last executing test programs: 43.354065634s ago: executing program 3 (id=297): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b", 0x4, 0x840, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000500)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x11000, 0x0, 0x0}, &(0x7f0000000000)=0x40) 43.061013913s ago: executing program 3 (id=302): sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x24, r1, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x88c0) 42.978897733s ago: executing program 3 (id=303): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x488}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0x3af4701e) 42.607173692s ago: executing program 3 (id=306): socket$kcm(0x10, 0x2, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) syz_mount_image$jfs(&(0x7f0000000100), &(0x7f0000000000)='./file1\x00', 0x101000e, &(0x7f0000000200)=ANY=[@ANYBLOB='nodiscard,discard=0x0000000000000007,usrquota,iocharset=cp866,nointegrity,integrity,nodiscard,integrity,uid=', @ANYRESHEX=0xee01, @ANYBLOB], 0x24, 0x61b6, &(0x7f00000075c0)="$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") mount$afs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000400)={[{@dyn}]}) 41.71698394s ago: executing program 3 (id=312): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000a80)={{0x2, 0x0, @empty}, {0x0, @link_local}, 0x4a, {}, 'lo\x00'}) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f00000002c0)={{0x2, 0x0, @broadcast}, {0x0, @dev}, 0x8, {0x2, 0x0, @empty}, 'lo\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 40.432480877s ago: executing program 3 (id=325): socket(0x10, 0x2, 0x0) unshare(0x28000600) sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xccf30000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) 40.137023237s ago: executing program 32 (id=325): socket(0x10, 0x2, 0x0) unshare(0x28000600) sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xccf30000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) 6.593392245s ago: executing program 1 (id=591): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da07000000000001090224000100000000090400000903000000092100000001222200090581030800000000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') 5.863866513s ago: executing program 5 (id=596): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4}}, 0x26) open_tree(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x4c, &(0x7f0000000080)={@local, @dev, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "014100", 0x16, 0x11, 0x0, @remote, @local, {[], {0x0, 0xe22, 0x16, 0x0, @gue={{0x8, 0x0, 0x0, 0x2, 0x0, @val=0xff7f0000}, "2775a7399c79"}}}}}}}, 0x0) 5.615276543s ago: executing program 5 (id=598): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xc, 0x0, &(0x7f0000000100)) 5.586275202s ago: executing program 5 (id=599): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'geneve0\x00'}]}]}]}], {0x14}}, 0x80}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14}}, 0x68}}, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 5.470180632s ago: executing program 5 (id=600): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000f40)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="02"], 0x10) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) 5.252518312s ago: executing program 5 (id=604): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000380)='hybla\x00', 0x6) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x240007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000003c0)="23004e4ee760d48ddc6b7a1ebfc6e0276028840fb20d5233e81c802684e8ac1dc195296ffaaeace75a07a630ee918f67beb970cd36769470f7acb5cd5becfa3839cec05a81f9488931e0a9ba9a246f45fee8b5240bd1e078539b56973bfbbee5a100668daf66ef25121ca65db1d172", 0x6f}], 0x1}}, {{0x0, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000000900)="676034be5732084752a15647d6f25ba03a3e945ba400b37ac439ca9ba45d96b3be36a94254e570753b66209fb6df6382bcd7567d8d36c0dd27d1c8663e9500db3cff2c1e219feb9c13dd75eee3c73be7c8c59b66273cdbf22504f8180c4b42993362b89d321a2c7c0a0375aafad803d22562", 0x72}], 0x1}}], 0x2, 0x0) 4.773113601s ago: executing program 5 (id=606): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000900), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000940)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000001000000280001800500020000000000060001000a000000140004"], 0x3c}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x28, r3, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x0) 3.867101809s ago: executing program 1 (id=613): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x8a, &(0x7f0000000000)={[{@jqfmt_vfsold}, {@usrjquota, 0x22}, {@errors_continue}, {@noload}, {@data_err_ignore}, {@grpjquota, 0x22}, {@errors_continue}, {@errors_remount}, {@noblock_validity}]}, 0xfe, 0x44e, &(0x7f0000000900)="$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") r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000054d564b"]) 3.571261638s ago: executing program 1 (id=615): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text16={0x10, &(0x7f0000000000)="9a0000b000f3660f0fe990673e360fc7330f20c06635100000000f22c0ba210066b84400000066ef0f01df66b8008000000f23d80f21f86635800000000f23f8672665260f01df0fc77800baf80c66b8356fa68a66efbafc0cec", 0x5a}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.193083017s ago: executing program 1 (id=616): connect$qrtr(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x10, &(0x7f0000000000), &(0x7f0000000080)=0xc) 2.893778437s ago: executing program 1 (id=617): r0 = syz_usb_connect(0x0, 0x5a, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000060f94d100d05020027230102030109024840020000000009047d04031d5abf0009050400005539000009050b00000000000009050200000005000009047d01013481af0009a00e00230000690009047dbe"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000b00)={0x1c, &(0x7f0000000100)={0x0, 0x0, 0x3, "943a7a"}, 0x0, 0x0}) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) 1.835941124s ago: executing program 2 (id=621): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xefd) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x7709, &(0x7f0000000100)='\x00\x00\x03\x06\x00\x00\x00\x01\x00x\x92\x12\xbc\x00\x00\xbb\x0642\x9c\x1a\xd1\xcbx\xb0\xd6\x1e\x10gQ\xca\x0e;\xf7\'\x8c\x95\x83=\t7\x96\x00\x00\x00\x00\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn\x05\x00\x00\x00-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \xac\xc4K\x03\xfa\x17Vz\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafd%\xf1\xdbjE\x01\xd1sD5hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\x851Y9OB\xdeB\xe1\x02-&\"\x01\x00\x00\x00\x01\x00\x00\x00\x00\xe4\x8e\"\x85\xc9x\xef\x81E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xdca\xfb\xa6\xff\xff\xff\xff\x00\x00\x00\x00d\xf0\xf1j\x11\x12\xc0\xbb\xfdq~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\xfc\xa6\xb1\x05\x94\x84l\xbfA\xeb\xd8\t\x00\x00\x00CvNhx461\x04N<\xed\x01\x01\x00\x00\x00\x00\x00\x00\xec\x92\x86uY\xf6\xb5\t?,~\xa67\\\xb9\xc9K\xf8\x9d\x96\xc0\xb5\xc7wF\x99\x12\x97T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xde/\xaahB\t\x97\a03\xcd\xb3\xc8\xd5l\x14!\xf9Xg2\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\xf2\x998\xc8\xc2|2\xee\xb4W\x99f.\xeb\xe9\x05\xcbkz3;\xdd\xe1*8\x95@0t0\xad\xe3#\xd7\x19\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a&Df8\x81I\x86l\x8f2\r:\xc1\x02\xd6Z%\xa7Ks\x8bUolS\x05\xbe\x00\xff\x7f\x00') 1.705909344s ago: executing program 2 (id=622): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) syz_usb_connect$hid(0x6, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 1.446214854s ago: executing program 0 (id=623): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0xe, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) recvmmsg(r0, &(0x7f0000001440)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000d80)=""/21, 0x15}, 0x1}], 0x1, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000580)=ANY=[], 0x8) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 1.403105573s ago: executing program 0 (id=624): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) tkill(0x0, 0x11) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x313) 1.194173533s ago: executing program 0 (id=625): r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000100)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r1, 0x80045017, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa0e65) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r2, 0xc0984124, &(0x7f0000000300)) 1.118115673s ago: executing program 2 (id=626): r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000080)='.\x00', 0x2000775) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = dup(r0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, 0x0) 1.087361003s ago: executing program 2 (id=627): r0 = fanotify_init(0x200, 0x0) r1 = memfd_create(&(0x7f0000000080)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb90a\xa9\xb2\x04\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) r2 = dup(r1) fanotify_mark(r0, 0x1, 0x8000009, r2, 0x0) ftruncate(r1, 0xdcb) copy_file_range(r1, &(0x7f0000000100)=0xb76, r2, 0x0, 0x2aad109b, 0x0) 1.071410993s ago: executing program 4 (id=628): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f00000004c0)="3ce2de4d8d957a8de4e490b6cd03b988d4edef164bd3377aa381b5f50b7ca414516489f78cd7208982e9bde22b2b7c1c7606d565477f3db9d2b077283644c0f27ab52a863a42863e06944e40a0b3c5d21c8cbe102e7f726263f28aef1bc12a069063d4c30e8f329fdb36859be727fbef4314161e5fb5f01ae00a2634d5cdecca2089c62e32f4c919886b2b88d237e287318739bec0364caf15889f38a312ef6621c0f21709a4bf2b16274cf933f6ad8fcc9c2024bc1b4713f650e860f93ae93b2361956b3e80c38c5fd29b5c1b5d7ce67edc856a8dc0ba54cee53de9a48c131389426bd06ec7c695add357934fc0321f0d3d7982e4fe5a0039decc491a663afd02facb08dd9695f854c7b031d9af8bd7350897996b5208b23030cc0feb84570730eaf24b9f2ac05d0feb3be07a29f887095f36f3c8f0e77e45509acd14a5be4a1572dd4cd1231087b830fa03e071571d4abd694710ef140469cf6df8a59839aafe046a5bffb97e5247be901789eafd726ba090337a2c49207e6b900c7e982472e6aac70e5d52ca2c1bab47b1f6d00f9601e2281686c21f770ae96e0ffec4b30496d012fa00958f794cdbd721bd155cae87", 0x109e8, 0x805, 0x0, 0x6) 1.024689893s ago: executing program 0 (id=629): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ssse3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)=@setneightbl={0x14, 0x43, 0x4, 0x70bd2b, 0x25dfdbfb, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4008800) r2 = openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x3f) 903.551152ms ago: executing program 2 (id=630): r0 = epoll_create1(0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000400)={0xa}) epoll_pwait(r0, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x20000) 903.281162ms ago: executing program 4 (id=631): unshare(0x2a020400) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0xa000, 0x1da) unshare(0x2000400) r1 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000), 0x0) close(r0) 829.644932ms ago: executing program 0 (id=632): socket$packet(0x11, 0xa, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000680)=ANY=[@ANYBLOB="000086dd000411000400000000006eec00be00442f0100000000000000000000ffff7f000001ff020000000000000000000000000001"], 0x7a) 779.246382ms ago: executing program 4 (id=633): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000480)=0x8000, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) recvmmsg(r0, &(0x7f0000004740)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 562.935471ms ago: executing program 0 (id=634): syz_mount_image$ocfs2(&(0x7f0000004480), &(0x7f00000044c0)='./file1\x00', 0x2800400, &(0x7f00000001c0)=ANY=[@ANYBLOB="6c6f63616c616c6c6f633d31383434363734343037333730393535313630382c726573765f6c6576656c3d30303030303030303030303030303030303030322c6865617274626561743d6e6f6e652c636f686572656e63793d62756666657265642c6572726f72733d636f6e74696e75652c6e6f696e74722c636f686572656e63793d66756c6c2c6e6f61636c2c636f686572656e63793d66756c6c2c646174613d6f7264657265642c00a6bbbf4f1c4504306b696ca06d68050cb923a33e2abc783fb375edc4c5f0f579bf2195c3cc88165b8c279abaa84a848971253cb6e898fee96fa6"], 0x8, 0x4477, &(0x7f0000008c00)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1ff) r0 = syz_io_uring_setup(0xd0, &(0x7f0000000480), &(0x7f00000000c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0) 562.700091ms ago: executing program 4 (id=635): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f7", 0x1}], 0x1}], 0x1, 0x0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 481.544642ms ago: executing program 4 (id=636): syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000540)='./file1\x00', 0x320c81c, &(0x7f0000000380)=ANY=[@ANYBLOB="636865636b3d7374726963742c6d61703d61636f726e2c686964652c6e6f726f636b2c636865636b3d72656c617865642c6e6f6a6f6c6965742c6d6f64653d3078303030303030303030303030303030302c626c6f636b3d3078303030303030303030303030303430302c00ef49cf86458fe7d77ad665fd54ecde2920ecf341fdc99e3dd3bbb43add61fbd65ef0936a80c2f39e63"], 0x1, 0x54e, &(0x7f0000001040)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000080)=@shmem={0xc, 0x1, {0x1e}}, 0x10000) r1 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r1, 0x0, &(0x7f0000000080)='ro\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) 119.115321ms ago: executing program 1 (id=637): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = eventfd(0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000080)={r2, 0x1, 0x2}) syz_mount_image$fuse(&(0x7f00000001c0), 0x0, 0x6000, 0x0, 0x1, 0x0, 0x0) 20.42949ms ago: executing program 2 (id=638): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000300)={0x0, 0x8, 0x4000006, 0x3}, 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback}], 0x2c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) recvmmsg(r0, &(0x7f0000007bc0)=[{{0x0, 0x0, &(0x7f00000052c0)=[{&(0x7f0000004f80)=""/94, 0x5e}, {&(0x7f0000005000)=""/70, 0x46}, {&(0x7f0000005080)=""/60, 0x3c}, {&(0x7f0000005140)=""/136, 0x88}, {&(0x7f0000005240)=""/78, 0x4e}], 0x5}, 0x100}, {{0x0, 0x0, &(0x7f0000005800)=[{0x0, 0x62}, {&(0x7f0000005480)=""/215, 0xd7}, {&(0x7f0000005580)=""/57, 0x39}, {&(0x7f0000005700)=""/57, 0x39}, {&(0x7f0000005740)=""/151, 0x97}], 0x5}, 0x626a34a2}, {{0x0, 0x0, &(0x7f0000005940)=[{0x0}], 0x1}, 0x2}, {{0x0, 0x0, 0x0}, 0x55}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000005b00)=""/39, 0x27}, {&(0x7f0000000440)=""/81}, {&(0x7f0000000100)=""/24}, {&(0x7f00000003c0)=""/26}], 0x1}, 0x7f}, {{0x0, 0x0, &(0x7f0000005f00)=[{&(0x7f0000005d80)=""/171, 0xab}], 0x1}, 0xedbb}, {{0x0, 0x0, 0x0}, 0x204}], 0x7, 0x40000000, 0x0) 0s ago: executing program 4 (id=639): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000002600)='\x00\x00\x03\x06\x00\x00\x00\x05\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80`4/\xe9\x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|c\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\x16\\n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x04;\xc5[\nja\xb9\'\xc9#\xfcx\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~~\x84\\\xe4\x00B\x05\xd4\xea\xea\x7f=\xc6:\\N\xc3\xb7Vw\xc6\x9c\x96s\xaaHL\x96\xc72\n\x18Ynj\xceTS\xfbl\x0f\x9f8M\f\x89\xa1\xd2Hs`\x8bp\x8a\xc4%\xf8\x1d3\nV\x9a\xaf\x1f\xf96^\x93\xc1\xaf)\rg\x86\xd6\xea\xa9\x0f\x9a\xf1V\x1b\xbf\x8b\'-\xab\x8e\t7\xd3\xf7\xa9v\xfbY\xe6\x9b^d\x8c\xb1\xdd') mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000300)='\x00\x00\x00\x06\x00\x00\x00\x01\x00x\x92\x12\xbc\x00\x00\xbb\x0642\x9c\x1a\xd1\xcbx\xb0\xd6\x1e\x10gQ\xca\x0e;\xf7\'\x8c\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn\x05\x00\x00\x00-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \xac\xc4K\x03\xfa\x13Vz\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafd%\xf1\xdbjE\x01\xd1sD5hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\x851Y9OB\xdeB\xe1\x02-&\"1hS\x92\xe4$-\x02\x00\xe4\x8e\"\x85\xc9x\xef\x81E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xdca\xfb\xa6\xff\xff\xff\xff\x00\x00\x00\x00d\xf0\xf1j\x11\x12\xc0\xbb\xfdq~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\xfc\xa6\xb1\x05\x94\x84l\xbfA\xeb\xd8\t\x00\x00\x00CvNhx461\x04N<\xedV\xcet\xaa~\xf3j\x94\xec\x92\x86uY\xf6\xb5\t?,~\xa67\\\xb9\xc9K\xf8\x9d\x96\xc0\xb5\xc7wF\x99\x12\x97T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xde/\xaahB\t\x97\a03\xcd\xb3\xc8\xd5l\x14!