last executing test programs: 19.093845664s ago: executing program 5 (id=5777): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180100002100000000000000000000108500000075000000a40000002300000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0) set_mempolicy(0x3, &(0x7f00000000c0)=0x81, 0x7) 18.839877517s ago: executing program 5 (id=5781): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0xa4, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0xb}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}]}}]}, 0xa4}}, 0x0) 17.800961148s ago: executing program 5 (id=5792): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCFLSH(r1, 0x400455c8, 0x20000000003) 17.502239688s ago: executing program 5 (id=5795): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="d4fa0c511aad03aa5ed217677bc41c027d9c830c439c7f821ddd78b6915cb170e7603acf9e433c2903bb6773f4b0130668a1e5b5e08d21d0b69c28ca3455aed65855c86f3d1e5789d26375a0d85eaf5e92e19c9affcf76e7a94e76556d2b104ebf645747fadc91460f4b3c94e1a89b51be4a6aa4c65285f988329a8163b69c51b801500a5bacd0463976e2960e2679ef2feee5e6ce6bb78a51fb0e15820d13e4a5aa9e0742a6f8d677ad28fea356657bb550c8311b682d9003c82267a15aa7334bc53b65b9119a1a7d905c7dd365b85c230bbad0d5d0a79819e112637819d9a187cfdf782c6127d2d4281926ab0e22f7346b616fe28ed0b9f4a0c9fdac6d3a90a9c38b5e31448a45546388c95045bc22fe88c43b82a0a5d3eb61c238a5159ea98db9c00aeef644ae98a8cb8dffff3b7ba14d7971910b559623af8295", 0x13c}], 0x2}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@typedef={0x0, 0x0, 0x0, 0x7}, @restrict, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x2}]}]}}, 0x0, 0x4a}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b18, &(0x7f0000000000)={'wlan1\x00'}) 17.274117873s ago: executing program 5 (id=5797): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000200)='./file0/bus\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0/bus\x00', 0x5) 17.101852548s ago: executing program 5 (id=5799): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x46, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet6(r0, &(0x7f0000000340)={&(0x7f00000000c0)={0xa, 0x4e25, 0x80000, @mcast2}, 0x1c, 0x0}, 0x0) 4.451185527s ago: executing program 2 (id=5889): ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000080)={@private1, 0x61}) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = dup(r0) ioctl$PTP_EXTTS_REQUEST2(r1, 0xc0603d0f, &(0x7f0000000040)) 4.191696488s ago: executing program 2 (id=5893): r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r1) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 3.931789332s ago: executing program 2 (id=5897): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x4008031, 0xffffffffffffffff, 0x20000000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) 3.113287539s ago: executing program 0 (id=5907): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030031000b12d25a80648c2594f90124fc60100c074002200600053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030031000b12d25a802b8c2594f90424fc60100c034002200600053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 2.632261815s ago: executing program 0 (id=5910): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0xf, &(0x7f0000000080)=0x4, 0x4) connect$bt_l2cap(r0, &(0x7f0000000140)={0x1f, 0xf6, @none, 0x0, 0x2}, 0xe) 2.54181521s ago: executing program 4 (id=5911): creat(&(0x7f0000000080)='./file0\x00', 0x0) r0 = fanotify_init(0x0, 0x0) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fanotify_mark(r0, 0x31, 0x40000000, r1, 0x0) 2.492180224s ago: executing program 0 (id=5913): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000b80)=@newqdisc={0xa0, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x70, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x1}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4]}}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0x5}]}}]}, 0xa0}}, 0x0) 2.326513944s ago: executing program 4 (id=5914): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10, &(0x7f0000000680), 0xfe, 0x247, &(0x7f0000000c00)="$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") mkdir(&(0x7f0000000380)='./file0\x00', 0x0) r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x4}, 0x18) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000600)=@v2={0x2, @aes128, 0x9a7d7ccc88c59336, '\x00', @auto="f5c281071167b68cb05dc7d99da82c08"}) 2.284140647s ago: executing program 2 (id=5915): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1000}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @udp=r0}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000044}, 0x0) 2.124979477s ago: executing program 0 (id=5916): syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x5, &(0x7f0000000100)={[{@bsdgroups}, {@i_version}, {@usrquota}, {@min_batch_time={'min_batch_time', 0x3d, 0x5}}, {@nobarrier}, {@errors_remount}, {@jqfmt_vfsold}]}, 0x1, 0x402, &(0x7f0000000980)="$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") syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f00000002c0)='./mnt\x00', 0x0, &(0x7f0000000540)={[{@journal_checksum}, {@mblk_io_submit}, {@nomblk_io_submit}, {@prjquota}, {@resgid}, {@nombcache}, {@abort}, {@jqfmt_vfsv1}]}, 0x1, 0x24f, &(0x7f0000000600)="$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") mount$bind(&(0x7f0000000040)='./file1\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x3002, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file1\x00', 0x80b0, &(0x7f0000000540)=ANY=[], 0x0, 0x0, 0x0) 2.12475874s ago: executing program 1 (id=5917): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x560f, &(0x7f0000000000)={0x1, 0x0, 0xfffffffd, 0x0, 0x0, 0x0}) ioctl$TCFLSH(r0, 0x404c4701, 0x20000000) 2.124182596s ago: executing program 3 (id=5918): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000580)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="cf040000e4ffffffffff1200000008000300", @ANYRES32=r1, @ANYBLOB="0400130006001200000000000a000600ffffffffffff000006001000b00300000600bd00000000000600be"], 0x4c}}, 0x0) 2.055382025s ago: executing program 2 (id=5919): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@bridge_delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r2}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}}, 0x0) 1.828273762s ago: executing program 1 (id=5920): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r1, 0x118, 0x1, &(0x7f0000000000), 0x4) 1.826002553s ago: executing program 3 (id=5921): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) brk(0x75555ede6001) 1.800916267s ago: executing program 4 (id=5922): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000a850000000f000000c50000009e00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001b00)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) msync(&(0x7f0000244000/0x2000)=nil, 0x2000, 0x1) 1.741615534s ago: executing program 2 (id=5923): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) 1.628481763s ago: executing program 3 (id=5924): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=ANY=[@ANYBLOB="5c00000010000100"/20, @ANYRES32=r2, @ANYBLOB="000000000000000008000d000000000034001680300001802c000c80140001"], 0x5c}}, 0x0) 1.443288896s ago: executing program 0 (id=5925): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) process_madvise(r1, 0x0, 0x0, 0x0, 0x0) 1.32207132s ago: executing program 1 (id=5926): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x1, 0x17d, &(0x7f00000004c0)="$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") chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x4000, 0x0) preadv2(r0, &(0x7f00000012c0)=[{&(0x7f00000010c0)=""/149, 0x95}], 0x1, 0x1a04, 0xfffffffc, 0x1) 1.126638893s ago: executing program 4 (id=5927): r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000300)={0x5}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000080)={0x2}) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f00000001c0)={0x4}) 969.257624ms ago: executing program 1 (id=5928): r0 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0) fstat(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x1000801, &(0x7f0000000280)=ANY=[@ANYRES32=r2, @ANYBLOB="091e21b81dfc6fb0feb157135f914b110011504efbf790845429946409a9244bffb818fbbc5ead98aeff6a5549e74cef0600", @ANYRESOCT, @ANYRES16=r1, @ANYRESHEX=r0, @ANYRESOCT, @ANYRESOCT=r1, @ANYRES64], 0x2, 0x1d8, &(0x7f0000000840)="$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") mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', 0x0, 0x84000, 0x0) 968.549329ms ago: executing program 4 (id=5929): r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af3e913001ac0040002020800020003000100040003f0e9b556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6cb53", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 932.25453ms ago: executing program 3 (id=5930): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x0, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r1, 0x0, 0x0, 0x30, 0x0, @ib={0x1b, 0x0, 0xff, {"2a4332c3fefcb7080000000000000037"}, 0x101, 0x4, 0xfff}, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x118) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000005c0)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), r1, 0x2}}, 0x18) 664.349535ms ago: executing program 3 (id=5931): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000180)={0x0, 0x7}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, 0x0, 0x4) 565.594611ms ago: executing program 4 (id=5932): r0 = openat$vmci(0xffffff9c, &(0x7f0000001640), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000000c0)={@hyper}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r0, 0x7b2, &(0x7f00000010c0)={&(0x7f0000001680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x2, 0x400}) 504.285242ms ago: executing program 1 (id=5933): r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000440)={{0x0, 0x989680}}, 0x0) clock_adjtime(0x0, &(0x7f0000000040)={0x200d54, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}) ioctl$TFD_IOC_SET_TICKS(r0, 0x40085400, &(0x7f0000000000)=0x9) 469.860452ms ago: executing program 3 (id=5934): r0 = syz_open_dev$loop(&(0x7f0000000180), 0x80000, 0x2480) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000100000000000000000000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000400)) 382.490288ms ago: executing program 0 (id=5935): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = dup(r0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000005c0)={'ip_vti0\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0xe, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, {[@timestamp_addr={0x44, 0x24, 0x0, 0x1, 0x0, [{@multicast1}, {@multicast1}, {@private}, {@loopback}]}]}}}}}) ioctl$PTP_EXTTS_REQUEST2(r1, 0x40603d07, &(0x7f0000000040)) 0s ago: executing program 1 (id=5937): r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/udp\x00') read$FUSE(r0, &(0x7f00000089c0)={0x2020}, 0x2064) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/154, 0x9a}], 0x1, 0x0, 0x0) read$FUSE(r0, &(0x7f0000006980)={0x2020}, 0x2020) kernel console output (not intermixed with test programs): 86] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 588.865800][T18086] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 588.929596][T18415] loop1: detected capacity change from 0 to 32768 [ 589.065742][T16686] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 589.152187][T18086] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 589.376265][T16686] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 589.575602][T16686] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 589.617137][ T5302] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 589.633596][T17992] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 589.813389][ T5302] usb 6-1: Using ep0 maxpacket: 16 [ 589.820989][ T5302] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 589.836086][ T5302] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 589.846155][ T5302] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 589.859107][ T5302] usb 6-1: New USB device found, idVendor=045e, idProduct=9994, bcdDevice=fc.3c [ 589.868247][ T5302] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 589.880053][ T5302] usb 6-1: config 0 descriptor?? [ 590.298679][T18455] program syz.1.5103 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 590.352769][ T5302] hid-multitouch 0003:045E:9994.0038: unknown main item tag 0x2 [ 590.360639][ T5302] hid-multitouch 0003:045E:9994.0038: unknown main item tag 0x0 [ 590.388700][ T5302] hid-multitouch 0003:045E:9994.0038: unknown main item tag 0x0 [ 590.401389][ T5302] hid-multitouch 0003:045E:9994.0038: unknown main item tag 0x0 [ 590.413521][T16686] bridge_slave_1: left allmulticast mode [ 590.428797][T16686] bridge_slave_1: left promiscuous mode [ 590.434548][ T5302] hid-multitouch 0003:045E:9994.0038: unknown main item tag 0x0 [ 590.441991][T16686] bridge0: port 2(bridge_slave_1) entered disabled state [ 590.462061][ T5302] hid-multitouch 0003:045E:9994.0038: unknown main item tag 0x0 [ 590.469749][ T5302] hid-multitouch 0003:045E:9994.0038: unknown main item tag 0x0 [ 590.509370][ T5302] hid-multitouch 0003:045E:9994.0038: unknown main item tag 0x0 [ 590.520253][T16686] bridge_slave_0: left allmulticast mode [ 590.529776][ T5302] hid-multitouch 0003:045E:9994.0038: unknown main item tag 0x0 [ 590.537663][ T5302] hid-multitouch 0003:045E:9994.0038: unknown main item tag 0x0 [ 590.542664][T16686] bridge_slave_0: left promiscuous mode [ 590.561772][ T5302] hid-multitouch 0003:045E:9994.0038: unknown main item tag 0x0 [ 590.562373][ T5245] Bluetooth: hci3: command tx timeout [ 590.580120][T16686] bridge0: port 1(bridge_slave_0) entered disabled state [ 590.601757][ T5302] hid-multitouch 0003:045E:9994.0038: hidraw0: USB HID v0.00 Device [HID 045e:9994] on usb-dummy_hcd.5-1/input0 [ 590.631539][ T5302] usb 6-1: USB disconnect, device number 27 [ 590.741541][ T935] usb 1-1: new full-speed USB device number 34 using dummy_hcd [ 590.992870][ T935] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 591.004074][T16686] erspan0 (unregistering): left promiscuous mode [ 591.023337][ T935] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 2048, setting to 64 [ 591.039522][T16686] gretap0 (unregistering): left promiscuous mode [ 591.048149][ T935] usb 1-1: New USB device found, idVendor=01ac, idProduct=0000, bcdDevice= 1.00 [ 591.065584][ T935] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 591.097031][ T935] usb 1-1: config 0 descriptor?? [ 591.329823][T18458] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 591.357567][T18458] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 591.379247][ T935] usbhid 1-1:0.0: can't add hid device: -71 [ 591.391286][ T935] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 591.411656][ T935] usb 1-1: USB disconnect, device number 34 [ 591.794209][T16686] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 591.816044][T16686] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 591.843792][T16686] bond0 (unregistering): Released all slaves [ 591.916413][T18437] chnl_net:caif_netlink_parms(): no params data found [ 591.992411][ T935] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 592.171238][ T935] usb 1-1: Using ep0 maxpacket: 16 [ 592.195319][ T935] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 592.218502][ T935] usb 1-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice= 1.00 [ 592.239001][ T935] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 592.302627][ T935] usb 1-1: config 0 descriptor?? [ 592.436960][T18086] 8021q: adding VLAN 0 to