last executing test programs: 2m10.857822728s ago: executing program 0 (id=331): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"/3088], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) r3 = dup(r2) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r3, r1, 0x25, 0x4, @val=@tracing={0x0, 0x8}}, 0x20) syz_emit_ethernet(0xfdef, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xfde1, 0x300, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x4d, 0x0, @wg=@data}}}}}, 0x0) 2m10.531214053s ago: executing program 0 (id=332): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x1) ioctl$HIDIOCINITREPORT(r1, 0x4805, 0x0) 2m8.232008939s ago: executing program 0 (id=339): r0 = socket(0x8000000010, 0x2, 0x0) write(r0, &(0x7f00000002c0)="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", 0xfc) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r2, &(0x7f0000000040)='\f\x00', 0xffeb, 0x0, &(0x7f0000000340), 0x10) ioctl$sock_inet_SIOCSARP(r1, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x2, 0x0, @multicast1=0xe000cc02}}) 2m7.997894162s ago: executing program 0 (id=341): syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8042, &(0x7f0000000380)={[{@grpjquota}, {@init_itable_val={'init_itable', 0x3d, 0x7}}, {@dioread_nolock}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7fffffff}}]}, 0x3, 0x4f3, &(0x7f00000012c0)="$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") capset(0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000240)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x22) 2m7.626725418s ago: executing program 0 (id=342): syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000000180)='./file1\x00', 0x8000, &(0x7f0000000040)=ANY=[@ANYRES64=0x0], 0x1, 0x14fe, &(0x7f0000001580)="$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") r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0', [], 0xa, "1f411d2552ad52cb07410969e814977e4f2c4a80522094786c8673fb61cf8b86bda4de504f5a3c7c04055f1f70e4064d46b2bb9e5100d446bb6a"}, 0x2) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file1', [{}]}, 0xc) close(r0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 2m7.298678703s ago: executing program 0 (id=344): syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000000)='./file1\x00', 0x4000, &(0x7f0000000e00)=ANY=[], 0x2, 0xc2d, &(0x7f00000001c0)="$eJzs3U9sHNd9B/DfGy3FldxWTOwoThoXm7ZIZcVy9S+mYhXuqqbZBpBlIhRzC8AVSakLUyRBUo1spAXTSw89BCiKHnIi0BoFUjQwmiLokWldILn4UOTUE9HCRlD0wBYBcgoYzOxbcUmRNi2KEmV9Pjb13Z19b+a9eesZWdCbFwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAxB+8cun0mfSwWwEAPEhXRr96+qz7PwA8Vq76/38AAAAAAAAAAAAAADjoUhTxZKSYu7KWxqv3HfXL7b5bt8eGhrevdiRVNQ9V5cuf+pmz585/6YXBC9283J75gPr322fjtdGrlxovz96cm59aWJiabIzNtCdmJ6d2vYe91t/qZHUCGjdfvzV5/fpC4+zz5zZ9fHvg/f4njg9cHHz21DPdsmNDw8OjG0XqveVr99yQjp1meByOIk5Fiue+99PUiogi9n4u6g927Lc6UnXiZNWJsaHhqiPT7dbMYvnhSPdEFBGNnkrN7jnafiyi1vdA+7CzZsRS2fyywSfL7o3OteZb16anGiOt+cX2Ynt2ZiR1Wlv2pxFFXEgRyxGx2n/37vqiiFqk+M6xtXQtIg51z8MXq4nBO7ej2Mc+7kLZzkZfxHLxCIzZAdYfRbwaKX72zomYyNeZ6lrzhYhXy/xBxFtlvhSRyi/G+Yj3tvke8WiqRRF/WY7/xbU0WV0PuteVy19rfGXm+mxP2e515SPeH+66Ujyk+8ORLflgHPBrUz2KaFVX/LV077/ZAQAAAAAAAAAAAAAAAOB+OxJFfCZSvPIff1LNK45qXvqxi4N/OPCrvXPGn/6Q/ZRln4+IpWJ3c3IP54mBI2kkpYc8l/hxVo8i/jTP//vWw24MAAAAAAAAAAAAAAAAAADAY62In0SKF989kZajd03x9syNxtXWtenOqrDdtX+7a6avr6+vN1InmznHcy7lXM65knM1ZxS5fs5mzvGcSzmXc67kXM0Zh3L9nM2c4zmXci7nXMm5mjNquX7OZs7xnEs5l3Ou5FzNGQdk7V4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgI+TIor4RaT49jfWUqSIaEaMRydX+h926wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAUn8q4vuRovFHzTvbahGRqn87TpS/nI/m4TI/Gc3BMl+K5qWcrSprzW89hPazN32piB9Hiv7623cGPI9/X+fdna9BvPXNjXefrXXyUPfDgff7nzh+7OLg8G88vdPrtF0DTl5uz9y63RgbGh4e7dlcy0f/ZM+2gXzc4v50nYhYeOPN11vT01Pz9/6i/Arsofoj9CLVHpeeelG9iNqBaMbD6TuPgfL+/16k+N13/7N7w+/c/+vxK513d+7w8fM/27j/v7h1R7u8/9e21sv3//Kevt39/8mebS/m34301SLqizfn+o5H1BfeePNU+2brxtSNqZnzp09/eXDwy+dO9x2OqF9vT0/1vLovpwsAAAAAAAAAAAAAAADgwUlF/H6kaP14LTUi4nY1X2vg4uCzp545FIeq+Vab5m2/Nnr1UuPl2Ztz81MLC1OTjbGZ9sTs5NRuD1evpnuNDQ3vS2c+1JF9bv+R+suzc2/Mt2/88eK2nx+tX7q2sDjfmtj+4zgSRUSzd8vJqsFjQ8NVo6fbrZmq6si2k+k/ur5UxH9FionzjfT5vC3P/986w3/T/P+lrTvap/n/n+jZVh4zpSJ+Hil+56+ejs9X7Twad52zXO7vIsXJC5/L5eJwWa7bhs5zBTozA8uy/xcp/ukXm8t250M+uVH2zK5P7COiHP9jkeL7f/Hd+M28bfPzH7Yf/6Nbd7RP4/9Uz7ajm55XsOeuk8f/VKR46cm347fytg96/kf32RsncuE7z+fYp/H/VM+2gXzc374/XQcAAAAAAAAAAHik9aUi/j5S/HC4ll7I23bz9/8mt+5on/7+16d7tk3en/WKPvTFnk8qAAAAABwQfamIn0SKG4tv35lDvXn+d8/8z9/bmP85lLZ8Wv05369Vzw24n3/+12sgH3d8790GAAAAAAAAAAAAAAAAAACAAyWlIl7I66mPV/P5J3dcT30lUrzyP8/lcul4Wa67DvxA9Wv9yuzMqUvT07MTrcXWtempxuhca2KqrPtUpFj728/lukW1vnp3vfnOGu8ba7HPR4rhf+iW7azF3l2b/KmNsmfKsp+IFP/9j5vLdtex/tRG2bNl2b+JFF//l+3LHt8oe64s+91I8aOvN7plj5Zlu89H/fRG2ecnZot9GBUAAAAAAAAAAAAAAAAAAAAeN32piD+PFP97c/nOXP68/n9fz9vKW9/sWe9/i9vVOv8D1fr/O72+l/X/q+cKLO10VAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+HhKUcSbkWLuylpa6S/fd9Qvt2du3R4bGt6+2pFU1TxUlS9/6mfOnjv/pRcGL3Tzg+vfb5+J10avXmq8PHtzbn5qYWFqsjE2056YnZza9R72Wn+rk9UJaNx8/dbk9esLjbPPn9v08e2B9/ufOD5wcfDZU890y44NDQ+P9pSp9d3z0e+Sdth+OIr460jx3Pd+mn7YH1HE3s/Fh3x39tuRqhMnq06MDQ1XHZlut2YWyw9HuieiiGj0VGp2z9EDGIs9aUYslc0vG3yy7N7oXGu+dW16qjHSml9sL7ZnZ0ZSp7VlfxpRxIUUsRwRq/13764ving9Unzn2Fr61/6IQ93z8MUro189fXbndhT72MddKNvZ6ItYLh6BMTvA+qOIf44UP3vnRPxbf0QtOj/xhYhXy/xBxFvRGe9UfjHOR7y3zfeIR1Mtivj/cvwvrqV3+svrQfe6cvlrja/MXJ/tKdu9rjzy94cH6YBfm+pRxI+qK/5a+nf/XQMAAAAAAAAAAAAAAAAcIEX8eqR48d0TqZoffGdOcXvmRuNq69p0Z1pfd+5fd870+vr6eiN1splzPOdSzuWcKzlXc0aR6+dslllfXx/P75dyLudcybmaMw7l+jmbOcdzLuVczrmSczVn1HL9nM2c4zmXci7nXMm5mjMOyNw9AAAAAAAAAAAAAAAAAADg46Wo/knx7W+spfX+zvrS49HJFeuBfuz9MgAA//8hX/ir") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0xc0086c43, &(0x7f0000000f40)=0x6ff) rename(&(0x7f0000000000)='./file2\x00', &(0x7f0000000040)='./file1\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c"], 0x78) 2m7.114417786s ago: executing program 32 (id=344): syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000000)='./file1\x00', 0x4000, &(0x7f0000000e00)=ANY=[], 0x2, 0xc2d, &(0x7f00000001c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0xc0086c43, &(0x7f0000000f40)=0x6ff) rename(&(0x7f0000000000)='./file2\x00', &(0x7f0000000040)='./file1\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c"], 0x78) 50.890820104s ago: executing program 4 (id=799): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000050000000000000001000004080000000000000003000000100000000000000000000002"], 0x0, 0x4d}, 0x28) syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f00000005c0)='./file1\x00', 0xc248, &(0x7f0000000180), 0x3, 0x5f1, &(0x7f0000000600)="$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") r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000540)={0x3, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000140)={0x257, @tick=0x7}) 50.687077977s ago: executing program 4 (id=801): syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/devices.allow\x00', 0x0, 0x0) r0 = open(&(0x7f0000000040)='./bus\x00', 0x240, 0x0) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x84) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000240)=ANY=[@ANYBLOB='+\x00\x00\x00', @ANYRES32=r0], 0x2b) sendfile(r2, r0, 0x0, 0x4000000053d2) 50.566027319s ago: executing program 4 (id=804): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x182804, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000100)="89e7ee", 0x3}, {&(0x7f0000000440)="9c74dfbf77572856c888a8", 0xb}], 0x2) 44.66274851s ago: executing program 4 (id=820): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000001540)='./file0\x00', 0x2000004c, &(0x7f00000003c0)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=0x0, @ANYRES64=0x0, @ANYRESHEX=0x0, @ANYBLOB="2c616c6c6f775f7574696d653d30303030303030303030303030303030303030303030372c646973636172642c00214b3cf244ea5fb7437f2c69f67a093e240a6e978fa4cd2d"], 0x1, 0x14f5, &(0x7f0000001580)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1c0000000, 0x5, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x202]}) open(&(0x7f0000000080)='./file1\x00', 0x103000, 0x2) mount(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x10001, 0x0) 44.01443186s ago: executing program 4 (id=826): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x100) r1 = syz_io_uring_setup(0x239, &(0x7f0000000340)={0x0, 0x0, 0x10100}, &(0x7f00000002c0)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x2def, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000280)={{0x1}}) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/47, 0x2f}], 0x1) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) 43.790847583s ago: executing program 4 (id=828): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000180)="660f388084000072baf80c66b860b4498c66efbafc0c66b80e00000066ef64f30fc7b000100f850100f30fc7b1030066b9800000c00f326635000400000f30d2bc0a000f23c80f21f86635040040000f23f8b8f4008ee0", 0x57}], 0x1, 0x48, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 43.506686558s ago: executing program 33 (id=828): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000180)="660f388084000072baf80c66b860b4498c66efbafc0c66b80e00000066ef64f30fc7b000100f850100f30fc7b1030066b9800000c00f326635000400000f30d2bc0a000f23c80f21f86635040040000f23f8b8f4008ee0", 0x57}], 0x1, 0x48, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6.097682146s ago: executing program 3 (id=1026): openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ptrace(0x10, r0) ptrace$poke(0x4, r0, &(0x7f0000000380), 0x10000) 5.342894747s ago: executing program 3 (id=1029): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x2d, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r3, @ANYBLOB="000024000000000024001200140001006272696467655f736c617665800000000c000500080005"], 0x3}}, 0x0) splice(r0, 0x0, r2, 0x0, 0x10d00, 0x0) 4.995135423s ago: executing program 3 (id=1030): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_CAP_X2APIC_API(r1, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, 0x1}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x5, 0x0, 0x1, '\x00', 0xfffffffffffffffc}) 4.463820431s ago: executing program 3 (id=1035): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file0\x00', 0x8, &(0x7f0000000380)=ANY=[@ANYBLOB="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"/320], 0x1, 0x552a, &(0x7f00000058c0)="$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") mkdir(&(0x7f0000000000)='./file0\x00', 0x18a) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000001a40)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='kfree\x00', r0}, 0x10) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 2.798907967s ago: executing program 2 (id=1046): socket$pppoe(0x18, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_MSRS(r2, 0xc048aeca, &(0x7f0000000200)) 2.523877311s ago: executing program 1 (id=1047): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r1, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f00003fe000/0x4000)=nil, 0x4000}}) 2.350389863s ago: executing program 5 (id=1048): r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x14, r0, 0xe27, 0x0, 0x0, {0x4, 0x7, 0x2}}, 0x14}, 0x1, 0x40030000000000}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'ipvlan1\x00'}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCRSCLRRT(r5, 0x89e4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r7 = socket$inet6(0xa, 0x6, 0x20005) setsockopt$inet6_MCAST_JOIN_GROUP(r7, 0x29, 0x6, &(0x7f0000000140)={0x7d, {{0x29, 0x4e22, 0x37004000, @private1={0xfc, 0x1, '\x00', 0x1}, 0x600005}}}, 0x88) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x8}}, [@NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x2e}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x2}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x84}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@dellink={0x28, 0x11, 0x101, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x0, 0x4021}, [@IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x2ac1}]}, 0x28}}, 0x0) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[], 0x150}, 0x1, 0x0, 0x0, 0x4001}, 0x8008090) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x6c}}, 0x40000) r10 = socket$packet(0x11, 0x3, 0x300) r11 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r11, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout(r10, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_netdev_private(r12, 0x8946, &(0x7f0000000140)="a6cc04e2d8f1c38afbf14b29") setsockopt$MRT6_ADD_MFC_PROXY(r7, 0x29, 0xd2, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @local, 0x7}, {0xa, 0x4e23, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}, 0xfffffc00}, 0xffffffffffffffff, {[0x401, 0xffffd7fb, 0xf, 0x1, 0x3, 0x200, 0x8001, 0x2]}}, 0x5c) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x60}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r13 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_inet6_SIOCADDRT(r13, 0x890b, &(0x7f0000000580)={@rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @ipv4={'\x00', '\xff\xff', @loopback}, 0x2000000, 0x0, 0x7d, 0xa80, 0x0, 0x930210}) 2.292127864s ago: executing program 3 (id=1049): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000280)=@assoc_value={0x0}, &(0x7f0000000880)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={r2, 0x0, 0x0}, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x83, &(0x7f0000000140)={r4}, 0x8) 2.291515334s ago: executing program 1 (id=1050): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000200)="63eced8e2613c2b346dc3f0a7387", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000340)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r2, 0x0, 0x0}, 0x10) 2.228320495s ago: executing program 2 (id=1051): syz_open_dev$MSR(0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x2, 0x0, 0x7ffffffb}]}) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) ptrace(0x10, r0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r0, 0x0, 0x0) 2.085201377s ago: executing program 1 (id=1052): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}, @IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 1.616937655s ago: executing program 1 (id=1053): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x2000c0, &(0x7f00000005c0), 0x1, 0x54e, &(0x7f0000001c40)="$eJzs3U1oHOUbAPBnZrPtv23+pgUFlR6KChVKN0k/tHpKr2Kh0IPgpS6bbQjZZEN2U5uQQ3ovYkFR6aXe9OBR8eBBvHj06kXxLIgGhaYHiUx2N/1Isq61ydbO7wezfT+GPu+bmWey7zBDAsitI9lHGvFMRJxPIobu6huIdueR1n6rK0uV2ytLlSTW1i78mkQSEbdWliqd/ZP2vwciYjkino6Ib4oRx9LNcRsLi1PlWq06164PN6dnhxsLi8cnp8sT1YnqzMmXXzl95tTp0ROjD22u1368/s617167ef3Tzw4vV94vJzEWg+2+u+fxMLV+JsUYu6/91E4E66Ok3wPggRTaeV6MiKdiKArtrAcef2t7I9aAnErkP+RU53tAtv7tbLv5/eOXs60FSBZ3tb21egZa9ybif+trk/2/J/esTLL15sHdHCiPpeWrETEyMLD5/E/a59+DG3kYA2RHfX22daA2H/904/oTW1x/Bjv3Tv+lzvVvddP17078wjbXv/M9xvjzzZ8+2jb+1Yhnt4yfbMRPtoifRsRbPca/8caXZ7brW/s44mhsHb8j6X5/ePjSZK060vrcMsZXRw+/2m3++7eJP9Zl/lnbbI/z/+Lbz59b7hL/xee7H/+t4u+LiHd7jH/o1ievb9eXxR/fZv7d4mdtN3uM/9LYkR963BUAAAAAAAAAAPgH0vVn2ZK0tFFO01Kp9Q7vk7E/rdUbzWOX6vMz461n3g5GMe08aTXUqidZfbT9PG6nfuK++smIOBQR7xX2rddLlXptvN+TBwAAAAAAAAAAAAAAAAAAgEfEgfve//+j0Hr/H8gJf/Ib8kv+Q37dm/9J38YB7D6//yG/5D/kl/yH/JL/kF/yH/JL/kN+yX/IL/kPAAAAAAAAAAAAAAAAAAAAAAAAAAA74vy5c9m2dntlqZLVxy8vzE/VLx8frzamStPzlVKlPjdbmqjXJ2rVUqU+/Xf/X61enx2Jmfkrw81qozncWFi8OF2fn2lenJwuT1QvVou7MisAAAAAAAAAAAAAAAAAAAD4bxlc35K0FBHpejlNS6WI/0fEwSgmlyZr1ZGIeCIivi8U92b10X4PGgAAAAAAAAAAAAAAAAAAAB4zjYXFqXKtVp1T2FyIiOVHYBgKCn05+QEAAAAAAAAAAAAAAAAAgF1156Xffo8EAAAAAAAAAAAAAAAAAAAA8iz9OYmIbDs69MLg3T17I2JPslrIynsi4u0bFz64Um4250az9t822psftttP9GsOQC86edrJYwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCOxsLiVLlWq87tYKHfcwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4EH8FAAD//46R2W8=") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x6800, 0x0, 0x0, 0x0, &(0x7f0000000240)) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x66960000) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x0, 0x80) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 1.540749876s ago: executing program 5 (id=1054): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x21}}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.232940921s ago: executing program 2 (id=1055): r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000040), 0xc) r1 = socket$qrtr(0x2a, 0x2, 0x0) recvmmsg(r0, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x10000, 0x0) connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) ioctl$sock_qrtr_TIOCINQ(r0, 0x890c, 0x0) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000080)='~', 0x1}], 0x1) 1.186762951s ago: executing program 1 (id=1056): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0x2, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xb, 0x5}, {0xe, 0xffff}, {0xa, 0xfff1}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_INTERVAL={0x8, 0x3, 0x3}, @TCA_CODEL_ECN={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4048084) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) write$char_usb(0xffffffffffffffff, &(0x7f0000000040)="e2", 0x12d8) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 1.153722572s ago: executing program 5 (id=1057): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000014c0)=[@text64={0x40, &(0x7f0000001500)="267600410f01b00000000066b88e000f00d066420f3a14ce5736430f0164b107b805000000b9060000000f01c1f30f01330f015b7548b80c000000000000000f23d80f21f835800000000f23f8f30fc733", 0x51}], 0x1, 0x43, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000100)={0x3, r1, 'id0\x00'}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 910.640895ms ago: executing program 2 (id=1058): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) readv(r1, &(0x7f0000000140)=[{&(0x7f0000000080)=""/155, 0x9b}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 792.808518ms ago: executing program 3 (id=1059): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x48e80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000003c0)={0x2, 0x0, @ioapic={0x0, 0xb5, 0x3, 0xeffffdff, 0x0, [{0x0, 0x10}, {0x19, 0x5, 0x18, '\x00', 0x10}, {0xfc, 0x4}, {0xfe, 0x0, 0x3, '\x00', 0x2}, {0x8, 0x0, 0x5, '\x00', 0x9}, {0x0, 0x7f}, {0x0, 0x89, 0xbe}, {0x0, 0x6, 0x4}, {0x0, 0x8, 0x0, '\x00', 0xff}, {0x8, 0x6, 0xfe, '\x00', 0x42}, {0x0, 0x2, 0x0, '\x00', 0x4}, {0x0, 0x50}, {0x8b, 0x0, 0x4, '\x00', 0x3}, {0x1, 0x4e}, {0x2, 0x2, 0x4, '\x00', 0xfe}, {0x0, 0x80}, {0x80, 0x0, 0x4, '\x00', 0x4}, {0x0, 0x0, 0x0, '\x00', 0xdd}, {0x1, 0x3, 0x5d, '\x00', 0x3}, {0x80, 0x0, 0x0, '\x00', 0x5}, {0x5, 0x4}, {0x3, 0x44, 0x0, '\x00', 0x70}, {0x1, 0x0, 0xfe, '\x00', 0xe}, {0x10, 0x83, 0xe, '\x00', 0xd}]}}) 792.315167ms ago: executing program 5 (id=1060): r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x400, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x4}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x78, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x40, 