last executing test programs: 2m45.281096912s ago: executing program 2 (id=713): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000000)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f0000000240)={r3}) 2m44.859187698s ago: executing program 2 (id=716): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9", 0x1}], 0x1, 0x0, 0x0, 0x91}}], 0x1, 0x20008000) write(r0, 0x0, 0x0) 2m43.590003827s ago: executing program 2 (id=719): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000540)='./file1\x00', 0x3010018, &(0x7f0000000040), 0x5, 0x4c3, &(0x7f0000000ac0)="$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") r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) fallocate(r0, 0x0, 0x1, 0x2000402) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000000)={0x17c04, 0xffffffffffffffff, 0x6, 0x7fe, 0x8}) lseek(r0, 0x3ff, 0x3) 2m42.282743358s ago: executing program 2 (id=722): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000740)={0x2c, &(0x7f0000000980)=ANY=[@ANYBLOB="00000001000000090090"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0xe, 0x2000) ioctl$EVIOCGKEYCODE(r1, 0x80084504, &(0x7f0000000200)=""/182) 2m39.504220346s ago: executing program 2 (id=732): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000000)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e1406020000", 0x1e}], 0x1}, 0x0) r1 = socket$kcm(0x23, 0x5, 0x0) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r2, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008081}, 0x810) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="61cc23d4941575be", 0x8}], 0x1, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0xc2900, 0x0) sendfile(r4, r5, 0x0, 0x201f00) listen(r1, 0x800) accept(r1, &(0x7f0000000280)=@nfc, &(0x7f00000000c0)=0xfffffffffffffcea) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000200)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a7ef595105ea1698fa51f60a64c9f408000000e786a6d0bdbdc3d44bd70011b6c0504bb9189d9193e9bd00000000000000", 0x57}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x240040c4) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r2) sendmsg$IEEE802154_ASSOCIATE_REQ(r2, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x240000c4}, 0x8880) connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) setsockopt$PNPIPE_ENCAP(0xffffffffffffffff, 0x113, 0x1, 0x0, 0x0) 2m37.878455678s ago: executing program 2 (id=737): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) shutdown(r0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(r0, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) 2m22.469300006s ago: executing program 32 (id=737): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) shutdown(r0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(r0, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) 9.93822594s ago: executing program 4 (id=1166): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0xf7fa, 0x3180, 0x8000, 0x15e}, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r1, 0x400452c8, &(0x7f0000000100)) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c9, &(0x7f0000000100)) 9.84306164s ago: executing program 4 (id=1167): r0 = openat$sysfs(0xffffff9c, &(0x7f0000000100)='/sys/kernel/notes', 0x0, 0x15) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xe) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x1) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000100)=0x3) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200), 0xa2442, 0x0) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x50, 0x12, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, {0x0, 0x4e22, [0xfffffffc, 0x0, 0xcd7e], [], 0x0, [0x1]}, 0x0, 0x2000}, [@INET_DIAG_REQ_BYTECODE={0x4, 0x3}]}, 0x50}}, 0x20000080) r4 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) write$dsp(r2, &(0x7f0000000280)='\x00', 0x1) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r4, 0xc0884113, 0x0) ppoll(&(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) r5 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$EVIOCGLED(0xffffffffffffffff, 0x40284504, &(0x7f0000000000)=""/56) ioctl$I2C_FUNCS(r5, 0x705, &(0x7f0000000280)=0x3) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ff2000/0x4000)=nil, 0x4000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read(r6, &(0x7f0000000080)=""/1, 0x1) r7 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read(r7, &(0x7f0000000080)=""/1, 0x1) r8 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r8, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r8, 0x1, 0x0) r10 = openat$cgroup_subtree(r9, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r10, &(0x7f0000000300)=ANY=[@ANYBLOB='-cp'], 0x5) close(r2) preadv(r0, 0x0, 0x0, 0x0, 0x0) 9.282191157s ago: executing program 5 (id=1170): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x40000, 0x5) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x0, 0x76) close(0x3) open_by_handle_at(r1, &(0x7f0000000000)=@ceph_nfs_confh={0x10, 0x2, {0xf}}, 0x0) pread64(r0, &(0x7f0000000040)=""/152, 0x98, 0x7) 9.205824935s ago: executing program 5 (id=1171): signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x80000) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x7f83, 0x7}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) socket$unix(0x1, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) socket$inet6(0xa, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x4004) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, 0x0, 0x0) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) r6 = socket$nl_route(0x10, 0x3, 0x0) fremovexattr(r4, &(0x7f0000000140)=ANY=[@ANYBLOB="c7cdf3b47d1d2c8b"]) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r7 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, 0x0) 7.07717641s ago: executing program 4 (id=1174): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xc}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newtclass={0x24, 0x28, 0x721, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x4}, {0x7}, {0xfff1, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4004) 6.917945991s ago: executing program 1 (id=1175): bpf$MAP_CREATE(0x0, &(0x7f0000001140)=ANY=[], 0x50) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, 0x0, 0x10) r3 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x800, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x7}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000940)=@newsa={0x140, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x717, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {0xfe, 0x1000000000000192, 0x8000000009ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc, 0x4}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3f9}, 0x7e, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0x140}}, 0x844) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001380)=ANY=[], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) fsmount(r3, 0x1, 0x80) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000001c00), 0x12) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = dup(r7) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20}, {0x0, 0x0, 0x5}, {0x2, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) write$UHID_INPUT(r8, &(0x7f0000000080)={0x18, {"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", 0x5bb1f126059684ef}}, 0x1006) 6.917710212s ago: executing program 0 (id=1176): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000240)={[{@usrquota}, {@dioread_nolock}]}, 0xff, 0x25e, &(0x7f0000000e80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x45) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2141, 0x59) pwrite64(r1, &(0x7f00000001c0)='S', 0x1, 0x9690) write$UHID_INPUT(r0, &(0x7f0000001140)={0x8, {"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", 0x1000}}, 0x1006) 6.461562613s ago: executing program 4 (id=1178): r0 = socket(0x21, 0x2, 0xa) r1 = io_uring_setup(0x177e, &(0x7f0000000140)={0x0, 0xfffffffe, 0x0, 0x0, 0x2b4}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000009968810524711004f320102030109021b0001000000000904000001ff01320009050d0353"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) close_range(r0, r1, 0x0) 5.625608105s ago: executing program 1 (id=1179): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000002c0)={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x25}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x540000, r1}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000800)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x6, 0x0, 0x100, 0x6, 0x881c0005, r1}) 5.294460141s ago: executing program 5 (id=1181): openat$null(0xffffffffffffff9c, 0x0, 0x10444, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a40)={0x24, r1, 0x5, 0x0, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x24}}, 0x0) 5.036410131s ago: executing program 6 (id=1182): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8410, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000280)="$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") r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x1a0) write$FUSE_LSEEK(r0, &(0x7f0000002cc0)={0x18, 0x0, 0x0, {0x4}}, 0x18) ftruncate(0xffffffffffffffff, 0x6000000) fallocate(r0, 0x10, 0x5, 0x4) 4.982853578s ago: executing program 0 (id=1183): socket$kcm(0x2, 0xa, 0x2) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @private=0xa010101}, 0x10) 4.925296301s ago: executing program 1 (id=1184): r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r1 = socket$qrtr(0x2a, 0x2, 0x0) read$qrtrtun(r0, 0x0, 0x500) connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0xffffffff, 0xfffffffe}, 0xc) write$binfmt_script(r1, 0x0, 0x0) 4.882706181s ago: executing program 3 (id=1185): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x7fff) sendto$inet6(r0, 0x0, 0x0, 0x20008045, &(0x7f00000001c0)={0xa, 0x2, 0x1000, @empty}, 0x1c) shutdown(r0, 0x1) 4.87506984s ago: executing program 5 (id=1186): syz_io_uring_setup(0x1dc7, &(0x7f0000000140)={0x0, 0xd5a8, 0x2, 0x1, 0x382}, 0x0, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0x40025b0c, &(0x7f0000000140)) 4.53226579s ago: executing program 0 (id=1187): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x2a040, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x10, 0x572, 0x8000, 0x9, "ff000d00009a468e0cd912098d00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r1, 0x540a, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000200)={0x1, 0x81, 0x8, 0xb4, 0x1c, "6c06002004dc17a8"}) 4.53199051s ago: executing program 3 (id=1188): syz_mount_image$exfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x20440a, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x1, 0x1527, &(0x7f0000002780)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x2c42, 0x0) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000080)={0x2000, 0x8000}) 4.419813318s ago: executing program 1 (id=1189): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x2048c5, &(0x7f0000002880)={[{@utf8no}, {@shortname_winnt}, {@numtail}, {@numtail}, {@rodir}, {@rodir}, {@shortname_lower}, {@fat=@check_strict}, {@uni_xlate}, {@fat=@usefree}, {@rodir}, {@utf8no}, {@utf8}]}, 0x0, 0x2ad, &(0x7f0000000580)="$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") mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x11480, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) 4.39356362s ago: executing program 6 (id=1190): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c40)={0x48, r1, 0x5, 0x4, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x400, 0x3, 0x4, 0x0, {0x8, 0x8, 0x0, 0x8, 0x0, 0x1, 0x0, 0x1}, 0x1, 0x200007, 0x4}}]}, 0x48}}, 0x0) 4.178381866s ago: executing program 0 (id=1191): bpf$MAP_CREATE(0x0, &(0x7f0000001140)=ANY=[], 0x50) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, 0x0, 0x10) r3 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x800, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x7}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000940)=@newsa={0x140, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x717, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {0xfe, 0x1000000000000192, 0x8000000009ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc, 0x4}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3f9}, 0x7e, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0x140}}, 0x844) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001380)=ANY=[], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) fsmount(r3, 0x1, 0x80) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000001c00), 0x12) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = dup(r7) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20}, {0x0, 0x0, 0x5}, {0x2, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) write$UHID_INPUT(r8, &(0x7f0000000080)={0x18, {"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", 0x5bb1f126059684ef}}, 0x1006) 3.994301326s ago: executing program 3 (id=1192): r0 = socket$rds(0x15, 0x5, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r1, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) 3.89095718s ago: executing program 1 (id=1193): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x15) r1 = openat$6lowpan_control(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000100), 0x218888, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) 2.859795602s ago: executing program 0 (id=1194): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000000)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e1406020000", 0x1e}], 0x1}, 0x0) r1 = socket$kcm(0x23, 0x5, 0x0) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r2, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008081}, 0x810) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="61cc23d4941575be", 0x8}], 0x1, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r5 = openat$nullb(0xffffffffffffff9c, 0x0, 0xc2900, 0x0) sendfile(r4, r5, 0x0, 0x201f00) listen(r1, 0x800) accept(r1, &(0x7f0000000280)=@nfc, &(0x7f00000000c0)=0xfffffffffffffcea) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000200)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a7ef595105ea1698fa51f60a64c9f408000000e786a6d0bdbdc3d44bd70011b6c0504bb9189d9193e9bd00"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x240040c4) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r2) sendmsg$IEEE802154_ASSOCIATE_REQ(r2, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x240000c4}, 0x8880) connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) setsockopt$PNPIPE_ENCAP(0xffffffffffffffff, 0x113, 0x1, 0x0, 0x0) 2.63373499s ago: executing program 6 (id=1195): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081084e81f782db44b904021d080006067c09e8fe55a10a0015400800142603600e120800160000001001a8001600a400014003", 0x39}], 0x1, 0x0, 0x0, 0x6000}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe551a250015000600149b0000001208000313eba96240a8002b", 0x33}], 0x1}, 0x4180) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33) 2.488949787s ago: executing program 5 (id=1196): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x1a42028, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) mkdir(&(0x7f0000000000)='./file1\x00', 0xe8) removexattr(&(0x7f00000002c0)='./file0/file1\x00', &(0x7f0000000300)=@known='system.posix_acl_access\x00') 2.366305191s ago: executing program 3 (id=1197): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0xfffffffc, 0xffdffff8, 0xffffffff, 0x8, "ff000000000000000000000000000200"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000200)={0xfffe, 0x81, 0x8, 0xaf, 0xb, "f3fffffeffffff38"}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000001c0)=0xa) 2.09138784s ago: executing program 6 (id=1198): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42792000) setresuid(0x0, 0xee00, 0x0) r0 = io_uring_setup(0xaae, &(0x7f0000000380)={0x0, 0xbfffeffb, 0x800, 0x7, 0x1e4}) setrlimit(0x40000000000008, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x2300000000000000, &(0x7f0000000580)=[{&(0x7f0000000340)=""/4, 0x4}], 0x1) 1.938423413s ago: executing program 1 (id=1199): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x1, 0x571, &(0x7f0000000780)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000200)='./file1\x00', 0xc008, 0x0, 0x1, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000500), &(0x7f0000000480)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x804444, 0x0, 0xfe, 0x0, &(0x7f0000000480)) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0xc41, 0x20) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xa842, 0x107) 1.936076865s ago: executing program 4 (id=1200): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)={0x2c, r1, 0x1, 0x70bd29, 0xffffffbe, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x9000000}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x48080}, 0x20004056) 1.774520036s ago: executing program 3 (id=1201): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x11e) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000200), 0x2, 0x0) rmdir(&(0x7f00000001c0)='./cgroup/../file0\x00') sendfile(r1, r1, &(0x7f0000000100)=0x9fdf, 0x8) 1.347690053s ago: executing program 33 (id=1199): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x1, 0x571, &(0x7f0000000780)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000200)='./file1\x00', 0xc008, 0x0, 0x1, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000500), &(0x7f0000000480)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x804444, 0x0, 0xfe, 