HW filter on device bond0 [ 592.461229][ T935] rc_core: IR keymap rc-xbox-dvd not found [ 592.467078][ T935] Registered IR keymap rc-empty [ 592.505479][ T935] rc rc0: Xbox DVD USB Remote Control(045e,0284) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 592.567275][ T935] input: Xbox DVD USB Remote Control(045e,0284) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input62 [ 592.581436][ T935] xbox_remote 1-1:0.0: xbox_remote_rc_open: usb_submit_urb failed! [ 592.584412][T17992] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 592.611768][ T935] input: failed to attach handler kbd to device input62, error: -5 [ 592.624473][ T4666] xbox_remote 1-1:0.0: xbox_remote_rc_open: usb_submit_urb failed! [ 592.631459][ T935] usb 1-1: USB disconnect, device number 35 [ 592.643139][ T5245] Bluetooth: hci3: command tx timeout [ 592.950438][T18086] 8021q: adding VLAN 0 to HW filter on device team0 [ 592.981963][T18437] bridge0: port 1(bridge_slave_0) entered blocking state [ 592.989151][T18437] bridge0: port 1(bridge_slave_0) entered disabled state [ 593.012570][T18437] bridge_slave_0: entered allmulticast mode [ 593.020306][T18437] bridge_slave_0: entered promiscuous mode [ 593.052354][T18437] bridge0: port 2(bridge_slave_1) entered blocking state [ 593.059621][T18437] bridge0: port 2(bridge_slave_1) entered disabled state [ 593.101528][T18437] bridge_slave_1: entered allmulticast mode [ 593.109303][T18437] bridge_slave_1: entered promiscuous mode [ 593.184118][T16686] hsr_slave_0: left promiscuous mode [ 593.230079][T16686] hsr_slave_1: left promiscuous mode [ 593.257651][T16686] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 593.266363][T16686] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 593.302648][T16686] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 593.310072][T16686] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 593.370276][T16686] veth1_macvtap: left promiscuous mode [ 593.394725][T16686] veth0_macvtap: left promiscuous mode [ 593.400434][T16686] veth1_vlan: left promiscuous mode [ 593.440722][T16686] veth0_vlan: left promiscuous mode [ 594.354269][T18487] loop5: detected capacity change from 0 to 40427 [ 594.372125][T18487] F2FS-fs (loop5): Insane cp_payload (553648128 >= 504) [ 594.390839][T18487] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 594.454897][T18487] F2FS-fs (loop5): invalid crc value [ 594.461733][T18483] loop1: detected capacity change from 0 to 32768 [ 594.540178][T18487] F2FS-fs (loop5): Found nat_bits in checkpoint [ 594.579991][T18483] XFS (loop1): Mounting V5 Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6 [ 594.669215][T18487] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 594.676921][T18487] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 594.723906][ T5245] Bluetooth: hci3: command tx timeout [ 594.905189][T18483] XFS (loop1): Ending clean mount [ 595.046306][T16314] XFS (loop1): Unmounting Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6 [ 595.622566][T16686] team0 (unregistering): Port device team_slave_1 removed [ 595.883857][T16686] team0 (unregistering): Port device team_slave_0 removed [ 596.244262][T18517] loop1: detected capacity change from 0 to 512 [ 596.291263][T18517] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 596.364357][T18517] EXT4-fs (loop1): 1 truncate cleaned up [ 596.376207][T18517] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 596.801578][ T5245] Bluetooth: hci3: command tx timeout [ 597.143625][T16314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 597.295883][ T5338] IPVS: starting estimator thread 0... [ 597.360361][T18519] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5127'. [ 597.401655][T18524] IPVS: using max 16 ests per chain, 38400 per kthread [ 597.413150][T18437] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 597.453134][T18437] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 597.495822][ T1058] bridge0: port 1(bridge_slave_0) entered blocking state [ 597.503040][ T1058] bridge0: port 1(bridge_slave_0) entered forwarding state [ 597.730201][ T4557] bridge0: port 2(bridge_slave_1) entered blocking state [ 597.737444][ T4557] bridge0: port 2(bridge_slave_1) entered forwarding state [ 597.783417][ T5319] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 597.824853][T18437] team0: Port device team_slave_0 added [ 597.907262][T18437] team0: Port device team_slave_1 added [ 598.013714][ T5319] usb 1-1: Using ep0 maxpacket: 8 [ 598.030322][ T5319] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 598.057764][ T5319] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 598.071902][ T5319] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 598.093316][ T5319] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 598.096168][T17992] veth0_vlan: entered promiscuous mode [ 598.108794][ T5319] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 598.132888][ T5319] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 598.135124][T18437] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 598.150791][T18437] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 598.180344][T18437] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 598.199375][T18437] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 598.206599][T18437] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 598.232807][T18437] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 598.360420][T17992] veth1_vlan: entered promiscuous mode [ 598.372664][ T5319] usb 1-1: GET_CAPABILITIES returned 0 [ 598.378205][ T5319] usbtmc 1-1:16.0: can't read capabilities [ 598.405468][T18437] hsr_slave_0: entered promiscuous mode [ 598.417147][T18437] hsr_slave_1: entered promiscuous mode [ 598.446833][T16686] IPVS: stop unused estimator thread 0... [ 598.638580][ T5319] usb 1-1: USB disconnect, device number 36 [ 598.698072][T17992] veth0_macvtap: entered promiscuous mode [ 598.826762][T17992] veth1_macvtap: entered promiscuous mode [ 599.063697][T17992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 599.087537][T17992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 599.097594][T17992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 599.108482][T17992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 599.139877][T17992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 599.158440][T17992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 599.197926][T17992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on:  [ 599.219744][T17992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 599.236764][T17992] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 599.258160][T17992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 599.278012][T17992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 599.290928][T17992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 599.310870][T17992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 599.331188][T17992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 599.349738][T17992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 599.359677][T17992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 599.380521][T17992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 599.404293][T17992] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 599.413420][ T5319] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 599.484418][T17992] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 599.504889][T17992] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 599.522541][T17992] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 599.541225][T17992] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 599.559782][T18086] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 599.614394][ T5319] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 599.644352][ T5319] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 599.654240][ T5319] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 599.697382][ T5319] usb 6-1: config 0 interface 0 has no altsetting 0 [ 599.711999][ T5319] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 599.736689][ T5319] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 599.777065][ T5319] usb 6-1: config 0 interface 0 has no altsetting 0 [ 599.831326][ T5319] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 599.861491][ T5319] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 599.881816][ T5319] usb 6-1: config 0 interface 0 has no altsetting 0 [ 599.903170][ T5319] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 599.952527][ T5319] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 599.974974][T18474] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 600.003865][T18474] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 600.010313][ T5319] usb 6-1: config 0 interface 0 has no altsetting 0 [ 600.022268][ T5319] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 600.041193][ T5319] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 600.092474][ T5319] usb 6-1: config 0 interface 0 has no altsetting 0 [ 600.108380][ T5319] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 600.127205][ T5319] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 600.171182][ T5319] usb 6-1: config 0 interface 0 has no altsetting 0 [ 600.180527][ T5319] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 600.193736][ T5319] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 600.196664][T18437] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 600.218259][ T5319] usb 6-1: config 0 interface 0 has no altsetting 0 [ 600.234845][ T5319] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 600.267904][T18437] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 600.270215][ T5319] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 600.296968][ T5319] usb 6-1: config 0 interface 0 has no altsetting 0 [ 600.326171][T16686] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 600.337412][ T5319] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 600.358494][T16686] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 600.367672][ T5319] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 600.386072][T18437] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 600.399100][ T5319] usb 6-1: Product: syz [ 600.419655][ T5319] usb 6-1: Manufacturer: syz [ 600.427822][T18437] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 600.441329][ T5319] usb 6-1: SerialNumber: syz [ 600.459875][ T5319] usb 6-1: config 0 descriptor?? [ 600.483704][ T5319] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0 [ 600.813080][ T5302] usb 6-1: USB disconnect, device number 28 [ 600.832736][ T5302] yurex 6-1:0.0: USB YUREX #0 now disconnected [ 600.896196][T18576] loop0: detected capacity change from 0 to 164 [ 600.903035][T18086] veth0_vlan: entered promiscuous mode [ 600.925754][T18576] ISOFS: primary root directory is empty. Disabling Rock Ridge and switching to Joliet. [ 600.927520][T18086] veth1_vlan: entered promiscuous mode [ 600.960469][T18437] 8021q: adding VLAN 0 to HW filter on device bond0 [ 601.059535][T18437] 8021q: adding VLAN 0 to HW filter on device team0 [ 601.098495][ T1827] bridge0: port 1(bridge_slave_0) entered blocking state [ 601.105688][ T1827] bridge0: port 1(bridge_slave_0) entered forwarding state [ 601.144060][ T1827] bridge0: port 2(bridge_slave_1) entered blocking state [ 601.151245][ T1827] bridge0: port 2(bridge_slave_1) entered forwarding state [ 601.228937][T18086] veth0_macvtap: entered promiscuous mode [ 601.240146][T18579] input: syz1 as /devices/virtual/input/input63 [ 601.261673][T18086] veth1_macvtap: entered promiscuous mode [ 601.418507][T18437] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 601.435067][T18437] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 601.488158][T18086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 601.531359][T18086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 601.574099][T18086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 601.601821][T18086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 601.624949][T18086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 601.648112][T18086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 601.679138][T18086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on:  [ 601.703643][T18086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 601.729063][T18086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 601.757407][T18086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 601.795459][T18086] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 601.908636][T18086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 601.954884][T18086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 601.995507][T18599] CIFS: Unable to determine destination address [ 602.004315][T18086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 602.037455][T18086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 602.068795][T18086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 602.116162][T18086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 602.143885][T18086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 602.181315][T18086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 602.231191][T18086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 602.271202][T18086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 602.303862][T18086] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 602.369396][T18086] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.421414][T18086] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.430144][T18086] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.482710][T18086] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.796467][T18437] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 602.924543][ T1058] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 602.981284][ T1058] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 603.166064][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 603.205007][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 603.324555][T18437] veth0_vlan: entered promiscuous mode [ 603.394519][T18437] veth1_vlan: entered promiscuous mode [ 603.538482][T18437] veth0_macvtap: entered promiscuous mode [ 603.578036][T18437] veth1_macvtap: entered promiscuous mode [ 603.670119][T18638] loop5: detected capacity change from 0 to 256 [ 603.687854][T18437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 603.722086][T18638] exfat: Deprecated parameter 'utf8' [ 603.747698][T18638] exfat: Deprecated parameter 'namecase' [ 603.761743][T18638] exfat: Deprecated parameter 'utf8' [ 603.768832][T18437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 603.791145][T18437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 603.832537][T18437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 603.855612][T18437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 603.870378][T18638] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 603.871518][T18437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 603.900087][T18437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on:  [ 603.940316][T18437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 603.960535][T18437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 603.984217][T18437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 603.988836][T18638] exFAT-fs (loop5): error, tried to truncate zeroed cluster. [ 604.004261][T18437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 604.049440][ T29] audit: type=1800 