last executing test programs: 1m41.131042513s ago: executing program 0 (id=82): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0xffffffffffffff4e, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x20000080) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x76a9bba1a690db0f, 0x0, 0x0, {0xa, 0x0, 0x2005}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3cb140bb}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_POLICY={0x8}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5b5d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @rand_addr=' \x01\x00'}]}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'gre0\x00'}]}, 0x50}}, 0x0) 1m40.844826628s ago: executing program 0 (id=84): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x304, 0x3a}, "c4d65ab71f5ef2fe", "9e8e0000b535277602c8be9a8567828f711330ff2bb17b550800", "dc5da73f", "80031f0000000200"}, 0x38) 1m40.654276643s ago: executing program 0 (id=87): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1123102, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RGETLOCK(r2, &(0x7f00000000c0)=ANY=[], 0xffffff6a) splice(r1, 0x0, r0, 0x0, 0x40010003, 0x0) 1m40.170350713s ago: executing program 0 (id=92): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000002c0)=@file={0x1, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 1m39.868398859s ago: executing program 0 (id=94): mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = semget$private(0x0, 0x6, 0x385) semctl$SETVAL(r0, 0x0, 0x10, &(0x7f0000000040)=0x3) semop(r0, &(0x7f00000000c0)=[{0x0, 0x2, 0x800}, {0x1, 0x9, 0x1000}], 0x2) semctl$IPC_RMID(r0, 0x0, 0x0) 1m39.32495548s ago: executing program 0 (id=99): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m38.88224676s ago: executing program 32 (id=99): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.579241584s ago: executing program 2 (id=644): r0 = io_uring_setup(0x7d3, &(0x7f0000000580)={0x0, 0xddf7, 0x2, 0xfffffffe, 0x2d3}) sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x4001}, 0x4000000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) close_range(r0, r0, 0x0) clock_nanosleep(0xfffffff2, 0x0, &(0x7f0000000140)={0x77359400}, 0x0) 3.32358685s ago: executing program 2 (id=646): r0 = fanotify_init(0x200, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) fanotify_mark(r0, 0x161, 0x40000867, r1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000480)='fdinfo/3\x00') read$eventfd(r2, &(0x7f0000000280), 0x8) 3.083797905s ago: executing program 2 (id=648): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f00000002c0)=""/151, 0x97) close_range(r0, 0xffffffffffffffff, 0x0) 2.712326263s ago: executing program 4 (id=651): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) setgid(0xffffffffffffffff) 1.783734402s ago: executing program 4 (id=656): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000000)={0x1, 0x0, [{0x0, 0x2, 0x1, 0x0, @sint={0xfffffff8, 0x21}}]}) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f00000002c0)={0x0, 0x1}) 1.558026547s ago: executing program 4 (id=658): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005a40), r0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000005a80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000005ac0)={0x30, r2, 0x1, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x3, 0x70}}}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x40004}, 0x0) 1.467291639s ago: executing program 4 (id=659): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000009880)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[@op={0x18, 0x117, 0x3, 0x1}, @iv={0x18}], 0x30, 0x4800}], 0x1, 0x4000040) 1.320373882s ago: executing program 3 (id=661): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, &(0x7f00000006c0)={&(0x7f0000000280)={{@local, 0xd9}, {@local, 0x7}, 0x400, "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"}, 0x418, 0x823}) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r0, 0x7ac, &(0x7f0000000040)={0x0, 0x0, 0xfffffffb}) 1.276652742s ago: executing program 2 (id=662): r0 = socket$l2tp6(0xa, 0x2, 0x73) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x40020020) bind$l2tp6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000380)=0x10001, 0x4) syz_emit_ethernet(0x8e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe2800000000000000000000000000bbfe8000000000000000000000000000aa00000000", @ANYRES8], 0x0) 1.235466203s ago: executing program 4 (id=663): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc00006000000080002000500000014000600ff01000a00f2f3f31f000a0000000001060001"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, 0x0, &(0x7f0000000180)) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x24008000}, 0x4040000) 1.065786467s ago: executing program 3 (id=664): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000100)={r1, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000001c0)={r1, 0x2}, 0x8) 965.676209ms ago: executing program 4 (id=666): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x1, 0x54f4, &(0x7f000000ab00)="$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") r0 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r0, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x3, 0x7, 0x8000000200007, 0x282b, 0x20103, 0x80001, {0x200004, 0x10005c62, 0x203, 0x1000000000, 0x83, 0xd616, 0x10000006, 0x6, 0x0, 0x0, 0x0, 0xee00, 0xee00, 0x8, 0x1}}, {0x0, 0xa}}}, 0xa0) sendfile(r0, r0, &(0x7f0000000100)=0x4, 0x80000000) open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc) 872.755781ms ago: executing program 3 (id=667): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r1, &(0x7f0000001300)="92", 0x1, 0x10, &(0x7f00000014c0)={0xa, 0x4e1c, 0xfffffffc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000040)=0x7, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 788.090083ms ago: executing program 1 (id=668): r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000140)={0x18, 0x2, {0xffff, @loopback}}, 0x1e) r1 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r1, &(0x7f0000000000)={0x18, 0x2, {0x3, @local}}, 0x1e) connect$pptp(r1, &(0x7f0000000080)={0x18, 0x2, {0x0, @multicast2}}, 0x1e) 694.909235ms ago: executing program 3 (id=669): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2000, 0x1a8) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) fchdir(r0) open(&(0x7f0000000040)='./file0\x00', 0x84242, 0x1df2a23c5997fad0) 614.739396ms ago: executing program 1 (id=670): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x2}, [@printk={@ld}, @call={0x85, 0x0, 0x0, 0xf}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180900000000000000000000000000008500000050"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000838500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) 514.386889ms ago: executing program 1 (id=671): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x400) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000100)={0x200, 0x1, &(0x7f0000000680)=[r2], 0x0, 0x0, 0x0, 0x0, 0xd}) 491.303119ms ago: executing program 3 (id=672): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'vlan0\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xfffbffff, {0x0, 0x0, 0x0, r1, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xff}]}]}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040010) 342.847302ms ago: executing program 1 (id=673): r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000020c0), 0x2000413, &(0x7f00000002c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}}) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x112202a, 0x0) 275.399544ms ago: executing program 2 (id=674): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r2, 0x0, 0x5) 208.278015ms ago: executing program 1 (id=675): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x2a5, &(0x7f0000000040)={0x0, 0x8835c, 0xc000, 0x20000a, 0x33c}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x3, 0x3}, {0x0, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 93.171847ms ago: executing program 3 (id=676): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0xf, {[@main=@item_012={0x0, 0x0, 0xb}, @local=@item_4={0x3, 0x2, 0x1, "45501821"}, @global=@item_012={0x1, 0x1, 0x8, "f5"}, @global=@item_012={0x1, 0x1, 0x7, "86"}, @main=@item_4={0x3, 0x0, 0xb, "4070f43f"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, &(0x7f0000000000)={0x1, 0x200, 0x4, 0x4, 0x9, 0x9}) 17.039359ms ago: executing program 1 (id=677): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r2, 0x831, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x24000040) 0s ago: executing program 2 (id=678): socket$alg(0x26, 0x5, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000180)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r0, 0x0}]) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.119' (ED25519) to the list of known hosts. [ 89.463169][ T5763] cgroup: Unknown subsys name 'net' [ 89.589623][ T5763] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 91.381837][ T5763] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 93.075567][ T5778] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 93.084838][ T5778] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 93.095421][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 93.105633][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 93.118515][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 93.127661][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 93.137687][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 93.145387][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 93.155633][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 93.164962][ T51] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 93.172626][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 93.181015][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 93.199118][ T5783] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 93.209526][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 93.223549][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 93.255636][ T5787] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 93.266523][ T5787] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 93.274685][ T5787] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 93.293545][ T5778] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 93.303624][ T5778] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 93.329937][ T5787] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 93.344650][ T5787] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 93.353759][ T5787] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 93.368326][ T5787] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 93.887806][ T5775] chnl_net:caif_netlink_parms(): no params data found [ 93.907158][ T5784] chnl_net:caif_netlink_parms(): no params data found [ 94.044795][ T5779] chnl_net:caif_netlink_parms(): no params data found [ 94.103459][ T5780] chnl_net:caif_netlink_parms(): no params data found [ 94.165261][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.174922][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.183142][ T5775] bridge_slave_0: entered allmulticast mode [ 94.191129][ T5775] bridge_slave_0: entered promiscuous mode [ 94.214828][ T5784] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.222533][ T5784] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.230350][ T5784] bridge_slave_0: entered allmulticast mode [ 94.237887][ T5784] bridge_slave_0: entered promiscuous mode [ 94.256248][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.266693][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.275217][ T5775] bridge_slave_1: entered allmulticast mode [ 94.283771][ T5775] bridge_slave_1: entered promiscuous mode [ 94.298911][ T5784] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.307105][ T5784] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.318568][ T5784] bridge_slave_1: entered allmulticast mode [ 94.326401][ T5784] bridge_slave_1: entered promiscuous mode [ 94.418971][ T5784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.438527][ T5784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.458198][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.474094][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.553149][ T5780] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.561621][ T5780] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.569307][ T5780] bridge_slave_0: entered allmulticast mode [ 94.577813][ T5780] bridge_slave_0: entered promiscuous mode [ 94.616726][ T5779] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.624780][ T5779] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.632252][ T5779] bridge_slave_0: entered allmulticast mode [ 94.640278][ T5779] bridge_slave_0: entered promiscuous mode [ 94.649390][ T5780] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.657390][ T5780] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.665293][ T5780] bridge_slave_1: entered allmulticast mode [ 94.672963][ T5780] bridge_slave_1: entered promiscuous mode [ 94.685576][ T5784] team0: Port device team_slave_0 added [ 94.696151][ T5775] team0: Port device team_slave_0 added [ 94.706539][ T5775] team0: Port device team_slave_1 added [ 94.713490][ T5779] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.721478][ T5779] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.729335][ T5779] bridge_slave_1: entered allmulticast mode [ 94.739553][ T5779] bridge_slave_1: entered promiscuous mode [ 94.777803][ T5784] team0: Port device team_slave_1 added [ 94.823240][ T5780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.837178][ T5780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.877047][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.884440][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.911816][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.951646][ T5779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.964789][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.972537][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.000289][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.026000][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.033513][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.061109][ T5784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.075354][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.082881][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.109249][ T5784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.125005][ T5779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.159349][ T5780] team0: Port device team_slave_0 added [ 95.188650][ T5779] team0: Port device team_slave_0 added [ 95.197759][ T5780] team0: Port device team_slave_1 added [ 95.246196][ T5779] team0: Port device team_slave_1 added [ 95.265685][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.273369][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.273675][ T5787] Bluetooth: hci2: command tx timeout [ 95.300919][ T5780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.350377][ T51] Bluetooth: hci0: command tx timeout [ 95.356197][ T5787] Bluetooth: hci1: command tx timeout [ 95.362468][ T5775] hsr_slave_0: entered promiscuous mode [ 95.373238][ T5775] hsr_slave_1: entered promiscuous mode [ 95.417726][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.425500][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.452521][ T5780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.463794][ T5787] Bluetooth: hci3: command tx timeout [ 95.484578][ T5784] hsr_slave_0: entered promiscuous mode [ 95.492985][ T5784] hsr_slave_1: entered promiscuous mode [ 95.499634][ T5784] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 95.508417][ T5784] Cannot create hsr debugfs directory [ 95.527028][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.535232][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.562050][ T5779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.575374][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.583234][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.610099][ T5779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.676521][ T5780] hsr_slave_0: entered promiscuous mode [ 95.683584][ T5780] hsr_slave_1: entered promiscuous mode [ 95.690618][ T5780] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 95.698685][ T5780] Cannot create hsr debugfs directory [ 95.783314][ T5779] hsr_slave_0: entered promiscuous mode [ 95.790474][ T5779] hsr_slave_1: entered promiscuous mode [ 95.797356][ T5779] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 95.805466][ T5779] Cannot create hsr debugfs directory [ 96.235371][ T5775] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 96.257460][ T5775] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 96.269987][ T5775] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 96.281383][ T5775] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 96.350820][ T5784] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 96.365453][ T5784] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 96.397961][ T5784] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 96.426695][ T5784] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 96.483022][ T5780] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 96.498356][ T5780] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 96.534472][ T5780] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 96.547041][ T5780] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 96.612814][ T5779] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 96.637450][ T5779] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 96.648402][ T5779] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 96.670524][ T5779] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 96.809275][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.839328][ T5784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.909625][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.928037][ T5779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.951449][ T5784] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.967803][ T2919] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.975402][ T2919] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.006939][ T2919] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.014459][ T2919] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.041999][ T1141] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.049323][ T1141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.062756][ T1141] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.070189][ T1141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.098326][ T5780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.140883][ T5779] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.171233][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.178947][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.212260][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.220043][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.247408][ T5780] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.278945][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.286419][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.334750][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.342319][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.351488][ T5787] Bluetooth: hci2: command tx timeout [ 97.440248][ T5787] Bluetooth: hci1: command tx timeout [ 97.445917][ T5787] Bluetooth: hci0: command tx timeout [ 97.510634][ T5787] Bluetooth: hci3: command tx timeout [ 97.527591][ T5780] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 97.604068][ T177] cfg80211: failed to load regulatory.db [ 97.806901][ T5784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.964128][ T5784] veth0_vlan: entered promiscuous mode [ 97.998054][ T5784] veth1_vlan: entered promiscuous mode [ 98.045673][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.114220][ T5780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.157191][ T5784] veth0_macvtap: entered promiscuous mode [ 98.197317][ T5784] veth1_macvtap: entered promiscuous mode [ 98.213549][ T5779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.224827][ T5775] veth0_vlan: entered promiscuous mode [ 98.246806][ T5775] veth1_vlan: entered promiscuous mode [ 98.306303][ T5780] veth0_vlan: entered promiscuous mode [ 98.327585][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.358698][ T5780] veth1_vlan: entered promiscuous mode [ 98.374857][ T5775] veth0_macvtap: entered promiscuous mode [ 98.400765][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.416793][ T5775] veth1_macvtap: entered promiscuous mode [ 98.435083][ T5784] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.445251][ T5784] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.454735][ T5784] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.463693][ T5784] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.526229][ T5779] veth0_vlan: entered promiscuous mode [ 98.545724][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.560127][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.572414][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.602953][ T5780] veth0_macvtap: entered promiscuous mode [ 98.628627][ T5779] veth1_vlan: entered promiscuous mode [ 98.637486][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.651100][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.664472][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.699514][ T5780] veth1_macvtap: entered promiscuous mode [ 98.726135][ T5775] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.735310][ T5775] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.749080][ T5775] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.758459][ T5775] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.786539][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.798746][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.809331][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.823926][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.836386][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.882301][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.894242][ T989] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.903563][ T989] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.914437][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.926986][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.937699][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.952630][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.990215][ T5779] veth0_macvtap: entered promiscuous mode [ 99.004354][ T5780] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.014161][ T5780] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.023512][ T5780] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.034774][ T5780] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.077964][ T5779] veth1_macvtap: entered promiscuous mode [ 99.109265][ T1141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.129966][ T1141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.227564][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.242867][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.256713][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.271833][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.285016][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.298174][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.315273][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.358459][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.370496][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.383291][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.395450][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.405969][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.419061][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.430975][ T5787] Bluetooth: hci2: command tx timeout [ 99.438534][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.465227][ T5779] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.474885][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.484277][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.495193][ T5779] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.507759][ T5779] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.520834][ T5787] Bluetooth: hci0: command tx timeout [ 99.527499][ T5787] Bluetooth: hci1: command tx timeout [ 99.534370][ T5779] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.590892][ T5787] Bluetooth: hci3: command tx timeout [ 99.616702][ T1325] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.627446][ T1325] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.691934][ T1141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.713930][ T1141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.787592][ T5842] syz.3.4[5842]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 99.809324][ T5842] loop3: detected capacity change from 0 to 64 [ 99.825728][ T5842] ======================================================= [ 99.825728][ T5842] WARNING: The mand mount option has been deprecated and [ 99.825728][ T5842] and is ignored by this kernel. Remove the mand [ 99.825728][ T5842] option