\xf9Xg2\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\xf2\x998\xc8\xc2|2\xee\xb4W\x99f.\xeb\xe9\x05\xcbkz3+\xdd\xe1*8\x95@0t0\xad\xe3#\xd7\x19\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a8\x81I\x86l\x8f2\r:\xc1\x02\xd6Z%\xa7Ks\x8bUolS\x05\xbe\x97\x1fGe\x94\xa6\xa3\xab\xdb\r\x17\xff[\xb1\x00\xff\x7f\x00\x00\x00\x00') kernel console output (not intermixed with test programs): usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 62.807549][ T4211] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 62.817170][ T4211] usb 1-1: SerialNumber: syz [ 62.838025][ T4267] XFS (loop3): Ending clean mount [ 62.885894][ T4316] loop2: detected capacity change from 0 to 4096 [ 62.915733][ T4267] XFS (loop3): Quotacheck needed: Please wait. [ 62.930034][ T4316] ntfs: (device loop2): parse_options(): Invalid umask option argument: 000¤0000000000000000777 [ 63.044850][ T4267] XFS (loop3): Quotacheck: Done. [ 63.134895][ T4211] usb 1-1: 0:2 : does not exist [ 63.257416][ T4211] usb 1-1: USB disconnect, device number 2 [ 63.294385][ T4267] XFS (loop3): User initiated shutdown received. [ 63.358554][ T4267] XFS (loop3): Log I/O Error (0x6) detected at xfs_fs_goingdown+0xde/0x150 (fs/xfs/xfs_fsops.c:491). Shutting down filesystem. [ 63.408260][ T4267] XFS (loop3): Please unmount the filesystem and rectify the problem(s) [ 63.485623][ T4175] XFS (loop3): Unmounting Filesystem [ 63.610741][ T4338] loop2: detected capacity change from 0 to 128 [ 63.679705][ T4338] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 63.697839][ T4338] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 64.100232][ T4356] loop4: detected capacity change from 0 to 8 [ 64.137316][ T4358] loop1: detected capacity change from 0 to 1024 [ 64.161286][ T4360] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 64.176049][ T4356] SQUASHFS error: xz decompression failed, data probably corrupt [ 64.188250][ T1325] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 64.194130][ T4356] SQUASHFS error: Failed to read block 0x108: -5 [ 64.203903][ T4356] SQUASHFS error: Unable to read metadata cache entry [106] [ 64.225666][ T4356] SQUASHFS error: Unable to read inode 0x11f [ 64.428372][ T1325] usb 4-1: Using ep0 maxpacket: 32 [ 64.548694][ T1325] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 64.557098][ T1325] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 64.579493][ T4372] loop2: detected capacity change from 0 to 256 [ 64.588224][ T1325] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 64.600037][ T1325] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 64.618257][ T1325] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 64.636056][ T1325] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 64.698557][ T1325] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 64.737063][ T1325] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.780047][ T1325] usb 4-1: config 0 descriptor?? [ 64.828339][ T4383] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 64.934026][ T4386] loop1: detected capacity change from 0 to 2048 [ 65.043333][ T1325] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 65.147916][ T4386] EXT4-fs (loop1): mounted filesystem without journal. Opts: nombcache,usrjquota=,user_xattr,norecovery,auto_da_alloc,usrquota,minixdf,barrier=0x0000000000000000,jqfmt=vfsv0,dax=inode,,errors=continue. Quota mode: writeback. [ 65.197771][ T4396] loop2: detected capacity change from 0 to 4096 [ 65.260535][ T4396] ntfs: volume version 3.1. [ 65.388290][ C0] usblp0: nonzero read bulk status received: -71 [ 65.394462][ T4213] usb 4-1: USB disconnect, device number 2 [ 65.416382][ T4345] usblp0: removed [ 65.446590][ T4402] loop1: detected capacity change from 0 to 512 [ 65.478286][ T1325] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 65.504487][ T4402] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 65.524190][ T4402] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 65.578731][ T4402] EXT4-fs error (device loop1): __ext4_iget:4872: inode #11: block 2: comm syz.1.57: invalid block [ 65.696351][ T4402] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.57: couldn't read orphan inode 11 (err -117) [ 65.710058][ T4402] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 65.837916][ T4402] EXT4-fs error (device loop1): ext4_check_dx_root:2266: inode #2: comm syz.1.57: Corrupt dir, invalid name_len for '..', running e2fsck is recommended [ 65.871743][ T1325] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 65.894345][ T1325] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 65.978553][ T1325] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 65.988892][ T4418] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 66.018427][ T1325] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 66.036701][ T1325] usb 1-1: SerialNumber: syz [ 66.244342][ T4415] loop2: detected capacity change from 0 to 32768 [ 66.322133][ T1325] usb 1-1: 0:2 : does not exist [ 66.334918][ T1325] usb 1-1: USB disconnect, device number 3 [ 66.372391][ T4415] XFS (loop2): Mounting V5 Filesystem [ 66.516566][ T4415] XFS (loop2): Ending clean mount [ 66.535876][ T4415] XFS (loop2): Quotacheck needed: Please wait. [ 66.549343][ T4278] udevd[4278]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 66.571126][ T4423] loop3: detected capacity change from 0 to 40427 [ 66.603852][ T4443] device wireguard0 entered promiscuous mode [ 66.616098][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): wireguard0: link becomes ready [ 66.626289][ T4415] XFS (loop2): Quotacheck: Done. [ 66.645790][ T4423] F2FS-fs (loop3): invalid crc value [ 66.666804][ T4423] F2FS-fs (loop3): Found nat_bits in checkpoint [ 66.792953][ T4173] XFS (loop2): Unmounting Filesystem [ 66.793122][ T4423] F2FS-fs (loop3): Start checkpoint disabled! [ 66.825911][ T4423] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 66.953204][ T26] audit: type=1800 audit(1736877133.135:2): pid=4423 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.66" name="file1" dev="loop3" ino=10 res=0 errno=0 [ 67.010393][ T26] audit: type=1800 audit(1736877133.195:3): pid=4423 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.66" name="file1" dev="loop3" ino=10 res=0 errno=0 [ 67.233684][ T4224] attempt to access beyond end of device [ 67.233684][ T4224] loop3: rw=2049, want=40976, limit=40427 [ 67.261579][ T4455] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 67.448475][ T4211] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 67.465457][ T4448] loop0: detected capacity change from 0 to 32768 [ 67.511039][ T4448] XFS: ikeep mount option is deprecated. [ 67.528295][ T4213] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 67.545570][ T4463] loop1: detected capacity change from 0 to 256 [ 67.584305][ T4463] exfat: Deprecated parameter 'utf8' [ 67.607251][ T4463] exfat: Deprecated parameter 'utf8' [ 67.617342][ T4448] XFS (loop0): Mounting V5 Filesystem [ 67.636174][ T4463] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x23a77120, utbl_chksum : 0xe619d30d) [ 67.688253][ T4211] usb 5-1: Using ep0 maxpacket: 16 [ 67.753552][ T4448] XFS (loop0): Ending clean mount [ 67.762823][ T4448] XFS (loop0): Quotacheck needed: Please wait. [ 67.796245][ T4448] XFS (loop0): Quotacheck: Done. [ 67.796320][ T4477] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 67.821642][ T4211] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 67.839860][ T4211] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 67.860529][ T4211] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 67.886755][ T4479] Zero length message leads to an empty skb [ 67.905829][ T4169] XFS (loop0): Unmounting Filesystem [ 67.918463][ T4213] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 67.945216][ T4213] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 67.964884][ T4213] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 67.983758][ T4213] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 67.994890][ T4213] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.019453][ T4213] usb 3-1: config 0 descriptor?? [ 68.058579][ T4211] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 68.082582][ T4211] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.105981][ T4211] usb 5-1: Product: syz [ 68.115670][ T4211] usb 5-1: Manufacturer: syz [ 68.120827][ T4211] usb 5-1: SerialNumber: syz [ 68.418439][ T4170] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 68.529516][ T4213] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 68.539945][ T4213] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 68.565122][ T4213] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 68.608500][ T4211] usb 5-1: 2:1 : format type 0 is detected, processed as PCM [ 68.828541][ T4212] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 68.851219][ T1325] usb 3-1: USB disconnect, device number 2 [ 68.853646][ T4170] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 68.868659][ T4501] Illegal XDP return value 111030077, expect packet loss! [ 68.888295][ T4170] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 68.897188][ T4170] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 68.915471][ T4170] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.927496][ T4170] usb 2-1: config 0 descriptor?? [ 68.969732][ T4170] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 68.980086][ T4170] dvb-usb: bulk message failed: -22 (3/0) [ 68.990843][ T4170] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 69.033538][ T4170] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 69.041553][ T4170] usb 2-1: media controller created [ 69.047953][ T4170] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 69.064052][ T4170] dvb-usb: bulk message failed: -22 (6/0) [ 69.070749][ T4170] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 69.119867][ T4170] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input5 [ 69.138427][ T4170] dvb-usb: schedule remote query interval to 150 msecs. [ 69.145411][ T4170] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 69.198560][ T4212] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 69.225613][ T4212] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 69.241662][ T4212] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 69.256747][ T4212] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 69.273776][ T4212] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.287122][ T4212] usb 1-1: config 0 descriptor?? [ 69.300904][ T4213] dvb-usb: bulk message failed: -22 (1/0) [ 69.307960][ T4213] dvb-usb: error while querying for an remote control event. [ 69.361784][ T4509] loop2: detected capacity change from 0 to 256 [ 69.390826][ T4509] FAT-fs (loop2): Directory bread(block 64) failed [ 69.397604][ T4509] FAT-fs (loop2): Directory bread(block 65) failed [ 69.404398][ T4509] FAT-fs (loop2): Directory bread(block 66) failed [ 69.411330][ T4509] FAT-fs (loop2): Directory bread(block 67) failed [ 69.418009][ T4509] FAT-fs (loop2): Directory bread(block 68) failed [ 69.424713][ T4509] FAT-fs (loop2): Directory bread(block 69) failed [ 69.435095][ T4509] FAT-fs (loop2): Directory bread(block 70) failed [ 69.437782][ T4213] usb 2-1: USB disconnect, device number 2 [ 69.441890][ T4509] FAT-fs (loop2): Directory bread(block 71) failed [ 69.442014][ T4509] FAT-fs (loop2): Directory bread(block 72) failed [ 69.442044][ T4509] FAT-fs (loop2): Directory bread(block 73) failed [ 69.488424][ T4211] usb 5-1: 2:1: cannot get freq at ep 0x82 [ 69.501705][ T4213] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 69.610965][ T4211] usb 5-1: USB disconnect, device number 2 [ 69.651889][ T4224] attempt to access beyond end of device [ 69.651889][ T4224] loop2: rw=1, want=1352, limit=256 [ 69.770067][ T4212] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 69.801316][ T4212] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 69.820258][ T4517] loop3: detected capacity change from 0 to 128 [ 69.829687][ T4212] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 69.840924][ T4212] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 69.870217][ T4517] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 69.881211][ T4510] udevd[4510]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 69.994110][ T4224] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 70.094165][ T4211] usb 1-1: USB disconnect, device number 4 [ 70.179368][ T4527] loop1: detected capacity change from 0 to 64 [ 70.406017][ T4165] hfs: node 4:3 still has 1 user(s)! [ 70.410262][ T4519] loop2: detected capacity change from 0 to 32768 [ 70.463012][ T4537] process 'syz.1.105' launched './file1' with NULL argv: empty string added [ 70.518065][ T4519] blk_update_request: I/O error, dev loop14, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 70.547412][ T4519] lbmIODone: I/O error in JFS log [ 70.555184][ T4519] *** Log Format Error ! *** [ 70.567041][ T4519] lmLogInit: exit(-22) [ 70.571770][ T4519] lmLogOpen: exit(-22) [ 70.631130][ T4519] blk_update_request: I/O error, dev loop14, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 70.643991][ T23] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 70.677205][ T4519] lbmIODone: I/O error in JFS log [ 70.686895][ T4519] *** Log Format Error ! *** [ 70.694269][ T4519] lmLogInit: exit(-22) [ 70.699365][ T4519] lmLogOpen: exit(-22) [ 70.919385][ T23] usb 4-1: Using ep0 maxpacket: 16 [ 71.011394][ T4557] block nbd1: NBD_DISCONNECT [ 71.033268][ T4557] block nbd1: Disconnected due to user request. [ 71.042478][ T4557] block nbd1: shutting down sockets [ 71.079478][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 71.105170][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 71.151047][ T23] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 71.171072][ T4560] loop0: detected capacity change from 0 to 8192 [ 71.178367][ T23] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 71.179661][ T4567] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 71.187413][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.237386][ T23] usb 4-1: config 0 descriptor?? [ 71.256553][ T4566] loop4: detected capacity change from 0 to 4096 [ 71.294159][ T4560] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 71.305904][ T4560] REISERFS (device loop0): using ordered data mode [ 71.314024][ T4560] reiserfs: using flush barriers [ 71.330421][ T4560] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 71.354229][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.364775][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.439360][ T4560] REISERFS (device loop0): checking transaction log (loop0) [ 71.504344][ T4560] REISERFS (device loop0): Using r5 hash to sort names [ 71.586189][ T4560] reiserfs: enabling write barrier flush mode [ 71.594703][ T4576] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 71.660916][ T4560] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 71.663858][ T4578] batman_adv: batadv0: Adding interface: macsec1 [ 71.707545][ T4578] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.762749][ T23] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0003/input/input6 [ 71.799796][ T4578] batman_adv: batadv0: Not using interface macsec1 (retrying later): interface not active [ 71.895723][ T23] microsoft 0003:045E:07DA.0003: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 72.158948][ T23] usb 4-1: USB disconnect, device number 3 [ 72.188007][ T4587] loop4: detected capacity change from 0 to 2048 [ 72.276727][ T4587] EXT4-fs (loop4): Ignoring removed nobh option [ 72.369188][ T4587] EXT4-fs (loop4): mounted filesystem without journal. Opts: quota,bsdgroups,nobh,nodelalloc,abort,,errors=continue. Quota mode: writeback. [ 72.399556][ T4587] ext4 filesystem being mounted at /25/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.564368][ T4604] input: syz0 as /devices/virtual/input/input7 [ 72.773808][ T4610] loop3: detected capacity change from 0 to 128 [ 72.836924][ T4613] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 72.889793][ T4610] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 72.895605][ T4591] loop2: detected capacity change from 0 to 32768 [ 72.908370][ T4213] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 72.954922][ T4615] loop4: detected capacity change from 0 to 1024 [ 73.046671][ T4591] XFS (loop2): Mounting V5 Filesystem [ 73.135828][ T154] hfsplus: b-tree write err: -5, ino 4 [ 73.142696][ T26] audit: type=1326 audit(1736877139.325:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4626 comm="syz.3.142" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3bbc900d29 code=0x0 [ 73.165021][ T4213] usb 2-1: Using ep0 maxpacket: 16 [ 73.285593][ T4591] XFS (loop2): Ending clean mount [ 73.298490][ T4213] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 73.310174][ T4213] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 73.317297][ T4591] XFS (loop2): Quotacheck needed: Please wait. [ 73.320038][ T4213] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 73.320063][ T4213] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.351769][ T4213] usb 2-1: config 0 descriptor?? [ 73.392789][ T4591] XFS (loop2): Quotacheck: Done. [ 73.532602][ T4173] XFS (loop2): Unmounting Filesystem [ 73.753552][ T4636] loop4: detected capacity change from 0 to 32768 [ 73.818971][ T4636] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.144 (4636) [ 73.836101][ T4213] lua 0003:1E7D:2C2E.0004: hidraw0: USB HID v0.00 Device [HID 1e7d:2c2e] on usb-dummy_hcd.1-1/input0 [ 73.932449][ T4636] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 73.948796][ T4640] loop2: detected capacity change from 0 to 1024 [ 73.984897][ T4636] BTRFS info (device loop4): setting nodatacow, compression disabled [ 74.005975][ T4638] loop0: detected capacity change from 0 to 40427 [ 74.016913][ T4636] BTRFS info (device loop4): setting datacow [ 74.023726][ T4636] BTRFS info (device loop4): doing ref verification [ 74.031380][ T4636] BTRFS info (device loop4): force clearing of disk cache [ 74.040156][ T4636] BTRFS info (device loop4): turning off barriers [ 74.046782][ T4636] BTRFS info (device loop4): enabling ssd optimizations [ 74.054342][ T4636] BTRFS info (device loop4): using spread ssd allocation scheme [ 74.065674][ T4606] udc-core: couldn't find an available UDC or it's busy [ 74.074785][ T4636] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_LZO (0x8) [ 74.086761][ T4606] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 74.097433][ T4212] usb 2-1: USB disconnect, device number 3 [ 74.105895][ T4636] BTRFS info (device loop4): force lzo compression, level 0 [ 74.132915][ T4636] BTRFS info (device loop4): using free space tree [ 74.142177][ T4636] BTRFS info (device loop4): has skinny extents [ 74.150897][ T4638] F2FS-fs (loop0): invalid crc value [ 74.215254][ T4638] F2FS-fs (loop0): Found nat_bits in checkpoint [ 74.331750][ T4638] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 74.377852][ T4636] BTRFS info (device loop4): clearing free space tree [ 74.398865][ T4636] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 74.415194][ T4636] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 74.456007][ T4636] BTRFS info (device loop4): creating free space tree [ 74.465338][ T4636] BTRFS info (device loop4): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 74.475704][ T4636] BTRFS info (device loop4): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 74.557819][ T4638] F2FS-fs (loop0) : inject no more block in inc_valid_block_count of __allocate_data_block+0x492/0xb60 [ 74.599971][ T4672] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 74.624138][ T4673] attempt to access beyond end of device [ 74.624138][ T4673] loop0: rw=2049, want=49160, limit=40427 [ 74.674657][ T26] audit: type=1800 audit(1736877140.855:5): pid=4675 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.144" name="file2" dev="loop4" ino=261 res=0 errno=0 [ 74.771593][ T26] audit: type=1326 audit(1736877140.925:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4678 comm="syz.2.151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85e828cd29 code=0x7ffc0000 [ 74.809853][ T4169] attempt to access beyond end of device [ 74.809853][ T4169] loop0: rw=2049, want=45104, limit=40427 [ 74.843785][ T26] audit: type=1326 audit(1736877140.935:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4678 comm="syz.2.151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f85e828cd29 code=0x7ffc0000 [ 74.914161][ T26] audit: type=1326 audit(1736877140.935:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4678 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85e828cd29 code=0x7ffc0000 [ 74.964909][ T26] audit: type=1326 audit(1736877140.935:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4678 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f85e828cd29 code=0x7ffc0000 [ 75.037019][ T4685] loop2: detected capacity change from 0 to 512 [ 75.082382][ T26] audit: type=1326 audit(1736877140.935:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4678 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85e828cd29 code=0x7ffc0000 [ 75.167105][ T26] audit: type=1326 audit(1736877140.935:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4678 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f85e828cd29 code=0x7ffc0000 [ 75.190972][ T4685] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 75.298658][ T26] audit: type=1326 audit(1736877140.945:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4678 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85e828cd29 code=0x7ffc0000 [ 75.418256][ T26] audit: type=1326 audit(1736877140.945:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4678 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f85e828cd29 code=0x7ffc0000 [ 75.500885][ T4685] EXT4-fs error (device loop2): ext4_orphan_get:1401: inode #17: comm syz.2.156: iget: bad i_size value: -6917529027641081756 [ 75.530018][ T4685] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.156: couldn't read orphan inode 17 (err -117) [ 75.561271][ T4685] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 75.694136][ T4677] loop1: detected capacity change from 0 to 32768 [ 75.759158][ T4677] XFS: attr2 mount option is deprecated. [ 75.840463][ T4677] XFS (loop1): Mounting V5 Filesystem [ 75.873953][ T4711] loop3: detected capacity change from 0 to 1024 [ 75.914361][ T4698] loop0: detected capacity change from 0 to 32768 [ 75.947261][ T4721] netlink: 148 bytes leftover after parsing attributes in process `syz.4.155'. [ 75.953095][ T4677] XFS (loop1): Ending clean mount [ 75.969306][ T4698] XFS: ikeep mount option is deprecated. [ 76.045342][ T4698] XFS (loop0): Mounting V5 Filesystem [ 76.151444][ T4729] loop2: detected capacity change from 0 to 4096 [ 76.167199][ T4725] loop4: detected capacity change from 0 to 512 [ 76.219204][ T4698] XFS (loop0): Ending clean mount [ 76.228103][ T4725] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 76.239466][ T4725] UDF-fs: Scanning with blocksize 512 failed [ 76.266872][ T4165] XFS (loop1): Unmounting Filesystem [ 76.274642][ T4725] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 76.330079][ T4725] UDF-fs: Scanning with blocksize 1024 failed [ 76.343075][ T4698] XFS (loop0): Quotacheck needed: Please wait. [ 76.387835][ T4725] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 76.434102][ T4725] UDF-fs: Scanning with blocksize 2048 failed [ 76.490970][ T1109] cfg80211: failed to load regulatory.db [ 76.507679][ T4698] XFS (loop0): Quotacheck: Done. [ 76.561133][ T4725] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 76.638954][ T4725] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 76.969696][ T4169] XFS (loop0): Unmounting Filesystem [ 76.983593][ T4173] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22. [ 76.995317][ T4173] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 77.649191][ T4706] hid-generic 0005:7FFF:0008.0005: item fetching failed at offset 0/4 [ 77.691764][ T4706] hid-generic: probe of 0005:7FFF:0008.0005 failed with error -22 [ 77.862716][ T4778] netlink: 8 bytes leftover after parsing attributes in process `syz.1.182'. [ 78.053548][ T4781] loop2: detected capacity change from 0 to 2048 [ 78.142115][ T4781] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 78.178873][ T4781] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 78.441363][ T4770] loop3: detected capacity change from 0 to 32768 [ 78.550159][ T4774] loop0: detected capacity change from 0 to 40427 [ 78.664274][ T4774] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 78.698952][ T4774] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 78.757259][ T4774] F2FS-fs (loop0): invalid crc value [ 78.830678][ T4774] F2FS-fs (loop0): Found nat_bits in checkpoint [ 78.974066][ T4785] loop4: detected capacity change from 0 to 32768 [ 78.988458][ T4706] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 79.004951][ T4774] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 79.013932][ T4770] [ 79.013932][ T4770] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 79.013932][ T4770] [ 79.028352][ T4774] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 79.064576][ T4770] [ 79.064576][ T4770] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 79.064576][ T4770] [ 79.103666][ T4785] find_entry called with index >= next_index [ 79.175109][ T4770] [ 79.175109][ T4770] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 79.175109][ T4770] [ 79.186248][ T4770] [ 79.186248][ T4770] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 79.186248][ T4770] [ 79.210796][ T4770] [ 79.210796][ T4770] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 79.210796][ T4770] [ 79.234093][ T4770] [ 79.234093][ T4770] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 79.234093][ T4770] [ 79.259418][ T277] [ 79.259418][ T277] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 79.259418][ T277] [ 79.368384][ T4706] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 79.377004][ T4706] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 79.378377][ T4739] [ 79.378377][ T4739] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 79.378377][ T4739] [ 79.425227][ T4787] loop1: detected capacity change from 0 to 32768 [ 79.438329][ T4739] [ 79.438329][ T4739] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 79.438329][ T4739] [ 79.452700][ T4706] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 79.463375][ T4175] [ 79.463375][ T4175] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 79.463375][ T4175] [ 79.482207][ T4706] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 79.495894][ T276] [ 79.495894][ T276] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 79.495894][ T276] [ 79.514070][ T4787] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop1 scanned by syz.1.187 (4787) [ 79.536564][ T4175] [ 79.536564][ T4175] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 79.536564][ T4175] [ 79.557964][ T4706] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 79.597461][ T4787] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 79.627316][ T4787] BTRFS info (device loop1): using free space tree [ 79.677210][ T4787] BTRFS info (device loop1): has skinny extents [ 79.698714][ T4706] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 79.716635][ T4706] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 79.735091][ T4706] usb 3-1: Product: syz [ 79.745215][ T4706] usb 3-1: Manufacturer: syz [ 79.809258][ T4706] cdc_wdm 3-1:1.0: skipping garbage [ 79.837055][ T4706] cdc_wdm 3-1:1.0: skipping garbage [ 79.926540][ T4815] netlink: 4 bytes leftover after parsing attributes in process `syz.4.193'. [ 79.932514][ T4706] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 79.951595][ T4706] cdc_wdm 3-1:1.0: Unknown control protocol [ 79.985168][ T4821] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 80.058704][ T4787] BTRFS info (device loop1): enabling ssd optimizations [ 80.077763][ T4705] usb 3-1: USB disconnect, device number 3 [ 80.083975][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 80.084163][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 80.084180][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 81.038412][ T4846] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 81.382908][ T4835] loop4: detected capacity change from 0 to 40427 [ 81.418427][ T4846] usb 1-1: config 0 has an invalid interface number: 183 but max is 0 [ 81.434476][ T4846] usb 1-1: config 0 has no interface number 0 [ 81.452815][ T4846] usb 1-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=26.3d [ 81.473162][ T4846] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.491762][ T4846] usb 1-1: config 0 descriptor?? [ 81.522768][ T4835] F2FS-fs (loop4): invalid crc value [ 81.546771][ T4835] F2FS-fs (loop4): Found nat_bits in checkpoint [ 81.688987][ T4879] syz.2.214 uses obsolete (PF_INET,SOCK_PACKET) [ 81.695537][ T4835] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 81.730811][ T4877] loop1: detected