][ T3689] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 168.160747][ T3689] usb 1-1: New USB device found, idVendor=05ac, idProduct=4262, bcdDevice= 0.00 [ 168.205838][ T3689] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.227730][ T3724] net_ratelimit: 7 callbacks suppressed [ 168.227747][ T3724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.228781][ T3689] usb 1-1: config 0 descriptor?? [ 168.432882][ T5946] loop2: detected capacity change from 0 to 4096 [ 168.457317][ T5946] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 168.551883][ T5946] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 168.560213][ T5922] loop3: detected capacity change from 0 to 32768 [ 168.673742][ T5946] ntfs3: Volume is dirty and "force" flag is not set! [ 168.682578][ T5922] XFS (loop3): Mounting V5 Filesystem [ 168.807677][ T3689] hid-generic 0003:05AC:4262.0005: unbalanced delimiter at end of report description [ 168.818078][ T3689] hid-generic: probe of 0003:05AC:4262.0005 failed with error -22 [ 168.899329][ T5922] XFS (loop3): Ending clean mount [ 168.953239][ T5966] loop4: detected capacity change from 0 to 4096 [ 168.977255][ T5966] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 169.021668][ T4623] XFS (loop3): Unmounting Filesystem [ 169.061389][ T3688] usb 1-1: USB disconnect, device number 5 [ 169.319559][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.479204][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.626491][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.728084][ T5980] PKCS8: Unsupported PKCS#8 version [ 169.796063][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.069015][ T5987] loop3: detected capacity change from 0 to 8 [ 170.288812][ T48] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 170.316589][ T48] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 170.335587][ T48] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 170.347364][ T48] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 170.369736][ T48] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 170.379430][ T3688] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 170.390213][ T48] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 170.634296][ T3688] usb 1-1: Using ep0 maxpacket: 8 [ 170.747068][ T5978] loop4: detected capacity change from 0 to 32768 [ 170.759732][ T3688] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 170.813918][ T3688] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 170.842811][ T5978] XFS: noikeep mount option is deprecated. [ 170.947564][ T5978] XFS (loop4): Mounting V5 Filesystem [ 171.049815][ T3688] usb 1-1: New USB device found, idVendor=0b05, idProduct=19b6, bcdDevice= 0.40 [ 171.086754][ T3688] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.110067][ T3688] usb 1-1: Product: syz [ 171.134952][ T3688] usb 1-1: Manufacturer: syz [ 171.139107][ T5978] XFS (loop4): Ending clean mount [ 171.141307][ T3688] usb 1-1: SerialNumber: syz [ 171.171222][ T5978] XFS (loop4): Quotacheck needed: Please wait. [ 171.280612][ T5978] XFS (loop4): Quotacheck: Done. [ 171.370464][ T3640] XFS (loop4): Unmounting Filesystem [ 171.796098][ T5990] chnl_net:caif_netlink_parms(): no params data found [ 171.865182][ T3688] hid (null): report_id 2668810406 is invalid [ 171.905545][ T11] IPVS: stopping backup sync thread 5652 ... [ 171.906261][ T3688] asus 0003:0B05:19B6.0006: report_id 2668810406 is invalid [ 171.946504][ T6027] loop4: detected capacity change from 0 to 512 [ 171.992913][ T3688] asus 0003:0B05:19B6.0006: item 0 4 1 8 parsing failed [ 172.004838][ T3688] asus 0003:0B05:19B6.0006: Asus hid parse failed: -22 [ 172.011763][ T3688] asus: probe of 0003:0B05:19B6.0006 failed with error -22 [ 172.034232][ T6027] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 172.090017][ T153] usb 1-1: USB disconnect, device number 6 [ 172.116025][ T6034] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 172.163110][ T6027] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1085: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 172.192964][ T6027] EXT4-fs (loop4): 1 truncate cleaned up [ 172.208356][ T6027] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 172.288753][ T6027] EXT4-fs (loop4): shut down requested (2) [ 172.394965][ T3640] EXT4-fs (loop4): unmounting filesystem. [ 172.406653][ T5990] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.420273][ T5990] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.444466][ T3656] Bluetooth: hci1: command tx timeout [ 172.463240][ T5990] device bridge_slave_0 entered promiscuous mode [ 172.599503][ T5990] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.622090][ T5990] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.660749][ T5990] device bridge_slave_1 entered promiscuous mode [ 172.953947][ T5990] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 173.037000][ T5990] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 173.215466][ T5990] team0: Port device team_slave_0 added [ 173.296538][ T5990] team0: Port device team_slave_1 added [ 173.422938][ T6078] loop0: detected capacity change from 0 to 2048 [ 173.461151][ T6078] EXT4-fs: Ignoring removed mblk_io_submit option [ 173.500992][ T11] device hsr_slave_0 left promiscuous mode [ 173.536263][ T11] device hsr_slave_1 left promiscuous mode [ 173.562298][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 173.597507][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 173.606556][ T6078] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 173.636901][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 173.684233][ T3690] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 173.699234][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 173.710139][ T11] device bridge_slave_1 left promiscuous mode [ 173.724289][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.749137][ T11] device bridge_slave_0 left promiscuous mode [ 173.762754][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.782710][ T3642] EXT4-fs (loop0): unmounting filesystem. [ 173.801581][ T11] device veth1_macvtap left promiscuous mode [ 173.808764][ T11] device veth0_macvtap left promiscuous mode [ 173.821591][ T11] device veth1_vlan left promiscuous mode [ 173.831746][ T11] device veth0_vlan left promiscuous mode [ 174.087638][ T3690] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 174.101842][ T3690] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 174.129860][ T3690] usb 5-1: New USB device found, idVendor=05ac, idProduct=4262, bcdDevice= 0.00 [ 174.152165][ T3690] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.185183][ T3690] usb 5-1: config 0 descriptor?? [ 174.534465][ T3656] Bluetooth: hci1: command tx timeout [ 174.554256][ T4103] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 174.705724][ T3690] hid-generic 0003:05AC:4262.0007: unbalanced delimiter at end of report description [ 174.720451][ T3690] hid-generic: probe of 0003:05AC:4262.0007 failed with error -22 [ 174.838204][ T11] team0 (unregistering): Port device team_slave_1 removed [ 174.910089][ T11] team0 (unregistering): Port device team_slave_0 removed [ 174.922729][ T3690] usb 5-1: USB disconnect, device number 6 [ 175.008367][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 175.059700][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 175.144926][ T4103] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 175.162362][ T4103] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.171381][ T4103] usb 1-1: Product: syz [ 175.178572][ T4103] usb 1-1: Manufacturer: syz [ 175.183515][ T4103] usb 1-1: SerialNumber: syz [ 175.200921][ T4103] usb 1-1: config 0 descriptor?? [ 175.619543][ T11] bond0 (unregistering): Released all slaves [ 175.688011][ T5990] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 175.700584][ T5990] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 175.730125][ T5990] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 175.754443][ T4103] usb 1-1: Firmware: major: 215, minor: 149, hardware type: HULUSB (4) [ 175.793184][ T6092] netlink: 16 bytes leftover after parsing attributes in process `syz.1.808'. [ 175.819345][ T5990] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 175.837522][ T5990] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 175.895374][ T5990] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 176.005826][ T4103] usb 1-1: failed to fetch extended address, random address set [ 176.134381][ T6104] loop4: detected capacity change from 0 to 512 [ 176.174308][ T4103] usb 1-1: USB disconnect, device number 7 [ 176.246308][ T5990] device hsr_slave_0 entered promiscuous mode [ 176.257670][ T6104] EXT4-fs error (device loop4): __ext4_fill_super:5399: inode #2: comm syz.4.812: casefold flag without casefold feature [ 176.279102][ T5990] device hsr_slave_1 entered promiscuous mode [ 176.296885][ T5990] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 176.299569][ T6104] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 176.312967][ T5990] Cannot create hsr debugfs directory [ 176.356330][ T6104] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 176.604352][ T3656] Bluetooth: hci1: command tx timeout [ 176.616297][ T3640] EXT4-fs (loop4): unmounting filesystem. [ 176.721807][ T6122] loop0: detected capacity change from 0 to 2048 [ 176.871854][ T6122] EXT4-fs error (device loop0): ext4_orphan_get:1422: comm syz.0.816: bad orphan inode 8192 [ 176.929717][ T6130] netlink: 28 bytes leftover after parsing attributes in process `syz.1.805'. [ 177.014512][ T6130] netlink: 7 bytes leftover after parsing attributes in process `syz.1.805'. [ 177.047460][ T6122] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 177.169887][ T26] kauditd_printk_skb: 20 callbacks suppressed [ 177.169903][ T26] audit: type=1800 audit(1724372964.221:13): pid=6122 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.816" name="bus" dev="loop0" ino=18 