0x0, &(0x7f0000000480)) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0xc41, 0x20) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xa842, 0x107) 1.330592987s ago: executing program 0 (id=1203): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000023c0), 0x20180, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000002400)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x1}}, './file0\x00'}) 1.327940113s ago: executing program 6 (id=1204): setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2b, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x101002) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, 0x0, 0x0) listen(r4, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r6 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r7 = accept(r3, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) recvfrom(r5, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) 1.327543375s ago: executing program 3 (id=1205): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000180), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=ANY=[@ANYBLOB="ff7f0000", @ANYRES16=r2, @ANYBLOB="010028bd700001dcdf250100000008000100", @ANYRES32=r3, @ANYBLOB="400002803c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32, @ANYBLOB], 0x5c}, 0x1, 0x400000000000000, 0x0, 0x44001}, 0x40810) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) getgid() sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prlimit64(r0, 0xc, &(0x7f0000000040)={0x80000000, 0xffffffffffff321f}, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x2c) setuid(0xee00) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f0000000600)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000000100), 0x12) r8 = socket$pppl2tp(0x18, 0x1, 0x1) r9 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r8, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r9, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r10) sendmsg$L2TP_CMD_TUNNEL_GET(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r11, 0x325, 0x400, 0x0, {0x8}}, 0x14}}, 0x4800) 1.327392313s ago: executing program 5 (id=1206): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000a00)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="201004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000000180)=ANY=[@ANYBLOB="40010400000080df"], 0x0, 0x0}) 1.327024436s ago: executing program 4 (id=1207): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000001880)="5c00000016006bab9a3fe3d46e17aa0a046b876c050048007ea60864160af36504bb4a43eee80fd1716dbbbc001a0038001d001931a0e69ce517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bba1", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4000000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) recvmsg$kcm(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x40012140) 0s ago: executing program 6 (id=1208): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000100)={@local}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r0, 0x7af, &(0x7f0000000140)={@hyper, 0x6}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r0, 0x7b1, &(0x7f0000002380)={0x0, 0x1, 0x0, 0x6}) kernel console output (not intermixed with test programs): ck_only: 0 [ 331.817115][ T8098] F2FS-fs (loop4): Mounted with checkpoint version = 753bd00b [ 332.235020][ T8111] Bluetooth: MGMT ver 1.23 [ 332.518340][ T8119] netlink: 64 bytes leftover after parsing attributes in process `syz.2.701'. [ 333.694139][ T8117] loop5: detected capacity change from 0 to 2048 [ 333.893737][ T8117] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 334.145053][ T31] audit: type=1800 audit(1780292335.107:6): pid=8117 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.702" name="file1" dev="loop5" ino=1415 res=0 errno=0 [ 334.449634][ T8121] loop0: detected capacity change from 0 to 131072 [ 334.469007][ T8121] F2FS-fs (loop0): invalid crc value [ 334.617495][ T8121] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 334.630871][ T8121] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 334.808888][ T31] audit: type=1800 audit(1780292335.777:7): pid=8121 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.706" name="file1" dev="loop0" ino=7 res=0 errno=0 [ 334.947826][ T31] audit: type=1800 audit(1780292335.777:8): pid=8121 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.706" name="file1" dev="loop0" ino=7 res=0 errno=0 [ 335.494564][ T8140] netlink: 64 bytes leftover after parsing attributes in process `syz.3.710'. [ 336.834105][ T5637] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 337.174272][ T5637] usb 4-1: Using ep0 maxpacket: 16 [ 337.237013][ T5637] usb 4-1: config 0 interface 0 altsetting 253 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 337.274631][ T5637] usb 4-1: config 0 interface 0 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 337.334597][ T5637] usb 4-1: config 0 interface 0 has no altsetting 0 [ 337.371204][ T5637] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 337.408483][ T5637] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.464389][ T5637] usb 4-1: config 0 descriptor?? [ 338.427126][ T5637] kovaplus 0003:1E7D:2D50.000F: unknown main item tag 0x0 [ 338.463008][ T5637] kovaplus 0003:1E7D:2D50.000F: unknown main item tag 0x0 [ 338.527993][ T5637] kovaplus 0003:1E7D:2D50.000F: unknown main item tag 0x0 [ 338.560262][ T8167] loop2: detected capacity change from 0 to 512 [ 338.575921][ T5637] kovaplus 0003:1E7D:2D50.000F: unknown main item tag 0x0 [ 338.615591][ T5637] kovaplus 0003:1E7D:2D50.000F: unknown main item tag 0x0 [ 338.652235][ T8167] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 338.696783][ T5637] kovaplus 0003:1E7D:2D50.000F: hidraw0: USB HID vff.fe Device [HID 1e7d:2d50] on usb-dummy_hcd.3-1/input0 [ 338.796280][ T8166] loop1: detected capacity change from 0 to 4096 [ 338.839876][ T5637] usb 4-1: USB disconnect, device number 11 [ 339.121786][ T5629] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 339.140781][ T8170] fido_id[8170]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 339.410831][ T8175] loop5: detected capacity change from 0 to 4096 [ 339.601727][ T8184] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 339.743697][ T6365] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 339.756224][ T8175] syz.5.721: attempt to access beyond end of device [ 339.756224][ T8175] loop5: rw=0, sector=4706, nr_sectors = 2 limit=4096 [ 339.847181][ T8175] syz.5.721: attempt to access beyond end of device [ 339.847181][ T8175] loop5: rw=0, sector=18446744073709551608, nr_sectors = 2 limit=4096 [ 339.925672][ T8175] NILFS (loop5): nilfs_ioctl_move_inode_block: invalid virtual block address (data): ino=17179869194, cno=30064775167, offset=4294967295, blocknr=0, vblocknr=18446744069414584320 [ 339.935385][ T6365] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 340.009598][ T8175] NILFS (loop5): error -2 preparing GC: cannot read source blocks [ 340.028097][ T6365] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 340.075972][ T6365] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 340.119679][ T6365] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.170614][ T6365] usb 3-1: config 0 descriptor?? [ 340.314081][ T8190] loop4: detected capacity change from 0 to 2048 [ 340.398921][ T8190] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 340.494058][ T8195] loop5: detected capacity change from 0 to 128 [ 340.557374][ T8195] EXT4-fs (loop5): Test dummy encryption mode enabled [ 340.639619][ T8195] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 340.752119][ T8195] ext4 filesystem being mounted at /109/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 341.128590][ T8203] loop0: detected capacity change from 0 to 32768 [ 341.156042][ T8203] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 341.164487][ T8203] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 341.940624][ T8195] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 341.971978][ T6365] cm6533_jd 0003:0D8C:0022.0010: unknown main item tag 0x0 [ 341.988036][ T6365] cm6533_jd 0003:0D8C:0022.0010: unknown main item tag 0x0 [ 342.004756][ T6365] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0D8C:0022.0010/input/input9 [ 342.102247][ T8195] fscrypt: AES-256-XTS using implementation "xts-aes-vaes-avx2" [ 342.153374][ T8203] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 1ms [ 342.171610][ T5614] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 342.206377][ T5614] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 342.249276][ T6365] cm6533_jd 0003:0D8C:0022.0010: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.2-1/input0 [ 343.192028][ T6365] usb 3-1: USB disconnect, device number 11 [ 343.408568][ T8226] loop3: detected capacity change from 0 to 1024 [ 343.445688][ T8227] use of bytesused == 0 is deprecated and will be removed in the future, [ 343.504228][ T8227] use the actual size instead. [ 343.587702][ T5614] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 1381ms [ 343.613788][ T5614] gfs2: fsid=syz:syz.0: jid=0: Done [ 343.616132][ T5634] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 343.622433][ T8203] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 344.075234][ T8231] fido_id[8231]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 345.463266][ T8246] loop5: detected capacity change from 0 to 512 [ 345.493646][ T8246] EXT4-fs (loop5): 1 truncate cleaned up [ 345.516516][ T8246] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 346.401861][ T31] audit: type=1800 audit(1780292347.367:9): pid=8246 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.742" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 346.831608][ T8258] loop1: detected capacity change from 0 to 1024 [ 346.850026][ T8258] EXT4-fs: Ignoring removed bh option [ 346.995079][ T5634] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 347.013279][ T8258] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 348.817027][ T5630] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 349.042634][ T8284] netlink: 'syz.4.747': attribute type 2 has an invalid length. [ 349.713650][ T8285] loop3: detected capacity change from 0 to 128 [ 349.781270][ T8285] EXT4-fs (loop3): Test dummy encryption mode enabled [ 349.894693][ T8285] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 349.988749][ T8285] ext4 filesystem being mounted at /121/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 350.077718][ T8293] loop0: detected capacity change from 0 to 1024 [ 350.162024][ T8293] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 350.229520][ T8301] loop1: detected capacity change from 0 to 256 [ 350.239327][ T8301] exfat: Deprecated parameter 'utf8' [ 350.245230][ T8301] exfat: Deprecated parameter 'namecase' [ 350.251366][ T8301] exfat: Deprecated parameter 'namecase' [ 350.262554][ T8301] exfat: Deprecated parameter 'namecase' [ 350.280287][ T8301] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 350.295830][ T8293] ext4 filesystem being mounted at /131/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 350.459100][ T8293] EXT4-fs error (device loop0): ext4_map_blocks:833: inode #15: comm syz.0.751: lblock 0 mapped to illegal pblock 0 (length 6) [ 350.495561][ T5632] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 350.566432][ T8293] EXT4-fs error (device loop0): ext4_map_blocks:833: inode #15: block 3: comm syz.0.751: lblock 3 mapped to illegal pblock 3 (length 3) [ 350.603751][ T5614] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 350.650773][ T8293] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 350.688886][ T8293] EXT4-fs (loop0): This should not happen!! Data will be lost [ 350.688886][ T8293] [ 350.777882][ T5614] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 350.857456][ T5614] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 351.018233][ T5614] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 351.032381][ T29] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 351.199956][ T5614] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.235372][ T8310] loop3: detected capacity change from 0 to 2048 [ 351.635600][ T5614] usb 5-1: config 0 descriptor?? [ 351.731111][ T29] usb 6-1: Using ep0 maxpacket: 8 [ 351.764027][ T29] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 351.775462][ T29] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 351.787757][ T29] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 351.809229][ T29] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 351.832186][ T29] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 351.856482][ T29] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.859440][ T8310] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 351.892271][ T12] EXT4-fs error (device loop0): ext4_map_blocks:833: inode #15: block 8: comm kworker/u8:0: lblock 8 mapped to illegal pblock 8 (length 8) [ 351.913901][ T8310] ext4 filesystem being mounted at /122/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 351.936307][ T12] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 351.952855][ T12] EXT4-fs (loop0): This should not happen!! Data will be lost [ 351.952855][ T12] [ 351.986060][ T5631] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 352.002477][ T5631] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 352.193708][ T29] usb 6-1: GET_CAPABILITIES returned 0 [ 352.233080][ T29] usbtmc 6-1:16.0: can't read capabilities [ 352.276001][ T5632] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 352.319279][ T5614] cp2112 0003:10C4:EA90.0011: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 352.662375][ T8303] cp2112 0003:10C4:EA90.0011: pid 8303 passed too short report [ 353.037888][ T5614] cp2112 0003:10C4:EA90.0011: error requesting version [ 353.389897][ T5786] usb 6-1: USB disconnect, device number 12 [ 353.430946][ T5614] cp2112 0003:10C4:EA90.0011: probe with driver cp2112 failed with error -71 [ 353.522168][ T5614] usb 5-1: USB disconnect, device number 17 [ 353.557555][ T8328] tipc: Started in network mode [ 353.584717][ T8328] tipc: Node identity ac1414aa, cluster identity 4711 [ 353.636846][ T8328] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 353.666066][ T8328] tipc: Enabled bearer , priority 10 [ 353.685367][ T29] IPVS: starting estimator thread 0... [ 353.700845][ T8329] loop3: detected capacity change from 0 to 128 [ 353.772981][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 353.785955][ T8329] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 353.804365][ T8330] IPVS: using max 22 ests per chain, 52800 per kthread [ 353.865367][ T8329] ext4 filesystem being mounted at /123/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 353.912769][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 354.052744][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 354.202781][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 354.259358][ T8337] loop5: detected capacity change from 0 to 4096 [ 354.312262][ T8337] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512). [ 354.342743][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 354.365980][ T5632] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 354.482737][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 354.622822][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 354.762800][ T5637] tipc: Node number set to 2886997162 [ 354.902759][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 355.182765][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 355.449447][ T8344] netlink: 'syz.4.764': attribute type 2 has an invalid length. [ 356.016055][ T8337] ntfs3(loop5): ino=19, mi_enum_attr [ 356.466095][ T8352] netlink: 64 bytes leftover after parsing attributes in process `syz.1.768'. [ 357.702427][ T8356] loop1: detected capacity change from 0 to 32768 [ 357.769504][ T8356] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.769 (8356) [ 357.789755][ T8356] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 357.800905][ T8356] BTRFS info (device loop1): using sha256 checksum algorithm [ 357.902748][ T8369] netlink: 64 bytes leftover after parsing attributes in process `syz.0.771'. [ 358.852733][ C0] net_ratelimit: 4 callbacks suppressed [ 358.852763][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 358.951365][ T8356] BTRFS info (device loop1): rebuilding free space tree [ 358.997542][ T8356] BTRFS info (device loop1): enabling ssd optimizations [ 359.006320][ T8356] BTRFS info (device loop1): using spread ssd allocation scheme [ 359.014435][ T8356] BTRFS info (device loop1): enabling free space tree [ 359.021223][ T8356] BTRFS info (device loop1): force clearing of disk cache [ 359.028533][ T8356] BTRFS info (device loop1): enabling auto defrag [ 359.895102][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 360.269240][ T5630] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 360.344716][ T5639] block nbd5: Receive control failed (result -107) [ 360.434949][ T5764] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 360.471228][ T13] BTRFS info (device loop1): qgroup scan completed (inconsistency flag cleared) [ 360.521871][ T8395] block nbd5: shutting down sockets [ 360.593088][ T5764] usb 5-1: Using ep0 maxpacket: 32 [ 360.653811][ T5764] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 360.699809][ T5764] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 360.733799][ T5764] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 360.764226][ T5757] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 