capacity change from 0 to 2048 [ 81.854762][ T4877] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 81.932905][ T4835] F2FS-fs (loop4) : inject kmalloc in f2fs_kmalloc of __f2fs_setxattr+0x26a/0x12d0 [ 81.951975][ T4835] overlayfs: failed to verify upper (/file1, ino=10, err=-12) [ 81.977384][ T4835] overlayfs: failed to verify index dir 'upper' xattr [ 81.984828][ T4835] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 82.018488][ T4846] airspy 1-1:0.183: Board ID: 00 [ 82.023564][ T4846] airspy 1-1:0.183: Firmware version: [ 82.183124][ T4166] attempt to access beyond end of device [ 82.183124][ T4166] loop4: rw=2049, want=45120, limit=40427 [ 82.315513][ T4903] block nbd3: shutting down sockets [ 82.492296][ T4845] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 82.513067][ T4845] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 82.538748][ T4706] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 82.682809][ T4909] loop3: detected capacity change from 0 to 32768 [ 82.778319][ T4707] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 82.788527][ T4706] usb 2-1: Using ep0 maxpacket: 8 [ 82.908456][ T4846] airspy 1-1:0.183: usb_control_msg() failed -71 request 0f [ 82.916285][ T4706] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 82.926622][ T4706] usb 2-1: config 0 has no interface number 0 [ 82.947195][ T4846] airspy 1-1:0.183: Registered as swradio24 [ 82.953416][ T4706] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 82.968389][ T4846] airspy 1-1:0.183: SDR API is still slightly experimental and functionality changes may follow [ 82.987928][ T4706] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 83.009023][ T4846] usb 1-1: USB disconnect, device number 5 [ 83.018328][ T4706] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.066634][ T4706] usb 2-1: config 0 descriptor?? [ 83.123332][ T4706] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 83.148344][ T4707] usb 5-1: unable to get BOS descriptor or descriptor too short [ 83.208421][ T4707] usb 5-1: no configurations [ 83.213307][ T4707] usb 5-1: can't read configurations, error -22 [ 83.402857][ T4846] usb 2-1: USB disconnect, device number 4 [ 83.638269][ T4706] usb 4-1: new low-speed USB device number 4 using dummy_hcd [ 83.954121][ T4949] io-wq is not configured for unbound workers [ 83.990242][ T4951] loop4: detected capacity change from 0 to 1024 [ 84.008503][ T4706] usb 4-1: config 0 has no interfaces? [ 84.014457][ T4706] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 84.047708][ T4706] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.072035][ T4706] usb 4-1: config 0 descriptor?? [ 84.275788][ T4951] hfsplus: xattr searching failed [ 84.332198][ T4951] hfsplus: xattr search failed [ 84.335951][ T4950] hfsplus: xattr search failed [ 84.343998][ T4706] usb 4-1: USB disconnect, device number 4 [ 84.381711][ T4967] loop1: detected capacity change from 0 to 2048 [ 84.504347][ T4967] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 84.701808][ T4984] loop4: detected capacity change from 0 to 256 [ 84.738270][ T4707] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 84.746696][ T4984] ======================================================= [ 84.746696][ T4984] WARNING: The mand mount option has been deprecated and [ 84.746696][ T4984] and is ignored by this kernel. Remove the mand [ 84.746696][ T4984] option from the mount to silence this warning. [ 84.746696][ T4984] ======================================================= [ 84.783700][ T4984] exfat: Unknown parameter 'discardmask' [ 84.813137][ T4990] loop2: detected capacity change from 0 to 512 [ 84.904883][ T4990] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 84.959630][ T4993] netlink: 16 bytes leftover after parsing attributes in process `syz.4.250'. [ 85.086243][ T4995] loop4: detected capacity change from 0 to 1024 [ 85.138421][ T4707] usb 1-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 85.167845][ T4707] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.177950][ T4995] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 85.212012][ T4707] usb 1-1: config 0 descriptor?? [ 85.371923][ T5006] loop4: detected capacity change from 0 to 8192 [ 85.426139][ T5006] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 85.437258][ T5006] REISERFS (device loop4): using ordered data mode [ 85.443963][ T5006] reiserfs: using flush barriers [ 85.451636][ T5006] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 85.468650][ T5006] REISERFS (device loop4): checking transaction log (loop4) [ 85.533248][ T5006] REISERFS (device loop4): Using tea hash to sort names [ 85.542939][ T5006] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 85.628393][ T4846] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 85.868475][ T4846] usb 2-1: Using ep0 maxpacket: 16 [ 85.990509][ T4846] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 86.012182][ T4846] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 86.013501][ T5019] loop4: detected capacity change from 0 to 4096 [ 86.042052][ T4846] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 86.069850][ T4846] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.090700][ T4846] usb 2-1: config 0 descriptor?? [ 86.126575][ T5019] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512) [ 86.198031][ T5019] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 86.272798][ T5019] ntfs3: loop4: ino=1c, "file0" Internal error [ 86.281983][ T5019] ntfs3: loop4: ntfs_sync_inode r=1c failed, -22. [ 86.308387][ T4166] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22. [ 86.438298][ T23] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 86.468333][ T1109] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 86.569691][ T4846] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0 [ 86.577483][ T4846] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0 [ 86.584620][ T4846] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0 [ 86.592053][ T4707] pegasus 1-1:0.0: can't reset MAC [ 86.598752][ T4846] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0 [ 86.605717][ T4846] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0 [ 86.612748][ T4707] pegasus: probe of 1-1:0.0 failed with error -5 [ 86.632573][ T4707] usb 1-1: USB disconnect, device number 6 [ 86.641116][ T4846] cp2112 0003:10C4:EA90.0007: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 86.698383][ T23] usb 3-1: Using ep0 maxpacket: 8 [ 86.720294][ T1109] usb 4-1: Using ep0 maxpacket: 8 [ 86.788458][ T4846] cp2112 0003:10C4:EA90.0007: Part Number: 0x00 Device Version: 0x00 [ 86.849073][ T23] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 86.860657][ T23] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 86.871409][ T1109] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 86.882330][ T23] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 86.892574][ T1109] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 86.902494][ T23] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 86.915894][ T1109] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 86.926068][ T23] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 86.935214][ T1109] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 86.948617][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.958272][ T1109] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 86.967349][ T1109] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.144292][ T5035] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 87.228502][ T1109] usb 4-1: usb_control_msg returned -32 [ 87.234137][ T1109] usbtmc 4-1:16.0: can't read capabilities [ 87.240572][ T23] usb 3-1: GET_CAPABILITIES returned 0 [ 87.246094][ T23] usbtmc 3-1:16.0: can't read capabilities [ 87.428562][ T4846] cp2112 0003:10C4:EA90.0007: error reading lock byte: -71 [ 87.440017][ T4846] usb 2-1: USB disconnect, device number 5 [ 87.490871][ T4707] usb 3-1: USB disconnect, device number 4 [ 88.072251][ T5059] loop2: detected capacity change from 0 to 512 [ 88.096998][ T5062] loop1: detected capacity change from 0 to 64 [ 88.176673][ T5059] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 88.202063][ T5059] UDF-fs: Scanning with blocksize 512 failed [ 88.228574][ T5059] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 88.272678][ T5059] UDF-fs: Scanning with blocksize 1024 failed [ 88.297521][ T5059] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 88.338412][ T5059] UDF-fs: Scanning with blocksize 2048 failed [ 88.345874][ T5059] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 88.379656][ T5068] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 88.406494][ T5059] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 89.166444][ T5066] loop0: detected capacity change from 0 to 32768 [ 89.220686][ T1109] usb 4-1: USB disconnect, device number 5 [ 89.242996][ T5066] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.280 (5066) [ 89.347443][ T5066] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 89.398702][ T5066] BTRFS info (device loop0): setting nodatasum [ 89.404908][ T5066] BTRFS info (device loop0): enabling auto defrag [ 89.448470][ T5066] BTRFS info (device loop0): disabling tree log [ 89.454756][ T5066] BTRFS info (device loop0): using free space tree [ 89.503730][ T5071] loop1: detected capacity change from 0 to 32768 [ 89.514763][ T5066] BTRFS info (device loop0): has skinny extents [ 89.652587][ T5103] input input8: cannot allocate more than FF_MAX_EFFECTS effects [ 89.717383][ T5071] XFS (loop1): Mounting V5 Filesystem [ 89.744200][ T5121] loop3: detected capacity change from 0 to 128 [ 89.781850][ T5120] loop4: detected capacity change from 0 to 16 [ 89.815145][ T5082] loop2: detected capacity change from 0 to 32768 [ 89.833486][ T5066] BTRFS info (device loop0): enabling ssd optimizations [ 89.881781][ T5120] erofs: (device loop4): mounted with root inode @ nid 36. [ 89.917611][ T5121] EXT4-fs (loop3): mounted filesystem without journal. Opts: minixdf,nodelalloc,,errors=continue. Quota mode: none. [ 89.920338][ T5071] XFS (loop1): Ending clean mount [ 89.953900][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 89.953913][ T26] audit: type=1800 audit(1736877156.135:18): pid=5066 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.280" name="bus" dev="loop0" ino=263 res=0 errno=0 [ 89.967006][ T5121] ext4 filesystem being mounted at /51/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 89.991112][ T5082] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.287 (5082) [ 90.012396][ T5082] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 90.091822][ T5082] BTRFS info (device loop2): using free space tree [ 90.118271][ T5082] BTRFS info (device loop2): has skinny extents [ 90.182764][ T26] audit: type=1800 audit(1736877156.255:19): pid=5120 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.295" name="file1" dev="loop4" ino=86 res=0 errno=0 [ 90.384969][ T26] audit: type=1800 audit(1736877156.525:20): pid=5121 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.294" name="bus" dev="loop3" ino=12 res=0 errno=0 [ 90.407297][ T5071] loop1: detected capacity change from 32768 to 0 [ 90.436600][ C0] blk_update_request: I/O error, dev loop1, sector 15240 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 90.541690][ T5082] BTRFS info (device loop2): enabling ssd optimizations [ 90.575363][ T5162] device team0 entered promiscuous mode [ 90.581504][ T5162] device team_slave_0 entered promiscuous mode [ 90.592619][ T5162] device team_slave_1 entered promiscuous mode [ 90.603446][ T5161] device team0 left promiscuous mode [ 90.622856][ T5161] device team_slave_0 left promiscuous mode [ 90.646581][ T5161] device team_slave_1 left promiscuous mode [ 90.693719][ C0] blk_update_request: I/O error, dev loop1, sector 3 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 90.978028][ T1109] XFS (loop1): metadata I/O error in "xfs_alloc_read_agfl+0x224/0x3e0" at daddr 0x3 len 1 error 5 [ 90.994733][ T5130] loop: Write error at byte offset 9223372036855169023, length 4096. [ 91.033839][ C1] blk_update_request: I/O error, dev loop1, sector 3 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 91.058261][ C0] blk_update_request: I/O error, dev loop1, sector 768 op 0x1:(WRITE) flags 0x9800 phys_seg 1 prio class 0 [ 91.069751][ C0] blk_update_request: I/O error, dev loop1, sector 768 op 0x1:(WRITE) flags 0x9800 phys_seg 1 prio class 0 [ 91.088294][ T150] XFS (loop1): log I/O error -5 [ 91.095830][ T1109] XFS (loop1): Corruption of in-memory data (0x8) detected at xfs_defer_finish_noroll+0x1750/0x1df0 (fs/xfs/libxfs/xfs_defer.c:504). Shutting down filesystem. [ 91.095855][ T4165] XFS (loop1): Unmounting Filesystem [ 91.194706][ T1109] XFS (loop1): Please unmount the filesystem and rectify the problem(s) [ 91.756374][ T5174] loop3: detected capacity change from 0 to 32768 [ 91.817788][ T5199] netlink: 8 bytes leftover after parsing attributes in process `syz.2.305'. [ 91.903986][ T5199] netlink: 8 bytes leftover after parsing attributes in process `syz.2.305'. [ 92.107795][ T4175] read_mapping_page failed! [ 92.150176][ T4175] ERROR: (device loop3): txCommit: [ 92.150176][ T4175] [ 92.185785][ T4175] ERROR: (device loop3): remounting filesystem as read-only [ 92.273939][ T5206] loop2: detected capacity change from 0 to 512 [ 92.384071][ T5210] netlink: 'syz.4.315': attribute type 11 has an invalid length. [ 92.439350][ T5206] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 92.533444][ T5206] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 92.582240][ T5206] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2219: inode #15: comm syz.2.314: corrupted in-inode xattr [ 92.612276][ T5206] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.314: couldn't read orphan inode 15 (err -117) [ 92.648672][ T5206] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,max_batch_time=0x0000000000000001,debug,noload,nombcache,noblock_validity,init_itable=0x0000000000000601,inode_readahead_blks=0x0000000000008000,,errors=continue. Quota mode: none. [ 92.906715][ T5130] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.010246][ T5130] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.118063][ T5130] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.218274][ T4216] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 93.252221][ T5130] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.373631][ T5224] loop4: detected capacity change from 0 to 32768 [ 93.440253][ T5224] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 scanned by syz.4.321 (5224) [ 93.469196][ T4216] usb 2-1: Using ep0 maxpacket: 16 [ 93.501200][ T4705] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 93.544629][ T5224] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 93.586520][ T5224] BTRFS info (device loop4): use zlib compression, level 3 [ 93.594539][ T4216] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 93.610724][ T4216] usb 2-1: config 0 has no interface number 0 [ 93.627200][ T5224] BTRFS info (device loop4): using free space tree [ 93.657657][ T5224] BTRFS info (device