audit(1725408474.118:203): pid=18638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.5170" name="file1" dev="loop5" ino=1048796 res=0 errno=0 [ 604.054867][T18638] exFAT-fs (loop5): error, tried to truncate zeroed cluster. [ 604.070787][T18437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 604.127892][T18437] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 604.147215][T18437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 604.169478][T18437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 604.181481][T18437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 604.192038][T18437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 604.201905][T18437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 604.212419][T18437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 604.222269][T18437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 604.232781][T18437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 604.254650][T18437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 604.281149][T18437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 604.291014][T18437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 604.321485][T18437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 604.353896][T18437] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 604.406043][T18437] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 604.434234][T18437] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 604.471158][T18437] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 604.504054][T18437] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 604.619740][T18659] netlink: 'syz.2.5178': attribute type 10 has an invalid length. [ 604.795959][T18659] team0: Port device wlan1 added [ 604.836754][T18662] netlink: 'syz.5.5180': attribute type 12 has an invalid length. [ 604.870101][T18663] netlink: 'syz.2.5178': attribute type 10 has an invalid length. [ 604.972180][T18663] batman_adv: batadv0: Adding interface: team0 [ 605.001603][T18663] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 605.057381][T18663] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 605.161206][T18577] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 605.336176][ T4549] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 605.364727][ T4549] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 605.370179][T18673] loop4: detected capacity change from 0 to 1024 [ 605.451532][T18577] usb 2-1: Using ep0 maxpacket: 8 [ 605.493168][T18577] usb 2-1: config 135 has an invalid interface number: 230 but max is 0 [ 605.504066][ T1058] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 605.531396][T18577] usb 2-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 605.531596][ T1058] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 605.581428][T18577] usb 2-1: config 135 has no interface number 0 [ 605.593557][T18577] usb 2-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 605.664262][T18577] usb 2-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 605.698044][T18577] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 605.726717][T18577] usb 2-1: Product: syz [ 605.730998][T18577] usb 2-1: Manufacturer: syz [ 605.751196][T18577] usb 2-1: SerialNumber: syz [ 605.800993][T18577] usb 2-1: Found UVC 0.00 device syz (18ec:3288) [ 605.828302][T18577] usb 2-1: No valid video chain found. [ 606.112623][T18577] usb 2-1: USB disconnect, device number 32 [ 606.164191][T18693] loop4: detected capacity change from 0 to 256 [ 606.322430][T18693] FAT-fs (loop4): Directory bread(block 64) failed [ 606.344069][T18693] FAT-fs (loop4): Directory bread(block 65) failed [ 606.363385][T18693] FAT-fs (loop4): Directory bread(block 66) failed [ 606.369935][T18693] FAT-fs (loop4): Directory bread(block 67) failed [ 606.379375][T18693] FAT-fs (loop4): Directory bread(block 68) failed [ 606.387848][T18693] FAT-fs (loop4): Directory bread(block 69) failed [ 606.426358][T18693] FAT-fs (loop4): Directory bread(block 70) failed [ 606.451244][T18693] FAT-fs (loop4): Directory bread(block 71) failed [ 606.487761][T18693] FAT-fs (loop4): Directory bread(block 72) failed [ 606.512444][T18693] FAT-fs (loop4): Directory bread(block 73) failed [ 606.737357][T18708] netlink: 'syz.0.5199': attribute type 1 has an invalid length. [ 606.745539][T18693] Process accounting resumed [ 606.765301][T18693] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 606.803320][T18693] FAT-fs (loop4): Filesystem has been set read-only [ 606.958424][T18717] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 607.209340][T18726] loop0: detected capacity change from 0 to 128 [ 607.243788][T18726] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 607.333265][T18726] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 607.386177][T18737] bridge0: port 2(bridge_slave_1) entered listening state [ 607.463232][T18735] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 607.818803][T18752] program syz.2.5222 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 607.985287][T18757] netlink: 'syz.0.5225': attribute type 29 has an invalid length. [ 608.041691][T18763] netlink: 'syz.0.5225': attribute type 29 has an invalid length. [ 608.069114][T18758] loop1: detected capacity change from 0 to 512 [ 608.080052][T18757] netlink: 'syz.0.5225': attribute type 29 has an invalid length. [ 608.120595][ T29] audit: type=1326 audit(1725408478.188:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18764 comm="syz.3.5228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e6db7cef9 code=0x7ffc0000 [ 608.252039][ T29] audit: type=1326 audit(1725408478.238:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18764 comm="syz.3.5228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e6db7cef9 code=0x7ffc0000 [ 608.371027][ T29] audit: type=1326 audit(1725408478.238:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18764 comm="syz.3.5228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7e6db7cef9 code=0x7ffc0000 [ 608.385125][T18758] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 608.420406][T18758] ext4 filesystem being mounted at /133/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 608.442699][T18775] Bluetooth: MGMT ver 1.23 [ 608.471933][ T29] audit: type=1326 audit(1725408478.238:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18764 comm="syz.3.5228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e6db7cef9 code=0x7ffc0000 [ 608.549583][ T29] audit: type=1326 audit(1725408478.238:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18764 comm="syz.3.5228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e6db7cef9 code=0x7ffc0000 [ 608.584431][ T25] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 608.607641][ T29] audit: type=1326 audit(1725408478.258:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18764 comm="syz.3.5228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7e6db7cef9 code=0x7ffc0000 [ 608.705580][T18781] loop0: detected capacity change from 0 to 1024 [ 608.708976][ T29] audit: type=1326 audit(1725408478.258:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18764 comm="syz.3.5228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e6db7cef9 code=0x7ffc0000 [ 608.732913][T18781] EXT4-fs: Ignoring removed i_version option [ 608.773852][T18781] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 608.774869][T16314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 608.796834][ T29] audit: type=1326 audit(1725408478.258:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18764 comm="syz.3.5228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e6db7cef9 code=0x7ffc0000 [ 608.831210][ T25] usb 5-1: Using ep0 maxpacket: 32 [ 608.839921][ T25] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 608.849107][T18781] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 608.882530][ T25] usb 5-1: config 0 has no interface number 0 [ 608.889867][ T25] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 608.902727][ T25] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 608.913122][ T25] usb 5-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 608.922673][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 608.933675][ T25] usb 5-1: config 0 descriptor?? [ 608.973298][ T29] audit: type=1326 audit(1725408478.278:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18764 comm="syz.3.5228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=63 compat=0 ip=0x7f7e6db7cef9 code=0x7ffc0000 [ 609.122929][ T29] audit: type=1326 audit(1725408478.278:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18764 comm="syz.3.5228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e6db7cef9 code=0x7ffc0000 [ 609.204032][T14893] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 609.234236][ T29] audit: type=1326 audit(1725408478.278:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18764 comm="syz.3.5228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e6db7cef9 code=0x7ffc0000 [ 609.567462][ T25] uclogic 0003:28BD:0094.0039: pen parameters not found [ 609.579868][ T25] uclogic 0003:28BD:0094.0039: interface is invalid, ignoring [ 609.618665][ T25] usb 5-1: USB disconnect, device number 32 [ 609.870614][T18812] loop5: detected capacity change from 0 to 512 [ 609.899887][T18812] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 609.934594][T18812] EXT4-fs (loop5): 1 truncate cleaned up [ 609.960104][T18812] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 609.987395][T18817] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5250'. [ 610.285137][T16312] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 610.642766][T16315] Bluetooth: hci7: command 0x0406 tx timeout [ 610.649034][T14896] Bluetooth: hci6: command 0x0406 tx timeout [ 610.705842][ T29] audit: type=1326 audit(1725408480.768:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18838 comm="syz.3.5259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e6db7cef9 code=0x7ffc0000 [ 610.831434][ T29] audit: type=1326 audit(1725408480.768:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18838 comm="syz.3.5259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e6db7cef9 code=0x7ffc0000 [ 610.947994][ T29] audit: type=1326 audit(1725408480.828:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18838 comm="syz.3.5259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7e6db7cef9 code=0x7ffc0000 [ 611.037868][ T29] audit: type=1326 audit(1725408480.828:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18838 comm="syz.3.5259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e6db7cef9 code=0x7ffc0000 [ 611.083418][T18847] loop3: detected capacity change from 0 to 256 [ 611.100026][T18847] exfat: Deprecated parameter 'utf8' [ 611.109200][ T29] audit: type=1326 audit(1725408480.828:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18838 comm="syz.3.5259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e6db7cef9 code=0x7ffc0000 [ 611.141232][T18847] exfat: Deprecated parameter 'namecase' [ 611.201036][ T29] audit: type=1326 audit(1725408480.828:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18838 comm="syz.3.5259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7e6db7cef9 code=0x7ffc0000 [ 611.229856][ T29] audit: type=1326 audit(1725408480.828:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18838 comm="syz.3.5259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e6db7cef9 code=0x7ffc0000 [ 611.241566][T18847] exFAT-fs (loop3): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 611.261154][ T29] audit: type=1326 audit(1725408480.838:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18838 comm="syz.3.5259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7e6db73ea7 code=0x7ffc0000 [ 611.340377][T18851] loop1: detected capacity change from 0 to 2048 [ 611.417115][T18851] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 611.582847][T18857] loop4: detected capacity change from 0 to 2048 [ 611.688112][T18851] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 611.693619][T18859] loop0: detected capacity change from 0 to 1024 [ 611.716890][T18859] EXT4-fs: Ignoring removed oldalloc option [ 611.734615][T18857] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 611.789278][T18859] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 611.835610][T18086] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 611.867126][T18863] loop3: detected capacity change from 0 to 4096 [ 611.962816][T18851] EXT4-fs (loop1): Remounting filesystem read-only [ 612.137261][T14893] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 612.148074][T16314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 612.184329][T18872] netlink: 'syz.2.5270': attribute type 1 has an invalid length. [ 612.193984][T18872] netlink: 9328 bytes leftover after parsing attributes in process `syz.2.5270'. [ 612.203341][T18872] netlink: 'syz.2.5270': attribute type 2 has an invalid length. [ 612.215107][T18872] netlink: 'syz.2.5270': attribute type 1 has an invalid length. [ 612.730415][T18888] loop5: detected capacity change from 0 to 1024 [ 613.073163][ T12] hfsplus: b-tree write err: -5, ino 4 [ 613.099786][T18899] loop4: detected capacity change from 0 to 128 [ 613.458161][T18909] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5287'. [ 614.055097][T18892] loop0: detected capacity change from 0 to 40427 [ 614.108058][T18923] loop3: detected capacity change from 0 to 164 [ 614.143559][T18892] F2FS-fs (loop0): invalid crc value [ 614.155912][T18923] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 614.194363][T18892] F2FS-fs (loop0): Found nat_bits in checkpoint [ 614.241031][T18923] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 614.250513][T18930] loop2: detected capacity change from 0 to 512 [ 614.282377][T18930] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 614.352052][T18930] EXT4-fs (loop2): 1 truncate cleaned up [ 614.363951][T18930] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 614.431429][T18930] EXT4-fs error (device loop2): swap_inode_boot_loader:384: inode #5: comm syz.2.5295: iget: bad extra_isize 46 (inode size 256) [ 614.513464][T18892] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 614.596240][T18892] syz.0.5279: attempt to access beyond end of device [ 614.596240][T18892] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 614.624397][T17992] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 614.669433][T18892] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 614.701997][T18937] loop3: detected capacity change from 0 to 512 [ 614.720596][T18937] EXT4-fs: Ignoring removed orlov option [ 614.756378][T18937] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 614.842675][T18937] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.5298: corrupted in-inode xattr: overlapping e_value [ 614.842731][T18941] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5299'. [ 614.902122][T18941] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5299'. [ 614.905244][T18886] loop1: detected capacity change from 0 to 32768 [ 614.919682][T18937] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.5298: couldn't read orphan inode 15 (err -117) [ 614.980896][T18937] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 615.074941][T18886] [ 615.074941][T18886] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 615.074941][T18886] [ 615.127511][T18937] syz.3.5298 (pid 18937) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 615.163950][T18915] loop4: detected capacity change from 0 to 40427 [ 615.210672][T18915] F2FS-fs (loop4): invalid crc value [ 615.230474][T18886] [ 