from the mount to silence this warning. [ 99.825728][ T5842] ======================================================= [ 99.924468][ T1141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.963846][ T1141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.017384][ T28] audit: type=1800 audit(1782935009.021:2): pid=5842 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4" name="bus" dev="loop3" ino=8 res=0 errno=0 [ 100.129283][ T1325] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.164012][ T1325] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.274806][ T31] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.309200][ T31] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.133452][ T5857] loop1: detected capacity change from 0 to 256 [ 101.170504][ T5857] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011f1c, chksum : 0x850fc7e5, utbl_chksum : 0xe619d30d) [ 101.275625][ T5857] exFAT-fs (loop1): error, exfat_zeroed_cluster: out of range(sect:224 len:8) [ 101.321531][ T5857] exFAT-fs (loop1): Filesystem has been set read-only [ 101.510957][ T51] Bluetooth: hci2: command tx timeout [ 101.590541][ T51] Bluetooth: hci1: command tx timeout [ 101.596117][ T51] Bluetooth: hci0: command tx timeout [ 101.670405][ T51] Bluetooth: hci3: command tx timeout [ 101.825566][ T5850] loop2: detected capacity change from 0 to 65536 [ 101.924075][ T5850] XFS (loop2): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 101.998097][ T5850] XFS (loop2): Ending clean mount [ 102.241668][ T51] Bluetooth: hci4: command 0x1003 tx timeout [ 102.248777][ T5787] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 102.355728][ T5779] XFS (loop2): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 102.443826][ T5886] capability: warning: `syz.3.16' uses 32-bit capabilities (legacy support in use) [ 102.702660][ T5891] loop1: detected capacity change from 0 to 1024 [ 103.204619][ T5899] Zero length message leads to an empty skb [ 103.320445][ T968] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 103.519908][ T968] usb 1-1: Using ep0 maxpacket: 16 [ 103.529812][ T968] usb 1-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.545210][ T968] usb 1-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 103.566400][ T968] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 103.579633][ T968] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.623944][ T5909] loop3: detected capacity change from 0 to 4096 [ 103.741014][ T5915] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 103.854294][ T5909] NILFS (loop3): nilfs_sufile_do_free: segment 9 is already clean [ 104.072409][ T5919] input: syz1 as /devices/virtual/input/input5 [ 104.113956][ T968] mcp2221 0003:04D8:00DD.0001: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 104.193671][ T5924] loop3: detected capacity change from 0 to 512 [ 104.324313][ T5924] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.370466][ T968] usb 1-1: USB disconnect, device number 2 [ 104.709313][ T5784] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.870584][ T5821] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 104.971480][ T5939] netlink: 868 bytes leftover after parsing attributes in process `syz.1.37'. [ 105.074511][ T5821] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.097565][ T5821] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 105.117290][ T5821] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 105.137698][ T5821] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 105.155754][ T5821] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.169520][ T5821] usb 3-1: config 0 descriptor?? [ 105.179495][ T5943] loop1: detected capacity change from 0 to 4096 [ 105.199883][ T968] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 105.220543][ T5943] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 105.366486][ T5943] ntfs3: loop1: ino=3, ntfs_set_state failed, -22. [ 105.389838][ T968] usb 4-1: Using ep0 maxpacket: 32 [ 105.410577][ T968] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.431105][ T968] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 105.444472][ T968] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 105.453694][ T968] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.464653][ T968] usb 4-1: config 0 descriptor?? [ 105.476816][ T31] ntfs3: loop1: ino=3, ntfs3_write_inode failed, -22. [ 105.490948][ T5775] ntfs3: loop1: ino=3, ntfs_set_state failed, -22. [ 105.498564][ T5775] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 105.523705][ T5775] ntfs3: loop1: ino=3, ntfs_set_state failed, -22. [ 105.532556][ T31] ntfs3: loop1: ino=3, ntfs3_write_inode failed, -22. [ 105.652808][ T5821] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 105.707164][ T5821] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 106.018582][ T177] usb 3-1: USB disconnect, device number 2 [ 106.023472][ T968] savu 0003:1E7D:2D5A.0003: hiddev1,hidraw1: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 106.124831][ T968] kernel write not supported for file /video36 (pid: 968 comm: kworker/1:2) [ 106.231714][ T5821] usb 4-1: USB disconnect, device number 2 [ 106.257168][ T5954] fido_id[5954]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 106.563030][ T5764] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 106.760337][ T5764] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 106.785281][ T5764] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 106.817314][ T5764] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 106.845107][ T5764] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 106.865509][ T5764] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 106.880486][ T5764] usb 1-1: Product: syz [ 106.890231][ T5764] usb 1-1: Manufacturer: syz [ 106.895346][ T5764] usb 1-1: SerialNumber: syz [ 107.028861][ T5963] loop2: detected capacity change from 0 to 32768 [ 107.057742][ T5963] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 107.123560][ T5963] XFS (loop2): Ending clean mount [ 107.135793][ T5764] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 107.163629][ T5963] XFS (loop2): Quotacheck needed: Please wait. [ 107.206483][ T968] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 107.275627][ T5963] XFS (loop2): Quotacheck: Done. [ 107.384351][ T177] usb 1-1: USB disconnect, device number 3 [ 107.411002][ T177] usblp0: removed [ 107.417933][ T968] usb 4-1: unable to get BOS descriptor or descriptor too short [ 107.442506][ T968] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 107.478451][ T968] usb 4-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 107.494404][ T968] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.520131][ T968] usb 4-1: Product: syz [ 107.529132][ T968] usb 4-1: Manufacturer: syz [ 107.552024][ T968] usb 4-1: SerialNumber: syz [ 107.615704][ T5779] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 107.700680][ T5764] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 107.804038][ T968] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 107.903090][ T5764] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 107.927769][ T5764] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 107.949153][ T5764] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 107.972774][ T5764] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 107.981299][ T5764] usb 2-1: SerialNumber: syz [ 108.209861][ T177] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 108.415150][ T177] usb 3-1: Using ep0 maxpacket: 8 [ 108.424466][ T177] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 108.433189][ T177] usb 3-1: config 179 has no interface number 0 [ 108.439974][ T177] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 108.451607][ T177] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 108.464865][ T177] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 108.484609][ T177] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 108.497118][ T177] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 108.511358][ T177] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 108.521397][ T177] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.536509][ T5978] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 108.600400][ T968] usb 4-1: failed to enable PITCH for EP 0x82 [ 108.608325][ T968] usb 4-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 108.617135][ T968] usb 4-1: clock source 0 is not valid, cannot use [ 108.626882][ T968] usb 4-1: 2:1: cannot get freq (v2/v3): err -71 [ 108.644549][ T968] usb 4-1: 2:1: cannot set freq 981794170 (v2/v3): err -71 [ 108.702083][ T5764] usb 2-1: 0:2 : does not exist [ 108.727128][ T968] usb 4-1: USB disconnect, device number 3 [ 108.778144][ T5764] usb 2-1: USB disconnect, device number 2 [ 109.084133][ T177] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input6 [ 109.113027][ T5989] udevd[5989]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 109.173239][ T5929] udevd[5929]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 109.426527][ T968] usb 3-1: USB disconnect, device number 3 [ 109.426545][ C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 109.441447][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 109.468854][ T968] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 109.888555][ T6004] Invalid ELF header magic: != ELF [ 110.230277][ T5994] loop1: detected capacity change from 0 to 32768 [ 110.280092][ T5994] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by syz.1.53 (5994) [ 110.425464][ T5994] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 110.480666][ T5994] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 110.518905][ T6002] loop0: detected capacity change from 0 to 32768 [ 110.521335][ T5994] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 110.556732][ T5994] BTRFS info (device loop1): use zstd compression, level 3 [ 110.577005][ T5994] BTRFS info (device loop1): using free space tree [ 110.666489][ T28] audit: type=1800 audit(1782935019.671:3): pid=6002 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.56" name="file1" dev="loop0" ino=4 res=0 errno=0 [ 110.845492][ T5994] BTRFS info (device loop1): enabling ssd optimizations [ 110.868278][ T5994] BTRFS info (device loop1): auto enabling async discard [ 111.140325][ T6033] Driver unsupported XDP return value 0 on prog (id 3) dev N/A, expect packet loss! [ 111.513938][ T5775] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 113.216390][ T6061] loop1: detected capacity change from 0 to 40427 [ 113.234836][ T6061] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504) [ 113.247721][ T6061] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 113.268387][ T6061] F2FS-fs (loop1): invalid crc value [ 113.313573][ T6061] F2FS-fs (loop1): Found nat_bits in checkpoint [ 113.403561][ T6078] syz.3.81[6078] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 113.403987][ T6078] syz.3.81[6078] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 113.434144][ T6061] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 113.456298][ T6080] gre0: entered promiscuous mode [ 113.464082][ T6061] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 113.472705][ T6080] gre0: entered allmulticast mode [ 113.567058][ T28] audit: type=1800 audit(1782935022.571:4): pid=6061 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.76" name="bus" dev="loop1" ino=10 res=0 errno=0 [ 113.669306][ T6061] syz.1.76: attempt to access beyond end of device [ 113.669306][ T6061] loop1: rw=34817, sector=77832, nr_sectors = 8 limit=40427 [ 113.705576][ T5846] kernel read not supported for file /video9 (pid: 5846 comm: kworker/1:4) [ 113.814444][ T5775] syz-executor: attempt to access beyond end of device [ 113.814444][ T5775] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 113.832275][ T51] Bluetooth: hci4: command 0xfc11 tx timeout [ 113.852618][ T5775] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 113.854641][ T5787] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 114.347562][ T6098] loop2: detected capacity change from 0 to 512 [ 114.438797][ T6098] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 114.653533][ T31] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 115.548541][ T31] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.772807][ T31] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.933075][ T31] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.065731][ T31] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.346164][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 116.360824][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 116.369615][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 