loop4): has skinny extents [ 93.737508][ T5224] BTRFS info (device loop4): enabling ssd optimizations [ 93.795581][ T26] audit: type=1800 audit(1736877159.975:21): pid=5224 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.321" name="file1" dev="loop4" ino=260 res=0 errno=0 [ 93.798502][ T4216] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 93.831771][ T4216] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.846918][ T4216] usb 2-1: Product: syz [ 93.872523][ T4216] usb 2-1: Manufacturer: syz [ 93.879698][ T4705] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 93.899448][ T4216] usb 2-1: SerialNumber: syz [ 93.904229][ T4705] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 93.931380][ T4216] usb 2-1: config 0 descriptor?? [ 93.980333][ T4216] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 94.098451][ T4705] usb 3-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 94.127107][ T4705] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.135742][ T4705] usb 3-1: Product: syz [ 94.140288][ T4705] usb 3-1: Manufacturer: syz [ 94.145261][ T4705] usb 3-1: SerialNumber: syz [ 94.167082][ T4705] usb 3-1: config 0 descriptor?? [ 94.198875][ T5231] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 94.205916][ T5231] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 94.517324][ T5231] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 94.535362][ T5231] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 94.854920][ T5284] netlink: 'syz.0.329': attribute type 11 has an invalid length. [ 94.891802][ T5264] chnl_net:caif_netlink_parms(): no params data found [ 95.012472][ T4705] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 95.076291][ T13] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 95.113983][ T13] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 95.182385][ T5130] device hsr_slave_0 left promiscuous mode [ 95.189592][ T5130] device hsr_slave_1 left promiscuous mode [ 95.196761][ T5130] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 95.205278][ T5130] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 95.214432][ T5130] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 95.221928][ T5130] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 95.229791][ T5130] device bridge_slave_1 left promiscuous mode [ 95.237892][ T5130] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.257872][ T5130] device bridge_slave_0 left promiscuous mode [ 95.264079][ T5130] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.285844][ T5130] device veth1_macvtap left promiscuous mode [ 95.294043][ T5130] device veth0_macvtap left promiscuous mode [ 95.300996][ T5130] device veth1_vlan left promiscuous mode [ 95.307366][ T5130] device veth0_vlan left promiscuous mode [ 95.318369][ T4216] gspca_spca1528: reg_w err -71 [ 95.323502][ T4216] spca1528: probe of 2-1:0.1 failed with error -71 [ 95.339594][ T4216] usb 2-1: USB disconnect, device number 6 [ 95.398268][ T13] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 95.540264][ T5130] team0 (unregistering): Port device team_slave_1 removed [ 95.556782][ T5130] team0 (unregistering): Port device team_slave_0 removed [ 95.570667][ T5130] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 95.587142][ T5130] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 95.653900][ T5130] bond0 (unregistering): Released all slaves [ 95.743808][ T5264] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.755244][ T5264] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.762909][ T13] usb 1-1: unable to get BOS descriptor or descriptor too short [ 95.772215][ T5264] device bridge_slave_0 entered promiscuous mode [ 95.779072][ T4705] dm9601 3-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 95.792587][ T5264] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.804215][ T5264] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.812924][ T5264] device bridge_slave_1 entered promiscuous mode [ 95.829094][ T13] usb 1-1: no configurations [ 95.833807][ T13] usb 1-1: can't read configurations, error -22 [ 95.865874][ T4705] dm9601 3-1:0.0 eth5: register 'dm9601' at usb-dummy_hcd.2-1, Davicom DM96xx USB 10/100 Ethernet, 86:8e:7f:ed:dd:ec [ 95.911989][ T4705] usb 3-1: USB disconnect, device number 5 [ 95.950462][ T5264] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.960671][ T4705] dm9601 3-1:0.0 eth5: unregister 'dm9601' usb-dummy_hcd.2-1, Davicom DM96xx USB 10/100 Ethernet [ 95.993494][ T5264] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.097503][ T5264] team0: Port device team_slave_0 added [ 96.144871][ T5264] team0: Port device team_slave_1 added [ 96.150726][ T4842] Bluetooth: hci3: command 0x0409 tx timeout [ 96.280960][ T5264] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.304317][ T5264] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.330454][ C0] vkms_vblank_simulate: vblank timer overrun [ 96.347509][ T5264] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.356187][ T5323] loop2: detected capacity change from 0 to 256 [ 96.414769][ T5264] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.428391][ T5264] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.563706][ T5264] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.714645][ T5264] device hsr_slave_0 entered promiscuous mode [ 96.762161][ T5264] device hsr_slave_1 entered promiscuous mode [ 96.795721][ T5264] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 96.814725][ T5264] Cannot create hsr debugfs directory [ 97.330823][ T5264] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 97.369987][ T5264] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 97.403871][ T5264] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 97.459137][ T5264] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 97.585264][ T5339] loop4: detected capacity change from 0 to 32768 [ 97.715637][ T5342] loop1: detected capacity change from 0 to 32768 [ 97.796779][ T5339] XFS (loop4): Mounting V5 Filesystem [ 97.805748][ T5342] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.340 (5342) [ 97.857667][ T5342] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 97.869234][ T5342] BTRFS info (device loop1): setting nodatacow, compression disabled [ 97.878092][ T5342] BTRFS info (device loop1): setting datacow [ 97.888468][ T5264] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.895968][ T5337] loop2: detected capacity change from 0 to 40427 [ 97.903066][ T5342] BTRFS info (device loop1): doing ref verification [ 97.943163][ T5342] BTRFS info (device loop1): force clearing of disk cache [ 97.984915][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 98.010727][ T5337] F2FS-fs (loop2): invalid crc value [ 98.012077][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 98.028480][ T5342] BTRFS info (device loop1): turning off barriers [ 98.035028][ T5342] BTRFS info (device loop1): enabling ssd optimizations [ 98.049512][ T5339] XFS (loop4): Ending clean mount [ 98.075574][ T5342] BTRFS info (device loop1): using spread ssd allocation scheme [ 98.086608][ T5264] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.087279][ T5337] F2FS-fs (loop2): Found nat_bits in checkpoint [ 98.102503][ T5339] XFS (loop4): Quotacheck needed: Please wait. [ 98.144775][ T5342] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8) [ 98.155389][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 98.176066][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 98.228597][ T5342] BTRFS info (device loop1): force lzo compression, level 0 [ 98.230772][ T300] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.238562][ T5194] Bluetooth: hci3: command 0x041b tx timeout [ 98.243057][ T300] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.269642][ T5339] XFS (loop4): Quotacheck: Done. [ 98.298201][ T5342] BTRFS info (device loop1): using free space tree [ 98.304737][ T5342] BTRFS info (device loop1): has skinny extents [ 98.348400][ T5337] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 98.361332][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 98.427198][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 98.479536][ T4166] XFS (loop4): Unmounting Filesystem [ 98.536471][ T300] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.543649][ T300] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.566311][ T4173] attempt to access beyond end of device [ 98.566311][ T4173] loop2: rw=2049, want=45104, limit=40427 [ 98.691282][ T5342] BTRFS info (device loop1): clearing free space tree [ 98.698126][ T5342] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 98.726220][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 98.746363][ T5342] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 98.787190][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 98.815565][ T5342] BTRFS info (device loop1): creating free space tree [ 98.839668][ T5342] BTRFS info (device loop1): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 98.852362][ T5342] BTRFS info (device loop1): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 98.867587][ T436] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 98.890012][ T436] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 98.941186][ T436] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 98.988842][ T436] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 99.020850][ T436] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 99.052539][ T436] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 99.106470][ T436] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 99.152147][ T436] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 99.173970][ T436] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 99.204070][ T26] audit: type=1800 audit(1736877165.385:22): pid=5342 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.340" name="file2" dev="loop1" ino=261 res=0 errno=0 [ 99.248959][ T436] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 99.275660][ T5264] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 99.440483][ T436] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 99.447954][ T436] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 99.473855][ T5413] loop2: detected capacity change from 0 to 1024 [ 99.550719][ T5264] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.749936][ T4507] udevd[4507]: '/usr/bin/udevadm trigger -s block -p ID_BTRFS_READY=0' [5405] terminated by signal 32 (Unknown signal 32) [ 99.781688][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 99.796430][ T5413] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,,errors=continue. Quota mode: none. [ 99.796516][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 100.017939][ T5264] device veth0_vlan entered promiscuous mode [ 100.043956][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 100.050940][ T5431] block nbd1: shutting down sockets [ 100.061390][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 100.080422][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 100.103184][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 100.135815][ T5264] device veth1_vlan entered promiscuous mode [ 100.214122][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 100.229024][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 100.248583][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 100.263241][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 100.301231][ T5264] device veth0_macvtap entered promiscuous mode [ 100.389205][ T5189] Bluetooth: hci3: command 0x040f tx timeout [ 101.153350][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 102.385872][ T5264] device veth1_macvtap entered promiscuous mode [ 102.457300][ T5264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.473884][ T5189] Bluetooth: hci3: command 0x0419 tx timeout [ 102.487401][ T5264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.505205][ T5264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.526191][ T5264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.538457][ T5264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.555664][ T5264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.565987][ T5264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.577061][ T5264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.600748][ T5264] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.630358][ T5448] loop1: detected capacity change from 0 to 256 [ 102.639401][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 102.649130][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 102.677673][ T5264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.694597][ T5264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.705685][ T5448] exfat: Unknown parameter 'discardmask' [ 102.725191][ T5264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.746222][ T5264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.783618][ T5264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.818307][ T5264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.838239][ T5264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.857441][ T5264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.877618][ T5453] loop4: detected capacity change from 0 to 8192 [ 102.885898][ T5264] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.896343][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 102.909119][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 102.940182][ T5453] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 103.000931][ T5453] REISERFS (device loop4): using ordered data mode [ 103.007452][ T5453] reiserfs: using flush barriers [ 103.021085][ T5264] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.029843][ T5453] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 103.030221][ T5453] REISERFS (device loop4): checking transaction log (loop4) [ 103.077065][ T5453] REISERFS (device loop4): Using r5 hash to sort names [ 103.103806][ T5264] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.148320][ T5264] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.157044][ T5264] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.189895][ T5453] reiserfs: enabling write barrier flush mode [ 103.207219][ T5453] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 103.306278][ T5467] input: syz0 as /devices/virtual/input/input9 [ 103.418512][ T4224] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.442802][ T4224] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.449937][ T13] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 103.499878][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 103.564983][ T4224] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.575102][ T4224] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.595947][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 103.710637][ T13] usb 1-1: Using ep0 maxpacket: 8 [ 103.728416][ T5428] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 103.834051][ T13] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 103.862489][ T13] usb 1-1: config 0 has no interface number 0 [ 103.889087][ T13] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 103.911737][ T26] audit: type=1326 audit(1736877170.095:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5484 comm="syz.5.369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff67b9dcd29 code=0x7ffc0000 [ 103.949601][ T13] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 103.981491][ T13] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.992010][ T26] audit: type=1326 audit(1736877170.125:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5484 comm="syz.5.369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff67b9dcd29 code=0x7ffc0000 [ 104.018472][ T5428] usb 2-1: Using ep0 maxpacket: 32 [ 104.026172][ T13] usb 1-1: config 0 descriptor?? [ 104.064322][ T26] audit: type=1326 audit(1736877170.125:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5484 comm="syz.5.369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff67b9dcd29 code=0x7ffc0000 [ 104.097771][ T13] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 104.131237][ T5473] loop2: detected capacity change from 0 to 32768 [ 104.143634][ T26] audit: type=1326 audit(1736877170.125:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5484 comm="syz.5.369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff67b9dcd29 code=0x7ffc0000 [ 104.171835][ T5428] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 104.177808][ T26] audit: type=1326 audit(1736877170.125:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5484 comm="syz.5.369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff67b9dcd29 code=0x7ffc0000 [ 104.260306][ T26] audit: type=1326 audit(1736877170.125:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5484 comm="syz.5.369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff67b9dcd29 code=0x7ffc0000 [ 104.323237][ T5473] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 104.338545][ T5188] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 104.389632][ T5428] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 104.398303][ T26] audit: type=1326 audit(1736877170.125:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5484 comm="syz.5.369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff67b9dcd29 code=0x7ffc0000 [ 104.409388][ T5428] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 104.430553][ T5428] usb 2-1: Product: syz [ 104.434728][ T5428] usb 2-1: Manufacturer: syz [ 104.445354][ T5428] usb 2-1: SerialNumber: syz [ 104.455765][ T1109] usb 1-1: USB disconnect, device number 9 [ 104.458202][ C0] iowarrior 1-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 104.484369][ T5428] usb 2-1: config 0 descriptor?? [ 104.508445][ T5471] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 104.511781][ T5483] loop4: detected capacity change from 0 to 32768 [ 104.522203][ T26] audit: type=1326 audit(1736877170.125:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5484 comm="syz.5.369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff67b9dcd29 code=0x7ffc0000 [ 104.585903][ T26] audit: type=1326 audit(1736877170.125:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5484 comm="syz.5.369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff67b9dcd29 code=0x7ffc0000 [ 104.590255][ T5483] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 scanned by syz.4.368 (5483) [ 104.620789][ T5188] usb 6-1: Using ep0 maxpacket: 8 [ 104.639869][ T26] audit: type=1326 audit(1736877170.125:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5484 comm="syz.5.369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff67b9dcd29 code=0x7ffc0000 [ 104.693828][ T5483] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 104.709814][ T5483] BTRFS info (device loop4): use zlib compression, level 3 [ 104.727691][ T5483] BTRFS info (device loop4): using free space tree [ 104.747944][ T5483] BTRFS info (device loop4): has skinny extents [ 104.760393][ T26] audit: type=1326 audit(1736877170.125:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5484 comm="syz.5.369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff67b9dcd29 code=0x7ffc0000 [ 104.791569][ T5188] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 104.810934][ T4173] ocfs2: Unmounting device (7,2) on (node local) [ 104.850691][ T5188] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 104.862745][ T26] audit: type=1326 audit(1736877170.125:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5484 comm="syz.5.369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff67b9dcd29 code=0x7ffc0000 [ 104.888369][ T5188] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 104.908260][ T5188] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 104.922925][ T26] audit: type=1326 audit(1736877170.125:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5484 comm="syz.5.369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff67b9dcd29 code=0x7ffc0000 [ 104.924442][ T5188] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 104.960201][ T26] audit: type=1326 audit(1736877170.125:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5484 comm="syz.5.369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=239 compat=0 ip=0x7ff67b9dcd29 code=0x7ffc0000 [ 105.035161][ T5188] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.078301][ T26] audit: type=1326 audit(1736877170.125:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5484 comm="syz.5.369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff67b9dcd29 code=0x7ffc0000 [ 105.080337][ T1109] usb 2-1: USB disconnect, device number 7 [ 105.149087][ T5483] BTRFS info (device loop4): enabling ssd optimizations [ 105.344026][ T5188] usb 6-1: GET_CAPABILITIES returned 0 [ 105.350669][ T5188] usbtmc 6-1:16.0: can't read capabilities [ 105.664358][ T1109] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 105.694781][ T5523] loop2: detected capacity change from 0 to 8192 [ 105.739629][ T5523] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 105.784069][ T5523] REISERFS (device loop2): using ordered data mode [ 105.865108][ T5523] reiserfs: using flush barriers [ 105.905045][ T5523] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 105.928310][ T1109] usb 2-1: Using ep0 maxpacket: 32 [ 105.965780][ T5523] REISERFS (device loop2): checking transaction log (loop2) [ 105.982045][ T5523] REISERFS (device loop2): Using r5 hash to sort names [ 106.054242][ T5523] reiserfs: enabling write barrier flush mode [ 106.069661][ T1109] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 106.112247][ T5523] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 106.293610][ T1109] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 106.307123][ T1109] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 106.321506][ T1109] usb 2-1: Product: syz [ 106.325689][ T1109] usb 2-1: Manufacturer: syz [ 106.333826][ T1109] usb 2-1: SerialNumber: syz [ 106.343621][ T5189] usb 6-1: USB disconnect, device number 2 [ 106.362485][ T1109] usb 2-1: config 0 descriptor?? [ 106.388609][ T5471] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 106.489812][ T1109] usb 2-1: USB disconnect, device number 8 [ 107.378414][ T1109] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 107.658263][ T1109] usb 3-1: Using ep0 maxpacket: 16 [ 107.798794][ T5587] netlink: 36 bytes leftover after parsing attributes in process `syz.1.401'. [ 107.808576][ T1109] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 107.818253][ T4694] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 107.821275][ T5589] loop4: detected capacity change from 0 to 64 [ 107.840978][ T1109] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 107.856452][ T1109] usb 3-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.00 [ 107.867000][ T1109] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.887410][ T1109] usb 3-1: config 0 descriptor?? [ 107.927748][ T5595] device hsr0 entered promiscuous mode [ 107.961372][ T5594] device hsr0 left promiscuous mode [ 108.013616][ T5589] overlayfs: upper fs needs to support d_type. [ 108.024223][ T5597] syz.1.406[5597] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 108.024326][ T5597] syz.1.406[5597] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 108.043740][ T5589] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 108.068364][ T4694] usb 6-1: Using ep0 maxpacket: 32 [ 108.074985][ T5589] overlayfs: failed to set xattr on upper [ 108.099061][ T5589] overlayfs: ...falling back to index=off,metacopy=off. [ 108.193850][ T4694] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 108.393003][ T4694] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 108.404245][ T4694] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 108.417829][ T4694] usb 6-1: Product: syz [ 108.423596][ T4694] usb 6-1: Manufacturer: syz [ 108.432971][ T4694] usb 6-1: SerialNumber: syz [ 108.441231][ T4694] usb 6-1: config 0 descriptor?? [ 108.468712][ T5574] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 108.557459][ T1109] macally 0003:060B:0001.0009: unknown main item tag 0x0 [ 108.591034][ T1109] macally 0003:060B:0001.0009: unexpected long global item [ 108.608609][ T1109] macally: probe of 0003:060B:0001.0009 failed with error -22 [ 108.675429][ T5589] syz.4.402 (5589) used greatest stack depth: 18480 bytes left [ 108.730558][ T4166] Trying to free block not in datazone [ 108.786809][ T1109] usb 3-1: USB disconnect, device number 6 [ 108.854229][ T4705] usb 6-1: USB disconnect, device number 3 [ 108.862484][ T5604] loop1: detected capacity change from 0 to 40427 [ 108.935382][ T5614] loop4: detected capacity change from 0 to 1024 [ 108.959691][ T5604] F2FS-fs (loop1): invalid crc value [ 109.024812][ T5604] F2FS-fs (loop1): Found nat_bits in checkpoint [ 109.053005][ T436] hfsplus: b-tree write err: -5, ino 4 [ 109.137973][ T5604] F2FS-fs (loop1): Cannot turn on quotas: -2 on 1 [ 109.184024][ T5604] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 109.276485][ T5604] attempt to access beyond end of device [ 109.276485][ T5604] loop1: rw=2049, want=45104, limit=40427 [ 109.418257][ T4705] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 109.663383][ T4705] usb 6-1: Using ep0 maxpacket: 32 [ 109.684669][ T4845] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 109.788323][ T4705] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 109.968302][ T4705] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 109.987621][ T4705] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 110.006093][ T4705] usb 6-1: Product: syz [ 110.018473][ T4705] usb 6-1: Manufacturer: syz [ 110.023188][ T4705] usb 6-1: SerialNumber: syz [ 110.032925][ T4705] usb 6-1: config 0 descriptor?? [ 110.048517][ T5574] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 110.063812][ T4845] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 110.098281][ T4845] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 110.208450][ T4845] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 110.217520][ T4845] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 110.241746][ T4845] usb 3-1: SerialNumber: syz [ 110.302180][ T4705] usb 6-1: USB disconnect, device number 4 [ 110.371427][ T5645] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 110.531682][ T4845] usb 3-1: 0:2 : does not exist [ 110.590361][ T4845] usb 3-1: USB disconnect, device number 7 [ 110.654233][ T4507] udevd[4507]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 110.802015][ T5647] loop4: detected capacity change from 0 to 32768 [ 111.257810][ T5665] netlink: 'syz.0.433': attribute type 12 has an invalid length. [ 111.274091][ T5665] netlink: 'syz.0.433': attribute type 29 has an invalid length. [ 111.333496][ T5665] netlink: 148 bytes leftover after parsing attributes in process `syz.0.433'. [ 111.383977][ T5665] netlink: 'syz.0.433': attribute type 2 has an invalid length. [ 111.401937][ T5665] netlink: 43 bytes leftover after parsing attributes in process `syz.0.433'. [ 111.636947][ T5656] loop5: detected capacity change from 0 to 32768 [ 111.708031][ T5656] loop5: p1 p2 p3 < p5 p6 > [ 111.728501][ T5656] loop5: p1 size 242222080 extends beyond EOD, truncated [ 111.755297][ T5656] loop5: p2 start 4294967295 is beyond EOD, truncated [ 111.968891][ T5670] loop2: detected capacity change from 0 to 32768 [ 112.202916][ T5670] XFS (loop2): Mounting V5 Filesystem [ 112.334118][ T5670] XFS (loop2): Ending clean mount [ 112.343024][ T5670] XFS (loop2): Quotacheck needed: Please wait. [ 112.414502][ T5670] XFS (loop2): Quotacheck: Done. [ 112.510637][ T4173] XFS (loop2): Unmounting Filesystem [ 113.152023][ T5738] loop1: detected capacity change from 0 to 2048 [ 113.548431][ T5730] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.557257][ T5730] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.818744][ T5743] loop4: detected capacity change from 0 to 32768 [ 113.925581][ T5743] XFS (loop4): Mounting V5 Filesystem [ 114.029810][ T5743] XFS (loop4): Ending clean mount [ 114.146874][ T4166] XFS (loop4): Unmounting Filesystem [ 114.248284][ T4845] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 114.445405][ T5765] loop0: detected capacity change from 0 to 40427 [ 114.483632][ T5730] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 114.505515][ T5765] F2FS-fs (loop0): invalid crc value [ 114.548780][ T5765] F2FS-fs (loop0): Found nat_bits in checkpoint [ 114.579170][ T5765] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 114.608459][ T5428] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 114.630590][ T4845] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 114.644917][ T4845] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 114.661685][ T5730] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 114.731302][ T4845] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 114.743362][ T4845] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 114.752056][ T4845] usb 6-1: SerialNumber: syz [ 115.024009][ T5428] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 115.040842][ T4845] usb 6-1: 0:2 : does not exist [ 115.047354][ T5428] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 115.078190][ T5428] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 115.088352][ T4845] usb 6-1: USB disconnect, device number 5 [ 115.098273][ T5428] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 115.117274][ T5428] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.181501][ T5428] usb 2-1: config 0 descriptor?? [ 115.198792][ T5762] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 115.386982][ T5730] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.398710][ T5730] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.407801][ T5730] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.424213][ T5730] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.493094][ T5775] loop0: detected capacity change from 0 to 32768 [ 115.528927][ T5773] loop4: detected capacity change from 0 to 32768 [ 115.616881][ T5775] JBD2: Ignoring recovery information on journal [ 115.618864][ T5773] JBD2: Ignoring recovery information on journal [ 115.651958][ T5428] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 