615.230474][T18886] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 615.230474][T18886] [ 615.245654][T18915] F2FS-fs (loop4): Found nat_bits in checkpoint [ 615.293791][T18886] [ 615.293791][T18886] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 615.293791][T18886] [ 615.319789][T18437] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 615.339449][T18886] [ 615.339449][T18886] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 615.339449][T18886] [ 615.439709][T18915] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 615.539007][T18886] [ 615.539007][T18886] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 615.539007][T18886] [ 615.599917][T18886] [ 615.599917][T18886] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 615.599917][T18886] [ 615.634496][T18915] F2FS-fs (loop4): Stopped filesystem due to reason: 0 [ 615.734248][ T112] [ 615.734248][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 615.734248][ T112] [ 615.773624][T18886] jfs_rmdir: dtDelete returned -2 [ 616.062680][T16314] [ 616.062680][T16314] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 616.062680][T16314] [ 616.078266][T18963] loop3: detected capacity change from 0 to 512 [ 616.142284][T16314] [ 616.142284][T16314] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 616.142284][T16314] [ 616.187600][T18963] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 616.248709][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 616.331531][T18963] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 616.715633][T18977] macsec1: entered promiscuous mode [ 616.720910][T18977] macvlan0: entered promiscuous mode [ 616.760107][T18437] __quota_error: 29 callbacks suppressed [ 616.760130][T18437] Quota error (device loop3): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 616.812993][T18977] macvlan0: left promiscuous mode [ 616.821362][T18437] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 616.901869][T18437] EXT4-fs error (device loop3): ext4_acquire_dquot:6848: comm syz-executor: Failed to acquire dquot type 0 [ 617.304919][T18986] loop2: detected capacity change from 0 to 1024 [ 617.328533][T18986] hfsplus: unable to parse mount options [ 617.499082][T18437] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 618.041335][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.091159][ T935] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 618.195115][T18995] loop1: detected capacity change from 0 to 4096 [ 618.353437][ T935] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 618.369628][ T935] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 618.391511][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.405853][ T935] usb 3-1: config 0 descriptor?? [ 618.421446][T18996] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 618.437126][ T935] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 618.634513][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.935084][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.096383][T18984] loop4: detected capacity change from 0 to 40427 [ 619.135387][T18984] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 619.162872][T18984] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 619.241402][ T25] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 619.249857][T18984] F2FS-fs (loop4): Found nat_bits in checkpoint [ 619.281649][ T935] usb 3-1: USB disconnect, device number 21 [ 619.312476][ T5245] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 619.333743][ T5245] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 619.342150][ T5245] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 619.353451][ T5245] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 619.383302][ T5245] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 619.393637][ T5245] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 619.402732][ T12] bridge_slave_1: left allmulticast mode [ 619.408408][ T12] bridge_slave_1: left promiscuous mode [ 619.451295][ T25] usb 6-1: Using ep0 maxpacket: 16 [ 619.458622][ T25] usb 6-1: config 0 has an invalid interface number: 214 but max is 0 [ 619.467620][ T25] usb 6-1: config 0 has no interface number 0 [ 619.473582][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 619.474007][ T25] usb 6-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 619.497758][ T25] usb 6-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 619.507231][ T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 619.515445][ T25] usb 6-1: Product: syz [ 619.519931][ T25] usb 6-1: Manufacturer: syz [ 619.528469][ T25] usb 6-1: SerialNumber: syz [ 619.529775][ T12] bridge_slave_0: left allmulticast mode [ 619.535922][ T25] usb 6-1: config 0 descriptor?? [ 619.563393][T18984] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 619.569499][ T12] bridge_slave_0: left promiscuous mode [ 619.570431][T18984] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 619.620723][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 619.655848][T18984] Process accounting resumed [ 620.215251][ T25] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.214/input/input64 [ 620.523529][ T25] usb 6-1: USB disconnect, device number 29 [ 620.672755][T19027] loop2: detected capacity change from 0 to 4096 [ 620.714361][T19028] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 621.249046][T19036] loop5: detected capacity change from 0 to 128 [ 621.441784][ T5236] Bluetooth: hci3: command tx timeout [ 621.718272][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 621.759507][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 621.787217][ T12] bond0 (unregistering): Released all slaves [ 621.970516][T19046] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5345'. [ 622.000272][T19046] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5345'. [ 622.255739][T19050] loop5: detected capacity change from 0 to 2048 [ 622.313559][T19050] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 622.398727][T19034] loop2: detected capacity change from 0 to 32768 [ 622.423175][T19034] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.5339 (19034) [ 622.505917][T19034] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 622.542285][T19034] BTRFS info (device loop2): using sha256 (sha256-ni) checksum algorithm [ 622.550779][T19034] BTRFS info (device loop2): using free-space-tree [ 622.601852][T19060] program syz.0.5350 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 622.627542][ T935] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 622.773652][ T58] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 622.863249][ T58] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 622.992389][ T58] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 623.092101][ T5297] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 623.096744][T17992] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 623.173547][ T5297] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 623.231171][ T935] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 623.273044][ T58] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 623.331412][ T12] hsr_slave_0: left promiscuous mode [ 623.357073][ T12] hsr_slave_1: left promiscuous mode [ 623.404175][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 623.421269][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 623.459741][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 623.467731][ T935] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 623.487831][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 623.499898][ T935] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 623.521560][ T5236] Bluetooth: hci3: command tx timeout [ 623.551223][ T935] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 623.561021][ T935] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 623.621412][ T25] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 623.631189][ T935] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 623.642769][T19090] loop0: detected capacity change from 0 to 16 [ 623.691647][T19090] erofs: (device loop0): mounted with root inode @ nid 36. [ 623.701319][ T935] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 623.742602][ T12] veth1_macvtap: left promiscuous mode [ 623.748218][ T12] veth0_macvtap: left promiscuous mode [ 623.762703][ T935] usb 6-1: config 0 descriptor?? [ 623.764211][ T29] audit: type=1800 audit(1725408493.838:252): pid=19090 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.5357" name="file1" dev="loop0" ino=86 res=0 errno=0 [ 623.781335][ T12] veth1_vlan: left promiscuous mode [ 623.851969][ T12] veth0_vlan: left promiscuous mode [ 623.931811][ T1262] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.048361][ C0] vkms_vblank_simulate: vblank timer overrun [ 624.112243][T19097] loop4: detected capacity change from 0 to 16 [ 624.146089][T19097] erofs: (device loop4): erofs_read_superblock: dirblkbits 4 isn't supported [ 624.213515][ T935] plantronics 0003:047F:FFFF.003A: unknown main item tag 0x7 [ 624.221015][ T935] plantronics 0003:047F:FFFF.003A: unbalanced collection at end of report description [ 624.261267][ T935] plantronics 0003:047F:FFFF.003A: parse failed [ 624.292366][ T935] plantronics 0003:047F:FFFF.003A: probe with driver plantronics failed with error -22 [ 624.353554][T19101] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5362'. [ 624.494706][T18459] usb 6-1: USB disconnect, device number 30 [ 624.931463][ C0] vkms_vblank_simulate: vblank timer overrun [ 624.942026][T19082] loop1: detected capacity change from 0 to 32768 [ 624.959314][T19082] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.5351 (19082) [ 625.037383][T19082] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 625.051501][ T58] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 625.087549][T19082] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 625.096514][T19082] BTRFS info (device loop1): using free-space-tree [ 625.261720][ T58] usb 1-1: Using ep0 maxpacket: 8 [ 625.275066][ T58] usb 1-1: config 0 has an invalid interface number: 125 but max is 3 [ 625.295971][ T58] usb 1-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 625.352800][ T58] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 4 [ 625.364698][ T58] usb 1-1: config 0 has no interface number 0 [ 625.370982][ T58] usb 1-1: config 0 interface 125 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 625.384453][ T58] usb 1-1: config 0 interface 125 has no altsetting 0 [ 625.399957][ T58] usb 1-1: Dual-Role OTG device on HNP port [ 625.409166][ T58] usb 1-1: New USB device found, idVendor=17dc, idProduct=0202, bcdDevice=8a.dd [ 625.424074][ T58] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 625.441930][ T58] usb 1-1: Product: syz [ 625.448557][ T58] usb 1-1: Manufacturer: syz [ 625.449206][ C0] vkms_vblank_simulate: vblank timer overrun [ 625.457745][ T58] usb 1-1: SerialNumber: syz [ 625.475280][ T58] usb 1-1: config 0 descriptor?? [ 625.484047][ T58] hub 1-1:0.125: bad descriptor, ignoring hub [ 625.491289][ T58] hub 1-1:0.125: probe with driver hub failed with error -5 [ 625.503467][ T58] usb 1-1: Found UVC 15.ff device syz (17dc:0202) [ 625.510019][ T58] usb 1-1: No valid video chain found. [ 625.601380][ T5236] Bluetooth: hci3: command tx timeout [ 625.788243][T16314] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 625.845869][ T58] usb 1-1: USB disconnect, device number 37 [ 626.250073][ T12] team0 (unregistering): Port device team_slave_1 removed [ 626.376193][ T12] team0 (unregistering): Port device team_slave_0 removed [ 627.137605][T19146] program syz.0.5375 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 627.695025][ T5236] Bluetooth: hci3: command tx timeout [ 627.872865][T19131] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 627.881444][ T25] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 627.931836][T19131] netdevsim netdevsim5 netdevsim0: left promiscuous mode [ 628.414166][T19160] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 628.435235][ T25] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 628.463961][T19165] loop2: detected capacity change from 0 to 4096 [ 628.513599][T19169] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 628.628213][T19013] chnl_net:caif_netlink_parms(): no params data found [ 628.821290][ T935] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 629.086829][ T935] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 629.137329][ T935] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 629.153975][ T935] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 629.164303][ T935] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 629.184462][T19168] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 629.197583][ T935] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 629.270067][T19013] bridge0: port 1(bridge_slave_0) entered blocking state [ 629.290346][T19013] bridge0: port 1(bridge_slave_0) entered disabled state [ 629.318656][T19013] bridge_slave_0: entered allmulticast mode [ 629.340009][T19013] bridge_slave_0: entered promiscuous mode [ 629.351225][T18459] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 629.382240][T19013] bridge0: port 2(bridge_slave_1) entered blocking state [ 629.419953][T19013] bridge0: port 2(bridge_slave_1) entered disabled state [ 629.435435][T19013] bridge_slave_1: entered allmulticast mode [ 629.463028][T19013] bridge_slave_1: entered promiscuous mode [ 629.487520][T19193] loop4: detected capacity change from 0 to 4096 [ 629.555196][T19196] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 629.574555][T18459] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 629.596292][T18459] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 629.617863][T18459] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 629.618266][T19013] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 629.665093][T18459] usb 1-1: config 0 interface 0 has no altsetting 0 [ 629.692204][T18459] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 629.697923][T19013] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 629.718480][T18459] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 629.759028][T18459] usb 1-1: config 0 interface 0 has no altsetting 0 [ 629.784531][T18459] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 629.810600][T18459] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 629.856226][T18459] usb 1-1: config 0 interface 0 has no altsetting 0 [ 629.875686][T19013] team0: Port device team_slave_0 added [ 629.880855][T18459] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 629.906257][T19013] team0: Port device team_slave_1 added [ 629.951307][T18459] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 629.993908][T18459] usb 1-1: config 0 interface 0 has no altsetting 0 [ 630.012142][T18459] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 630.057539][T18459] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 630.108564][T19013] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 630.140357][ T5301] usb 2-1: USB disconnect, device number 33 [ 630.148921][T18459] usb 1-1: config 0 interface 0 has no altsetting 0 [ 630.171343][T19013] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 630.226519][T18459] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 630.251157][T18459] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 630.278210][T19013] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 630.295935][T18459] usb 1-1: config 0 interface 0 has no altsetting 0 [ 630.312780][T18459] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 