last executing test programs: 15.046340885s ago: executing program 2 (id=559): syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x3200c00, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x3, 0xa73, &(0x7f0000003cc0)="$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") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) creat(0x0, 0x0) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x1) creat(0x0, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x14507e, 0x0) fstat(0xffffffffffffffff, 0x0) quotactl$Q_GETQUOTA(0x0, 0x0, 0x0, 0x0) lchown(&(0x7f0000000040)='./file0\x00', 0x0, 0xee00) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r1, 0x80086e8a, 0x0) r2 = syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000480)={[{@nodiscard}, {}, {@acl}, {@alloc_mode_reuse}, {@inline_xattr}, {@disable_roll_forward}, {@background_gc_on}, {@nouser_xattr}, {@noflush_merge}, {@user_xattr}, {@fsync_mode_strict}, {@adaptive_mode}, {@jqfmt_vfsold}, {@noinline_dentry}]}, 0x1, 0x5505, &(0x7f0000002480)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fallocate(r3, 0x0, 0x0, 0x20000) preadv2(r2, 0x0, 0x0, 0x561f304f, 0x0, 0x0) 13.16095106s ago: executing program 2 (id=568): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000580)='./file0\x00', 0x20108c0, &(0x7f0000002ac0)=ANY=[@ANYRES8=0x0], 0xfe, 0x61e6, &(0x7f0000002b00)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) fdatasync(r0) 11.554907622s ago: executing program 2 (id=576): r0 = syz_usb_connect(0x0, 0x5a, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000060f94d100d05020027230102030109024840020000000009047d04031d5abf0009050400005539000009050b00000000000009050200000005000009047d01013481af0009a00e00230000690009047dbe"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0x4018480c, &(0x7f00000000c0)={0x2}) ioctl$HIDIOCSREPORT(r1, 0x400c4808, &(0x7f0000000000)={0x3, 0x0, 0xc9e5}) syz_usb_connect(0x0, 0x2d, &(0x7f0000001600)=ANY=[@ANYBLOB="12010000ec31f8104c1302007eec0102030109021b00010000000009", @ANYRESHEX], 0x0) syz_open_dev$evdev(&(0x7f0000000100), 0x4000000, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYRES16], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x22, 0x9, {[@global=@item_4={0x3, 0x1, 0x0, "4a2028fc"}, @global=@item_012={0x0, 0x1, 0xa}, @local=@item_012={0x2, 0x2, 0x9, "26ef"}]}}, 0x0}, 0x0) r3 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGPHYS(r3, 0x80404812, &(0x7f0000000380)) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$HIDIOCGPHYS(r4, 0x80404812, &(0x7f0000000240)) ioctl$EVIOCGKEYCODE_V2(r4, 0x80284504, &(0x7f0000000140)=""/195) 6.115919958s ago: executing program 0 (id=608): socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0}, 0x10) prlimit64(0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x44) r3 = syz_open_dev$sndpcmp(&(0x7f00000005c0), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r3, 0x4141, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.934289035s ago: executing program 2 (id=614): r0 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e22, @multicast2}, 0x10) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000300)=0x20000, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 4.772295278s ago: executing program 0 (id=616): syz_mount_image$xfs(&(0x7f0000009800), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000100)={[{@pqnoenforce}, {@noquota}, {@usrquota}, {@pqnoenforce}, {@ikeep}, {@discard}, {@noikeep}]}, 0x1, 0x9926, &(0x7f000001ca40)="$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") sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x7, &(0x7f0000000040)=@framed={{}, [@jmp={0x6, 0x0, 0x4, 0x0, 0x0, 0x2}, @alu, @jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}]}, &(0x7f0000000180)='GPL\x00'}, 0x90) socket(0x10, 0x0, 0x0) sendto(0xffffffffffffffff, &(0x7f0000000740)="120000001200e7", 0x7, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000007c0)={'veth1_to_hsr\x00'}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r3, 0x401c5820, &(0x7f0000000080)={@desc={0xd32780, 0x0, @desc2}}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0xc54, &(0x7f0000000180)=ANY=[@ANYBLOB='flush,allow_utime=00000000000000000005614,nonumtail=0,shortname=lower,utv8=1,nonumtail=0,uni_xlate=1,dos1xfloppy,check=relaxed,shortname=winnt,rodir,utf8=0,uni_xlate=1,un0,usefree,nfs,\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0xf5, 0x2f5, &(0x7f0000002300)="$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") syz_emit_ethernet(0xa7, &(0x7f0000000a00)=ANY=[], 0x0) r4 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r4, 0x0, 0x2, &(0x7f00000004c0)="dd", 0x1) setsockopt$EBT_SO_SET_COUNTERS(r4, 0x0, 0x81, &(0x7f0000000280)={'nat\x00', 0x0, 0x0, 0x0, [0x0, 0x55, 0x0, 0x0, 0x8, 0x2], 0x3, &(0x7f0000000040)=[{}], 0x0, [{}, {}, {}]}, 0xa8) 4.722367913s ago: executing program 2 (id=618): prlimit64(0x0, 0x6, &(0x7f0000000140), 0x0) syz_clone3(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000400)={'ip6_vti0\x00', &(0x7f0000000380)={'ip6tnl0\x00', 0x0, 0x4, 0x27, 0x7, 0x7, 0x6f, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @loopback, 0x1, 0x700, 0xfffffff2, 0x4}}) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000440)={&(0x7f0000000580)={0x94, r1, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7ff}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x48, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x40}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3ff}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x28, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x90}, 0x84) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) io_setup(0x4, &(0x7f0000000040)=0x0) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') io_submit(r4, 0x1, &(0x7f0000000180)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r5, 0x0}]) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x1001020, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCADDRT(r6, 0x8918, &(0x7f0000000100)={0x0, {0x2, 0x0, @remote}, {0x2, 0x0, @loopback=0x7f000002}, {0x2, 0x0, @dev}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000240)='kfree\x00', r3}, 0x10) r7 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$KDDELIO(r7, 0x4b35, 0x8000000000000001) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x0) r8 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) r9 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSKBLED(r9, 0x4b65, 0x6) 4.282077579s ago: executing program 3 (id=626): socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0}, 0x10) prlimit64(0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x44) r3 = syz_open_dev$sndpcmp(&(0x7f00000005c0), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r3, 0x4141, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.082858427s ago: executing program 3 (id=629): socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6_sctp(0xa, 0x1, 0x84) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x6, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1802000020a000000000000000000000850000001700000095"], &(0x7f0000000140)='syzkaller\x00', 0x1, 0x98, &(0x7f0000000000)=""/152}, 0x80) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000040)={0x34, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r2}, @typed={0x8, 0x0, 0x0, 0x0, @fd}, @nested={0x14, 0x2b, 0x0, 0x1, [@typed={0x8, 0x3, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x1, 0x0, 0x0, @fd=r2}]}]}, 0x34}], 0x1}, 0x0) 3.023946422s ago: executing program 2 (id=633): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x4}, 0xe) shutdown(r0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009c9abc0825105f0029fe0102030109021200caa70000000904"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x0, 0x3, 0x0, &(0x7f0000000000)='syzkaller\x00'}, 0x90) r1 = syz_open_dev$dmmidi(&(0x7f0000000300), 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r1, 0x40045702, &(0x7f0000000000)) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0305710, &(0x7f00000000c0)={0x1, 0x48a6, 0x0, 0x0, 0x1}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$inet6(0xa, 0x80002, 0x88) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=@base={0x11, 0x4, 0x4, 0x3}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000280)={r4, &(0x7f0000000240), 0x20000000, 0x2}, 0x20) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) ioctl$SIOCGSTAMPNS(r3, 0x8907, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r5 = syz_clone(0x0, &(0x7f0000000100)="664079b4c7f555417712473e8a1b2d822127b8b9499ff71cbbd6434cce3da111", 0x20, &(0x7f0000000140), &(0x7f0000000180), 0x0) capset(&(0x7f00000001c0)={0x19980330, r5}, &(0x7f0000000240)={0x7, 0x5, 0x80, 0x1c, 0x81, 0xfff}) sendmsg$nl_xfrm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000023c0)=ANY=[@ANYBLOB="580100001a00010000000000000000007f00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe800000000000000000000000000000000000000000000020010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000065001400636d6163286165732900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c80000000000000009647cfcb920c1cb091b151c49125848fd53c296569f79c1f5000000"], 0x158}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000080000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000100000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r6}, 0x10) statx(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r7 = syz_open_dev$evdev(&(0x7f0000000200), 0x4, 0x0) ioctl$EVIOCSKEYCODE_V2(r7, 0x40284504, &(0x7f0000000040)={0x0, 0x4, 0xd, 0x0, "d57f8080fc2b719aeafe679ea1376f83f99dfa2c00ff00"}) 2.943579958s ago: executing program 1 (id=634): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000140000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000001900000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 2.906300502s ago: executing program 3 (id=635): syz_emit_ethernet(0x56, &(0x7f0000000500)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x20, 0x6, 0x0, @local, @empty, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0xd0, 0x0, 0x0, 0x0, {[@sack={0x5, 0xa, [0x0, 0x0]}]}}}}}}}}, 0x0) 2.818121178s ago: executing program 1 (id=636): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x80000000086) 2.785236791s ago: executing program 3 (id=637): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x2f, &(0x7f0000000000), 0x4) 2.750718174s ago: executing program 1 (id=638): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x10, 0x4, 0x8, 0x7, 0x0, 0x1}, 0x48) socket$key(0xf, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000170000000000000000000000850000006d0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000002c0)='consume_skb\x00', r1}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000097c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000200)="b9e403c6631e39495aa05dc7cf1c", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$SIOCSIFHWADDR(r2, 0x89f0, &(0x7f0000000900)={'bridge0\x00', @random='\x00\x00\x00 \x00'}) 2.605539546s ago: executing program 3 (id=640): socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0}, 0x10) prlimit64(0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x44) r3 = syz_open_dev$sndpcmp(&(0x7f00000005c0), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r3, 0x4141, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.55524288s ago: executing program 1 (id=641): r0 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e22, @multicast2}, 0x10) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000300)=0x20000, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 2.32002598s ago: executing program 1 (id=642): syz_mount_image$jfs(&(0x7f0000000100), &(0x7f0000000040)='./file1\x00', 0x1010006, &(0x7f0000001a80)={[{@quota}, {@discard_size={'discard', 0x3d, 0xaff9}}, {@iocharset={'iocharset', 0x3d, 'none'}}, {@iocharset={'iocharset', 0x3d, 'macgreek'}}, {@iocharset={'iocharset', 0x3d, 'cp775'}}, {}, {@nodiscard}, {@noquota}, {@uid={'uid', 0x3d, 0xee01}}]}, 0x24, 0x61b6, &(0x7f00000075c0)="$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") chdir(&(0x7f00000001c0)='./file0\x00') link(&(0x7f0000001240)='./file0\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000002ec0)=""/4092, 0xffc) 958.164371ms ago: executing program 0 (id=643): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x1b}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) 956.699021ms ago: executing program 3 (id=644): fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={0x0, 0x0, 0x37}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x48) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x3000001, &(0x7f00000002c0)={[], [{@obj_type={'obj_type', 0x3d, 'T\xaf\x85'}}, {@pcr={'pcr', 0x3d, 0x3e}}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@subj_role={'subj_role', 0x3d, 'ext4\x00'}}, {@appraise}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}, 0x1, 0x539, &(0x7f0000001440)="$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") r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fd7000/0x18000)=nil, &(0x7f0000000240)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000003680)={{0x0, 0x0, 0xfffffd91, {0x0, 0xf000}}, "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", "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"}) ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000001600)={{0x0, 0x0, 0x80}}) 818.448743ms ago: executing program 4 (id=645): r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x0) 688.752453ms ago: executing program 4 (id=646): socketpair$unix(0x1, 0x0, 0x0, 0xfffffffffffffffc) 542.919515ms ago: executing program 4 (id=647): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000140000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000001900000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 536.592206ms ago: executing program 4 (id=648): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.dequeue\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000d40)={0x0, 0x2904c, 0x10, 0x10003, '\x00', [{}, {0xffffffff}]}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x0, '\x00', 0x0, 0x0, 0x0, 0xfffffffc}, 0x48) r1 = socket$packet(0x11, 0x3, 0x300) r2 = dup(r1) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$int_in(r3, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f00000007c0)) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000000140)=0x200000000) r5 = dup(r4) r6 = fcntl$dupfd(r3, 0x0, r4) preadv(r6, &(0x7f00000012c0)=[{&(0x7f0000000280)=""/4096, 0x48}], 0x1, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(r6, 0x4008af30, &(0x7f0000000080)={0x0, r5}) r7 = fcntl$dupfd(r6, 0x0, r1) preadv(r7, &(0x7f00000012c0)=[{&(0x7f0000000280)=""/4096, 0x1000}], 0x1, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(r7, 0x4008af30, &(0x7f0000000080)={0x0, r2}) ioctl$VHOST_RESET_OWNER(r7, 0xaf02, 0x0) 503.976129ms ago: executing program 0 (id=649): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000180), 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000180)={'wg0\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x44, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r3}, @WGDEVICE_A_PEERS={0x28, 0x8, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x8002, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}]}]}]}, 0x44}}, 0x0) 456.049652ms ago: executing program 0 (id=650): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x2f, &(0x7f0000000000), 0x4) 407.287376ms ago: executing program 0 (id=651): bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x10, 0x8, 0x4, 0x1000, 0x0, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x80000000, 0x4, 0x5}, 0x48) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) timer_create(0x2, &(0x7f00000006c0)={0x0, 0x12, 0x0, @thr={&(0x7f0000000380)="a1961d2c7b0f2aa3", &(0x7f00000005c0)="a6ae9a7dc7ed2171bc81649516ba64b1f1a836c5b827e47b3d65e0eaf30aa56599687e897bee5f2cded735665e938d7a29c0416817108b00dfd55b9dfefad7871c35c285b218de81bf748b1ddc7a268ea70644951d82cc8f13034f479c07998c06dc09fcee0a63253d83bc3a15a325e17807c2543b2ec6e35326b00e0c0dc1c0b0c99d5ef0e1c02e5b6108d5f8e0e7c94b5193a593904a9ff9667b56708a52e8cd46f714d4aa1b591f363fcc53136ed97909a6f89aa2d44bfe1b4bee8731f3e7644136457b25b8fc77602f787188aa3fe9c0e73efd1e6857e86d"}}, &(0x7f0000000540)=0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) unshare(0x22020000) mkdir(&(0x7f0000000000)='./file0\x00', 0x129) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='rpc_pipefs\x00', 0x0, 0x0) unshare(0x40020000) rmdir(&(0x7f0000000740)='./file0\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x94}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x75) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='cgroup2\x00', 0x4002, 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000440)='./file0\x00') getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000a000/0x18000)=nil, &(0x7f0000000c80)=[@text64={0x40, &(0x7f0000000c00)="c4417e6fe3400f790bb9410800000f32b9801600c00f3235004000000f300f01cf66baf80c450f01cbef66bafc0ced440f0dc666b834000f00d066baa100ed", 0x3f}], 0x1, 0x18, &(0x7f0000000580)=[@flags={0x3, 0x200}, @cstype0={0x4, 0x1}], 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000780)={0x0, 0x0, 0xd000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockopt$IP_VS_SO_GET_VERSION(0xffffffffffffffff, 0x0, 0x480, 0x0, 0x0) timer_gettime(r2, &(0x7f0000000700)={{0x0, 0x0}}) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="baf80c66b808aacc8466efbafc0cb00dee6428f0660fc20b6fd84600f30f017a0066b9800100000f320f38f03f0fc77c86660f38825b260f20c06635020000000f22c0", 0x43}], 0x1, 0x20, &(0x7f0000000580), 0x0) mount$9p_fd(0x0, 0xffffffffffffffff, &(0x7f00000003c0), 0x80040, &(0x7f0000000cc0)=ANY=[@ANYRES8=r1, @ANYRESHEX, @ANYRESHEX=r1, @ANYRESOCT=0x0, @ANYBLOB="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", @ANYRES8=r4]) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x55}]}, &(0x7f0000000000)='syzkaller\x00'}, 