0x2, [@TCA_BASIC_EMATCHES={0x3c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{}, {0x0, 0x0, 0x1}}}, @TCF_EM_META={0x1c, 0x2, 0x0, 0x0, {{0x0, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc}, @TCA_EM_META_RVALUE={0x4}]}}]}]}]}}, @TCA_RATE={0x6, 0x5, {0xe, 0x5}}]}, 0x78}}, 0x0) 547.927731ms ago: executing program 34 (id=1059): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x48e80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000003c0)={0x2, 0x0, @ioapic={0x0, 0xb5, 0x3, 0xeffffdff, 0x0, [{0x0, 0x10}, {0x19, 0x5, 0x18, '\x00', 0x10}, {0xfc, 0x4}, {0xfe, 0x0, 0x3, '\x00', 0x2}, {0x8, 0x0, 0x5, '\x00', 0x9}, {0x0, 0x7f}, {0x0, 0x89, 0xbe}, {0x0, 0x6, 0x4}, {0x0, 0x8, 0x0, '\x00', 0xff}, {0x8, 0x6, 0xfe, '\x00', 0x42}, {0x0, 0x2, 0x0, '\x00', 0x4}, {0x0, 0x50}, {0x8b, 0x0, 0x4, '\x00', 0x3}, {0x1, 0x4e}, {0x2, 0x2, 0x4, '\x00', 0xfe}, {0x0, 0x80}, {0x80, 0x0, 0x4, '\x00', 0x4}, {0x0, 0x0, 0x0, '\x00', 0xdd}, {0x1, 0x3, 0x5d, '\x00', 0x3}, {0x80, 0x0, 0x0, '\x00', 0x5}, {0x5, 0x4}, {0x3, 0x44, 0x0, '\x00', 0x70}, {0x1, 0x0, 0xfe, '\x00', 0xe}, {0x10, 0x83, 0xe, '\x00', 0xd}]}}) 543.197662ms ago: executing program 5 (id=1062): r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x14, r0, 0xe27, 0x0, 0x0, {0x4, 0x7, 0x2}}, 0x14}, 0x1, 0x40030000000000}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'ipvlan1\x00'}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCRSCLRRT(r5, 0x89e4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r7 = socket$inet6(0xa, 0x6, 0x20005) setsockopt$inet6_MCAST_JOIN_GROUP(r7, 0x29, 0x6, &(0x7f0000000140)={0x7d, {{0x29, 0x4e22, 0x37004000, @private1={0xfc, 0x1, '\x00', 0x1}, 0x600005}}}, 0x88) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x8}}, [@NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x2e}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x2}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x84}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@dellink={0x28, 0x11, 0x101, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x0, 0x4021}, [@IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x2ac1}]}, 0x28}}, 0x0) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[], 0x150}, 0x1, 0x0, 0x0, 0x4001}, 0x8008090) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x6c}}, 0x40000) r10 = socket$packet(0x11, 0x3, 0x300) r11 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r11, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout(r10, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_netdev_private(r12, 0x8946, &(0x7f0000000140)="a6cc04e2d8f1c38afbf14b29b86e") setsockopt$MRT6_ADD_MFC_PROXY(r7, 0x29, 0xd2, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @local, 0x7}, {0xa, 0x4e23, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}, 0xfffffc00}, 0xffffffffffffffff, {[0x401, 0xffffd7fb, 0xf, 0x1, 0x3, 0x200, 0x8001, 0x2]}}, 0x5c) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x60}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r13 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_inet6_SIOCADDRT(r13, 0x890b, &(0x7f0000000580)={@rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @ipv4={'\x00', '\xff\xff', @loopback}, 0x2000000, 0x0, 0x7d, 0xa80, 0x0, 0x930210}) 542.830342ms ago: executing program 2 (id=1063): syz_mount_image$hfs(&(0x7f0000000100), &(0x7f0000000900)='./file1\x00', 0x200050, &(0x7f0000000a80)=ANY=[@ANYBLOB="747970653d704351852c636f6465706167653d63703836332c00000000746f723db84f842468f8c5568bcf21a304fee0a339572c6469725f756d61736b3d30303030303030313030303030303030303030303030313000"], 0x1, 0x2e4, &(0x7f0000000200)="$eJzs3ctu00ocx/HfOEmbXtTjXo6OdDbnqFAJNhUFFohNEMqWPSsENKlUERXRFgnYkCKWiAdgzyvwEGxAvACsWPEA3RnNeHJx4jitaGxSvh8pkTOeGf+t8cTzD6IWgD/W7frX99e+25eRSipJuikFkqpSWXIl1mGr2cjqqORa2JdR3NIM1dnea6Y1te1cCy+0n8pa7C/DZERRdOtb0UGgcKY30xMCadbPQ7e/mnNck9KW/is6hrz1D7A51rGeabbAcAAAvwF//w/8bWLRFRkFgbThb/vn6v5/XHQAZ+t6a6goymzg7/9LncwrMnZ8/3K7qk/3DnddvudSOLs/6GSJJwmmMvB5RvGVlVhg9h0lnYslmNvZLWtz+0iNQK9U8/pyyzX33ogv3Y4x0a4P5qamnXU+o3ur6M583IFbUQ7qhLSz22q6lVY3/p7V0x3x15mP5rO5Z0K9U0NLflDKkbHD5EYqHBipoGLjvzK6xwXXytaST/trtVqQqLLsDvKvP4I35iyr6RmJOlfUcu9Hg3Y3gqw4XasVJX9WiM9ua0yr1bRWYffTiFZriVYlfyVsbj9uZf6UMhmdUzRvzV2zrh/6oLqb/7HAxrehk8xMW8fV9FdGfD4z6TXLrmY4dOfoTZf/uxF4JCU5eKOHuqGlg+cvHpVarea+3XiQsvFkcd/4ksprKbXO5DdKyqijdq8ksl5G0Ul7jiYZ/OUz7dB+f3RL7PQ58kPZX9nOsm6rILdhMgNhnPON+idlXZDTsxFF0ohdBX8/IRcHpjPovmCu4ICQN7vuMnH+51by8aouXs7Z7/UwY52enWQq0eNWN4NLLgVX3Pv8qTK4hZR/XRw+4tVEztjjcq4Ll6SLfYVGmUcMfZznhKnri+73rf8BAAAAAAAAAAAAAAAAAAAwFfL4nwZFnyMAAAAAAAAAAAAAAAAAAAAAANNu7PN//9Y/Q8+DSfsb8e75vyHP/wWmyM8AAAD//1Pjc0Q=") syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x802053, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"85f080a4933d55266e07e799aa0cc421388242df2a3c6b631b65b1c061edd2aa108c3528fe9b0bb3a53ab1200f5d01a68a4acdec8fee09648222f908c1fedc3000342e6139de28366c13509306d00ebcc67497181ac916db98af9d366b76e427d9ab5bb68095f0fb246df32b8af0783653136f8a04c03690312125c7ded6a24fda8685340c575ead69519e3583f89d467ec232d6a1ffd0463ba4ea3cbae5dae6654b5547b5458f02ac307729e57b09e134f68be44f88d72517b230b066f6315b5fb80206397bbff8cbc2a36e01c2e7b3aadb32bd3dd5288a69a991d9c674717e3abba7167280b2db3b1b8502afa4f3f296c532510c9d2dd79bb5eeb25adb5edddbdd069c09d14d15c2e7e1e2bd6c108fab3590bb22e97d6992236d2273c8bb95536f7118d007965008b125c7daac2814e6bbe1adbfa3572ad0b7ad5c26c8014118d8374ca9f285779dfee7715a403908146a74de61b3853914c89f444c12e7a38bdd46c4ed36eb806ea598f44d1dec9eff9e2476f43802211f0762b66673b45d236b2391ce322e30fb9c69fe0d514dc1f8b6e3979c1205fd5224b07d18a44fec4f6f1a6f65158bb6adcc295bf2dd7dea107f59d7e03c61fe5822292e45968956b931bdc4d6445ff1631e0b98e4b4448774dd4b9cd53a45896fdb3f03702778741ae2b45a25bf9a23fc02fb97a630f132bf9def6c6d080000000000000014f6f2377bcfc78e2e86368c138510a04cedf7175af8c2034fae7413e3ace8c71ab9a0af1ca7042011a6ed028e205648535dabf3b2f85196ae18d36b839e3cd54ae4933ad529888fdac7bb8a70c72bc0fc81ba06506f2d5bc7686e219bbe5283959cbef9950e071cb6d9f341fc624a5110341f26cebd7100599a06e61f66fae120c7fc2b34c6221200eba75bdd277114671a3fa8f058b27fd897b052f4a52afcea814df526181c75c4497210a2b8b74e26601561e78735387cf123654b0295d1d60556956b36d96dd038866c4b4db31ebdcddd4829bbc2850cd4901389e6ea6e86041e0efa1158f334e7afda0e11c2fb0e6df6364cb95659f506d5c7e63fb67c8116577d15e4a4b1fc4c27de2e52586cb1f52be9c3601f5066549de8bdc3ec07d1a84caf1961323ec2487a37b751aeabaf18647ce2dae5d9499c0f969467e6cabad198669ac96bd1488954eff0854ee0c83d7b596d273625bdb16270782321071fda5d980ded78ffa9dc2b56037d7cbf942547f48a5131f1991f6c17ae1ed5120ca6878f98e68e7997a9a2b70be640a70a34adb80de286c6692abb5f092e4e3a15283217e03d02a4054f34af3a65ef6b36f395b76a0579cffafd5d3bb0e704c935caecf3a7ab756c23fd60c9fe3f4fb2be7504f5bae22b116ff1588dcf02b327d31bf0488dba8af5b33ccf2d7d87f43bbc48fcd4f191ad6af9313ad38b8b29674bfabd6651bc1f6ce5abb4a2f1413194f96b26d7d6edc4e013fba549075c97eef508af5ca7873664b058b7bcf455a8a04b591d29fab6366c844bb75576bac2d52323e747303d00a5736c9812922b0e17bcec9135550736b54cf6407d61e22e62d7bb75f62935b665acf33e75f688c36ef416f1b890d0f0c8ad1df00e02ec45967834d5649c8e7143978622fa3704672970b7993a87e97d3d926a14265647bc8b8c9e6f83e29572608d24b42c2635ef4abbd0af83860e99c90d7471cf6e8ce99507f5ec2bc572212fa9ee3f5a9dfa3815fe55f0bbb119acce062ae37f2ff921707abba139bccdf42bfd174d29b540161b4113c4e1a13f3a62bc093e23ec0d0671b46b41dc8b42d950c8615ba5ee87f49b5d0910ffa4871207995001920db05a95199967f097ba7b55bbd271d818690c4238406b40a3dfc42fa56a67173b53a96b543326c56738b6d043195934018696f5ab49347e5148a78f2d1369a71afab8330273d46ecfba4ee05802a5385649851db949dbfb39e290941641c50b1ac20fb3102754a760b097f464ddb0b83f8168badfa71db6621dcf22fb081e3403f3bac5c7e65905aca52885c807f8ddab18bb2f12ef952c50483c0e251968bc70ff0d42a638ca744dea4c7ebb4fea777cf663bb4f1505ed79730c45bc86e488a13f924377a8e2ee6670a02ca52874ae1c42a35d55b9765757047b2cc3742aa51fa3e43fb2c113c92ad213bad252c1a82966dd016f12a7f1c3900c0f1ab455035163f31899bdd30f3ff43ad17d9e45bb7438c1c986712736f24be14f71ab1bfe92a25ec07f086ee8c7971b8077a13e58a8e8bea39c8e06b251909f02cb0080abf020f27ca160eb26c082dda1fa54ea4094dfdbcb2fa7bddccb67a844e8075f4cc08dad35757006d051e183dced336bc0c2502f93ffc87dca622286ba174c24e1f53f27dc2777baafe170348b0e8d3e743b3aa906bc0764bbe7da08ff403efe2212627d672250658bb513b7312517d1f88c61c7ba5f9647cd619281c5b391b48606ee39fb4171103df2e09d7cfd56c06c721f7c24ad8cce383623fc2dcb15ac56438ea331820ae59c8c474e36fc73f7b1b3b86df1b42490815501681aafbf7e871b4b9686efae6c45ecfca60a640a6f071dfd31f9437c3d03086164b48c1ed802986864bfe0d49bdd7709662262368dbc3ecc05eb240ecc41904c76d78ab5c52b66af5a720fdd6a92f52be0676427a56e32e5bc5085b25f90add38a76f2fce6f8f0ef74f4659698549646bd63175adf77b5cdcfe676e1b1a9af15102946554ba6136cbc83c6268ee40318f3c9d4718025688b35d2265bf60bf889581c750c34586ef46eab7a9176337536bb6001e676546b987f36b1fe4b9f6e46a8ce73eb22ebbb9c14d8e2b43ea77ef887e5a26448f4086fa819a25e27725ac10298851c8bc45f2ce4430b07917ade5ea8c434c3f2576effbeb521173736e5c9557450643068b0c0fb132a7e99de6ca292246a9937fa7d7e06e59cf59ce5b9f842629049931146af40a8a1256ba373a88d09dc00cdf4453cc6ba78572bf3e1f2352a978cdbad60220cb8ac37d7f614a306492a4b5eee9244b0ca84b6cf2e23013bfb1cb92bf6d126fe550e58c19f84e7a4081437b75b31b2b9fb658dcd8ba077962e0f3359721a148d4fefe5c97941ca9688cb85adf38fd10f5811cdd8e074a21bbfc9541c71465b08d7321281b68ed52bfab789b9c83849c09d52376d419b1e7ba367603236e119cdf4a7b7cf9d81f2229601deace53cea2f14a05f7fa0ca04b39e31c6453e332f4bd0915c0e09e28f4d1125c390c6ff0833a04b6fc37855e65de90333e505b9eb66e00686a3ed499cfb7b8b215dbdc9787b5baa724cfa71ee6745b41e203de8b7004757ac328ec5567540b951b50530c3d4ee34705ea1c66fd6591e88561083e86d48c45ef3b83a3029319d8f3d8e65ce14c1dc3cb92d0a7dbeb609a8d2793928caa079f0fbbb2bc90b9f058cc048f4032041d14c5bca00e99b3027ec3a50c4957199cf016a4594069af8659df0973f20ffb15dbc265ac5b8a2203e90b114a3e9441e357c60ce0b550a7fe66fc34f5702ac8e8992a22e89194c1df69e81a9b7ad3d2634ea8c0388588192fd47d8e803b10044d558617fb2921b69eb4d85c051f86ef63a2f4382b9becd870fb2ecadca6902712b88680792e2f2ec89591cfebb6db3ad31c2a339af10465fcf7988519d382218df52261234f26a6f66ad0d1859de505d0fe819caf2f8d30aa9fd1228ac91d11c39d6fdcf5926d6ad5c441514321507dff6c6ea3cff6f340a1c11e0c40f419e8e60fc94d8828fa47a96cdf7ee4f61e23f40751b25cf9ca1295041a350f83f0e679515d6b4b46e2c9ce8999e07f835abc1663cefcf728df37831f4e17f8c8a4feaf1fbf44c38c9313284404a50ba4cd8abe835b33bfecb02cd6c9d7f435853b4c8d505ab83cf46512739116694765658bae64b3127152d612b55aef9b25c70a8a3b302752d7b1e8791c657b9f3fc9001ef299fd1a349491ae6ee9940149160507fc4130fb825d47d97dc2c243209d2403583ac3ef6ddbedcaa76432255487c0a06e59e043e572ab3aec002af6a6b6a2dc9cfaeefa70557886c4d12924a038813f2bc8e89e4cfa69705d1ef3c4658f8616278b588011d9dd914beec0b151d65b6524fba3e3f235d5837060000000000000015046601747e0b2f9cf38bc167cabc8cb18c708d1337e25648707e8c0872876514c7a49c0b2aaee5ed9e9ecfcbcc23e032c4deb63e48e7120188056468fad31448e4b42e7d62fbcfc1c2cfb01fcf0db5e8a162bdb9bd820c763f17b96c23f32db9d1c1d74ddbe657b4f9595a9796982a0742153111b15e484d8ffebe47ce0a78a41e470a341616ec2eb6eef813fb415fab50fa965bec6a5977a0ade4fed67f86fc24e11b0e2f5364079f7c7c35b560cac726dbc80f29dbd248f7ecda0286a23ef172a28c96d9bdb1f598eab31c6baf0321312da23920c074b9d2d2e442717f2c21001142a39c2da6b8bd9d06b05a6a8deae1bd1be4108a636ddbebc682d113e715f2f3ee506abc28b1c654b3d2d28e02f73b171ed0deed71dda90ce4a0b728cc75cb576385e7418b545b992b1dd98e2ee53355f464f9250a2a03b3d1e4d2ac1aa71d01de2573530324e14d15a507883411ddbd37be21dc929db9b11f11010e4d2a04c7325a5ae6d24d19900ff97a8a89438f8676457a78cff05201528f4358fe67f61288bf042a8f3c2e0f8b4997b8fb74996b80d465489b2d7807a945eba72a945e8cf8625dbad6f6f6e30537b29e558ca8a8b0625f578c766d34f2d28d704715f94df1f6318a308042aa494baa500a0000000000006a8308af8ce6441d5ad8a2f3d477eb5307af0dfae6644493f1434030b8361621340ad3dcefa6d8f090ed3929d89ad9c0ba01a6903033428dd8f98619304b1803187d2a6130bf1e009b5eb0e7e21c75594b3b8470f3106c92a9e55bfeb026091ced127a90a1f1247f3c07e36d3572923e0de3f73518d0369a25fcd4e65d243b7eab91063a7bfd8bc8ac9e39fbbb32b5c9517886287a18eacd8dbfda9b91db693cb12e42cba5988280e09e51e72b91a0f360656d8f21cc1eb3248ac345ad51d1a6172b18419277851dab01e028c7e8e2cf34095efd28267852a08fccf61c45b5e46930160daf50282be058274e7ff58c48b60b86d0c8cc886ab8778a2a2b5fa2557ad7bf7f01f2175523ce758871d334c20a9839f7a89fe2867c06289c8a2f6456ac7e4fbadee53ac41aee68214bc76669853baa4f58255b39ba581414f2e8c4b49303f8936a33bae5cbc96b29a5c724d5b50e1614144c2acd03bd90de891c3d36ce040d57543682ecbfcae66c4153c337c3a5d01896524c8e0c27e9a08919821ca27bbfe3fc9ba24a823aeec8d4ad8ef8a65c585bee4dcf1acaa3da501a8c11a23b2e22920c1ad0129a038b31fe16c2abc80589dbf7c37211afc5d1a6db908bc5fe8a692060069fcbcdcba7c523d3c424aa3b0c6556387e0e51bcde9e5f850abf62d2c2101c3a2786a0cb94932877a0d296b64aa61da8cab3b423e7adc4c4700418a65e87225710e1691f6d9cb2eb63cce5b605ce0a4a89cf519767e00845397c5e381141a0ed8a89b01064b495ec8d1e2da37433bf1597d919a69610d2ad26bdf6fca8de422bb2cb80d0516206e8194ee51445a3dcb5dee33c0c310b4751e68e58bebda2fb586985a5a5b06456756f44e6dbfef4bb99ca732f00fb9ea35775f7419681bfbe6f43dc7c4650c13b63d93c1d490bf0173f287a4309531f13ecb1a775d0bd881a00", 0xc068bf1ed023a6a3}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x80242, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a) 93.025468ms ago: executing program 1 (id=1064): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000001c0)={0x1d, r1}, 0x10) recvmmsg(r0, &(0x7f0000003040)=[{{0x0, 0x0, 0x0}, 0x800}], 0x1, 0x40000002, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f00000003c0)=0x1, 0x4) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) sendmsg$can_raw(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@can={{0x4, 0x0, 0x0, 0x1}, 0x6, 0x0, 0x0, 0x0, "0300"}, 0x10}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 10.83939ms ago: executing program 2 (id=1065): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f00000000c0)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0x9362, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0x80049367, 0x0) 0s ago: executing program 5 (id=1066): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {}, {0xfff3, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x10, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x2}]}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4b, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x22044028}, 0x40) kernel console output (not intermixed with test programs): HW filter on device team0 [ 152.728409][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.735638][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 152.751271][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.758509][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 152.816244][ T50] Bluetooth: hci1: command tx timeout [ 153.142659][ T7233] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3290916003 (26327328024 ns) > initial count (15247863992 ns). Using initial count to start timer. [ 153.342078][ T7244] loop1: detected capacity change from 0 to 1024 [ 153.549408][ T7244] hfsplus: xattr searching failed [ 153.587797][ T7046] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 153.611921][ T7244] hfsplus: xattr searching failed [ 153.695527][ T7257] loop2: detected capacity change from 0 to 512 [ 153.736217][ T5779] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 153.828524][ T7257] Quota error (device loop2): find_tree_dqentry: Cycle in quota tree detected: block 3 index 0 [ 153.847023][ T7257] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 153.901777][ T7257] EXT4-fs error (device loop2): ext4_acquire_dquot:6938: comm syz.2.381: Failed to acquire dquot type 1 [ 153.948057][ T5779] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 153.958753][ T7257] EXT4-fs (loop2): 1 truncate cleaned up [ 153.965605][ T7257] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.979355][ T5779] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 153.988737][ T5779] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.999862][ T7257] ext4 filesystem being mounted at /103/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 154.027888][ T5779] usb 4-1: config 0 descriptor?? [ 154.065424][ T5779] pwc: Askey VC010 type 2 USB webcam detected. [ 154.289481][ T28] audit: type=1800 audit(1751819969.127:341): pid=7257 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.381" name="file1" dev="overlay" ino=15 res=0 errno=0 [ 154.333081][ T7046] veth0_vlan: entered promiscuous mode [ 154.371357][ T7046] veth1_vlan: entered promiscuous mode [ 154.434036][ T5787] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.469216][ T7046] veth0_macvtap: entered promiscuous mode [ 154.499146][ T7046] veth1_macvtap: entered promiscuous mode [ 154.515328][ T5779] pwc: recv_control_msg error -32 req 02 val 2b00 [ 154.534592][ T5779] pwc: recv_control_msg error -32 req 02 val 2700 [ 154.557963][ T5779] pwc: recv_control_msg error -32 req 02 val 2c00 [ 154.572296][ T7046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.624803][ T7046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.635730][ T7046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.652768][ T7046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.663179][ T7046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.674860][ T7046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.689331][ T7046] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 154.748168][ T7046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.778478][ T5779] pwc: recv_control_msg error -71 req 04 val 1300 [ 154.813752][ T7046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.826304][ T5779] pwc: recv_control_msg error -71 req 04 val 1400 [ 154.850981][ T5779] pwc: recv_control_msg error -71 req 02 val 2000 [ 154.861258][ T7046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.886342][ T5779] pwc: recv_control_msg error -71 req 02 val 2100 [ 154.902086][ T5779] pwc: recv_control_msg error -71 req 04 val 1500 [ 154.912093][ T7046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.923183][ T7046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.934423][ T5779] pwc: recv_control_msg error -71 req 02 val 2500 [ 154.943146][ T7046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.955949][ T5779] pwc: recv_control_msg error -71 req 02 val 2400 [ 154.963925][ T5779] pwc: recv_control_msg error -71 req 02 val 2600 [ 154.972650][ T7046] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 154.981530][ T5779] pwc: recv_control_msg error -71 req 02 val 2900 [ 154.992367][ T5779] pwc: recv_control_msg error -71 req 02 val 2800 [ 155.009255][ T7046] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.020875][ T5779] pwc: recv_control_msg error -71 req 04 val 1100 [ 155.029023][ T7046] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.038091][ T5779] pwc: recv_control_msg error -71 req 04 val 1200 [ 155.048083][ T7046] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.058587][ T5779] pwc: Registered as video103. [ 155.065291][ T5779] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input8 [ 155.086584][ T7046] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.118402][ T5779] usb 4-1: USB disconnect, device number 5 [ 155.350365][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.388886][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.544839][ T1075] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.571831][ T1075] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.686929][ T7305] pim6reg1: entered promiscuous mode [ 155.697208][ T7305] pim6reg1: entered allmulticast mode [ 157.263713][ T7335] loop1: detected capacity change from 0 to 4096 [ 157.314374][ T7335] NILFS (loop1): invalid segment: Checksum error in segment payload [ 157.350759][ T7335] NILFS (loop1): trying rollback from an earlier position [ 157.393082][ T7335] NILFS (loop1): recovery complete [ 157.408384][ T7341] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 157.413161][ T7315] loop2: detected capacity change from 0 to 32768 [ 157.446207][ T5779] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 157.499215][ T7315] JBD2: Ignoring recovery information on journal [ 157.506201][ T5875] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 157.656288][ T5779] usb 4-1: Using ep0 maxpacket: 32 [ 157.671909][ T5779] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 157.680430][ T7315] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 157.690607][ T5779] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 157.706215][ T5875] usb 5-1: Using ep0 maxpacket: 32 [ 157.736966][ T5779] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 157.756332][ T5875] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 157.782146][ T5779] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.806262][ T5875] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 157.819239][ T5779] usb 4-1: config 0 descriptor?? [ 157.843946][ T5875] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 157.864042][ T5779] hub 4-1:0.0: USB hub found [ 157.906612][ T5875] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.949016][ T5875] usb 5-1: config 0 descriptor?? [ 157.977718][ T5875] hub 5-1:0.0: USB hub found [ 158.074006][ T5787] ocfs2: Unmounting device (7,2) on (node local) [ 158.081010][ T5779] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 158.206481][ T5875] hub 5-1:0.0: 1 port detected [ 158.237616][ T7355] loop1: detected capacity change from 0 to 1024 [ 158.249139][ T7356] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 158.265362][ T7355] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 158.333979][ T5779] hid-generic 0003:046D:C31C.0004: item fetching failed at offset 0/1 [ 158.347655][ T5779] hid-generic: probe of 0003:046D:C31C.0004 failed with error -22 [ 158.370470][ T7355] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 158.404549][ T5875] hub 5-1:0.0: hub_hub_status failed (err = -71) [ 158.422873][ T5875] hub 5-1:0.0: config failed, can't get hub status (err -71) [ 158.438761][ T5875] usbhid 5-1:0.0: can't add hid device: -71 [ 158.454766][ T5875] usbhid: probe of 5-1:0.0 failed with error -71 [ 158.493271][ T5875] usb 5-1: USB disconnect, device number 2 [ 158.545853][ T7355] EXT4-fs error (device loop1): ext4_xattr_inode_iget:440: inode #11: comm syz.1.398: missing EA_INODE flag [ 158.631968][ T7355] EXT4-fs (loop1): Remounting filesystem read-only [ 158.641105][ T7355] EXT4-fs warning (device loop1): ext4_xattr_inode_dec_ref_all:1238: inode #18: comm syz.1.398: ea_inode dec ref err=-5 [ 158.659331][ T7355] EXT4-fs warning (device loop1): ext4_evict_inode:272: xattr delete (err -5) [ 158.674594][ T48] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 158.688209][ T5779] usb 4-1: USB disconnect, device number 6 [ 158.737382][ T5795] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.595812][ T28] audit: type=1326 audit(1751819974.427:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7402 comm="syz.3.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd458b8e929 code=0x7ffc0000 [ 159.647282][ T5875] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 159.694568][ T28] audit: type=1326 audit(1751819974.427:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7402 comm="syz.3.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd458b8e929 code=0x7ffc0000 [ 159.821254][ T28] audit: type=1326 audit(1751819974.457:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7402 comm="syz.3.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fd458b8e929 code=0x7ffc0000 [ 159.891415][ T5875] usb 5-1: unable to get BOS descriptor or descriptor too short [ 159.923458][ T5875] usb 5-1: config 6 has an invalid interface number: 38 but max is 0 [ 159.944644][ T5875] usb 5-1: config 6 has no interface number 0 [ 159.980127][ T28] audit: type=1326 audit(1751819974.467:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7402 comm="syz.3.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd458b8e929 code=0x7ffc0000 [ 159.982349][ T5875] usb 5-1: config 6 interface 38 has no altsetting 0 [ 160.067249][ T5875] usb 5-1: New USB device found, idVendor=05d1, idProduct=1003, bcdDevice=9d.e8 [ 160.076557][ T5875] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.084663][ T5875] usb 5-1: Product: syz [ 160.106897][ T5875] usb 5-1: Manufacturer: syz [ 160.121281][ T5875] usb 5-1: SerialNumber: syz [ 160.176297][ T28] audit: type=1326 audit(1751819974.477:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7402 comm="syz.3.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fd458b8e929 code=0x7ffc0000 [ 160.273474][ T28] audit: type=1326 audit(1751819974.477:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7402 comm="syz.3.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd458b8e929 code=0x7ffc0000 [ 160.374558][ T28] audit: type=1326 audit(1751819974.477:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7402 comm="syz.3.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd458b8e929 code=0x7ffc0000 [ 160.387513][ T5875] rndis_wlan 5-1:6.38: skipping garbage [ 160.406924][ T5875] usb 5-1: bad CDC descriptors [ 160.429097][ T5875] rndis_host 5-1:6.38: skipping garbage [ 160.434689][ T5875] usb 5-1: bad CDC descriptors [ 160.446918][ T5875] ftdi_sio 5-1:6.38: FTDI USB Serial Device converter detected [ 160.457841][ T5875] ftdi_sio ttyUSB0: unknown device type: 0x9de8 [ 160.477595][ T5875] usb 5-1: USB disconnect, device number 3 [ 160.558529][ T5875] ftdi_sio 5-1:6.38: device disconnected [ 160.564273][ T28] audit: type=1326 audit(1751819974.477:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7402 comm="syz.3.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fd458b8e929 code=0x7ffc0000 [ 160.703615][ T28] audit: type=1326 audit(1751819974.477:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7402 comm="syz.3.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd458b2ab19 code=0x7ffc0000 [ 160.774392][ T28] audit: type=1326 audit(1751819974.477:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7402 comm="syz.3.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd458b2ab19 code=0x7ffc0000 [ 161.079713][ T7438] af_packet: tpacket_rcv: packet too big, clamped from 65354 to 3710. macoff=82 [ 162.293138][ T7443] loop2: detected capacity change from 0 to 32768 [ 163.031502][ T7443] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 163.157328][ T7443] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 163.255352][ T7479] loop4: detected capacity change from 0 to 256 [ 163.313090][ T7479] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 163.453149][ T5787] ocfs2: Unmounting device (7,2) on (node local) [ 163.813414][ T7493] netlink: 8 bytes leftover after parsing attributes in process `syz.3.435'. [ 164.340865][ T9] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 164.546304][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 165.328968][ T9] usb 5-1: device descriptor read/all, error -71 [ 165.966504][ T5779] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 166.193646][ T5779] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 166.218699][ T5779] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 166.233021][ T5779] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.253338][ T5779] usb 3-1: Product: syz [ 166.271711][ T5779] usb 3-1: Manufacturer: syz [ 166.281832][ T5779] usb 3-1: SerialNumber: syz [ 166.580858][ T7562] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 166.603161][ T7562] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 166.631502][ T7562] bond0 (unregistering): Released all slaves [ 167.421825][ T5779] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 167.512936][ T5779] cdc_ncm 3-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 167.662428][ T5779] cdc_ncm 3-1:1.0: setting rx_max = 2048 [ 167.731296][ T5779] cdc_ncm 3-1:1.0: setting tx_max = 88 [ 167.838546][ T5779] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 167.871493][ T7590] netlink: 4 bytes leftover after parsing attributes in process `syz.4.464'. [ 167.911683][ T5779] usb 3-1: USB disconnect, device number 5 [ 167.932386][ T5779] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM (NO ZLP) [ 170.346168][ T5799] Bluetooth: hci4: command 0x1003 tx timeout [ 170.358450][ T50] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 170.816199][ T5875] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 170.884982][ T7681] netlink: 8 bytes leftover after parsing attributes in process `syz.1.493'. [ 171.009629][ T7667] loop2: detected capacity change from 0 to 32768 [ 171.021803][ T5875] usb 4-1: Using ep0 maxpacket: 8 [ 171.039377][ T7667] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.487 (7667) [ 171.043677][ T5875] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 171.088082][ T7689] binder: 7688:7689 ioctl 4018620d 0 returned -22 [ 171.106890][ T7667] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 171.120298][ T5875] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.131645][ T7667] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 171.152981][ T7667] BTRFS info (device loop2): turning on sync discard [ 171.175730][ T5875] pvrusb2: Hardware description: Terratec Grabster AV400 [ 171.180535][ T7667] BTRFS info (device loop2): use zlib compression, level 3 [ 171.202262][ T5875] pvrusb2: ********** [ 171.215854][ T7667] BTRFS info (device loop2): turning off barriers [ 171.220379][ T5875] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 171.237834][ T7667] BTRFS warning (device loop2): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 171.265817][ T7667] BTRFS info (device loop2): trying to use backup root at mount time [ 171.266281][ T5875] pvrusb2: Important functionality might not be entirely working. [ 171.298545][ T7667] BTRFS info (device loop2): enabling auto defrag [ 171.303374][ T5875] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 171.312684][ T7694] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 171.327087][ T7667] BTRFS info (device loop2): max_inline at 0 [ 171.338740][ T7667] BTRFS info (device loop2): using free space tree [ 171.348502][ T5875] pvrusb2: ********** [ 171.374575][ T2316] pvrusb2: Invalid write control endpoint [ 171.454499][ T11] BTRFS warning (device loop2): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 171.472819][ T7667] BTRFS error (device loop2): failed to load root extent [ 171.510989][ T7667] BTRFS warning (device loop2): try to load backup roots slot 1 [ 171.536403][ T11] BTRFS warning (device loop2): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 171.599672][ T7667] BTRFS warning (device loop2): couldn't read tree root [ 171.606983][ T7667] BTRFS warning (device loop2): try to load backup roots slot 2 [ 171.614845][ T2316] pvrusb2: Invalid write control endpoint [ 171.636580][ T3422] BTRFS error (device loop2): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 171.644266][ T2316] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 171.660234][ T7667] BTRFS warning (device loop2): couldn't read tree root [ 171.673794][ T7667] BTRFS warning (device loop2): try to load backup roots slot 3 [ 171.677781][ T2316] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 171.711123][ T2316] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 171.723829][ T7667] BTRFS info (device loop2): enabling ssd optimizations [ 171.744661][ T7667] BTRFS info (device loop2): rebuilding free space tree [ 171.766647][ T2316] pvrusb2: Device being rendered inoperable [ 171.800215][ T7672] pvrusb2: Attempted to execute control transfer when device not ok [ 171.813935][ T7667] BTRFS info (device loop2): checking UUID tree [ 171.837650][ T2316] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 171.845251][ T2316] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 171.857740][ T23] usb 4-1: USB disconnect, device number 7 [ 171.936968][ T2316] pvrusb2: Attached sub-driver cx25840 [ 171.955112][ T2316] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 172.001810][ T2316] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 172.152647][ T27] hid-generic 0002:0004:0009.0005: unknown main item tag 0x0 [ 172.194086][ T27] hid-generic 0002:0004:0009.0005: unknown main item tag 0x0 [ 172.229140][ T27] hid-generic 0002:0004:0009.0005: unknown main item tag 0x0 [ 172.258537][ T27] hid-generic 0002:0004:0009.0005: unknown main item tag 0x0 [ 172.278190][ T27] hid-generic 0002:0004:0009.0005: unknown main item tag 0x0 [ 172.285707][ T27] hid-generic 0002:0004:0009.0005: unknown main item tag 0x0 [ 172.304093][ T27] hid-generic 0002:0004:0009.0005: unknown main item tag 0x0 [ 172.324653][ T27] hid-generic 0002:0004:0009.0005: unknown main item tag 0x0 [ 172.346624][ T27] hid-generic 0002:0004:0009.0005: unknown main item tag 0x0 [ 172.354525][ T27] hid-generic 0002:0004:0009.0005: unknown main item tag 0x0 [ 172.372889][ T27] hid-generic 0002:0004:0009.0005: unknown main item tag 0x0 [ 172.385180][ T5787] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 172.406373][ T27] hid-generic 0002:0004:0009.0005: unknown main item tag 0x0 [ 172.445895][ T27] hid-generic 0002:0004:0009.0005: unknown main item tag 0x0 [ 172.466106][ T27] hid-generic 0002:0004:0009.0005: unknown main item tag 0x0 [ 172.473566][ T27] hid-generic 0002:0004:0009.0005: unknown main item tag 0x0 [ 172.505676][ T27] hid-generic 0002:0004:0009.0005: unknown main item tag 0x0 [ 172.524116][ T27] hid-generic 0002:0004:0009.0005: unknown main item tag 0x0 [ 172.561325][ T5836] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 172.572947][ T27] hid-generic 0002:0004:0009.0005: hidraw0: HID v0.04 Device [syz0] on syz0 [ 172.774116][ T7742] fido_id[7742]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 172.796261][ T5836] usb 5-1: Using ep0 maxpacket: 8 [ 172.836644][ T5836] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 172.845740][ T5836] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.896439][ T5836] usb 5-1: Product: syz [ 172.900660][ T5836] usb 5-1: Manufacturer: syz [ 172.957138][ T5836] usb 5-1: SerialNumber: syz [ 172.979882][ T5836] usb 5-1: config 0 descriptor?? [ 173.193220][ T5836] usb 5-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 173.573602][ T9] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 173.679932][ T9] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 173.824123][ T7777] loop2: detected capacity change from 0 to 1024 [ 173.917189][ T7777] EXT4-fs: Ignoring removed nomblk_io_submit option [ 174.061212][ T7777] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 174.275126][ T7777] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 174.737481][ T7777] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.892455][ T7786] loop4: detected capacity change from 0 to 1024 [ 174.987628][ T7786] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 175.007794][ T5787] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.074731][ T5836] usb write operation failed. (-71) [ 175.113960][ T5836] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 175.155854][ T5836] dvbdev: DVB: registering new adapter (Terratec H7) [ 175.185753][ T5836] usb 5-1: media controller created [ 175.202497][ T5836] usb read operation failed. (-71) [ 175.219799][ T5836] usb write operation failed. (-71) [ 175.251937][ T5836] dvb_usb_az6007: probe of 5-1:0.0 failed with error -5 [ 175.316784][ T5836] usb 5-1: USB disconnect, device number 6 [ 175.365843][ T7773] loop1: detected capacity change from 0 to 32768 [ 175.409675][ T7773] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.505 (7773) [ 175.421126][ T7046] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.500898][ T7773] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 175.540339][ T7773] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 175.574285][ T7773] BTRFS info (device loop1): setting nodatacow, compression disabled [ 175.602621][ T7773] BTRFS info (device loop1): max_inline at 0 [ 175.626444][ T7773] BTRFS info (device loop1): enabling disk space caching [ 175.655498][ T7773] BTRFS info (device loop1): turning off barriers [ 175.689598][ T7773] BTRFS info (device loop1): turning on flush-on-commit [ 175.720716][ T7773] BTRFS info (device loop1): doing ref verification [ 175.758633][ T7773] BTRFS info (device loop1): force clearing of disk cache [ 175.812951][ T7773] BTRFS info (device loop1): enabling ssd optimizations [ 175.855391][ T7773] BTRFS info (device loop1): max_inline at 4096 [ 175.879542][ T7773] BTRFS info (device loop1): disk space caching is enabled [ 176.094606][ T7773] BTRFS info (device loop1): auto enabling async discard [ 176.157375][ T7773] BTRFS info (device loop1): rebuilding free space tree [ 176.228446][ T7773] BTRFS info (device loop1): disabling free space tree [ 176.267730][ T7773] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 176.282554][ T7839] netlink: 128 bytes leftover after parsing attributes in process `syz.3.516'. [ 176.301841][ T7773] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 176.525231][ T7848] loop3: detected capacity change from 0 to 2048 [ 176.571486][ T5795] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 176.616387][ T7848] EXT4-fs (loop3): mounted filesystem 00000000-0700-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 176.740339][ T7848] EXT4-fs error (device loop3): __ext4_iget:5053: inode #12: block 2: comm syz.3.518: invalid block [ 176.778493][ T7848] EXT4-fs error (device loop3): __ext4_iget:5053: inode #12: block 2: comm syz.3.518: invalid block [ 176.997934][ T5798] EXT4-fs (loop3): unmounting filesystem 00000000-0700-0000-0000-000000000000. [ 