630.326306][T18459] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 630.338441][T18459] usb 1-1: config 0 interface 0 has no altsetting 0 [ 630.360338][T18459] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 630.379054][T18459] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 630.409869][T19013] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 630.421142][T18459] usb 1-1: config 0 interface 0 has no altsetting 0 [ 630.441151][T19013] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 630.509395][T18459] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 630.550707][T18459] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 630.620474][T18459] usb 1-1: Product: syz [ 630.631133][T19013] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 630.652283][T18459] usb 1-1: Manufacturer: syz [ 630.687234][T18459] usb 1-1: SerialNumber: syz [ 630.742501][T18459] usb 1-1: config 0 descriptor?? [ 630.831167][T18459] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0 [ 631.097411][T19013] hsr_slave_0: entered promiscuous mode [ 631.141389][T18459] usb 1-1: USB disconnect, device number 38 [ 631.150921][T18459] yurex 1-1:0.0: USB YUREX #0 now disconnected [ 631.155430][T19013] hsr_slave_1: entered promiscuous mode [ 631.451199][ T5301] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 631.512433][T19229] loop2: detected capacity change from 0 to 2048 [ 631.568738][T19229] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 631.666501][ T5301] usb 5-1: config 0 has no interfaces? [ 631.701307][ T5301] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 631.729198][T19229] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 631.754911][ T5301] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 631.780586][T19229] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 631.807903][ T5301] usb 5-1: config 0 descriptor?? [ 631.811508][T19229] EXT4-fs (loop2): This should not happen!! Data will be lost [ 631.811508][T19229] [ 631.862839][T19229] EXT4-fs (loop2): Total free blocks count 0 [ 631.868888][T19229] EXT4-fs (loop2): Free/Dirty block details [ 631.896800][T19229] EXT4-fs (loop2): free_blocks=2415919104 [ 631.908024][T19229] EXT4-fs (loop2): dirty_blocks=48 [ 631.910456][T19240] loop5: detected capacity change from 0 to 1024 [ 631.919627][T19229] EXT4-fs (loop2): Block reservation details [ 631.950208][T19240] hfsplus: walked past end of dir [ 631.977649][T19229] EXT4-fs (loop2): i_reserved_data_blocks=3 [ 632.090764][T18459] usb 5-1: USB disconnect, device number 33 [ 632.143358][T17992] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 632.569848][T19013] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 632.577843][ T25] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 632.639268][T19013] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 632.698320][T19013] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 632.746474][T19013] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 632.795870][ T25] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 632.822307][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 632.833294][T19259] loop5: detected capacity change from 0 to 512 [ 632.861046][ T25] usb 1-1: Product: syz [ 632.865363][ T25] usb 1-1: Manufacturer: syz [ 632.869974][ T25] usb 1-1: SerialNumber: syz [ 632.883502][T19259] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 632.933312][ T25] usb 1-1: config 0 descriptor?? [ 632.986864][T19259] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #16: comm syz.5.5421: invalid indirect mapped block 4294967295 (level 0) [ 633.057168][T19013] 8021q: adding VLAN 0 to HW filter on device bond0 [ 633.090398][T19013] 8021q: adding VLAN 0 to HW filter on device team0 [ 633.105769][T19259] EXT4-fs (loop5): Remounting filesystem read-only [ 633.120960][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 633.128260][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 633.157626][T19259] EXT4-fs (loop5): 1 orphan inode deleted [ 633.198945][ T1827] bridge0: port 2(bridge_slave_1) entered blocking state [ 633.206268][ T1827] bridge0: port 2(bridge_slave_1) entered forwarding state [ 633.216746][T19259] EXT4-fs (loop5): 1 truncate cleaned up [ 633.243241][T19259] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 633.416144][ T25] usb 1-1: Firmware: major: 152, minor: 239, hardware type: HULUSB (4) [ 633.552624][T16312] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 633.640228][ T25] usb 1-1: failed to fetch extended address, random address set [ 633.793540][T19272] loop5: detected capacity change from 0 to 4096 [ 633.810658][ T25] usb 1-1: USB disconnect, device number 39 [ 633.860502][T19275] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 633.978567][T19255] loop2: detected capacity change from 0 to 32768 [ 633.987509][T19255] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.5419 (19255) [ 634.054567][T19255] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 634.109349][T19255] BTRFS info (device loop2): using sha256 (sha256-ni) checksum algorithm [ 634.120220][T19013] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 634.130391][T19255] BTRFS info (device loop2): using free-space-tree [ 634.302901][T19013] veth0_vlan: entered promiscuous mode [ 634.382203][T19263] loop4: detected capacity change from 0 to 32768 [ 634.449364][T19013] veth1_vlan: entered promiscuous mode [ 634.476720][T19263] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.5422 (19263) [ 634.577777][T19263] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 634.606154][T19263] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 634.620887][T19013] veth0_macvtap: entered promiscuous mode [ 634.633498][ T29] audit: type=1800 audit(1725408504.698:253): pid=19255 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.5419" name="bus" dev="loop2" ino=263 res=0 errno=0 [ 634.651727][T19263] BTRFS info (device loop4): using free-space-tree [ 634.696114][T19013] veth1_macvtap: entered promiscuous mode [ 634.796930][T19299] loop5: detected capacity change from 0 to 1024 [ 634.817439][T19013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 634.901318][T19013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 634.913174][T17992] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 634.923971][T19299] hfsplus: catalog searching failed [ 634.970326][T19013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 635.030861][T19013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 635.043773][T19013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 635.061887][T19013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 635.072627][T19013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on:  [ 635.082033][T19013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 635.091972][T19013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 635.102977][T19013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 635.113344][T19013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 635.131183][T19013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 635.227826][T19013] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 635.293479][T19263] BTRFS info (device loop4): device stats zeroed by syz.4.5422 (19263) [ 635.444457][T19013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 635.491378][T19013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 635.507616][T19013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 635.531426][T19013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 635.542931][T19013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 635.553924][T19013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 635.554737][T18086] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 635.564241][T19013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 635.588740][T19013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 635.598645][T19013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 635.632402][T19013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 635.642387][T19013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 635.653390][T19013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 635.681901][T19013] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 635.695095][T19013] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 635.741400][T19013] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 635.750162][T19013] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 635.801407][T19013] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 635.972592][T19325] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5435'. [ 636.383442][ T1827] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 636.415035][ T1827] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 636.438807][ T29] audit: type=1400 audit(1725408506.508:254): apparmor="DENIED" operation="change_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=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 [ 636.445489][T19339] loop1: detected capacity change from 0 to 64 [ 636.479925][ T1827] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 636.572826][T19340] loop2: detected capacity change from 0 to 16 [ 636.590960][ T1827] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 636.599249][T19340] erofs: (device loop2): mounted with root inode @ nid 36. [ 636.650406][T19340] overlayfs: failed to get metacopy (-117) [ 637.126176][T19354] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 637.181486][T19354] syzkaller0: linktype set to 65534 [ 637.615628][T19371] loop2: detected capacity change from 0 to 128 [ 637.670483][T19371] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 637.691952][T19371] ext4 filesystem being mounted at /64/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 637.993474][T19389] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5462'. [ 638.026227][T17992] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 638.172929][T19393] loop4: detected capacity change from 0 to 1024 [ 638.191492][T19393] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 638.359653][T19398] loop2: detected capacity change from 0 to 512 [ 638.403290][T19398] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 638.477800][T19398] EXT4-fs (loop2): 1 truncate cleaned up [ 638.502805][T19398] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 638.611899][T19398] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.5465: corrupted in-inode xattr: overlapping e_value [ 638.675429][T19398] EXT4-fs warning (device loop2): ext4_xattr_set_entry:1772: inode #15: comm syz.2.5465: unable to update i_inline_off [ 638.765756][T19411] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.5465: corrupted in-inode xattr: overlapping e_value [ 638.855991][T19398] syz.2.5465 (19398) used greatest stack depth: 18032 bytes left [ 639.040177][T17992] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 639.221264][ T5301] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 639.449269][ T5301] usb 2-1: config 0 has no interfaces? [ 639.455049][ T5301] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 639.477061][ T5301] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 639.498716][ T5301] usb 2-1: config 0 descriptor?? [ 639.518976][T19433] loop0: detected capacity change from 0 to 2048 [ 639.618288][T19437] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 639.821823][ T25] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 639.841975][T19437] NILFS (loop0): vblocknr = 18 has abnormal lifetime: start cno (= 504403158265495554) > current cno (= 3) [ 639.893248][T19437] NILFS error (device loop0): nilfs_bmap_propagate: broken bmap (inode number=2) [ 639.936134][ T935] usb 2-1: USB disconnect, device number 34 [ 639.971431][T19437] Remounting filesystem read-only [ 639.988764][ T12] NILFS (loop0): discard dirty page: offset=0, ino=6 [ 639.995657][ T12] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 640.011251][ T12] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 640.030409][ T12] NILFS (loop0): discard dirty block: blocknr=37, size=1024 [ 640.042836][ T25] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 640.061220][ T12] NILFS (loop0): discard dirty block: blocknr=38, size=1024 [ 640.068615][ T25] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 640.087945][ T12] NILFS (loop0): discard dirty page: offset=0, ino=12 [ 640.096556][ T25] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 640.111287][ T12] NILFS (loop0): discard dirty block: blocknr=17, size=1024 [ 640.118679][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 640.135811][ T12] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 640.145158][ T25] usb 4-1: SerialNumber: syz [ 640.157536][T19445] loop2: detected capacity change from 0 to 164 [ 640.160225][ T12] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 640.182164][ T12] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 640.191951][T14893] NILFS (loop0): disposed unprocessed dirty file(s) when stopping log writer [ 640.200799][T14893] NILFS (loop0): discard dirty page: offset=0, ino=2 [ 640.207891][T14893] NILFS (loop0): discard dirty block: blocknr=18, size=1024 [ 640.228145][T14893] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 640.236922][T19424] loop4: detected capacity change from 0 to 32768 [ 640.245731][T19445] isofs: isofs_export_get_parent(): child directory not normalized! [ 640.268868][T14893] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 640.274406][T19424] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.5477 (19424) [ 640.308528][T14893] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 640.335852][T19424] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 640.338719][T14893] NILFS (loop0): discard dirty page: offset=0, ino=5 [ 640.367126][T19424] BTRFS info (device loop4): using sha256 (sha256-ni) checksum algorithm [ 640.389674][ T25] usb 4-1: 0:2 : does not exist [ 640.396456][T19424] BTRFS info (device loop4): using free-space-tree [ 640.403744][T14893] NILFS (loop0): discard dirty block: blocknr=41, size=1024 [ 640.416680][T14893] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 640.427519][T14893] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 640.436935][T14893] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 640.480929][ T25] usb 4-1: USB disconnect, device number 28 [ 640.986715][T19477] loop2: detected capacity change from 0 to 128 [ 641.007300][T18086] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 641.545459][T19496] dlm: no local IP address has been set [ 641.593841][T19496] dlm: cannot start dlm midcomms -107 [ 641.685094][ T29] audit: type=1326 audit(1725408511.758:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19497 comm="syz.2.5505" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd97957cef9 code=0x0 [ 641.754414][T19500] pimreg3: entered allmulticast mode [ 641.813298][T19499] pimreg3: left allmulticast mode [ 641.857215][T19505] loop4: detected capacity change from 0 to 256 [ 642.016547][T19505] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xadbf5ead, utbl_chksum : 0xe619d30d) [ 642.505794][T19522] loop4: detected capacity change from 0 to 256 [ 642.811499][T19532] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5517'. [ 643.798910][T19560] loop3: detected capacity change from 0 to 64 [ 643.906562][T19560] hfs: request for non-existent node 1280 in B*Tree [ 643.931667][T19560] hfs: request for non-existent node 1280 in B*Tree [ 644.001899][T19560] hfs: request for non-existent node 1280 in B*Tree [ 644.009174][T19560] hfs: request for non-existent node 1280 in B*Tree [ 644.409982][T19573] netlink: 'syz.3.5537': attribute type 12 has an invalid length. [ 644.430550][T19573] netlink: 'syz.3.5537': attribute type 29 has an invalid length. [ 644.459705][T19573] netlink: 'syz.3.5537': attribute type 2 has an invalid length. [ 644.482411][T19573] netlink: 128 bytes leftover after parsing attributes in process `syz.3.5537'. [ 644.532404][T19578] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5539'. [ 644.791470][T19588] loop5: detected capacity change from 0 to 1024 [ 644.811185][ T5301] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 644.871619][T19588] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 644.961474][T18577] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 645.017883][ T5301] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 645.049608][ T5301] usb 1-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 645.089408][ T5301] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 645.136619][ T5301] usb 1-1: config 0 descriptor?? [ 645.144963][T16312] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 645.165564][T18577] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 645.186440][T18577] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 645.204967][T18577] usb 3-1: Product: syz [ 645.225145][T18577] usb 3-1: Manufacturer: syz [ 645.228469][T19590] loop1: detected capacity change from 0 to 4096 [ 645.235167][T18577] usb 3-1: SerialNumber: syz [ 645.301391][T18577] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 645.317280][T19564] loop4: detected capacity change from 0 to 40427 [ 645.343118][ T25] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 645.357333][ T5301] usb 1-1: string descriptor 0 read error: -71 [ 645.376971][ T5301] usb 1-1: Found UVC 0.00 device (046d:08c1) [ 645.388117][T19564] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 645.396192][ T5301] usb 1-1: No valid video chain found. [ 645.411141][T19564] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 645.429293][T19602] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5549'. [ 645.439389][ T5301] usb 1-1: USB disconnect, device number 40 [ 645.444850][T19600] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 645.477536][T19564] F2FS-fs (loop4): Found nat_bits in checkpoint [ 645.684691][T19564] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 645.735012][T19564] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 646.100170][T19614] loop1: detected capacity change from 0 to 128 [ 646.205851][T19614] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 646.227237][T19612] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 646.288910][T19612] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 646.297271][T19614] ext4 filesystem being mounted at /173/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 646.300785][T19616] loop0: detected capacity change from 0 to 2048 [ 646.329230][ C0] vkms_vblank_simulate: vblank timer overrun [ 646.445459][T19616] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 646.501645][ T25] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 646.551496][ T25] ath9k_htc: Failed to initialize the device [ 646.563934][T16314] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 646.657413][ T25] usb 3-1: ath9k_htc: USB layer deinitialized [ 646.727427][T14893] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 646.773990][T18459] usb 3-1: USB disconnect, device number 22 [ 646.793160][T19607] loop3: detected capacity change from 0 to 32768 [ 646.829497][T19607] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.5551 (19607) [ 646.905033][T19607] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 646.939132][T19607] BTRFS info (device loop3): using sha256 (sha256-ni) checksum algorithm [ 646.990632][T19607] BTRFS info (device loop3): using free-space-tree [ 647.069529][T19630] sctp: [Deprecated]: syz.5.5559 (pid 19630) Use of int in maxseg socket option. [ 647.069529][T19630] Use struct sctp_assoc_value instead [ 647.431547][T19013] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 647.580658][T19659] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 647.602555][T19659] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 647.621217][T19659] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 649.556452][T19684] netlink: 'syz.0.5575': attribute type 5 has an invalid length. [ 649.560145][T19700] program syz.2.5583 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 649.568089][T19684] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5575'. [ 650.651970][T19738] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5601'. [ 650.731956][T19739] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5601'. [ 650.846137][T19743] VFS: could not find a valid V7 on nullb0. [ 651.540819][ T935] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 651.775510][ T935] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 651.807323][ T935] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 651.827865][ T935] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 651.873760][ T935] usb 6-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00 [ 651.903079][ T935] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 651.957594][ T935] usb 6-1: config 0 descriptor?? [ 652.064404][T19753] loop3: detected capacity change from 0 to 32768 [ 652.082648][ T25] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 652.096347][T19753] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.5607 (19753) [ 652.125215][T19753] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 652.168127][T19753] BTRFS info (device loop3): using sha256 (sha256-ni) checksum algorithm [ 652.189339][T19753] BTRFS info (device loop3): using free-space-tree [ 652.282359][ T25] usb 5-1: Using ep0 maxpacket: 16 [ 652.307266][ T25] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 652.327567][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 652.347468][ T25] usb 5-1: Product: syz [ 652.355847][ T25] usb 5-1: Manufacturer: syz [ 652.360538][ T25] usb 5-1: SerialNumber: syz [ 652.373990][ T25] usb 5-1: config 0 descriptor?? [ 652.426120][T19805] loop0: detected capacity change from 0 to 16 [ 652.451352][ T935] redragon 0003:0C45:760B.003B: hidraw0: USB HID v0.00 Device [HID 0c45:760b] on usb-dummy_hcd.5-1/input0 [ 652.500239][T19805] erofs: (device loop0): mounted with root inode @ nid 36. [ 652.549127][T19013] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 652.696638][ T935] usb 6-1: USB disconnect, device number 31 [ 652.785712][T19811] netlink: 9 bytes leftover after parsing attributes in process `syz.0.5629'. [ 652.807428][ T25] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 652.872515][ T25] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 652.935632][ T25] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 653.001235][ T25] usb 5-1: media controller created [ 653.089975][ T25] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 653.254181][ T25] zl10353_read_register: readreg error (reg=127, ret==0) [ 653.279321][ T25] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 653.331320][ T25] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 653.357717][T19820] loop0: detected capacity change from 0 to 128 [ 653.377047][ T25] usb 5-1: USB disconnect, device number 34 [ 653.531900][ T25] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 653.749287][T19831] loop2: detected capacity change from 0 to 256 [ 653.805596][T19831] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 653.970461][T19777] loop1: detected capacity change from 0 to 32768 [ 654.260947][T19840] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 654.681238][ T935] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 654.697571][T19854] loop0: detected capacity change from 0 to 64 [ 654.744193][T19853] netlink: 'syz.5.5648': attribute type 11 has an invalid length. [ 654.881321][ T935] usb 3-1: Using ep0 maxpacket: 8 [ 654.889183][ T935] usb 3-1: config 0 has an invalid interface number: 143 but max is 0 [ 654.900277][ T935] usb 3-1: config 0 has no interface number 0 [ 654.922275][ T935] usb 3-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 654.941268][ T935] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 654.971841][ T935] usb 3-1: config 0 descriptor?? [ 655.002066][T19860] netlink: 'syz.4.5652': attribute type 12 has an invalid length. [ 655.009917][T19860] netlink: 'syz.4.5652': attribute type 29 has an invalid length. [ 655.055677][T19860] netlink: 'syz.4.5652': attribute type 2 has an invalid length. [ 655.078380][T19860] netlink: 'syz.4.5652': attribute type 2 has an invalid length. [ 655.087112][T19865] loop5: detected capacity change from 0 to 64 [ 655.098738][T19860] netlink: 'syz.4.5652': attribute type 1 has an invalid length. [ 655.112295][ T935] viperboard 3-1:0.143: version 0.00 found at bus 003 address 023 [ 655.121260][T19860] netlink: 'syz.4.5652': attribute type 37 has an invalid length. [ 655.134048][T19865] hfs: request for non-existent node 131072 in B*Tree [ 655.149908][T19860] netlink: 'syz.4.5652': attribute type 2 has an invalid length. [ 655.159442][T19865] hfs: request for non-existent node 131072 in B*Tree [ 655.170641][T19860] bridge0: port 1(bridge_slave_0) entered disabled state [ 655.191276][ T935] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100 [ 655.191594][T19845] loop2: detected capacity change from 0 to 64 [ 655.220533][ T935] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 655.307061][ T935] usb 3-1: USB disconnect, device number 23 [ 655.916746][T19892] loop3: detected capacity change from 0 to 1024 [ 655.961661][T19894] netlink: 'syz.4.5667': attribute type 1 has an invalid length. [ 655.979658][T19894] netlink: 9116 bytes leftover after parsing attributes in process `syz.4.5667'. [ 656.005782][T19894] netlink: 'syz.4.5667': attribute type 1 has an invalid length. [ 656.017431][T19894] netlink: 209 bytes leftover after parsing attributes in process `syz.4.5667'. [ 656.303056][T19904] loop4: detected capacity change from 0 to 512 [ 656.819311][T19925] block nbd3: NBD_DISCONNECT [ 656.834846][T19922] netlink: 'syz.4.5680': attribute type 29 has an invalid length. [ 657.136357][T19936] loop3: detected capacity change from 0 to 2048 [ 657.223795][T19936] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 657.272311][T19936] ext4 filesystem being mounted at /35/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 657.489526][T19954] loop4: detected capacity change from 0 to 64 [ 657.657242][T19954] Trying to free block not in datazone [ 657.672325][T19954] Trying to free block not in datazone [ 658.417822][T19013] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 658.429383][T19949] loop2: detected capacity change from 0 to 32768 [ 658.450619][T19949] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.5691 (19949) [ 658.509164][T19949] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 658.574769][T19949] BTRFS info (device loop2): using sha256 (sha256-ni) checksum algorithm [ 658.605971][T19949] BTRFS info (device loop2): using free-space-tree [ 658.924515][T19962] loop5: detected capacity change from 0 to 32768 [ 658.974835][T19962] BTRFS: device /dev/loop5 (7:5) using temp-fsid 2e32bdec-4e38-4290-b7c2-bc51e44efdf0 [ 659.006864][T17992] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 659.041536][T19962] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.5699 (19962) [ 659.137432][T19962] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 659.202454][T19996] loop0: detected capacity change from 0 to 4096 [ 659.211661][T19962] BTRFS info (device loop5): using sha256 (sha256-ni) checksum algorithm [ 659.233131][T19996] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 659.251172][T19962] BTRFS info (device loop5): using free-space-tree [ 659.474638][T19996] ntfs3: loop0: Failed to initialize $Extend/$Reparse. [ 659.729136][T19947] loop1: detected capacity change from 0 to 32768 [ 659.844748][T14893] ntfs3: loop0: ino=1a, ntfs_sync_fs failed, -22. [ 660.049007][T16312] BTRFS info (device loop5): last unmount of filesystem 2e32bdec-4e38-4290-b7c2-bc51e44efdf0 [ 660.289548][T19992] loop4: detected capacity change from 0 to 32768 [ 660.436064][T20033] program syz.3.5718 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 660.510886][T19992] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 660.521608][T20033] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 660.623776][T20040] loop0: detected capacity change from 0 to 64 [ 660.883072][T19992] XFS (loop4): Ending clean mount [ 660.890943][T20040] hfs: request for non-existent node 1573 in B*Tree [ 660.978854][T20040] hfs: request for non-existent node 1573 in B*Tree [ 660.992486][T20044] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 661.166201][T18086] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 661.242402][ T4549] hfs: request for non-existent node 1573 in B*Tree [ 661.260923][ T4549] hfs: request for non-existent node 1573 in B*Tree [ 661.574285][T20022] loop2: detected capacity change from 0 to 40427 [ 661.626087][T20022] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 661.634612][T20022] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 661.664236][T20022] F2FS-fs (loop2): invalid crc value [ 661.730885][T20022] F2FS-fs (loop2): Found nat_bits in checkpoint [ 662.005425][T20022] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 662.021161][T20022] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 662.504958][T20075] bridge0: port 1(bridge_slave_0) entered disabled state [ 663.203088][T20105] loop4: detected capacity change from 0 to 64 [ 663.267123][T20107] program syz.0.5746 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 663.452649][T20113] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 663.460045][T20113] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 663.491452][T20113] vhci_hcd vhci_hcd.0: Device attached [ 663.557577][T20113] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(5) [ 663.564240][T20113] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 663.603827][T20124] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(8) [ 663.610473][T20124] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 663.670619][T20124] vhci_hcd vhci_hcd.0: Device attached [ 663.670682][T20113] vhci_hcd vhci_hcd.0: Device attached [ 663.703641][T18459] vhci_hcd: vhci_device speed not set [ 663.790982][T20129] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(10) [ 663.797649][T20129] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 663.818763][T18459] usb 17-1: new full-speed USB device number 2 using vhci_hcd [ 663.851764][T20129] vhci_hcd vhci_hcd.0: Device attached [ 663.871018][T20137] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5753'. [ 663.874739][T20132] vhci_hcd: connection closed [ 663.884814][T20122] vhci_hcd: connection closed [ 663.889858][T20114] vhci_hcd: connection reset by peer [ 663.902371][T20125] vhci_hcd: connection closed [ 663.918674][ T12] vhci_hcd: stop threads [ 663.941697][ T12] vhci_hcd: release socket [ 663.949595][ T12] vhci_hcd: disconnect device [ 663.985882][ T12] vhci_hcd: stop threads [ 664.017175][ T12] vhci_hcd: release socket [ 664.025024][ T12] vhci_hcd: disconnect device [ 664.050158][ T12] vhci_hcd: stop threads [ 664.061590][ T12] vhci_hcd: release socket [ 664.066933][ T12] vhci_hcd: disconnect device [ 664.097875][ T12] vhci_hcd: stop threads [ 664.107058][ T12] vhci_hcd: release