0x80) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000200)={0x2, 0x1000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 340.744932ms ago: executing program 4 (id=652): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x10, 0x4, 0x8, 0x7, 0x0, 0x1}, 0x48) socket$key(0xf, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000170000000000000000000000850000006d0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000002c0)='consume_skb\x00', r1}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000097c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000200)="b9e403c6631e39495aa05dc7cf1c", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$SIOCSIFHWADDR(r2, 0x89f0, &(0x7f0000000900)={'bridge0\x00', @random='\x00\x00\x00 \x00'}) 91.380182ms ago: executing program 4 (id=653): r0 = fsopen(&(0x7f00000000c0)='gadgetfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) close(r0) 0s ago: executing program 1 (id=654): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={@multicast2, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000d80)={'ip6erspan0\x00', {0x2, 0x4e22, @local}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000002c0)={'syztnl2\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f00000003c0)=[0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xc2, &(0x7f0000000440), 0x0, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0x400009f, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000880)=@bpf_lsm={0x1d, 0x1, &(0x7f0000000680)=@raw=[@alu={0x7, 0x0, 0x3, 0x8, 0xa, 0xffffffffffffffe0, 0x1}], &(0x7f00000006c0)='GPL\x00', 0x7fff, 0x33, &(0x7f0000000700)=""/51, 0x40f00, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0xa}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[0x1], &(0x7f0000000800)=[{}]}, 0x90) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) r1 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$KDSETKEYCODE(r1, 0x5409, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f00000009c0)=@generic={0x0, 0x0, 0x8}, 0x18) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000a40)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1}, 0x48) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000c40)={[{0x2d, 'freezer'}]}, 0x9) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@ipv6_getroute={0x24, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_UID={0x8, 0x19, 0xffffffffffffffff}]}, 0x24}}, 0x0) io_uring_setup(0x253d, &(0x7f0000000180)) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000d00)={0x0, 0x10000, 0x10}, &(0x7f0000000d40)=0xc) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000180)) write$dsp(r4, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) kernel console output (not intermixed with test programs): in network mode [ 94.338203][ T4265] tipc: Node identity e0000001, cluster identity 4711 [ 94.345062][ T4265] tipc: Enabling of bearer rejected, failed to enable media [ 94.373699][ T4260] FAT-fs (loop3): Directory bread(block 66) failed [ 94.400799][ T4260] FAT-fs (loop3): Directory bread(block 67) failed [ 94.423104][ T4260] FAT-fs (loop3): Directory bread(block 68) failed [ 94.445083][ T4260] FAT-fs (loop3): Directory bread(block 69) failed [ 94.465225][ T4260] FAT-fs (loop3): Directory bread(block 70) failed [ 94.473257][ T4260] FAT-fs (loop3): Directory bread(block 71) failed [ 94.496327][ T3552] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.506800][ T4260] FAT-fs (loop3): Directory bread(block 72) failed [ 94.526748][ T3552] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 94.529055][ T4260] FAT-fs (loop3): Directory bread(block 73) failed [ 94.596210][ T3552] usb 3-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 94.654212][ T3552] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.695652][ T4273] loop0: detected capacity change from 0 to 256 [ 94.705593][ T3552] usb 3-1: config 0 descriptor?? [ 94.746336][ T3587] attempt to access beyond end of device [ 94.746336][ T3587] loop3: rw=1, want=1288, limit=256 [ 94.757492][ T3587] attempt to access beyond end of device [ 94.757492][ T3587] loop3: rw=1, want=1352, limit=256 [ 94.768859][ T3587] attempt to access beyond end of device [ 94.768859][ T3587] loop3: rw=1, want=1356, limit=256 [ 94.779940][ T3587] Buffer I/O error on dev loop3, logical block 338, lost async page write [ 94.853134][ T4273] FAT-fs (loop0): Directory bread(block 64) failed [ 94.880842][ T4273] FAT-fs (loop0): Directory bread(block 65) failed [ 94.913200][ T4273] FAT-fs (loop0): Directory bread(block 66) failed [ 94.940595][ T4273] FAT-fs (loop0): Directory bread(block 67) failed [ 94.968922][ T4273] FAT-fs (loop0): Directory bread(block 68) failed [ 94.985151][ T4260] attempt to access beyond end of device [ 94.985151][ T4260] loop3: rw=2049, want=1232, limit=256 [ 94.985825][ T4273] FAT-fs (loop0): Directory bread(block 69) failed [ 95.011069][ T4260] attempt to access beyond end of device [ 95.011069][ T4260] loop3: rw=2049, want=1352, limit=256 [ 95.022420][ T4273] FAT-fs (loop0): Directory bread(block 70) failed [ 95.032935][ T4273] FAT-fs (loop0): Directory bread(block 71) failed [ 95.039828][ T4273] FAT-fs (loop0): Directory bread(block 72) failed [ 95.047366][ T4273] FAT-fs (loop0): Directory bread(block 73) failed [ 95.056078][ T4260] attempt to access beyond end of device [ 95.056078][ T4260] loop3: rw=2049, want=1356, limit=256 [ 95.073569][ T4260] Buffer I/O error on dev loop3, logical block 338, lost async page write [ 95.141303][ T4277] kvm: emulating exchange as write [ 95.451447][ T4283] attempt to access beyond end of device [ 95.451447][ T4283] loop0: rw=524288, want=1164, limit=256 [ 95.463087][ T4283] attempt to access beyond end of device [ 95.463087][ T4283] loop0: rw=0, want=1164, limit=256 [ 95.480835][ T26] kauditd_printk_skb: 2 callbacks suppressed [ 95.481151][ T26] audit: type=1800 audit(1721422301.443:5): pid=4283 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.192" name="file0" dev="loop0" ino=1048597 res=0 errno=0 [ 95.814773][ T3552] hid-led 0003:1D34:000A.0003: hidraw0: USB HID v0.00 Device [HID 1d34:000a] on usb-dummy_hcd.2-1/input0 [ 95.871016][ T4286] loop3: detected capacity change from 0 to 512 [ 95.890828][ T3552] hid-led 0003:1D34:000A.0003: Dream Cheeky Webmail Notifier initialized [ 96.050241][ T4286] EXT4-fs (loop3): 1 truncate cleaned up [ 96.078681][ T4286] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 96.361031][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 96.371496][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 96.379428][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 96.970726][ T26] audit: type=1326 audit(1721422302.943:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4232 comm="syz.2.178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb20ed8db59 code=0x7ffc0000 [ 97.000041][ T1066] kernel write not supported for file /vcsu (pid: 1066 comm: kworker/0:2) [ 97.239341][ T26] audit: type=1326 audit(1721422302.983:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4232 comm="syz.2.178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb20ed8db59 code=0x7ffc0000 [ 98.120951][ T4317] loop4: detected capacity change from 0 to 64 [ 98.267080][ T23] usb 3-1: USB disconnect, device number 5 [ 98.290149][ T4322] loop0: detected capacity change from 0 to 256 [ 98.360874][ T4320] loop3: detected capacity change from 0 to 64 [ 98.438500][ T4320] hfs: unable to change iocharset [ 98.479238][ T4322] FAT-fs (loop0): Directory bread(block 64) failed [ 98.484313][ T4320] hfs: unable to parse mount options [ 98.506060][ T4322] FAT-fs (loop0): Directory bread(block 65) failed [ 98.512700][ T4322] FAT-fs (loop0): Directory bread(block 66) failed [ 98.547017][ T4322] FAT-fs (loop0): Directory bread(block 67) failed [ 98.553865][ T4322] FAT-fs (loop0): Directory bread(block 68) failed [ 98.591608][ T4322] FAT-fs (loop0): Directory bread(block 69) failed [ 98.606148][ T4322] FAT-fs (loop0): Directory bread(block 70) failed [ 98.636018][ T4322] FAT-fs (loop0): Directory bread(block 71) failed [ 98.642635][ T4322] FAT-fs (loop0): Directory bread(block 72) failed [ 98.689016][ T4322] FAT-fs (loop0): Directory bread(block 73) failed [ 99.865896][ C1] sched: RT throttling activated [ 100.574202][ T4337] netlink: 16 bytes leftover after parsing attributes in process `syz.1.211'. [ 100.746028][ T4324] loop2: detected capacity change from 0 to 32768 [ 101.051891][ T4344] syz.3.213 uses obsolete (PF_INET,SOCK_PACKET) [ 102.002272][ T4358] tipc: Enabling of bearer rejected, failed to enable media [ 104.160301][ T4364] loop0: detected capacity change from 0 to 256 [ 104.175122][ T4366] loop3: detected capacity change from 0 to 256 [ 104.300918][ T4371] loop1: detected capacity change from 0 to 64 [ 104.312299][ T4372] loop2: detected capacity change from 0 to 256 [ 104.359832][ T4371] hfs: unable to change iocharset [ 104.364903][ T4371] hfs: unable to parse mount options [ 104.418612][ T4372] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 104.435502][ T4366] FAT-fs (loop3): Directory bread(block 64) failed [ 104.460274][ T4366] FAT-fs (loop3): Directory bread(block 65) failed [ 104.467268][ T4366] FAT-fs (loop3): Directory bread(block 66) failed [ 104.474709][ T4366] FAT-fs (loop3): Directory bread(block 67) failed [ 104.490574][ T4366] FAT-fs (loop3): Directory bread(block 68) failed [ 104.516149][ T4366] FAT-fs (loop3): Directory bread(block 69) failed [ 104.522889][ T26] audit: type=1800 audit(1721422310.493:8): pid=4372 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.225" name="file1" dev="loop2" ino=1048599 res=0 errno=0 [ 104.527724][ T4366] FAT-fs (loop3): Directory bread(block 70) failed [ 104.555742][ T4366] FAT-fs (loop3): Directory bread(block 71) failed [ 104.562949][ T4366] FAT-fs (loop3): Directory bread(block 72) failed [ 104.569877][ T4366] FAT-fs (loop3): Directory bread(block 73) failed [ 104.912812][ T4378] attempt to access beyond end of device [ 104.912812][ T4378] loop2: rw=0, want=304, limit=256 [ 106.438354][ T4386] loop1: detected capacity change from 0 to 64 [ 107.639625][ T4407] loop0: detected capacity change from 0 to 256 [ 107.786564][ T4410] tipc: Started in network mode [ 107.791660][ T4410] tipc: Node identity e0000001, cluster identity 4711 [ 107.799521][ T4410] tipc: Enabling of bearer rejected, failed to enable media [ 108.579858][ T4407] FAT-fs (loop0): Directory bread(block 64) failed [ 108.627182][ T4407] FAT-fs (loop0): Directory bread(block 65) failed [ 108.686536][ T4407] FAT-fs (loop0): Directory bread(block 66) failed [ 108.726120][ T4407] FAT-fs (loop0): Directory bread(block 67) failed [ 108.732845][ T4407] FAT-fs (loop0): Directory bread(block 68) failed [ 108.826130][ T4407] FAT-fs (loop0): Directory bread(block 69) failed [ 108.832780][ T4407] FAT-fs (loop0): Directory bread(block 70) failed [ 108.844791][ T4407] FAT-fs (loop0): Directory bread(block 71) failed [ 108.851502][ T4407] FAT-fs (loop0): Directory bread(block 72) failed [ 108.851829][ T4416] loop3: detected capacity change from 0 to 256 [ 108.858338][ T4407] FAT-fs (loop0): Directory bread(block 73) failed [ 109.111212][ T4422] loop2: detected capacity change from 0 to 1024 [ 109.195135][ T4425] attempt to access beyond end of device [ 109.195135][ T4425] loop0: rw=524288, want=1164, limit=256 [ 109.206752][ T4425] attempt to access beyond end of device [ 109.206752][ T4425] loop0: rw=0, want=1164, limit=256 [ 109.256467][ T26] audit: type=1800 audit(1721422315.193:9): pid=4425 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.237" name="file0" dev="loop0" ino=1048600 res=0 errno=0 [ 109.393267][ T4416] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 109.540778][ T26] audit: type=1800 audit(1721422315.513:10): pid=4416 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.240" name="file1" dev="loop3" ino=1048601 res=0 errno=0 [ 109.706252][ T4284] hfsplus: b-tree write err: -5, ino 4 [ 109.926759][ T4430] attempt to access beyond end of device [ 109.926759][ T4430] loop3: rw=0, want=304, limit=256 [ 110.531770][ T4441] loop0: detected capacity change from 0 to 2048 [ 110.603529][ T4441] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 110.633525][ T4447] loop2: detected capacity change from 0 to 16 [ 110.666066][ T4447] erofs: (device loop2): mounted with root inode @ nid 36. [ 110.765493][ T4449] tipc: Enabling of bearer rejected, failed to enable media [ 111.780332][ T4451] erofs: (device loop2): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 36 [ 111.780382][ T4451] erofs: (device loop2): z_erofs_readpage: failed to read, err [-117] [ 112.117639][ T4456] loop1: detected capacity change from 0 to 24 [ 112.139952][ T4455] loop4: detected capacity change from 0 to 256 [ 112.161056][ T4456] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 112.269554][ T4455] FAT-fs (loop4): Directory bread(block 64) failed [ 112.271625][ T4456] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 112.306010][ T4455] FAT-fs (loop4): Directory bread(block 65) failed [ 112.327615][ T4445] loop3: detected capacity change from 0 to 40427 [ 112.333642][ T4455] FAT-fs (loop4): Directory bread(block 66) failed [ 112.357570][ T4455] FAT-fs (loop4): Directory bread(block 67) failed [ 112.364213][ T4455] FAT-fs (loop4): Directory bread(block 68) failed [ 112.407514][ T4455] FAT-fs (loop4): Directory bread(block 69) failed [ 112.424916][ T4455] FAT-fs (loop4): Directory bread(block 70) failed [ 112.434993][ T4455] FAT-fs (loop4): Directory bread(block 71) failed [ 112.461543][ T4455] FAT-fs (loop4): Directory bread(block 72) failed [ 112.474801][ T4445] F2FS-fs (loop3): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 112.486026][ T4455] FAT-fs (loop4): Directory bread(block 73) failed [ 112.499034][ T4445] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 112.545738][ T4445] F2FS-fs (loop3): invalid crc value [ 112.603544][ T4471] loop1: detected capacity change from 0 to 256 [ 112.642334][ T4445] F2FS-fs (loop3): Found nat_bits in checkpoint [ 112.785838][ T4471] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 112.890450][ T26] audit: type=1800 audit(1721422318.863:11): pid=4471 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.261" name="file1" dev="loop1" ino=1048602 res=0 errno=0 [ 113.398336][ T4483] attempt to access beyond end of device [ 113.398336][ T4483] loop1: rw=0, want=304, limit=256 [ 113.874906][ T4445] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 114.042608][ T4445] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 114.212346][ T4486] loop4: detected capacity change from 0 to 2048 [ 114.341790][ T4486] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 114.380563][ T4495] loop1: detected capacity change from 0 to 24 [ 114.442479][ T4495] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 114.530100][ T4495] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 116.132172][ T4513] device syzkaller1 entered promiscuous mode [ 116.504972][ T4493] loop0: detected capacity change from 0 to 32768 [ 116.624622][ T4535] netlink: 40 bytes leftover after parsing attributes in process `syz.3.284'. [ 116.640553][ T4532] loop1: detected capacity change from 0 to 1024 [ 116.678534][ T4493] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.268 (4493) [ 116.711295][ T4532] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 116.729075][ T4538] loop3: detected capacity change from 0 to 16 [ 116.754749][ T4538] erofs: (device loop3): mounted with root inode @ nid 36. [ 116.790670][ T4532] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000084,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,jqfmt=vfsold,usrquota,data_err=abort,,errors=continue. Quota mode: writeback. [ 116.867901][ T4544] x_tables: duplicate underflow at hook 3 [ 116.979608][ T4544] device macvlan2 entered promiscuous mode [ 117.026487][ T4493] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 117.036501][ T4544] device bridge0 entered promiscuous mode [ 117.066230][ T4493] BTRFS info (device loop0): using free space tree [ 117.072918][ T4493] BTRFS info (device loop0): has skinny extents [ 117.129929][ T4548] erofs: (device loop3): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 36 [ 117.141110][ T4548] erofs: (device loop3): z_erofs_readpage: failed to read, err [-117] [ 117.924105][ T4544] team0: Port device macvlan2 added [ 118.109186][ T4569] loop3: detected capacity change from 0 to 128 [ 118.177803][ T4493] BTRFS error (device loop0): open_ctree failed [ 118.206425][ T4569] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 118.209707][ T4533] loop2: detected capacity change from 0 to 40427 [ 118.229717][ T4569] ext4 filesystem being mounted at /69/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 118.261194][ C0] vkms_vblank_simulate: vblank timer overrun [ 118.268977][ T4571] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 118.362649][ T26] audit: type=1326 audit(1721422324.333:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4580 comm="syz.1.291" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f80de10cb59 code=0x0 [ 118.384238][ C0] vkms_vblank_simulate: vblank timer overrun [ 118.406474][ T4533] F2FS-fs (loop2): Found nat_bits in checkpoint [ 118.566150][ T4571] usb 5-1: Using ep0 maxpacket: 8 [ 118.575525][ T4591] device syzkaller1 entered promiscuous mode [ 118.625091][ T4533] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 118.767839][ T3502] attempt to access beyond end of device [ 118.767839][ T3502] loop2: rw=2049, want=45104, limit=40427 [ 118.896818][ T4571] usb 5-1: New USB device found, idVendor=0781, idProduct=0001, bcdDevice= 2.00 [ 118.910921][ T4571] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.915848][ T4602] netlink: 40 bytes leftover after parsing attributes in process `syz.3.298'. [ 118.922173][ T4571] usb 5-1: Product: syz [ 118.939660][ T4571] usb 5-1: Manufacturer: syz [ 118.944376][ T4571] usb 5-1: SerialNumber: syz [ 118.978729][ T4571] usb 5-1: config 0 descriptor?? [ 119.021024][ T4608] loop3: detected capacity change from 0 to 512 [ 119.076935][ T4571] usb-storage 5-1:0.0: USB Mass Storage device detected [ 119.091544][ T4610] loop0: detected capacity change from 0 to 1024 [ 119.124838][ T4571] usb-storage 5-1:0.0: Quirks match for vid 0781 pid 0001: 1 [ 119.133008][ T4608] EXT4-fs (loop3): 1 truncate cleaned up [ 119.133112][ T4610] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 119.141059][ T4571] usb-storage 5-1:0.0: This device (0781,0001,0200 S 06 P a4) has an unneeded SubClass entry in unusual_devs.h (kernel 5.15.163-syzkaller) [ 119.141059][ T4571] Please send a copy of this message to and [ 119.148547][ T4608] EXT4-fs (loop3): mounted filesystem without journal. Opts: prjquota,grpquota,debug_want_extra_isize=0x000000000000005c,sysvgroups,nolazytime,errors=continue,grpjquota=,,errors=continue. Quota mode: writeback. [ 119.174504][ C0] vkms_vblank_simulate: vblank timer overrun [ 119.290948][ T4610] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000084,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,jqfmt=vfsold,usrquota,data_err=abort,,errors=continue. Quota mode: writeback. [ 119.330441][ T4571] usb 5-1: USB disconnect, device number 3 [ 119.344699][ T4617] netlink: 'syz.1.302': attribute type 29 has an invalid length. [ 119.369913][ T4608] EXT4-fs error (device loop3): ext4_lookup:1855: inode #14: comm syz.3.300: iget: checksum invalid [ 119.393615][ T4617] netlink: 'syz.1.302': attribute type 29 has an invalid length. [ 119.459285][ T4617] netlink: 'syz.1.302': attribute type 29 has an invalid length. [ 119.505441][ T4622] netlink: 'syz.1.302': attribute type 29 has an invalid length. [ 119.518627][ T3511] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 13: comm syz-executor: path /74/file2: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=196608, rec_len=0, size=1024 fake=0 [ 119.552119][ T4617] netlink: 'syz.1.302': attribute type 29 has an invalid length. [ 119.581190][ T3511] EXT4-fs error (device loop3): ext4_lookup:1855: inode #11: comm syz-executor: iget: checksum invalid [ 119.601059][ T4625] loop0: detected capacity change from 0 to 128 [ 119.616751][ T4622] netlink: 'syz.1.302': attribute type 29 has an invalid length. [ 119.684001][ T3511] EXT4-fs error (device loop3): ext4_lookup:1855: inode #11: comm syz-executor: iget: checksum invalid [ 119.705601][ T4625] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 119.763609][ T4617] netlink: 'syz.1.302': attribute type 29 has an invalid length. [ 119.776532][ T4625] ext4 filesystem being mounted at /42/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 120.087604][ T4629] loop2: detected capacity change from 0 to 40427 [ 120.184920][ T4638] loop1: detected capacity change from 0 to 256 [ 120.189422][ T649] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.245659][ T4629] F2FS-fs (loop2): Found nat_bits in checkpoint [ 120.453454][ T4629] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 120.474763][ T4649] loop4: detected capacity change from 0 to 512 [ 120.476348][ T649] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.487083][ T4638] FAT-fs (loop1): count of clusters too big (33555454) [ 120.541092][ T4638] FAT-fs (loop1): Can't find a valid FAT filesystem [ 121.221028][ T4649] EXT4-fs (loop4): 1 truncate cleaned up [ 121.246380][ T4649] EXT4-fs (loop4): mounted filesystem without journal. Opts: prjquota,grpquota,debug_want_extra_isize=0x000000000000005c,sysvgroups,nolazytime,errors=continue,grpjquota=,,errors=continue. Quota mode: writeback. [ 121.317114][ T3502] attempt to access beyond end of device [ 121.317114][ T3502] loop2: rw=2049, want=45104, limit=40427 [ 121.348803][ T649] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.361745][ T4649] EXT4-fs error (device loop4): ext4_lookup:1855: inode #14: comm syz.4.315: iget: checksum invalid [ 121.457798][ T649] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.519335][ T4659] loop0: detected capacity change from 0 to 128 [ 121.533822][ T4655] loop1: detected capacity change from 0 to 4096 [ 121.538623][ T3510] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 13: comm syz-executor: path /60/file2: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=196608, rec_len=0, size=1024 fake=0 [ 121.571775][ T3510] EXT4-fs error (device loop4): ext4_lookup:1855: inode #11: comm syz-executor: iget: checksum invalid [ 121.586392][ T3510] EXT4-fs error (device loop4): ext4_lookup:1855: inode #11: comm syz-executor: iget: checksum invalid [ 121.606562][ T4655] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512) [ 121.627499][ T4659] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 121.648701][ T4659] ext4 filesystem being mounted at /46/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 121.749989][ T4655] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 122.019411][ T4665] loop0: detected capacity change from 0 to 256 [ 122.034419][ T4665] FAT-fs (loop0): Unrecognized mount option "utoõf8=1" or missing value [ 122.136902][ T4669] loop2: detected capacity change from 0 to 64 [ 122.156523][ T3503] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22. [ 122.172000][ T4665] loop0: detected capacity change from 0 to 736 [ 122.341596][ T4652] chnl_net:caif_netlink_parms(): no params data found [ 122.360818][ T4672] loop1: detected capacity change from 0 to 128 [ 122.399892][ T4665] Symlink component flag not implemented [ 122.462792][ T4665] Symlink component flag not implemented (121) [ 122.729615][ T4652] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.741522][ T4652] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.755787][ T4652] device bridge_slave_0 entered promiscuous mode [ 122.873710][ T4652] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.946871][ T4691] loop1: detected capacity change from 0 to 256 [ 122.959633][ T4652] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.960210][ T4694] loop0: detected capacity change from 0 to 4096 [ 123.008859][ T4652] device bridge_slave_1 entered promiscuous mode [ 123.013071][ T4694] ntfs: volume version 3.1. [ 123.147701][ T4691] loop1: detected capacity change from 0 to 256 [ 123.192546][ T4691] exfat: Deprecated parameter 'utf8' [ 123.224692][ T4652] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 123.234355][ T4691] exfat: Unexpected value for 'utf8' [ 123.265739][ T4652] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 123.416122][ T3559] Bluetooth: hci3: command 0x0409 tx timeout [ 123.579914][ T4652] team0: Port device team_slave_0 added [ 123.647409][ T4652] team0: Port device team_slave_1 added [ 123.736015][ T7] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 123.894848][ T4652] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 123.913252][ T4652] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 124.010595][ T4652] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 124.106478][ T7] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.122973][ T7] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 124.145391][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.155701][ T649] device hsr_slave_0 left promiscuous mode [ 124.175011][ T7] usb 2-1: config 0 descriptor?? [ 124.194524][ T649] device hsr_slave_1 left promiscuous mode [ 124.214131][ T649] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 124.241725][ T649] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 124.286095][ T649] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 124.305454][ T649] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 124.316974][ T649] device bridge_slave_1 left promiscuous mode [ 124.335369][ T649] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.356140][ T649] device bridge_slave_0 left promiscuous mode [ 124.375928][ T649] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.401972][ T649] device veth1_macvtap left promiscuous mode [ 124.417012][ T649] device veth0_macvtap left promiscuous mode [ 124.436226][ T649] device veth1_vlan left promiscuous mode [ 124.447030][ T649] device veth0_vlan left promiscuous mode [ 124.547272][ T4707] loop0: detected capacity change from 0 to 32768 [ 124.668059][ T7] keytouch 0003:0926:3333.0004: fixing up Keytouch IEC report descriptor [ 124.707211][ T7] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0004/input/input5 [ 124.834301][ T7] keytouch 0003:0926:3333.0004: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 124.896206][ T3552] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 124.936141][ T3559] Bluetooth: hci4: command 0x0409 tx timeout [ 125.042937][ T26] audit: type=1800 audit(1721422331.013:13): pid=4669 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.318" name="file1" dev="loop2" ino=2 res=0 errno=0 [ 125.158539][ T3552] usb 1-1: Using ep0 maxpacket: 32 [ 125.205107][ T649] team0 (unregistering): Port device team_slave_1 removed [ 125.222641][ T4707] udc-core: couldn't find an available UDC or it's busy [ 125.245983][ T4707] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 125.262453][ T649] team0 (unregistering): Port device team_slave_0 removed [ 125.289986][ T649] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 125.323313][ T649] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 125.461424][ T649] bond0 (unregistering): Released all slaves [ 125.486439][ T4576] Bluetooth: hci3: command 0x041b tx timeout [ 125.493339][ T4725] loop2: detected capacity change from 0 to 1024 [ 125.547235][ T4725] loop2: detected capacity change from 0 to 512 [ 125.555420][ T4652] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 125.562565][ T4652] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 125.590252][ T4652] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 125.635262][ T4725] EXT4-fs (loop2): 1 truncate cleaned up [ 125.641436][ T4725] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodelalloc,,errors=continue. Quota mode: none. [ 125.658963][ T4688] chnl_net:caif_netlink_parms(): no params data found [ 125.678896][ T7] usb 2-1: USB disconnect, device number 5 [ 125.726175][ T3552] usb 1-1: unable to get BOS descriptor or descriptor too short [ 125.776853][ T4729] loop2: detected capacity change from 0 to 256 [ 125.786987][ T4652] device hsr_slave_0 entered promiscuous mode [ 125.796161][ T3552] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 125.806990][ T4652] device hsr_slave_1 entered promiscuous mode [ 125.807653][ T3552] usb 1-1: can't read configurations, error -71 [ 125.819575][ T4652] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 125.832867][ T4729] FAT-fs (loop2): Unrecognized mount option "utoõf8=1" or missing value [ 125.850944][ T4652] Cannot create hsr debugfs directory [ 125.918336][ T4729] loop2: detected capacity change from 0 to 736 [ 126.020489][ T4729] Symlink component flag not implemented [ 126.026377][ T4729] Symlink component flag not implemented (121) [ 126.153442][ T4735] loop2: detected capacity change from 0 to 128 [ 126.188043][ T4688] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.266023][ T4688] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.274191][ T4688] device bridge_slave_0 entered promiscuous mode [ 126.324733][ T4743] loop0: detected capacity change from 0 to 256 [ 126.363767][ T4688] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.379678][ T4688] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.405737][ T4688] device bridge_slave_1 entered promiscuous mode [ 126.569240][ T26] audit: type=1326 audit(1721422332.543:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4756 comm="syz.2.340" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb20ed8db59 code=0x0 [ 126.613954][ T4688] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 126.677690][ T4688] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 126.852506][ T4688] team0: Port device team_slave_0 added [ 126.872910][ T4688] team0: Port device team_slave_1 added [ 127.016191][ T4571] Bluetooth: hci4: command 0x041b tx timeout [ 127.023034][ T4688] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 127.032439][ T4688] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 127.099870][ T4688] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 127.112294][ T26] audit: type=1326 audit(1721422333.083:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4770 comm="syz.0.343" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3d827b6b59 code=0x0 [ 127.274893][ T4688] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 127.282222][ T4688] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 127.344760][ T4688] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 127.472409][ T4782] loop2: detected capacity change from 0 to 128 [ 127.526001][ T3505] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 127.542959][ T4688] device hsr_slave_0 entered promiscuous mode [ 127.557814][ T4688] device hsr_slave_1 entered promiscuous mode [ 127.576070][ T4572] Bluetooth: hci3: command 0x040f tx timeout [ 127.594684][ T4688] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 127.625582][ T4688] Cannot create hsr debugfs directory [ 127.912880][ T3505] usb 1-1: config 0 has no interfaces? [ 127.918554][ T3505] usb 1-1: New USB device found, idVendor=046d, idProduct=c534, bcdDevice= 0.00 [ 127.952898][ T3505] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.021927][ T3505] usb 1-1: config 0 descriptor?? [ 128.144183][ T4688] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.183085][ T4801] loop2: detected capacity change from 0 to 1764 [ 128.203671][ T4652] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 128.230245][ T4652] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 128.244092][ T4779] loop1: detected capacity change from 0 to 32768 [ 128.253779][ T4652] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 128.270630][ T4652] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 128.319322][ T4688] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.465538][ T4688] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.618299][ T4688] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.683125][ T4652] 8021q: adding VLAN 0 to HW filter on device bond0 [ 128.743023][ T4652] 8021q: adding VLAN 0 to HW filter on device team0 [ 128.764279][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 128.785728][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 128.804589][ T4809] loop2: detected capacity change from 0 to 256 [ 128.837697][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 128.855087][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 128.864406][ T1066] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.871527][ T1066] bridge0: port 1(bridge_slave_0) entered forwarding state [ 128.886679][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 128.895521][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 128.911355][ T1066] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.918581][ T1066] bridge0: port 2(bridge_slave_1) entered forwarding state [ 128.933188][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 128.943010][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 128.965536][ T4809] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb69a62dc, utbl_chksum : 0xe619d30d) [ 129.023787][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 129.042061][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 129.073791][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 129.086105][ T4571] Bluetooth: hci4: command 0x040f tx timeout [ 129.093439][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 129.111273][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 129.122624][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 129.143027][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 129.156032][ T3549] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 129.171923][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 129.192716][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 129.242901][ T4652] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 129.262954][ T3863] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 129.304689][ T4688] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 129.323849][ T4688] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 129.360613][ T4688] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 129.392000][ T4688] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 129.406376][ T3549] usb 2-1: Using ep0 maxpacket: 32 [ 129.479272][ T4779] udc-core: couldn't find an available UDC or it's busy [ 129.500378][ T4779] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 129.506042][ T3552] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 129.586270][ T3549] usb 2-1: unable to get BOS descriptor or descriptor too short [ 129.606791][ T4688] 8021q: adding VLAN 0 to HW filter on device bond0 [ 129.625097][ T3863] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 129.642268][ T3863] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 129.655039][ T4652] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 129.656372][ T3549] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 129.662518][ T4571] Bluetooth: hci3: command 0x0419 tx timeout [ 129.678497][ T3549] usb 2-1: can't read configurations, error -71 [ 129.696761][ T4688] 8021q: adding VLAN 0 to HW filter on device team0 [ 129.728178][ T4571] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 129.743174][ T4571] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 129.767816][ T4571] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 129.777715][ T4571] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 129.787045][ T4571] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 129.795796][ T4571] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 129.804447][ T4571] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.811552][ T4571] bridge0: port 1(bridge_slave_0) entered forwarding state [ 129.829303][ T4571] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 129.841913][ T4571] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 129.855335][ T4571] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.862508][ T4571] bridge0: port 2(bridge_slave_1) entered forwarding state [ 129.884020][ T4571] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 129.893340][ T4571] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 129.896278][ T3552] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 129.902777][ T4571] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 129.918641][ T3552] usb 3-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 129.940070][ T4652] device veth0_vlan entered promiscuous mode [ 129.949325][ T3552] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.960340][ T3552] usb 3-1: config 0 descriptor?? [ 129.975203][ T4688] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 129.998662][ T3552] usb 3-1: Found UVC 0.00 device (046d:08c1) [ 130.005589][ T3552] usb 3-1: No valid video chain found. [ 130.010914][ T4688] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 130.043120][ T4572] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 130.074856][ T4572] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 130.106996][ T4572] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 130.133442][ T4572] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 130.164725][ T4572] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 130.192199][ T4572] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 130.223975][ T4572] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 130.247760][ T4572] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 130.273404][ T4572] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 130.288906][ T4809] ip6t_srh: unknown srh match flags 6800 [ 130.304978][ T4572] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 130.321077][ T4652] device veth1_vlan entered promiscuous mode [ 130.370104][ T4573] usb 1-1: USB disconnect, device number 5 [ 130.382964][ T4576] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 130.409131][ T4576] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 130.433789][ T4576] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 130.446847][ T4576] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 130.476856][ T4576] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 130.485028][ T4576] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 130.641511][ T4652] device veth0_macvtap entered promiscuous mode [ 130.644875][ T4652] device veth1_macvtap entered promiscuous mode [ 130.650976][ T3559] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 130.651664][ T3559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 130.652214][ T3559] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 130.654294][ T3559] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 130.684096][ T4652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.741391][ T4652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.752362][ T4652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.775691][ T4652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.803288][ T4652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.829565][ T4652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.859920][ T4652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.891761][ T4652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.909691][ T4652] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 130.942994][ T4652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.964517][ T4652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.987141][ T4652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.992016][ T4841] loop1: detected capacity change from 0 to 32768 [ 131.000797][ T4652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.015849][ T4652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.027809][ T4652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.043585][ T4652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.056216][ T4652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.074501][ T4652] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 131.111147][ T4841] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 scanned by syz.1.354 (4841) [ 131.153634][ T4573] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 131.161983][ T4572] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 131.174784][ T4573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 131.183526][ T4573] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 131.192554][ T4573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 131.208835][ T4573] Bluetooth: hci4: command 0x0419 tx timeout [ 131.211734][ T4652] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.236366][ T4652] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.245337][ T4841] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 131.256846][ T4841] BTRFS info (device loop1): using free space tree [ 131.263378][ T4841] BTRFS info (device loop1): has skinny extents [ 131.280040][ T4652] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.296885][ T4652] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.314860][ T4571] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 131.333341][ T4571] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 131.358059][ T4688] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 131.446776][ T4572] usb 1-1: Using ep0 maxpacket: 16 [ 131.552052][ T3594] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.596806][ T4572] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 125, changing to 10 [ 131.609518][ T3594] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.619288][ T4841] BTRFS info (device loop1): enabling ssd optimizations [ 131.639403][ T4572] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 59084, setting to 1024 [ 131.672338][ T4572] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 131.722635][ T4572] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.733456][ T3730] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.747502][ T4576] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 131.752534][ T3730] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.766273][ T4572] usb 1-1: config 0 descriptor?? [ 131.774940][ T4576] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 131.803381][ T4853] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 131.874240][ T4576] usb 3-1: USB disconnect, device number 6 [ 131.995215][ T4571] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 132.014259][ T4571] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 132.136899][ T4571] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 132.159233][ T4571] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 132.188017][ T4688] device veth0_vlan entered promiscuous mode [ 132.197118][ T4573] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 132.205071][ T4573] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 132.249047][ T4853] udc-core: couldn't find an available UDC or it's busy [ 132.263639][ T4853] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 132.308931][ T4688] device veth1_vlan entered promiscuous mode [ 132.367418][ T4572] hid (null): unknown global tag 0xe [ 132.380755][ T4572] hid (null): invalid report_size 11365 [ 132.439921][ T4572] hid-generic 0003:0158:0100.0005: unknown main item tag 0x1 [ 132.456056][ T4572] hid-generic 0003:0158:0100.0005: unknown main item tag 0x0 [ 132.473995][ T4572] hid-generic 0003:0158:0100.0005: unknown main item tag 0x0 [ 132.517717][ T4572] hid-generic 0003:0158:0100.0005: unknown main item tag 0x0 [ 132.527862][ T4572] hid-generic 0003:0158:0100.0005: unknown main item tag 0x0 [ 132.535283][ T4572] hid-generic 0003:0158:0100.0005: unknown main item tag 0x0 [ 132.593230][ T4572] hid-generic 0003:0158:0100.0005: unknown main item tag 0x0 [ 132.606814][ T4572] hid-generic 0003:0158:0100.0005: unknown main item tag 0x0 [ 132.620648][ T4572] hid-generic 0003:0158:0100.0005: unknown main item tag 0x0 [ 132.650084][ T4572] hid-generic 0003:0158:0100.0005: unknown main item tag 0x0 [ 132.688413][ T1375] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.689870][ T4572] hid-generic 0003:0158:0100.0005: unknown main item tag 0x0 [ 132.694757][ T1375] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.730252][ T4572] hid-generic 0003:0158:0100.0005: unknown main item tag 0x0 [ 132.747105][ T4572] hid-generic 0003:0158:0100.0005: unknown main item tag 0x0 [ 132.763496][ T4572] hid-generic 0003:0158:0100.0005: unknown main item tag 0x0 [ 132.781857][ T4572] hid-generic 0003:0158:0100.0005: unknown main item tag 0x0 [ 132.790640][ T4572] hid-generic 0003:0158:0100.0005: unknown main item tag 0x0 [ 132.798464][ T4572] hid-generic 0003:0158:0100.0005: unknown main item tag 0x0 [ 132.806423][ T4572] hid-generic 0003:0158:0100.0005: unknown main item tag 0x0 [ 132.813946][ T4572] hid-generic 0003:0158:0100.0005: unknown main item tag 0x0 [ 132.822019][ T4572] hid-generic 0003:0158:0100.0005: unknown main item tag 0x0 [ 132.829901][ T4572] hid-generic 0003:0158:0100.0005: unknown main item tag 0x0 [ 132.837885][ T4572] hid-generic 0003:0158:0100.0005: unknown main item tag 0x0 [ 132.845367][ T4572] hid-generic 0003:0158:0100.0005: unknown main item tag 0x0 [ 132.853564][ T4572] hid-generic 0003:0158:0100.0005: unknown main item tag 0x0 [ 132.861341][ T4572] hid-generic 0003:0158:0100.0005: unknown main item tag 0x1 [ 132.869308][ T4572] hid-generic 0003:0158:0100.0005: unknown main item tag 0x0 [ 132.877098][ T4572] hid-generic 0003:0158:0100.0005: unknown main item tag 0x0 [ 132.884734][ T4572] hid-generic 0003:0158:0100.0005: unknown main item tag 0x0 [ 132.893602][ T4572] hid-generic 0003:0158:0100.0005: unknown main item tag 0x0 [ 132.901451][ T4572] hid-generic 0003:0158:0100.0005: unknown main item tag 0x0 [ 132.909189][ T4572] hid-generic 0003:0158:0100.0005: unknown main item tag 0x0 [ 132.917036][ T4572] hid-generic 0003:0158:0100.0005: unknown main item tag 0x0 [ 132.924517][ T4572] hid-generic 0003:0158:0100.0005: unknown main item tag 0x0 [ 132.932901][ T4572] hid-generic 0003:0158:0100.0005: unexpected long global item [ 132.941456][ T4572] hid-generic: probe of 0003:0158:0100.0005 failed with error -22 [ 133.170219][ T4940] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 133.179085][ T4940] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 133.191048][ T4688] device veth0_macvtap entered promiscuous mode [ 133.224730][ T4572] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 133.237398][ T4688] device veth1_macvtap entered promiscuous mode [ 133.294697][ T4688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.329828][ T4688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.353334][ T4937] loop2: detected capacity change from 0 to 40427 [ 133.357382][ T4942] dlm: non-version read from control device 0 [ 133.361164][ T4688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.384061][ T4688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.394253][ T4688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.414404][ T4688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.435372][ T4688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.447254][ T4688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.457378][ T4688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.468902][ T4688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.481743][ T4688] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 133.495202][ T4572] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 133.508061][ T4945] loop1: detected capacity change from 0 to 4096 [ 133.521550][ T4572] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 133.551062][ T4937] F2FS-fs (loop2): Found nat_bits in checkpoint [ 133.563056][ T1397] device hsr_slave_0 left promiscuous mode [ 133.595139][ T1397] device hsr_slave_1 left promiscuous mode [ 133.608060][ T1397] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 133.640949][ T1397] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 133.660281][ T4937] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 133.667648][ T4945] ntfs: volume version 3.1. [ 133.690481][ T3505] usb 1-1: USB disconnect, device number 6 [ 133.697703][ T1397] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 133.712184][ T1397] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 133.746895][ T1397] device bridge_slave_1 left promiscuous mode [ 133.763962][ T1397] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.805716][ T1397] device bridge_slave_0 left promiscuous mode [ 133.811870][ T3502] attempt to access beyond end of device [ 133.811870][ T3502] loop2: rw=2049, want=45104, limit=40427 [ 133.841306][ T1397] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.865748][ T1397] device bridge0 left promiscuous mode [ 133.881286][ T1397] device veth1_macvtap left promiscuous mode [ 133.892714][ T1397] device veth0_macvtap left promiscuous mode [ 133.901494][ T1397] device veth1_vlan left promiscuous mode [ 133.907799][ T1397] device veth0_vlan left promiscuous mode [ 134.173155][ T1397] team0 (unregistering): Port device macvlan2 removed [ 134.454948][ T1397] team0 (unregistering): Port device team_slave_1 removed [ 134.508279][ T1397] team0 (unregistering): Port device team_slave_0 removed [ 134.529798][ T1397] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 134.549310][ T1397] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 134.549360][ T4957] loop1: detected capacity change from 0 to 32768 [ 134.619663][ T4957] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 scanned by syz.1.369 (4957) [ 134.635376][ T4963] loop2: detected capacity change from 0 to 8192 [ 134.681009][ T4957] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 134.702466][ T4963] REISERFS warning (device loop2): jmacd-7 reiserfs_fill_super: resize option for remount only [ 134.716736][ T4957] BTRFS info (device loop1): using free space tree [ 134.738698][ T4957] BTRFS info (device loop1): has skinny extents [ 134.774555][ T1397] bond0 (unregistering): Released all slaves [ 134.854714][ T4688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.896562][ T4688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.907472][ T4688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.918606][ T4688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.933847][ T4688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.945744][ T4688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.956502][ T4688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.967546][ T4957] BTRFS info (device loop1): enabling ssd optimizations [ 134.968035][ T4688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.987390][ T4688] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 135.060298][ T3505] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 135.072867][ T3505] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 135.084919][ T4688] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.096408][ T4688] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.107587][ T4688] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.160296][ T4688] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.368098][ T4990] TCP: TCP_TX_DELAY enabled [ 135.720365][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.800439][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.833668][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.849115][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.860742][ T3553] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 135.905134][ T3553] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 135.986001][ T3549] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 136.079723][ T5012] loop4: detected capacity change from 0 to 256 [ 136.163194][ T5012] FAT-fs (loop4): count of clusters too big (33555454) [ 136.173110][ T5012] FAT-fs (loop4): Can't find a valid FAT filesystem [ 136.186823][ T3505] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 136.236195][ T3549] usb 3-1: Using ep0 maxpacket: 16 [ 136.268074][ T5016] loop0: detected capacity change from 0 to 256 [ 136.356327][ T3549] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 125, changing to 10 [ 136.356365][ T3549] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 59084, setting to 1024 [ 136.356404][ T3549] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 136.356431][ T3549] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.363740][ T3549] usb 3-1: config 0 descriptor?? [ 136.376372][ T4998] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 136.380378][ T5016] FAT-fs (loop0): Directory bread(block 64) failed [ 136.380421][ T5016] FAT-fs (loop0): Directory bread(block 65) failed [ 136.380490][ T5016] FAT-fs (loop0): Directory bread(block 66) failed [ 136.380522][ T5016] FAT-fs (loop0): Directory bread(block 67) failed [ 136.380634][ T5016] FAT-fs (loop0): Directory bread(block 68) failed [ 136.380670][ T5016] FAT-fs (loop0): Directory bread(block 69) failed [ 136.380739][ T5016] FAT-fs (loop0): Directory bread(block 70) failed [ 136.380771][ T5016] FAT-fs (loop0): Directory bread(block 71) failed [ 136.380836][ T5016] FAT-fs (loop0): Directory bread(block 72) failed [ 136.380867][ T5016] FAT-fs (loop0): Directory bread(block 