177.397820][ T7870] input: syz0 as /devices/virtual/input/input9 [ 177.505673][ T7880] loop1: detected capacity change from 0 to 2048 [ 177.521659][ T7880] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 177.584218][ T7881] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 177.585549][ T7880] syz.1.526: attempt to access beyond end of device [ 177.585549][ T7880] loop1: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 177.695688][ T7880] NILFS (loop1): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 177.708730][ T7880] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 177.759055][ T7880] Remounting filesystem read-only [ 177.769482][ T7880] NILFS (loop1): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 177.779992][ T7880] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 177.792784][ T7880] NILFS (loop1): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 177.803230][ T7880] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 177.813334][ T7880] NILFS (loop1): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 177.823640][ T7880] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 177.833979][ T7880] NILFS (loop1): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 177.845720][ T7880] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 177.855822][ T7880] NILFS (loop1): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 177.866348][ T7880] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 177.885066][ T7880] NILFS (loop1): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 177.895471][ T7880] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 177.906951][ T7880] NILFS (loop1): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 177.917340][ T7880] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 177.937165][ T7880] NILFS (loop1): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 177.948837][ T7880] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 177.962269][ T7880] NILFS (loop1): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 177.972613][ T7880] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 177.985002][ T7880] NILFS (loop1): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 177.995385][ T7880] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 178.016268][ T7880] NILFS (loop1): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 178.026696][ T7880] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 178.038334][ T7880] NILFS (loop1): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 178.049939][ T7880] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 178.060078][ T7880] NILFS (loop1): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 178.070597][ T7880] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 178.082960][ T7880] NILFS (loop1): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 178.093319][ T7880] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 178.117065][ T7880] NILFS (loop1): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 178.127438][ T7880] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 178.137375][ T28] kauditd_printk_skb: 1097 callbacks suppressed [ 178.137387][ T28] audit: type=1800 audit(1751819992.977:1449): pid=7880 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.526" name="file2" dev="loop1" ino=16 res=0 errno=0 [ 178.246686][ T9] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 178.428091][ T9] usb 3-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice=f0.ee [ 178.456170][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.493321][ T9] usb 3-1: config 0 descriptor?? [ 178.512521][ T9] usb 3-1: selecting invalid altsetting 1 [ 178.627599][ T9] snd-usb-audio: probe of 3-1:0.0 failed with error -22 [ 178.638003][ T6642] udevd[6642]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 178.799660][ T9] usb 3-1: USB disconnect, device number 6 [ 178.943813][ T27] kernel write not supported for file /92/loginuid (pid: 27 comm: kworker/1:1) [ 178.989402][ T7886] loop3: detected capacity change from 0 to 32768 [ 179.037863][ T7886] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 179.190371][ T7886] XFS (loop3): Ending clean mount [ 179.652226][ T5798] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 179.838965][ T7918] loop1: detected capacity change from 0 to 32768 [ 179.897478][ T7918] XFS: attr2 mount option is deprecated. [ 179.916505][ T7918] XFS: ikeep mount option is deprecated. [ 179.922210][ T7918] XFS: noikeep mount option is deprecated. [ 180.038945][ T7918] XFS (loop1): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 180.250810][ T7957] loop3: detected capacity change from 0 to 8192 [ 180.357723][ T7918] XFS (loop1): Ending clean mount [ 180.394082][ T7918] XFS (loop1): Quotacheck needed: Please wait. [ 180.505948][ T7941] loop2: detected capacity change from 0 to 32768 [ 180.538270][ T7941] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.536 (7941) [ 180.574087][ T7918] XFS (loop1): Quotacheck: Done. [ 180.732026][ T7941] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 180.762449][ T7941] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 180.822139][ T7941] BTRFS info (device loop2): turning on sync discard [ 180.842891][ T7941] BTRFS info (device loop2): use zlib compression, level 3 [ 180.845696][ T5795] XFS (loop1): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 180.852947][ T7941] BTRFS info (device loop2): turning off barriers [ 180.865258][ T7941] BTRFS warning (device loop2): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 180.881023][ T7941] BTRFS info (device loop2): trying to use backup root at mount time [ 180.901755][ T7941] BTRFS info (device loop2): enabling auto defrag [ 180.915609][ T7941] BTRFS info (device loop2): max_inline at 0 [ 180.950336][ T7941] BTRFS info (device loop2): using free space tree [ 181.198415][ T12] BTRFS warning (device loop2): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 181.287735][ T7941] BTRFS error (device loop2): failed to load root extent [ 181.318019][ T7941] BTRFS warning (device loop2): try to load backup roots slot 1 [ 181.338414][ T58] BTRFS warning (device loop2): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 181.406852][ T7941] BTRFS warning (device loop2): couldn't read tree root [ 181.413852][ T7941] BTRFS warning (device loop2): try to load backup roots slot 2 [ 181.462091][ T1305] BTRFS error (device loop2): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 181.489097][ T7941] BTRFS warning (device loop2): couldn't read tree root [ 181.518418][ T7941] BTRFS warning (device loop2): try to load backup roots slot 3 [ 181.604489][ T7941] BTRFS info (device loop2): enabling ssd optimizations [ 181.653484][ T7941] BTRFS info (device loop2): rebuilding free space tree [ 181.759594][ T7941] BTRFS info (device loop2): checking UUID tree [ 182.026352][ T27] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 182.142131][ T5787] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 182.235251][ T27] usb 2-1: Using ep0 maxpacket: 8 [ 182.285208][ T27] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 182.316173][ T27] usb 2-1: config 179 has no interface number 0 [ 182.332763][ T27] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 182.376246][ T27] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 182.426183][ T27] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 182.454243][ T27] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 182.514782][ T27] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 182.603978][ T27] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 182.635264][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.209377][ T8022] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 183.919973][ T8063] loop4: detected capacity change from 0 to 4096 [ 183.957287][ T8063] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 184.077919][ T8069] input: syz0 as /devices/virtual/input/input10 [ 184.123880][ T8063] ntfs3: loop4: Failed to initialize $Extend/$Reparse. [ 184.215519][ T9] usb 2-1: USB disconnect, device number 5 [ 184.215567][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 184.236071][ C1] dummy_hcd dummy_hcd.1: timer fired with no URBs pending? [ 184.325819][ T8067] loop3: detected capacity change from 0 to 8192 [ 184.719516][ T8081] loop4: detected capacity change from 0 to 512 [ 184.828015][ T8081] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 184.845370][ T8081] ext4 filesystem being mounted at /48/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 184.962401][ T8090] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 184.978432][ T7046] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.981812][ T8090] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 185.096189][ T9] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 185.133959][ T8095] loop3: detected capacity change from 0 to 512 [ 185.193872][ T8095] EXT4-fs (loop3): 1 orphan inode deleted [ 185.204891][ T8095] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 185.228242][ T58] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 185.255360][ T58] EXT4-fs error (device loop3): ext4_release_dquot:6974: comm kworker/u4:4: Failed to release dquot type 1 [ 185.272950][ T8095] ext4 filesystem being mounted at /143/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 185.297275][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 185.311398][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 185.343898][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 185.368672][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 185.401057][ T9] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 185.411048][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.428941][ T9] usb 3-1: config 0 descriptor?? [ 185.461990][ T5798] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.519412][ T8094] loop4: detected capacity change from 0 to 32768 [ 185.573334][ T8094] ocfs2: Slot 0 on device (7,4) was already allocated to this node! [ 185.608691][ T8094] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 185.811664][ T8094] overlayfs: upper fs does not support tmpfile. [ 185.890323][ T8094] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 185.910374][ T9] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 185.926571][ T9] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 185.933969][ T8094] overlayfs: failed to set xattr on upper [ 185.939880][ T9] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 185.947431][ T8094] overlayfs: ...falling back to redirect_dir=nofollow. [ 185.954457][ T9] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 185.962008][ T9] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 185.969375][ T8094] overlayfs: ...falling back to index=off. [ 185.975351][ T9] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 185.982908][ T8094] overlayfs: ...falling back to uuid=null. [ 185.988945][ T9] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 185.999085][ T9] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 186.016243][ T9] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 186.023754][ T8094] overlayfs: upper fs missing required features. [ 186.031449][ T9] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 186.066502][ T9] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0007/input/input11 [ 186.113286][ T9] microsoft 0003:045E:07DA.0007: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 186.113565][ T8085] loop2: detected capacity change from 0 to 1024 [ 186.195724][ T7046] ocfs2: Unmounting device (7,4) on (node local) [ 186.425342][ T27] usb 3-1: USB disconnect, device number 7 [ 186.637493][ T8104] loop1: detected capacity change from 0 to 40427 [ 186.653894][ T8104] F2FS-fs (loop1): build fault injection attr: rate: 771, type: 0x7ffff [ 186.687202][ T8104] F2FS-fs (loop1): invalid crc value [ 186.710661][ T8104] F2FS-fs (loop1): Found nat_bits in checkpoint [ 186.794099][ T8104] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 186.883866][ T28] audit: type=1800 audit(1751820001.717:1450): pid=8104 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.567" name="file1" dev="loop1" ino=10 res=0 errno=0 [ 186.920647][ T8104] F2FS-fs (loop1): inject checkpoint error in f2fs_balance_fs of f2fs_write_single_data_page+0x1012/0x19e0 [ 186.932856][ T8104] syz.1.567: attempt to access beyond end of device [ 186.932856][ T8104] loop1: rw=2049, sector=77824, nr_sectors = 8 limit=40427 [ 186.972440][ T8104] F2FS-fs (loop1): Stopped filesystem due to reason: 1 [ 188.177951][ T8140] pim6reg1: entered promiscuous mode [ 188.183404][ T8140] pim6reg1: entered allmulticast mode [ 188.274017][ T8142] loop2: detected capacity change from 0 to 2048 [ 188.345013][ T8142] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 188.434400][ T8150] Bluetooth: MGMT ver 1.22 [ 188.518637][ T28] audit: type=1804 audit(1751820003.347:1451): pid=8142 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.575" name="/newroot/143/file1/bus" dev="loop2" ino=18 res=1 errno=0 [ 188.543984][ T8142] Invalid ELF header magic: != ELF [ 188.614360][ T28] audit: type=1800 audit(1751820003.377:1452): pid=8142 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.575" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 188.694071][ T5787] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.956576][ T5836] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 189.013661][ T8170] loop2: detected capacity change from 0 to 256 [ 189.174217][ T5836] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 189.199192][ T5836] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 189.220849][ T5836] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 189.230485][ T5836] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.248100][ T8160] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 189.277846][ T5836] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 189.403782][ T28] audit: type=1326 audit(1751820004.237:1453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8177 comm="syz.3.587" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd458b8e929 code=0x0 [ 189.421454][ T8181] loop2: detected capacity change from 0 to 2048 [ 189.436707][ T23] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 189.443686][ T8181] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 189.452326][ T8181] UDF-fs: Scanning with blocksize 512 failed [ 189.499737][ T8181] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 189.586727][ T5836] usb 2-1: USB disconnect, device number 6 [ 189.654747][ T23] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 189.677691][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.697550][ T23] usb 5-1: config 0 descriptor?? [ 189.709360][ T23] cp210x 5-1:0.0: cp210x converter detected [ 190.115044][ T23] cp210x 5-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 190.124577][ T8174] loop4: detected capacity change from 0 to 512 [ 190.143992][ T8174] EXT4-fs (loop4): filesystem is read-only [ 190.174492][ T8174] EXT4-fs (loop4): filesystem is read-only [ 190.193945][ T8174] EXT4-fs (loop4): orphan cleanup on readonly fs [ 190.204055][ T8174] EXT4-fs error (device loop4): ext4_orphan_get:1425: comm syz.4.585: bad orphan inode 16 [ 190.222486][ T8174] ext4_test_bit(bit=15, block=3) = 0 [ 190.231610][ T8174] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 190.242562][ T8194] dccp_invalid_packet: P.type (CLOSE) not Data || [Data]Ack, while P.X == 0 [ 190.318665][ T23] usb 5-1: cp210x converter now attached to ttyUSB0 [ 190.543115][ T5779] usb 5-1: USB disconnect, device number 7 [ 190.566604][ T5779] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 190.597575][ T5779] cp210x 5-1:0.0: device disconnected [ 190.676247][ T23] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 190.853324][ T8205] loop1: detected capacity change from 0 to 32768 [ 190.870890][ T8205] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by syz.1.595 (8205) [ 190.888897][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 190.903512][ T8205] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 190.915778][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 190.922826][ T8190] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 190.927419][ T8205] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 190.954376][ T23] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 190.968793][ T8205] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 190.979596][ T23] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 190.990003][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.998756][ T8205] BTRFS info (device loop1): use zstd compression, level 3 [ 191.006808][ T8205] BTRFS info (device loop1): using free space tree [ 191.032672][ T23] usb 4-1: config 0 descriptor?? [ 191.127627][ T7046] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.165662][ T8205] BTRFS info (device loop1): enabling ssd optimizations [ 191.199115][ T8205] BTRFS info (device loop1): auto enabling async discard [ 191.498490][ T23] plantronics 0003:047F:FFFF.0008: No inputs registered, leaving [ 191.523601][ T23] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 191.540241][ T5792] Bluetooth: hci0: command 0x0406 tx timeout [ 191.542507][ T5794] Bluetooth: hci2: command 0x0406 tx timeout [ 191.546453][ T50] Bluetooth: hci3: command 0x0406 tx timeout [ 191.646242][ T8230] loop4: detected capacity change from 0 to 4096 [ 191.759644][ T8233] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 191.882898][ T28] audit: type=1800 audit(1751820006.717:1454): pid=8230 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.599" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 192.123366][ T5795] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 192.957800][ T8241] netlink: 16 bytes leftover after parsing attributes in process `syz.4.602'. [ 192.979983][ T8241] netlink: 'syz.4.602': attribute type 1 has an invalid length. [ 192.992712][ T8241] netlink: 'syz.4.602': attribute type 2 has an invalid length. [ 193.781667][ T8252] loop1: detected capacity change from 0 to 512 [ 193.815995][ T8252] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a80ec118, mo2=0002] [ 193.827426][ T8252] System zones: 0-2, 18-18, 34-35 [ 193.839224][ T8252] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-ff7f-000000000000 r/w without journal. Quota mode: writeback. [ 193.868142][ T8252] ext4 filesystem being mounted at /156/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 193.896641][ T28] audit: type=1800 audit(1751820008.737:1455): pid=8252 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.605" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 