116.381008][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 116.389047][ T51] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 116.407211][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 116.436638][ T6140] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 117.283856][ T5787] block nbd0: Receive control failed (result -32) [ 117.283879][ T51] block nbd0: Receive control failed (result -32) [ 117.387492][ T6159] loop3: detected capacity change from 0 to 2048 [ 117.407110][ T6162] loop1: detected capacity change from 0 to 512 [ 117.524086][ T6162] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.571216][ T6159] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 129: 0x32 != 0x7d [ 117.667453][ T6159] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 117.699457][ T6146] loop2: detected capacity change from 0 to 40427 [ 117.761716][ T6146] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 117.806312][ T6146] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 117.845092][ T6146] F2FS-fs (loop2): invalid crc value [ 117.877330][ T6146] F2FS-fs (loop2): Found nat_bits in checkpoint [ 118.021586][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.183313][ T6146] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 118.241664][ T6146] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 118.484700][ T6135] chnl_net:caif_netlink_parms(): no params data found [ 118.491816][ T5787] Bluetooth: hci1: command tx timeout [ 118.592549][ T6184] loop1: detected capacity change from 0 to 2048 [ 118.695821][ T6184] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 119.021436][ T6135] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.028818][ T6135] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.057599][ T6135] bridge_slave_0: entered allmulticast mode [ 119.075548][ T6135] bridge_slave_0: entered promiscuous mode [ 119.302382][ T6135] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.322238][ T6135] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.353457][ T6135] bridge_slave_1: entered allmulticast mode [ 119.380936][ T6135] bridge_slave_1: entered promiscuous mode [ 119.549940][ T31] hsr_slave_0: left promiscuous mode [ 119.579495][ T31] hsr_slave_1: left promiscuous mode [ 119.597243][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 119.615673][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 119.644141][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 119.664611][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 119.708916][ T31] bridge_slave_1: left allmulticast mode [ 119.716563][ T31] bridge_slave_1: left promiscuous mode [ 119.732443][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.772486][ T31] bridge_slave_0: left allmulticast mode [ 119.811924][ T31] bridge_slave_0: left promiscuous mode [ 119.818094][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.970290][ T31] veth1_macvtap: left promiscuous mode [ 119.990427][ T31] veth0_macvtap: left promiscuous mode [ 120.024018][ T31] veth1_vlan: left promiscuous mode [ 120.041481][ T31] veth0_vlan: left promiscuous mode [ 120.364747][ T6192] loop3: detected capacity change from 0 to 32768 [ 120.452309][ T6192] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 120.495757][ T6222] 9pnet: p9_errstr2errno: server reported unknown error [ 120.546383][ T6192] XFS (loop3): Ending clean mount [ 120.552053][ T5787] Bluetooth: hci1: command tx timeout [ 120.850196][ T6192] XFS (loop3): User initiated shutdown received. [ 120.877079][ T6192] XFS (loop3): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x105/0x150 (fs/xfs/xfs_fsops.c:491). Shutting down filesystem. [ 120.911897][ T6192] XFS (loop3): Please unmount the filesystem and rectify the problem(s) [ 120.983679][ T5784] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 121.660333][ T5824] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 121.853465][ T31] team0 (unregistering): Port device team_slave_1 removed [ 121.860359][ T5824] usb 4-1: Using ep0 maxpacket: 32 [ 121.878183][ T5824] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 121.902313][ T5824] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 121.915736][ T5824] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 121.928785][ T5824] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.942839][ T5824] usb 4-1: config 0 descriptor?? [ 121.956191][ T5824] hub 4-1:0.0: USB hub found [ 121.958214][ T31] team0 (unregistering): Port device team_slave_0 removed [ 122.039278][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 122.103068][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 122.167266][ T5824] hub 4-1:0.0: 1 port detected [ 122.593993][ T5824] usb 4-1: USB disconnect, device number 4 [ 122.610912][ T31] bond0 (unregistering): Released all slaves [ 122.630172][ T5787] Bluetooth: hci1: command tx timeout [ 122.819024][ T6135] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 122.853575][ T6135] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 122.983976][ T6135] team0: Port device team_slave_0 added [ 123.043032][ T6135] team0: Port device team_slave_1 added [ 123.093360][ T6135] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 123.117589][ T6135] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 123.153157][ T6135] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 123.200009][ T6135] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 123.211476][ T6135] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 123.315854][ T6135] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 123.541630][ T6135] hsr_slave_0: entered promiscuous mode [ 123.571997][ T6135] hsr_slave_1: entered promiscuous mode [ 123.593386][ T6135] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 123.620261][ T6135] Cannot create hsr debugfs directory [ 123.832301][ T6264] syz.3.138 (6264) used greatest stack depth: 19480 bytes left [ 124.096377][ T6275] loop2: detected capacity change from 0 to 512 [ 124.213414][ T6275] EXT4-fs error (device loop2): ext4_orphan_get:1404: inode #15: comm syz.2.141: inode has both inline data and extents flags [ 124.230261][ T6275] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.141: couldn't read orphan inode 15 (err -117) [ 124.297827][ T6280] loop1: detected capacity change from 0 to 2048 [ 124.321144][ T6275] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.377851][ T6280] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 124.465972][ T6135] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 124.526614][ T6135] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 124.580765][ T6135] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 124.611812][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.698124][ T6135] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 124.715507][ T5787] Bluetooth: hci1: command tx timeout [ 125.033778][ T5779] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.208761][ T6135] 8021q: adding VLAN 0 to HW filter on device bond0 [ 125.269071][ T6135] 8021q: adding VLAN 0 to HW filter on device team0 [ 125.315990][ T989] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.323422][ T989] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.371777][ T2919] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.379233][ T2919] bridge0: port 2(bridge_slave_1) entered forwarding state [ 125.443621][ T6298] loop2: detected capacity change from 0 to 8192 [ 125.468609][ T6298] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 125.483604][ T6298] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 125.493744][ T6298] REISERFS (device loop2): using ordered data mode [ 125.501231][ T6298] reiserfs: using flush barriers [ 125.518099][ T6298] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 125.542679][ T6298] REISERFS (device loop2): checking transaction log (loop2) [ 125.774327][ T6300] loop3: detected capacity change from 0 to 8192 [ 125.845372][ T6300] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 125.881139][ T6300] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 125.890724][ T6300] REISERFS (device loop3): using ordered data mode [ 125.899936][ T6300] reiserfs: using flush barriers [ 125.919234][ T6300] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 125.938833][ T6300] REISERFS (device loop3): checking transaction log (loop3) [ 125.977280][ T6298] REISERFS (device loop2): Using tea hash to sort names [ 126.027072][ T6298] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 126.229891][ T6300] REISERFS (device loop3): Using tea hash to sort names [ 126.270704][ T6300] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 126.600918][ T6135] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 127.483042][ T6135] veth0_vlan: entered promiscuous mode [ 127.533724][ T6135] veth1_vlan: entered promiscuous mode [ 127.687408][ T6135] veth0_macvtap: entered promiscuous mode [ 127.764023][ T6135] veth1_macvtap: entered promiscuous mode [ 127.866206][ T6135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.890053][ T6135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.908058][ T6135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.921342][ T6135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.931786][ T6135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.942939][ T6135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.969200][ T6135] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 127.997406][ T6135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 128.024057][ T6135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.035511][ T6135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 128.048015][ T6135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.058644][ T6135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 128.069672][ T6135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.087508][ T6135] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 128.127642][ T6135] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.145682][ T6135] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.158220][ T6135] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.173913][ T6135] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.398804][ T1325] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.412559][ T1325] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.488550][ T1325] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.514160][ T1325] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.569821][ T27] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 128.773375][ T27] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 128.809898][ T27] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 128.834737][ T27] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 128.861949][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.906053][ T6355] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 129.005128][ T6366] loop3: detected capacity change from 0 to 8192 [ 129.016682][ T27] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 129.082968][ T6366] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 129.191449][ T6366] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 129.255539][ T6366] REISERFS (device loop3): using ordered data mode [ 129.274827][ T5821] usb 3-1: USB disconnect, device number 4 [ 129.317164][ T6366] reiserfs: using flush barriers [ 129.347749][ T6366] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 129.447555][ T6366] REISERFS (device loop3): checking transaction log (loop3) [ 129.794169][ T6366] REISERFS (device loop3): Using tea hash to sort names [ 129.824028][ T6366] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 130.008014][ T6366] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [2 5 0x0 SD] (nlink == 1) not found (pos 2) [ 130.086975][ T6366] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [2 5 0x0 SD] (nlink == 1) not found (pos 2) [ 130.150137][ T6366] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [2 5 0x0 SD] (nlink == 1) not found (pos 2) [ 130.193204][ T6366] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [2 5 0x0 SD] (nlink == 1) not found (pos 2) [ 130.268196][ T6366] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [2 5 0x0 SD] (nlink == 1) not found (pos 2) [ 130.342470][ T6366] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [2 5 0x0 SD] (nlink == 1) not found (pos 2) [ 130.421907][ T6368] loop1: detected capacity change from 0 to 32768 [ 130.571830][ T6368] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 130.805233][ T6368] XFS (loop1): Ending clean mount [ 130.816175][ T6368] XFS (loop1): Quotacheck needed: Please wait. [ 130.959053][ T6368] XFS (loop1): Quotacheck: Done. [ 131.556305][ T6394] loop2: detected capacity change from 0 to 32768 [ 131.574331][ T6415] loop4: detected capacity change from 0 to 512 [ 131.598586][ T5775] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 131.616940][ T6415] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 131.665329][ T6394] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 131.760629][ T6415] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.813206][ T6415] ext4 filesystem being mounted at /4/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 131.919302][ T28] audit: type=1800 audit(1782935040.921:5): pid=6415 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.168" name="file2" dev="loop4" ino=16 res=0 errno=0 [ 131.984213][ T6394] XFS (loop2): Ending clean mount [ 132.104001][ T6135] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.370207][ T5779] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 133.193905][ T6443] veth0: entered allmulticast mode [ 133.258921][ T6432] loop3: detected capacity change from 0 to 32768 [ 133.350393][ T6432] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.170 (6432) [ 133.376735][ T6434] loop4: detected capacity change from 0 to 32768 [ 133.398872][ T6432] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 133.436369][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.452396][ T6434] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by syz.4.171 (6434) [ 133.454781][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.480934][ T6432] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 133.515186][ T6432] BTRFS info (device loop3): setting nodatasum [ 133.560138][ T6432] BTRFS info (device loop3): force zlib compression, level 3 [ 133.568254][ T6432] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8) [ 133.620193][ T6432] BTRFS info (device loop3): use lzo compression, level 0 [ 133.627853][ T6432] BTRFS info (device loop3): turning on flush-on-commit [ 133.679823][ T6432] BTRFS info (device loop3): enabling auto defrag [ 133.686580][ T6432] BTRFS info (device loop3): max_inline at 4096 [ 133.749906][ T6432] BTRFS info (device loop3): using free space tree [ 133.802253][ T6437] loop1: detected capacity change from 0 to 32768 [ 133.828179][ T5989] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by udevd (5989) [ 133.921649][ T6437] XFS (loop1): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 133.983172][ T6432] BTRFS info (device loop3): enabling ssd optimizations [ 134.259954][ T6437] XFS (loop1): Ending clean mount [ 134.346008][ T28] audit: type=1800 audit(1782935043.331:6): pid=6432 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.170" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 134.515109][ T23] kernel read not supported for file /sequencer (pid: 23 comm: kworker/1:0) [ 134.557268][ T6437] XFS (loop1): User initiated shutdown received. [ 134.570062][ T6437] XFS (loop1): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x105/0x150 (fs/xfs/xfs_fsops.c:491). Shutting down filesystem. [ 134.661271][ T6492] loop4: detected capacity change from 0 to 512 [ 134.668359][ T6437] XFS (loop1): Please unmount the filesystem and rectify the problem(s) [ 134.747112][ T6492] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 134.842024][ T6492] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 134.870178][ T5775] XFS (loop1): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 134.893896][ T6492] EXT4-fs (loop4): 1 truncate cleaned up [ 134.937874][ T6492] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.957222][ T6135] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.077753][ T5784] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 136.461153][ T6524] all (unregistering): Released all slaves [ 136.945830][ T6532] loop3: detected capacity change from 0 to 4096 [ 137.011544][ T6532] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [ 137.544747][ T6532] ntfs3: loop3: ino=1e, "file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" failed to parse mft record [ 137.969919][ T10] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 138.159952][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 138.189758][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 138.235954][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 138.253304][ T10] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 138.264848][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.276505][ T10] usb 2-1: config 0 descriptor?? [ 138.662870][ T6568] loop4: detected capacity change from 0 to 1764 [ 138.714607][ T10] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 138.763469][ T5989] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 138.793698][ T10] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 139.320198][ T6558] loop3: detected capacity change from 0 to 40427 [ 139.338592][ T6558] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 139.352482][ T6558] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 139.377436][ T6558] F2FS-fs (loop3): invalid crc value [ 139.576112][ T6583] netlink: 20 bytes leftover after parsing attributes in process `syz.2.201'. [ 139.714343][ T6558] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 139.729960][ T6558] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 140.194678][ T5989] udevd[5989]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 140.220848][ T6590] hsr0: entered allmulticast mode [ 140.226230][ T6590] hsr_slave_0: entered allmulticast mode [ 140.240079][ T5989] udevd[5989]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 140.259901][ T6590] hsr_slave_1: entered allmulticast mode [ 140.284205][ T6590] netlink: 4 bytes leftover after parsing attributes in process `syz.2.203'. [ 140.312452][ T6590] hsr_slave_0: left promiscuous mode [ 140.355134][ T6590] hsr_slave_1: left promiscuous mode [ 140.487866][ T6575] loop4: detected capacity change from 0 to 40427 [ 140.499222][ T6590] hsr0 (unregistering): left allmulticast mode [ 140.525038][ T6575] F2FS-fs (loop4): invalid crc value [ 140.553157][ T6575] F2FS-fs (loop4): Found nat_bits in checkpoint [ 140.758469][ T6575] F2FS-fs (loop4): Start checkpoint disabled! [ 140.821582][ T6575] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 140.900162][ T968] usb 2-1: USB disconnect, device number 3 [ 140.972638][ T6598] loop2: detected capacity change from 0 to 64 [ 141.336125][ T49] kworker/u4:3: attempt to access beyond end of device [ 141.336125][ T49] loop4: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 141.336304][ T6604] loop2: detected capacity change from 0 to 7 [ 141.362705][ T49] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 141.406911][ T49] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 141.808582][ T6595] loop3: detected capacity change from 0 to 40427 [ 141.850271][ T6595] F2FS-fs (loop3): heap/no_heap options were deprecated [ 141.865579][ T6611] loop1: detected capacity change from 0 to 2048 [ 141.878516][ T6595] F2FS-fs (loop3): invalid crc value [ 141.905055][ T6595] F2FS-fs (loop3): Found nat_bits in checkpoint [ 141.945860][ T6615] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 142.055800][ T6595] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 142.231389][ T6611] syz.1.212 (6611) used greatest stack depth: 19344 bytes left [ 142.271459][ T6619] syz.3.202: attempt to access beyond end of device [ 142.271459][ T6619] loop3: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 142.348372][ T6621] loop2: detected capacity change from 0 to 1024 [ 142.491279][ T5784] syz-executor: attempt to access beyond end of device [ 142.491279][ T5784] loop3: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 142.544688][ T5784] F2FS-fs (loop3): Remounting filesystem read-only [ 142.584677][ T6621] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 142.610404][ T6621] hfsplus: xattr searching failed [ 142.623359][ T6627] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 142.632834][ T6627] hfsplus: xattr search failed [ 142.679990][ T5821] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 142.710916][ T6626] loop1: detected capacity change from 0 to 4096 [ 142.727012][ T6626] ntfs: (device loop1): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 142.750259][ T1141] hfsplus: b-tree write err: -5, ino 25 [ 142.756192][ T1141] hfsplus: b-tree write err: -5, ino 4 [ 142.767778][ T1141] hfsplus: b-tree write err: -5, ino 2 [ 142.784460][ T1141] hfsplus: b-tree write err: -5, ino 28 [ 142.880029][ T5821] usb 5-1: Using ep0 maxpacket: 8 [ 142.902015][ T5821] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 142.902620][ T6626] ntfs: volume version 3.1. [ 142.936166][ T5821] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 142.961452][ T5821] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 142.976258][ T5821] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 142.996676][ T5821] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 143.006950][ T5821] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.279979][ T5821] usb 5-1: GET_CAPABILITIES returned 0 [ 143.314075][ T5821] usbtmc 5-1:16.0: can't read capabilities [ 143.365177][ T6635] loop2: detected capacity change from 0 to 2048 [ 143.455724][ T6635] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 143.519595][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 143.550265][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 143.559723][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 143.568985][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 143.650113][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 143.660199][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 143.669968][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 143.785369][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 143.794740][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 143.806877][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 143.816902][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 143.826320][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 143.835659][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 143.847505][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 143.856942][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 143.866536][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 143.890912][ T5821] usb 5-1: USB disconnect, device number 2 [ 144.149881][ T968] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 144.379880][ T968] usb 4-1: Using ep0 maxpacket: 16 [ 144.387500][ T968] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 144.422393][ T968] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 144.472705][ T968] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 144.503869][ T968] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 144.524389][ T968] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 144.541408][ T968] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 144.552205][ T968] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 144.561067][ T968] usb 4-1: Manufacturer: syz [ 144.587634][ T968] usb 4-1: config 0 descriptor?? [ 144.598244][ T6659] loop2: detected capacity change from 0 to 8 [ 144.688250][ T6659] SQUASHFS error: Failed to read block 0x657: -5 [ 144.710358][ T6659] SQUASHFS error: Unable to read metadata cache entry [655] [ 144.734594][ T6659] SQUASHFS error: Unable to read directory block [655:3] [ 144.990080][ T968] rc_core: IR keymap rc-hauppauge not found [ 144.999434][ T6664] loop1: detected capacity change from 0 to 4096 [ 145.012654][ T968] Registered IR keymap rc-empty [ 145.024025][ T968] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 145.058766][ T6664] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 145.084768][ T968] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 145.128203][ T968] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 145.175027][ T968] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input7 [ 145.251914][ T968] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 145.305991][ T6672] input: syz0 as /devices/virtual/input/input8 [ 145.312681][ T968] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 145.371599][ T968] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 145.421497][ T968] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 145.475707][ T968] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 145.529906][ T968] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 145.566262][ T968] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 145.629933][ T968] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 145.690235][ T968] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 