73) failed [ 136.466310][ T3505] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 136.548609][ T3505] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 136.548661][ T3505] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 136.548690][ T3505] usb 4-1: config 0 interface 0 has no altsetting 0 [ 136.626137][ T3505] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 136.626186][ T3505] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 136.626215][ T3505] usb 4-1: config 0 interface 0 has no altsetting 0 [ 136.661194][ T26] audit: type=1326 audit(1721422342.633:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5019 comm="syz.0.383" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3d827b6b59 code=0x0 [ 136.706265][ T3505] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 136.706315][ T3505] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 136.706345][ T3505] usb 4-1: config 0 interface 0 has no altsetting 0 [ 136.786276][ T3505] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 136.786321][ T3505] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 136.786350][ T3505] usb 4-1: config 0 interface 0 has no altsetting 0 [ 136.823393][ T4998] udc-core: couldn't find an available UDC or it's busy [ 136.823414][ T4998] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 136.846477][ T3549] hid (null): unknown global tag 0xe [ 136.847011][ T3549] hid (null): invalid report_size 11365 [ 136.851031][ T3549] hid-generic 0003:0158:0100.0006: unknown main item tag 0x1 [ 136.851139][ T3549] hid-generic 0003:0158:0100.0006: unknown main item tag 0x0 [ 136.851163][ T3549] hid-generic 0003:0158:0100.0006: unknown main item tag 0x0 [ 136.851186][ T3549] hid-generic 0003:0158:0100.0006: unknown main item tag 0x0 [ 136.851208][ T3549] hid-generic 0003:0158:0100.0006: unknown main item tag 0x0 [ 136.851230][ T3549] hid-generic 0003:0158:0100.0006: unknown main item tag 0x0 [ 136.851252][ T3549] hid-generic 0003:0158:0100.0006: unknown main item tag 0x0 [ 136.851287][ T3549] hid-generic 0003:0158:0100.0006: unknown main item tag 0x0 [ 136.851309][ T3549] hid-generic 0003:0158:0100.0006: unknown main item tag 0x0 [ 136.851331][ T3549] hid-generic 0003:0158:0100.0006: unknown main item tag 0x0 [ 136.851353][ T3549] hid-generic 0003:0158:0100.0006: unknown main item tag 0x0 [ 136.851375][ T3549] hid-generic 0003:0158:0100.0006: unknown main item tag 0x0 [ 136.851397][ T3549] hid-generic 0003:0158:0100.0006: unknown main item tag 0x0 [ 136.851419][ T3549] hid-generic 0003:0158:0100.0006: unknown main item tag 0x0 [ 136.851441][ T3549] hid-generic 0003:0158:0100.0006: unknown main item tag 0x0 [ 136.851463][ T3549] hid-generic 0003:0158:0100.0006: unknown main item tag 0x0 [ 136.851485][ T3549] hid-generic 0003:0158:0100.0006: unknown main item tag 0x0 [ 136.851507][ T3549] hid-generic 0003:0158:0100.0006: unknown main item tag 0x0 [ 136.851529][ T3549] hid-generic 0003:0158:0100.0006: unknown main item tag 0x0 [ 136.851552][ T3549] hid-generic 0003:0158:0100.0006: unknown main item tag 0x0 [ 136.851581][ T3549] hid-generic 0003:0158:0100.0006: unknown main item tag 0x0 [ 136.851603][ T3549] hid-generic 0003:0158:0100.0006: unknown main item tag 0x0 [ 136.851630][ T3549] hid-generic 0003:0158:0100.0006: unknown main item tag 0x0 [ 136.851659][ T3549] hid-generic 0003:0158:0100.0006: unknown main item tag 0x0 [ 136.851684][ T3549] hid-generic 0003:0158:0100.0006: unknown main item tag 0x1 [ 136.851713][ T3549] hid-generic 0003:0158:0100.0006: unknown main item tag 0x0 [ 136.851735][ T3549] hid-generic 0003:0158:0100.0006: unknown main item tag 0x0 [ 136.851762][ T3549] hid-generic 0003:0158:0100.0006: unknown main item tag 0x0 [ 136.851785][ T3549] hid-generic 0003:0158:0100.0006: unknown main item tag 0x0 [ 136.851807][ T3549] hid-generic 0003:0158:0100.0006: unknown main item tag 0x0 [ 136.851852][ T3549] hid-generic 0003:0158:0100.0006: unknown main item tag 0x0 [ 136.851876][ T3549] hid-generic 0003:0158:0100.0006: unknown main item tag 0x0 [ 136.851903][ T3549] hid-generic 0003:0158:0100.0006: unknown main item tag 0x0 [ 136.851931][ T3549] hid-generic 0003:0158:0100.0006: unexpected long global item [ 136.852427][ T3549] hid-generic: probe of 0003:0158:0100.0006 failed with error -22 [ 136.866020][ T3505] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 136.866062][ T3505] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 136.866090][ T3505] usb 4-1: config 0 interface 0 has no altsetting 0 [ 136.946200][ T3505] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 136.946252][ T3505] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 136.946293][ T3505] usb 4-1: config 0 interface 0 has no altsetting 0 [ 137.026198][ T3505] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 137.026243][ T3505] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 137.026279][ T3505] usb 4-1: config 0 interface 0 has no altsetting 0 [ 137.040604][ T5018] loop4: detected capacity change from 0 to 40427 [ 137.090231][ T3549] usb 3-1: USB disconnect, device number 7 [ 137.114413][ T3505] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 137.114462][ T3505] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 137.114492][ T3505] usb 4-1: config 0 interface 0 has no altsetting 0 [ 137.168679][ T5018] F2FS-fs (loop4): Found nat_bits in checkpoint [ 137.268777][ T3505] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 137.514601][ T5018] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 137.531923][ T3505] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 137.616461][ T5027] xt_NFQUEUE: number of total queues is 0 [ 137.636267][ T3505] usb 4-1: Product: syz [ 137.641227][ T3505] usb 4-1: Manufacturer: syz [ 137.646559][ T3505] usb 4-1: SerialNumber: syz [ 137.653061][ T3505] usb 4-1: config 0 descriptor?? [ 137.692943][ T4688] attempt to access beyond end of device [ 137.692943][ T4688] loop4: rw=2049, want=45104, limit=40427 [ 137.715168][ T3505] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 137.932030][ T3553] usb 4-1: USB disconnect, device number 3 [ 137.954354][ T3553] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 138.326886][ T5046] loop2: detected capacity change from 0 to 512 [ 138.400671][ T5048] loop0: detected capacity change from 0 to 256 [ 138.436559][ T5046] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #15: comm syz.2.392: casefold flag without casefold feature [ 138.487290][ T5046] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: inode #12: comm syz.2.392: missing EA_INODE flag [ 138.511369][ T5046] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.392: error while reading EA inode 12 err=-117 [ 138.560382][ T5048] FAT-fs (loop0): Directory bread(block 64) failed [ 138.576277][ T5046] EXT4-fs (loop2): 1 orphan inode deleted [ 138.582153][ T5046] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 138.598558][ T5048] FAT-fs (loop0): Directory bread(block 65) failed [ 138.627731][ T5052] loop3: detected capacity change from 0 to 1764 [ 138.631890][ T5054] loop4: detected capacity change from 0 to 1024 [ 138.646157][ T5048] FAT-fs (loop0): Directory bread(block 66) failed [ 138.656952][ T5048] FAT-fs (loop0): Directory bread(block 67) failed [ 138.673831][ T5048] FAT-fs (loop0): Directory bread(block 68) failed [ 138.699200][ T5048] FAT-fs (loop0): Directory bread(block 69) failed [ 138.745259][ T5054] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 138.764377][ T5048] FAT-fs (loop0): Directory bread(block 70) failed [ 138.786183][ T5048] FAT-fs (loop0): Directory bread(block 71) failed [ 138.826601][ T26] audit: type=1326 audit(1721422344.803:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5055 comm="syz.1.395" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f80de10cb59 code=0x0 [ 138.843647][ T5048] FAT-fs (loop0): Directory bread(block 72) failed [ 138.853596][ T5054] EXT4-fs error (device loop4): ext4_ext_check_inode:501: inode #2: comm syz.4.386: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 138.881821][ T5048] FAT-fs (loop0): Directory bread(block 73) failed [ 138.903181][ T5054] EXT4-fs (loop4): get root inode failed [ 138.909310][ T5054] EXT4-fs (loop4): mount failed [ 138.961289][ T5059] netlink: 8 bytes leftover after parsing attributes in process `syz.2.396'. [ 139.011166][ T5059] device vlan2 entered promiscuous mode [ 139.289345][ T5074] netlink: 'syz.2.402': attribute type 2 has an invalid length. [ 139.336093][ T5074] netlink: 132 bytes leftover after parsing attributes in process `syz.2.402'. [ 139.368782][ T5077] Zero length message leads to an empty skb [ 139.572611][ T5083] loop3: detected capacity change from 0 to 1764 [ 139.617726][ T5085] mkiss: ax0: crc mode is auto. [ 139.680269][ T5087] loop4: detected capacity change from 0 to 1024 [ 139.755753][ T5090] loop1: detected capacity change from 0 to 256 [ 139.829620][ T5090] FAT-fs (loop1): count of clusters too big (33555454) [ 139.862723][ T5087] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 139.905956][ T5090] FAT-fs (loop1): Can't find a valid FAT filesystem [ 139.951494][ T26] audit: type=1800 audit(1721422345.923:18): pid=5087 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.405" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 140.068009][ T26] audit: type=1800 audit(1721422345.963:19): pid=5087 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.405" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 140.080919][ T5100] netlink: 494 bytes leftover after parsing attributes in process `syz.1.411'. [ 141.193368][ T5113] netlink: 'syz.2.417': attribute type 2 has an invalid length. [ 141.221642][ T5113] netlink: 132 bytes leftover after parsing attributes in process `syz.2.417'. [ 141.328259][ T4391] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.421795][ T4391] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.484524][ T4391] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.525472][ T5129] loop2: detected capacity change from 0 to 128 [ 141.573151][ T4391] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.602860][ T5129] EXT4-fs (loop2): Ignoring removed nobh option [ 141.619283][ T5108] chnl_net:caif_netlink_parms(): no params data found [ 141.634571][ T5129] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobh,inode_readahead_blks=0x0000000000008000,,errors=continue. Quota mode: none. [ 141.666131][ T5129] ext4 filesystem being mounted at /90/mnt supports timestamps until 2038 (0x7fffffff) [ 141.872209][ T26] audit: type=1800 audit(1721422347.843:20): pid=5129 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.422" name="bus" dev="loop2" ino=13 res=0 errno=0 [ 141.892293][ C1] vkms_vblank_simulate: vblank timer overrun [ 141.929046][ T5121] loop4: detected capacity change from 0 to 40427 [ 141.972359][ T26] audit: type=1800 audit(1721422347.943:21): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.422" name="bus" dev="loop2" ino=13 res=0 errno=0 [ 141.992598][ C1] vkms_vblank_simulate: vblank timer overrun [ 142.152631][ T5121] F2FS-fs (loop4): Found nat_bits in checkpoint [ 142.188964][ T4391] tipc: Left network mode [ 142.189582][ T5108] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.221506][ T5108] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.253036][ T5108] device bridge_slave_0 entered promiscuous mode [ 142.277390][ T5116] loop3: detected capacity change from 0 to 32768 [ 142.295540][ T5108] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.322011][ T5108] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.330040][ T5121] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 142.382764][ T5108] device bridge_slave_1 entered promiscuous mode [ 142.494748][ T5116] XFS (loop3): Mounting V5 Filesystem [ 142.504592][ T4688] attempt to access beyond end of device [ 142.504592][ T4688] loop4: rw=2049, want=45104, limit=40427 [ 142.570502][ T5154] device macvlan2 entered promiscuous mode [ 142.578105][ T5154] device bridge0 entered promiscuous mode [ 142.617806][ T5154] team0: Port device macvlan2 added [ 142.695024][ T5116] XFS (loop3): Ending clean mount [ 142.719059][ T5108] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 142.750397][ T5116] XFS (loop3): Quotacheck needed: Please wait. [ 142.803098][ T5108] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 143.248468][ T5116] XFS (loop3): Quotacheck: Done. [ 143.562784][ T1066] Bluetooth: hci1: command 0x0409 tx timeout [ 143.693990][ T5178] netlink: 'syz.0.429': attribute type 2 has an invalid length. [ 143.726810][ T4652] XFS (loop3): Unmounting Filesystem [ 143.773646][ T5178] netlink: 132 bytes leftover after parsing attributes in process `syz.0.429'. [ 144.004672][ T5108] team0: Port device team_slave_0 added [ 144.224018][ T5108] team0: Port device team_slave_1 added [ 144.806231][ T5197] loop2: detected capacity change from 0 to 128 [ 144.896828][ T5108] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 144.934877][ T5197] EXT4-fs (loop2): Ignoring removed nobh option [ 144.948904][ T5197] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobh,inode_readahead_blks=0x0000000000008000,,errors=continue. Quota mode: none. [ 144.963587][ T5108] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 144.990629][ T5108] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 145.005545][ T5108] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 145.014849][ T5108] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.041810][ T5108] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 145.054270][ T5197] ext4 filesystem being mounted at /94/mnt supports timestamps until 2038 (0x7fffffff) [ 145.180604][ T26] audit: type=1800 audit(1721422351.153:22): pid=5197 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.434" name="bus" dev="loop2" ino=13 res=0 errno=0 [ 145.204022][ T5210] loop0: detected capacity change from 0 to 1024 [ 145.254898][ T26] audit: type=1800 audit(1721422351.223:23): pid=5197 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.434" name="bus" dev="loop2" ino=13 res=0 errno=0 [ 145.308217][ T5216] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 145.383426][ T5210] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 145.416176][ T5216] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 145.487198][ T5108] device hsr_slave_0 entered promiscuous mode [ 145.505744][ T26] audit: type=1800 audit(1721422351.473:24): pid=5210 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.437" name="bus" dev="loop0" ino=18 res=0 errno=0 [ 145.535981][ T26] audit: type=1800 audit(1721422351.483:25): pid=5210 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.437" name="bus" dev="loop0" ino=18 res=0 errno=0 [ 145.559078][ T5108] device hsr_slave_1 entered promiscuous mode [ 145.573641][ T5108] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 145.604041][ T5108] Cannot create hsr debugfs directory [ 145.656509][ T3576] Bluetooth: hci1: command 0x041b tx timeout [ 145.765955][ T3549] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 146.136359][ T3549] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 209 [ 146.163383][ T5224] loop3: detected capacity change from 0 to 32768 [ 146.170123][ T3549] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 146.200410][ T3549] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.221181][ T3549] usb 3-1: config 0 descriptor?? [ 146.252554][ T5227] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 146.384213][ T5224] XFS (loop3): Mounting V5 Filesystem [ 146.402369][ T4391] device hsr_slave_0 left promiscuous mode [ 146.451876][ T4391] device hsr_slave_1 left promiscuous mode [ 146.482205][ T4391] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 146.499089][ T5227] udc-core: couldn't find an available UDC or it's busy [ 146.512945][ T5227] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 146.537182][ T5227] udc-core: couldn't find an available UDC or it's busy [ 146.547146][ T5227] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 146.555066][ T4391] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 146.586115][ T3549] ath6kl: Failed to submit usb control message: -71 [ 146.593639][ T4391] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 146.594723][ T5224] XFS (loop3): Ending clean mount [ 146.607690][ T4391] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 146.615253][ T3549] ath6kl: unable to send the bmi data to the device: -71 [ 146.623288][ T3549] ath6kl: Unable to send get target info: -71 [ 146.644113][ T4391] device bridge_slave_1 left promiscuous mode [ 146.655031][ T5224] XFS (loop3): Quotacheck needed: Please wait. [ 146.670960][ T4391] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.693157][ T4391] device bridge_slave_0 left promiscuous mode [ 146.715081][ T4391] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.739050][ T5224] XFS (loop3): Quotacheck: Done. [ 146.796698][ T4391] device veth1_macvtap left promiscuous mode [ 146.812984][ T4391] device veth0_macvtap left promiscuous mode [ 146.819881][ T4391] device veth1_vlan left promiscuous mode [ 146.825772][ T4391] device veth0_vlan left promiscuous mode [ 146.827629][ T4652] XFS (loop3): Unmounting Filesystem [ 147.133431][ T5265] xt_CT: You must specify a L4 protocol and not use inversions on it [ 147.213382][ T4391] team0 (unregistering): Port device team_slave_1 removed [ 147.239771][ T4391] team0 (unregistering): Port device team_slave_0 removed [ 147.275745][ T4391] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 147.292818][ T4391] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 147.383414][ T4391] bond0 (unregistering): Released all slaves [ 147.474881][ T5274] device batadv_slave_1 entered promiscuous mode [ 147.477383][ T5278] loop4: detected capacity change from 0 to 8 [ 147.548040][ T5278] squashfs