res=0 errno=0 [ 177.354095][ T6140] loop3: detected capacity change from 0 to 164 [ 177.421545][ T6140] isofs: isofs_export_get_parent(): child directory not normalized! [ 177.455864][ T3642] EXT4-fs (loop0): unmounting filesystem. [ 178.079103][ T6148] loop3: detected capacity change from 0 to 4096 [ 178.137761][ T6148] ntfs: (device loop3): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 178.170215][ T6157] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 178.183489][ T6157] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 178.196727][ T6157] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 178.210164][ T6157] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 178.316961][ T6148] ntfs: volume version 3.1. [ 178.335797][ T6157] device vxlan0 entered promiscuous mode [ 178.383968][ T6157] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 178.395402][ T6157] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 178.407425][ T6157] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 178.420457][ T6157] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 178.584696][ T3688] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 178.684585][ T3656] Bluetooth: hci1: command tx timeout [ 178.935609][ T5990] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 179.006763][ T5990] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 179.065390][ T5990] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 179.089071][ T5990] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 179.154568][ T3688] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 179.197662][ T3688] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.234215][ T3688] usb 5-1: Product: syz [ 179.274516][ T3688] usb 5-1: Manufacturer: syz [ 179.289912][ T3688] usb 5-1: SerialNumber: syz [ 179.315259][ T3688] usb 5-1: config 0 descriptor?? [ 179.383829][ T5990] 8021q: adding VLAN 0 to HW filter on device bond0 [ 179.412764][ T3700] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 179.429505][ T3700] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 179.502965][ T5990] 8021q: adding VLAN 0 to HW filter on device team0 [ 179.559098][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 179.588797][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 179.598349][ T6191] netlink: 32 bytes leftover after parsing attributes in process `syz.0.825'. [ 179.616409][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.625262][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 179.689749][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 179.705967][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 179.725074][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 179.762732][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.771172][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 179.813485][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 179.824179][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 179.854447][ T3688] usb 5-1: Firmware: major: 215, minor: 149, hardware type: HULUSB (4) [ 179.868057][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 179.872607][ T22] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 179.914416][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 179.957828][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 180.001672][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 180.037662][ T6197] netlink: 8 bytes leftover after parsing attributes in process `syz.0.830'. [ 180.069587][ T6197] netlink: 36 bytes leftover after parsing attributes in process `syz.0.830'. [ 180.094384][ T3688] usb 5-1: failed to fetch extended address, random address set [ 180.104620][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 180.122885][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 180.156833][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 180.182573][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 180.209105][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 180.246565][ T5990] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 180.284503][ T22] usb 4-1: config 1 has an invalid descriptor of length 110, skipping remainder of the config [ 180.314332][ T22] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 180.346294][ T3688] usb 5-1: USB disconnect, device number 7 [ 180.434476][ T22] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 180.460553][ T22] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 180.484297][ T22] usb 4-1: SerialNumber: syz [ 180.800089][ T22] usb 4-1: 0:2 : does not exist [ 180.811298][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 180.841377][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 180.879768][ T5990] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 180.966029][ T22] usb 4-1: USB disconnect, device number 6 [ 181.091630][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 181.113902][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 181.170355][ T5990] device veth0_vlan entered promiscuous mode [ 181.208272][ T1095] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 181.228719][ T1095] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 181.265527][ T5990] device veth1_vlan entered promiscuous mode [ 181.294791][ T1095] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 181.332819][ T1095] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 181.353336][ T1095] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 181.377762][ T6224] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 181.388448][ T6224] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 181.400031][ T6224] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 181.409863][ T6224] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 181.499703][ T6230] loop0: detected capacity change from 0 to 512 [ 181.574620][ T6224] device vxlan0 entered promiscuous mode [ 181.637651][ T6224] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 181.652648][ T6230] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2219: inode #15: comm syz.0.838: corrupted in-inode xattr [ 181.668129][ T6224] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 181.681292][ T6230] EXT4-fs error (device loop0): ext4_orphan_get:1401: comm syz.0.838: couldn't read orphan inode 15 (err -117) [ 181.682936][ T6224] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 181.713629][ T6224] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 181.774004][ T4697] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 181.785942][ T6230] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 181.800025][ T4697] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 181.800964][ T4697] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 181.877999][ T5990] device veth0_macvtap entered promiscuous mode [ 181.915437][ T5990] device veth1_macvtap entered promiscuous mode [ 181.993395][ T5990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.031134][ T5990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.074997][ T5990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.092574][ T6241] netlink: 32 bytes leftover after parsing attributes in process `syz.4.839'. [ 182.117680][ T5990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.132857][ T5990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.151608][ T5990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.163483][ T5990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.180604][ T5990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.193243][ T5990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.207343][ T5990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.221045][ T3642] EXT4-fs (loop0): unmounting filesystem. [ 182.229849][ T5990] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 182.245031][ T6239] netlink: 'syz.1.849': attribute type 1 has an invalid length. [ 182.260172][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 182.306325][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 182.367739][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 182.394371][ T3690] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 182.418065][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 182.433650][ T6248] loop4: detected capacity change from 0 to 1024 [ 182.449206][ T5990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.482902][ T5990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.500263][ T5990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.513652][ T5990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.514314][ T6248] EXT4-fs: Ignoring removed orlov option [ 182.530308][ T5990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.532818][ T6248] EXT4-fs: Ignoring removed nomblk_io_submit option [ 182.567886][ T5990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.583341][ T5990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.620860][ T5990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.644065][ T6248] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 182.698543][ T3690] usb 4-1: Using ep0 maxpacket: 8 [ 182.714591][ T5990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.734249][ T5990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.756796][ T5990] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 182.786245][ T5990] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.799048][ T3640] EXT4-fs (loop4): unmounting filesystem. [ 182.824462][ T5990] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.844480][ T3690] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 182.879542][ T5990] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.883852][ T3690] usb 4-1: config 179 has no interface number 0 [ 182.898752][ T5990] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.911042][ T6260] loop0: detected capacity change from 0 to 1024 [ 182.918930][ T3690] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 182.938928][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 182.981000][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 182.990898][ T3690] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 182.993673][ T6260] hfsplus: request for non-existent node 3 in B*Tree [ 183.011160][ T3690] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 183.035827][ T3690] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 183.093391][ T6260] hfsplus: request for non-existent node 3 in B*Tree [ 183.104480][ T3690] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 183.164985][ T4697] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.177489][ T3690] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 183.184535][ T26] audit: type=1800 audit(1724372970.231:14): pid=6260 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.848" name="bus" dev="loop0" ino=2 res=0 errno=0 [ 183.216623][ T6260] hfsplus: bad catalog folder thread [ 183.225096][ T3690] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.233031][ T4697] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.317091][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 183.334628][ T6243] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 183.414508][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.438332][ T6272] netlink: 'syz.4.850': attribute type 1 has an invalid length. [ 183.519241][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.605020][ T1095] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 183.739535][ T3689] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input8 [ 183.909260][ T4103] usb 4-1: USB disconnect, device number 7 [ 183.924262][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 183.934610][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 183.973491][ T4103] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 184.155309][ T6291] loop2: detected capacity change from 0 to 512 [ 184.223695][ T6291] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 184.272013][ T6289] loop0: detected capacity change from 0 to 4096 [ 184.287561][ T6291] EXT4-fs (loop2): inodes count not valid: 32 vs 800 [ 184.300207][ T6289] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 184.339123][ T6289] ntfs: (device loop0): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 184.405323][ T6289] ntfs: (device loop0): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 184.460215][ T6289] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 184.484281][ T6289] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 184.554288][ T6289] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 184.609702][ T6289] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 184.635045][ T6296] loop2: detected capacity change from 0 to 1024 [ 184.680790][ T6296] EXT4-fs: Ignoring removed orlov option [ 184.695468][ T6289] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 184.714606][ T6296] EXT4-fs: Ignoring removed nomblk_io_submit option [ 184.724492][ T6289] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 184.813320][ T6289] ntfs: volume version 3.1. [ 184.821036][ T6296] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 184.841246][ T6280] loop4: detected capacity change from 0 to 32768 [ 184.880452][ T6280] BTRFS: device fsid d552757d-9c39-40e3-95f0-16d819589928 devid 1 transid 8 /dev/loop4 scanned by syz.4.855 (6280) [ 184.908499][ T6280] BTRFS info (device loop4): first mount of filesystem d552757d-9c39-40e3-95f0-16d819589928 [ 184.929193][ T6280] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 184.954275][ T6280] BTRFS info (device loop4): disabling tree log [ 184.960813][ T6280] BTRFS warning (device loop4): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 184.992581][ T6280] BTRFS info (device loop4): trying to use backup root at mount time [ 185.002537][ T5990] EXT4-fs (loop2): unmounting filesystem. [ 185.005733][ T6280] BTRFS info (device loop4): setting nodatacow, compression disabled [ 185.053427][ T6280] BTRFS info (device loop4): enabling ssd optimizations [ 185.098822][ T6280] BTRFS info (device loop4): using spread ssd allocation scheme [ 185.123436][ T6280] BTRFS info (device loop4): using free space tree [ 185.651537][ T6334] loop3: detected capacity change from 0 to 2048 [ 185.785308][ T6313] loop2: detected capacity change from 0 to 32768 [ 185.787616][ T6345] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 185.851683][ T6334] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, name_len=0 [ 185.971834][ T3640] BTRFS info (device loop4): last unmount of filesystem d552757d-9c39-40e3-95f0-16d819589928 [ 185.995190][ T6334] Remounting filesystem read-only [ 186.452715][ T6364] loop0: detected capacity change from 0 to 1024 [ 186.503830][ T6364] EXT4-fs: Ignoring removed orlov option [ 186.546302][ T6364] EXT4-fs: Ignoring removed nomblk_io_submit option [ 186.660600][ T6364] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 186.923071][ T3642] EXT4-fs (loop0): unmounting filesystem. [ 187.045961][ T6387] cifs: Unknown parameter 'mode' [ 187.596296][ T6410] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.603892][ T6410] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.917252][ T6423] netlink: 8 bytes leftover after parsing attributes in process `syz.2.891'. [ 187.971791][ T6423] netlink: 8 bytes leftover after parsing attributes in process `syz.2.891'. [ 188.019937][ T6418] loop0: detected capacity change from 0 to 4096 [ 188.066706][ T6418] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 188.162380][ T6427] ALSA: mixer_oss: invalid OSS volume '' [ 188.170156][ T6418] ntfs3: loop0: Failed to load $Extend. [ 188.420188][ T6435] loop4: detected capacity change from 0 to 1764 [ 188.520923][ T6435] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 188.739640][ T6442] loop0: detected capacity change from 0 to 256 [ 189.202307][ T6459] sctp: [Deprecated]: syz.2.905 (pid 6459) Use of int in maxseg socket option. [ 189.202307][ T6459] Use struct sctp_assoc_value instead [ 189.241354][ T6461] device ip6gretap0 entered promiscuous mode [ 189.286210][ T6461] device ip6gretap0 left promiscuous mode [ 189.552849][ T6474] netlink: 'syz.4.914': attribute type 1 has an invalid length. [ 189.698286][ T6478] netlink: 'syz.2.915': attribute type 29 has an invalid length. [ 189.723904][ T6478] netlink: 'syz.2.915': attribute type 29 has an invalid length. [ 189.760323][ T6483] netlink: 'syz.2.915': attribute type 29 has an invalid length. [ 189.776813][ T6478] netlink: 'syz.2.915': attribute type 29 has an invalid length. [ 190.145366][ T6495] netlink: 280 bytes leftover after parsing attributes in process `syz.0.921'. [ 190.482194][ T6509] loop0: detected capacity change from 0 to 2048 [ 190.504350][ T153] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 190.521925][ T6510] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 190.538344][ T6481] loop4: detected capacity change from 0 to 40427 [ 190.562436][ T6481] F2FS-fs (loop4): invalid crc value [ 190.573013][ T6481] F2FS-fs (loop4): Found nat_bits in checkpoint [ 190.594261][ T4103] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 190.621636][ T6481] F2FS-fs (loop4): Cannot turn on quotas: -2 on 1 [ 190.633565][ T22] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 190.646963][ T6481] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 190.717013][ T6481] syz.4.917: attempt to access beyond end of device [ 190.717013][ T6481] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 190.875814][ T4103] usb 3-1: Using ep0 maxpacket: 32 [ 190.889001][ T153] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 190.916761][ T153] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 190.943175][ T153] usb 2-1: New USB device found, idVendor=056a, idProduct=0003, bcdDevice= 0.00 [ 190.960353][ T153] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.986379][ T153] usb 2-1: config 0 descriptor?? [ 190.994610][ T22] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 191.014499][ T4103] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 191.032577][ T22] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 191.033305][ T4103] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 191.055270][ T4103] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 191.066437][ T4103] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.088155][ T4103] usb 3-1: config 0 descriptor?? [ 191.114426][ T22] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 191.123506][ T22] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 191.136502][ T4103] hub 3-1:0.0: bad descriptor, ignoring hub [ 191.144269][ T22] usb 4-1: SerialNumber: syz [ 191.157549][ T4103] hub: probe of 3-1:0.0 failed with error -5 [ 191.196105][ T6528] loop0: detected capacity change from 0 to 512 [ 191.231744][ T6528] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 191.247647][ T6528] ext4 filesystem being mounted at /214/bus supports timestamps until 2038 (0x7fffffff) [ 191.319046][ T6535] loop4: detected capacity change from 0 to 512 [ 191.363601][ T6535] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 191.366112][ T3642] EXT4-fs (loop0): unmounting filesystem. [ 191.373226][ T6535] ext4 filesystem being mounted at /181/bus supports timestamps until 2038 (0x7fffffff) [ 191.446799][ T22] usb 4-1: 0:2 : does not exist [ 191.455354][ T4104] usb 3-1: USB disconnect, device number 5 [ 191.476232][ T153] wacom 0003:056A:0003.0008: Unknown device_type for 'HID 056a:0003'. Assuming pen. [ 191.500268][ T3640] EXT4-fs (loop4): unmounting filesystem. [ 191.503856][ T22] usb 4-1: USB disconnect, device number 8 [ 191.525230][ T153] wacom 0003:056A:0003.0008: hidraw0: USB HID v0.00 Device [HID 056a:0003] on usb-dummy_hcd.1-1/input0 [ 191.574225][ T48] Bluetooth: hci3: command 0x0406 tx timeout [ 191.574396][ T3656] Bluetooth: hci0: command 0x0406 tx timeout [ 191.611330][ T6541] loop4: detected capacity change from 0 to 128 [ 191.612819][ T153] input: Wacom Cintiq Partner Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:0003.0008/input/input9 [ 191.633260][ T3719] udevd[3719]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 191.649618][ T6541] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 191.686038][ T6541] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 191.737332][ T153] usb 2-1: USB disconnect, device number 6 [ 191.824280][ T4161] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 192.023259][ T6553] netlink: 8 bytes leftover after parsing attributes in process `syz.3.946'. [ 192.184427][ T4161] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 192.195441][ T4161] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 192.232993][ T4161] usb 3-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice= 0.40 [ 192.273676][ T6557] loop0: detected capacity change from 0 to 4096 [ 192.280262][ T4161] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.304781][ T4161] usb 3-1: config 0 descriptor?? [ 192.321919][ T6561] netlink: 12 bytes leftover after parsing attributes in process `syz.1.951'. [ 192.335995][ T6557] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 192.361710][ T6561] netlink: 8 bytes leftover after parsing attributes in process `syz.1.951'. [ 192.387179][ T4161] ttusbir 3-1:0.0: cannot find expected altsetting [ 192.403222][ T6557] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 192.587522][ T4161] usb 3-1: USB disconnect, device number 6 [ 192.744093][ T6572] netlink: 'syz.1.957': attribute type 2 has an invalid length. [ 192.833998][ T6570] loop3: detected capacity change from 0 to 4096 [ 192.855975][ T6570] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 192.936645][ T6570] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 192.948150][ T6576] loop0: detected capacity change from 0 to 2048 [ 192.967589][ T6549] loop4: detected capacity change from 0 to 32768 [ 193.042869][ T6581] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 193.178373][ T6549] XFS (loop4): Mounting V5 Filesystem [ 193.383787][ T6549] XFS (loop4): Ending clean mount [ 193.416425][ T6549] XFS (loop4): Quotacheck needed: Please wait. [ 193.507937][ T6549] XFS (loop4): Quotacheck: Done. [ 193.647940][ T3640] XFS (loop4): Unmounting Filesystem [ 193.750841][ T6605] loop0: detected capacity change from 0 to 512 [ 193.751191][ T6608] binder: BC_ACQUIRE_RESULT not supported [ 193.763304][ T6608] binder: 6607:6608 ioctl c0306201 200001c0 returned -22 [ 193.842264][ T6605] EXT4-fs error (device loop0): ext4_orphan_get:1396: inode #15: comm syz.0.967: casefold flag without casefold feature [ 193.896738][ T6605] EXT4-fs error (device loop0): ext4_orphan_get:1422: comm syz.0.967: bad orphan inode 15 [ 193.916704][ T6605] ext4_test_bit(bit=14, block=18) = 1 [ 193.922256][ T6605] is_bad_inode(inode)=0 [ 193.926839][ T6605] NEXT_ORPHAN(inode)=1023 [ 193.934470][ T6605] max_ino=32 [ 193.937703][ T6605] i_nlink=0 [ 194.009490][ T6605] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2932: inode #15: comm syz.0.967: corrupted xattr block 19 [ 194.031055][ T6605] EXT4-fs warning (device loop0): ext4_evict_inode:299: xattr delete (err -117) [ 194.050358][ T6605] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 194.061700][ T6605] ext4 filesystem being mounted at /225/bus supports timestamps until 2038 (0x7fffffff) [ 194.107839][ T6605] EXT4-fs error (device loop0): ext4_empty_dir:3137: inode #12: comm syz.0.967: Directory hole found for htree leaf block 0 [ 194.191576][ T3642] EXT4-fs (loop0): unmounting filesystem. [ 194.612907][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.619300][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.632536][ T26] kauditd_printk_skb: 16 callbacks suppressed [ 194.632552][ T26] audit: type=1326 audit(1724372981.691:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6637 comm="syz.0.979" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7467979e79 code=0x0 [ 194.713423][ T6640] loop3: detected capacity change from 0 to 128 [ 194.745428][ T6640] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 194.755110][ T6640] ext4 filesystem being mounted at /146/mnt supports timestamps until 2038 (0x7fffffff) [ 194.807202][ T4623] EXT4-fs (loop3): unmounting filesystem. [ 194.848858][ T4103] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 194.909136][ T6646] loop3: detected capacity change from 0 to 64 [ 195.245210][ T4103] usb 3-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 195.255025][ T4103] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.280922][ T4103] usb 3-1: config 0 descriptor?? [ 195.300875][ T4104] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 195.326179][ T4103] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 195.601478][ C1] eth0: bad gso: type: 1, size: 1408 [ 195.676982][ T6667] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 195.676982][ T6667] The task syz.1.991 (6667) triggered the difference, watch for misbehavior. [ 195.706063][ T4104] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 195.724473][ T4104] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.752091][ T4104] usb 4-1: config 0 descriptor?? [ 195.801046][ T4104] cp210x 4-1:0.0: cp210x converter detected [ 195.985449][ T4103] gspca_cpia1: usb_control_msg 01, error -71 [ 195.993378][ T4103] cpia1 3-1:0.0: only firmware version 1 is supported (got: 0) [ 196.016491][ T4103] usb 3-1: USB disconnect, device number 7 [ 196.235423][ T4104] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 196.282212][ T6673] loop0: detected capacity change from 0 to 40427 [ 196.310494][ T4104] usb 4-1: cp210x converter now attached to ttyUSB0 [ 196.342657][ T6673] F2FS-fs (loop0): Found nat_bits in checkpoint [ 196.423900][ T6673] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 196.503210][ T4104] usb 4-1: USB disconnect, device number 9 [ 196.551628][ T6684] loop4: detected capacity change from 0 to 512 [ 196.552730][ T4104] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 196.596654][ T4104] cp210x 4-1:0.0: device disconnected [ 196.605928][ T3642] syz-executor: attempt to access beyond end of device [ 196.605928][ T3642] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 196.658329][ T6684] EXT4-fs error (device loop4): ext4_orphan_get:1396: inode #15: comm syz.4.999: casefold flag without casefold feature [ 196.674555][ T6684] EXT4-fs (loop4): Remounting filesystem read-only [ 196.681159][ T6684] EXT4-fs error (device loop4): ext4_orphan_get:1422: comm syz.4.999: bad orphan inode 15 [ 196.694938][ T6684] ext4_test_bit(bit=14, block=18) = 1 [ 196.700356][ T6684] is_bad_inode(inode)=0 [ 196.714305][ T6684] NEXT_ORPHAN(inode)=1023 [ 196.719857][ T6684] max_ino=32 [ 196.723089][ T6684] i_nlink=0 [ 196.752327][ T6684] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 196.800144][ T6684] ext4 filesystem being mounted at /193/bus supports timestamps until 2038 (0x7fffffff) [ 196.979389][ T3640] EXT4-fs (loop4): unmounting filesystem. [ 197.095846][ T6695] xt_hashlimit: max too large, truncated to 1048576 [ 197.549845][ T6708] loop3: detected capacity change from 0 to 4096 [ 197.721468][ T6708] ntfs3: loop3: ino=1f, "file2" ntfs_rename [ 197.772098][ T6689] loop2: detected capacity change from 0 to 40427 [ 197.796049][ T6689] F2FS-fs (loop2): Corrupted extension count (64 + 1 > 64) [ 197.811120][ T6689] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 197.904869][ T6689] F2FS-fs (loop2): Found nat_bits in checkpoint [ 198.011828][ T6689] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 198.019932][ T6689] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 198.070730][ T6716] f2fs_ckpt-7:2: attempt to access beyond end of device [ 198.070730][ T6716] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 198.217285][ T5990] syz-executor: attempt to access beyond end of device [ 198.217285][ T5990] loop2: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 198.260605][ T5990] syz-executor: attempt to access beyond end of device [ 198.260605][ T5990] loop2: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 198.396431][ T6735] loop4: detected capacity change from 0 to 1764 [ 198.461191][ T3719] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 199.049181][ T3700] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.271754][ T6763] loop0: detected capacity change from 0 to 1024 [ 199.280143][ T3700] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.399309][ T3700] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.534069][ T3700] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.589128][ T3642] hfsplus: node 4:3 still has 1 user(s)! [ 200.320130][ T3655] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 200.393258][ T3655] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 200.403155][ T3655] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 200.414940][ T3655] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 200.422791][ T3655] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 200.434712][ T3655] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 200.793452][ T6799] sctp: [Deprecated]: syz.4.1048 (pid 6799) Use of struct sctp_assoc_value in delayed_ack socket option. [ 200.793452][ T6799] Use struct sctp_sack_info instead [ 200.854543][ T6797] netlink: 'syz.3.1047': attribute type 10 has an invalid length. [ 200.881759][ T6797] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 200.918282][ T6797] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 200.972391][ T6797] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 201.480957][ T6822] loop3: detected capacity change from 0 to 256 [ 201.535528][ T3689] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 201.588213][ T6822] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x1aabf3fb, utbl_chksum : 0xe619d30d) [ 201.622859][ T6787] chnl_net:caif_netlink_parms(): no params data found [ 201.791805][ T6832] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 201.807981][ T3689] usb 1-1: Using ep0 maxpacket: 8 [ 201.895883][ T6787] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.903206][ T6787] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.912290][ T6787] device bridge_slave_0 entered promiscuous mode [ 201.922085][ T6787] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.929800][ T3689] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 201.939732][ T3689] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 201.955977][ T6787] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.958290][ T6838] loop3: detected capacity change from 0 to 256 [ 201.969206][ T3689] usb 1-1: config 1 has no interface number 1 [ 201.981951][ T6787] device bridge_slave_1 entered promiscuous mode [ 201.991987][ T3689] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 202.020938][ T3689] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 202.046473][ T6838] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 202.232751][ T3689] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 202.243693][ T3689] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.259670][ T3689] usb 1-1: Product: syz [ 202.265627][ T3689] usb 1-1: Manufacturer: syz [ 202.270395][ T3689] usb 1-1: SerialNumber: syz [ 202.372417][ T6787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 202.468329][ T6787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 202.524387][ T3655] Bluetooth: hci1: command tx timeout [ 202.624705][ T3689] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 202.665491][ T3689] usb 1-1: USB disconnect, device number 8 [ 202.825948][ T6787] team0: Port device team_slave_0 added [ 202.883855][ T6787] team0: Port device team_slave_1 added [ 202.969922][ T6787] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 202.995728][ T6787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 203.072673][ T6787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 203.098096][ T3700] device hsr_slave_0 left promiscuous mode [ 203.116815][ T3700] device hsr_slave_1 left promiscuous mode [ 203.186108][ T3700] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 203.204682][ T3700] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 203.217456][ T3700] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 203.234295][ T3700] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 203.243198][ T3700] device bridge_slave_1 left promiscuous mode [ 203.264384][ T3700] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.276072][ T3700] device bridge_slave_0 left promiscuous mode [ 203.289024][ T3700] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.389504][ T3700] device veth1_macvtap left promiscuous mode [ 203.401788][ T3700] device veth0_macvtap left promiscuous mode [ 203.402393][ T6872] loop3: detected capacity change from 0 to 512 [ 203.414345][ T3700] device veth1_vlan left promiscuous mode [ 203.414506][ T3700] device veth0_vlan left promiscuous mode [ 203.458634][ T6872] EXT4-fs: Ignoring removed orlov option [ 203.517990][ T6872] EXT4-fs (loop3): 1 orphan inode deleted [ 203.529570][ T6872] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 203.541743][ T6872] ext4 filesystem being mounted at /175/file1 supports timestamps until 2038 (0x7fffffff) [ 203.671198][ T4623] EXT4-fs (loop3): unmounting filesystem. [ 203.835279][ T6879] loop3: detected capacity change from 0 to 2048 [ 203.858340][ T6879] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 203.890529][ T6879] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 204.516431][ T3700] team0 (unregistering): Port device team_slave_1 removed [ 204.568322][ T3700] team0 (unregistering): Port device team_slave_0 removed [ 204.608475][ T3655] Bluetooth: hci1: command tx timeout [ 204.624936][ T3700] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 204.671810][ T3700] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 205.185163][ T3700] bond0 (unregistering): Released all slaves [ 205.250068][ T6787] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 205.257277][ T6787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.283719][ T6787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 205.319090][ T6874] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1069'. [ 205.352885][ T6874] netlink: 'syz.4.1069': attribute type 1 has an invalid length. [ 205.377476][ T6874] netlink: 'syz.4.1069': attribute type 2 has an invalid length. [ 205.385454][ T6893] net veth1_virt_wifi : renamed from virt_wifi0 [ 205.540439][ T6787] device hsr_slave_0 entered promiscuous mode [ 205.585286][ T6787] device hsr_slave_1 entered promiscuous mode [ 205.606808][ T6787] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 205.615326][ T6787] Cannot create hsr debugfs directory [ 205.858579][ T6915] loop0: detected capacity change from 0 to 256 [ 205.946702][ T6915] exFAT-fs (loop0): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 206.184387][ T6922] trusted_key: encrypted_key: insufficient parameters specified [ 206.293378][ T6929] loop0: detected capacity change from 0 to 128 [ 206.373448][ T6929] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 206.438266][ T6929] ext4 filesystem being mounted at /245/mnt supports timestamps until 2038 (0x7fffffff) [ 206.684231][ T3655] Bluetooth: hci1: command tx timeout [ 206.752776][ T3642] EXT4-fs (loop0): unmounting filesystem. [ 207.161513][ T6787] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 207.236182][ T6787] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 207.322433][ T6787] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 207.349978][ T6787] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 207.724047][ T6787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 207.778376][ T6787] 8021q: adding VLAN 0 to HW filter on device team0 [ 207.804934][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 207.816173][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 207.896054][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 207.925711][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 207.971558][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.979184][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 208.045004][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 208.062067][ T6940] loop3: detected capacity change from 0 to 32768 [ 208.064451][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 208.090588][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.098162][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 208.106675][ T6940] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop3 scanned by syz.3.1093 (6940) [ 208.144638][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 208.184975][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 208.224968][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 208.226224][ T6940] BTRFS info (device loop3): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 208.291306][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 208.340454][ T6940] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 208.346411][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 208.389399][ T6940] BTRFS info (device loop3): using free space tree [ 208.402047][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 208.440363][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 208.515661][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 208.582822][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 208.685489][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 208.709436][ T6996] loop4: detected capacity change from 0 to 256 [ 208.764465][ T3655] Bluetooth: hci1: command tx timeout [ 208.814756][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 208.835009][ T6940] BTRFS info (device loop3): enabling ssd optimizations [ 208.871305][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 208.951163][ T6787] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 209.070587][ T4623] BTRFS info (device loop3): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 209.829306][ T7040] loop4: detected capacity change from 0 to 16 [ 209.884671][ T6787] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 209.909901][ T7040] erofs: (device loop4): mounted with root inode @ nid 36. [ 209.943831][ T4697] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 209.969826][ T7040] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 209.984561][ T4697] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 210.075378][ T7040] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -18 in[46, 4050] out[1851] [ 210.095446][ T4697] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 210.102740][ T7044] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 210.126858][ T4697] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 210.172226][ T7040] erofs: (device loop4): z_erofs_read_folio: failed to read, err [-117] [ 210.212274][ T7044] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 210.263992][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 210.281017][ T7044] erofs: (device loop4): z_erofs_readahead: readahead error at page 42 @ nid 36 [ 210.294975][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 210.327358][ T6787] device veth0_vlan entered promiscuous mode [ 210.362902][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 210.388008][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 210.424485][ T7044] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 210.443106][ T6787] device veth1_vlan entered promiscuous mode [ 210.504592][ T7044] erofs: (device loop4): z_erofs_readahead: readahead error at page 41 @ nid 36 [ 210.544406][ T7044] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 210.557013][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 210.586566][ T7044] erofs: (device loop4): z_erofs_readahead: readahead error at page 40 @ nid 36 [ 210.674455][ T7044] erofs: (device loop4): z_erofs_readahead: readahead error at page 39 @ nid 36 [ 210.687433][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 210.714503][ T7044] erofs: (device loop4): z_erofs_readahead: readahead error at page 38 @ nid 36 [ 210.717710][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 210.774856][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 210.800506][ T7044] erofs: (device loop4): z_erofs_readahead: readahead error at page 36 @ nid 36 [ 210.823540][ T6787] device veth0_macvtap entered promiscuous mode [ 210.839367][ T7044] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 210.889621][ T6787] device veth1_macvtap entered promiscuous mode [ 210.919346][ T7044] erofs: (device loop4): z_erofs_readahead: readahead error at page 31 @ nid 36 [ 210.983816][ T7044] erofs: (device loop4): z_erofs_readahead: readahead error at page 25 @ nid 36 [ 211.011419][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 211.025468][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 211.051920][ T7044] erofs: (device loop4): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 211.090495][ T6787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 211.108522][ T7044] erofs: (device loop4): z_erofs_readahead: readahead error at page 19 @ nid 36 [ 211.126206][ T6787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.139405][ T7044] erofs: (device loop4): z_erofs_readahead: readahead error at page 13 @ nid 36 [ 211.148690][ T7044] erofs: (device loop4): z_erofs_readahead: readahead error at page 8 @ nid 36 [ 211.163977][ T6787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 211.179514][ T7044] erofs: (device loop4): z_erofs_readahead: readahead error at page 6 @ nid 36 [ 211.198689][ T6787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.224330][ T7044] erofs: (device loop4): z_erofs_readahead: readahead error at page 4 @ nid 36 [ 211.237806][ T6787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 211.259086][ T7044] erofs: (device loop4): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 36 [ 211.273357][ T6787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.291985][ T7044] erofs: (device loop4): z_erofs_readahead: readahead error at page 0 @ nid 36 [ 211.313178][ T6787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 211.328613][ T7044] syz.4.1122: attempt to access beyond end of device [ 211.328613][ T7044] loop4: rw=524288, sector=296, nr_sectors = 16 limit=16 [ 211.349977][ T6787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.365017][ T7044] syz.4.1122: attempt to access beyond end of device [ 211.365017][ T7044] loop4: rw=524288, sector=1049264, nr_sectors = 16 limit=16 [ 211.388793][ T6787] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 211.398443][ T7070] bond0: option ad_select: unable to set because the bond device is up [ 211.415013][ T4697] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 211.420087][ T7044] syz.4.1122: attempt to access beyond end of device [ 211.420087][ T7044] loop4: rw=524288, sector=16, nr_sectors = 8 limit=16 [ 211.444347][ T7044] syz.4.1122: attempt to access beyond end of device [ 211.444347][ T7044] loop4: rw=524288, sector=720, nr_sectors = 128 limit=16 [ 211.514823][ T4697] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 211.537187][ T6787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.555615][ T7044] syz.4.1122: attempt to access beyond end of device [ 211.555615][ T7044] loop4: rw=524288, sector=13478624080, nr_sectors = 24 limit=16 [ 211.590574][ T6787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.623499][ T7044] syz.4.1122: attempt to access beyond end of device [ 211.623499][ T7044] loop4: rw=524288, sector=13478624032, nr_sectors = 48 limit=16 [ 211.661974][ T6787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.727378][ T7044] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -18 in[46, 4050] out[4055] [ 211.766033][ T6787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.823056][ T7044] erofs: (device loop4): z_erofs_readahead: readahead error at page 87 @ nid 36 [ 211.836826][ T6787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.847526][ T6787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.859690][ T6787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.870813][ T6787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.881039][ T6787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.891972][ T6787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.906657][ T6787] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 211.915162][ T7044] erofs: (device loop4): z_erofs_readahead: readahead error at page 86 @ nid 36 [ 211.976883][ T4697] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 211.988527][ T7044] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 212.044382][ T3656] Bluetooth: hci4: command 0x0406 tx timeout [ 212.098722][ T7044] erofs: (device loop4): z_erofs_readahead: readahead error at page 83 @ nid 36 [ 212.131937][ T7044] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 212.157365][ T4697] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 212.166350][ T7044] erofs: (device loop4): z_erofs_readahead: readahead error at page 82 @ nid 36 [ 212.182613][ T6787] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.205453][ T7044] erofs: (device loop4): z_erofs_readahead: readahead error at page 79 @ nid 36 [ 212.226004][ T6787] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.264217][ T7044] erofs: (device loop4): z_erofs_readahead: readahead error at page 78 @ nid 36 [ 212.275404][ T6787] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.304307][ T7044] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 212.328935][ T6787] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.354195][ T7044] erofs: (device loop4): z_erofs_readahead: readahead error at page 76 @ nid 36 [ 212.395191][ T7044] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 212.455567][ T7044] erofs: (device loop4): z_erofs_readahead: readahead error at page 75 @ nid 36 [ 212.559786][ T7044] erofs: (device loop4): z_erofs_readahead: readahead error at page 74 @ nid 36 [ 212.618741][ T7044] erofs: (device loop4): z_erofs_readahead: readahead error at page 72 @ nid 36 [ 212.652464][ T7044] erofs: (device loop4): z_erofs_readahead: readahead error at page 71 @ nid 36 [ 212.668916][ T3692] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.737577][ T3692] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 212.774491][ T7044] erofs: (device loop4): z_erofs_readahead: readahead error at page 70 @ nid 36 [ 212.783821][ T7044] erofs: (device loop4): z_erofs_readahead: readahead error at page 63 @ nid 36 [ 212.835086][ T4697] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.850988][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 212.868909][ T4697] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 212.891844][ T7044] erofs: (device loop4): z_erofs_readahead: readahead error at page 61 @ nid 36 [ 212.931474][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 212.984385][ T7044] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 213.019342][ T7044] erofs: (device loop4): z_erofs_readahead: readahead error at page 59 @ nid 36 [ 213.057310][ T7044] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 213.094446][ T7044] erofs: (device loop4): z_erofs_readahead: readahead error at page 58 @ nid 36 [ 213.115168][ T7044] erofs: (device loop4): z_erofs_readahead: readahead error at page 56 @ nid 36 [ 213.175112][ T7044] erofs: (device loop4): z_erofs_readahead: readahead error at page 54 @ nid 36 [ 213.177045][ T7124] loop2: detected capacity change from 0 to 128 [ 213.209821][ T7044] erofs: (device loop4): z_erofs_readahead: readahead error at page 50 @ nid 36 [ 213.227277][ T7124] befs: (loop2): No write support. Marking filesystem read-only [ 213.264213][ T7044] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 213.295819][ T7044] erofs: (device loop4): z_erofs_readahead: readahead error at page 47 @ nid 36 [ 213.332370][ T7124] befs: (loop2): invalid magic header [ 213.338943][ T7044] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 213.371034][ T7044] erofs: (device loop4): z_erofs_readahead: readahead error at page 46 @ nid 36 [ 213.392848][ T7044] erofs: (device loop4): z_erofs_readahead: readahead error at page 45 @ nid 36 [ 213.446600][ T7044] syz.4.1122: attempt to access beyond end of device [ 213.446600][ T7044] loop4: rw=524288, sector=32, nr_sectors = 64 limit=16 [ 213.495046][ T7044] syz.4.1122: attempt to access beyond end of device [ 213.495046][ T7044] loop4: rw=524288, sector=16, nr_sectors = 16 limit=16 [ 213.509403][ T7124] Zero length message leads to an empty skb [ 213.574257][ T7044] syz.4.1122: attempt to access beyond end of device [ 213.574257][ T7044] loop4: rw=524288, sector=14425508768, nr_sectors = 8 limit=16 [ 213.624755][ T7044] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -18 in[46, 4050] out[5297] [ 214.084660][ T7157] syzkaller0: tun_chr_ioctl cmd 2147767511 [ 214.688701][ T7190] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1175'. [ 214.726814][ T7194] sctp: [Deprecated]: syz.0.1172 (pid 7194) Use of int in maxseg socket option. [ 214.726814][ T7194] Use struct sctp_assoc_value instead [ 215.263116][ T7206] loop0: detected capacity change from 0 to 4096 [ 215.321436][ T7206] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 215.345838][ T7216] loop4: detected capacity change from 0 to 256 [ 215.431172][ T7206] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 216.340771][ T7248] loop0: detected capacity change from 0 to 512 [ 216.496590][ T7248] EXT4-fs