145.719186][ T6676] loop1: detected capacity change from 0 to 2048 [ 145.750211][ T968] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 145.787544][ T968] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 145.831645][ T6676] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.845667][ T968] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 145.899604][ T968] usb 4-1: USB disconnect, device number 5 [ 145.905971][ T6676] ext4 filesystem being mounted at /63/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 146.038216][ T6667] loop4: detected capacity change from 0 to 32768 [ 146.071515][ T6683] loop3: detected capacity change from 0 to 512 [ 146.120978][ T6676] fs-verity: sha512 using implementation "sha512-avx2" [ 146.131509][ T6683] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 146.156640][ T6667] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 146.218277][ T6683] EXT4-fs (loop3): 1 truncate cleaned up [ 146.264848][ T6683] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 146.392822][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.496774][ T6667] XFS (loop4): Ending clean mount [ 146.543535][ T6667] XFS (loop4): Quotacheck needed: Please wait. [ 146.668113][ T6699] syz.1.235 uses obsolete (PF_INET,SOCK_PACKET) [ 146.677201][ T5784] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.702720][ T6667] XFS (loop4): Quotacheck: Done. [ 147.121938][ T6135] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 147.186915][ T6711] capability: warning: `syz.2.240' uses deprecated v2 capabilities in a way that may be insecure [ 147.409242][ T6713] loop1: detected capacity change from 0 to 1024 [ 148.144671][ T6728] warning: `syz.4.247' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 148.412031][ T6738] loop1: detected capacity change from 0 to 16 [ 148.434670][ T6734] syzkaller1: entered promiscuous mode [ 148.469846][ T6734] syzkaller1: entered allmulticast mode [ 148.494322][ T6738] erofs: (device loop1): mounted with root inode @ nid 36. [ 148.590261][ T6738] overlayfs: failed to clone lowerpath [ 148.746424][ T6715] loop2: detected capacity change from 0 to 32768 [ 148.876584][ T6715] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 149.067557][ T6757] loop1: detected capacity change from 0 to 1024 [ 149.130669][ T6757] EXT4-fs: Ignoring removed orlov option [ 149.147790][ T6715] XFS (loop2): Ending clean mount [ 149.201398][ T6757] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 149.637915][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.917868][ T6772] loop4: detected capacity change from 0 to 4096 [ 150.259095][ T6784] loop3: detected capacity change from 0 to 512 [ 150.371994][ T6784] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.259: invalid indirect mapped block 256 (level 2) [ 150.463751][ T6784] EXT4-fs (loop3): 2 truncates cleaned up [ 150.471557][ T6784] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.638704][ T5784] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.003842][ T5779] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 151.248756][ T6807] input: syz0 as /devices/virtual/input/input9 [ 151.544866][ T6816] loop2: detected capacity change from 0 to 256 [ 151.605843][ T6816] exfat: Deprecated parameter 'utf8' [ 151.626343][ T6821] netlink: 104 bytes leftover after parsing attributes in process `syz.1.269'. [ 151.659483][ T6816] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 151.876679][ T6825] overlayfs: failed to clone upperpath [ 152.347517][ T6832] loop1: detected capacity change from 0 to 8192 [ 152.619619][ T6818] loop4: detected capacity change from 0 to 32768 [ 152.787576][ T6818] XFS (loop4): DAX unsupported by block device. Turning off DAX. [ 152.815205][ T6818] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 153.047153][ T6818] XFS (loop4): Ending clean mount [ 153.122806][ T6818] XFS (loop4): Quotacheck needed: Please wait. [ 153.348977][ T6818] XFS (loop4): Quotacheck: Done. [ 153.678163][ T6135] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 154.217503][ T6853] loop1: detected capacity change from 0 to 32768 [ 154.301753][ T6853] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.274 (6853) [ 154.376491][ T6853] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 154.404950][ T6853] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 154.414458][ T6853] BTRFS info (device loop1): enabling auto defrag [ 154.430265][ T6853] BTRFS info (device loop1): max_inline at 4096 [ 154.436777][ T6853] BTRFS info (device loop1): using free space tree [ 154.743164][ T6897] loop2: detected capacity change from 0 to 512 [ 154.760205][ T6853] BTRFS info (device loop1): enabling ssd optimizations [ 154.798673][ T6853] BTRFS info (device loop1): auto enabling async discard [ 154.887322][ T6897] EXT4-fs error (device loop2): ext4_iget_extra_inode:4739: inode #15: comm syz.2.283: corrupted in-inode xattr: invalid ea_ino [ 154.931867][ T6897] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.283: couldn't read orphan inode 15 (err -117) [ 155.003085][ T6897] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 155.139304][ T6897] EXT4-fs (loop2): shut down requested (2) [ 155.215455][ T6914] loop3: detected capacity change from 0 to 64 [ 155.345959][ T5779] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.693480][ T5775] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 155.783118][ T6924] loop3: detected capacity change from 0 to 2048 [ 155.826552][ T6924] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 160: 0xa1 != 0xd4 [ 155.861702][ T6924] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 156.492204][ T6942] gretap0: entered promiscuous mode [ 157.169197][ T6961] loop2: detected capacity change from 0 to 256 [ 157.236971][ T6961] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 157.281010][ T6961] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 157.403951][ T6961] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 157.559505][ T6940] loop3: detected capacity change from 0 to 32768 [ 159.325582][ T6986] loop2: detected capacity change from 0 to 32768 [ 159.412029][ T6986] XFS (loop2): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 159.544080][ T6986] XFS (loop2): Ending clean mount [ 159.770377][ T7003] loop1: detected capacity change from 0 to 32768 [ 159.823733][ T5779] XFS (loop2): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 159.974791][ T7003] XFS (loop1): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 160.066847][ T7003] XFS (loop1): Ending clean mount [ 160.216706][ T5824] XFS (loop1): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xd0, xfs_bnobt block 0x4 [ 160.257956][ T5824] XFS (loop1): Unmount and run xfs_repair [ 160.274902][ T5824] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 160.294315][ T5824] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff AB3B............ [ 160.315642][ T5824] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10 ................ [ 160.339847][ T5824] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a .7.nt.N..._.'K.: [ 160.358927][ T5824] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01 .....;%......... [ 160.395166][ T5824] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0 ........... .... [ 160.419811][ T5824] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 160.445251][ T5824] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 160.445309][ T5824] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 160.445640][ T7003] XFS (loop1): metadata I/O error in "xfs_btree_read_buf_block+0x1df/0x2e0" at daddr 0x4 len 4 error 74 [ 160.472479][ T7003] XFS (loop1): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x519/0x8b0 (fs/xfs/xfs_trans_buf.c:296). Shutting down filesystem. [ 160.472546][ T7003] XFS (loop1): Please unmount the filesystem and rectify the problem(s) [ 160.595723][ T5775] XFS (loop1): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 161.115969][ T7072] loop4: detected capacity change from 0 to 2048 [ 161.268603][ T7076] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 162.315089][ T7101] loop4: detected capacity change from 0 to 2048 [ 162.411320][ T7101] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 162.471350][ T7108] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 162.477801][ T7111] loop2: detected capacity change from 0 to 64 [ 162.505994][ T7111] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing [ 162.643565][ T7092] loop3: detected capacity change from 0 to 32768 [ 162.659402][ T6135] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.795431][ T7092] JBD2: Ignoring recovery information on journal [ 162.839830][ T10] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 162.942922][ T7092] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 163.030060][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 163.124275][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 163.145630][ T10] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 163.163957][ T10] usb 2-1: can't read configurations, error -71 [ 163.418525][ T5784] ocfs2: Unmounting device (7,3) on (node local) [ 163.715348][ T7133] netlink: 'syz.1.345': attribute type 11 has an invalid length. [ 163.853404][ T7134] loop3: detected capacity change from 0 to 4096 [ 163.889873][ T7134] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 163.993194][ T7134] ntfs3: loop3: Failed to initialize $Extend/$Reparse. [ 164.176007][ T7128] loop2: detected capacity change from 0 to 40427 [ 164.208227][ T7128] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504) [ 164.221664][ T7128] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 164.244913][ T7128] F2FS-fs (loop2): heap/no_heap options were deprecated [ 164.265661][ T7128] F2FS-fs (loop2): invalid crc value [ 164.290701][ T5784] ntfs3: loop3: ino=1a, ntfs_sync_fs failed, -22. [ 164.355908][ T7128] F2FS-fs (loop2): Found nat_bits in checkpoint [ 164.466311][ T7144] netlink: 14 bytes leftover after parsing attributes in process `syz.4.349'. [ 164.604508][ T7128] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 164.634525][ T7128] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 164.682649][ T7146] loop3: detected capacity change from 0 to 8192 [ 164.725844][ T7146] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 164.759828][ T7146] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 164.810095][ T7146] REISERFS (device loop3): using ordered data mode [ 164.829544][ T7146] reiserfs: using flush barriers [ 164.868803][ T7146] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 164.967646][ T7146] REISERFS (device loop3): checking transaction log (loop3) [ 164.988348][ T5779] syz-executor: attempt to access beyond end of device [ 164.988348][ T5779] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 165.002370][ T7146] REISERFS (device loop3): Using r5 hash to sort names [ 165.030750][ T7146] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 165.058691][ T5779] F2FS-fs (loop2): Remounting filesystem read-only [ 165.389949][ T5764] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 165.569950][ T5764] usb 5-1: Using ep0 maxpacket: 16 [ 165.578972][ T5764] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 50077, setting to 1024 [ 165.612912][ T5764] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 165.625159][ T7163] vivid-001: disconnect [ 165.635338][ T7162] vivid-001: reconnect [ 165.652567][ T5764] usb 5-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 165.666149][ T5764] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.684565][ T5764] usb 5-1: config 0 descriptor?? [ 165.820413][ T10] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 165.964435][ T7169] netlink: 8 bytes leftover after parsing attributes in process `syz.3.359'. [ 166.039906][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 166.057456][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 166.068299][ T10] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 166.087559][ T10] usb 2-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 166.097698][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.115390][ T10] usb 2-1: Product: syz [ 166.124097][ T5764] hid-picolcd 0003:04D8:C002.0005: unknown main item tag 0x7 [ 166.137902][ T10] usb 2-1: Manufacturer: syz [ 166.143977][ T10] usb 2-1: SerialNumber: syz [ 166.149795][ T177] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 166.158777][ T5764] hid-picolcd 0003:04D8:C002.0005: unknown main item tag 0x0 [ 166.171315][ T5764] hid-picolcd 0003:04D8:C002.0005: unknown main item tag 0x1 [ 166.178842][ T5764] hid-picolcd 0003:04D8:C002.0005: unknown main item tag 0xd [ 