194.122484][ T5795] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-ff7f-000000000000. [ 194.433604][ T23] usb 4-1: USB disconnect, device number 8 [ 194.593250][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.604300][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.610862][ T8250] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 196.109463][ T8292] loop1: detected capacity change from 0 to 64 [ 196.458370][ T1142] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 196.963233][ T8307] loop1: detected capacity change from 0 to 32768 [ 197.011761][ T8307] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 197.133165][ T8307] XFS (loop1): Ending clean mount [ 197.478121][ T8307] loop1: detected capacity change from 32768 to 64 [ 198.292641][ T5795] syz-executor: attempt to access beyond end of device [ 198.292641][ T5795] loop1: rw=432129, sector=112, nr_sectors = 16 limit=64 [ 198.318583][ T95] XFS (loop1): log I/O error -5 [ 198.323964][ T95] XFS (loop1): Filesystem has been shut down due to log error (0x2). [ 198.333644][ T95] XFS (loop1): Please unmount the filesystem and rectify the problem(s). [ 198.345608][ T5795] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 198.841099][ T3422] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 199.412051][ T8370] loop3: detected capacity change from 0 to 32768 [ 199.432058][ T8370] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 199.481206][ T8370] XFS (loop3): Ending clean mount [ 199.556422][ T8370] loop3: detected capacity change from 32768 to 64 [ 199.571598][ T8370] syz.3.639: attempt to access beyond end of device [ 199.571598][ T8370] loop3: rw=2048, sector=12252, nr_sectors = 4 limit=64 [ 199.698669][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.823422][ T5798] syz-executor: attempt to access beyond end of device [ 199.823422][ T5798] loop3: rw=432129, sector=112, nr_sectors = 16 limit=64 [ 199.881183][ T95] XFS (loop3): log I/O error -5 [ 199.887305][ T95] XFS (loop3): Filesystem has been shut down due to log error (0x2). [ 199.896809][ T95] XFS (loop3): Please unmount the filesystem and rectify the problem(s). [ 199.908154][ T5798] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 199.909314][ T8387] netlink: 'syz.2.643': attribute type 4 has an invalid length. [ 200.523755][ T8392] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3290916003 (26327328024 ns) > initial count (15247863992 ns). Using initial count to start timer. [ 201.005609][ T1142] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 201.674948][ T8416] loop4: detected capacity change from 0 to 32768 [ 201.699249][ T8416] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 201.814453][ T8416] XFS (loop4): Ending clean mount [ 202.026514][ T8416] loop4: detected capacity change from 32768 to 64 [ 202.045792][ T8442] syz.4.651: attempt to access beyond end of device [ 202.045792][ T8442] loop4: rw=2048, sector=12252, nr_sectors = 4 limit=64 [ 202.166163][ T9] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 202.185463][ T7046] syz-executor: attempt to access beyond end of device [ 202.185463][ T7046] loop4: rw=432129, sector=112, nr_sectors = 16 limit=64 [ 202.186324][ T8446] netlink: 16 bytes leftover after parsing attributes in process `syz.3.659'. [ 202.207931][ T54] XFS (loop4): log I/O error -5 [ 202.213722][ T54] XFS (loop4): Filesystem has been shut down due to log error (0x2). [ 202.223306][ T54] XFS (loop4): Please unmount the filesystem and rectify the problem(s). [ 202.242887][ T7046] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 202.251414][ T8446] netlink: 4 bytes leftover after parsing attributes in process `syz.3.659'. [ 202.385407][ T9] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 202.394697][ T9] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 202.408529][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 202.450591][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 202.482504][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 202.566293][ T9] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 202.575400][ T9] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 202.589900][ T9] usb 3-1: Product: syz [ 202.594111][ T9] usb 3-1: Manufacturer: syz [ 202.642797][ T9] cdc_wdm 3-1:1.0: skipping garbage [ 202.668277][ T9] cdc_wdm 3-1:1.0: skipping garbage [ 202.682249][ T9] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 202.695134][ T9] cdc_wdm 3-1:1.0: Unknown control protocol [ 202.773552][ T8456] loop3: detected capacity change from 0 to 4096 [ 202.815770][ T8456] NILFS (loop3): invalid segment: Checksum error in segment payload [ 202.826497][ T8456] NILFS (loop3): trying rollback from an earlier position [ 202.869463][ T8456] NILFS (loop3): recovery complete [ 202.899654][ T8461] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 202.978137][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 202.984859][ T5836] usb 3-1: USB disconnect, device number 8 [ 202.990943][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 202.997061][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 203.036118][ T5863] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 203.203505][ T8467] loop3: detected capacity change from 0 to 1024 [ 203.216606][ T8467] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 203.246563][ T5863] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 203.257845][ T5863] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 203.267390][ T5863] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.278527][ T5863] usb 5-1: config 0 descriptor?? [ 203.289912][ T5863] pwc: Askey VC010 type 2 USB webcam detected. [ 203.298740][ T8467] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 203.354925][ T8467] EXT4-fs error (device loop3): ext4_xattr_inode_iget:440: inode #11: comm syz.3.666: missing EA_INODE flag [ 203.369936][ T8467] EXT4-fs (loop3): Remounting filesystem read-only [ 203.377451][ T8467] EXT4-fs warning (device loop3): ext4_xattr_inode_dec_ref_all:1238: inode #18: comm syz.3.666: ea_inode dec ref err=-5 [ 203.390956][ T8467] EXT4-fs warning (device loop3): ext4_evict_inode:272: xattr delete (err -5) [ 203.421523][ T5798] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.719973][ T5863] pwc: recv_control_msg error -32 req 02 val 2b00 [ 203.738665][ T5863] pwc: recv_control_msg error -32 req 02 val 2700 [ 203.772649][ T5863] pwc: recv_control_msg error -32 req 02 val 2c00 [ 203.955663][ T8485] pim6reg1: entered promiscuous mode [ 203.961333][ T8485] pim6reg1: entered allmulticast mode [ 203.987599][ T5863] pwc: recv_control_msg error -71 req 04 val 1300 [ 204.022502][ T5863] pwc: recv_control_msg error -71 req 04 val 1400 [ 204.030415][ T5863] pwc: recv_control_msg error -71 req 02 val 2000 [ 204.039538][ T8488] netlink: 16 bytes leftover after parsing attributes in process `syz.2.671'. [ 204.052696][ T8488] netlink: 4 bytes leftover after parsing attributes in process `syz.2.671'. [ 204.061761][ T5863] pwc: recv_control_msg error -71 req 02 val 2100 [ 204.075778][ T5863] pwc: recv_control_msg error -71 req 04 val 1500 [ 204.085701][ T5863] pwc: recv_control_msg error -71 req 02 val 2500 [ 204.092722][ T5863] pwc: recv_control_msg error -71 req 02 val 2400 [ 204.100895][ T5863] pwc: recv_control_msg error -71 req 02 val 2600 [ 204.116891][ T5863] pwc: recv_control_msg error -71 req 02 val 2900 [ 204.130541][ T5863] pwc: recv_control_msg error -71 req 02 val 2800 [ 204.152815][ T5863] pwc: recv_control_msg error -71 req 04 val 1100 [ 204.170092][ T5863] pwc: recv_control_msg error -71 req 04 val 1200 [ 204.183758][ T5863] pwc: Registered as video103. [ 204.193843][ T5863] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input12 [ 204.229458][ T5863] usb 5-1: USB disconnect, device number 8 [ 204.415612][ T8496] loop2: detected capacity change from 0 to 4096 [ 204.466992][ T8496] NILFS (loop2): invalid segment: Checksum error in segment payload [ 204.487840][ T8496] NILFS (loop2): trying rollback from an earlier position [ 204.537089][ T8496] NILFS (loop2): recovery complete [ 204.570310][ T8503] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 205.343000][ T8527] TCP: TCP_TX_DELAY enabled [ 205.840581][ T8546] loop1: detected capacity change from 0 to 2048 [ 205.957933][ T8546] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 206.716339][ T5875] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 206.906121][ T5875] usb 2-1: Using ep0 maxpacket: 32 [ 206.918592][ T5875] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 206.929815][ T5875] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 206.940114][ T5875] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 206.966864][ T5875] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.980803][ T5875] usb 2-1: config 0 descriptor?? [ 206.993238][ T5875] hub 2-1:0.0: USB hub found [ 207.017184][ T5863] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 207.209214][ T5863] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 207.237780][ T5875] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 207.246408][ T5863] usb 4-1: config 0 has no interface number 0 [ 207.252557][ T5863] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 207.280275][ T5863] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.297402][ T5863] usb 4-1: config 0 descriptor?? [ 207.304695][ T5863] cp210x 4-1:0.1: cp210x converter detected [ 207.464052][ T5875] hid-generic 0003:046D:C31C.0009: item fetching failed at offset 0/1 [ 207.475209][ T5875] hid-generic: probe of 0003:046D:C31C.0009 failed with error -22 [ 207.737014][ T5863] cp210x 4-1:0.1: failed to get vendor val 0x000e size 3: -32 [ 207.806985][ T27] usb 2-1: USB disconnect, device number 7 [ 207.953677][ T5863] usb 4-1: cp210x converter now attached to ttyUSB0 [ 208.036205][ T5836] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 208.169830][ T5779] usb 4-1: USB disconnect, device number 9 [ 208.178694][ T5779] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 208.190362][ T5779] cp210x 4-1:0.1: device disconnected [ 208.233128][ T5836] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 208.256154][ T5836] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 208.274879][ T5836] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 208.284919][ T5836] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 208.302042][ T5836] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 208.322890][ T5836] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 208.332452][ T5836] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 208.345458][ T5836] usb 5-1: Product: syz [ 208.351547][ T5836] usb 5-1: Manufacturer: syz [ 208.367937][ T5836] cdc_wdm 5-1:1.0: skipping garbage [ 208.382625][ T5836] cdc_wdm 5-1:1.0: skipping garbage [ 208.403043][ T5836] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 208.416777][ T5836] cdc_wdm 5-1:1.0: Unknown control protocol [ 208.726814][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 208.733569][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 208.740090][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 208.746791][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 208.753958][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 208.760598][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 208.767643][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 208.774291][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 208.783727][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 208.790374][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 208.796953][ T5836] usb 5-1: USB disconnect, device number 9 [ 208.803224][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 208.803253][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 208.803271][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 209.633654][ T8665] kvm: MWAIT instruction emulated as NOP! [ 209.866263][ T9] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 210.059381][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 210.081983][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 210.095044][ T9] usb 4-1: config 6 has an invalid interface number: 7 but max is 0 [ 210.110790][ T9] usb 4-1: config 6 has no interface number 0 [ 210.136226][ T9] usb 4-1: config 6 interface 7 has no altsetting 0 [ 210.141111][ T8686] loop2: detected capacity change from 0 to 2048 [ 210.155848][ T9] usb 4-1: New USB device found, idVendor=07b8, idProduct=110c, bcdDevice=e4.e2 [ 210.180234][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.212929][ T9] usb 4-1: Product: syz [ 210.225777][ T9] usb 4-1: Manufacturer: syz [ 210.231875][ T8686] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 210.243975][ T9] usb 4-1: SerialNumber: syz [ 210.397736][ T28] audit: type=1800 audit(1751820025.217:1456): pid=8686 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.738" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 210.519923][ T5787] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.366606][ T23] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 211.548322][ T23] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 211.567188][ T23] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 211.593302][ T23] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 211.608515][ T23] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 211.629613][ T23] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 211.651262][ T23] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 211.666179][ T23] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 211.674311][ T23] usb 2-1: Product: syz [ 211.678581][ T23] usb 2-1: Manufacturer: syz [ 211.688164][ T23] cdc_wdm 2-1:1.0: skipping garbage [ 211.693431][ T23] cdc_wdm 2-1:1.0: skipping garbage [ 211.697780][ T9] pegasus: probe of 4-1:6.7 failed with error -71 [ 211.710393][ T23] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 211.717357][ T23] cdc_wdm 2-1:1.0: Unknown control protocol [ 211.743817][ T9] usb 4-1: USB disconnect, device number 10 [ 212.046507][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 212.053176][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 212.060949][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 212.067849][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 212.074241][ T23] usb 2-1: USB disconnect, device number 8 [ 212.080301][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 212.080331][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 212.080349][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 212.571948][ T8765] loop3: detected capacity change from 0 to 128 [ 212.803779][ T8765] EXT4-fs (loop3): Test dummy encryption mode enabled [ 212.837698][ T8765] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 212.872891][ T8765] ext4 filesystem being mounted at /189/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 212.956547][ T9] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 212.966539][ T5798] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 213.157866][ T9] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 213.166764][ T9] usb 5-1: config 0 has no interface number 0 [ 213.172909][ T9] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 213.182620][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.194906][ T9] usb 5-1: config 0 descriptor?? [ 213.214972][ T9] cp210x 5-1:0.1: cp210x converter detected [ 213.623032][ T9] cp210x 5-1:0.1: failed to get vendor val 0x000e size 3: -32 [ 213.851927][ T9] usb 5-1: cp210x converter now attached to ttyUSB0 [ 214.118936][ T5863] usb 5-1: USB disconnect, device number 10 [ 214.149033][ T5863] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 214.187273][ T5863] cp210x 5-1:0.1: device disconnected [ 215.679633][ T8853] kvm: emulating exchange as write [ 216.189542][ T5876] hid-generic 0002:0004:0009.000A: unknown main item tag 0x0 [ 216.202877][ T5876] hid-generic 0002:0004:0009.000A: unknown main item tag 0x0 [ 216.211870][ T5876] hid-generic 0002:0004:0009.000A: unknown main item tag 0x0 [ 216.231970][ T5876] hid-generic 0002:0004:0009.000A: unknown main item tag 0x0 [ 216.241362][ T5876] hid-generic 0002:0004:0009.000A: unknown main item tag 0x0 [ 216.252737][ T5876] hid-generic 0002:0004:0009.000A: unknown main item tag 0x0 [ 216.262359][ T5876] hid-generic 0002:0004:0009.000A: unknown main item tag 0x0 [ 216.275485][ T5876] hid-generic 0002:0004:0009.000A: unknown main item tag 0x0 [ 216.276130][ T5836] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 216.283907][ T5876] hid-generic 0002:0004:0009.000A: unknown main item tag 0x0 [ 216.304350][ T5876] hid-generic 0002:0004:0009.000A: unknown main item tag 0x0 [ 216.312204][ T5876] hid-generic 0002:0004:0009.000A: unknown main item tag 0x0 [ 216.320371][ T5876] hid-generic 0002:0004:0009.000A: unknown main item tag 0x0 [ 216.328313][ T5876] hid-generic 0002:0004:0009.000A: unknown main item tag 0x0 [ 216.335869][ T5876] hid-generic 0002:0004:0009.000A: unknown main item tag 0x0 [ 216.347008][ T5876] hid-generic 0002:0004:0009.000A: unknown main item tag 0x0 [ 216.354448][ T5876] hid-generic 0002:0004:0009.000A: unknown main item tag 0x0 [ 216.362587][ T5876] hid-generic 0002:0004:0009.000A: unknown main item tag 0x0 [ 216.384362][ T5876] hid-generic 0002:0004:0009.000A: hidraw0: HID v0.04 Device [syz0] on syz0 [ 216.481762][ T8880] fido_id[8880]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 216.513262][ T5836] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 216.545706][ T5836] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 216.566162][ T5836] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.574804][ T5836] usb 4-1: Product: syz [ 216.586417][ T5836] usb 4-1: Manufacturer: syz [ 216.591060][ T5836] usb 4-1: SerialNumber: syz [ 217.404789][ T5876] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 217.424517][ T8897] loop2: detected capacity change from 0 to 1024 [ 217.478812][ T8897] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 217.545053][ T5787] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.607282][ T5876] usb 2-1: Using ep0 maxpacket: 8 [ 217.614764][ T5876] usb 2-1: unable to get BOS descriptor or descriptor too short [ 217.625150][ T5876] usb 2-1: config 6 has an invalid interface number: 7 but max is 0 [ 217.633372][ T5876] usb 2-1: config 6 has no interface number 0 [ 217.640996][ T5836] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 217.641840][ T5876] usb 2-1: config 6 interface 7 has no altsetting 0 [ 217.652810][ T5836] cdc_ncm 4-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 217.660667][ T5876] usb 2-1: New USB device found, idVendor=07b8, idProduct=110c, bcdDevice=e4.e2 [ 217.664412][ T5836] cdc_ncm 4-1:1.0: setting rx_max = 2048 [ 217.675401][ T5876] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.686569][ T5876] usb 2-1: Product: syz [ 217.690751][ T5876] usb 2-1: Manufacturer: syz [ 217.695334][ T5876] usb 2-1: SerialNumber: syz [ 217.842767][ T5836] cdc_ncm 4-1:1.0: setting tx_max = 88 [ 217.862842][ T5836] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 217.883258][ T5836] usb 4-1: USB disconnect, device number 11 [ 217.890875][ T5836] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM (NO ZLP) [ 218.565704][ T8907] only policy match revision 0 supported [ 218.565723][ T8907] unable to load match [ 218.766326][ T5863] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 218.956144][ T5863] usb 3-1: Using ep0 maxpacket: 16 [ 219.619136][ T5863] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 219.654415][ T5863] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 219.677063][ T5863] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.704906][ T5863] usb 3-1: Product: syz [ 219.720604][ T5863] usb 3-1: Manufacturer: syz [ 219.725255][ T5863] usb 3-1: SerialNumber: syz [ 219.735275][ T5876] pegasus: probe of 2-1:6.7 failed with error -71 [ 219.755292][ T5876] usb 2-1: USB disconnect, device number 9 [ 219.783756][ T5863] usb 3-1: config 0 descriptor?? [ 219.798530][ T5863] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 219.857028][ T5863] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 219.919528][ T8918] loop4: detected capacity change from 0 to 1024 [ 219.947723][ T8918] EXT4-fs (loop4): Invalid log cluster size: 32 [ 220.416573][ T5863] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 220.905481][ T8931] loop3: detected capacity change from 0 to 32768 [ 220.926412][ T8931] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.806 (8931) [ 220.977557][ T8931] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 220.990613][ T8931] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 221.002432][ T8931] BTRFS info (device loop3): setting nodatacow, compression disabled [ 221.011005][ T8931] BTRFS info (device loop3): max_inline at 0 [ 221.024914][ T8931] BTRFS info (device loop3): enabling disk space caching [ 221.055524][ T5863] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 221.064848][ T8931] BTRFS info (device loop3): turning off barriers [ 221.071698][ T8931] BTRFS info (device loop3): turning on flush-on-commit [ 221.085911][ T5863] em28xx 3-1:0.0: board has no eeprom [ 221.092246][ T8931] BTRFS info (device loop3): doing ref verification [ 221.112024][ T8931] BTRFS info (device loop3): force clearing of disk cache [ 221.130923][ T8931] BTRFS info (device loop3): enabling ssd optimizations [ 221.141854][ T8931] BTRFS info (device loop3): max_inline at 4096 [ 221.161909][ T8931] BTRFS info (device loop3): disk space caching is enabled [ 221.216343][ T5863] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 221.224278][ T5863] em28xx 3-1:0.0: dvb set to bulk mode. [ 221.252996][ T23] em28xx 3-1:0.0: Binding DVB extension [ 221.309324][ T5863] usb 3-1: USB disconnect, device number 9 [ 221.316723][ T5863] em28xx 3-1:0.0: Disconnecting em28xx [ 221.407031][ T23] em28xx 3-1:0.0: Registering input extension [ 221.414745][ T8931] BTRFS info (device loop3): auto enabling async discard [ 221.416449][ T5863] em28xx 3-1:0.0: Closing input extension [ 221.428969][ T8931] BTRFS info (device loop3): rebuilding free space tree [ 221.493256][ T8931] BTRFS info (device loop3): disabling free space tree [ 221.522642][ T5863] em28xx 3-1:0.0: Freeing device [ 221.534666][ T8931] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 221.578977][ T8931] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 221.795794][ T28] audit: type=1800 audit(1751820036.627:1457): pid=8931 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.806" name="bus" dev="loop3" ino=263 res=0 errno=0 [ 221.886328][ T5798] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 222.348676][ T8959] loop2: detected capacity change from 0 to 32768 [ 222.421563][ T8959] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 222.512601][ T8959] XFS (loop2): Ending clean mount [ 222.997163][ T5787] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 223.219059][ T8984] loop3: detected capacity change from 0 to 512 [ 223.312436][ T8984] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2244: inode #15: comm syz.3.813: corrupted in-inode xattr: invalid ea_ino [ 223.341160][ T8984] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.813: couldn't read orphan inode 15 (err -117) [ 223.375778][ T8984] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 223.856309][ T5876] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 223.929096][ T5798] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.046242][ T5876] usb 3-1: Using ep0 maxpacket: 8 [ 224.053395][ T5876] usb 3-1: unable to get BOS descriptor or descriptor too short [ 224.064559][ T5876] usb 3-1: config 6 has an invalid interface number: 7 but max is 0 [ 224.085642][ T5876] usb 3-1: config 6 has no interface number 0 [ 224.095545][ T5876] usb 3-1: config 6 interface 7 has no altsetting 0 [ 224.105198][ T5876] usb 3-1: New USB device found, idVendor=07b8, idProduct=110c, bcdDevice=e4.e2 [ 224.115804][ T5876] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.125259][ T5876] usb 3-1: Product: syz [ 224.130755][ T5876] usb 3-1: Manufacturer: syz [ 224.135448][ T5876] usb 3-1: SerialNumber: syz [ 224.725894][ T9001] loop3: detected capacity change from 0 to 1024 [ 224.739211][ T9001] EXT4-fs: Ignoring removed oldalloc option [ 224.745213][ T9001] EXT4-fs: Ignoring removed bh option [ 224.752336][ T9001] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 224.837808][ T9001] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 225.051405][ T9004] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4036: comm syz.3.817: Allocating blocks 481-513 which overlap fs metadata [ 225.175122][ T9000] EXT4-fs (loop3): pa ffff8880786f0488: logic 131072, phys. 465, len 3 [ 225.189190][ T9000] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5377: group 0, free 0, pa_free 2 [ 225.251875][ T5798] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.631684][ T5876] pegasus: probe of 3-1:6.7 failed with error -71 [ 225.647485][ T5876] usb 3-1: USB disconnect, device number 10 [ 226.053549][ T9010] loop4: detected capacity change from 0 to 256 [ 226.060173][ T9008] only policy match revision 0 supported [ 226.060192][ T9008] unable to load match [ 226.086072][ T9010] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 226.166153][ T9010] loop4: detected capacity change from 256 to 0 [ 226.183064][ T9012] syz.4.820: attempt to access beyond end of device [ 226.183064][ T9012] loop4: rw=524288, sector=160, nr_sectors = 1 limit=0 [ 226.208236][ T9012] syz.4.820: attempt to access beyond end of device [ 226.208236][ T9012] loop4: rw=524288, sector=161, nr_sectors = 1 limit=0 [ 226.280484][ T9012] syz.4.820: attempt to access beyond end of device [ 226.280484][ T9012] loop4: rw=524288, sector=162, nr_sectors = 1 limit=0 [ 226.312371][ T9012] syz.4.820: attempt to access beyond end of device [ 226.312371][ T9012] loop4: rw=524288, sector=163, nr_sectors = 1 limit=0 [ 226.331734][ T9012] syz.4.820: attempt to access beyond end of device [ 226.331734][ T9012] loop4: rw=524288, sector=164, nr_sectors = 1 limit=0 [ 226.348913][ T9012] syz.4.820: attempt to access beyond end of device [ 226.348913][ T9012] loop4: rw=524288, sector=165, nr_sectors = 1 limit=0 [ 226.369963][ T9012] syz.4.820: attempt to access beyond end of device [ 226.369963][ T9012] loop4: rw=524288, sector=166, nr_sectors = 1 limit=0 [ 226.386545][ T9012] syz.4.820: attempt to access beyond end of device [ 226.386545][ T9012] loop4: rw=524288, sector=167, nr_sectors = 1 limit=0 [ 226.400670][ T9012] syz.4.820: attempt to access beyond end of device [ 226.400670][ T9012] loop4: rw=0, sector=160, nr_sectors = 1 limit=0 [ 226.417115][ T9010] syz.4.820: attempt to access beyond end of device [ 226.417115][ T9010] loop4: rw=524288, sector=160, nr_sectors = 1 limit=0 [ 226.603924][ T8755] Buffer I/O error on dev loop4, logical block 0, lost sync page write [ 227.008865][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.145773][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.404969][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.443734][ T9041] bond_slave_1: entered promiscuous mode [ 227.462067][ T9044] netlink: 4 bytes leftover after parsing attributes in process `syz.2.830'. [ 227.500140][ T9043] loop3: detected capacity change from 0 to 4096 [ 227.515664][ T9043] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 227.600713][ T9043] ntfs3: loop3: Failed to initialize $Extend/$Reparse. [ 227.609733][ T9044] bond_slave_1 (unregistering): left promiscuous mode [ 227.677539][ T23] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 227.768303][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.784517][ T5799] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 227.804392][ T5799] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 227.818590][ T5799] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 227.838348][ T5799] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 227.848739][ T5799] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 227.856439][ T5799] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 227.899826][ T23] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 227.949694][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 227.993744][ T9048] loop2: detected capacity change from 0 to 1024 [ 228.001049][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 228.002381][ T9048] EXT4-fs: Ignoring removed oldalloc option [ 228.024018][ T23] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 228.057990][ T9048] EXT4-fs: Ignoring removed bh option [ 228.060701][ T23] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 228.077469][ T9048] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 228.090030][ T23] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 228.123911][ T23] usb 2-1: Manufacturer: syz [ 228.153960][ T9048] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 228.154088][ T23] usb 2-1: config 0 descriptor?? [ 228.395278][ T9048] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4036: comm syz.2.834: Allocating blocks 481-513 which overlap fs metadata [ 228.549323][ T9047] EXT4-fs (loop2): pa ffff8880786f03a0: logic 131072, phys. 465, len 3 [ 228.557865][ T9047] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5377: group 0, free 0, pa_free 2 [ 228.589147][ T23] rc_core: IR keymap rc-hauppauge not found [ 228.595077][ T23] Registered IR keymap rc-empty [ 228.600551][ T23] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 228.637444][ T9045] chnl_net:caif_netlink_parms(): no params data found [ 228.656619][ T23] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 228.690138][ T5787] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.707964][ T23] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 228.748052][ T23] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input14 [ 228.830543][ T23] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 228.906765][ T23] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 228.936675][ T23] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 229.000199][ T23] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 229.039447][ T9045] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.046403][ T23] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 229.063428][ T9045] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.071477][ T9045] bridge_slave_0: entered allmulticast mode [ 229.078337][ T23] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 229.094798][ T9045] bridge_slave_0: entered promiscuous mode [ 229.132422][ T23] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 229.173045][ T9045] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.183776][ T23] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 229.199290][ T9045] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.211068][ T9045] bridge_slave_1: entered allmulticast mode [ 229.221333][ T9045] bridge_slave_1: entered promiscuous mode [ 229.237269][ T23] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 229.286359][ T23] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 229.328263][ T23] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 229.342757][ T9045] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 229.365404][ T23] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 229.414035][ T23] usb 2-1: USB disconnect, device number 10 [ 229.453275][ T9045] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 230.086163][ T5105] Bluetooth: hci1: command tx timeout [ 230.383640][ T9045] team0: Port device team_slave_0 added [ 230.432868][ T9045] team0: Port device team_slave_1 added [ 230.581252][ T9106] loop3: detected capacity change from 0 to 64 [ 230.648183][ T9106] hfs: invalid btree extent records (0 size) [ 230.668032][ T9106] hfs: unable to open catalog tree [ 230.680951][ T9106] hfs: can't find a HFS filesystem on dev loop3 [ 230.839008][ T9045] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 230.864820][ T9045] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 230.893715][ T9112] loop2: detected capacity change from 0 to 8 [ 230.896964][ T9045] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 230.908783][ T5876] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 231.003819][ T9045] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 231.016950][ T9045] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 231.043621][ T9045] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 231.096309][ T5876] usb 2-1: Using ep0 maxpacket: 16 [ 231.115595][ T5876] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 231.136263][ T5876] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 231.176235][ T5876] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 231.210400][ T5876] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 231.250316][ T5876] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.277109][ T5876] usb 2-1: config 0 descriptor?? [ 231.316235][ T9045] hsr_slave_0: entered promiscuous mode [ 231.322969][ T9045] hsr_slave_1: entered promiscuous mode [ 231.441980][ T9045] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 231.474212][ T9045] Cannot create hsr debugfs directory [ 232.112246][ T5876] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 232.127169][ T5105] Bluetooth: hci1: command tx timeout [ 232.147318][ T5876] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 232.189134][ T5876] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 232.226749][ T5876] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 232.250386][ T5876] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 232.266620][ T5876] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 232.277497][ T5876] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 232.304983][ T9130] loop3: detected capacity change from 0 to 512 [ 232.316125][ T5876] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 232.356182][ T5876] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 232.371264][ T9107] loop1: detected capacity change from 0 to 1024 [ 232.393656][ T5876] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 232.443985][ T9130] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 232.444165][ T5876] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.000B/input/input15 [ 232.470953][ T11] hsr_slave_0: left promiscuous mode [ 232.493218][ T5876] microsoft 0003:045E:07DA.000B: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 232.510897][ T5876] usb 2-1: USB disconnect, device number 11 [ 232.523194][ T11] hsr_slave_1: left promiscuous mode [ 232.532908][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 232.539426][ T9130] ext4 filesystem being mounted at /226/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 232.565320][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 232.608799][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 232.680617][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 232.707837][ T11] bridge_slave_1: left allmulticast mode [ 232.713547][ T11] bridge_slave_1: left promiscuous mode [ 232.748460][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.778975][ T11] bridge_slave_0: left allmulticast mode [ 232.788129][ T11] bridge_slave_0: left promiscuous mode [ 232.799528][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.818480][ T9142] fido_id[9142]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 232.854610][ T5798] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.918127][ T11] veth1_macvtap: left promiscuous mode [ 232.930545][ T11] veth0_macvtap: left promiscuous mode [ 232.965799][ T11] veth1_vlan: left promiscuous mode [ 232.982963][ T11] veth0_vlan: left promiscuous mode [ 233.733657][ T11] team0 (unregistering): Port device team_slave_1 removed [ 233.793530][ T11] team0 (unregistering): Port device team_slave_0 removed [ 234.185967][ T5105] Bluetooth: hci1: command tx timeout [ 234.487060][ T9140] netlink: 96 bytes leftover after parsing attributes in process `syz.2.849'. [ 235.265701][ T9045] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 235.294840][ T9173] loop1: detected capacity change from 0 to 8192 [ 235.304763][ T9045] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 235.360139][ T9045] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 235.447404][ T9045] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 235.861636][ T9045] 8021q: adding VLAN 0 to HW filter on device bond0 [ 235.923090][ T9045] 8021q: adding VLAN 0 to HW filter on device team0 [ 235.952414][ T1075] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.959655][ T1075] bridge0: port 1(bridge_slave_0) entered forwarding state [ 235.987797][ T1310] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.994963][ T1310] bridge0: port 2(bridge_slave_1) entered forwarding state [ 236.056215][ T5875] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 236.155756][ T9214] loop2: detected capacity change from 0 to 16 [ 236.240806][ T9214] erofs: (device loop2): mounted with root inode @ nid 36. [ 236.256917][ T5875] usb 4-1: Using ep0 maxpacket: 32 [ 236.270677][ T5105] Bluetooth: hci1: command tx timeout [ 236.278979][ T5875] usb 4-1: config 0 has an invalid interface number: 9 but max is 0 [ 236.290103][ T5875] usb 4-1: config 0 has no interface number 0 [ 236.317526][ T5875] usb 4-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 