error (device loop0): ext4_do_update_inode:5221: inode #3: comm syz.0.1196: corrupted inode contents [ 216.586395][ T7248] EXT4-fs error (device loop0): ext4_dirty_inode:6083: inode #3: comm syz.0.1196: mark_inode_dirty error [ 216.610871][ T7248] EXT4-fs error (device loop0): ext4_do_update_inode:5221: inode #3: comm syz.0.1196: corrupted inode contents [ 216.645033][ T7248] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #3: comm syz.0.1196: mark_inode_dirty error [ 216.663160][ T7248] Quota error (device loop0): write_blk: dquota write failed [ 216.678894][ T7248] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 216.690320][ T7248] EXT4-fs error (device loop0): ext4_acquire_dquot:6777: comm syz.0.1196: Failed to acquire dquot type 0 [ 216.743667][ T7262] loop3: detected capacity change from 0 to 2048 [ 216.759053][ T7248] EXT4-fs (loop0): 1 orphan inode deleted [ 216.774278][ T7248] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 216.794456][ T7248] ext4 filesystem being mounted at /275/file1 supports timestamps until 2038 (0x7fffffff) [ 216.807745][ T7262] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 216.820595][ T3692] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 216.871002][ T3692] EXT4-fs error (device loop0): ext4_release_dquot:6800: comm kworker/u4:5: Failed to release dquot type 1 [ 216.994077][ T3642] EXT4-fs (loop0): unmounting filesystem. [ 217.093766][ T7226] loop2: detected capacity change from 0 to 32768 [ 217.664388][ T3690] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 217.904262][ T3690] usb 4-1: Using ep0 maxpacket: 32 [ 217.984423][ T4104] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 218.024410][ T3690] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 218.064362][ T3690] usb 4-1: config 0 has no interface number 0 [ 218.070530][ T3690] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 218.103296][ T3690] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 218.114825][ T3690] usb 4-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 218.134214][ T3690] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.165441][ T3690] usb 4-1: config 0 descriptor?? [ 218.380459][ T7301] loop2: detected capacity change from 0 to 256 [ 218.400378][ T4104] usb 1-1: New USB device found, idVendor=2040, idProduct=9301, bcdDevice=e4.fb [ 218.428674][ T4104] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.453721][ T7301] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 218.467172][ T4104] usb 1-1: config 0 descriptor?? [ 218.554532][ T4104] dvb-usb: found a 'Hauppauge WinTV-NOVA-T usb2' in warm state. [ 218.583492][ T4104] dvb-usb: bulk message failed: -22 (3/0) [ 218.624410][ T4104] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 218.665135][ T4104] dvbdev: DVB: registering new adapter (Hauppauge WinTV-NOVA-T usb2) [ 218.701677][ T4104] usb 1-1: media controller created [ 218.709507][ T4104] dvb-usb: bulk message failed: -22 (5/0) [ 218.715728][ T7311] netlink: 'syz.1.1223': attribute type 29 has an invalid length. [ 218.723761][ T4104] dvb-usb: MAC address reading failed. [ 218.749615][ T4104] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 218.784737][ T7311] netlink: 'syz.1.1223': attribute type 29 has an invalid length. [ 218.816366][ T4104] dvb-usb: bulk message failed: -22 (6/0) [ 218.825462][ T7311] netlink: 'syz.1.1223': attribute type 29 has an invalid length. [ 218.836776][ T7311] netlink: 'syz.1.1223': attribute type 29 has an invalid length. [ 218.853199][ T4104] dvb-usb: bulk message failed: -22 (6/0) [ 218.871609][ T4104] dvb-usb: no frontend was attached by 'Hauppauge WinTV-NOVA-T usb2' [ 218.896480][ T3690] uclogic 0003:28BD:0094.0009: pen parameters not found [ 218.914336][ T3690] uclogic 0003:28BD:0094.0009: interface is invalid, ignoring [ 218.935534][ T4104] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input13 [ 218.978085][ T4104] dvb-usb: schedule remote query interval to 100 msecs. [ 219.013660][ T4104] dvb-usb: Hauppauge WinTV-NOVA-T usb2 successfully initialized and connected. [ 219.042994][ T4104] usb 1-1: USB disconnect, device number 9 [ 219.124253][ T3689] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 219.155879][ T4104] dvb-usb: Hauppauge WinTV-NOVA-T usb2 successfully deinitialized and disconnected. [ 219.207303][ T3690] usb 4-1: USB disconnect, device number 10 [ 219.267617][ T7321] ALSA: mixer_oss: invalid index 2133437386 [ 219.409936][ T3689] usb 3-1: Using ep0 maxpacket: 8 [ 219.553087][ T7315] loop4: detected capacity change from 0 to 32768 [ 219.564655][ T3689] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 219.609124][ T3689] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 219.635095][ T3689] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 219.655756][ T3689] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 219.672408][ T3689] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 219.685926][ T3689] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.005424][ T3689] usb 3-1: GET_CAPABILITIES returned 0 [ 220.011175][ T3689] usbtmc 3-1:16.0: can't read capabilities [ 220.216971][ T153] usb 3-1: USB disconnect, device number 8 [ 220.219694][ T7349] usb usb8: usbfs: process 7349 (syz.4.1237) did not claim interface 0 before use [ 220.641581][ T7363] loop4: detected capacity change from 0 to 512 [ 220.680049][ T7363] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 220.709593][ T7363] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2219: inode #15: comm syz.4.1248: corrupted in-inode xattr [ 220.736898][ T7363] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2816: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 220.768049][ T7363] EXT4-fs (loop4): 1 truncate cleaned up [ 220.804435][ T7363] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 220.916388][ T7371] bridge0: port 3(bond0) entered blocking state [ 220.923347][ T7371] bridge0: port 3(bond0) entered disabled state [ 220.961670][ T7371] device bond0 entered promiscuous mode [ 220.982668][ T7371] device bond_slave_0 entered promiscuous mode [ 220.986369][ T3640] EXT4-fs (loop4): unmounting filesystem. [ 220.992939][ T7371] device bond_slave_1 entered promiscuous mode [ 221.002336][ T7371] bridge0: port 3(bond0) entered blocking state [ 221.009345][ T7371] bridge0: port 3(bond0) entered forwarding state [ 221.281596][ T7380] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1254'. [ 221.341453][ T7380] device xfrm1 entered promiscuous mode [ 221.718627][ T7406] loop2: detected capacity change from 0 to 256 [ 221.764263][ T7406] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x0619d298, utbl_chksum : 0xe619d30d) [ 221.812668][ T7410] netlink: 47 bytes leftover after parsing attributes in process `syz.3.1268'. [ 222.267400][ T7432] loop2: detected capacity change from 0 to 512 [ 222.306624][ T7432] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 222.390354][ T7394] loop0: detected capacity change from 0 to 32768 [ 222.430953][ T7394] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.1261 (7394) [ 222.447897][ T7432] EXT4-fs (loop2): 1 truncate cleaned up [ 222.455438][ T7432] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 222.480631][ T7394] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 222.522016][ T7394] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 222.533365][ T7394] BTRFS info (device loop0): setting nodatacow, compression disabled [ 222.544329][ T7394] BTRFS info (device loop0): enabling auto defrag [ 222.553156][ T7394] BTRFS info (device loop0): max_inline at 0 [ 222.559903][ T7394] BTRFS info (device loop0): using free space tree [ 222.561803][ T7432] fscrypt (loop2, inode 18): Reserved bits set in encryption policy [ 222.704395][ T6787] EXT4-fs (loop2): unmounting filesystem. [ 222.869094][ T7394] BTRFS error (device loop0: state M): unrecognized mount option '' [ 222.922246][ T3642] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 222.934490][ T3690] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 223.337354][ T3690] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 223.359649][ T3690] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 223.382471][ T3690] usb 4-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 223.402889][ T3690] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.429803][ T3690] usb 4-1: config 0 descriptor?? [ 223.682292][ T7504] loop4: detected capacity change from 0 to 64 [ 223.729122][ T7504] hfs: bad catalog entry type 0 [ 223.750364][ T7508] program syz.1.1306 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 223.927651][ T7516] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1312'. [ 223.943294][ T7518] loop2: detected capacity change from 0 to 256 [ 223.953377][ T3690] lg-g15 0003:046D:C222.000A: unknown main item tag 0x1 [ 223.961556][ T7516] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1312'. [ 223.971877][ T3690] lg-g15 0003:046D:C222.000A: unbalanced delimiter at end of report description [ 224.005765][ T3690] lg-g15: probe of 0003:046D:C222.000A failed with error -22 [ 224.075876][ T7524] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1314'. [ 224.188503][ T5332] usb 4-1: USB disconnect, device number 11 [ 224.220481][ T26] audit: type=1326 audit(1724373011.271:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7533 comm="syz.2.1319" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4fc8979e79 code=0x0 [ 224.267090][ T7538] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1320'. [ 224.277647][ T7538] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1320'. [ 224.552639][ T7553] loop0: detected capacity change from 0 to 1024 [ 224.614323][ T22] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 224.654385][ T3689] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 224.763598][ T7560] loop0: detected capacity change from 0 to 8 [ 224.771870][ T26] audit: type=1326 audit(1724373011.821:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7557 comm="syz.3.1330" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3141379e79 code=0x0 [ 224.817989][ T7560] SQUASHFS error: lzo decompression failed, data probably corrupt [ 224.828336][ T7560] SQUASHFS error: Failed to read block 0x71: -5 [ 224.837839][ T7560] SQUASHFS error: lzo decompression failed, data probably corrupt [ 224.847890][ T7560] SQUASHFS error: Failed to read block 0x71: -5 [ 224.854254][ T22] usb 2-1: Using ep0 maxpacket: 8 [ 224.860320][ T26] audit: type=1800 audit(1724373011.911:23): pid=7560 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1331" name="file0" dev="overlay" ino=3 res=0 errno=0 [ 224.890398][ T3642] SQUASHFS error: Unable to read directory block [1d0:22] [ 224.901905][ T3642] SQUASHFS error: Unable to read directory block [1d0:22] [ 224.974489][ T22] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 224.983371][ T22] usb 2-1: config 179 has no interface number 0 [ 224.999178][ T22] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 225.013766][ T22] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 225.032834][ T22] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 225.077299][ T22] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 225.095858][ T3689] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 225.098495][ T22] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 225.113749][ T3689] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 225.128788][ T7571] program syz.0.1336 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 225.144224][ T22] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.164981][ T11] wlan0: Trigger new scan to find an IBSS to join [ 225.174756][ T7543] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 225.204729][ T3689] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 225.214866][ T46] ------------[ cut here ]------------ [ 225.221369][ T46] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0xffffffff with flags 0x40 [ 225.232838][ T46] WARNING: CPU: 0 PID: 46 at net/mac80211/rate.c:385 __rate_control_send_low+0x653/0x890 [ 225.243049][ T46] Modules linked in: [ 225.248518][ T46] CPU: 0 PID: 46 Comm: kworker/u4:3 Not tainted 6.1.106-syzkaller #0 [ 225.257359][ T46] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 225.267612][ T46] Workqueue: events_unbound cfg80211_wiphy_work [ 225.274080][ T46] RIP: 0010:__rate_control_send_low+0x653/0x890 [ 225.280685][ T46] Code: 48 8b 14 24 0f 85 db 01 00 00 8b 0a 48 c7 c7 20 ce 21 8c 48 8b 74 24 10 44 89 f2 44 8b 44 24 1c 44 8b 4c 24 0c e8 cd ca 2d f7 <0f> 0b e9 79 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c e3 f9 ff [ 225.303116][ T46] RSP: 0018:ffffc90000b773a0 EFLAGS: 00010246 [ 225.310306][ T46] RAX: 31790b96242a1200 RBX: 000000000000000c RCX: ffff888019290000 [ 225.319593][ T46] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 225.327818][ T46] RBP: ffff88807e4d8a28 R08: ffffffff8152940e R09: fffff5200016edd5 [ 225.337262][ T46] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000800 [ 225.347195][ T46] R13: 000000000000000c R14: 00000000ffffffff R15: dffffc0000000000 [ 225.356478][ T46] FS: 0000000000000000(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 225.366329][ T46] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 225.373233][ T46] CR2: 00007f74686456c0 CR3: 0000000064c25000 CR4: 00000000003506f0 [ 225.381463][ T46] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 225.390121][ T46] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 225.398348][ T46] Call Trace: [ 225.401658][ T46] [ 225.404658][ T46] ? __warn+0x15a/0x520 [ 225.408851][ T46] ? __rate_control_send_low+0x653/0x890 [ 225.414886][ T46] ? report_bug+0x2af/0x500 [ 225.419952][ T46] ? __rate_control_send_low+0x653/0x890 [ 225.425865][ T46] ? handle_bug+0x3d/0x70 [ 225.430223][ T46] ? exc_invalid_op+0x16/0x40 [ 225.435019][ T46] ? asm_exc_invalid_op+0x16/0x20 [ 225.441998][ T46] ? __warn_printk+0x28e/0x350 [ 225.446932][ T46] ? __rate_control_send_low+0x653/0x890 [ 225.452689][ T46] ? ieee80211_scan_state_send_probe+0x38b/0x920 [ 225.459453][ T46] rate_control_send_low+0x1a8/0x770 [ 225.464827][ T46] rate_control_get_rate+0x20a/0x5d0 [ 225.470160][ T46] ieee80211_tx_h_rate_ctrl+0xc62/0x19e0 [ 225.477206][ T46] ? ieee80211_tx_h_select_key+0x16a0/0x16a0 [ 225.483509][ T46] ? ieee80211_queue_skb+0xd0/0x2300 [ 225.489356][ T46] invoke_tx_handlers_late+0xb2/0x1910 [ 225.495027][ T46] ? ieee80211_tx_h_select_key+0x1177/0x16a0 [ 225.501058][ T46] ? invoke_tx_handlers_early+0xa0d/0x1d30 [ 225.507069][ T46] ieee80211_tx+0x2df/0x460 [ 225.511601][ T46] ? ieee80211_skb_resize+0x640/0x640 [ 225.517065][ T46] ? ieee80211_xmit+0x307/0x3e0 [ 225.521952][ T46] ? __ieee80211_tx_skb_tid_band+0x49a/0x610 [ 225.528191][ T46] __ieee80211_tx_skb_tid_band+0x4de/0x610 [ 225.535111][ T46] ? ieee80211_scan_state_send_probe+0x4b6/0x920 [ 225.541657][ T46] ieee80211_scan_state_send_probe+0x575/0x920 [ 225.548362][ T46] ieee80211_scan_work+0x612/0x1d70 [ 225.553623][ T46] ? ieee80211_can_scan+0x200/0x200 [ 225.559618][ T46] ? do_raw_spin_unlock+0x137/0x8a0 [ 225.565062][ T46] ? _raw_spin_unlock_irq+0x1f/0x40 [ 225.570553][ T46] ? lockdep_hardirqs_on+0x94/0x130 [ 225.576266][ T46] cfg80211_wiphy_work+0x21a/0x250 [ 225.582431][ T46] ? process_one_work+0x7a9/0x11d0 [ 225.588141][ T46] process_one_work+0x8a9/0x11d0 [ 225.593130][ T46] ? worker_detach_from_pool+0x260/0x260 [ 225.598938][ T46] ? _raw_spin_lock_irqsave+0x120/0x120 [ 225.604560][ T46] ? kthread_data+0x4e/0xc0 [ 225.609203][ T46] ? wq_worker_running+0x97/0x190 [ 225.614393][ T46] worker_thread+0xa47/0x1200 [ 225.619127][ T46] kthread+0x28d/0x320 [ 225.623224][ T46] ? worker_clr_flags+0x190/0x190 [ 225.628331][ T46] ? kthread_blkcg+0xd0/0xd0 [ 225.632951][ T46] ret_from_fork+0x1f/0x30 [ 225.634361][ T22] usb 2-1: USB disconnect, device number 7 [ 225.638146][ T46] [ 225.647030][ T46] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 225.654231][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 225.654273][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 225.670903][ T46] CPU: 0 PID: 46 Comm: kworker/u4:3 Not tainted 6.1.106-syzkaller #0 [ 225.679016][ T46] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 225.689093][ T46] Workqueue: events_unbound cfg80211_wiphy_work [ 225.695369][ T46] Call Trace: [ 225.698652][ T46] [ 225.701595][ T46] dump_stack_lvl+0x1e3/0x2cb [ 225.706299][ T46] ? nf_tcp_handle_invalid+0x642/0x642 [ 225.711787][ T46] ? panic+0x764/0x764 [ 225.715930][ T46] ? 0xffffffffa0003b40 [ 225.720121][ T46] ? vscnprintf+0x59/0x80 [ 225.724480][ T46] panic+0x318/0x764 [ 225.728390][ T46] ? __warn+0x169/0x520 [ 225.732566][ T46] ? memcpy_page_flushcache+0xfc/0xfc [ 225.738062][ T46] ? ret_from_fork+0x1f/0x30 [ 225.742720][ T46] __warn+0x348/0x520 [ 225.746732][ T46] ? __rate_control_send_low+0x653/0x890 [ 225.752412][ T46] report_bug+0x2af/0x500 [ 225.757307][ T46] ? __rate_control_send_low+0x653/0x890 [ 225.762970][ T46] handle_bug+0x3d/0x70 [ 225.767672][ T46] exc_invalid_op+0x16/0x40 [ 225.772195][ T46] asm_exc_invalid_op+0x16/0x20 [ 225.777061][ T46] RIP: 0010:__rate_control_send_low+0x653/0x890 [ 225.783459][ T46] Code: 48 8b 14 24 0f 85 db 01 00 00 8b 0a 48 c7 c7 20 ce 21 8c 48 8b 74 24 10 44 89 f2 44 8b 44 24 1c 44 8b 4c 24 0c e8 cd ca 2d f7 <0f> 0b e9 79 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c e3 f9 ff [ 225.803518][ T46] RSP: 0018:ffffc90000b773a0 EFLAGS: 00010246 [ 225.809614][ T46] RAX: 31790b96242a1200 RBX: 000000000000000c RCX: ffff888019290000 [ 225.817608][ T46] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 225.825613][ T46] RBP: ffff88807e4d8a28 R08: ffffffff8152940e R09: fffff5200016edd5 [ 225.833617][ T46] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000800 [ 225.841617][ T46] R13: 000000000000000c R14: 00000000ffffffff R15: dffffc0000000000 [ 225.849739][ T46] ? __warn_printk+0x28e/0x350 [ 225.854547][ T46] ? ieee80211_scan_state_send_probe+0x38b/0x920 [ 225.860919][ T46] rate_control_send_low+0x1a8/0x770 [ 225.866233][ T46] rate_control_get_rate+0x20a/0x5d0 [ 225.871552][ T46] ieee80211_tx_h_rate_ctrl+0xc62/0x19e0 [ 225.877231][ T46] ? ieee80211_tx_h_select_key+0x16a0/0x16a0 [ 225.883243][ T46] ? ieee80211_queue_skb+0xd0/0x2300 [ 225.888553][ T46] invoke_tx_handlers_late+0xb2/0x1910 [ 225.894037][ T46] ? ieee80211_tx_h_select_key+0x1177/0x16a0 [ 225.900062][ T46] ? invoke_tx_handlers_early+0xa0d/0x1d30 [ 225.905910][ T46] ieee80211_tx+0x2df/0x460 [ 225.910438][ T46] ? ieee80211_skb_resize+0x640/0x640 [ 225.915865][ T46] ? ieee80211_xmit+0x307/0x3e0 [ 225.920755][ T46] ? __ieee80211_tx_skb_tid_band+0x49a/0x610 [ 225.926773][ T46] __ieee80211_tx_skb_tid_band+0x4de/0x610 [ 225.932698][ T46] ? ieee80211_scan_state_send_probe+0x4b6/0x920 [ 225.939035][ T46] ieee80211_scan_state_send_probe+0x575/0x920 [ 225.945219][ T46] ieee80211_scan_work+0x612/0x1d70 [ 225.950436][ T46] ? ieee80211_can_scan+0x200/0x200 [ 225.955638][ T46] ? do_raw_spin_unlock+0x137/0x8a0 [ 225.960844][ T46] ? _raw_spin_unlock_irq+0x1f/0x40 [ 225.966053][ T46] ? lockdep_hardirqs_on+0x94/0x130 [ 225.971263][ T46] cfg80211_wiphy_work+0x21a/0x250 [ 225.976393][ T46] ? process_one_work+0x7a9/0x11d0 [ 225.981595][ T46] process_one_work+0x8a9/0x11d0 [ 225.986632][ T46] ? worker_detach_from_pool+0x260/0x260 [ 225.992753][ T46] ? _raw_spin_lock_irqsave+0x120/0x120 [ 225.998316][ T46] ? kthread_data+0x4e/0xc0 [ 226.002837][ T46] ? wq_worker_running+0x97/0x190 [ 226.007872][ T46] worker_thread+0xa47/0x1200 [ 226.012706][ T46] kthread+0x28d/0x320 [ 226.016868][ T46] ? worker_clr_flags+0x190/0x190 [ 226.022010][ T46] ? kthread_blkcg+0xd0/0xd0 [ 226.026595][ T46] ret_from_fork+0x1f/0x30 [ 226.031118][ T46] [ 226.034536][ T46] Kernel Offset: disabled [ 226.039571][ T46] Rebooting in 86400 seconds..