115.676236][ T5428] plantronics 0003:047F:FFFF.000A: No inputs registered, leaving [ 115.732183][ T5775] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 115.751006][ T5428] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 115.789369][ T5780] loop2: detected capacity change from 0 to 1024 [ 115.793725][ T5773] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 115.857897][ T26] kauditd_printk_skb: 2 callbacks suppressed [ 115.857912][ T26] audit: type=1800 audit(1736877182.035:40): pid=5773 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.469" name="file1" dev="loop4" ino=16946 res=0 errno=0 [ 115.935485][ T4166] ocfs2: Unmounting device (7,4) on (node local) [ 115.944268][ T4845] usb 2-1: USB disconnect, device number 9 [ 115.965988][ T4169] ocfs2: Unmounting device (7,0) on (node local) [ 116.007719][ T5130] hfsplus: b-tree write err: -5, ino 4 [ 116.358849][ T5798] loop4: detected capacity change from 0 to 256 [ 116.480475][ T5798] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 116.548448][ T23] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 116.575915][ T5803] loop1: detected capacity change from 0 to 16 [ 116.687198][ T5803] erofs: (device loop1): mounted with root inode @ nid 36. [ 116.741842][ T5803] attempt to access beyond end of device [ 116.741842][ T5803] loop1: rw=524288, want=525144, limit=16 [ 116.768819][ T5803] attempt to access beyond end of device [ 116.768819][ T5803] loop1: rw=524288, want=720, limit=16 [ 116.780621][ T5803] attempt to access beyond end of device [ 116.780621][ T5803] loop1: rw=524288, want=19328, limit=16 [ 116.868024][ T5794] loop5: detected capacity change from 0 to 40427 [ 116.928592][ T23] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 116.953355][ T23] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 116.953769][ T5794] F2FS-fs (loop5): invalid crc value [ 117.015244][ T5794] F2FS-fs (loop5): Found nat_bits in checkpoint [ 117.048271][ T1109] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 117.089286][ T5806] loop4: detected capacity change from 0 to 32768 [ 117.121502][ T5794] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 117.178456][ T23] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 117.181308][ T5794] F2FS-fs (loop5) : inject kmalloc in f2fs_kmalloc of __f2fs_setxattr+0x26a/0x12d0 [ 117.187818][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.209275][ T23] usb 3-1: Product: syz [ 117.213611][ T23] usb 3-1: Manufacturer: syz [ 117.218645][ T23] usb 3-1: SerialNumber: syz [ 117.227854][ T5806] XFS (loop4): Mounting V5 Filesystem [ 117.264881][ T5794] overlayfs: failed to verify upper (/file1, ino=10, err=-12) [ 117.277261][ T5806] XFS (loop4): Ending clean mount [ 117.289057][ T5794] overlayfs: failed to verify index dir 'upper' xattr [ 117.296290][ T5794] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 117.348949][ T1109] usb 1-1: Using ep0 maxpacket: 32 [ 117.410656][ T4166] XFS (loop4): Unmounting Filesystem [ 117.413664][ T5264] attempt to access beyond end of device [ 117.413664][ T5264] loop5: rw=2049, want=45120, limit=40427 [ 117.468932][ T1109] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 117.549404][ T23] usb 3-1: 0:2 : does not exist [ 117.568867][ T5809] loop1: detected capacity change from 0 to 40427 [ 117.579028][ T23] usb 3-1: USB disconnect, device number 8 [ 117.653506][ T1109] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 117.676456][ T5809] F2FS-fs (loop1): invalid crc value [ 117.676724][ T1109] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 117.696283][ T1109] usb 1-1: Product: syz [ 117.697252][ T5809] F2FS-fs (loop1): Found nat_bits in checkpoint [ 117.701372][ T1109] usb 1-1: Manufacturer: syz [ 117.712912][ T1109] usb 1-1: SerialNumber: syz [ 117.720136][ T1109] usb 1-1: config 0 descriptor?? [ 117.746018][ T5807] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 117.777075][ T5809] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 117.859292][ T4507] udevd[4507]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 117.944550][ T4165] attempt to access beyond end of device [ 117.944550][ T4165] loop1: rw=2049, want=45104, limit=40427 [ 117.986402][ T5825] loop6: detected capacity change from 0 to 524287999 [ 118.049693][ C0] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 118.061454][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 118.071488][ C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 118.082449][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 118.099568][ T5827] kvm [5826]: vcpu0, guest rIP: 0xfff0 vmx_set_msr: BTF|LBR in IA32_DEBUGCTLMSR 0x50000062b, nop [ 118.122254][ C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 118.133292][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 118.158757][ T5825] ldm_validate_partition_table(): Disk read failed. [ 118.173776][ C1] blk_update_request: I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 118.178361][ T5825] Dev loop6: unable to read RDB block 0 [ 118.203147][ C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 118.214340][ C1] Buffer I/O error on dev loop6, logical block 0, lost async page write [ 118.242040][ C1] blk_update_request: I/O error, dev loop6, sector 24 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 118.253078][ C1] Buffer I/O error on dev loop6, logical block 3, async page read [ 118.261363][ T5825] loop6: unable to read partition table [ 118.267789][ T5825] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 118.297669][ T4701] usb 1-1: USB disconnect, device number 10 [ 118.329514][ C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 118.340458][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 118.370121][ C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 118.381086][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 118.412537][ C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 118.423493][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 118.441950][ C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 118.442089][ T5843] loop4: detected capacity change from 0 to 2048 [ 118.452900][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 118.453270][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 118.460532][ T5845] loop2: detected capacity change from 0 to 256 [ 118.473238][ T3545] ldm_validate_partition_table(): Disk read failed. [ 118.496469][ T3545] Dev loop6: unable to read RDB block 0 [ 118.503631][ T3545] loop6: unable to read partition table [ 118.522782][ T5847] input: syz0 as /devices/virtual/input/input10 [ 118.555632][ T5843] UDF-fs: error (device loop4): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 118.583652][ T5843] UDF-fs: error (device loop4): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 118.603166][ T5845] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 118.613385][ T5849] loop5: detected capacity change from 0 to 2048 [ 118.625214][ T5843] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 118.637412][ T5843] UDF-fs: Scanning with blocksize 512 failed [ 118.651906][ T5843] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 118.736151][ T5854] netlink: 16 bytes leftover after parsing attributes in process `syz.1.496'. [ 118.816301][ T5858] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 118.898255][ T4701] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 118.968539][ T5857] loop2: detected capacity change from 0 to 4096 [ 118.982975][ T5857] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 119.138703][ T4701] usb 1-1: Using ep0 maxpacket: 32 [ 119.258461][ T4701] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 119.398423][ T4845] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 119.445989][ T4701] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 119.456016][ T5878] mkiss: ax0: crc mode is auto. [ 119.461654][ T4701] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 119.470059][ T4701] usb 1-1: Product: syz [ 119.474503][ T4701] usb 1-1: Manufacturer: syz [ 119.481259][ T4701] usb 1-1: SerialNumber: syz [ 119.496370][ T4701] usb 1-1: config 0 descriptor?? [ 119.518590][ T5807] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 119.540686][ T5878] Falling back ldisc for ptm0. [ 119.648321][ T4845] usb 5-1: Using ep0 maxpacket: 16 [ 119.663046][ T4702] usb 1-1: USB disconnect, device number 11 [ 119.668288][ T5428] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 119.704675][ T5887] tipc: Started in network mode [ 119.749262][ T5887] tipc: Node identity 1, cluster identity 4711 [ 119.769551][ T4845] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 119.776448][ T5887] tipc: Node number set to 1 [ 119.782677][ T4845] usb 5-1: config 0 has no interfaces? [ 119.790449][ T4845] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 119.799857][ T4845] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.818546][ T4845] usb 5-1: config 0 descriptor?? [ 119.904845][ T5893] loop1: detected capacity change from 0 to 1024 [ 120.081034][ T23] usb 5-1: USB disconnect, device number 5 [ 120.128565][ T5428] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.149986][ T5428] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 120.180404][ T5428] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.209235][ T5428] usb 3-1: config 0 descriptor?? [ 120.513037][ T5911] loop0: detected capacity change from 0 to 32768 [ 120.578475][ T5428] usbhid 3-1:0.0: can't add hid device: -71 [ 120.601869][ T5428] usbhid: probe of 3-1:0.0 failed with error -71 [ 120.616234][ T5911] JBD2: Ignoring recovery information on journal [ 120.648613][ T5428] usb 3-1: USB disconnect, device number 9 [ 120.700401][ T5911] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 120.708970][ T5922] overlayfs: unrecognized mount option " [ 120.708970][ T5922] time [ 120.708970][ T5922] string [ 120.708970][ T5922] statistic [ 120.708970][ T5922] state [ 120.708970][ T5922] realm [ 120.708970][ T5922] rateest [ 120.708970][ T5922] quota [ 120.708970][ T5922] pkttype [ 120.708970][ T5922] physdev [ 120.708970][ T5922] cgroup [ 120.708970][ T5922] cgroup [ 120.708970][ T5922] cgroup [ 120.708970][ T5922] owner [ 120.708970][ T5922] nfacct [ 120.708970][ T5922] nfacct [ 120.708970][ T5922] mac [ 120.708970][ T5922] limit [ 120.708970][ T5922] ipvs [ 120.708970][ T5922] helper [ 120.708970][ T5922] devgroup [ 120.708970][ T5922] cpu [ 120.708970][ T5922] conntrack [ 120.708970][ T5922] conntrack [ 120.708970][ T5922] conntrack [ 120.708970][ T5922] connlabel [ 120.708970][ T5922] connbytes [ 120.708970][ T5922] comment [ 120.708970][ T5922] bpf [ 120.708970][ T5922] bpf [ 120.708970][ T5922] connmark [ 120.708970][ T5922] mark [ 120.739894][ T26] audit: type=1804 audit(1736881281.894:41): pid=5911 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.521" name="/newroot/104/file1/bus" dev="loop0" ino=16946 res=1 errno=0 [ 120.865418][ T5911] Invalid ELF header magic: != ELF [ 120.909755][ T26] audit: type=1800 audit(1736881282.014:42): pid=5911 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.521" name="bus" dev="loop0" ino=16946 res=0 errno=0 [ 120.935729][ T5932] 9pnet: p9_errstr2errno: server reported unknown error œæçæŒÎsÅ‚Ümý¼§6°'ßtÿT ð#>÷‰r [ 120.965967][ T4169] ocfs2: Unmounting device (7,0) on (node local) [ 121.173607][ T5428] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 121.212257][ T5942] loop1: detected capacity change from 0 to 128 [ 121.257566][ T5942] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 121.430243][ T5428] usb 3-1: Using ep0 maxpacket: 16 [ 121.442270][ T5954] input: syz1 as /devices/virtual/input/input11 [ 121.578685][ T5428] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 121.581224][ T5962] loop1: detected capacity change from 0 to 1024 [ 121.596426][ T5428] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 121.596454][ T5428] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.605664][ T5428] usb 3-1: config 0 descriptor?? [ 121.718695][ T26] audit: type=1800 audit(1736881282.904:43): pid=5962 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.538" name=A814F6F2377BCFC78E2E86368C138510A04CEDF7175AF8C2034FAE7413E3ACE8C71AB9A0AF1CA7042011A6ED028E205648535DABF3B2F85196AE18D36B839E3CD54AE4933AD529888FDAC7BB8A70C72BC0FC81BA06506F2D5BC7686E219BBE5283959CBEF9950E071CB6D9F341FC624A5110341F26CEBD71 dev="loop1" ino=25 res=0 errno=0 [ 122.089611][ T5189] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 122.099333][ T5428] mcp2221 0003:04D8:00DD.000B: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 122.183847][ T5958] loop0: detected capacity change from 0 to 40427 [ 122.258718][ T5958] F2FS-fs (loop0): invalid crc value [ 122.270650][ T5958] F2FS-fs (loop0): Wrong journal entry on segno 24 [ 122.280045][ T5958] F2FS-fs (loop0): Failed to initialize F2FS segment manager (-117) [ 122.312013][ T5973] loop1: detected capacity change from 0 to 32768 [ 122.328461][ T5189] usb 5-1: Using ep0 maxpacket: 8 [ 122.460656][ T5973] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.543 (5973) [ 122.476420][ T26] audit: type=1326 audit(1736881283.664:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5984 comm="syz.5.548" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff67b9dcd29 code=0x0 [ 122.500026][ T5189] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 122.528680][ T5189] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 122.544173][ T5973] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 122.552882][ T5189] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 122.552915][ T5189] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 122.552935][ T5189] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 122.552975][ T5189] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 122.552997][ T5189] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.556328][ T5428] usb 3-1: USB disconnect, device number 10 [ 122.603114][ T5973] BTRFS info (device loop1): use zlib compression, level 3 [ 122.621369][ T5973] BTRFS info (device loop1): setting nodatacow, compression disabled [ 122.648589][ T5973] BTRFS info (device loop1): turning on flush-on-commit [ 122.658489][ T5973] BTRFS info (device loop1): turning off barriers [ 122.672246][ T5973] BTRFS info (device loop1): enabling auto defrag [ 122.698626][ T5973] BTRFS info (device loop1): max_inline at 0 [ 122.704690][ T5973] BTRFS info (device loop1): turning on sync discard [ 122.742887][ T5973] BTRFS info (device loop1): using free space tree [ 122.759666][ T5973] BTRFS info (device loop1): has skinny extents [ 122.810662][ T5973] BTRFS info (device loop1): enabling ssd optimizations [ 122.849665][ T5189] usb 5-1: usb_control_msg returned -32 [ 122.855389][ T5189] usbtmc 5-1:16.0: can't read capabilities [ 123.117075][ T6015] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 123.130554][ T6015] syzkaller0: linktype set to 512 [ 123.248219][ T5189] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 123.539657][ T5189] usb 1-1: Using ep0 maxpacket: 16 [ 123.703958][ T5189] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 123.718364][ T5189] usb 1-1: config 0 has no interface number 0 [ 123.728555][ T5189] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.749949][ T5189] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 123.777493][ T5189] usb 1-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 123.799343][ T5189] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.828577][ T5189] usb 1-1: config 0 descriptor?? [ 123.922602][ T4702] usb 5-1: USB disconnect, device number 6 [ 124.002513][ T6036] loop2: detected capacity change from 0 to 32768 [ 124.026897][ T6036] XFS: attr2 mount option is deprecated. [ 124.032826][ T6036] XFS: ikeep mount option is deprecated. [ 124.057625][ T6036] XFS (loop2): Mounting V5 Filesystem [ 124.113726][ T6036] XFS (loop2): Ending clean mount [ 124.121347][ T13] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 124.132039][ T6036] XFS (loop2): Quotacheck needed: Please wait. [ 124.173491][ T6036] XFS (loop2): Quotacheck: Done. [ 124.213932][ T4173] XFS (loop2): Unmounting Filesystem [ 124.285124][ T26] audit: type=1326 audit(1736881285.474:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6024 comm="syz.1.