360.779395][ T5764] usb 5-1: config 1 has no interface number 0 [ 360.805091][ T5764] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 360.839965][ T5764] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 360.888328][ T5764] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 360.911123][ T5764] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.932808][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 360.967355][ T5757] usb 1-1: Using ep0 maxpacket: 32 [ 360.997737][ T5645] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 361.107842][ T8411] netlink: 64 bytes leftover after parsing attributes in process `syz.3.782'. [ 361.836754][ T5645] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 361.890448][ T5645] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 361.927171][ T5645] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 361.936151][ T5645] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 361.973061][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 362.107983][ T5757] usb 1-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 362.117900][ T5764] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 362.124277][ T5757] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.132718][ T5757] usb 1-1: Product: syz [ 362.137086][ T5757] usb 1-1: Manufacturer: syz [ 362.141833][ T5757] usb 1-1: SerialNumber: syz [ 362.158542][ T5757] usb 1-1: config 0 descriptor?? [ 362.174283][ T8408] netlink: 'syz.5.783': attribute type 2 has an invalid length. [ 362.483258][ T5764] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached [ 362.710274][ T8400] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 362.787273][ T8400] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 363.012786][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 363.301708][ T8401] [U]  [ 363.369042][ T5757] peak_usb 1-1:0.0 can0: unable to request usb[type=0 value=0] err=-71 [ 363.925405][ T5757] peak_usb 1-1:0.0: unable to read PCAN-USB Pro bootloader info (err -71) [ 363.936506][ T5764] snd_usb_pod 5-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 364.052775][ T5639] Bluetooth: hci6: command tx timeout [ 364.062729][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 364.287255][ T5764] usb 5-1: USB disconnect, device number 18 [ 364.344655][ T8427] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.786'. [ 364.356524][ T5764] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 364.564241][ T5757] peak_usb 1-1:0.0: probe with driver peak_usb failed with error -71 [ 364.631738][ T5757] usb 1-1: USB disconnect, device number 16 [ 364.848322][ T8439] Illegal XDP return value 4294965632 on prog (id 22) dev syz_tun, expect packet loss! [ 364.874437][ T8442] loop1: detected capacity change from 0 to 1024 [ 365.092741][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 366.133773][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 366.134525][ T5639] Bluetooth: hci6: command tx timeout [ 367.172738][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 368.212912][ T5645] Bluetooth: hci6: command tx timeout [ 368.222799][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 368.634312][ T8476] loop5: detected capacity change from 0 to 32768 [ 368.679697][ T8476] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 368.688668][ T8476] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 368.872415][ T8476] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 1ms [ 368.884883][ T5786] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 368.902881][ T5786] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 369.233376][ T5786] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 328ms [ 369.262812][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 369.291778][ T8404] lo speed is unknown, defaulting to 1000 [ 369.291951][ T5786] gfs2: fsid=syz:syz.0: jid=0: Done [ 369.452748][ T5764] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 369.505421][ T5639] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 369.553834][ T8476] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 370.292751][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 370.292976][ T5645] Bluetooth: hci6: command tx timeout [ 370.379624][ T5764] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 370.424436][ T5764] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 370.435634][ T5764] usb 4-1: New USB device found, idVendor=056a, idProduct=5012, bcdDevice= 0.00 [ 370.487299][ T5764] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.539986][ T5764] usb 4-1: config 0 descriptor?? [ 371.052327][ T5764] wacom 0003:056A:5012.0012: unknown main item tag 0x0 [ 371.118108][ T5764] wacom 0003:056A:5012.0012: unknown main item tag 0x0 [ 371.172471][ T5764] wacom 0003:056A:5012.0012: unknown main item tag 0x0 [ 371.332738][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 371.559100][ T5764] wacom 0003:056A:5012.0012: unknown main item tag 0x0 [ 372.026900][ T5764] wacom 0003:056A:5012.0012: unknown main item tag 0x0 [ 372.033920][ T5764] wacom 0003:056A:5012.0012: unknown main item tag 0x0 [ 372.040811][ T5764] wacom 0003:056A:5012.0012: unknown main item tag 0x0 [ 372.047845][ T5764] wacom 0003:056A:5012.0012: unknown main item tag 0x0 [ 372.055254][ T5764] wacom 0003:056A:5012.0012: unknown main item tag 0x0 [ 372.062189][ T5764] wacom 0003:056A:5012.0012: unknown main item tag 0x0 [ 372.071123][ T5764] wacom 0003:056A:5012.0012: reserved main item tag 0xd [ 372.080308][ T5764] wacom 0003:056A:5012.0012: Unknown device_type for 'HID 056a:5012'. Ignoring. [ 372.098774][ T5764] usb 4-1: USB disconnect, device number 12 [ 372.382760][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 373.412786][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 374.462756][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 374.938998][ T8524] loop4: detected capacity change from 0 to 131072 [ 374.966101][ T8524] F2FS-fs (loop4): invalid crc value [ 375.104437][ T8524] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 375.124658][ T8524] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 375.174072][ T5639] Bluetooth: hci5: command 0x0406 tx timeout [ 375.492752][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 375.821774][ T8536] loop1: detected capacity change from 0 to 32768 [ 375.912048][ T8545] netlink: 64 bytes leftover after parsing attributes in process `syz.5.809'. [ 376.532744][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 377.370315][ T8536] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 377.572755][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 377.586383][ T8536] XFS (loop1): Ending clean mount [ 377.682452][ T8404] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.715237][ T8404] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.767637][ T8404] bridge_slave_0: entered allmulticast mode [ 377.781126][ T8404] bridge_slave_0: entered promiscuous mode [ 377.806655][ T8404] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.847579][ T5630] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 377.864837][ T8404] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.902724][ T8404] bridge_slave_1: entered allmulticast mode [ 377.929227][ T8404] bridge_slave_1: entered promiscuous mode [ 377.995334][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.005349][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.012745][ T5764] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 378.435249][ T8564] loop3: detected capacity change from 0 to 512 [ 378.612868][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 378.882070][ T8564] EXT4-fs (loop3): 1 truncate cleaned up [ 378.950416][ T8564] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 379.023358][ T8404] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 379.121371][ T31] audit: type=1800 audit(1780292380.087:10): pid=8564 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.823" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 379.175623][ T8404] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 379.199303][ T5764] usb 1-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00 [ 379.245159][ T5764] usb 1-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 379.278815][ T5764] usb 1-1: Product: syz [ 379.299670][ T8555] loop5: detected capacity change from 0 to 32768 [ 379.348015][ T5764] usb 1-1: config 0 descriptor?? [ 379.396351][ T8571] binder: 8570:8571 ioctl c0306201 200000000080 returned -14 [ 379.414496][ T8555] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.820 (8555) [ 379.507018][ T5632] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 379.524780][ T5764] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 379.576156][ T8555] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 379.595976][ T5764] usb 1-1: Detected FT232H [ 379.623712][ T5764] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 379.652759][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 379.694760][ T8555] BTRFS info (device loop5): using crc32c checksum algorithm [ 380.019680][ T8589] loop1: detected capacity change from 0 to 1024 [ 380.029063][ T8589] EXT4-fs: Ignoring removed bh option [ 380.076926][ T8555] BTRFS info (device loop5): setting nodatasum [ 380.095060][ T8404] team0: Port device team_slave_0 added [ 380.106931][ T8555] BTRFS info (device loop5): enabling ssd optimizations [ 380.113182][ T8589] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 380.117012][ T8555] BTRFS info (device loop5): disabling tree log [ 380.134813][ T8555] BTRFS info (device loop5): turning on sync discard [ 380.141578][ T8555] BTRFS info (device loop5): enabling free space tree [ 380.151013][ T8555] BTRFS info (device loop5): max_inline set to 0 [ 380.160454][ T8589] ext4 filesystem being mounted at /152/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 380.168868][ T8404] team0: Port device team_slave_1 added [ 380.173387][ T29] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 380.204909][ T8589] EXT4-fs error (device loop1): ext4_map_blocks:833: inode #15: comm syz.1.822: lblock 0 mapped to illegal pblock 0 (length 1) [ 380.238637][ T8589] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 380.296329][ T8589] EXT4-fs (loop1): This should not happen!! Data will be lost [ 380.296329][ T8589] [ 380.344939][ T8595] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #15: comm syz.1.822: lblock 0 mapped to illegal pblock 0 (length 1) [ 380.359002][ T5764] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 380.385579][ T29] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 380.406377][ T8404] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 380.432307][ T8597] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #15: comm syz.1.822: lblock 0 mapped to illegal pblock 0 (length 1) [ 380.447437][ T5764] usb 1-1: USB disconnect, device number 17 [ 380.448383][ T29] usb 4-1: config 0 has no interface number 0 [ 380.466704][ T8404] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 380.519666][ T29] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 380.542629][ T8597] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #15: comm syz.1.822: lblock 0 mapped to illegal pblock 0 (length 1) [ 380.557956][ T5764] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 380.564821][ T29] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 380.595842][ T8404] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 380.605699][ T5764] ftdi_sio 1-1:0.0: device disconnected [ 380.614170][ T29] usb 4-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 380.627708][ T8597] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #15: comm syz.1.822: lblock 0 mapped to illegal pblock 0 (length 1) [ 380.645309][ T29] usb 4-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 380.655210][ T29] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.666077][ T8404] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 380.668191][ T5634] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 380.685321][ T8597] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #15: comm syz.1.822: lblock 0 mapped to illegal pblock 0 (length 1) [ 380.698518][ T8404] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 380.698571][ T8404] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 380.702740][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 380.803565][ T29] usb 4-1: config 0 descriptor?? [ 380.848989][ T8595] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #15: comm syz.1.822: lblock 0 mapped to illegal pblock 0 (length 1) [ 381.199871][ T5630] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 381.240213][ T8607] netlink: 'syz.0.830': attribute type 2 has an invalid length. [ 381.258012][ T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.523083][ T29] input: HID 28bd:0042 Pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.1/0003:28BD:0042.0013/input/input13 [ 381.732755][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 381.947925][ T8617] netlink: 64 bytes leftover after parsing attributes in process `syz.1.831'. [ 382.772729][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 382.790752][ T29] uclogic 0003:28BD:0042.0013: input,hidraw0: USB HID v0.00 Keypad [HID 28bd:0042] on usb-dummy_hcd.3-1/input1 [ 382.922005][ T29] usb 4-1: USB disconnect, device number 13 [ 383.802051][ T8404] hsr_slave_0: entered promiscuous mode [ 383.812759][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 383.841492][ T8404] hsr_slave_1: entered promiscuous mode [ 383.864980][ T8404] debugfs: 'hsr0' already exists in 'hsr' [ 383.924898][ T8404] Cannot create hsr debugfs directory [ 384.109815][ T8629] fido_id[8629]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 384.342129][ T5639] Bluetooth: hci2: unexpected event 0x09 length: 7 > 3 [ 384.852870][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 384.995161][ T8632] loop3: detected capacity change from 0 to 131072 [ 385.105980][ T8632] F2FS-fs (loop3): Test dummy encryption mode enabled [ 385.140053][ T8632] F2FS-fs (loop3): invalid crc value [ 385.405258][ T8632] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 385.448350][ T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.487089][ T8632] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 385.529976][ T8639] loop1: detected capacity change from 0 to 512 [ 385.643908][ T8639] EXT4-fs (loop1): 1 truncate cleaned up [ 385.704627][ T8639] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 385.852369][ T31] audit: type=1800 audit(1780292386.817:11): pid=8639 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.837" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 385.902726][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 386.167364][ T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.201216][ T5630] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 386.216617][ T29] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 386.393922][ T29] usb 6-1: Using ep0 maxpacket: 32 [ 386.448401][ T29] usb 6-1: config index 0 descriptor too short (expected 35577, got 27) [ 386.486537][ T29] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 386.548958][ T29] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 386.641939][ T29] usb 6-1: config 1 has no interface number 0 [ 386.715931][ T29] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 386.776795][ T29] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 386.942754][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 386.948593][ T29] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 387.078165][ T29] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.407454][ T29] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 387.418832][ T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.667543][ T29] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now attached [ 387.764205][ T8667] netlink: 64 bytes leftover after parsing attributes in process `syz.0.845'. [ 387.972738][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 388.449357][ T8652] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 388.518735][ T8652] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 388.693561][ T29] snd_usb_pod 6-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 389.023126][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 389.038865][ T5757] usb 6-1: USB disconnect, device number 13 [ 389.359063][ T5757] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 389.832692][ T8678] loop4: detected capacity change from 0 to 1024 [ 389.853832][ T8678] EXT4-fs: Ignoring removed bh option [ 389.991206][ T8678] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 390.052723][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 390.073556][ T5764] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 390.265089][ T5764] usb 2-1: Using ep0 maxpacket: 16 [ 390.292323][ T5764] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 390.319499][ T5639] Bluetooth: hci5: unexpected event 0x09 length: 7 > 3 [ 390.345570][ T5764] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 390.404890][ T5764] usb 2-1: config 0 interface 0 has no altsetting 0 [ 390.433257][ T5764] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 390.447296][ T5764] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.092902][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 391.278109][ T5633] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 391.289163][ T5764] usb 