socket [ 664.123818][ T12] vhci_hcd: disconnect device [ 664.692724][T20151] loop0: detected capacity change from 0 to 2048 [ 664.725013][T20155] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 664.808744][T20155] NILFS (loop0): vblocknr = 18 has abnormal lifetime: start cno (= 504403158265495554) > current cno (= 3) [ 664.828334][T20155] NILFS error (device loop0): nilfs_bmap_propagate: broken bmap (inode number=2) [ 664.891730][T20155] Remounting filesystem read-only [ 664.905978][ T4557] NILFS (loop0): discard dirty page: offset=4096, ino=6 [ 664.941409][ T4557] NILFS (loop0): discard dirty block: blocknr=39, size=1024 [ 664.963453][ T4557] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 664.983901][ T4557] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 665.005514][ T4557] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 665.027654][ T4557] NILFS (loop0): discard dirty page: offset=0, ino=2 [ 665.051666][ T4557] NILFS (loop0): discard dirty block: blocknr=18, size=1024 [ 665.104444][ T4557] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 665.113555][ T4557] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 665.123188][ T4557] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 665.132324][ T4557] NILFS (loop0): discard dirty page: offset=0, ino=5 [ 665.139220][ T4557] NILFS (loop0): discard dirty block: blocknr=41, size=1024 [ 665.146831][ T4557] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 665.156494][ T4557] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 665.212670][ T4557] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 665.257202][T20151] NILFS (loop0): mounting fs with errors [ 665.427490][T20109] loop1: detected capacity change from 0 to 32768 [ 665.442516][T20155] NILFS (loop0): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 665.461617][T20155] NILFS error (device loop0): nilfs_bmap_propagate: broken bmap (inode number=4) [ 665.482377][T20109] XFS: ikeep mount option is deprecated. [ 665.492193][T20155] Remounting filesystem read-only [ 665.501343][ T1827] NILFS (loop0): discard dirty page: offset=0, ino=5 [ 665.508099][ T1827] NILFS (loop0): discard dirty block: blocknr=41, size=1024 [ 665.518630][T20109] XFS: noikeep mount option is deprecated. [ 665.549921][ T1827] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 665.592484][ T1827] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 665.609091][ T1827] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 665.618755][T20153] netlink: 'syz.4.5763': attribute type 21 has an invalid length. [ 665.628983][T20153] netlink: 'syz.4.5763': attribute type 1 has an invalid length. [ 665.640334][T14893] NILFS (loop0): disposed unprocessed dirty file(s) when stopping log writer [ 665.657361][T14893] NILFS (loop0): discard dirty page: offset=0, ino=6 [ 665.709004][T14893] NILFS (loop0): discard dirty block: blocknr=35, size=1024 [ 665.767142][T14893] NILFS (loop0): discard dirty block: blocknr=36, size=1024 [ 665.791289][T14893] NILFS (loop0): discard dirty block: blocknr=37, size=1024 [ 665.798624][T14893] NILFS (loop0): discard dirty block: blocknr=38, size=1024 [ 665.846957][T20109] XFS (loop1): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 665.849859][T14893] NILFS (loop0): discard dirty page: offset=0, ino=4 [ 665.863612][T14893] NILFS (loop0): discard dirty block: blocknr=40, size=1024 [ 665.873406][T14893] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 665.885900][T14893] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 665.890704][T20173] loop2: detected capacity change from 0 to 64 [ 665.895819][T14893] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 665.896135][T14893] NILFS (loop0): discard dirty page: offset=0, ino=3 [ 665.918262][T14893] NILFS (loop0): discard dirty block: blocknr=42, size=1024 [ 665.932444][T14893] NILFS (loop0): discard dirty block: blocknr=43, size=1024 [ 665.939757][T14893] NILFS (loop0): discard dirty block: blocknr=44, size=1024 [ 665.971538][T14893] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 665.998953][T20173] hfs: request for non-existent node 1280 in B*Tree [ 666.047134][T20173] hfs: request for non-existent node 1280 in B*Tree [ 666.104462][T20183] hfs: request for non-existent node 1280 in B*Tree [ 666.121662][T20183] hfs: request for non-existent node 1280 in B*Tree [ 666.212408][T20109] XFS (loop1): Ending clean mount [ 666.296433][T20109] XFS (loop1): Quotacheck needed: Please wait. [ 666.405186][T20190] loop2: detected capacity change from 0 to 512 [ 666.464563][T20190] EXT4-fs error (device loop2): __ext4_iget:4985: inode #15: block 1803188595: comm syz.2.5774: invalid block [ 666.515938][T20190] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.5774: couldn't read orphan inode 15 (err -117) [ 666.533693][T20109] XFS (loop1): Quotacheck: Done. [ 666.566603][T20190] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 666.640798][T20190] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.5774: invalid indirect mapped block 234881024 (level 0) [ 666.775228][T16314] XFS (loop1): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 666.884059][T17992] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 667.372236][ T935] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 667.422406][T20217] loop3: detected capacity change from 0 to 128 [ 667.576477][ T935] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 667.586063][ T935] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 667.613401][ T935] usb 3-1: Product: syz [ 667.630604][ T935] usb 3-1: Manufacturer: syz [ 667.660167][ T935] usb 3-1: SerialNumber: syz [ 667.701627][ T935] usb 3-1: config 0 descriptor?? [ 668.092417][T20226] futex_wake_op: syz.3.5789 tries to shift op by -1; fix this program [ 668.136760][ T935] usb 3-1: Firmware: major: 152, minor: 239, hardware type: HULUSB (4) [ 668.340723][ T935] usb 3-1: failed to fetch extended address, random address set [ 668.435898][ T935] usb 3-1: USB disconnect, device number 24 [ 668.961743][T18459] vhci_hcd: vhci_device speed not set [ 669.578600][T20262] IPv6: NLM_F_CREATE should be specified when creating new route [ 669.681248][ T5301] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 669.912645][ T5301] usb 5-1: Using ep0 maxpacket: 8 [ 669.932800][ T5301] usb 5-1: config 0 has an invalid interface number: 143 but max is 0 [ 669.951120][ T5301] usb 5-1: config 0 has no interface number 0 [ 669.989842][ T5301] usb 5-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 670.022847][ T5301] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 670.044844][ T5301] usb 5-1: config 0 descriptor?? [ 670.190229][ T5301] viperboard 5-1:0.143: version 0.00 found at bus 005 address 035 [ 670.231597][ T5301] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100 [ 670.263452][T20254] loop4: detected capacity change from 0 to 64 [ 670.270979][ T5301] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 670.348795][ T5301] usb 5-1: USB disconnect, device number 35 [ 670.399820][T20270] loop0: detected capacity change from 0 to 8192 [ 670.482897][T20270] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 672.363044][T20281] loop3: detected capacity change from 0 to 32768 [ 672.381517][T20272] loop1: detected capacity change from 0 to 32768 [ 672.440834][T20272] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.5806 (20272) [ 672.478405][T20281] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 672.679616][T20272] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 672.718511][T20272] BTRFS info (device loop1): using sha256 (sha256-ni) checksum algorithm [ 672.782389][T20272] BTRFS info (device loop1): using free-space-tree [ 672.850147][T20281] XFS (loop3): Ending clean mount [ 672.918314][T20281] XFS (loop3): Quotacheck needed: Please wait. [ 673.148390][T20281] XFS (loop3): Quotacheck: Done. [ 673.320843][T20294] loop4: detected capacity change from 0 to 32768 [ 673.455972][T20294] XFS (loop4): DAX unsupported by block device. Turning off DAX. [ 673.519519][T20272] BTRFS error (device loop1): open_ctree failed [ 673.529027][T20294] XFS (loop4): Mounting V5 filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 in no-recovery mode. Filesystem will be inconsistent. [ 673.575488][T19013] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 673.650384][T20294] XFS (loop4): Quotacheck needed: Please wait. [ 673.731390][ T935] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 674.011628][T20294] XFS (loop4): Quotacheck: Done. [ 674.021434][ T935] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 674.098773][ T935] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 674.121811][ T935] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 674.151496][ T935] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 674.202485][ T935] usb 1-1: config 0 descriptor?? [ 674.204378][T20355] loop2: detected capacity change from 0 to 512 [ 674.282272][T20355] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 674.374817][T18086] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 674.403212][T20355] EXT4-fs (loop2): 1 orphan inode deleted [ 674.409058][T20355] EXT4-fs (loop2): 1 truncate cleaned up [ 674.484988][T20355] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 674.649152][T20355] EXT4-fs error (device loop2): empty_inline_dir:1833: inode #12: block 7: comm syz.2.5834: bad entry in directory: directory entry overrun - offset=4, inode=13, rec_len=784, size=60 fake=0 [ 674.726851][ T935] pyra 0003:1E7D:2CF6.003C: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.0-1/input0 [ 674.751570][T20355] EXT4-fs (loop2): Remounting filesystem read-only [ 674.768345][T20355] EXT4-fs warning (device loop2): empty_inline_dir:1840: bad inline directory (dir #12) - inode 13, rec_len 784, name_len 5inline size 60 [ 674.842304][T20363] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 674.848896][T20363] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 674.875803][T20366] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(6) [ 674.882489][T20366] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 674.894288][ T935] pyra 0003:1E7D:2CF6.003C: couldn't init struct pyra_device [ 674.930417][T17992] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 674.941277][T20366] vhci_hcd vhci_hcd.0: Device attached [ 674.941583][ T935] pyra 0003:1E7D:2CF6.003C: couldn't install mouse [ 674.966463][T20363] vhci_hcd vhci_hcd.0: Device attached [ 674.968007][ T935] pyra 0003:1E7D:2CF6.003C: probe with driver pyra failed with error -71 [ 675.008029][ T935] usb 1-1: USB disconnect, device number 41 [ 675.074571][T20369] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(5) [ 675.081234][T20369] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 675.141995][T20369] vhci_hcd vhci_hcd.0: Device attached [ 675.151181][ T5302] vhci_hcd: vhci_device speed not set [ 675.198305][T20363] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(9) [ 675.204878][T20363] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 675.230228][ T5302] usb 15-1: new full-speed USB device number 2 using vhci_hcd [ 675.298851][T20363] vhci_hcd vhci_hcd.0: Device attached [ 675.323913][T20376] vhci_hcd: connection closed [ 675.324054][T20370] vhci_hcd: connection closed [ 675.328883][T16686] vhci_hcd: stop threads [ 675.338808][T20364] vhci_hcd: connection reset by peer [ 675.344887][T20367] vhci_hcd: connection closed [ 675.345290][T16686] vhci_hcd: release socket [ 675.391646][T16686] vhci_hcd: disconnect device [ 675.396865][T16686] vhci_hcd: stop threads [ 675.411490][T16686] vhci_hcd: release socket [ 675.426879][T16686] vhci_hcd: disconnect device [ 675.435827][T16686] vhci_hcd: stop threads [ 675.450314][T16686] vhci_hcd: release socket [ 675.455071][T16686] vhci_hcd: disconnect device [ 675.470587][T16686] vhci_hcd: stop threads [ 675.481017][T16686] vhci_hcd: release socket [ 675.491394][T16686] vhci_hcd: disconnect device [ 675.705277][T20385] loop2: detected capacity change from 0 to 256 [ 676.072358][T20392] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5845'. [ 676.276667][T20397] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 676.283866][ T935] IPVS: starting estimator thread 0... [ 676.318929][T20389] ./file0: Can't open blockdev [ 676.373236][T20400] IPVS: using max 16 ests per chain, 38400 per kthread [ 676.454141][T20404] dvmrp1: entered allmulticast mode [ 676.510213][T20404] pimreg: entered allmulticast mode [ 676.551634][T20409] dvmrp1: left allmulticast mode [ 676.556722][T20409] pimreg: left allmulticast mode [ 676.643994][T20408] loop2: detected capacity change from 0 to 1024 [ 676.676444][T20408] EXT4-fs: Ignoring removed nobh option [ 676.689466][T20408] EXT4-fs: Ignoring removed orlov option [ 676.707705][T20408] EXT4-fs: Ignoring removed nomblk_io_submit option [ 676.801305][T18459] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 676.852972][T20408] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 676.932345][T20414] tipc: Started in network mode [ 676.956502][T20414] tipc: Node identity id-name-, cluster identity 4711 [ 676.986761][T18459] usb 5-1: config 0 interface 0 altsetting 144 endpoint 0x81 has invalid wMaxPacketSize 0 [ 676.993485][T20414] tipc: Enabling of bearer rejected, failed to enable media [ 676.997059][ T935] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 677.030329][T18459] usb 5-1: config 0 interface 0 has no altsetting 0 [ 677.047359][T18459] usb 5-1: New USB device found, idVendor=056a, idProduct=032b, bcdDevice= 0.00 [ 677.061933][T18459] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 677.079401][T18459] usb 5-1: config 0 descriptor?? [ 677.086907][T17992] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 677.253484][ T935] usb 4-1: config 0 has no interfaces? [ 677.259304][ T935] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 677.320874][ T935] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 677.360057][ T935] usb 4-1: config 0 descriptor?? [ 677.404789][T20425] loop1: detected capacity change from 0 to 128 [ 677.432239][T20422] loop0: detected capacity change from 0 to 512 [ 677.464430][T20422] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 677.485971][T20425] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 677.544707][T18459] wacom 0003:056A:032B.003D: unknown main item tag 0x0 [ 677.618199][T20422] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 677.622403][T20425] ext4 filesystem being mounted at /195/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 677.641911][T20422] ext4 filesystem being mounted at /437/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 677.653448][T18459] wacom 0003:056A:032B.003D: hidraw0: USB HID v0.00 Device [HID 056a:032b] on usb-dummy_hcd.4-1/input0 [ 677.756623][T20411] dvmrp0: entered allmulticast mode [ 677.809672][T18577] usb 5-1: USB disconnect, device number 36 [ 677.870538][ T58] usb 4-1: USB disconnect, device number 29 [ 677.947541][T14893] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 678.040870][T16314] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 678.582826][T20444] netlink: 'syz.4.5865': attribute type 2 has an invalid length. [ 678.868039][T20450] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5866'. [ 678.901839][T16686] dvmrp0 (unregistering): left allmulticast mode [ 679.266852][T20459] loop4: detected capacity change from 0 to 64 [ 679.558294][T20464] loop1: detected capacity change from 0 to 128 [ 679.594355][T20463] program syz.3.5872 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 