166.248426][ T7173] netlink: 'syz.3.361': attribute type 5 has an invalid length. [ 166.260722][ T5764] hid-picolcd 0003:04D8:C002.0005: No report with id 0x11 found [ 166.361061][ T5824] usb 5-1: USB disconnect, device number 3 [ 166.385604][ T177] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 166.412526][ T177] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 166.441582][ T10] usb 2-1: Audio class v2/v3 interfaces need an interface association [ 166.449943][ T177] usb 3-1: config 220 has no interface number 2 [ 166.456440][ T177] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 166.473151][ T10] snd-usb-audio: probe of 2-1:1.0 failed with error -22 [ 166.485440][ T177] usb 3-1: config 220 interface 0 has no altsetting 0 [ 166.492602][ T177] usb 3-1: config 220 interface 76 has no altsetting 0 [ 166.499913][ T177] usb 3-1: config 220 interface 1 has no altsetting 0 [ 166.511399][ T177] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 166.521718][ T177] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.538341][ T177] usb 3-1: Product: syz [ 166.543504][ T177] usb 3-1: Manufacturer: syz [ 166.548432][ T177] usb 3-1: SerialNumber: syz [ 166.607047][ T7177] loop3: detected capacity change from 0 to 512 [ 166.630010][ T7177] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 166.824071][ T177] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 166.831966][ T177] usb 3-1: No valid video chain found. [ 166.838016][ T177] usb 3-1: selecting invalid altsetting 0 [ 166.847835][ T10] usb 2-1: 2:1 : invalid Cluster Descriptor size [ 166.876218][ T177] usb 3-1: selecting invalid altsetting 0 [ 166.889209][ T177] usbtest: probe of 3-1:220.1 failed with error -22 [ 166.923313][ T177] usb 3-1: USB disconnect, device number 5 [ 167.115743][ T5787] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 167.124897][ T5787] Bluetooth: hci0: Injecting HCI hardware error event [ 167.137273][ T51] Bluetooth: hci0: hardware error 0x00 [ 167.212459][ T5846] usb 2-1: USB disconnect, device number 6 [ 167.819923][ T5846] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 168.042965][ T5846] usb 5-1: config 0 has an invalid interface number: 255 but max is 0 [ 168.070960][ T5846] usb 5-1: config 0 has no interface number 0 [ 168.085941][ T5846] usb 5-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 168.098392][ T5846] usb 5-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 168.119023][ T5846] usb 5-1: config 0 interface 255 has no altsetting 0 [ 168.126761][ T5846] usb 5-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 168.142801][ T5846] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.163091][ T5846] usb 5-1: config 0 descriptor?? [ 168.179197][ T5846] ums-realtek 5-1:0.255: USB Mass Storage device detected [ 168.314905][ T7209] loop1: detected capacity change from 0 to 2048 [ 168.340180][ T5821] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 168.386239][ T7209] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.468324][ T5846] usb 5-1: USB disconnect, device number 4 [ 168.472633][ T7214] netlink: 40 bytes leftover after parsing attributes in process `syz.3.377'. [ 168.512401][ T7214] (unnamed net_device) (uninitialized): option mode: invalid value (68) [ 168.524982][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.539891][ T5821] usb 3-1: Using ep0 maxpacket: 8 [ 168.573278][ T5821] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 168.604711][ T5821] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.649770][ T5821] usb 3-1: Product: syz [ 168.654943][ T5821] usb 3-1: Manufacturer: syz [ 168.675308][ T5821] usb 3-1: SerialNumber: syz [ 168.700685][ T5821] usb 3-1: config 0 descriptor?? [ 168.721860][ T5821] gspca_main: se401-2.14.0 probing 047d:5003 [ 169.137810][ T7225] loop3: detected capacity change from 0 to 4096 [ 169.164745][ T5821] gspca_se401: Wrong descriptor type [ 169.190955][ T51] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 169.224180][ T7225] EXT4-fs (loop3): Test dummy encryption mode enabled [ 169.251513][ T7230] netlink: 24 bytes leftover after parsing attributes in process `syz.4.384'. [ 169.275452][ T7225] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.394497][ T177] usb 3-1: USB disconnect, device number 6 [ 169.533149][ T5784] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.653084][ T7242] trusted_key: syz.1.390 sent an empty control message without MSG_MORE. [ 169.787612][ T7244] loop3: detected capacity change from 0 to 2048 [ 169.815645][ T7244] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 170.124735][ T5821] IPVS: starting estimator thread 0... [ 170.134110][ T7252] input: syz1 as /devices/virtual/input/input10 [ 170.238726][ T7254] loop1: detected capacity change from 0 to 8192 [ 170.250525][ T7255] IPVS: using max 16 ests per chain, 38400 per kthread [ 170.322114][ T7254] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 170.341399][ T7254] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 170.351694][ T7254] REISERFS (device loop1): using ordered data mode [ 170.358394][ T7254] reiserfs: using flush barriers [ 170.369019][ T7254] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 170.396693][ T7254] REISERFS (device loop1): checking transaction log (loop1) [ 170.727796][ T7254] REISERFS (device loop1): Using tea hash to sort names [ 170.761792][ T7254] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 171.505500][ T7286] netlink: 8 bytes leftover after parsing attributes in process `syz.4.407'. [ 171.603256][ T7289] loop1: detected capacity change from 0 to 1024 [ 171.631570][ T7289] EXT4-fs: Ignoring removed bh option [ 171.637251][ T7289] EXT4-fs: Ignoring removed bh option [ 171.797412][ T7289] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.901630][ T7289] Bluetooth: MGMT ver 1.22 [ 171.982316][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.498678][ T7308] pim6reg: entered allmulticast mode [ 172.531516][ T7308] pim6reg: left allmulticast mode [ 172.910125][ T7306] loop1: detected capacity change from 0 to 32768 [ 172.953170][ T7306] JBD2: Ignoring recovery information on journal [ 173.009094][ T7306] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 173.150078][ T5846] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 173.374830][ T5846] usb 4-1: config 0 interface 0 has no altsetting 0 [ 173.394632][ T5846] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 173.419891][ T5846] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.448733][ T5846] usb 4-1: config 0 descriptor?? [ 173.500974][ T5775] ocfs2: Unmounting device (7,1) on (node local) [ 173.793838][ T7316] loop2: detected capacity change from 0 to 32768 [ 173.917092][ T5846] pyra 0003:1E7D:2CF6.0006: unknown main item tag 0x7 [ 173.921796][ T28] audit: type=1800 audit(1782935082.921:7): pid=7316 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.418" name="file1" dev="loop2" ino=7 res=0 errno=0 [ 173.943176][ T5846] pyra 0003:1E7D:2CF6.0006: unknown main item tag 0x2 [ 173.965532][ T7324] loop1: detected capacity change from 0 to 128 [ 173.992595][ T5846] pyra 0003:1E7D:2CF6.0006: unbalanced collection at end of report description [ 174.020726][ T7324] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 174.021711][ T5846] pyra 0003:1E7D:2CF6.0006: parse failed [ 174.059956][ T5846] pyra: probe of 0003:1E7D:2CF6.0006 failed with error -22 [ 174.177408][ T177] usb 4-1: USB disconnect, device number 6 [ 174.190512][ T7324] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1) [ 174.226391][ T7324] FAT-fs (loop1): Filesystem has been set read-only [ 174.251843][ T7324] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1) [ 174.281002][ T7324] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1) [ 174.310195][ T7324] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1) [ 174.414734][ T5775] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 174.425537][ T7327] loop2: detected capacity change from 0 to 256 [ 174.564204][ T7327] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x39601bbf, utbl_chksum : 0xe619d30d) [ 174.722078][ T7321] loop4: detected capacity change from 0 to 40427 [ 174.787577][ T7321] F2FS-fs (loop4): invalid crc value [ 174.837630][ T7321] F2FS-fs (loop4): Found nat_bits in checkpoint [ 175.060150][ T7321] F2FS-fs (loop4): Start checkpoint disabled! [ 175.142566][ T7335] loop3: detected capacity change from 0 to 4096 [ 175.172222][ T7321] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 175.193943][ T7335] EXT4-fs (loop3): Test dummy encryption mode enabled [ 175.262915][ T7321] F2FS-fs (loop4): Stopped filesystem due to reason: 0 [ 175.275641][ T7335] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.742518][ T7335] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 175.916601][ T5784] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.583322][ T7368] input: syz0 as /devices/virtual/input/input11 [ 176.617909][ T7368] input: failed to attach handler leds to device input11, error: -6 [ 176.973764][ T7380] hugetlbfs: syz.4.441 (7380): Using mlock ulimits for SHM_HUGETLB is obsolete [ 177.163680][ T7382] loop2: detected capacity change from 0 to 4096 [ 177.233667][ T7382] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 177.310404][ T28] audit: type=1800 audit(1782935086.311:8): pid=7382 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.442" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 177.419784][ T968] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 177.505209][ T5779] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.615049][ T968] usb 2-1: config 0 has an invalid interface number: 50 but max is 0 [ 177.630653][ T968] usb 2-1: config 0 has no interface number 0 [ 177.653000][ T968] usb 2-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 177.692615][ T968] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 177.720959][ T968] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.729483][ T968] usb 2-1: Product: syz [ 177.769758][ T968] usb 2-1: Manufacturer: syz [ 177.774886][ T968] usb 2-1: SerialNumber: syz [ 177.803447][ T968] usb 2-1: config 0 descriptor?? [ 177.838082][ T968] yurex 2-1:0.50: USB YUREX device now attached to Yurex #0 [ 178.057152][ T7389] loop3: detected capacity change from 0 to 32768 [ 178.083986][ T7389] [ 178.083986][ T7389] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 178.083986][ T7389] [ 178.254204][ T11] ERROR: (device loop3): diWrite: ixpxd invalid [ 178.254204][ T11] [ 178.273621][ T11] ERROR: (device loop3): txCommit: [ 178.273621][ T11] [ 178.294686][ T11] jfs_write_inode: jfs_commit_inode failed! [ 178.308012][ T5784] [ 178.308012][ T5784] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 178.308012][ T5784] [ 178.330310][ T5784] [ 178.330310][ T5784] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 178.330310][ T5784] [ 178.680291][ C1] usb 2-1: yurex_control_callback - control failed: -71 [ 178.699912][ T5846] usb 2-1: USB disconnect, device number 7 [ 178.721580][ T5846] yurex 2-1:0.50: USB YUREX #0 now disconnected [ 178.843124][ T7400] loop4: detected capacity change from 0 to 40427 [ 178.857954][ T7400] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 178.865076][ T7400] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 178.890258][ T7400] F2FS-fs (loop4): invalid crc value [ 179.043643][ T7400] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 179.050989][ T7400] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 179.154439][ T7400] syz.4.450: attempt to access beyond end of device [ 179.154439][ T7400] loop4: rw=2049, sector=53248, nr_sectors = 8 limit=40427 [ 179.191012][ T7400] syz.4.450: attempt to access beyond end of device [ 179.191012][ T7400] loop4: rw=0, sector=53248, nr_sectors = 8 limit=40427 [ 179.240896][ T6135] syz-executor: attempt to access beyond end of device [ 179.240896][ T6135] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 179.287538][ T6135] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 179.398913][ T7412] macsec1: entered allmulticast mode [ 179.408087][ T7412] veth1_macvtap: entered allmulticast mode [ 179.480458][ T7412] netlink: 4 bytes leftover after parsing attributes in process `syz.1.454'. [ 179.837053][ T7412] veth1_macvtap (unregistering): left allmulticast mode [ 180.124843][ T5821] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 180.353113][ T5821] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 180.365976][ T5821] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 180.391000][ T5821] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 180.415192][ T5821] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 180.449809][ T5821] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.630048][ T177] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 180.687034][ T5821] usb 4-1: usb_control_msg returned -32 [ 180.693813][ T5821] usbtmc 4-1:16.0: can't read capabilities [ 180.730561][ T7423] loop2: detected capacity change from 0 to 32768 [ 180.764547][ T7423] XFS (loop2): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 180.832217][ T177] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 180.851060][ T177] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 180.863779][ T177] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 180.881967][ T177] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 180.898093][ T7423] XFS (loop2): Ending clean mount [ 180.903561][ T177] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.912530][ T177] usb 5-1: Product: syz [ 180.916901][ T177] usb 5-1: Manufacturer: syz [ 180.921873][ T177] usb 5-1: SerialNumber: syz [ 181.014755][ T7423] XFS (loop2): User initiated shutdown received. [ 181.021690][ T7423] XFS (loop2): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x105/0x150 (fs/xfs/xfs_fsops.c:491). Shutting down filesystem. [ 181.071404][ T7423] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [ 181.097798][ T7440] usbtmc 4-1:16.0: INITIATE_CLEAR returned 0 [ 181.163947][ T7425] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 181.179516][ T5779] XFS (loop2): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 181.189264][ T7425] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 181.312265][ T5821] usb 4-1: USB disconnect, device number 7 [ 181.817220][ T7425] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 181.828833][ T7425] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 181.879899][ T10] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 182.039611][ T177] cdc_ncm 5-1:1.0: failed to get mac address [ 182.050819][ T177] cdc_ncm 5-1:1.0: bind() failure [ 182.063877][ T177] cdc_ncm: probe of 5-1:1.1 failed with error -71 [ 182.073432][ T177] cdc_mbim: probe of 5-1:1.1 failed with error -71 [ 182.081754][ T177] usbtest: probe of 5-1:1.1 failed with error -71 [ 182.096914][ T177] usb 5-1: USB disconnect, device number 5 [ 182.103539][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 182.117933][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 182.130822][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 182.142114][ T10] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 182.169958][ T968] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 182.179830][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.203394][ T10] usb 2-1: config 0 descriptor?? [ 182.369959][ T968] usb 4-1: Using ep0 maxpacket: 8 [ 182.377746][ T968] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 182.386611][ T968] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 182.397620][ T968] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 182.415161][ T968] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 182.432238][ T968] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 182.446124][ T968] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 182.457100][ T968] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.653560][ T10] ft260 0003:0403:6030.0007: unknown main item tag 0x0 [ 182.661586][ T10] ft260 0003:0403:6030.0007: unknown main item tag 0x0 [ 182.706001][ T968] usb 4-1: usb_control_msg returned -32 [ 182.712479][ T968] usbtmc 4-1:16.0: can't read capabilities [ 182.863643][ T10] ft260 0003:0403:6030.0007: chip code: 0000 0000 [ 182.918319][ T7455] macsec1: entered allmulticast mode [ 182.925660][ T7455] veth1_macvtap: entered allmulticast mode [ 182.948853][ T7455] netlink: 4 bytes leftover after parsing attributes in process `syz.2.469'. [ 183.077046][ T7460] sctp: [Deprecated]: syz.4.470 (pid 7460) Use of int in max_burst socket option deprecated. [ 183.077046][ T7460] Use struct sctp_assoc_value instead [ 183.102131][ T7455] veth1_macvtap (unregistering): left allmulticast mode [ 183.113781][ T7459] usbtmc 4-1:16.0: INITIATE_ABORT_BULK_OUT returned 0 [ 183.320355][ T968] usb 4-1: USB disconnect, device number 8 [ 183.365655][ T177] usb 2-1: USB disconnect, device number 8 [ 184.158118][ T7465] loop4: detected capacity change from 0 to 40427 [ 184.187089][ T7465] F2FS-fs (loop4): Wrong segment_count / block_count (64 > 16384) [ 184.215287][ T7465] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 184.288371][ T7465] F2FS-fs (loop4): Found nat_bits in checkpoint [ 184.458144][ T7465] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 184.466080][ T7465] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 184.647513][ T6135] syz-executor: attempt to access beyond end of device [ 184.647513][ T6135] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 184.668367][ T6135] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 184.749896][ T5821] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 184.862715][ T10] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 184.953998][ T5821] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 184.983907][ T5821] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 185.005575][ T5821] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 185.030855][ T5821] usb 2-1: config 220 has no interface number 2 [ 185.050063][ T5821] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 185.064904][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 185.085444][ T5821] usb 2-1: config 220 interface 0 has no altsetting 0 [ 185.100103][ T5821] usb 2-1: config 220 interface 76 has no altsetting 0 [ 185.120000][ T5821] usb 2-1: config 220 interface 1 has no altsetting 0 [ 185.120292][ T10] usb 3-1: config 0 has an invalid interface number: 89 but max is 0 [ 185.138520][ T5821] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 185.148138][ T5821] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.156754][ T10] usb 3-1: config 0 has no interface number 0 [ 185.164695][ T10] usb 3-1: config 0 interface 89 altsetting 225 endpoint 0x82 has invalid wMaxPacketSize 0 [ 185.176379][ T5821] usb 2-1: Product: syz [ 185.183086][ T5821] usb 2-1: Manufacturer: syz [ 185.187958][ T5821] usb 2-1: SerialNumber: syz [ 185.193249][ T10] usb 3-1: config 0 interface 89 altsetting 225 bulk endpoint 0x82 has invalid maxpacket 0 [ 185.205508][ T10] usb 3-1: config 0 interface 89 has no altsetting 0 [ 185.215616][ T7483] loop3: detected capacity change from 0 to 8192 [ 185.231239][ T10] usb 3-1: New USB device found, idVendor=12d1, idProduct=7ef3, bcdDevice=54.68 [ 185.240669][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.248798][ T10] usb 3-1: Product: syz [ 185.264824][ T10] usb 3-1: Manufacturer: syz [ 185.278165][ T7483] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 185.300835][ T10] usb 3-1: SerialNumber: syz [ 185.306740][ T7483] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 185.317879][ T7483] REISERFS (device loop3): using ordered data mode [ 185.325171][ T7483] reiserfs: using flush barriers [ 185.340346][ T7483] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 185.370815][ T7483] REISERFS (device loop3): checking transaction log (loop3) [ 185.381913][ T10] usb 3-1: config 0 descriptor?? [ 185.435997][ T5821] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 185.444006][ T10] hub 3-1:0.89: bad descriptor, ignoring hub [ 185.460468][ T5821] usb 2-1: No valid video chain found. [ 185.467292][ T5821] usb 2-1: selecting invalid altsetting 0 [ 185.473307][ T10] hub: probe of 3-1:0.89 failed with error -5 [ 185.493946][ T10] option 3-1:0.89: GSM modem (1-port) converter detected [ 185.540699][ T5821] usb 2-1: selecting invalid altsetting 0 [ 185.546708][ T5821] usbtest: probe of 2-1:220.1 failed with error -22 [ 185.632995][ T5821] usb 2-1: USB disconnect, device number 9 [ 185.796206][ T7483] REISERFS (device loop3): Using tea hash to sort names [ 185.818323][ T7483] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 185.860184][ T968] usb 3-1: USB disconnect, device number 7 [ 185.886250][ T968] option 3-1:0.89: device disconnected [ 186.166292][ T5846] usb 5-1: new low-speed USB device number 6 using dummy_hcd [ 186.232688][ T7494] loop3: detected capacity change from 0 to 512 [ 186.245661][ T7492] loop1: detected capacity change from 0 to 4096 [ 186.255177][ T7492] ntfs: (device loop1): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 186.280108][ T7494] EXT4-fs error (device loop3): ext4_orphan_get:1404: inode #15: comm syz.3.482: inode has both inline data and extents flags [ 186.372190][ T5846] usb 5-1: config 0 interface 0 altsetting 67 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 186.383023][ T7492] ntfs: volume version 3.1. [ 186.385530][ T5846] usb 5-1: config 0 interface 0 altsetting 67 endpoint 0x81 has invalid maxpacket 64, setting to 8 [ 186.401044][ T5846] usb 5-1: config 0 interface 0 altsetting 67 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 186.415048][ T5846] usb 5-1: config 0 interface 0 has no altsetting 0 [ 186.429016][ T5846] usb 5-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 186.441694][ T7494] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.482: couldn't read orphan inode 15 (err -117) [ 186.489624][ T5846] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.516568][ T7494] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 186.532094][ T5846] usb 5-1: config 0 descriptor?? [ 186.548216][ T7489] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 186.726096][ T7502] process 'syz.2.485' launched './file2' with NULL argv: empty string added [ 186.914198][ T7505] overlayfs: failed to clone upperpath [ 186.924120][ T5784] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.068677][ T5846] petalynx 0003:18B1:0037.0008: unknown main item tag 0x0 [ 187.096832][ T5846] petalynx 0003:18B1:0037.0008: unknown main item tag 0x0 [ 187.114842][ T5846] petalynx 0003:18B1:0037.0008: unknown main item tag 0x0 [ 187.128548][ T5846] petalynx 0003:18B1:0037.0008: unknown main item tag 0x0 [ 187.149604][ T5846] petalynx 0003:18B1:0037.0008: unknown main item tag 0x0 [ 187.172004][ T5846] petalynx 0003:18B1:0037.0008: unknown main item tag 0x0 [ 187.179833][ T5846] petalynx 0003:18B1:0037.0008: unknown main item tag 0xd [ 187.187403][ T5846] petalynx 0003:18B1:0037.0008: unknown global tag 0xc [ 187.201914][ T5846] petalynx 0003:18B1:0037.0008: item 0 1 1 12 parsing failed [ 187.213155][ T5846] petalynx 0003:18B1:0037.0008: parse failed [ 187.219552][ T5846] petalynx: probe of 0003:18B1:0037.0008 failed with error -22 [ 187.318914][ T5846] usb 5-1: USB disconnect, device number 6 [ 188.035526][ T7528] loop4: detected capacity change from 0 to 512 [ 188.106056][ T7528] EXT4-fs error (device loop4): ext4_orphan_get:1404: inode #15: comm syz.4.496: inode has both inline data and extents flags [ 188.230265][ T7528] EXT4-fs error (device loop4): ext4_orphan_get:1409: comm syz.4.496: couldn't read orphan inode 15 (err -117) [ 188.246099][ T7528] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 188.387357][ T6135] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.507488][ T7536] syzkaller1: entered promiscuous mode [ 188.513360][ T7536] syzkaller1: entered allmulticast mode [ 188.657165][ T7526] loop2: detected capacity change from 0 to 32768 [ 188.677080][ T7526] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 scanned by syz.2.495 (7526) [ 188.727160][ T7526] BTRFS info (device loop2): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 188.770275][ T7526] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 188.792722][ T7526] BTRFS info (device loop2): using free space tree [ 188.856749][ T7540] loop4: detected capacity change from 0 to 2048 [ 188.908199][ T7526] BTRFS info (device loop2): enabling ssd optimizations [ 188.942875][ T7555] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 188.969936][ T7526] BTRFS info (device loop2): auto enabling async discard [ 189.231176][ T7555] NILFS (loop4): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 189.269746][ T7555] NILFS error (device loop4): nilfs_bmap_propagate: broken bmap (inode number=4) [ 189.296088][ T5779] BTRFS info (device loop2): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 189.325040][ T7555] Remounting filesystem read-only [ 189.336241][ T2919] NILFS (loop4): discard dirty page: offset=0, ino=2 [ 189.344421][ T2919] NILFS (loop4): discard dirty block: blocknr=18, size=1024 [ 189.365790][ T2919] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 189.386160][ T2919] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [Connection to us-central1-ssh-serialport.googleapis.com closed by remote host.