2-1: config 0 descriptor?? [ 391.307278][ T8697] loop3: detected capacity change from 0 to 128 [ 391.393595][ T8698] loop5: detected capacity change from 0 to 256 [ 391.418067][ T8697] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 391.484039][ T8698] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d) [ 391.516036][ T8697] ext4 filesystem being mounted at /139/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 391.799218][ T8679] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 391.848938][ T5632] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 391.864156][ T8679] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 391.981659][ T5764] hid (null): unknown global tag 0xc [ 392.142734][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 392.349490][ T8710] loop0: detected capacity change from 0 to 32768 [ 392.355446][ T5764] usb 2-1: USB disconnect, device number 12 [ 392.364150][ T8710] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.865 (8710) [ 392.419089][ T13] bridge_slave_1: left allmulticast mode [ 392.429622][ T8710] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 392.440779][ T8710] BTRFS info (device loop0): using sha256 checksum algorithm [ 392.441666][ T13] bridge_slave_1: left promiscuous mode [ 392.485345][ T30] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 392.494941][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.540009][ T13] bridge_slave_0: left allmulticast mode [ 392.546974][ T13] bridge_slave_0: left promiscuous mode [ 392.554049][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.596129][ T8710] BTRFS info (device loop0): rebuilding free space tree [ 392.629856][ T8710] BTRFS info (device loop0): enabling ssd optimizations [ 392.636966][ T8710] BTRFS info (device loop0): using spread ssd allocation scheme [ 392.645539][ T8710] BTRFS info (device loop0): enabling free space tree [ 392.652338][ T8710] BTRFS info (device loop0): force clearing of disk cache [ 392.659563][ T8710] BTRFS info (device loop0): enabling auto defrag [ 392.754668][ T30] usb 6-1: Using ep0 maxpacket: 16 [ 392.786467][ T30] usb 6-1: unable to get BOS descriptor or descriptor too short [ 392.812856][ T24] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 392.827068][ T30] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 392.879150][ T30] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 392.931336][ T30] usb 6-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 392.961531][ T30] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.994318][ T30] usb 6-1: Product: syz [ 393.016356][ T30] usb 6-1: Manufacturer: syz [ 393.026602][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 393.039242][ T30] usb 6-1: SerialNumber: syz [ 393.062367][ T24] usb 5-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 393.114431][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.151023][ T24] usb 5-1: Product: syz [ 393.172729][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 393.185488][ T24] usb 5-1: Manufacturer: syz [ 393.216281][ T24] usb 5-1: SerialNumber: syz [ 393.290916][ T24] usb 5-1: config 0 descriptor?? [ 394.210382][ T30] usb 6-1: Audio class v2/v3 interfaces need an interface association [ 394.222714][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 394.233830][ T30] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 394.334424][ T30] usb 6-1: 2:1 : invalid Cluster Descriptor size [ 394.366658][ T5631] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 394.456674][ T1179] BTRFS info (device loop0): qgroup scan completed (inconsistency flag cleared) [ 394.614600][ T9] usb 6-1: USB disconnect, device number 14 [ 395.252821][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 395.388545][ T5875] udevd[5875]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 396.132879][ T9] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 396.292747][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 396.318225][ T9] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 396.326912][ T9] usb 6-1: config 0 has no interface number 0 [ 396.335339][ T9] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 396.348131][ T9] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 396.358402][ T9] usb 6-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 396.376907][ T9] usb 6-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 396.388967][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.389523][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 396.402012][ T9] usb 6-1: config 0 descriptor?? [ 396.436800][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 396.468637][ T13] bond0 (unregistering): Released all slaves [ 396.571945][ T24] peak_usb 5-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 396.601824][ T24] peak_usb 5-1:0.0: unable to read PCAN-USB Pro firmware info (err -71) [ 396.742280][ T5289] 8021q: adding VLAN 0 to HW filter on device eth1 [ 396.760050][ T8404] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 396.797301][ T8404] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 396.827377][ T8404] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 396.861620][ T5757] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 396.911716][ T8404] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 397.030848][ T8766] netlink: 12 bytes leftover after parsing attributes in process `syz.1.868'. [ 397.053639][ T5757] usb 4-1: Using ep0 maxpacket: 32 [ 397.059607][ T8768] loop0: detected capacity change from 0 to 256 [ 397.069011][ T5757] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 397.085218][ T24] peak_usb 5-1:0.0: probe with driver peak_usb failed with error -71 [ 397.085926][ T9] input: HID 28bd:0042 Pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.1/0003:28BD:0042.0015/input/input14 [ 397.109518][ T5757] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 397.118882][ T24] usb 5-1: USB disconnect, device number 19 [ 397.136578][ T5757] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 397.140807][ T8768] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 397.167015][ T5757] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 397.224767][ T5757] usb 4-1: config 0 interface 0 has no altsetting 0 [ 397.248129][ T5757] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 397.278285][ T9] uclogic 0003:28BD:0042.0015: input,hidraw0: USB HID v0.00 Keypad [HID 28bd:0042] on usb-dummy_hcd.5-1/input1 [ 397.295819][ T5757] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 397.328248][ T5757] usb 4-1: Product: syz [ 397.342768][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 397.372474][ T5757] usb 4-1: Manufacturer: syz [ 397.381733][ T9] usb 6-1: USB disconnect, device number 15 [ 397.392832][ T5757] usb 4-1: SerialNumber: syz [ 397.486475][ T5757] usb 4-1: config 0 descriptor?? [ 397.543000][ T24] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 397.551568][ T5757] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 397.619727][ T8770] fido_id[8770]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 397.621815][ T5941] udevd[5941]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 397.664864][ T5757] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 397.712712][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 397.724601][ T24] usb 5-1: unable to get BOS descriptor or descriptor too short [ 397.736884][ T24] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 397.739424][ T8404] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 397.756394][ T24] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 397.830183][ T24] usb 5-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 397.845830][ T8404] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 397.853797][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.864848][ T10] usb 4-1: USB disconnect, device number 14 [ 397.870864][ C0] ldusb 4-1:0.0: usb_submit_urb failed (-19) [ 397.881058][ T8404] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 397.900946][ T24] usb 5-1: Product: syz [ 397.906657][ T8404] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 397.910342][ T24] usb 5-1: Manufacturer: syz [ 397.920985][ T24] usb 5-1: SerialNumber: syz [ 397.925628][ T10] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 397.940571][ T8766] ipvlan2: entered allmulticast mode [ 398.329203][ T24] usb 5-1: Audio class v2/v3 interfaces need an interface association [ 398.354070][ T24] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 398.372798][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 399.412827][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 400.452821][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 400.671148][ T13] hsr_slave_0: left promiscuous mode [ 400.764830][ T13] hsr_slave_1: left promiscuous mode [ 400.790607][ T24] usb 5-1: USB disconnect, device number 20 [ 400.797848][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 400.812759][ T5786] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 400.826440][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 400.910721][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 400.956675][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 400.981267][ T8808] loop1: detected capacity change from 0 to 512 [ 400.998228][ T5786] usb 4-1: Using ep0 maxpacket: 16 [ 401.039806][ T5786] usb 4-1: unable to get BOS descriptor or descriptor too short [ 401.048716][ T5875] udevd[5875]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 401.069909][ T5786] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 401.075005][ T8808] EXT4-fs (loop1): 1 truncate cleaned up [ 401.099805][ T5786] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 401.128890][ T5786] usb 4-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 401.140652][ T5786] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.152042][ T5786] usb 4-1: Product: syz [ 401.156575][ T5786] usb 4-1: Manufacturer: syz [ 401.161369][ T5786] usb 4-1: SerialNumber: syz [ 401.172556][ T8808] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 401.190694][ T13] veth1_macvtap: left promiscuous mode [ 401.206186][ T13] veth0_macvtap: left promiscuous mode [ 401.220717][ T13] veth1_vlan: left promiscuous mode [ 401.231556][ T13] veth0_vlan: left promiscuous mode [ 401.449685][ T5786] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 401.480093][ T5786] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 401.493382][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 401.857211][ T5786] usb 4-1: 2:1 : invalid Cluster Descriptor size [ 401.857713][ T5630] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 402.110277][ T5786] usb 4-1: USB disconnect, device number 15 [ 402.532745][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 402.645649][ T13] team0 (unregistering): Port device team_slave_1 removed [ 402.646663][ T8826] loop1: detected capacity change from 0 to 40427 [ 402.664429][ T8826] F2FS-fs (loop1): invalid crc value [ 402.671924][ T8829] loop0: detected capacity change from 0 to 1024 [ 402.715490][ T8829] EXT4-fs: Ignoring removed bh option [ 402.749993][ T13] team0 (unregistering): Port device team_slave_0 removed [ 402.767280][ T8826] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 402.784010][ T8826] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 402.828962][ T8829] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 403.126277][ T5630] syz-executor: attempt to access beyond end of device [ 403.126277][ T5630] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 403.210111][ T5631] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 403.213610][ T5630] CPU: 1 UID: 0 PID: 5630 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 403.213667][ T5630] Tainted: [L]=SOFTLOCKUP [ 403.213681][ T5630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 403.213703][ T5630] Call Trace: [ 403.213714][ T5630] [ 403.213728][ T5630] dump_stack_lvl+0x100/0x190 [ 403.213773][ T5630] f2fs_stop_checkpoint+0x600/0x9b0 [ 403.213815][ T5630] ? srso_alias_return_thunk+0x5/0xfbef5 [ 403.213859][ T5630] ? errseq_set+0xe3/0x150 [ 403.213914][ T5630] ? errseq_set+0xe3/0x150 [ 403.213975][ T5630] f2fs_write_end_io+0xf59/0x1340 [ 403.214037][ T5630] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 403.214088][ T5630] ? srso_alias_return_thunk+0x5/0xfbef5 [ 403.214144][ T5630] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 403.214188][ T5630] bio_endio+0x78f/0x8f0 [ 403.214234][ T5630] submit_bio_noacct+0x64c/0x2000 [ 403.214302][ T5630] f2fs_submit_write_bio+0x135/0x340 [ 403.214346][ T5630] __submit_merged_bio+0x331/0x780 [ 403.214399][ T5630] __submit_merged_write_cond+0x3fe/0x510 [ 403.214450][ T5630] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 403.214507][ T5630] ? __pfx___might_resched+0x10/0x10 [ 403.214557][ T5630] ? srso_alias_return_thunk+0x5/0xfbef5 [ 403.214612][ T5630] f2fs_write_cache_pages+0x20e9/0x2630 [ 403.214691][ T5630] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 403.214743][ T5630] ? __bfs+0x150/0x2a0 [ 403.214802][ T5630] ? srso_alias_return_thunk+0x5/0xfbef5 [ 403.214855][ T5630] ? srso_alias_return_thunk+0x5/0xfbef5 [ 403.214900][ T5630] ? __kasan_check_byte+0x13/0x50 [ 403.214963][ T5630] ? srso_alias_return_thunk+0x5/0xfbef5 [ 403.215009][ T5630] ? unwind_next_frame+0x3be/0x2090 [ 403.215059][ T5630] ? srso_alias_return_thunk+0x5/0xfbef5 [ 403.215104][ T5630] ? rcu_is_watching+0x12/0xc0 [ 403.215155][ T5630] ? srso_alias_return_thunk+0x5/0xfbef5 [ 403.215216][ T5630] ? bpf_ksym_find+0x124/0x1c0 [ 403.215325][ T5630] ? srso_alias_return_thunk+0x5/0xfbef5 [ 403.215374][ T5630] ? srso_alias_return_thunk+0x5/0xfbef5 [ 403.215418][ T5630] ? add_lock_to_list+0x99/0x110 [ 403.215477][ T5630] ? srso_alias_return_thunk+0x5/0xfbef5 [ 403.215522][ T5630] ? rcu_is_watching+0x12/0xc0 [ 403.215581][ T5630] f2fs_write_data_pages+0x799/0x16d0 [ 403.215648][ T5630] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 403.215700][ T5630] ? srso_alias_return_thunk+0x5/0xfbef5 [ 403.215754][ T5630] ? do_writepages+0x4b5/0x600 [ 403.215812][ T5630] ? srso_alias_return_thunk+0x5/0xfbef5 [ 403.215862][ T5630] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 403.215919][ T5630] do_writepages+0x278/0x600 [ 403.215989][ T5630] ? __pfx_do_writepages+0x10/0x10 [ 403.216046][ T5630] ? do_raw_spin_unlock+0x145/0x1e0 [ 403.216098][ T5630] ? srso_alias_return_thunk+0x5/0xfbef5 [ 403.216143][ T5630] ? _raw_spin_unlock+0x28/0x50 [ 403.216197][ T5630] filemap_writeback+0x22d/0x2e0 [ 403.216263][ T5630] ? __pfx_filemap_writeback+0x10/0x10 [ 403.216322][ T5630] ? check_noncircular+0x97/0x160 [ 403.216410][ T5630] ? srso_alias_return_thunk+0x5/0xfbef5 [ 403.216455][ T5630] ? find_held_lock+0x2b/0x80 [ 403.216509][ T5630] ? f2fs_sync_dirty_inodes+0x3a6/0x990 [ 403.216565][ T5630] ? f2fs_sync_dirty_inodes+0x3a6/0x990 [ 403.216618][ T5630] ? srso_alias_return_thunk+0x5/0xfbef5 [ 403.216675][ T5630] f2fs_sync_dirty_inodes+0x469/0x990 [ 403.216749][ T5630] block_operations+0x2a6/0xfc0 [ 403.216808][ T5630] ? __bfs+0x150/0x2a0 [ 403.216878][ T5630] ? __pfx_block_operations+0x10/0x10 [ 403.216936][ T5630] ? check_noncircular+0x97/0x160 [ 403.217023][ T5630] ? srso_alias_return_thunk+0x5/0xfbef5 [ 403.217073][ T5630] ? srso_alias_return_thunk+0x5/0xfbef5 [ 403.217118][ T5630] ? rcu_is_watching+0x12/0xc0 [ 403.217169][ T5630] ? srso_alias_return_thunk+0x5/0xfbef5 [ 403.217222][ T5630] f2fs_write_checkpoint+0x582/0x5550 [ 403.217286][ T5630] ? srso_alias_return_thunk+0x5/0xfbef5 [ 403.217330][ T5630] ? _raw_spin_unlock_irq+0x2e/0x50 [ 403.217377][ T5630] ? srso_alias_return_thunk+0x5/0xfbef5 [ 403.217422][ T5630] ? __wait_for_common+0x1f3/0x4c0 [ 403.217475][ T5630] ? __pfx_schedule_timeout+0x10/0x10 [ 403.217527][ T5630] ? __pfx___wait_for_common+0x10/0x10 [ 403.217584][ T5630] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 403.217651][ T5630] ? srso_alias_return_thunk+0x5/0xfbef5 [ 403.217695][ T5630] ? rcu_is_watching+0x12/0xc0 [ 403.217746][ T5630] ? srso_alias_return_thunk+0x5/0xfbef5 [ 403.217790][ T5630] ? kthread_stop+0x280/0x640 [ 403.217833][ T5630] kill_f2fs_super+0x3f1/0x4a0 [ 403.217888][ T5630] ? __pfx_kill_f2fs_super+0x10/0x10 [ 403.217968][ T5630] ? lockdep_hardirqs_on+0x78/0x100 [ 403.218021][ T5630] ? srso_alias_return_thunk+0x5/0xfbef5 [ 403.218068][ T5630] ? srso_alias_return_thunk+0x5/0xfbef5 [ 403.218128][ T5630] deactivate_locked_super+0xc1/0x1b0 [ 403.218191][ T5630] deactivate_super+0xe7/0x110 [ 403.218247][ T5630] cleanup_mnt+0x21f/0x450 [ 403.218286][ T5630] task_work_run+0x150/0x240 [ 403.218333][ T5630] ? __pfx_task_work_run+0x10/0x10 [ 403.218380][ T5630] ? srso_alias_return_thunk+0x5/0xfbef5 [ 403.218424][ T5630] ? rcu_is_watching+0x12/0xc0 [ 403.218481][ T5630] exit_to_user_mode_loop+0x157/0x670 [ 403.218525][ T5630] ? rcu_is_watching+0x12/0xc0 [ 403.218582][ T5630] do_syscall_64+0x666/0x870 [ 403.218644][ T5630] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.218682][ T5630] RIP: 0033:0x7fd7f439e097 [ 403.218712][ T5630] Code: a2 c7 05 5c 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 403.218749][ T5630] RSP: 002b:00007ffeffb95bf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 403.218784][ T5630] RAX: 0000000000000000 RBX: 00007fd7f44321ca RCX: 00007fd7f439e097 [ 403.218807][ T5630] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffeffb95cb0 [ 403.218830][ T5630] RBP: 00007ffeffb95cb0 R08: 00007ffeffb96cb0 R09: 00000000ffffffff [ 