image failed sanity check [ 147.583027][ T5271] device batadv_slave_1 left promiscuous mode [ 147.601954][ T3549] ath6kl: Failed to init ath6kl core: -71 [ 147.695109][ T3549] ath6kl_usb: probe of 3-1:0.0 failed with error -71 [ 147.726573][ T3576] Bluetooth: hci1: command 0x040f tx timeout [ 147.736339][ T3549] usb 3-1: USB disconnect, device number 8 [ 147.895376][ T5291] loop3: detected capacity change from 0 to 512 [ 147.903713][ T5108] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 147.940081][ T5108] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 147.982885][ T5108] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 148.014172][ T5108] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 148.031513][ T5291] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 148.126589][ T5291] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 148.177825][ T5291] EXT4-fs (loop3): 1 truncate cleaned up [ 148.183511][ T5291] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable,resuid=0x0000000000000000,stripe=0x0000000000000000,,errors=continue. Quota mode: none. [ 148.346058][ T3549] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 148.371738][ T5108] 8021q: adding VLAN 0 to HW filter on device bond0 [ 148.432450][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 148.447164][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 148.478573][ T5108] 8021q: adding VLAN 0 to HW filter on device team0 [ 148.508104][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 148.511886][ T5281] loop0: detected capacity change from 0 to 32768 [ 148.529754][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 148.551716][ T1066] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.558892][ T1066] bridge0: port 1(bridge_slave_0) entered forwarding state [ 148.613160][ T5281] XFS: ikeep mount option is deprecated. [ 148.629389][ T5281] XFS: ikeep mount option is deprecated. [ 148.648231][ T3863] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 148.657611][ T3863] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 148.701918][ T5311] loop3: detected capacity change from 0 to 512 [ 148.713333][ T3863] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 148.727445][ T3549] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 209 [ 148.774674][ T3549] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 148.794626][ T3863] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.801769][ T3863] bridge0: port 2(bridge_slave_1) entered forwarding state [ 148.810061][ T3549] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.823357][ T3549] usb 3-1: config 0 descriptor?? [ 148.832281][ T3863] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 148.835014][ T5311] EXT4-fs (loop3): invalid inodes per group: 0 [ 148.835014][ T5311] [ 148.842144][ T3863] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 148.849939][ T5281] XFS (loop0): Mounting V5 Filesystem [ 148.857116][ T5295] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 148.884983][ T5108] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 148.890582][ T5294] loop4: detected capacity change from 0 to 32768 [ 148.922866][ T5108] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 148.961523][ T3505] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 149.034889][ T3505] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 149.102438][ T3505] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 149.124674][ T5295] udc-core: couldn't find an available UDC or it's busy [ 149.153346][ T3505] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 149.169601][ T5295] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 149.200859][ T3505] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 149.245306][ T5295] udc-core: couldn't find an available UDC or it's busy [ 149.253455][ T3505] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 149.269170][ T5295] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 149.281607][ T3505] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 149.373690][ T5330] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 150.053988][ T4572] Bluetooth: hci1: command 0x0419 tx timeout [ 150.056352][ T3505] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 150.151435][ T3549] ath6kl: Failed to submit usb control message: -110 [ 150.166176][ T3549] ath6kl: unable to send the bmi data to the device: -110 [ 150.173327][ T3549] ath6kl: Unable to send get target info: -110 [ 150.191521][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 150.217907][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 150.262815][ T5294] XFS (loop4): Mounting V5 Filesystem [ 150.274203][ T5281] XFS (loop0): Ending clean mount [ 150.327898][ T26] audit: type=1800 audit(1721422356.303:26): pid=5281 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.450" name="bus" dev="loop0" ino=9289 res=0 errno=0 [ 150.375430][ T3621] XFS (loop0): Unmounting Filesystem [ 150.418401][ T5294] XFS (loop4): Ending clean mount [ 150.434522][ T5294] XFS (loop4): Quotacheck needed: Please wait. [ 150.503722][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 150.512000][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 150.522805][ T5108] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 150.566712][ T5294] XFS (loop4): Quotacheck: Done. [ 150.581887][ T3505] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 150.619520][ T3505] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 150.749499][ T3505] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 150.766870][ T3505] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 150.790244][ T5108] device veth0_vlan entered promiscuous mode [ 150.806624][ T4688] XFS (loop4): Unmounting Filesystem [ 150.816907][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 150.830807][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 150.844729][ T5108] device veth1_vlan entered promiscuous mode [ 150.977105][ T3863] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 151.001299][ T3863] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 151.016981][ T3863] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 151.025112][ T5360] loop2: detected capacity change from 0 to 2048 [ 151.033081][ T3863] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 151.045100][ T5108] device veth0_macvtap entered promiscuous mode [ 151.088126][ T5108] device veth1_macvtap entered promiscuous mode [ 151.153853][ T5108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.198983][ T5365] loop3: detected capacity change from 0 to 1024 [ 151.228022][ T5360] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 151.234090][ T5108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.281337][ T5108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.291983][ T26] audit: type=1800 audit(1721422357.253:27): pid=5360 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.465" name="bus" dev="loop2" ino=1367 res=0 errno=0 [ 151.356088][ T5108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.386303][ T5108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.415911][ T5108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.432793][ T5370] loop4: detected capacity change from 0 to 8 [ 151.435921][ T5108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.466047][ T5108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.491849][ T5108] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 151.514072][ T3863] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 151.526307][ T5370] squashfs image failed sanity check [ 151.541055][ T3863] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 151.562254][ T3863] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 151.576843][ T3863] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 151.599267][ T5108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 151.645906][ T5108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.773151][ T5108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 151.850095][ T5108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.905936][ T5108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.340956][ T5108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.342295][ T3553] Bluetooth: hci1: command 0x0405 tx timeout [ 152.397283][ T5108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.438633][ T5108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.473036][ T5108] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 152.481231][ T3549] ath6kl: Failed to init ath6kl core: -110 [ 152.504370][ T3863] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 152.524551][ T3863] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 152.553184][ T5372] loop0: detected capacity change from 0 to 40427 [ 152.647505][ T5108] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.692502][ T5108] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.711172][ T5108] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.742972][ T5108] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.772403][ T5372] F2FS-fs (loop0): Encrypt feature is off [ 152.793914][ T5400] loop4: detected capacity change from 0 to 2048 [ 152.826349][ T5404] loop2: detected capacity change from 0 to 64 [ 152.950515][ T5400] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 152.989009][ T3549] ath6kl_usb: probe of 3-1:0.0 failed with error -110 [ 153.046923][ T3549] usb 3-1: USB disconnect, device number 9 [ 153.113332][ T5410] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 153.177499][ T5404] attempt to access beyond end of device [ 153.177499][ T5404] loop2: rw=34817, want=4194, limit=64 [ 153.197598][ T4284] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.246773][ T4284] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.308210][ T5404] attempt to access beyond end of device [ 153.308210][ T5404] loop2: rw=34817, want=4362, limit=64 [ 153.309898][ T4572] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 153.347778][ T5404] attempt to access beyond end of device [ 153.347778][ T5404] loop2: rw=34817, want=4385, limit=64 [ 153.465022][ T649] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.488633][ T5404] attempt to access beyond end of device [ 153.488633][ T5404] loop2: rw=34817, want=4417, limit=64 [ 153.526785][ T649] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.549815][ T4572] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 153.616750][ T5404] attempt to access beyond end of device [ 153.616750][ T5404] loop2: rw=34817, want=4450, limit=64 [ 153.681182][ T5404] attempt to access beyond end of device [ 153.681182][ T5404] loop2: rw=34817, want=4488, limit=64 [ 153.758720][ T5404] attempt to access beyond end of device [ 153.758720][ T5404] loop2: rw=34817, want=4693, limit=64 [ 153.822942][ T5428] loop1: detected capacity change from 0 to 256 [ 153.856337][ T649] attempt to access beyond end of device [ 153.856337][ T649] loop2: rw=1, want=66, limit=64 [ 153.899058][ T649] Buffer I/O error on dev loop2, logical block 65, lost async page write [ 153.943675][ T649] attempt to access beyond end of device [ 153.943675][ T649] loop2: rw=1, want=67, limit=64 [ 153.964957][ T5423] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 153.989030][ T5430] loop4: detected capacity change from 0 to 8 [ 153.995322][ T5423] FAT-fs (loop1): Filesystem has been set read-only [ 154.015317][ T649] Buffer I/O error on dev loop2, logical block 66, lost async page write [ 154.036913][ T649] attempt to access beyond end of device [ 154.036913][ T649] loop2: rw=1, want=68, limit=64 [ 154.055396][ T4391] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.065980][ T649] Buffer I/O error on dev loop2, logical block 67, lost async page write [ 154.066085][ T649] Buffer I/O error on dev loop2, logical block 68, lost async page write [ 154.092491][ T649] Buffer I/O error on dev loop2, logical block 72, lost async page write [ 154.103787][ T649] Buffer I/O error on dev loop2, logical block 73, lost async page write [ 154.114706][ T649] Buffer I/O error on dev loop2, logical block 76, lost async page write [ 154.123887][ T649] Buffer I/O error on dev loop2, logical block 77, lost async page write [ 154.228951][ T4391] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.381643][ T5436] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge0, syncid = 0, id = 0 [ 154.748098][ T4391] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.407735][ T4391] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.552261][ T5421] chnl_net:caif_netlink_parms(): no params data found [ 155.626098][ T3553] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 155.806053][ T3576] Bluetooth: hci3: command 0x0409 tx timeout [ 155.896630][ T5468] loop2: detected capacity change from 0 to 64 [ 155.955495][ T5421] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.996826][ T5421] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.047549][ T5421] device bridge_slave_0 entered promiscuous mode [ 156.066272][ T3553] usb 5-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.00 [ 156.076034][ T3553] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.107023][ T3553] usb 5-1: config 0 descriptor?? [ 156.112198][ T5421] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.129940][ T5421] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.146925][ T3594] Buffer I/O error on dev loop2, logical block 65, lost async page write [ 156.158267][ T3553] go7007: probe of 5-1:0.0 failed with error -12 [ 156.163478][ T5421] device bridge_slave_1 entered promiscuous mode [ 156.190275][ T3594] Buffer I/O error on dev loop2, logical block 66, lost async page write [ 156.304964][ T5421] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 156.351165][ T5483] loop2: detected capacity change from 0 to 256 [ 156.352934][ T5456] loop0: detected capacity change from 0 to 40427 [ 156.386411][ T5421] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 156.433046][ T5456] F2FS-fs (loop0): Encrypt feature is off [ 156.460534][ T5481] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 156.478975][ T13] usb 5-1: USB disconnect, device number 4 [ 156.504767][ T5481] FAT-fs (loop2): Filesystem has been set read-only [ 156.533509][ T5421] team0: Port device team_slave_0 added [ 156.612077][ T5421] team0: Port device team_slave_1 added [ 156.750788][ T5421] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 156.766957][ T5421] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 156.816562][ T5421] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 156.836245][ T3863] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 156.858326][ T5421] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 156.865298][ T5421] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 156.910430][ T5421] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 157.002225][ T5497] loop1: detected capacity change from 0 to 8 [ 157.014509][ T5421] device hsr_slave_0 entered promiscuous mode [ 157.027855][ T5421] device hsr_slave_1 entered promiscuous mode [ 157.078415][ T13] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 157.123937][ T5501] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge0, syncid = 0, id = 0 [ 157.226152][ T3863] usb 1-1: config 0 has an invalid interface number: 154 but max is 0 [ 157.253793][ T3863] usb 1-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 157.278751][ T3863] usb 1-1: config 0 has no interface number 0 [ 157.284890][ T3863] usb 1-1: New USB device found, idVendor=413c, idProduct=8196, bcdDevice=1f.e0 [ 157.305508][ T3863] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.325770][ T3863] usb 1-1: config 0 descriptor?? [ 157.368243][ T3863] qmi_wwan 1-1:0.154: bogus CDC Union: master=0, slave=0 [ 157.383632][ T3863] qmi_wwan: probe of 1-1:0.154 failed with error -22 [ 157.443291][ T5517] loop1: detected capacity change from 0 to 256 [ 157.472824][ T13] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 157.484531][ T13] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 157.503191][ T13] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.513381][ T5517] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001023f, chksum : 0x0e440cfe, utbl_chksum : 0xe619d30d) [ 157.514147][ T13] usb 3-1: config 0 descriptor?? [ 157.572850][ T1068] usb 1-1: USB disconnect, device number 7 [ 157.682702][ T4391] device hsr_slave_0 left promiscuous mode [ 157.713392][ T4391] device hsr_slave_1 left promiscuous mode [ 157.722537][ T4391] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 157.730479][ T4391] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 157.740261][ T4391] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 157.766671][ T4391] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 157.774677][ T4391] device bridge_slave_1 left promiscuous mode [ 157.782454][ T4391] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.795136][ T4391] device bridge_slave_0 left promiscuous mode [ 157.802326][ T4391] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.821523][ T4391] device veth1_macvtap left promiscuous mode [ 157.827940][ T4391] device veth0_macvtap left promiscuous mode [ 157.834037][ T4391] device veth1_vlan left promiscuous mode [ 157.840518][ T4391] device veth0_vlan left promiscuous mode [ 157.876444][ T5527] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 157.876444][ T5527] The task syz.4.500 (5527) triggered the difference, watch for misbehavior. [ 157.894847][ T3505] Bluetooth: hci3: command 0x041b tx timeout [ 157.911168][ T5527] loop4: detected capacity change from 0 to 256 [ 157.987859][ T5527] FAT-fs (loop4): Unrecognized mount option "utfP=0" or missing value [ 158.057091][ T13] keytouch 0003:0926:3333.0007: fixing up Keytouch IEC report descriptor [ 158.107323][ T13] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0007/input/input6 [ 158.170551][ T4391] team0 (unregistering): Port device team_slave_1 removed [ 158.221615][ T13] keytouch 0003:0926:3333.0007: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 158.246959][ T4391] team0 (unregistering): Port device team_slave_0 removed [ 158.250160][ T5532] loop4: detected capacity change from 0 to 2048 [ 158.304456][ T4391] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 158.331001][ T5532] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 158.349808][ T4391] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 158.389650][ T26] audit: type=1800 audit(1721422364.363:28): pid=5532 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.502" name="bus" dev="loop4" ino=1367 res=0 errno=0 [ 158.633061][ T4391] bond0 (unregistering): Released all slaves [ 159.008304][ T5551] loop4: detected capacity change from 0 to 1764 [ 159.067085][ T3576] usb 3-1: USB disconnect, device number 10 [ 159.086060][ C0] keytouch 0003:0926:3333.0007: usb_submit_urb(ctrl) failed: -19 [ 159.106891][ T1068] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 159.136645][ T3547] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 159.224118][ T5557] loop4: detected capacity change from 0 to 256 [ 159.306446][ T5421] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 159.317693][ T5421] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 159.328486][ T5421] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 159.339724][ T5421] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 159.384814][ T5557] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001023f, chksum : 0x0e440cfe, utbl_chksum : 0xe619d30d) [ 159.526457][ T1068] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 159.550463][ T1068] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 159.563658][ T3547] usb 2-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.00 [ 159.574734][ T3547] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.610277][ T1068] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 159.639876][ T3547] usb 2-1: config 0 descriptor?? [ 159.666043][ T1068] usb 1-1: New USB device found, idVendor=046d, idProduct=c294, bcdDevice= 0.00 [ 159.666207][ T5421] 8021q: adding VLAN 0 to HW filter on device bond0 [ 159.688368][ T3547] go7007: probe of 2-1:0.0 failed with error -12 [ 159.710802][ T1068] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.747746][ T1068] usb 1-1: config 0 descriptor?? [ 159.784040][ T5421] 8021q: adding VLAN 0 to HW filter on device team0 [ 159.813109][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 159.823828][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 159.894277][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 159.910287][ T3547] usb 2-1: USB disconnect, device number 8 [ 159.917231][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 159.957939][ T3552] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.965074][ T3552] bridge0: port 1(bridge_slave_0) entered forwarding state [ 160.000852][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 160.029831][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 160.061685][ T3552] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.068872][ T3552] bridge0: port 2(bridge_slave_1) entered forwarding state [ 160.125584][ T7] Bluetooth: hci3: command 0x040f tx timeout [ 160.139224][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 160.156580][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 160.175755][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 160.185769][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 160.207947][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 160.235684][ T1068] logitech 0003:046D:C294.0008: hidraw0: USB HID v0.00 Device [HID 046d:c294] on usb-dummy_hcd.0-1/input0 [ 160.254418][ T3863] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 160.264610][ T3863] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 160.284270][ T3863] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 160.291698][ T1068] logitech 0003:046D:C294.0008: no inputs found [ 160.330358][ T3863] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 160.356700][ T3863] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 160.385712][ T3863] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 160.396139][ T7] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 160.411765][ T3863] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 160.442183][ T1068] usb 1-1: USB disconnect, device number 8 [ 160.451375][ T5421] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 160.630305][ T5592] loop1: detected capacity change from 0 to 256 [ 160.661543][ T5591] loop4: detected capacity change from 0 to 1024 [ 160.722297][ T5591] hfsplus: unable to parse mount options [ 160.746614][ T3863] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 160.756447][ T7] usb 3-1: config 0 has an invalid interface number: 154 but max is 0 [ 160.765644][ T3863] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 160.774872][ T7] usb 3-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 160.822269][ T7] usb 3-1: config 0 has no interface number 0 [ 160.830534][ T5421] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 160.872459][ T7] usb 3-1: New USB device found, idVendor=413c, idProduct=8196, bcdDevice=1f.e0 [ 160.922503][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.937495][ T1068] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 160.954416][ T1068] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 160.973777][ T7] usb 3-1: config 0 descriptor?? [ 161.027780][ T7] qmi_wwan 3-1:0.154: bogus CDC Union: master=0, slave=0 [ 161.035012][ T5421] device veth0_vlan entered promiscuous mode [ 161.056866][ T7] qmi_wwan: probe of 3-1:0.154 failed with error -22 [ 161.076680][ T1068] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 161.100523][ T1068] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 161.162856][ T5421] device veth1_vlan entered promiscuous mode [ 161.207365][ T1068] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 161.223487][ T1068] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 161.252440][ T3863] usb 3-1: USB disconnect, device number 11 [ 161.259695][ T1068] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 161.331242][ T1068] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 161.355580][ T1068] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 161.381958][ T1068] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 161.416432][ T5421] device veth0_macvtap entered promiscuous mode [ 161.956677][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 162.009197][ T5421] device veth1_macvtap entered promiscuous mode [ 162.056717][ T5633] loop4: detected capacity change from 0 to 256 [ 162.087383][ T5421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.116258][ T5421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.145450][ T5421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.194671][ T5636] loop1: detected capacity change from 0 to 1024 [ 162.201659][ T5421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.212702][ T3863] Bluetooth: hci3: command 0x0419 tx timeout [ 162.253017][ T5421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.269995][ T5421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.282323][ T5421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.303492][ T5421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.325283][ T5421] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 162.345264][ T3505] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 162.348325][ T5636] hfsplus: unable to parse mount options [ 162.361101][ T3505] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 162.373381][ T5421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.404923][ T5421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.429466][ T5421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.454305][ T5421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.470481][ T5421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.497090][ T5421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.532029][ T5421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.543884][ T3505] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 162.557407][ T5421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.573864][ T5421] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 162.587450][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 162.603700][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 162.615465][ T5421] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.650529][ T5421] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.678123][ T5421] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.688972][ T5421] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.916388][ T3505] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 162.930808][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 162.943540][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.973550][ T3505] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 163.020833][ T3505] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 163.053501][ T4284] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 163.054406][ T3505] usb 3-1: New USB device found, idVendor=046d, idProduct=c294, bcdDevice= 0.00 [ 163.121650][ T3505] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.130128][ T4284] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 163.148380][ T3505] usb 3-1: config 0 descriptor?? [ 163.173826][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 163.233926][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 163.238663][ T5671] loop0: detected capacity change from 0 to 2048 [ 163.317428][ T5671] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=18576, location=18576 [ 163.371136][ T5671] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 163.495188][ T5678] loop3: detected capacity change from 0 to 2048 [ 163.630747][ T3505] logitech 0003:046D:C294.0009: hidraw0: USB HID v0.00 Device [HID 046d:c294] on usb-dummy_hcd.2-1/input0 [ 163.639271][ T5690] loop1: detected capacity change from 0 to 1024 [ 163.649855][ T5692] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 163.686479][ T3505] logitech 0003:046D:C294.0009: no inputs found [ 163.727234][ T5690] hfsplus: unable to parse mount options [ 163.766658][ T26] audit: type=1800 audit(1721422369.743:29): pid=5678 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.475" name="bus" dev="loop3" ino=2097152 res=0 errno=0 [ 164.494154][ T4938] usb 3-1: USB disconnect, device number 12 [ 164.675960][ T13] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 164.781958][ T26] audit: type=1326 audit(1721422370.753:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5700 comm="syz.4.541" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd6d16f5b59 code=0x0 [ 164.917422][ T26] audit: type=1326 audit(1721422370.863:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5700 comm="syz.4.541" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd6d16f5b59 code=0x0 [ 164.939981][ T13] usb 1-1: Using ep0 maxpacket: 16 [ 165.035564][ T5709] netlink: 24 bytes leftover after parsing attributes in process `syz.1.544'. [ 165.056071][ T13] usb 1-1: config index 0 descriptor too short (expected 16456, got 72) [ 165.064457][ T13] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 165.080948][ T13] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 165.109481][ T13] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 165.162678][ T13] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 165.172093][ T13] usb 1-1: config 0 has no interface number 0 [ 165.182108][ T13] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 165.193917][ T13] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 165.203950][ T13] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 165.220091][ T13] usb 1-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 165.234928][ T13] usb 1-1: config 0 interface 125 has no altsetting 0 [ 165.250310][ T13] usb 1-1: config 0 interface 125 has no altsetting 2 [ 165.504075][ T5719] loop4: detected capacity change from 0 to 8 [ 166.162365][ T13] usb 1-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 166.185963][ T13] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.193995][ T13] usb 1-1: Product: syz [ 166.202053][ T5719] SQUASHFS error: Unable to read inode 0x9 [ 166.210977][ T13] usb 1-1: Manufacturer: syz [ 166.215605][ T13] usb 1-1: SerialNumber: syz [ 166.268880][ T13] usb 1-1: config 0 descriptor?? [ 166.287721][ T5716] loop4: detected capacity change from 0 to 128 [ 166.330807][ T13] usb 1-1: selecting invalid altsetting 2 [ 166.386673][ T5716] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 166.397445][ T5716] ext4 filesystem being mounted at /41/mnt supports timestamps until 2038 (0x7fffffff) [ 166.471421][ T5734] loop3: detected capacity change from 0 to 2048 [ 166.500697][ T5737] loop2: detected capacity change from 0 to 256 [ 166.508209][ T5734] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=18576, location=18576 [ 166.623362][ T5734] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 166.738198][ T5689] udc-core: couldn't find an available UDC or it's busy [ 166.745197][ T5689] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 166.976731][ T5689] udc-core: couldn't find an available UDC or it's busy [ 167.009876][ T5689] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 167.024036][ T5735] loop1: detected capacity change from 0 to 32768 [ 167.029044][ T5749] loop2: detected capacity change from 0 to 2048 [ 167.677228][ T5756] udc-core: couldn't find an available UDC or it's busy [ 167.693630][ T5756] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 167.863196][ T5757] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 167.867434][ C0] usb 1-1: async_complete: urb error -71 [ 167.883187][ T13] get_1284_register: usb error -71 [ 167.905688][ T13] uss720: probe of 1-1:0.125 failed with error -71 [ 167.931379][ T13] usb 1-1: USB disconnect, device number 9 [ 167.942691][ T26] audit: type=1800 audit(1721422373.913:32): pid=5749 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.559" name="bus" dev="loop2" ino=2097152 res=0 errno=0 [ 167.962819][ T5735] XFS (loop1): Mounting V5 Filesystem [ 167.975983][ T7] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 168.122981][ T5735] XFS (loop1): Ending clean mount [ 168.141872][ T5735] XFS (loop1): Quotacheck needed: Please wait. [ 168.263537][ T5735] XFS (loop1): Quotacheck: Done. [ 168.343310][ T7] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 168.367436][ T7] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 168.426014][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.469492][ T7] usb 5-1: config 0 descriptor?? [ 168.494315][ T5108] XFS (loop1): Unmounting Filesystem [ 168.957680][ T5773] loop3: detected capacity change from 0 to 40427 [ 169.023754][ T5773] F2FS-fs (loop3): invalid crc value [ 169.027481][ T7] keytouch 0003:0926:3333.000A: fixing up Keytouch IEC report descriptor [ 169.067127][ T7] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.000A/input/input7 [ 169.093031][ T5773] F2FS-fs (loop3): Found nat_bits in checkpoint [ 169.180324][ T7] keytouch 0003:0926:3333.000A: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 169.211820][ T5775] loop0: detected capacity change from 0 to 40427 [ 169.222043][ T5773] F2FS-fs (loop3): Cannot turn on quotas: -2 on 1 [ 169.253407][ T5773] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 169.289295][ T5775] F2FS-fs (loop0): invalid crc value [ 169.314478][ T5773] F2FS-fs (loop3): Can't flush 0 in 0 for segs_per_sec 1 != 1 [ 169.358025][ T5775] F2FS-fs (loop0): Found nat_bits in checkpoint [ 169.558682][ T5775] F2FS-fs (loop0): Cannot turn on quotas: -2 on 0 [ 169.585573][ T5775] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 169.661884][ T5793] netlink: 224 bytes leftover after parsing attributes in process `syz.1.571'. [ 169.693587][ T5775] handle_bad_sector: 22 callbacks suppressed [ 169.693607][ T5775] attempt to access beyond end of device [ 169.693607][ T5775] loop0: rw=2049, want=45104, limit=40427 [ 169.760802][ T5788] process '/newroot/32/file0' started with executable stack [ 169.802684][ T5777] loop2: detected capacity change from 0 to 32768 [ 170.927176][ T4572] usb 5-1: USB disconnect, device number 5 [ 171.456602][ T13] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 171.765733][ T5828] loop0: detected capacity change from 0 to 8 [ 171.895686][ T5828] SQUASHFS error: Unable to read inode 0x9 [ 172.517255][ T13] usb 3-1: Using ep0 maxpacket: 16 [ 172.531473][ T5812] loop1: detected capacity change from 0 to 512 [ 172.578260][ T5833] loop0: detected capacity change from 0 to 65 [ 172.593472][ T5812] EXT4-fs (loop1): Unrecognized mount option "obj_type=T¯…" or missing value [ 172.618981][ T5833] BFS-fs: bfs_fill_super(): Superblock is corrupted on loop0 [ 172.636208][ T13] usb 3-1: config index 0 descriptor too short (expected 16456, got 72) [ 172.669105][ T13] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 172.681194][ T13] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 172.690738][ T13] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 172.699365][ T13] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 172.710869][ T13] usb 3-1: config 0 has no interface number 0 [ 172.717423][ T13] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 172.729738][ T26] audit: type=1326 audit(1721422378.703:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5834 comm="syz.0.587" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3d827b6b59 code=0x0 [ 172.751519][ T13] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 