236.337200][ T5875] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.356145][ T5875] usb 4-1: Product: syz [ 236.372759][ T5875] usb 4-1: Manufacturer: syz [ 236.379823][ T5875] usb 4-1: SerialNumber: syz [ 236.387919][ T27] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 236.393293][ T5875] usb 4-1: config 0 descriptor?? [ 236.424331][ T5875] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 236.599023][ T27] usb 2-1: config 0 has no interfaces? [ 236.609362][ T27] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 236.645359][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.665648][ T27] usb 2-1: Product: syz [ 236.681505][ T27] usb 2-1: Manufacturer: syz [ 236.693130][ T27] usb 2-1: SerialNumber: syz [ 236.732682][ T9045] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 236.742142][ T27] usb 2-1: config 0 descriptor?? [ 236.975563][ T23] usb 2-1: USB disconnect, device number 12 [ 237.271338][ T9045] veth0_vlan: entered promiscuous mode [ 237.331721][ T9045] veth1_vlan: entered promiscuous mode [ 237.388888][ T9045] veth0_macvtap: entered promiscuous mode [ 237.412717][ T9045] veth1_macvtap: entered promiscuous mode [ 237.478149][ T9045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 237.494129][ T9045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.505425][ T9045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 237.520623][ T9045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.530966][ T9045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 237.556904][ T9045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.573046][ T9045] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 237.605909][ T9259] loop1: detected capacity change from 0 to 512 [ 237.625090][ T9259] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 237.655286][ T9045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 237.690420][ T9045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.709843][ T9045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 237.723110][ T9045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.733729][ T9259] EXT4-fs error (device loop1): ext4_validate_block_bitmap:430: comm syz.1.867: bg 0: block 5: invalid block bitmap [ 237.753330][ T9259] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6642: Corrupt filesystem [ 237.761746][ T9045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 237.772742][ T9045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.784665][ T9045] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 237.793103][ T9259] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.867: invalid indirect mapped block 3 (level 2) [ 237.817763][ T9259] EXT4-fs (loop1): 2 truncates cleaned up [ 237.824707][ T9259] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 237.845951][ T9045] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.860002][ T5875] gspca_topro: reg_r err -71 [ 237.864663][ T5875] gspca_topro: Sensor soi763a [ 237.872411][ T28] audit: type=1800 audit(1751820052.697:1458): pid=9259 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.867" name="file2" dev="loop1" ino=16 res=0 errno=0 [ 237.895694][ T9045] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.912353][ T9045] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.920316][ T5875] usb 4-1: USB disconnect, device number 12 [ 237.921745][ T9045] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.168783][ T5795] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.194617][ T1310] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 238.236577][ T1310] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 238.356531][ T1310] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 238.391145][ T1310] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.940572][ T5863] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 239.986637][ T5836] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 240.064881][ T9342] loop1: detected capacity change from 0 to 2048 [ 240.147994][ T9342] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 240.160411][ T5863] usb 6-1: Using ep0 maxpacket: 8 [ 240.186926][ T5836] usb 3-1: Using ep0 maxpacket: 32 [ 240.196524][ T5863] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 240.220929][ T5836] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 240.234065][ T5863] usb 6-1: config 179 has no interface number 0 [ 240.250716][ T5836] usb 3-1: config 0 has no interface number 0 [ 240.260862][ T5863] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 240.281535][ T9342] netlink: 'syz.1.884': attribute type 4 has an invalid length. [ 240.298491][ T5836] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 240.311166][ T5863] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 240.331541][ T5836] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.363959][ T5863] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 240.395834][ T5836] usb 3-1: Product: syz [ 240.400442][ T5836] usb 3-1: Manufacturer: syz [ 240.405501][ T5836] usb 3-1: SerialNumber: syz [ 240.411111][ T5863] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 240.425118][ T5795] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.441644][ T5836] usb 3-1: config 0 descriptor?? [ 240.448305][ T5863] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 240.473023][ T5836] smsc95xx v2.0.0 [ 240.494219][ T5863] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 240.539023][ T5863] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.607962][ T9323] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 240.891450][ T5836] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 240.909259][ T9360] loop1: detected capacity change from 0 to 4096 [ 240.916346][ T5836] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 240.936799][ T9360] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [ 241.114876][ T5863] usb 6-1: USB disconnect, device number 2 [ 241.114934][ C1] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 241.129135][ C1] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 241.283526][ T28] audit: type=1800 audit(1751820056.117:1459): pid=9360 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.887" name="file1" dev="loop1" ino=36 res=0 errno=0 [ 241.563974][ T5836] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000104: -71 [ 241.604142][ T5836] smsc95xx: probe of 3-1:0.67 failed with error -71 [ 241.638262][ T5836] usb 3-1: USB disconnect, device number 11 [ 242.691624][ T9421] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes [ 243.659897][ T5836] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 243.852812][ T9435] loop2: detected capacity change from 0 to 1024 [ 243.867046][ T5836] usb 2-1: Using ep0 maxpacket: 8 [ 243.881495][ T5836] usb 2-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 243.901434][ T5836] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.926075][ T5836] usb 2-1: Product: syz [ 243.933337][ T5836] usb 2-1: Manufacturer: syz [ 243.953464][ T5836] usb 2-1: SerialNumber: syz [ 243.969404][ T9435] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 243.989915][ T5836] usb 2-1: config 0 descriptor?? [ 244.071290][ T9429] loop5: detected capacity change from 0 to 32768 [ 244.133112][ T9429] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.902 (9429) [ 244.225675][ T9429] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 244.263358][ T9429] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 244.277071][ T9429] BTRFS info (device loop5): metadata ratio 2 [ 244.291742][ T5787] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.294214][ T9429] BTRFS info (device loop5): allowing degraded mounts [ 244.308596][ T9429] BTRFS info (device loop5): force zlib compression, level 3 [ 244.316712][ T9429] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 244.326376][ T9429] BTRFS info (device loop5): use zstd compression, level 3 [ 244.333613][ T9429] BTRFS info (device loop5): force clearing of disk cache [ 244.366233][ T9429] BTRFS info (device loop5): max_inline at 0 [ 244.372294][ T9429] BTRFS info (device loop5): using free space tree [ 244.464653][ T5836] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 244.487654][ T5836] gspca_sunplus: reg_w_riv err -71 [ 244.502729][ T5836] sunplus: probe of 2-1:0.0 failed with error -71 [ 244.546725][ T5836] usb 2-1: USB disconnect, device number 13 [ 244.557919][ T9429] BTRFS info (device loop5): enabling ssd optimizations [ 244.603674][ T9429] BTRFS info (device loop5): rebuilding free space tree [ 244.967938][ T9045] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 246.256227][ T5105] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 246.372552][ T9498] loop5: detected capacity change from 0 to 40427 [ 246.427988][ T9498] F2FS-fs (loop5): build fault injection attr: rate: 690, type: 0x7ffff [ 246.480911][ T9498] F2FS-fs (loop5): heap/no_heap options were deprecated [ 246.521276][ T9498] F2FS-fs (loop5): Image doesn't support compression [ 246.558872][ T9498] F2FS-fs (loop5): invalid crc value [ 246.593943][ T9498] F2FS-fs (loop5): Found nat_bits in checkpoint [ 246.787872][ T9498] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 246.895451][ T9546] loop1: detected capacity change from 0 to 256 [ 246.942287][ T28] audit: type=1800 audit(1751820061.777:1460): pid=9546 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.923" name="file1" dev="loop1" ino=1048628 res=0 errno=0 [ 246.945232][ T9546] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 247.014584][ T9546] FAT-fs (loop1): Filesystem has been set read-only [ 247.042196][ T9546] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 247.042316][ T9549] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 247.052594][ T23] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 247.075912][ T9546] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 247.090228][ T9045] bio_check_eod: 19 callbacks suppressed [ 247.090242][ T9045] syz-executor: attempt to access beyond end of device [ 247.090242][ T9045] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 247.090923][ T28] audit: type=1800 audit(1751820061.927:1461): pid=9546 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.923" name="file1" dev="loop1" ino=1048628 res=0 errno=0 [ 247.104103][ T9045] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 247.399238][ T23] usb 4-1: Using ep0 maxpacket: 8 [ 247.407292][ T23] usb 4-1: config 255 has an invalid interface number: 222 but max is 0 [ 247.416746][ T23] usb 4-1: config 255 has no interface number 0 [ 247.437799][ T23] usb 4-1: New USB device found, idVendor=071d, idProduct=1005, bcdDevice=4d.b4 [ 247.447713][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.455730][ T23] usb 4-1: Product: syz [ 247.460400][ T23] usb 4-1: Manufacturer: syz [ 247.465036][ T23] usb 4-1: SerialNumber: syz [ 248.189389][ T23] HFC-S_USB: probe of 4-1:255.222 failed with error -5 [ 248.370911][ T9542] loop2: detected capacity change from 0 to 7 [ 248.396207][ T9542] loop2: [ 248.399240][ T9542] loop2: partition table partially beyond EOD, truncated [ 248.474637][ T23] usb 4-1: USB disconnect, device number 13 [ 249.046300][ T9] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 249.256350][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 249.267095][ T9] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 249.282775][ T9] usb 6-1: config 0 has no interface number 0 [ 249.293427][ T9] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 249.306425][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.320436][ T9] usb 6-1: Product: syz [ 249.324747][ T9] usb 6-1: Manufacturer: syz [ 249.330108][ T9] usb 6-1: SerialNumber: syz [ 249.340746][ T9] usb 6-1: config 0 descriptor?? [ 249.348395][ T9] smsc95xx v2.0.0 [ 249.361560][ T9587] loop3: detected capacity change from 0 to 40427 [ 249.370815][ T9587] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 249.383029][ T9587] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 249.406832][ T9587] F2FS-fs (loop3): Found nat_bits in checkpoint [ 249.460470][ T9587] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 249.467797][ T9587] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 249.767154][ T9] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 249.778465][ T9] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 249.865144][ T9596] geneve2: entered promiscuous mode [ 250.336630][ T5799] Bluetooth: hci4: command 0x1003 tx timeout [ 250.344037][ T5105] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 250.395719][ T9] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000104: -71 [ 250.446845][ T9] smsc95xx: probe of 6-1:0.67 failed with error -71 [ 250.511183][ T9] usb 6-1: USB disconnect, device number 3 [ 251.422525][ T9645] loop2: detected capacity change from 0 to 256 [ 252.096524][ T9645] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 252.126198][ T9645] FAT-fs (loop2): Filesystem has been set read-only [ 252.132939][ T9645] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 252.186131][ T28] audit: type=1800 audit(1751820066.927:1462): pid=9645 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.952" name="file1" dev="loop2" ino=1048629 res=0 errno=0 [ 252.209435][ T9651] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 252.335377][ T9645] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 252.428289][ T28] audit: type=1800 audit(1751820067.267:1463): pid=9645 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.952" name="file1" dev="loop2" ino=1048629 res=0 errno=0 [ 252.845757][ T28] audit: type=1326 audit(1751820067.677:1464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9669 comm="syz.2.956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f574a18e929 code=0x7fc00000 [ 252.960854][ T9659] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 253.002246][ T9659] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 253.015696][ T9659] bond0 (unregistering): Released all slaves [ 253.456707][ T28] audit: type=1326 audit(1751820068.287:1465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9669 comm="syz.2.956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f574a18e929 code=0x7fc00000 [ 253.534573][ T28] audit: type=1326 audit(1751820068.287:1466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9669 comm="syz.2.956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f574a18e929 code=0x7fc00000 [ 253.606266][ T28] audit: type=1326 audit(1751820068.287:1467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9669 comm="syz.2.956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f574a18e929 code=0x7fc00000 [ 253.668353][ T28] audit: type=1326 audit(1751820068.287:1468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9669 comm="syz.2.956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f574a18e929 code=0x7fc00000 [ 253.739101][ T28] audit: type=1326 audit(1751820068.287:1469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9669 comm="syz.2.956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f574a18e929 code=0x7fc00000 [ 253.811895][ T28] audit: type=1326 audit(1751820068.287:1470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9669 comm="syz.2.956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f574a18e929 code=0x7fc00000 [ 253.867610][ T28] audit: type=1326 audit(1751820068.287:1471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9669 comm="syz.2.956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f574a18e929 code=0x7fc00000 [ 253.969041][ T9706] tipc: Started in network mode [ 253.990391][ T9706] tipc: Node identity 2, cluster identity 3142 [ 254.014092][ T9706] tipc: Node number set to 2 [ 254.042825][ T9706] tipc: Cannot configure node identity twice [ 255.344573][ T9715] loop2: detected capacity change from 0 to 32768 [ 255.391370][ T9715] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 255.440047][ T9715] XFS (loop2): Ending clean mount [ 255.449214][ T9715] XFS (loop2): Quotacheck needed: Please wait. [ 255.585775][ T9715] XFS (loop2): Quotacheck: Done. [ 255.797221][ T5787] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 256.030657][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.046071][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.912928][ T9748] loop5: detected capacity change from 0 to 32768 [ 257.065226][ T9748] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 257.351293][ T9783] (syz.5.977,9783,0):ocfs2_read_blocks_sync:112 ERROR: status = -12 [ 257.353744][ T28] kauditd_printk_skb: 25 callbacks suppressed [ 257.353757][ T28] audit: type=1326 audit(1751820072.187:1497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9768 comm="syz.3.983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd458b8e929 code=0x7fc00000 [ 257.450956][ T9783] (syz.5.977,9783,0):update_backups:188 ERROR: status = -12 [ 257.508765][ T9783] ocfs2: Failed to update super blocks on 7,5 during fs resize. This condition is not fatal, but fsck.ocfs2 should be run to fix it [ 257.836112][ T28] audit: type=1326 audit(1751820072.667:1498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9768 comm="syz.3.983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd458b2ab19 code=0x7fc00000 [ 258.053312][ T9045] ocfs2: Unmounting device (7,5) on (node local) [ 258.682361][ T9794] loop2: detected capacity change from 0 to 40427 [ 258.715162][ T9794] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 258.745801][ T9794] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 258.805813][ T9794] F2FS-fs (loop2): Found nat_bits in checkpoint [ 258.929840][ T9807] loop1: detected capacity change from 0 to 32768 [ 258.986355][ T9807] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop1 scanned by syz.1.991 (9807) [ 259.061450][ T9807] BTRFS info (device loop1): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 259.071824][ T9794] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 259.102944][ T9794] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 259.113081][ T9807] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 259.166242][ T9807] BTRFS info (device loop1): using free space tree [ 259.379838][ T9807] BTRFS info (device loop1): enabling ssd optimizations [ 259.418613][ T9807] BTRFS info (device loop1): auto enabling async discard [ 260.014969][ T5795] BTRFS info (device loop1): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 261.045408][ T9912] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1006'. [ 262.059335][ T9940] loop2: detected capacity change from 0 to 16 [ 262.067867][ T9940] erofs: (device loop2): mounted with root inode @ nid 36. [ 262.283153][ T9938] erofs: (device loop2): z_erofs_readahead: readahead error at folio 87 @ nid 36 [ 