403.218854][ T5630] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffeffb96d40 [ 403.218877][ T5630] R13: 00007fd7f44321ca R14: 00000000000625c4 R15: 00007ffeffb96d80 [ 403.218932][ T5630] [ 403.233430][ T5630] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 403.406061][ T8842] loop3: detected capacity change from 0 to 256 [ 403.575140][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 403.980382][ T8834] netlink: 8 bytes leftover after parsing attributes in process `syz.4.883'. [ 404.048626][ T5289] 8021q: adding VLAN 0 to HW filter on device eth2 [ 404.274023][ T8404] 8021q: adding VLAN 0 to HW filter on device bond0 [ 404.417872][ T8404] 8021q: adding VLAN 0 to HW filter on device team0 [ 404.612736][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 404.732743][ T10] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 405.252683][ T6322] bridge0: port 1(bridge_slave_0) entered blocking state [ 405.259905][ T6322] bridge0: port 1(bridge_slave_0) entered forwarding state [ 405.458647][ T6322] bridge0: port 2(bridge_slave_1) entered blocking state [ 405.465911][ T6322] bridge0: port 2(bridge_slave_1) entered forwarding state [ 405.477281][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 405.495181][ T10] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 405.520408][ T10] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 405.532004][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 405.540655][ T10] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 405.584386][ C1] vcan0: j1939_tp_rxtimer: 0xffff888056b7d400: rx timeout, send abort [ 405.591738][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.595354][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888056b7d400: 0x3f000: (3) A timeout occurred and this is the connection abort to close the session. [ 405.631086][ T10] usb 5-1: config 0 descriptor?? [ 405.660251][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 406.299900][ T8853] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 406.565332][ T8874] netlink: 64 bytes leftover after parsing attributes in process `syz.0.892'. [ 406.702819][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 407.275633][ T8853] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 407.301218][ T10] hid (null): unknown global tag 0xc [ 407.732716][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 407.794466][ T10] usb 5-1: USB disconnect, device number 21 [ 408.225011][ T8883] lo speed is unknown, defaulting to 1000 [ 408.602211][ T8899] netlink: 4 bytes leftover after parsing attributes in process `syz.5.900'. [ 408.772821][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 408.927700][ T8908] Bluetooth: MGMT ver 1.23 [ 409.009920][ T8904] loop4: detected capacity change from 0 to 1024 [ 409.107113][ T8904] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 409.146810][ T8904] ext4 filesystem being mounted at /142/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 409.631521][ T8925] netlink: 64 bytes leftover after parsing attributes in process `syz.5.905'. [ 409.812764][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 410.377988][ T8904] EXT4-fs error (device loop4): ext4_validate_block_bitmap:440: comm syz.4.901: bg 0: block 112: padding at end of block bitmap is not set [ 410.778950][ T8904] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 22 with max blocks 1 with error 28 [ 410.793746][ T8904] EXT4-fs (loop4): This should not happen!! Data will be lost [ 410.793746][ T8904] [ 410.806403][ T8904] EXT4-fs (loop4): Total free blocks count 0 [ 410.841579][ T8904] EXT4-fs (loop4): Free/Dirty block details [ 410.852731][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 410.896008][ T8904] EXT4-fs (loop4): free_blocks=0 [ 410.931594][ T8904] EXT4-fs (loop4): dirty_blocks=16 [ 410.972457][ T8904] EXT4-fs (loop4): Block reservation details [ 411.002581][ T8904] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 411.251249][ T13] EXT4-fs error (device loop4): ext4_map_blocks:833: inode #15: comm kworker/u8:1: lblock 0 mapped to illegal pblock 0 (length 1) [ 411.356851][ T13] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 411.437255][ T5633] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 411.874080][ T8943] netlink: 64 bytes leftover after parsing attributes in process `syz.1.906'. [ 411.893120][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 412.362143][ T5289] 8021q: adding VLAN 0 to HW filter on device eth3 [ 412.932714][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 412.963632][ T29] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 413.040033][ T8404] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 413.155924][ T29] usb 6-1: Using ep0 maxpacket: 16 [ 413.206074][ T29] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 413.265015][ T29] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 413.306091][ T29] usb 6-1: config 0 interface 0 has no altsetting 0 [ 413.329385][ T29] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 413.361562][ T29] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 413.543644][ T29] usb 6-1: config 0 descriptor?? [ 413.982743][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 414.054060][ T8954] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 414.182516][ T8954] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 415.022717][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 415.156798][ T29] hid (null): unknown global tag 0xc [ 415.966415][ T29] usb 6-1: USB disconnect, device number 16 [ 416.062708][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 416.322260][ T8993] loop4: detected capacity change from 0 to 32768 [ 416.342577][ T8993] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.922 (8993) [ 416.364590][ T8993] BTRFS info (device loop4): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 416.375659][ T8993] BTRFS info (device loop4): using crc32c checksum algorithm [ 416.383441][ T8993] BTRFS warning (device loop4): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 416.534826][ T8993] BTRFS info (device loop4): rebuilding free space tree [ 416.600249][ T8993] BTRFS info (device loop4): disabling free space tree [ 416.607375][ T8993] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 416.617554][ T8993] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 416.636831][ T8993] BTRFS info (device loop4): enabling ssd optimizations [ 416.643936][ T8993] BTRFS info (device loop4): turning on async discard [ 416.650733][ T8993] BTRFS info (device loop4): enabling disk space caching [ 416.658579][ T8993] BTRFS info (device loop4): force clearing of disk cache [ 416.665859][ T8993] BTRFS info (device loop4): use zstd compression, level 3 [ 416.872585][ T9015] netlink: 'syz.5.924': attribute type 2 has an invalid length. [ 416.935583][ T8404] veth0_vlan: entered promiscuous mode [ 417.004840][ T8404] veth1_vlan: entered promiscuous mode [ 417.092708][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 417.232905][ T5633] BTRFS info (device loop4): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 417.264510][ T8404] veth0_macvtap: entered promiscuous mode [ 417.327615][ T8404] veth1_macvtap: entered promiscuous mode [ 417.776840][ T9027] netlink: 64 bytes leftover after parsing attributes in process `syz.1.927'. [ 418.142739][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 418.374128][ T8404] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 418.555436][ T8404] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 419.172727][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 419.322739][ T78] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.376738][ T78] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.601492][ T9033] loop1: detected capacity change from 0 to 32768 [ 419.753835][ T78] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.832997][ T9038] loop0: detected capacity change from 0 to 512 [ 419.859634][ T78] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.902845][ T9038] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 420.042141][ T9038] EXT4-fs error (device loop0): ext4_orphan_get:1397: inode #15: comm syz.0.930: inode has both inline data and extents flags [ 420.075552][ T9038] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 420.082589][ T9038] EXT4-fs error (device loop0): ext4_orphan_get:1400: comm syz.0.930: couldn't read orphan inode 15 (err -117) [ 420.082685][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 420.110014][ C1] EXT4-fs (loop0): initial error at time 1780292421: ext4_orphan_get:1397: inode 15 [ 420.119519][ C1] EXT4-fs (loop0): last error at time 1780292421: ext4_orphan_get:1397: inode 15 [ 420.211698][ T9038] loop0: lost filesystem error report for type 5 error -117 [ 420.224520][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 420.231774][ T5645] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 420.254497][ T5645] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 420.263752][ T5645] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 420.274347][ T5645] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 420.276935][ T9038] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 420.282146][ T5645] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 420.765336][ T5631] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 420.942271][ T5289] 8021q: adding VLAN 0 to HW filter on device eth4 [ 421.252728][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 422.292708][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 422.383249][ T5645] Bluetooth: hci0: command tx timeout [ 423.332857][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 423.878376][ T6365] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 424.356850][ T6365] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 424.372850][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 424.386444][ T6365] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 424.416132][ T6365] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 424.447544][ T6365] usb 6-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 424.457798][ T5645] Bluetooth: hci0: command tx timeout [ 424.473647][ T6365] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.482038][ T6365] usb 6-1: Product: syz [ 424.486465][ T6365] usb 6-1: Manufacturer: syz [ 424.491106][ T6365] usb 6-1: SerialNumber: syz [ 424.508899][ T6365] usb 6-1: config 0 descriptor?? [ 424.517600][ T9097] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 424.525696][ T9097] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 424.569895][ T6365] usb 6-1: ucan: probing device on interface #0 [ 424.585166][ T1150] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.786100][ T9111] macvlan2: entered promiscuous mode [ 424.818222][ T9111] batman_adv: batadv0: Adding interface: macvlan2 [ 424.849910][ T9111] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 424.912823][ T9111] batman_adv: batadv0: Not using interface macvlan2 (retrying later): interface not active [ 425.160885][ T1150] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.357917][ T9125] loop1: detected capacity change from 0 to 2048 [ 425.385153][ T6365] ucan 6-1:0.0 can0: registered device [ 425.412712][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 425.451248][ T6365] ucan 6-1:0.0 can0: firmware string: )x [ 425.507114][ T1150] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.083438][ T9042] lo speed is unknown, defaulting to 1000 [ 426.453233][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 426.512415][ T30] usb 6-1: USB disconnect, device number 17 [ 426.533772][ T5645] Bluetooth: hci0: command tx timeout [ 426.975605][ T9146] netlink: 64 bytes leftover after parsing attributes in process `syz.4.959'. [ 427.492712][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 428.533137][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 428.614127][ T5645] Bluetooth: hci0: command tx timeout [ 429.452010][ T1150] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.572825][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 430.406250][ T9165] loop0: detected capacity change from 0 to 131072 [ 430.557340][ T9165] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 430.573843][ T9165] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 430.612711][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 431.086641][ T9177] input: syz0 as /devices/virtual/input/input15 [ 431.483409][ T9190] netlink: 'syz.3.970': attribute type 1 has an invalid length. [ 431.608521][ T9191] netlink: 64 bytes leftover after parsing attributes in process `syz.5.969'. [ 431.652759][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 432.215733][ T9190] netlink: 'syz.3.970': attribute type 1 has an invalid length. [ 432.266684][ T9190] netlink: 52 bytes leftover after parsing attributes in process `syz.3.970'. [ 432.337468][ T9190] netlink: 1 bytes leftover after parsing attributes in process `syz.3.970'. [ 432.383544][ T9190] netlink: 'syz.3.970': attribute type 1 has an invalid length. [ 432.416612][ T9190] netlink: 634 bytes leftover after parsing attributes in process `syz.3.970'. [ 432.559161][ T9195] loop5: detected capacity change from 0 to 128 [ 432.692728][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 432.694895][ T9195] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 432.755775][ T9181] loop1: detected capacity change from 0 to 40427 [ 432.769936][ T9195] ext4 filesystem being mounted at /153/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 432.813596][ T9181] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504) [ 432.823092][ T9181] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 432.848477][ T9181] F2FS-fs (loop1): build fault injection rate: 17008 [ 432.868238][ T9181] F2FS-fs (loop1): build fault injection type: 0x1f8 [ 432.912280][ T9181] F2FS-fs (loop1): invalid crc value [ 433.732719][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 434.198845][ T9203] loop0: detected capacity change from 0 to 131072 [ 434.215301][ T9203] F2FS-fs (loop0): invalid crc value [ 434.279542][ T5634] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 434.324657][ T9203] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 434.342033][ T9203] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 434.773497][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 434.786238][ T1150] bridge_slave_1: left allmulticast mode [ 434.833752][ T1150] bridge_slave_1: left promiscuous mode [ 434.866566][ T9181] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 434.900370][ T1150] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.053452][ T9223] loop3: detected capacity change from 0 to 40427 [ 435.063914][ T9223] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 435.071734][ T9223] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 435.083335][ T9223] F2FS-fs (loop3): invalid crc value [ 435.199073][ T1150] bridge_slave_0: left allmulticast mode [ 435.213372][ T9223] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 435.248485][ T1150] bridge_slave_0: left promiscuous mode [ 435.260558][ T9223] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 435.268760][ T9223] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 435.314629][ T1150] bridge0: port 1(bridge_slave_0) entered disabled state [ 435.812703][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 436.853002][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 437.070069][ T9247] loop5: detected capacity change from 0 to 256 [ 437.652505][ T1150] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 437.710066][ T1150] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 437.769058][ T1150] bond0 (unregistering): Released all slaves [ 437.892716][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 438.804825][ T9273] netlink: 64 bytes leftover after parsing attributes in process `syz.5.989'. [ 438.932721][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 439.500687][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.512446][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.800937][ T9279] loop1: detected capacity change from 0 to 4096 [ 439.972773][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 440.486602][ T5289] 8021q: adding VLAN 0 to HW filter on device eth5 [ 440.509926][ T1150] hsr_slave_0: left promiscuous mode [ 440.544323][ T1150] hsr_slave_1: left promiscuous mode [ 440.566434][ T1150] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 440.587723][ T1150] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 440.630909][ T1150] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 440.668687][ T1150] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 440.691024][ T31] audit: type=1800 audit(1780292441.657:12): pid=9279 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.991" name="file1" dev="loop1" ino=33 res=0 errno=0 [ 440.750451][ T1150] veth1_macvtap: left promiscuous mode [ 440.767155][ T1150] veth0_macvtap: left promiscuous mode [ 440.791036][ T1150] veth1_vlan: left promiscuous mode [ 440.811281][ T1150] veth0_vlan: left promiscuous mode [ 440.841054][ T9277] loop4: detected capacity change from 0 to 131072 [ 440.849827][ T9277] F2FS-fs (loop4): Wrong CP boundary, start(512) end(1536) blocks(0) [ 440.858069][ T9277] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 440.873509][ T9277] F2FS-fs (loop4): invalid crc value [ 440.977683][ T9277] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 