172.762042][ T5829] netlink: 224 bytes leftover after parsing attributes in process `syz.3.584'. [ 172.780189][ T13] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 172.833608][ T13] usb 3-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 172.861675][ T26] audit: type=1326 audit(1721422378.793:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5834 comm="syz.0.587" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3d827b6b59 code=0x0 [ 172.862407][ T13] usb 3-1: config 0 interface 125 has no altsetting 0 [ 172.896661][ T13] usb 3-1: config 0 interface 125 has no altsetting 2 [ 173.032618][ T5840] netlink: 4 bytes leftover after parsing attributes in process `syz.3.588'. [ 173.058586][ T13] usb 3-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 173.081930][ T13] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.102184][ T13] usb 3-1: Product: syz [ 173.112093][ T13] usb 3-1: Manufacturer: syz [ 173.119453][ T13] usb 3-1: SerialNumber: syz [ 173.149175][ T13] usb 3-1: config 0 descriptor?? [ 173.210619][ T13] usb 3-1: selecting invalid altsetting 2 [ 173.434667][ T5832] loop4: detected capacity change from 0 to 40427 [ 173.551681][ T5832] F2FS-fs (loop4): invalid crc value [ 173.566125][ T7] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 173.820172][ T5818] udc-core: couldn't find an available UDC or it's busy [ 173.916409][ T5818] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 173.985505][ T5832] F2FS-fs (loop4): Found nat_bits in checkpoint [ 174.008548][ T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 174.138485][ T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 174.236149][ T7] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 174.287045][ T13] get_1284_register timeout [ 174.292410][ T13] uss720: probe of 3-1:0.125 failed with error -5 [ 174.312680][ T7] usb 4-1: New USB device found, idVendor=046d, idProduct=c294, bcdDevice= 0.00 [ 174.321875][ C0] usb 3-1: async_complete: urb error -104 [ 174.321952][ C0] usb 3-1: async_complete: urb error -104 [ 174.383399][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.403976][ T5832] F2FS-fs (loop4): Cannot turn on quotas: -2 on 0 [ 174.434785][ T5832] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 174.465735][ T7] usb 4-1: config 0 descriptor?? [ 174.495204][ T5818] udc-core: couldn't find an available UDC or it's busy [ 174.521946][ T5818] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 174.539038][ T5832] attempt to access beyond end of device [ 174.539038][ T5832] loop4: rw=2049, want=45104, limit=40427 [ 174.683228][ T5867] loop1: detected capacity change from 0 to 32768 [ 174.772110][ T5867] find_entry called with index = 0 [ 174.786708][ T5867] read_mapping_page failed! [ 174.801501][ T5867] ERROR: (device loop1): txCommit: [ 174.801501][ T5867] [ 174.822055][ T5867] ERROR: (device loop1): remounting filesystem as read-only [ 174.859482][ T5869] read_mapping_page failed! [ 174.864535][ T5869] ERROR: (device loop1): txCommit: [ 174.864535][ T5869] [ 174.882690][ T5865] loop0: detected capacity change from 0 to 32768 [ 174.979182][ T5874] udc-core: couldn't find an available UDC or it's busy [ 175.000516][ T7] logitech 0003:046D:C294.000B: hidraw0: USB HID v0.00 Device [HID 046d:c294] on usb-dummy_hcd.3-1/input0 [ 175.007019][ T5874] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 175.026025][ T7] logitech 0003:046D:C294.000B: no inputs found [ 175.040055][ T5865] XFS (loop0): Mounting V5 Filesystem [ 175.211058][ T5865] XFS (loop0): Ending clean mount [ 175.237731][ T7] usb 4-1: USB disconnect, device number 4 [ 175.276968][ T26] audit: type=1326 audit(1721422381.253:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5883 comm="syz.1.601" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbbb258ab59 code=0x0 [ 175.300189][ T5865] XFS (loop0): Quotacheck needed: Please wait. [ 175.352928][ T5865] XFS (loop0): Quotacheck: Done. [ 175.385089][ T26] audit: type=1326 audit(1721422381.353:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5883 comm="syz.1.601" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbbb258ab59 code=0x0 [ 175.414248][ T3621] XFS (loop0): Unmounting Filesystem [ 175.484817][ T5885] netlink: 224 bytes leftover after parsing attributes in process `syz.4.599'. [ 175.751357][ T5896] netlink: 4 bytes leftover after parsing attributes in process `syz.4.606'. [ 176.970255][ T4939] usb 3-1: USB disconnect, device number 13 [ 177.377968][ T5935] netlink: 4 bytes leftover after parsing attributes in process `syz.1.620'. [ 177.889885][ T5910] loop4: detected capacity change from 0 to 32768 [ 178.246623][ T5923] loop0: detected capacity change from 0 to 32768 [ 178.779067][ T5910] find_entry called with index = 0 [ 178.784706][ T5910] read_mapping_page failed! [ 178.794453][ T5910] ERROR: (device loop4): txCommit: [ 178.794453][ T5910] [ 178.805219][ T5910] ERROR: (device loop4): remounting filesystem as read-only [ 178.820607][ T5910] read_mapping_page failed! [ 178.825312][ T5910] ERROR: (device loop4): txCommit: [ 178.825312][ T5910] [ 178.870419][ T5923] XFS: ikeep mount option is deprecated. [ 178.881627][ T5923] XFS: noikeep mount option is deprecated. [ 178.961995][ T5963] netlink: 4 bytes leftover after parsing attributes in process `syz.1.632'. [ 179.029650][ T5923] XFS (loop0): Mounting V5 Filesystem [ 179.205476][ T5923] XFS (loop0): Ending clean mount [ 179.213037][ T5923] XFS (loop0): Quotacheck needed: Please wait. [ 179.297915][ T5923] XFS (loop0): Quotacheck: Done. [ 179.376145][ T4938] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 179.392434][ T5992] loop4: detected capacity change from 0 to 256 [ 180.741134][ T3621] XFS (loop0): Unmounting Filesystem [ 180.865942][ T3549] Bluetooth: hci0: command 0x0406 tx timeout [ 180.992707][ T5992] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00006005) [ 181.045013][ T5992] FAT-fs (loop4): error, invalid access to FAT (entry 0x00006005) [ 181.096220][ T4938] usb 3-1: Using ep0 maxpacket: 8 [ 181.216125][ T4938] usb 3-1: config 167 has too many interfaces: 202, using maximum allowed: 32 [ 181.256046][ T4938] usb 3-1: config 167 has 1 interface, different from the descriptor's value: 202 [ 181.416252][ T4938] usb 3-1: New USB device found, idVendor=1025, idProduct=005f, bcdDevice=fe.29 [ 181.457781][ T4938] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.499037][ T5997] loop1: detected capacity change from 0 to 32768 [ 181.505977][ T4938] usb 3-1: Product: syz [ 181.516475][ T4938] usb 3-1: Manufacturer: syz [ 181.536643][ T4938] usb 3-1: SerialNumber: syz [ 181.597780][ T4938] dvb-usb: found a 'Unknown USB1.1 DVB-T device ???? please report the name to the author' in warm state. [ 181.635507][ T5997] find_entry called with index = 0 [ 181.645043][ T5997] read_mapping_page failed! [ 181.645669][ T4938] dvb-usb: bulk message failed: -22 (3/0) [ 181.662897][ T5997] ERROR: (device loop1): txCommit: [ 181.662897][ T5997] [ 181.674050][ T6003] loop3: detected capacity change from 0 to 512 [ 181.691529][ T5997] ERROR: (device loop1): remounting filesystem as read-only [ 181.710825][ T6003] EXT4-fs (loop3): Unrecognized mount option "obj_type=T¯…" or missing value [ 181.732655][ T4938] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 181.753415][ T6028] read_mapping_page failed! [ 181.786176][ T4938] dvbdev: DVB: registering new adapter (Unknown USB1.1 DVB-T device ???? please report the name to the author) [ 181.811220][ T6028] ERROR: (device loop1): txCommit: [ 181.811220][ T6028] [ 181.825348][ T5965] capability: warning: `syz.2.633' uses 32-bit capabilities (legacy support in use) [ 181.856081][ T4938] usb 3-1: media controller created [ 181.900788][ T4938] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 181.953812][ T1397] ================================================================== [ 181.962253][ T1397] BUG: KASAN: use-after-free in copy_page_from_iter_atomic+0x8e3/0x1230 [ 181.970590][ T1397] Read of size 4096 at addr ffff88801ed89000 by task kworker/u4:4/1397 [ 181.978820][ T1397] [ 181.981136][ T1397] CPU: 1 PID: 1397 Comm: kworker/u4:4 Not tainted 5.15.163-syzkaller #0 [ 181.989460][ T1397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 181.999509][ T1397] Workqueue: loop1 loop_workfn [ 182.004281][ T1397] Call Trace: [ 182.007560][ T1397] [ 182.010492][ T1397] dump_stack_lvl+0x1e3/0x2d0 [ 182.015188][ T1397] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 182.020817][ T1397] ? _printk+0xd1/0x120 [ 182.024976][ T1397] ? __wake_up_klogd+0xcc/0x100 [ 182.029842][ T1397] ? panic+0x860/0x860 [ 182.033905][ T1397] ? _raw_spin_lock_irqsave+0xdd/0x120 [ 182.039370][ T1397] print_address_description+0x63/0x3b0 [ 182.044914][ T1397] ? copy_page_from_iter_atomic+0x8e3/0x1230 [ 182.050890][ T1397] kasan_report+0x16b/0x1c0 [ 182.055388][ T1397] ? copy_page_from_iter_atomic+0x8e3/0x1230 [ 182.061370][ T1397] kasan_check_range+0x27e/0x290 [ 182.066313][ T1397] ? copy_page_from_iter_atomic+0x8e3/0x1230 [ 182.072309][ T1397] memcpy+0x25/0x60 [ 182.076547][ T1397] copy_page_from_iter_atomic+0x8e3/0x1230 [ 182.082369][ T1397] ? shmem_getpage+0xa0/0xa0 [ 182.086957][ T1397] ? pipe_zero+0x4f0/0x4f0 [ 182.091368][ T1397] ? __lock_acquire+0x1295/0x1ff0 [ 182.096400][ T1397] generic_perform_write+0x33a/0x5b0 [ 182.101699][ T1397] ? grab_cache_page_write_begin+0x90/0x90 [ 182.107505][ T1397] ? file_remove_privs+0x610/0x610 [ 182.112616][ T1397] ? rwsem_write_trylock+0x166/0x210 [ 182.117904][ T1397] __generic_file_write_iter+0x243/0x4f0 [ 182.123538][ T1397] generic_file_write_iter+0xa7/0x1b0 [ 182.128912][ T1397] do_iter_readv_writev+0x594/0x7a0 [ 182.134112][ T1397] ? generic_file_rw_checks+0x260/0x260 [ 182.139656][ T1397] ? common_file_perm+0x17d/0x1d0 [ 182.144679][ T1397] ? fsnotify_perm+0x64/0x590 [ 182.149348][ T1397] ? security_file_permission+0x75/0xa0 [ 182.154979][ T1397] do_iter_write+0x1e6/0x760 [ 182.159568][ T1397] ? rcu_read_lock_any_held+0xb3/0x160 [ 182.165028][ T1397] ? vfs_iter_write+0x69/0xa0 [ 182.169718][ T1397] lo_write_bvec+0x297/0x740 [ 182.174311][ T1397] ? lo_rw_aio+0xd80/0xd80 [ 182.178729][ T1397] ? kthread_associate_blkcg+0x424/0x590 [ 182.184354][ T1397] ? _raw_spin_unlock_irq+0x1f/0x40 [ 182.189549][ T1397] loop_process_work+0x2309/0x2af0 [ 182.194682][ T1397] ? rcu_lock_release+0x20/0x20 [ 182.199543][ T1397] ? read_lock_is_recursive+0x10/0x10 [ 182.204917][ T1397] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 182.210901][ T1397] ? print_irqtrace_events+0x210/0x210 [ 182.216379][ T1397] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 182.222281][ T1397] ? do_raw_spin_unlock+0x137/0x8b0 [ 182.227494][ T1397] process_one_work+0x8a1/0x10c0 [ 182.232446][ T1397] ? worker_detach_from_pool+0x260/0x260 [ 182.238100][ T1397] ? _raw_spin_lock_irqsave+0x120/0x120 [ 182.243771][ T1397] ? kthread_data+0x4e/0xc0 [ 182.248276][ T1397] ? wq_worker_running+0x97/0x170 [ 182.253377][ T1397] worker_thread+0xaca/0x1280 [ 182.258082][ T1397] kthread+0x3f6/0x4f0 [ 182.262161][ T1397] ? rcu_lock_release+0x20/0x20 [ 182.267022][ T1397] ? kthread_blkcg+0xd0/0xd0 [ 182.271622][ T1397] ret_from_fork+0x1f/0x30 [ 182.276058][ T1397] [ 182.279155][ T1397] [ 182.281468][ T1397] The buggy address belongs to the page: [ 182.287093][ T1397] page:ffffea00007b6240 refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1ed89 [ 182.297320][ T1397] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 182.304439][ T1397] raw: 00fff00000000000 ffffea0001a531c8 ffffea0000666048 0000000000000000 [ 182.313105][ T1397] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 182.321676][ T1397] page dumped because: kasan: bad access detected [ 182.328080][ T1397] page_owner tracks the page as freed [ 182.333445][ T1397] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x100dc0(GFP_USER|__GFP_ZERO), pid 5997, ts 181625814023, free_ts 181953467623 [ 182.348200][ T1397] get_page_from_freelist+0x322a/0x33c0 [ 182.353778][ T1397] __alloc_pages+0x272/0x700 [ 182.358365][ T1397] lmLogInit+0x376/0x1c90 [ 182.362699][ T1397] lmLogOpen+0x552/0x1030 [ 182.367019][ T1397] jfs_mount_rw+0xe3/0x640 [ 182.371426][ T1397] jfs_fill_super+0x69f/0xc70 [ 182.376093][ T1397] mount_bdev+0x2c9/0x3f0 [ 182.380441][ T1397] legacy_get_tree+0xeb/0x180 [ 182.385110][ T1397] vfs_get_tree+0x88/0x270 [ 182.389525][ T1397] do_new_mount+0x2ba/0xb40 [ 182.394020][ T1397] __se_sys_mount+0x2d5/0x3c0 [ 182.398686][ T1397] do_syscall_64+0x3b/0xb0 [ 182.403106][ T1397] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 182.409006][ T1397] page last free stack trace: [ 182.413672][ T1397] free_unref_page_prepare+0xc34/0xcf0 [ 182.419132][ T1397] free_unref_page+0x95/0x2d0 [ 182.423807][ T1397] lmLogShutdown+0x4f8/0x960 [ 182.428417][ T1397] lmLogClose+0x293/0x530 [ 182.432745][ T1397] jfs_umount+0x298/0x370 [ 182.437066][ T1397] jfs_put_super+0x86/0x180 [ 182.441563][ T1397] generic_shutdown_super+0x136/0x2c0 [ 182.446931][ T1397] kill_block_super+0x7a/0xe0 [ 182.451596][ T1397] deactivate_locked_super+0xa0/0x110 [ 182.456960][ T1397] cleanup_mnt+0x44e/0x500 [ 182.461366][ T1397] task_work_run+0x129/0x1a0 [ 182.465948][ T1397] exit_to_user_mode_loop+0x106/0x130 [ 182.471308][ T1397] exit_to_user_mode_prepare+0xb1/0x140 [ 182.476842][ T1397] syscall_exit_to_user_mode+0x5d/0x240 [ 182.482383][ T1397] do_syscall_64+0x47/0xb0 [ 182.486791][ T1397] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 182.492677][ T1397] [ 182.494985][ T1397] Memory state around the buggy address: [ 182.500597][ T1397] ffff88801ed88f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 182.508645][ T1397] ffff88801ed88f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 182.516696][ T1397] >ffff88801ed89000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 182.524743][ T1397] ^ [ 182.528795][ T1397] ffff88801ed89080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 182.536843][ T1397] ffff88801ed89100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 182.544888][ T1397] ================================================================== [ 182.552935][ T1397] Disabling lock debugging due to kernel taint [ 182.560252][ T1397] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 182.567462][ T1397] CPU: 1 PID: 1397 Comm: kworker/u4:4 Tainted: G B 5.15.163-syzkaller #0 [ 182.577182][ T1397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 182.587240][ T1397] Workqueue: loop1 loop_workfn [ 182.592020][ T1397] Call Trace: [ 182.595318][ T1397] [ 182.598254][ T1397] dump_stack_lvl+0x1e3/0x2d0 [ 182.602947][ T1397] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 182.608612][ T1397] ? panic+0x860/0x860 [ 182.612695][ T1397] ? lock_release+0xb9/0x9a0 [ 182.617287][ T1397] ? rcu_is_watching+0x11/0xa0 [ 182.622045][ T1397] panic+0x318/0x860 [ 182.625938][ T1397] ? check_panic_on_warn+0x1d/0xa0 [ 182.631042][ T1397] ? fb_is_primary_device+0xd0/0xd0 [ 182.636234][ T1397] ? _raw_spin_unlock_irqrestore+0xd4/0x130 [ 182.642125][ T1397] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 182.648015][ T1397] ? _raw_spin_unlock+0x40/0x40 [ 182.652857][ T1397] ? print_memory_metadata+0xe2/0x140 [ 182.658231][ T1397] check_panic_on_warn+0x7e/0xa0 [ 182.663168][ T1397] ? copy_page_from_iter_atomic+0x8e3/0x1230 [ 182.669149][ T1397] end_report+0x6d/0xf0 [ 182.673297][ T1397] kasan_report+0x18e/0x1c0 [ 182.677877][ T1397] ? copy_page_from_iter_atomic+0x8e3/0x1230 [ 182.683854][ T1397] kasan_check_range+0x27e/0x290 [ 182.688777][ T1397] ? copy_page_from_iter_atomic+0x8e3/0x1230 [ 182.694748][ T1397] memcpy+0x25/0x60 [ 182.698552][ T1397] copy_page_from_iter_atomic+0x8e3/0x1230 [ 182.704449][ T1397] ? shmem_getpage+0xa0/0xa0 [ 182.709032][ T1397] ? pipe_zero+0x4f0/0x4f0 [ 182.713440][ T1397] ? __lock_acquire+0x1295/0x1ff0 [ 182.718479][ T1397] generic_perform_write+0x33a/0x5b0 [ 182.723763][ T1397] ? grab_cache_page_write_begin+0x90/0x90 [ 182.729561][ T1397] ? file_remove_privs+0x610/0x610 [ 182.734668][ T1397] ? rwsem_write_trylock+0x166/0x210 [ 182.739949][ T1397] __generic_file_write_iter+0x243/0x4f0 [ 182.745578][ T1397] generic_file_write_iter+0xa7/0x1b0 [ 182.750944][ T1397] do_iter_readv_writev+0x594/0x7a0 [ 182.756138][ T1397] ? generic_file_rw_checks+0x260/0x260 [ 182.761674][ T1397] ? common_file_perm+0x17d/0x1d0 [ 182.766687][ T1397] ? fsnotify_perm+0x64/0x590 [ 182.771356][ T1397] ? security_file_permission+0x75/0xa0 [ 182.776894][ T1397] do_iter_write+0x1e6/0x760 [ 182.781475][ T1397] ? rcu_read_lock_any_held+0xb3/0x160 [ 182.786931][ T1397] ? vfs_iter_write+0x69/0xa0 [ 182.791617][ T1397] lo_write_bvec+0x297/0x740 [ 182.796208][ T1397] ? lo_rw_aio+0xd80/0xd80 [ 182.800617][ T1397] ? kthread_associate_blkcg+0x424/0x590 [ 182.806240][ T1397] ? _raw_spin_unlock_irq+0x1f/0x40 [ 182.811442][ T1397] loop_process_work+0x2309/0x2af0 [ 182.816555][ T1397] ? rcu_lock_release+0x20/0x20 [ 182.821409][ T1397] ? read_lock_is_recursive+0x10/0x10 [ 182.826771][ T1397] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 182.832759][ T1397] ? print_irqtrace_events+0x210/0x210 [ 182.838207][ T1397] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 182.844092][ T1397] ? do_raw_spin_unlock+0x137/0x8b0 [ 182.849282][ T1397] process_one_work+0x8a1/0x10c0 [ 182.854220][ T1397] ? worker_detach_from_pool+0x260/0x260 [ 182.859848][ T1397] ? _raw_spin_lock_irqsave+0x120/0x120 [ 182.865393][ T1397] ? kthread_data+0x4e/0xc0 [ 182.869887][ T1397] ? wq_worker_running+0x97/0x170 [ 182.874900][ T1397] worker_thread+0xaca/0x1280 [ 182.879580][ T1397] kthread+0x3f6/0x4f0 [ 182.883641][ T1397] ? rcu_lock_release+0x20/0x20 [ 182.888479][ T1397] ? kthread_blkcg+0xd0/0xd0 [ 182.893057][ T1397] ret_from_fork+0x1f/0x30 [ 182.897492][ T1397] [ 182.900786][ T1397] Kernel Offset: disabled [ 182.905108][ T1397] Rebooting in 86400 seconds..