262.293114][ T9938] erofs: (device loop2): z_erofs_readahead: readahead error at folio 86 @ nid 36 [ 262.302712][ T9938] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance 363 @ lcn 82 of nid 36 [ 262.313294][ T9938] erofs: (device loop2): z_erofs_readahead: readahead error at folio 83 @ nid 36 [ 262.323474][ T9938] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance 363 @ lcn 82 of nid 36 [ 262.334158][ T9938] erofs: (device loop2): z_erofs_readahead: readahead error at folio 82 @ nid 36 [ 262.343973][ T9938] erofs: (device loop2): z_erofs_readahead: readahead error at folio 79 @ nid 36 [ 262.354932][ T9938] erofs: (device loop2): z_erofs_readahead: readahead error at folio 78 @ nid 36 [ 262.364202][ T9938] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance 1485 @ lcn 75 of nid 36 [ 262.375133][ T9938] erofs: (device loop2): z_erofs_readahead: readahead error at folio 76 @ nid 36 [ 262.384393][ T9938] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance 1485 @ lcn 75 of nid 36 [ 262.395146][ T9938] erofs: (device loop2): z_erofs_readahead: readahead error at folio 75 @ nid 36 [ 262.404422][ T9938] erofs: (device loop2): z_erofs_readahead: readahead error at folio 74 @ nid 36 [ 262.413674][ T9938] erofs: (device loop2): z_erofs_readahead: readahead error at folio 72 @ nid 36 [ 262.423746][ T9938] erofs: (device loop2): z_erofs_readahead: readahead error at folio 71 @ nid 36 [ 262.432947][ T9938] erofs: (device loop2): z_erofs_readahead: readahead error at folio 70 @ nid 36 [ 262.442426][ T9938] erofs: (device loop2): z_erofs_readahead: readahead error at folio 63 @ nid 36 [ 262.451791][ T9938] erofs: (device loop2): z_erofs_readahead: readahead error at folio 61 @ nid 36 [ 262.461041][ T9938] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance 1024 @ lcn 58 of nid 36 [ 262.471880][ T9938] erofs: (device loop2): z_erofs_readahead: readahead error at folio 59 @ nid 36 [ 262.481189][ T9938] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance 1024 @ lcn 58 of nid 36 [ 262.491910][ T9938] erofs: (device loop2): z_erofs_readahead: readahead error at folio 58 @ nid 36 [ 262.503102][ T9938] erofs: (device loop2): z_erofs_readahead: readahead error at folio 56 @ nid 36 [ 262.512487][ T9938] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance 1586 @ lcn 46 of nid 36 [ 262.524291][ T9938] erofs: (device loop2): z_erofs_readahead: readahead error at folio 47 @ nid 36 [ 262.533661][ T9938] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance 1586 @ lcn 46 of nid 36 [ 262.544380][ T9938] erofs: (device loop2): z_erofs_readahead: readahead error at folio 46 @ nid 36 [ 262.553586][ T9938] erofs: (device loop2): z_erofs_readahead: readahead error at folio 45 @ nid 36 [ 262.562856][ T9938] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 262.573520][ T9938] erofs: (device loop2): z_erofs_readahead: readahead error at folio 43 @ nid 36 [ 262.582828][ T9938] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 262.593513][ T9938] erofs: (device loop2): z_erofs_readahead: readahead error at folio 42 @ nid 36 [ 262.602745][ T9938] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance 774 @ lcn 40 of nid 36 [ 262.613348][ T9938] erofs: (device loop2): z_erofs_readahead: readahead error at folio 41 @ nid 36 [ 262.623534][ T9938] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance 774 @ lcn 40 of nid 36 [ 262.634143][ T9938] erofs: (device loop2): z_erofs_readahead: readahead error at folio 40 @ nid 36 [ 262.643437][ T9938] erofs: (device loop2): z_erofs_readahead: readahead error at folio 39 @ nid 36 [ 262.652634][ T9938] erofs: (device loop2): z_erofs_readahead: readahead error at folio 38 @ nid 36 [ 262.662003][ T9938] erofs: (device loop2): z_erofs_readahead: readahead error at folio 36 @ nid 36 [ 262.671500][ T9938] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance 1468 @ lcn 31 of nid 36 [ 262.682191][ T9938] erofs: (device loop2): z_erofs_readahead: readahead error at folio 31 @ nid 36 [ 262.691582][ T9938] erofs: (device loop2): z_erofs_readahead: readahead error at folio 25 @ nid 36 [ 262.700953][ T9938] erofs: (device loop2): z_erofs_readahead: readahead error at folio 24 @ nid 36 [ 262.710430][ T9938] erofs: (device loop2): z_erofs_readahead: readahead error at folio 19 @ nid 36 [ 262.721497][ T9938] syz.2.1011: attempt to access beyond end of device [ 262.721497][ T9938] loop2: rw=524288, sector=784, nr_sectors = 64 limit=16 [ 262.738221][ T9938] syz.2.1011: attempt to access beyond end of device [ 262.738221][ T9938] loop2: rw=524288, sector=13478624080, nr_sectors = 24 limit=16 [ 262.752775][ T9938] syz.2.1011: attempt to access beyond end of device [ 262.752775][ T9938] loop2: rw=524288, sector=13478624032, nr_sectors = 48 limit=16 [ 262.767426][ T9938] syz.2.1011: attempt to access beyond end of device [ 262.767426][ T9938] loop2: rw=524288, sector=32, nr_sectors = 64 limit=16 [ 262.781077][ T9938] syz.2.1011: attempt to access beyond end of device [ 262.781077][ T9938] loop2: rw=524288, sector=8, nr_sectors = 24 limit=16 [ 262.794743][ T9938] syz.2.1011: attempt to access beyond end of device [ 262.794743][ T9938] loop2: rw=524288, sector=14425508768, nr_sectors = 8 limit=16 [ 262.838962][ T9922] loop3: detected capacity change from 0 to 32768 [ 262.849405][ T9922] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop3 scanned by syz.3.1008 (9922) [ 262.923074][ T9922] BTRFS info (device loop3): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 262.986368][ T9922] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 262.995214][ T9922] BTRFS info (device loop3): using free space tree [ 263.265667][ T9922] BTRFS info (device loop3): enabling ssd optimizations [ 263.315706][ T9922] BTRFS info (device loop3): auto enabling async discard [ 263.732470][ T5798] BTRFS info (device loop3): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 264.800811][T10028] loop1: detected capacity change from 0 to 16 [ 264.836486][T10028] erofs: (device loop1): mounted with root inode @ nid 36. [ 265.028945][T10022] erofs: (device loop1): z_erofs_readahead: readahead error at folio 87 @ nid 36 [ 265.039624][T10022] erofs: (device loop1): z_erofs_readahead: readahead error at folio 86 @ nid 36 [ 265.050639][T10022] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance 363 @ lcn 82 of nid 36 [ 265.061489][T10022] erofs: (device loop1): z_erofs_readahead: readahead error at folio 83 @ nid 36 [ 265.070688][T10022] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance 363 @ lcn 82 of nid 36 [ 265.081749][T10022] erofs: (device loop1): z_erofs_readahead: readahead error at folio 82 @ nid 36 [ 265.091238][T10022] erofs: (device loop1): z_erofs_readahead: readahead error at folio 79 @ nid 36 [ 265.101062][T10022] erofs: (device loop1): z_erofs_readahead: readahead error at folio 78 @ nid 36 [ 265.110308][T10022] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance 1485 @ lcn 75 of nid 36 [ 265.120979][T10022] erofs: (device loop1): z_erofs_readahead: readahead error at folio 76 @ nid 36 [ 265.130302][T10022] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance 1485 @ lcn 75 of nid 36 [ 265.141330][T10022] erofs: (device loop1): z_erofs_readahead: readahead error at folio 75 @ nid 36 [ 265.150617][T10022] erofs: (device loop1): z_erofs_readahead: readahead error at folio 74 @ nid 36 [ 265.159874][T10022] erofs: (device loop1): z_erofs_readahead: readahead error at folio 72 @ nid 36 [ 265.170349][T10022] erofs: (device loop1): z_erofs_readahead: readahead error at folio 71 @ nid 36 [ 265.179657][T10022] erofs: (device loop1): z_erofs_readahead: readahead error at folio 70 @ nid 36 [ 265.189907][T10022] erofs: (device loop1): z_erofs_readahead: readahead error at folio 63 @ nid 36 [ 265.199193][T10022] erofs: (device loop1): z_erofs_readahead: readahead error at folio 61 @ nid 36 [ 265.208413][T10022] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance 1024 @ lcn 58 of nid 36 [ 265.219270][T10022] erofs: (device loop1): z_erofs_readahead: readahead error at folio 59 @ nid 36 [ 265.228476][T10022] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance 1024 @ lcn 58 of nid 36 [ 265.239675][T10022] erofs: (device loop1): z_erofs_readahead: readahead error at folio 58 @ nid 36 [ 265.251437][T10022] erofs: (device loop1): z_erofs_readahead: readahead error at folio 56 @ nid 36 [ 265.261069][T10022] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance 1586 @ lcn 46 of nid 36 [ 265.274166][T10022] erofs: (device loop1): z_erofs_readahead: readahead error at folio 47 @ nid 36 [ 265.283565][T10022] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance 1586 @ lcn 46 of nid 36 [ 265.294791][T10022] erofs: (device loop1): z_erofs_readahead: readahead error at folio 46 @ nid 36 [ 265.304227][T10022] erofs: (device loop1): z_erofs_readahead: readahead error at folio 45 @ nid 36 [ 265.313478][T10022] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 265.324151][T10022] erofs: (device loop1): z_erofs_readahead: readahead error at folio 43 @ nid 36 [ 265.333363][T10022] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 265.344040][T10022] erofs: (device loop1): z_erofs_readahead: readahead error at folio 42 @ nid 36 [ 265.353274][T10022] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance 774 @ lcn 40 of nid 36 [ 265.364312][T10022] erofs: (device loop1): z_erofs_readahead: readahead error at folio 41 @ nid 36 [ 265.373946][T10022] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance 774 @ lcn 40 of nid 36 [ 265.384939][T10022] erofs: (device loop1): z_erofs_readahead: readahead error at folio 40 @ nid 36 [ 265.394567][T10022] erofs: (device loop1): z_erofs_readahead: readahead error at folio 39 @ nid 36 [ 265.404153][T10022] erofs: (device loop1): z_erofs_readahead: readahead error at folio 38 @ nid 36 [ 265.413569][T10022] erofs: (device loop1): z_erofs_readahead: readahead error at folio 36 @ nid 36 [ 265.422955][T10022] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance 1468 @ lcn 31 of nid 36 [ 265.433646][T10022] erofs: (device loop1): z_erofs_readahead: readahead error at folio 31 @ nid 36 [ 265.443017][T10022] erofs: (device loop1): z_erofs_readahead: readahead error at folio 25 @ nid 36 [ 265.452328][T10022] erofs: (device loop1): z_erofs_readahead: readahead error at folio 24 @ nid 36 [ 265.461717][T10022] erofs: (device loop1): z_erofs_readahead: readahead error at folio 19 @ nid 36 [ 265.472464][T10022] syz.1.1025: attempt to access beyond end of device [ 265.472464][T10022] loop1: rw=524288, sector=784, nr_sectors = 64 limit=16 [ 265.486487][T10022] syz.1.1025: attempt to access beyond end of device [ 265.486487][T10022] loop1: rw=524288, sector=13478624080, nr_sectors = 24 limit=16 [ 265.501807][T10022] syz.1.1025: attempt to access beyond end of device [ 265.501807][T10022] loop1: rw=524288, sector=13478624032, nr_sectors = 48 limit=16 [ 265.516317][T10022] syz.1.1025: attempt to access beyond end of device [ 265.516317][T10022] loop1: rw=524288, sector=32, nr_sectors = 64 limit=16 [ 266.826733][T10084] loop2: detected capacity change from 0 to 2048 [ 266.902061][T10084] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 267.482962][T10075] loop5: detected capacity change from 0 to 32768 [ 267.511322][T10066] loop3: detected capacity change from 0 to 40427 [ 267.557224][T10066] F2FS-fs (loop3): heap/no_heap options were deprecated [ 267.586886][T10075] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 267.618848][T10066] F2FS-fs (loop3): invalid crc value [ 267.655893][T10066] F2FS-fs (loop3): Found nat_bits in checkpoint [ 267.855044][T10075] XFS (loop5): Ending clean mount [ 267.887830][T10075] XFS (loop5): Quotacheck needed: Please wait. [ 267.986164][T10066] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 268.008057][T10075] XFS (loop5): Quotacheck: Done. [ 268.369246][ T9045] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 268.391097][ T5798] bio_check_eod: 2 callbacks suppressed [ 268.391113][ T5798] syz-executor: attempt to access beyond end of device [ 268.391113][ T5798] loop3: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 268.429607][ T5798] syz-executor: attempt to access beyond end of device [ 268.429607][ T5798] loop3: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 268.708835][T10140] netlink: 'syz.1.1052': attribute type 1 has an invalid length. [ 268.824242][ T11] kworker/u4:0: attempt to access beyond end of device [ 268.824242][ T11] loop3: rw=2049, sector=45096, nr_sectors = 24 limit=40427 [ 268.846358][ T11] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 268.859753][ T11] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 268.879181][T10142] bond0: (slave bridge2): making interface the new active one [ 268.884909][ T11] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 268.930812][T10142] bond0: (slave bridge2): Enslaving as an active interface with an up link [ 269.166899][T10152] loop1: detected capacity change from 0 to 1024 [ 269.219673][T10152] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 269.246481][T10152] ext4 filesystem being mounted at /275/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 269.391574][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.513026][ T5795] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.614922][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.750902][T10168] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1056'. [ 269.902985][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.956519][T10172] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1060'. [ 270.035759][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.244676][T10179] loop2: detected capacity change from 0 to 64 [ 270.668143][ T58] ------------[ cut here ]------------ [ 270.673666][ T58] kernel BUG at fs/hfs/inode.c:449! [ 270.736392][ T58] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 270.742531][ T58] CPU: 1 PID: 58 Comm: kworker/u4:4 Not tainted 6.6.96-syzkaller #0 [ 270.750529][ T58] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 270.760602][ T58] Workqueue: writeback wb_workfn (flush-7:2) [ 270.766627][ T58] RIP: 0010:hfs_write_inode+0x7c4/0x7d0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 270.772195][ T58] Code: c7 c1 00 f3 ee 96 80 e1 07 80 c1 03 38 c1 0f 8c 7d fe ff ff 48 c7 c7 00 f3 ee 96 e8 56 07 86 ff e9 6c fe ff ff e8 8c 58 2d ff <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 55 41 57 41 56 41 [ 270.791812][ T58] RSP: 0018:ffffc90001597360 EFLAGS: 00010293 [ 270.797893][ T58] RAX: ffffffff82583dd4 RBX: ffff888078ad0ea8 RCX: ffff88801caabc00 [ 270.805890][ T58] RDX: 0000000000000000 RSI: ffffffff8cf39ee0 RDI: 0000000000000005 [ 270.813873][ T58] RBP: ffffc900015974f0 R08: ffff88801caabc00 R09: 0000000000000003 [ 270.821856][ T58] R10: 0000000000000004 R11: 0000000000000000 R12: dffffc0000000000 [ 270.829835][ T58] R13: 1ffff920002b2e70 R14: ffff888078ad0e58 R15: 0000000000000005 [ 270.837817][ T58] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 270.846761][ T58] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 270.853369][ T58] CR2: 00007feb48ce7d60 CR3: 000000000cb30000 CR4: 00000000003506e0 [ 270.858128][ T5799] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 270.861339][ T58] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 270.861354][ T58] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 270.861364][ T58] Call Trace: [ 270.861378][ T58] [ 270.868936][ T5799] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 270.876240][ T58] ? hfs_inode_write_fork+0x1a0/0x1a0 [ 270.876274][ T58] ? __rwlock_init+0x150/0x150 [ 270.876296][ T58] __writeback_single_inode+0x705/0xee0 [ 270.886818][ T5799] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 270.887530][ T58] writeback_sb_inodes+0x77c/0xef0 [ 270.891275][ T5799] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 270.897402][ T58] ? queue_io+0x560/0x560 [ 270.897432][ T58] ? rcu_is_watching+0x15/0xb0 [ 270.897454][ T58] wb_writeback+0x450/0xba0 [ 270.897469][ T58] ? queue_io+0x311/0x560 [ 270.897483][ T58] ? percpu_ref_tryget+0x250/0x250 [ 270.897497][ T58] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 270.897517][ T58] ? _raw_spin_unlock_irq+0x23/0x50 [ 270.897536][ T58] wb_workfn+0x3ff/0xe20 [ 270.897560][ T58] ? inode_wait_for_writeback+0x200/0x200 [ 270.904773][ T5799] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 270.907663][ T58] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 270.907687][ T58] ? read_lock_is_recursive+0x20/0x20 [ 270.907706][ T58] ? _raw_spin_unlock_irq+0x23/0x50 [ 270.913756][ T5799] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 270.920138][ T58] ? process_scheduled_works+0x957/0x15b0 [ 270.920164][ T58] ? process_scheduled_works+0x957/0x15b0 [ 270.920180][ T58] process_scheduled_works+0xa45/0x15b0 [ 270.920205][ T58] ? assign_work+0x400/0x400 [ 270.920223][ T58] ? assign_work+0x39e/0x400 [ 270.920241][ T58] worker_thread+0xa55/0xfc0 [ 270.920267][ T58] kthread+0x2fa/0x390 [ 270.920280][ T58] ? pr_cont_work+0x560/0x560 [ 270.920298][ T58] ? kthread_blkcg+0xd0/0xd0 [ 270.920311][ T58] ret_from_fork+0x48/0x80 [ 270.920328][ T58] ? kthread_blkcg+0xd0/0xd0 [ 270.920343][ T58] ret_from_fork_asm+0x11/0x20 [ 270.920367][ T58] [ 270.920400][ T58] Modules linked in: [ 271.079939][ T58] ---[ end trace 0000000000000000 ]--- [ 271.085431][ T58] RIP: 0010:hfs_write_inode+0x7c4/0x7d0 [ 271.091048][ T58] Code: c7 c1 00 f3 ee 96 80 e1 07 80 c1 03 38 c1 0f 8c 7d fe ff ff 48 c7 c7 00 f3 ee 96 e8 56 07 86 ff e9 6c fe ff ff e8 8c 58 2d ff <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 55 41 57 41 56 41 [ 271.111196][ T58] RSP: 0018:ffffc90001597360 EFLAGS: 00010293 [ 271.117830][ T58] RAX: ffffffff82583dd4 RBX: ffff888078ad0ea8 RCX: ffff88801caabc00 [ 271.134435][ T58] RDX: 0000000000000000 RSI: ffffffff8cf39ee0 RDI: 0000000000000005 [ 271.143380][ T58] RBP: ffffc900015974f0 R08: ffff88801caabc00 R09: 0000000000000003 [ 271.151521][ T58] R10: 0000000000000004 R11: 0000000000000000 R12: dffffc0000000000 [ 271.166162][ T58] R13: 1ffff920002b2e70 R14: ffff888078ad0e58 R15: 0000000000000005 [ 271.186629][ T58] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 271.195699][ T58] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 271.212510][ T58] CR2: 00007fbd176bba10 CR3: 000000007575a000 CR4: 00000000003506f0 [ 271.220839][ T58] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 271.234683][ T58] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 271.243039][ T58] Kernel panic - not syncing: Fatal exception [ 271.249417][ T58] Kernel Offset: disabled [ 271.253729][ T58] Rebooting in 86400 seconds..