679.673814][T20464] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 679.773540][T20438] loop2: detected capacity change from 0 to 32768 [ 679.813551][T20464] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 679.965244][T20469] loop3: detected capacity change from 0 to 1024 [ 680.052978][T20469] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 680.094508][ T5245] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 680.133097][ T5245] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 680.142100][ T5245] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 680.150486][ T5245] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 680.158531][ T5245] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 680.171249][ T5245] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 680.280709][T20469] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 680.320950][T20469] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 16384 with max blocks 17 with error 28 [ 680.400299][T20469] EXT4-fs (loop3): This should not happen!! Data will be lost [ 680.400299][T20469] [ 680.410443][ T5302] vhci_hcd: vhci_device speed not set [ 680.437248][T20479] netlink: 'syz.4.5877': attribute type 1 has an invalid length. [ 680.456729][T20469] EXT4-fs (loop3): Total free blocks count 0 [ 680.490765][T20469] EXT4-fs (loop3): Free/Dirty block details [ 680.529007][T20469] EXT4-fs (loop3): free_blocks=68451041280 [ 680.591430][T20469] EXT4-fs (loop3): dirty_blocks=32 [ 680.597022][T20469] EXT4-fs (loop3): Block reservation details [ 680.631320][ T5236] Bluetooth: hci0: unexpected Set CIG Parameters response data [ 680.661543][T20469] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 680.808520][T19013] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 680.894280][T20491] veth1_macvtap: left promiscuous mode [ 681.073746][T20499] tun0: tun_chr_ioctl cmd 1074025680 [ 681.194094][T20475] chnl_net:caif_netlink_parms(): no params data found [ 681.415563][T20513] loop4: detected capacity change from 0 to 8 [ 681.448194][T20513] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 681.472506][T20475] bridge0: port 1(bridge_slave_0) entered blocking state [ 681.492461][T20475] bridge0: port 1(bridge_slave_0) entered disabled state [ 681.517680][T20475] bridge_slave_0: entered allmulticast mode [ 681.534607][T20475] bridge_slave_0: entered promiscuous mode [ 681.552623][T20475] bridge0: port 2(bridge_slave_1) entered blocking state [ 681.563827][T20475] bridge0: port 2(bridge_slave_1) entered disabled state [ 681.573353][T20475] bridge_slave_1: entered allmulticast mode [ 681.588027][T20475] bridge_slave_1: entered promiscuous mode [ 681.814230][T20475] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 681.873423][T20475] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 682.113850][T20475] team0: Port device team_slave_0 added [ 682.127090][T20534] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5899'. [ 682.159253][T20534] netlink: 68 bytes leftover after parsing attributes in process `syz.3.5899'. [ 682.171211][T18459] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 682.185271][T20475] team0: Port device team_slave_1 added [ 682.241558][ T5236] Bluetooth: hci4: command tx timeout [ 682.425881][T20475] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 682.452825][T20475] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 682.518938][T20475] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 682.569574][T20475] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 682.608725][T20475] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 682.682533][T20475] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 682.765143][T20552] netlink: 'syz.0.5907': attribute type 7 has an invalid length. [ 682.803252][T18459] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 682.803983][T20552] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.5907'. [ 682.893512][T20552] netlink: 'syz.0.5907': attribute type 3 has an invalid length. [ 682.926084][T20475] hsr_slave_0: entered promiscuous mode [ 682.937440][T20552] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.5907'. [ 682.958259][T20475] hsr_slave_1: entered promiscuous mode [ 682.985146][T20475] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 683.003370][T20475] Cannot create hsr debugfs directory [ 683.555835][T20567] loop4: detected capacity change from 0 to 128 [ 683.673916][T20567] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 683.718072][T20571] loop0: detected capacity change from 0 to 512 [ 683.728139][T20567] ext4 filesystem being mounted at /126/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 683.759380][T20475] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 683.791994][T20571] EXT4-fs: Ignoring removed i_version option [ 683.822605][T20571] EXT4-fs (loop0): orphan cleanup on readonly fs [ 683.850871][T20571] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.5916: bad orphan inode 1 [ 683.865743][T20567] fscrypt (loop4, inode 12): Unsupported encryption flags (0x36) [ 683.874475][T20571] EXT4-fs (loop0): Remounting filesystem read-only [ 683.895981][T20571] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 683.974612][ T29] audit: type=1326 audit(1725408554.048:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20579 comm="syz.3.5921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f23b7cef9 code=0x7ffc0000 [ 684.037765][ T29] audit: type=1326 audit(1725408554.068:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20579 comm="syz.3.5921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f23b7cef9 code=0x7ffc0000 [ 684.086293][ T29] audit: type=1326 audit(1725408554.078:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20579 comm="syz.3.5921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3f23b7cef9 code=0x7ffc0000 [ 684.092360][T20571] EXT4-fs: Ignoring removed mblk_io_submit option [ 684.123136][T18086] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 684.141726][T20571] EXT4-fs: Ignoring removed nomblk_io_submit option [ 684.148495][T20571] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 684.212077][ T29] audit: type=1326 audit(1725408554.078:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20579 comm="syz.3.5921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f23b7cef9 code=0x7ffc0000 [ 684.289441][T20475] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 684.320507][ T29] audit: type=1326 audit(1725408554.078:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20579 comm="syz.3.5921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f23b7cef9 code=0x7ffc0000 [ 684.361203][ T5236] Bluetooth: hci4: command tx timeout [ 684.386485][ T29] audit: type=1326 audit(1725408554.078:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20579 comm="syz.3.5921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3f23b7cef9 code=0x7ffc0000 [ 684.452062][T20587] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 684.474284][T20591] loop1: detected capacity change from 0 to 16 [ 684.484175][ T29] audit: type=1326 audit(1725408554.078:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20579 comm="syz.3.5921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f23b7cef9 code=0x7ffc0000 [ 684.514873][T20591] erofs: (device loop1): mounted with root inode @ nid 36. [ 684.541332][ T29] audit: type=1326 audit(1725408554.088:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20579 comm="syz.3.5921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3f23b73ea7 code=0x7ffc0000 [ 684.601134][ T29] audit: type=1326 audit(1725408554.088:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20579 comm="syz.3.5921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3f23b18859 code=0x7ffc0000 [ 684.645080][ T5236] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 684.654793][ T5236] Bluetooth: hci0: Injecting HCI hardware error event [ 684.666356][ T5245] Bluetooth: hci0: hardware error 0x00 [ 684.685368][T20475] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 684.771973][ T29] audit: type=1326 audit(1725408554.088:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20579 comm="syz.3.5921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=12 compat=0 ip=0x7f3f23b7cef9 code=0x7ffc0000 [ 685.054424][T20600] loop1: detected capacity change from 0 to 16 [ 685.084242][T20600] erofs: (device loop1): mounted with root inode @ nid 36. [ 685.172481][T14893] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 685.356905][T20604] Attempt to restore checkpoint with obsolete wellknown handles [ 685.375031][ T1262] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.435349][T20475] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 686.213985][T16315] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 686.225386][T16315] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 686.233878][T16315] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 686.242874][T16315] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 686.253866][T16315] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 686.263656][T16315] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 686.444898][T16315] Bluetooth: hci4: command tx timeout [ 687.041698][ T5245] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 687.441684][T16315] Bluetooth: hci2: command 0x0406 tx timeout [ 687.953467][ T1827] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 688.341730][T16315] Bluetooth: hci5: command tx timeout [ 688.491920][T16315] Bluetooth: hci4: command tx timeout [ 689.141887][ T5245] Bluetooth: hci0: Opcode 0x206c failed: -110 [ 690.441601][T16315] Bluetooth: hci5: command tx timeout [ 691.241584][ T5245] Bluetooth: hci0: Opcode 0x2046 failed: -110 [ 692.491651][ T5245] Bluetooth: hci5: command tx timeout [ 693.044250][ T12] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 694.591520][ T5245] Bluetooth: hci5: command tx timeout [ 698.094255][ T12] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 703.945596][ T1058] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 709.692163][ T1827] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 712.241645][ T19] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 1-...D } 2655 jiffies s: 38793 root: 0x2/. [ 712.253677][ T19] rcu: blocking rcu_node structures (internal RCU debug): [ 712.260804][ T19] Sending NMI from CPU 0 to CPUs 1: [ 712.266060][ C1] NMI backtrace for cpu 1 [ 712.266075][ C1] CPU: 1 UID: 0 PID: 16112 Comm: syz.1.4202 Not tainted 6.11.0-rc6-syzkaller-00026-g88fac17500f4 #0 [ 712.266107][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 712.266121][ C1] RIP: 0010:__hrtimer_run_queues+0x3c8/0xd50 [ 712.266153][ C1] Code: 00 00 c6 02 00 80 e3 01 0f b6 db 31 ff 89 de e8 ae be 12 00 84 db 75 0a e8 a5 bb 12 00 e9 85 00 00 00 48 8b bc 24 98 00 00 00 <4c> 89 f6 e8 90 da 31 0a 84 c0 74 07 e8 87 bb 12 00 eb 6a 48 8b 9c [ 712.266173][ C1] RSP: 0018:ffffc90000a18d60 EFLAGS: 00000002 [ 712.266192][ C1] RAX: 0000000000010000 RBX: 0000000000000001 RCX: ffff88802ba5bc00 [ 712.266209][ C1] RDX: ffff88802ba5bc00 RSI: 0000000000000001 RDI: ffff8880b892cad0 [ 712.266226][ C1] RBP: ffffc90000a18ea8 R08: ffffffff8180d102 R09: 1ffffffff2030de5 [ 712.266244][ C1] R10: dffffc0000000000 R11: fffffbfff2030de6 R12: 1ffff1101712595b [ 712.266262][ C1] R13: dffffc0000000000 R14: ffff88807f05d340 R15: ffff8880b892c880 [ 712.266283][ C1] FS: 00007f429fa606c0(0000) GS:ffff8880b8900000(0000) knlGS:0000000000000000 [ 712.266304][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 712.266321][ C1] CR2: 00007f3f23cfc178 CR3: 0000000069b1c000 CR4: 0000000000350ef0 [ 712.266339][ C1] Call Trace: [ 712.266350][ C1] [ 712.266360][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 712.266391][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 712.266427][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 712.266457][ C1] ? nmi_handle+0x2a/0x5a0 [ 712.266493][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 712.266523][ C1] ? nmi_handle+0x151/0x5a0 [ 712.266545][ C1] ? nmi_handle+0x2a/0x5a0 [ 712.266569][ C1] ? __hrtimer_run_queues+0x3c8/0xd50 [ 712.266594][ C1] ? default_do_nmi+0x63/0x160 [ 712.266626][ C1] ? exc_nmi+0x123/0x1f0 [ 712.266656][ C1] ? end_repeat_nmi+0xf/0x53 [ 712.266692][ C1] ? __hrtimer_run_queues+0x3b2/0xd50 [ 712.266720][ C1] ? __hrtimer_run_queues+0x3c8/0xd50 [ 712.266747][ C1] ? __hrtimer_run_queues+0x3c8/0xd50 [ 712.266774][ C1] ? __hrtimer_run_queues+0x3c8/0xd50 [ 712.266800][ C1] [ 712.266808][ C1] [ 712.266817][ C1] ? ktime_get_update_offsets_now+0x3c/0x250 [ 712.266865][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 712.266891][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 712.266924][ C1] ? ktime_get_update_offsets_now+0x22d/0x250 [ 712.266963][ C1] hrtimer_interrupt+0x396/0x990 [ 712.267007][ C1] __sysvec_apic_timer_interrupt+0x112/0x3f0 [ 712.267047][ C1] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 712.267088][ C1] [ 712.267097][ C1] [ 712.267107][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 712.267140][ C1] RIP: 0010:lock_is_held_type+0x13b/0x190 [ 712.267163][ C1] Code: 75 44 48 c7 04 24 00 00 00 00 9c 8f 04 24 f7 04 24 00 02 00 00 75 4c 41 f7 c4 00 02 00 00 74 01 fb 65 48 8b 04 25 28 00 00 00 <48> 3b 44 24 08 75 42 89 d8 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f [ 712.267183][ C1] RSP: 0018:ffffc9000490faf8 EFLAGS: 00000206 [ 712.267203][ C1] RAX: af47cd120c5e9500 RBX: 0000000000000000 RCX: ffff88802ba5bc00 [ 712.267222][ C1] RDX: 0000000000000000 RSI: ffffffff8c0ae6e0 RDI: ffffffff8c608d40 [ 712.267240][ C1] RBP: ffffc9000490fc50 R08: ffff8880578a82d7 R09: 1ffff1100af1505a [ 712.267259][ C1] R10: dffffc0000000000 R11: ffffed100af1505b R12: 0000000000000246 [ 712.267277][ C1] R13: ffff88802ba5bc00 R14: 00000000ffffffff R15: ffffffff8e9382a0 [ 712.267316][ C1] __might_resched+0xf4/0x780 [ 712.267350][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 712.267390][ C1] ? __pfx___might_resched+0x10/0x10 [ 712.267425][ C1] ? __pfx___io_cqring_overflow_flush+0x10/0x10 [ 712.267464][ C1] ? __se_sys_io_uring_enter+0x1b7a/0x2670 [ 712.267501][ C1] __se_sys_io_uring_enter+0x1b8d/0x2670 [ 712.267553][ C1] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 712.267583][ C1] ? __pfx_io_wake_function+0x10/0x10 [ 712.267628][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 712.267663][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 712.267701][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 712.267738][ C1] ? do_syscall_64+0x100/0x230 [ 712.267766][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 712.267801][ C1] ? __x64_sys_io_uring_enter+0x21/0xf0 [ 712.267833][ C1] do_syscall_64+0xf3/0x230 [ 712.267861][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 712.267893][ C1] RIP: 0033:0x7f429eb7cef9 [ 712.267913][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 712.267934][ C1] RSP: 002b:00007f429fa60038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 712.267958][ C1] RAX: ffffffffffffffda RBX: 00007f429ed35f80 RCX: 00007f429eb7cef9 [ 712.267977][ C1] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000003 [ 712.267993][ C1] RBP: 00007f429ebef01e R08: 0000000000000000 R09: 0000000000000000 [ 712.268009][ C1] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000000 [ 712.268025][ C1] R13: 0000000000000000 R14: 00007f429ed35f80 R15: 00007ffe13d387c8 [ 712.268057][ C1] [ 714.822752][ T12] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 719.922992][ T1058] IPVS: ovf: UDP 127.0.0.1:0 - no destination available