440.999691][ T9277] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 441.006874][ T9277] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 441.014513][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 441.590100][ T9300] netlink: 'syz.1.993': attribute type 2 has an invalid length. [ 442.052718][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 442.519823][ T9304] netlink: 4 bytes leftover after parsing attributes in process `syz.1.997'. [ 442.674213][ T1150] team0 (unregistering): Port device team_slave_1 removed [ 442.719554][ T1150] team0 (unregistering): Port device team_slave_0 removed [ 443.092695][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 443.126827][ T9042] bridge0: port 1(bridge_slave_0) entered blocking state [ 443.164855][ T9042] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.171409][ T9308] loop3: detected capacity change from 0 to 1024 [ 443.196292][ T9042] bridge_slave_0: entered allmulticast mode [ 443.207901][ T9308] EXT4-fs: Ignoring removed bh option [ 443.229157][ T9042] bridge_slave_0: entered promiscuous mode [ 443.282761][ T9308] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 443.285944][ T9042] bridge0: port 2(bridge_slave_1) entered blocking state [ 443.340464][ T9042] bridge0: port 2(bridge_slave_1) entered disabled state [ 443.348237][ T9042] bridge_slave_1: entered allmulticast mode [ 443.357729][ T9042] bridge_slave_1: entered promiscuous mode [ 443.853903][ T9042] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 444.132836][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 444.402801][ T9042] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 444.645636][ T9042] team0: Port device team_slave_0 added [ 444.646778][ T5632] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 444.682738][ T5637] usb 6-1: new full-speed USB device number 18 using dummy_hcd [ 444.754680][ T9042] team0: Port device team_slave_1 added [ 444.772842][ T10] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 444.885368][ T5637] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 445.108182][ T9042] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 445.128329][ T9042] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 445.172712][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 445.248129][ T9334] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1002'. [ 445.829008][ T5637] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 445.888691][ T9042] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 445.948339][ T9042] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 445.989739][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 446.007874][ T10] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 446.018245][ T5637] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 446.027505][ T10] usb 5-1: config 0 has no interface number 0 [ 446.034647][ T5637] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.042779][ T10] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 446.055772][ T10] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 446.062492][ T9042] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 446.074522][ T10] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 446.154256][ T24] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 446.168259][ T10] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 446.190878][ T9042] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 446.212791][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 446.237062][ T10] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 446.250549][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.270411][ T10] usb 5-1: config 0 descriptor?? [ 446.299633][ T10] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 446.345709][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 446.345854][ T5637] usb 6-1: usb_control_msg returned -32 [ 446.364196][ T5637] usbtmc 6-1:16.0: can't read capabilities [ 446.370296][ T24] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 446.409972][ T24] usb 1-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 446.459395][ T24] usb 1-1: config 0 interface 0 has no altsetting 0 [ 446.488116][ T24] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 446.514056][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.549122][ T24] usb 1-1: Product: syz [ 446.561703][ T24] usb 1-1: Manufacturer: syz [ 446.572424][ T24] usb 1-1: SerialNumber: syz [ 446.586295][ T9042] hsr_slave_0: entered promiscuous mode [ 446.594109][ T24] usb 1-1: config 0 descriptor?? [ 446.605816][ T9042] hsr_slave_1: entered promiscuous mode [ 446.619255][ T9042] debugfs: 'hsr0' already exists in 'hsr' [ 446.628009][ T9042] Cannot create hsr debugfs directory [ 446.769360][ T9349] netlink: 'syz.1.1006': attribute type 2 has an invalid length. [ 447.034066][ T24] gs_usb 1-1:0.0: Configuring for 1 interfaces [ 447.232929][ T10] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 447.252774][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 447.409922][ T10] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 447.430408][ T10] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 447.481055][ T10] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 447.509945][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.675099][ T6365] usb 5-1: USB disconnect, device number 22 [ 447.730204][ T9347] ldusb 5-1:0.55: Couldn't submit interrupt_in_urb -19 [ 447.894389][ T9362] netlink: 'syz.1.1008': attribute type 2 has an invalid length. [ 448.296525][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 448.423873][ T9351] ld_usb_open - error, can't find device for minor 0 [ 448.425474][ T10] usb 4-1: usb_control_msg returned -32 [ 448.520923][ T10] usbtmc 4-1:16.0: can't read capabilities [ 448.529696][ T5786] usb 1-1: USB disconnect, device number 18 [ 448.643027][ T6365] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 448.664376][ T10] usb 4-1: USB disconnect, device number 16 [ 449.205264][ T30] usb 6-1: USB disconnect, device number 18 [ 449.332721][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 449.638886][ T9376] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 449.646929][ T5637] IPVS: starting estimator thread 0... [ 449.785875][ T9380] IPVS: using max 26 ests per chain, 62400 per kthread [ 450.350025][ T9390] loop4: detected capacity change from 0 to 4096 [ 450.372705][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 451.412843][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 452.083462][ T9426] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1026'. [ 452.147910][ T9042] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 452.162722][ T30] usb 6-1: new low-speed USB device number 19 using dummy_hcd [ 452.357091][ T30] usb 6-1: config 0 has no interfaces? [ 452.376994][ T30] usb 6-1: config 0 has no interfaces? [ 452.383813][ T5786] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 452.410321][ T30] usb 6-1: config 0 has no interfaces? [ 452.438593][ T9042] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 452.447442][ T9042] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 452.454417][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 452.482378][ T30] usb 6-1: string descriptor 0 read error: -22 [ 452.518557][ T30] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 452.542389][ T30] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.547910][ T9042] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 452.570257][ T9042] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 452.581483][ T30] usb 6-1: config 0 descriptor?? [ 452.586955][ T5786] usb 2-1: Using ep0 maxpacket: 32 [ 452.592301][ T6365] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 452.602518][ T9042] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 452.608627][ T5786] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 452.618648][ T5786] usb 2-1: config 0 has no interface number 0 [ 452.636217][ T5786] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 452.648678][ T9042] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 452.649945][ T5786] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.665541][ T5786] usb 2-1: Product: syz [ 452.669838][ T5786] usb 2-1: Manufacturer: syz [ 452.675017][ T5786] usb 2-1: SerialNumber: syz [ 452.677889][ T9042] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 452.690377][ T5786] usb 2-1: config 0 descriptor?? [ 452.713966][ T5786] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 452.797581][ T6365] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 452.824689][ T6365] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 452.847548][ T6365] usb 1-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01 [ 452.864498][ T9042] 8021q: adding VLAN 0 to HW filter on device bond0 [ 452.869332][ T6365] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.893934][ T6365] usb 1-1: config 0 descriptor?? [ 452.972221][ T9042] 8021q: adding VLAN 0 to HW filter on device team0 [ 452.994013][ T5786] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 453.047224][ T5786] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 453.090318][ T9425] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 453.151409][ T687] bridge0: port 1(bridge_slave_0) entered blocking state [ 453.151740][ T9425] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 453.158643][ T687] bridge0: port 1(bridge_slave_0) entered forwarding state [ 453.252476][ T687] bridge0: port 2(bridge_slave_1) entered blocking state [ 453.259742][ T687] bridge0: port 2(bridge_slave_1) entered forwarding state [ 453.320803][ T5786] usb 6-1: USB disconnect, device number 19 [ 453.398748][ T6365] hid_parser_main: 443 callbacks suppressed [ 453.398778][ T6365] arvo 0003:1E7D:30D4.0018: unknown main item tag 0x0 [ 453.446168][ T6365] arvo 0003:1E7D:30D4.0018: unknown main item tag 0x0 [ 453.472710][ T6365] arvo 0003:1E7D:30D4.0018: unknown main item tag 0x0 [ 453.489332][ T6365] arvo 0003:1E7D:30D4.0018: unknown main item tag 0x0 [ 453.493238][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 453.523763][ T6365] arvo 0003:1E7D:30D4.0018: unknown main item tag 0x0 [ 453.526851][ T990] usb 2-1: USB disconnect, device number 13 [ 453.530882][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 454.021417][ T6365] arvo 0003:1E7D:30D4.0018: unknown main item tag 0x0 [ 454.084044][ T990] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 454.139531][ T6365] arvo 0003:1E7D:30D4.0018: unknown main item tag 0x0 [ 454.177774][ T990] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 454.190106][ T6365] arvo 0003:1E7D:30D4.0018: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.0-1/input0 [ 454.250848][ T990] quatech2 2-1:0.51: device disconnected [ 454.515226][ T6365] usb 1-1: USB disconnect, device number 19 [ 454.532809][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 454.636685][ T9479] loop5: detected capacity change from 0 to 512 [ 454.654931][ T9471] fido_id[9471]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 454.720652][ T9479] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=884ec018, mo2=0002] [ 454.901406][ T9479] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 455.001356][ T9479] ext4 filesystem being mounted at /166/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 455.083796][ T9489] loop4: detected capacity change from 0 to 512 [ 455.124371][ T9489] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 455.210232][ T9489] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 455.243311][ T9489] ext4 filesystem being mounted at /169/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 455.575255][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 455.657770][ T9503] netlink: 'syz.0.1041': attribute type 2 has an invalid length. [ 455.708860][ T5634] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 455.765320][ T5633] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 456.499239][ T9517] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1042'. [ 456.612776][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 457.652708][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 457.687345][ T5637] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 457.874246][ T5637] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 457.941622][ T5637] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 457.999437][ T5637] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 458.066654][ T5637] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.116029][ T5637] usb 2-1: Product: syz [ 458.148525][ T5637] usb 2-1: Manufacturer: syz [ 458.212529][ T5637] usb 2-1: SerialNumber: syz [ 458.678462][ T5637] cdc_mbim 2-1:1.0: skipping garbage [ 458.692713][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 458.848600][ T9042] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 458.891660][ T9521] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 459.533250][ T31] audit: type=1326 audit(1780292460.497:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9561 comm="syz.3.1055" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7bb4f9ce59 code=0x0 [ 459.563410][ T9521] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 459.571261][ T5637] cdc_mbim 2-1:1.0: setting tx_max = 16384 [ 459.589860][ T5637] cdc_mbim 2-1:1.0: cdc-wdm0: USB WDM device [ 459.732912][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 459.951879][ T9565] loop0: detected capacity change from 0 to 40427 [ 459.974838][ T9565] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 459.982763][ T9565] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 459.994629][ T9565] F2FS-fs (loop0): invalid crc value [ 460.144135][ T9565] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 460.160776][ T9565] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 460.168764][ T9565] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 460.348966][ T31] audit: type=1800 audit(1780292461.317:14): pid=9565 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1056" name="file1" dev="loop0" ino=10 res=0 errno=0 [ 460.395035][ T5637] wwan wwan0: port wwan0mbim0 attached [ 460.597450][ T5637] cdc_mbim 2-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.1-1, CDC MBIM, ee:a9:27:d9:f2:16 [ 460.633180][ T10] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 460.754563][ T5631] syz-executor: attempt to access beyond end of device [ 460.754563][ T5631] loop0: rw=2051, sector=77824, nr_sectors = 968 limit=40427 [ 460.757281][ T5637] usb 2-1: USB disconnect, device number 14 [ 460.775234][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 460.780987][ T5631] F2FS-fs (loop0): Issue discard(9728, 9728, 121) failed, ret: -5 [ 460.829215][ T9042] veth0_vlan: entered promiscuous mode [ 460.860264][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 460.946948][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 460.993165][ T9042] veth1_vlan: entered promiscuous mode [ 461.009656][ T5637] cdc_mbim 2-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.1-1, CDC MBIM [ 461.068077][ T10] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 461.087082][ T9042] veth0_macvtap: entered promiscuous mode [ 461.150602][ T10] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 461.185942][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.190077][ T9042] veth1_macvtap: entered promiscuous mode [ 461.242347][ T5637] wwan wwan0: port wwan0mbim0 disconnected [ 461.269526][ T10] usb 6-1: config 0 descriptor?? [ 461.275021][ T9042] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 461.314200][ T9042] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 461.356709][ T133] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.385856][ T133] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.419212][ T133] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.459773][ T133] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.812886][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 461.915190][ T9589] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1063'. [ 461.947772][ T10] plantronics 0003:047F:FFFF.0019: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 462.082663][ T6568] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 462.117251][ T5637] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 462.120149][ T6568] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 462.281166][ T10] usb 6-1: USB disconnect, device number 20 [ 462.304631][ T5637] usb 2-1: Using ep0 maxpacket: 8 [ 462.327137][ T5637] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 462.359761][ T5637] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 462.361332][ T9597] fido_id[9597]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 462.406136][ T5637] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 462.583571][ T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 462.588852][ T5637] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 462.781681][ T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 462.852774][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 462.921504][ T5637] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 463.150418][ T5637] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 463.206642][ T5637] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.892691][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 463.958588][ T5637] usb 2-1: usb_control_msg returned -32 [ 464.447442][ T5637] usbtmc 2-1:16.0: can't read capabilities [ 464.802705][ T6365] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 464.932698][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 464.955043][ T6365] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 464.993410][ T6365] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 465.014046][ T5637] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 465.094009][ T6365] usb 1-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 465.158249][ T6365] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.190356][ T5637] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 465.204372][ T6365] usb 1-1: config 0 descriptor?? [ 465.225975][ T5637] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 465.280323][ T5637] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 465.320926][ T5637] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 465.391979][ T5637] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 465.666416][ T5637] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 465.688072][ T9644] netlink: 'syz.3.1074': attribute type 2 has an invalid length. [ 465.696077][ T5637] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 465.713558][ T5637] usb 7-1: Product: syz [ 465.722938][ T5637] usb 7-1: Manufacturer: syz [ 465.972695][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 466.629584][ T6365] hid-steam 0003:28DE:1142.001A: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.0-1/input0 [ 466.639758][ T5637] cdc_wdm 7-1:1.0: skipping garbage [ 466.691406][ T5637] cdc_wdm 7-1:1.0: skipping garbage [ 466.735886][ T6365] hid-steam 0003:28DE:1142.001A: Steam wireless receiver connected [ 466.767867][ T10] usb 2-1: USB disconnect, device number 15 [ 466.888866][ T5637] cdc_wdm 7-1:1.0: cdc-wdm1: USB WDM device [ 466.899128][ T9636] usbtmc 2-1:16.0: send_request_dev_dep_msg_in returned -19 [ 466.918534][ T5637] cdc_wdm 7-1:1.0: Unknown control protocol [ 466.981738][ T5637] usb 7-1: USB disconnect, device number 2 [ 467.012718][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 468.052712][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 468.193147][ T6365] hid-steam 0003:28DE:1142.001B: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.0-1/input0 [ 468.342372][ T6365] usb 1-1: USB disconnect, device number 20 [ 468.662089][ T9661] fido_id[9661]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 468.736608][ T6365] hid-steam 0003:28DE:1142.001A: Steam wireless receiver disconnected [ 468.921555][ T9667] loop3: detected capacity change from 0 to 4096 [ 469.009183][ T9667] EXT4-fs: Ignoring removed orlov option [ 469.015793][ T9665] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1080'. [ 469.092702][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 469.204409][ T9659] loop1: detected capacity change from 0 to 131072 [ 469.731072][ T9659] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 469.779717][ T9659] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 469.913493][ T9667] EXT4-fs (loop3): Test dummy encryption mode enabled [ 469.971296][ T9659] F2FS-fs (loop1): lookup inode (7) has corrupted xattr [ 469.987594][ T9659] F2FS-fs (loop1): lookup inode (7) has corrupted xattr [ 470.015957][ T9667] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 470.132709][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 470.255165][ T9667] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 470.450931][ T9683] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 470.652430][ T5632] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 470.866008][ T9693] netlink: 'syz.4.1090': attribute type 3 has an invalid length. [ 471.172695][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 472.213266][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 472.875126][ T6365] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 472.884377][ T24] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 473.073909][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 473.090281][ T6365] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 473.129302][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 473.142419][ T6365] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 473.170175][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 473.188443][ T6365] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 473.207242][ T24] usb 4-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 473.221598][ T6365] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 473.238860][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.248086][ T6365] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 473.252761][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 473.263799][ T24] usb 4-1: config 0 descriptor?? [ 473.287814][ T6365] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 473.339202][ T6365] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 473.365204][ T6365] usb 7-1: Product: syz [ 473.377474][ T6365] usb 7-1: Manufacturer: syz [ 473.424157][ T6365] cdc_wdm 7-1:1.0: skipping garbage [ 473.436873][ T6365] cdc_wdm 7-1:1.0: skipping garbage [ 473.461567][ T6365] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 473.478749][ T6365] cdc_wdm 7-1:1.0: Unknown control protocol [ 473.762387][ T24] hid-multitouch 0003:1FD2:6007.001C: unknown main item tag 0x0 [ 473.782359][ T24] hid-multitouch 0003:1FD2:6007.001C: unknown main item tag 0x0 [ 473.801607][ T24] hid-multitouch 0003:1FD2:6007.001C: item fetching failed at offset 2/5 [ 473.836893][ T24] hid-multitouch 0003:1FD2:6007.001C: probe with driver hid-multitouch failed with error -22 [ 473.883575][ T9728] loop5: detected capacity change from 0 to 64 [ 473.997711][ T6365] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 474.059460][ T30] usb 4-1: USB disconnect, device number 17 [ 474.193414][ T6365] usb 5-1: Using ep0 maxpacket: 8 [ 474.219115][ T6365] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 474.247817][ T6365] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 474.279953][ T6365] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 474.292763][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 474.301821][ T6365] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 474.333547][ T6365] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 474.384737][ T6365] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 474.412287][ T9736] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1101'. [ 474.417135][ T6365] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.583836][ T30] usb 7-1: USB disconnect, device number 3 [ 474.693697][ T6365] usb 5-1: usb_control_msg returned -32 [ 474.733539][ T6365] usbtmc 5-1:16.0: can't read capabilities [ 475.118248][ T9750] usbtmc 5-1:16.0: usb_control_msg returned -32 [ 475.146424][ T990] usb 5-1: USB disconnect, device number 23 [ 475.333006][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 475.488816][ T9760] loop6: detected capacity change from 0 to 64 [ 475.956595][ T9764] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1108'. [ 476.372717][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 476.374899][ T9770] loop0: detected capacity change from 0 to 512 [ 476.438129][ T9770] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 476.520614][ T9748] loop5: detected capacity change from 0 to 32768 [ 476.552472][ T9748] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1104 (9748) [ 476.656122][ T9772] loop6: detected capacity change from 0 to 4096 [ 476.684196][ T9770] EXT4-fs (loop0): 1 orphan inode deleted [ 476.719911][ T9770] EXT4-fs (loop0): 1 truncate cleaned up [ 476.746544][ T9770] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 476.783958][ T9777] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 476.836236][ T9770] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 476.846102][ T9772] NILFS (loop6): cannot delete checkpoints: invalid range [1, 0) [ 476.865018][ T9772] NILFS (loop6): error -22 preparing GC: cannot delete checkpoints [ 477.349615][ T9767] loop4: detected capacity change from 0 to 131072 [ 477.384559][ T9767] F2FS-fs (loop4): Wrong CP boundary, start(512) end(1536) blocks(0) [ 477.392791][ T9767] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 477.406390][ T9767] F2FS-fs (loop4): invalid crc value [ 477.412703][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 477.527631][ T9767] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 477.542499][ T9783] loop1: detected capacity change from 0 to 32768 [ 477.544334][ T9767] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 477.550264][ T9783] btrfs: Deprecated parameter 'usebackuproot' [ 477.556253][ T9767] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 477.562291][ T9783] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 477.580040][ T9783] BTRFS warning: excessive commit interval 65536, use with care [ 477.601320][ T9783] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1111 (9783) [ 477.619782][ T9783] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 477.630822][ T9783] BTRFS info (device loop1): using crc32c checksum algorithm [ 477.638305][ T9783] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 477.683572][ T5631] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 477.716275][ T9748] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 477.761296][ T9748] BTRFS info (device loop5): using sha256 checksum algorithm [ 477.860624][ T9782] loop3: detected capacity change from 0 to 8192 [ 477.899839][ T1150] BTRFS warning (device loop1): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0xb0e5ffa5 level 0 [ 477.937115][ T9783] BTRFS warning (device loop1): couldn't read tree root [ 477.937900][ T9748] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 477.945112][ T9783] BTRFS warning (device loop1): try to load backup roots slot 1 [ 477.965507][ T6322] BTRFS warning (device loop1): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x32d10ca2 level 0 [ 477.995160][ T9748] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 477.995526][ T9748] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 478.039581][ T9748] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 478.086562][ T9813] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 478.088740][ T9783] BTRFS warning (device loop1): couldn't read tree root [ 478.113371][ T9783] BTRFS warning (device loop1): try to load backup roots slot 2 [ 478.129192][ T687] BTRFS warning (device loop1): checksum verify failed on logical 5255168 mirror 1 wanted 0x9df47653 found 0x6344b7f5 level 1 [ 478.161911][ T9748] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 478.162251][ T9748] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 478.214509][ T9819] loop6: detected capacity change from 0 to 64 [ 478.227539][ T9783] BTRFS warning (device loop1): couldn't read tree root [ 478.238325][ T9783] BTRFS warning (device loop1): try to load backup roots slot 3 [ 478.311414][ T9783] BTRFS info (device loop1): rebuilding free space tree [ 478.315652][ T9819] hfs: Bad value for 'uid' [ 478.334434][ T9748] BTRFS error (device loop5): open_ctree failed: -12 [ 478.421125][ T9783] BTRFS info (device loop1): disabling free space tree [ 478.428250][ T9783] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 478.438826][ T9783] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 478.452974][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 478.505397][ T9783] BTRFS info (device loop1): checking UUID tree [ 478.515320][ T9783] BTRFS info (device loop1): enabling ssd optimizations [ 478.522351][ T9783] BTRFS info (device loop1): turning off barriers [ 478.528934][ T9783] BTRFS info (device loop1): turning on sync discard [ 478.536494][ T9783] BTRFS info (device loop1): enabling disk space caching [ 478.543626][ T9783] BTRFS info (device loop1): force clearing of disk cache [ 478.550864][ T9783] BTRFS info (device loop1): enabling auto defrag [ 478.557349][ T9783] BTRFS info (device loop1): trying to use backup root at mount time [ 478.566260][ T9783] BTRFS info (device loop1): max_inline set to 5 [ 479.033829][ T9833] loop0: detected capacity change from 0 to 256 [ 479.036652][ T5630] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 479.491059][ T9844] loop3: detected capacity change from 0 to 128 [ 479.497758][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 480.532850][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 480.862701][ T6365] usb 2-1: new low-speed USB device number 16 using dummy_hcd [ 481.105941][ T6365] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 481.205770][ T6365] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 481.280224][ T6365] usb 2-1: config 0 interface 0 has no altsetting 0 [ 481.341337][ T6365] usb 2-1: New USB device found, idVendor=05a4, idProduct=8003, bcdDevice= 0.00 [ 481.547003][ T6365] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.572720][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 481.665732][ T6365] usb 2-1: config 0 descriptor?? [ 481.689531][ T9852] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 482.612694][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 482.692267][ T9874] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 482.883144][ T5637] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 482.906058][ T6365] ortek 0003:05A4:8003.001D: unexpected long global item [ 483.010118][ T6365] ortek 0003:05A4:8003.001D: probe with driver ortek failed with error -22 [ 483.045126][ T5637] usb 6-1: Using ep0 maxpacket: 8 [ 483.076767][ T6365] usb 2-1: USB disconnect, device number 16 [ 483.093365][ T5637] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 483.148221][ T5637] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 483.191398][ T9879] Bluetooth: MGMT ver 1.23 [ 483.220028][ T9880] loop6: detected capacity change from 0 to 256 [ 483.228271][ T5637] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.295252][ T5637] usb 6-1: config 0 descriptor?? [ 483.629482][ T5637] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 483.652694][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 484.692692][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 484.822099][ T10] usb 6-1: USB disconnect, device number 21 [ 485.358402][ T9904] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1143'. [ 485.732694][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 486.210860][ T9908] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1145'. [ 486.288428][ T9896] loop6: detected capacity change from 0 to 32768 [ 486.335486][ T990] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 486.365137][ T9896] BTRFS: device fsid 3a375e4e-b156-4d76-a2ad-16e198ce1409 devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.1141 (9896) [ 486.423439][ T9896] BTRFS info (device loop6): first mount of filesystem 3a375e4e-b156-4d76-a2ad-16e198ce1409 [ 486.455140][ T9896] BTRFS info (device loop6): using xxhash64 checksum algorithm [ 486.518201][ T9919] loop4: detected capacity change from 0 to 256 [ 486.522836][ T990] usb 2-1: Using ep0 maxpacket: 8 [ 486.534510][ T24] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 486.543519][ T990] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 486.616942][ T990] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 486.660188][ T9896] BTRFS info (device loop6): enabling ssd optimizations [ 486.681236][ T990] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.710277][ T9896] BTRFS info (device loop6): turning on async discard [ 486.725935][ T24] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 486.752667][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 51544, setting to 1024 [ 486.753181][ T9896] BTRFS info (device loop6): enabling free space tree [ 486.773009][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 486.780915][ T990] usb 2-1: config 0 descriptor?? [ 486.782667][ T24] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 486.863708][ T29] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 486.894394][ T24] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 486.921460][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 486.957360][ T24] usb 4-1: Product: syz [ 486.971663][ T24] usb 4-1: Manufacturer: syz [ 486.983396][ T24] usb 4-1: SerialNumber: syz [ 486.996787][ T24] usb 4-1: config 0 descriptor?? [ 487.014306][ T9910] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 487.021527][ T9937] loop0: detected capacity change from 0 to 4096 [ 487.038897][ T9937] EXT4-fs (loop0): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 487.059059][ T29] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 246, changing to 11 [ 487.089049][ T31] audit: type=1800 audit(1780292488.057:15): pid=9896 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1141" name="file1" dev="loop6" ino=260 res=0 errno=0 [ 487.108610][ T29] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 487.148995][ T990] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 487.164665][ T9937] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 487.186837][ T9042] BTRFS info (device loop6): last unmount of filesystem 3a375e4e-b156-4d76-a2ad-16e198ce1409 [ 487.233325][ T29] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 487.270465][ T9910] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 487.297834][ T9937] EXT4-fs (loop0): shut down requested (2) [ 487.314300][ T5793] usb 2-1: USB disconnect, device number 17 [ 487.320309][ C1] iowarrior 2-1:0.0: iowarrior_callback - usb_submit_urb failed with result -19 [ 487.336569][ T29] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.396175][ T29] usb 6-1: config 0 descriptor?? [ 487.600469][ T5631] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 487.748829][ T24] usb 4-1: USB disconnect, device number 18 [ 487.812684][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 488.146272][ T29] kovaplus 0003:1E7D:2D50.001E: unknown main item tag 0x0 [ 488.580498][ T29] kovaplus 0003:1E7D:2D50.001E: unknown main item tag 0x0 [ 488.600237][ T29] kovaplus 0003:1E7D:2D50.001E: unknown main item tag 0x0 [ 488.616601][ T29] kovaplus 0003:1E7D:2D50.001E: unknown main item tag 0x0 [ 488.624736][ T29] kovaplus 0003:1E7D:2D50.001E: unknown main item tag 0x0 [ 488.631952][ T29] kovaplus 0003:1E7D:2D50.001E: unknown main item tag 0x0 [ 488.641619][ T29] kovaplus 0003:1E7D:2D50.001E: unknown main item tag 0x0 [ 488.651561][ T29] kovaplus 0003:1E7D:2D50.001E: unknown main item tag 0x0 [ 488.659986][ T29] kovaplus 0003:1E7D:2D50.001E: unknown main item tag 0x0 [ 488.668380][ T29] kovaplus 0003:1E7D:2D50.001E: unknown main item tag 0x0 [ 488.750849][ T9950] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1155'. [ 488.779092][ T29] kovaplus 0003:1E7D:2D50.001E: hidraw0: USB HID v7f.fd Device [HID 1e7d:2d50] on usb-dummy_hcd.5-1/input0 [ 488.852786][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 488.907218][ T7006] udevd[7006]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 488.928580][ T9950] ipvlan2: entered allmulticast mode [ 488.958455][ T9950] syz_tun: entered allmulticast mode [ 489.088569][ T29] kovaplus 0003:1E7D:2D50.001E: couldn't init struct kovaplus_device [ 489.099523][ T29] kovaplus 0003:1E7D:2D50.001E: couldn't install mouse [ 489.157700][ T29] kovaplus 0003:1E7D:2D50.001E: probe with driver kovaplus failed with error -71 [ 489.305583][ T29] usb 6-1: USB disconnect, device number 22 [ 489.464688][ T9955] fido_id[9955]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 489.902814][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 489.975421][ T9967] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1159'. [ 490.726226][ T9968] netlink: 'syz.3.1161': attribute type 2 has an invalid length. [ 490.932690][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 490.992879][ T9969] loop9: detected capacity change from 0 to 1 [ 491.049916][ T9969] Dev loop9: unable to read RDB block 1 [ 491.072274][ T9969] loop9: unable to read partition table [ 491.116079][ T9969] loop9: partition table beyond EOD, truncated [ 491.156015][ T9969] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 491.277019][ T9979] loop3: detected capacity change from 0 to 512 [ 491.291720][ T9979] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 491.781739][ T9988] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input16 [ 491.972910][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 492.298464][ T9979] EXT4-fs (loop3): 1 truncate cleaned up [ 492.325109][ T9979] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 493.023094][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 493.576251][ T29] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 493.591183][ T24] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 493.886125][ T29] usb 1-1: Using ep0 maxpacket: 32 [ 493.904852][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 493.906751][ T5632] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 493.931566][ T29] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 493.987983][ T24] usb 2-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 494.002138][ T29] usb 1-1: config 0 has no interface number 0 [ 494.052683][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 494.069186][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 494.235007][ T24] usb 2-1: Product: syz [ 494.293671][ T24] usb 2-1: Manufacturer: syz [ 494.326021][ T24] usb 2-1: SerialNumber: syz [ 494.388839][ T24] usb 2-1: config 0 descriptor?? [ 494.404264][T10002] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1172'. [ 494.439907][ T29] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 494.449357][ T24] usb 2-1: can't set config #0, error -71 [ 494.464465][ T29] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 494.489899][ T24] usb 2-1: USB disconnect, device number 18 [ 494.508545][ T29] usb 1-1: config 0 descriptor?? [ 494.531907][ T29] usb 1-1: can't set config #0, error -71 [ 494.566175][ T29] usb 1-1: USB disconnect, device number 21 [ 494.954068][T10013] loop0: detected capacity change from 0 to 128 [ 495.092694][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 495.698645][T10013] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 495.726649][T10013] ext4 filesystem being mounted at /218/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 495.910887][T10018] netlink: 'syz.6.1177': attribute type 2 has an invalid length. [ 496.132688][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 496.430789][ T5631] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 496.555558][T10029] loop6: detected capacity change from 0 to 128 [ 496.593474][ T24] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 496.604186][T10029] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 496.633513][T10029] ext4 filesystem being mounted at /17/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 496.778124][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 496.874062][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 496.912097][ T24] usb 5-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 496.932749][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 496.960933][ T24] usb 5-1: Product: syz [ 496.986218][ T24] usb 5-1: Manufacturer: syz [ 497.004422][ T5637] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 497.011679][ T24] usb 5-1: SerialNumber: syz [ 497.036263][ T9042] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 497.050516][T10045] loop3: detected capacity change from 0 to 256 [ 497.087339][T10045] exfat: Deprecated parameter 'utf8' [ 497.098749][ T24] usb 5-1: config 0 descriptor?? [ 497.113568][T10045] exfat: Deprecated parameter 'namecase' [ 497.136250][ T24] hub 5-1:0.0: bad descriptor, ignoring hub [ 497.160492][ T24] hub 5-1:0.0: probe with driver hub failed with error -5 [ 497.172701][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 497.179958][ T5637] usb 6-1: Using ep0 maxpacket: 8 [ 497.188630][T10047] loop1: detected capacity change from 0 to 128 [ 497.198280][ T24] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 497.202264][ T5637] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 497.224339][T10045] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe6e0c303, utbl_chksum : 0xe619d30d) [ 497.258109][ T5637] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 497.301288][ T5637] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 497.320532][ T5637] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 497.337131][ T5637] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 497.350390][ T5637] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.587859][ T5630] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 498.222694][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 498.531890][ T5637] usb 6-1: GET_CAPABILITIES returned 0 [ 498.552140][ T5637] usbtmc 6-1:16.0: can't read capabilities [ 498.560580][ T5630] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 498.593138][ T5637] usb 6-1: USB disconnect, device number 23 [ 498.707305][ T10] usb 5-1: USB disconnect, device number 24 [ 499.106695][T10065] netlink: 'syz.0.1194': attribute type 2 has an invalid length. [ 499.240472][T10063] netlink: 'syz.6.1195': attribute type 1 has an invalid length. [ 499.262683][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 499.931305][ T78] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 499.992390][ T78] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.292681][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 501.332671][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 501.341493][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.366451][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.413679][ T1313] ------------[ cut here ]------------ [ 501.422456][ T1313] !skb_transport_header_was_set(skb) [ 501.422478][ T1313] WARNING: ./include/linux/skbuff.h:3244 at lowpan_xmit+0xe84/0x1150, CPU#0: aoe_tx0/1313 [ 501.437817][ T1313] Modules linked in: [ 501.442168][ T1313] CPU: 0 UID: 0 PID: 1313 Comm: aoe_tx0 Tainted: G L syzkaller #0 PREEMPT(full) [ 501.452855][ T1313] Tainted: [L]=SOFTLOCKUP [ 501.457194][ T1313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 501.467333][ T1313] RIP: 0010:lowpan_xmit+0xe84/0x1150 [ 501.472706][ T1313] Code: 00 00 48 8b 8d a8 fe ff ff 0f b7 85 74 fe ff ff 4c 89 ff 48 01 81 40 02 00 00 e8 17 10 17 fe e9 7c fc ff ff e8 ed 2a c7 f6 90 <0f> 0b 90 e9 a8 f6 ff ff e8 df 2a c7 f6 90 0f 0b 90 e9 af f5 ff ff [ 501.492403][ T1313] RSP: 0018:ffffc90005d878a0 EFLAGS: 00010293 [ 501.498559][ T1313] RAX: 0000000000000000 RBX: ffffc90005d87930 RCX: ffffffff8b415af6 [ 501.506603][ T1313] RDX: ffff88802a3f0000 RSI: ffffffff8b416453 RDI: ffff88802a3f0000 [ 501.514648][ T1313] RBP: ffffc90005d87a40 R08: 0000000000000003 R09: 000000000000ffff [ 501.522675][ T1313] R10: 000000000000ffff R11: 0000000000000000 R12: ffff88807a7eae76 [ 501.530666][ T1313] R13: ffffc90005d87940 R14: ffff88802970ce50 R15: ffff88807a7eadc0 [ 501.538694][ T1313] FS: 0000000000000000(0000) GS:ffff888124384000(0000) knlGS:0000000000000000 [ 501.547948][ T1313] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 501.554589][ T1313] CR2: 0000555562d28a38 CR3: 0000000045fbd000 CR4: 0000000000350ef0 [ 501.562621][ T1313] Call Trace: [ 501.565908][ T1313] [ 501.568853][ T1313] ? __pfx_lowpan_xmit+0x10/0x10 [ 501.573871][ T1313] ? srso_alias_return_thunk+0x5/0xfbef5 [ 501.579536][ T1313] ? skb_network_protocol+0x2ce/0x3d0 [ 501.584982][ T1313] ? srso_alias_return_thunk+0x5/0xfbef5 [ 501.590646][ T1313] ? srso_alias_return_thunk+0x5/0xfbef5 [ 501.596358][ T1313] ? srso_alias_return_thunk+0x5/0xfbef5 [ 501.602029][ T1313] ? srso_alias_return_thunk+0x5/0xfbef5 [ 501.607735][ T1313] ? dev_hard_start_xmit+0x128/0x7a0 [ 501.613099][ T1313] ? __pfx_lowpan_xmit+0x10/0x10 [ 501.618083][ T1313] dev_hard_start_xmit+0x128/0x7a0 [ 501.623287][ T1313] __dev_queue_xmit+0x1baa/0x4950 [ 501.628477][ T1313] ? srso_alias_return_thunk+0x5/0xfbef5 [ 501.634184][ T1313] ? __schedule+0x12a7/0x67a0 [ 501.638896][ T1313] ? srso_alias_return_thunk+0x5/0xfbef5 [ 501.644624][ T1313] ? __pfx___dev_queue_xmit+0x10/0x10 [ 501.650076][ T1313] ? srso_alias_return_thunk+0x5/0xfbef5 [ 501.655785][ T1313] ? srso_alias_return_thunk+0x5/0xfbef5 [ 501.661453][ T1313] ? __lock_acquire+0x4a5/0x2630 [ 501.666468][ T1313] ? srso_alias_return_thunk+0x5/0xfbef5 [ 501.672139][ T1313] ? ref_tracker_free+0x37e/0x6c0 [ 501.677263][ T1313] ? srso_alias_return_thunk+0x5/0xfbef5 [ 501.682953][ T1313] ? do_raw_spin_lock+0x128/0x260 [ 501.688035][ T1313] ? srso_alias_return_thunk+0x5/0xfbef5 [ 501.693722][ T1313] ? rcu_is_watching+0x12/0xc0 [ 501.698557][ T1313] ? srso_alias_return_thunk+0x5/0xfbef5 [ 501.704250][ T1313] ? __pfx_tx+0x10/0x10 [ 501.708445][ T1313] tx+0xc4/0x130 [ 501.712041][ T1313] kthread+0x1d8/0x3c0 [ 501.716182][ T1313] ? __kthread_parkme+0xbb/0x230 [ 501.721162][ T1313] ? __pfx_kthread+0x10/0x10 [ 501.725876][ T1313] ? rcu_is_watching+0x12/0xc0 [ 501.730704][ T1313] ? srso_alias_return_thunk+0x5/0xfbef5 [ 501.736411][ T1313] ? __pfx_default_wake_function+0x10/0x10 [ 501.742278][ T1313] ? srso_alias_return_thunk+0x5/0xfbef5 [ 501.747995][ T1313] ? srso_alias_return_thunk+0x5/0xfbef5 [ 501.748367][ T29] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 501.753711][ T1313] ? __kthread_parkme+0x18c/0x230 [ 501.753835][ T1313] ? kthread+0x13a/0x450 [ 501.753874][ T1313] ? __pfx_kthread+0x10/0x10 [ 501.753928][ T1313] kthread+0x370/0x450 [ 501.753968][ T1313] ? __pfx_kthread+0x10/0x10 [ 501.754013][ T1313] ret_from_fork+0x72b/0xd50 [ 501.754062][ T1313] ? __pfx_ret_from_fork+0x10/0x10 [ 501.754109][ T1313] ? srso_alias_return_thunk+0x5/0xfbef5 [ 501.754158][ T1313] ? __switch_to+0x800/0x1100 [ 501.754213][ T1313] ? __switch_to_asm+0x39/0x70 [ 501.754264][ T1313] ? __pfx_kthread+0x10/0x10 [ 501.754309][ T1313] ret_from_fork_asm+0x1a/0x30 [ 501.754382][ T1313] [ 501.754402][ T1313] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 501.754433][ T1313] CPU: 0 UID: 0 PID: 1313 Comm: aoe_tx0 Tainted: G L syzkaller #0 PREEMPT(full) [ 501.754493][ T1313] Tainted: [L]=SOFTLOCKUP [ 501.754508][ T1313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 501.754532][ T1313] Call Trace: [ 501.754544][ T1313] [ 501.754559][ T1313] dump_stack_lvl+0x100/0x190 [ 501.754599][ T1313] vpanic+0x552/0x970 [ 501.754637][ T1313] ? __pfx_vpanic+0x10/0x10 [ 501.754689][ T1313] panic+0xd1/0xe0 [ 501.754725][ T1313] ? __pfx_panic+0x10/0x10 [ 501.754778][ T1313] ? check_panic_on_warn+0x1f/0x90 [ 501.754822][ T1313] check_panic_on_warn.cold+0x19/0x34 [ 501.754864][ T1313] ? lowpan_xmit+0xe84/0x1150 [ 501.754921][ T1313] __warn.cold+0x191/0x328 [ 501.754965][ T1313] __report_bug+0x296/0x3d0 [ 501.755016][ T1313] ? lowpan_xmit+0xe84/0x1150 [ 501.755077][ T1313] ? __pfx___report_bug+0x10/0x10 [ 501.755126][ T1313] ? srso_alias_return_thunk+0x5/0xfbef5 [ 501.755173][ T1313] ? debug_object_activate+0x331/0x490 [ 501.755221][ T1313] ? srso_alias_return_thunk+0x5/0xfbef5 [ 501.755272][ T1313] ? __pfx_debug_object_activate+0x10/0x10 [ 501.755320][ T1313] ? srso_alias_return_thunk+0x5/0xfbef5 [ 501.755366][ T1313] ? do_raw_spin_lock+0x128/0x260 [ 501.755429][ T1313] ? lowpan_xmit+0xe84/0x1150 [ 501.755495][ T1313] report_bug+0xb2/0x220 [ 501.755545][ T1313] ? lowpan_xmit+0xe84/0x1150 [ 501.755602][ T1313] handle_bug+0x16a/0x2a0 [ 501.755639][ T1313] exc_invalid_op+0x17/0x50 [ 501.755676][ T1313] asm_exc_invalid_op+0x1a/0x20 [ 501.755714][ T1313] RIP: 0010:lowpan_xmit+0xe84/0x1150 [ 501.755772][ T1313] Code: 00 00 48 8b 8d a8 fe ff ff 0f b7 85 74 fe ff ff 4c 89 ff 48 01 81 40 02 00 00 e8 17 10 17 fe e9 7c fc ff ff e8 ed 2a c7 f6 90 <0f> 0b 90 e9 a8 f6 ff ff e8 df 2a c7 f6 90 0f 0b 90 e9 af f5 ff ff [ 501.755809][ T1313] RSP: 0018:ffffc90005d878a0 EFLAGS: 00010293 [ 501.755841][ T1313] RAX: 0000000000000000 RBX: ffffc90005d87930 RCX: ffffffff8b415af6 [ 501.755867][ T1313] RDX: ffff88802a3f0000 RSI: ffffffff8b416453 RDI: ffff88802a3f0000 [ 501.755893][ T1313] RBP: ffffc90005d87a40 R08: 0000000000000003 R09: 000000000000ffff [ 501.755918][ T1313] R10: 000000000000ffff R11: 0000000000000000 R12: ffff88807a7eae76 [ 501.755942][ T1313] R13: ffffc90005d87940 R14: ffff88802970ce50 R15: ffff88807a7eadc0 [ 501.755981][ T1313] ? lowpan_xmit+0x526/0x1150 [ 501.756037][ T1313] ? lowpan_xmit+0xe83/0x1150 [ 501.756112][ T1313] ? __pfx_lowpan_xmit+0x10/0x10 [ 501.756171][ T1313] ? srso_alias_return_thunk+0x5/0xfbef5 [ 501.756218][ T1313] ? skb_network_protocol+0x2ce/0x3d0 [ 501.756277][ T1313] ? srso_alias_return_thunk+0x5/0xfbef5 [ 501.756322][ T1313] ? srso_alias_return_thunk+0x5/0xfbef5 [ 501.756381][ T1313] ? srso_alias_return_thunk+0x5/0xfbef5 [ 501.756431][ T1313] ? srso_alias_return_thunk+0x5/0xfbef5 [ 501.756493][ T1313] ? dev_hard_start_xmit+0x128/0x7a0 [ 501.756545][ T1313] ? __pfx_lowpan_xmit+0x10/0x10 [ 501.756601][ T1313] dev_hard_start_xmit+0x128/0x7a0 [ 501.756667][ T1313] __dev_queue_xmit+0x1baa/0x4950 [ 501.756731][ T1313] ? srso_alias_return_thunk+0x5/0xfbef5 [ 501.756777][ T1313] ? __schedule+0x12a7/0x67a0 [ 501.756829][ T1313] ? srso_alias_return_thunk+0x5/0xfbef5 [ 501.756877][ T1313] ? __pfx___dev_queue_xmit+0x10/0x10 [ 501.756934][ T1313] ? srso_alias_return_thunk+0x5/0xfbef5 [ 501.756986][ T1313] ? srso_alias_return_thunk+0x5/0xfbef5 [ 501.757032][ T1313] ? __lock_acquire+0x4a5/0x2630 [ 501.757078][ T1313] ? srso_alias_return_thunk+0x5/0xfbef5 [ 501.757126][ T1313] ? ref_tracker_free+0x37e/0x6c0 [ 501.757194][ T1313] ? srso_alias_return_thunk+0x5/0xfbef5 [ 501.757240][ T1313] ? do_raw_spin_lock+0x128/0x260 [ 501.757306][ T1313] ? srso_alias_return_thunk+0x5/0xfbef5 [ 501.757352][ T1313] ? rcu_is_watching+0x12/0xc0 [ 501.757404][ T1313] ? srso_alias_return_thunk+0x5/0xfbef5 [ 501.757458][ T1313] ? __pfx_tx+0x10/0x10 [ 501.757521][ T1313] tx+0xc4/0x130 [ 501.757581][ T1313] kthread+0x1d8/0x3c0 [ 501.757635][ T1313] ? __kthread_parkme+0xbb/0x230 [ 501.757693][ T1313] ? __pfx_kthread+0x10/0x10 [ 501.757743][ T1313] ? rcu_is_watching+0x12/0xc0 [ 501.757794][ T1313] ? srso_alias_return_thunk+0x5/0xfbef5 [ 501.757843][ T1313] ? __pfx_default_wake_function+0x10/0x10 [ 501.757904][ T1313] ? srso_alias_return_thunk+0x5/0xfbef5 [ 501.757952][ T1313] ? srso_alias_return_thunk+0x5/0xfbef5 [ 501.757998][ T1313] ? __kthread_parkme+0x18c/0x230 [ 501.758061][ T1313] ? kthread+0x13a/0x450 [ 501.758098][ T1313] ? __pfx_kthread+0x10/0x10 [ 501.758147][ T1313] kthread+0x370/0x450 [ 501.758186][ T1313] ? __pfx_kthread+0x10/0x10 [ 501.758229][ T1313] ret_from_fork+0x72b/0xd50 [ 501.758275][ T1313] ? __pfx_ret_from_fork+0x10/0x10 [ 501.758321][ T1313] ? srso_alias_return_thunk+0x5/0xfbef5 [ 501.758367][ T1313] ? __switch_to+0x800/0x1100 [ 501.758419][ T1313] ? __switch_to_asm+0x39/0x70 [ 501.758470][ T1313] ? __pfx_kthread+0x10/0x10 [ 501.758518][ T1313] ret_from_fork_asm+0x1a/0x30 [ 501.758591][ T1313] [ 501.762539][ T1313] Kernel Offset: disabled