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe689ff7d29 code=0x7fc00000 [ 124.307210][ C0] vkms_vblank_simulate: vblank timer overrun [ 124.368431][ T13] usb 6-1: Using ep0 maxpacket: 16 [ 124.390180][ T6049] netlink: 'syz.1.562': attribute type 39 has an invalid length. [ 124.548565][ T5189] uclogic 0003:28BD:0071.000C: pen parameters not found [ 124.564246][ T5189] uclogic 0003:28BD:0071.000C: interface is invalid, ignoring [ 124.580882][ T13] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 124.594700][ T13] usb 6-1: config 0 has no interfaces? [ 124.632214][ T4701] usb 1-1: USB disconnect, device number 12 [ 124.796674][ T26] audit: type=1326 audit(1736881285.974:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6059 comm="syz.2.566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85e828cd29 code=0x7ffc0000 [ 124.846379][ T26] audit: type=1326 audit(1736881285.974:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6059 comm="syz.2.566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85e828cd29 code=0x7ffc0000 [ 124.893838][ T13] usb 6-1: string descriptor 0 read error: -22 [ 124.908259][ T5189] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 124.916105][ T26] audit: type=1326 audit(1736881286.004:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6059 comm="syz.2.566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f85e828cd29 code=0x7ffc0000 [ 124.916217][ T13] usb 6-1: New USB device found, idVendor=1b3d, idProduct=9313, bcdDevice=b3.a8 [ 124.938154][ C0] vkms_vblank_simulate: vblank timer overrun [ 124.958203][ T26] audit: type=1326 audit(1736881286.014:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6059 comm="syz.2.566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85e828cd29 code=0x7ffc0000 [ 125.028480][ T13] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.037410][ T26] audit: type=1326 audit(1736881286.014:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6059 comm="syz.2.566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85e828cd29 code=0x7ffc0000 [ 125.066622][ T13] usb 6-1: config 0 descriptor?? [ 125.088549][ T26] audit: type=1326 audit(1736881286.014:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6062 comm="syz.2.566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f85e82bf5e5 code=0x7ffc0000 [ 125.103843][ T6060] loop2: detected capacity change from 0 to 8192 [ 125.218273][ T5189] usb 5-1: Using ep0 maxpacket: 8 [ 125.367033][ T4701] usb 6-1: USB disconnect, device number 6 [ 125.378456][ T5189] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.418719][ T5189] usb 5-1: config 0 interface 0 has no altsetting 0 [ 125.443897][ T5189] usb 5-1: New USB device found, idVendor=05ac, idProduct=0236, bcdDevice= 0.00 [ 125.468348][ T5189] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.518787][ T5189] usb 5-1: config 0 descriptor?? [ 125.754879][ T6081] loop2: detected capacity change from 0 to 512 [ 125.824863][ T6064] loop1: detected capacity change from 0 to 40427 [ 125.854164][ T6081] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 125.916505][ T6064] F2FS-fs (loop1): invalid crc value [ 125.940450][ T6081] EXT4-fs (loop2): 1 truncate cleaned up [ 125.946219][ T6081] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,max_batch_time=0x000000000000da1d,jqfmt=vfsv0,nolazytime,nojournal_checksum,acl,. Quota mode: none. [ 125.956872][ T6085] loop0: detected capacity change from 0 to 4096 [ 125.983319][ T6064] F2FS-fs (loop1): Found nat_bits in checkpoint [ 126.144151][ T5189] apple 0003:05AC:0236.000D: unexpected long global item [ 126.167184][ T6085] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 126.200367][ T5189] apple 0003:05AC:0236.000D: parse failed [ 126.216177][ T6064] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 126.238188][ T5189] apple: probe of 0003:05AC:0236.000D failed with error -22 [ 126.289730][ T6064] F2FS-fs (loop1) : inject orphan in f2fs_acquire_orphan_inode of __f2fs_tmpfile+0x1a3/0x300 [ 126.299740][ T6085] ntfs3: loop0: Inode r=19 is not in use! [ 126.306818][ T6085] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 126.361662][ T1109] usb 5-1: USB disconnect, device number 7 [ 126.365571][ T6064] overlayfs: upper fs does not support tmpfile. [ 126.389417][ T6085] ntfs3: loop0: ino=1d, "file1" failed to open parent directory r=400 to update [ 126.421835][ T6064] overlayfs: failed to resolve './file0/../file0': -20 [ 126.422009][ T6085] ntfs3: loop0: ino=1d, "file1" failed to open parent directory r=400 to update [ 126.446297][ T6101] ntfs3: loop0: ino=1d, "file1" failed to open parent directory r=400 to update [ 126.490540][ T4165] attempt to access beyond end of device [ 126.490540][ T4165] loop1: rw=2049, want=45120, limit=40427 [ 126.509379][ T144] ntfs3: loop0: ino=1d, failed to open parent directory r=400 to update [ 126.735108][ T26] kauditd_printk_skb: 25 callbacks suppressed [ 126.735123][ T26] audit: type=1326 audit(1736885382.914:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6104 comm="syz.0.583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5367ce5d29 code=0x7ffc0000 [ 126.836490][ T26] audit: type=1326 audit(1736885382.914:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6104 comm="syz.0.583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5367ce5d29 code=0x7ffc0000 [ 126.873207][ T26] audit: type=1326 audit(1736885382.984:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6104 comm="syz.0.583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=36 compat=0 ip=0x7f5367ce5d29 code=0x7ffc0000 [ 126.900165][ T26] audit: type=1326 audit(1736885382.984:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6104 comm="syz.0.583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5367ce5d29 code=0x7ffc0000 [ 126.982657][ T26] audit: type=1326 audit(1736885382.984:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6104 comm="syz.0.583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5367ce5d29 code=0x7ffc0000 [ 127.243226][ T6115] loop0: detected capacity change from 0 to 2048 [ 127.304284][ T6115] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 127.398573][ T6115] attempt to access beyond end of device [ 127.398573][ T6115] loop0: rw=524288, want=33554432, limit=2048 [ 127.411870][ T6127] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 127.418866][ T6123] loop5: detected capacity change from 0 to 8192 [ 127.508399][ T5428] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 127.559296][ T6123] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal [ 127.595023][ T6123] REISERFS (device loop5): using ordered data mode [ 127.624518][ T6123] reiserfs: using flush barriers [ 127.644760][ T6123] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 127.667616][ T6123] REISERFS (device loop5): checking transaction log (loop5) [ 127.704755][ T6123] REISERFS (device loop5): Using r5 hash to sort names [ 127.725775][ T6119] loop4: detected capacity change from 0 to 32768 [ 127.736913][ T6123] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 127.779406][ T5428] usb 2-1: Using ep0 maxpacket: 16 [ 127.903215][ T5428] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.931676][ T5428] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 127.966608][ T5428] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 127.981779][ T5428] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.993059][ T5428] usb 2-1: config 0 descriptor?? [ 128.004871][ T6119] XFS (loop4): Mounting V5 Filesystem [ 128.085866][ T6134] loop0: detected capacity change from 0 to 32768 [ 128.134069][ T6119] XFS (loop4): Ending clean mount [ 128.143683][ T6119] XFS (loop4): Quotacheck needed: Please wait. [ 128.239348][ T6134] XFS (loop0): Mounting V5 Filesystem [ 128.289470][ T6119] XFS (loop4): Quotacheck: Done. [ 128.405136][ T4166] XFS (loop4): Unmounting Filesystem [ 128.499474][ T5428] HID 045e:07da: Invalid code 65791 type 1 [ 128.535515][ T5428] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.000E/input/input12 [ 128.549209][ T5428] microsoft 0003:045E:07DA.000E: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 128.570883][ T6134] XFS (loop0): Ending clean mount [ 128.615274][ T26] audit: type=1804 audit(1736885384.794:82): pid=6134 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.595" name="/newroot/121/file0/file1" dev="loop0" ino=9286 res=1 errno=0 [ 128.724134][ T4169] XFS (loop0): Unmounting Filesystem [ 128.951416][ T6163] loop2: detected capacity change from 0 to 32768 [ 129.096987][ T9] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.141757][ T6163] XFS (loop2): Mounting V5 Filesystem [ 129.197394][ T6179] loop4: detected capacity change from 0 to 2048 [ 129.239988][ T9] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.270864][ T6179] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 129.306724][ T6163] XFS (loop2): Ending clean mount [ 129.331395][ T23] usb 2-1: USB disconnect, device number 10 [ 129.374414][ T6179] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 129.403322][ T6179] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 129.414501][ T6163] XFS (loop2): Quotacheck needed: Please wait. [ 129.430102][ T9] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.488070][ T6188] netlink: 'syz.0.609': attribute type 10 has an invalid length. [ 129.513069][ T6188] device syz_tun entered promiscuous mode [ 129.536107][ T6188] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 129.580414][ T6163] XFS (loop2): Quotacheck: Done. [ 129.621189][ T9] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.699631][ T5189] hid-generic 07FF:0003:0003.000F: unknown main item tag 0x0 [ 129.716518][ T5189] hid-generic 07FF:0003:0003.000F: unknown main item tag 0x0 [ 129.737038][ T5189] hid-generic 07FF:0003:0003.000F: unknown main item tag 0x0 [ 129.768056][ T5189] hid-generic 07FF:0003:0003.000F: unknown main item tag 0x0 [ 129.783489][ T5189] hid-generic 07FF:0003:0003.000F: unknown main item tag 0x0 [ 129.791869][ T5189] hid-generic 07FF:0003:0003.000F: unknown main item tag 0x0 [ 129.799727][ T5189] hid-generic 07FF:0003:0003.000F: unknown main item tag 0x0 [ 129.807334][ T5189] hid-generic 07FF:0003:0003.000F: unknown main item tag 0x0 [ 129.817074][ T5189] hid-generic 07FF:0003:0003.000F: unknown main item tag 0x0 [ 129.825691][ T5189] hid-generic 07FF:0003:0003.000F: unknown main item tag 0x0 [ 129.842768][ T5189] hid-generic 07FF:0003:0003.000F: unknown main item tag 0x0 [ 129.856643][ T5189] hid-generic 07FF:0003:0003.000F: unknown main item tag 0x0 [ 129.869855][ T5189] hid-generic 07FF:0003:0003.000F: unknown main item tag 0x0 [ 129.877302][ T5189] hid-generic 07FF:0003:0003.000F: unknown main item tag 0x0 [ 129.884934][ T6196] loop1: detected capacity change from 0 to 512 [ 129.888680][ T5189] hid-generic 07FF:0003:0003.000F: unknown main item tag 0x0 [ 129.902416][ T5189] hid-generic 07FF:0003:0003.000F: unknown main item tag 0x0 [ 129.911232][ T5189] hid-generic 07FF:0003:0003.000F: unknown main item tag 0x0 [ 129.923262][ T5189] hid-generic 07FF:0003:0003.000F: unknown main item tag 0x0 [ 129.931182][ T5189] hid-generic 07FF:0003:0003.000F: unknown main item tag 0x0 [ 129.935571][ T6196] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 129.938997][ T5189] hid-generic 07FF:0003:0003.000F: unknown main item tag 0x0 [ 129.951402][ T6196] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 129.954839][ T5189] hid-generic 07FF:0003:0003.000F: unknown main item tag 0x0 [ 129.970082][ T5189] hid-generic 07FF:0003:0003.000F: unknown main item tag 0x0 [ 129.977503][ T5189] hid-generic 07FF:0003:0003.000F: unknown main item tag 0x0 [ 129.981637][ T6196] EXT4-fs (loop1): 1 truncate cleaned up [ 129.985442][ T5189] hid-generic 07FF:0003:0003.000F: unknown main item tag 0x0 [ 129.990939][ T6196] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota="errors=continue,noload,data_err=ignore,grpjquota="errors=continue,errors=remount-ro,noblock_validity,. Quota mode: writeback. [ 130.003454][ T5189] hid-generic 07FF:0003:0003.000F: unknown main item tag 0x0 [ 130.026277][ T5189] hid-generic 07FF:0003:0003.000F: unknown main item tag 0x0 [ 130.033852][ T5189] hid-generic 07FF:0003:0003.000F: unknown main item tag 0x0 [ 130.041316][ T5189] hid-generic 07FF:0003:0003.000F: unknown main item tag 0x0 [ 130.048771][ T5189] hid-generic 07FF:0003:0003.000F: unknown main item tag 0x0 [ 130.056165][ T5189] hid-generic 07FF:0003:0003.000F: unknown main item tag 0x0 [ 130.063581][ T5189] hid-generic 07FF:0003:0003.000F: unknown main item tag 0x0 [ 130.071029][ T5189] hid-generic 07FF:0003:0003.000F: unknown main item tag 0x0 [ 130.078505][ T5189] hid-generic 07FF:0003:0003.000F: unknown main item tag 0x0 [ 130.085902][ T5189] hid-generic 07FF:0003:0003.000F: unknown main item tag 0x0 [ 130.093342][ T5189] hid-generic 07FF:0003:0003.000F: unknown main item tag 0x0 [ 130.100895][ T5189] hid-generic 07FF:0003:0003.000F: unknown main item tag 0x0 [ 130.108358][ T5189] hid-generic 07FF:0003:0003.000F: unknown main item tag 0x0 [ 130.115744][ T5189] hid-generic 07FF:0003:0003.000F: unknown main item tag 0x0 [ 130.123169][ T5189] hid-generic 07FF:0003:0003.000F: unknown main item tag 0x0 [ 130.130690][ T5189] hid-generic 07FF:0003:0003.000F: unknown main item tag 0x0 [ 130.138078][ T5189] hid-generic 07FF:0003:0003.000F: unknown main item tag 0x0 [ 130.145517][ T5189] hid-generic 07FF:0003:0003.000F: unknown main item tag 0x0 [ 130.153005][ T5189] hid-generic 07FF:0003:0003.000F: unknown main item tag 0x0 [ 130.160441][ T5189] hid-generic 07FF:0003:0003.000F: unknown main item tag 0x0 [ 130.168977][ T5189] hid-generic 07FF:0003:0003.000F: hidraw0: HID v0.02 Device [syz0] on syz0 [ 130.226281][ T4173] XFS (loop2): Unmounting Filesystem [ 130.337742][ T9] tipc: Left network mode [ 130.443982][ T6184] chnl_net:caif_netlink_parms(): no params data found [ 130.473113][ T5189] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 130.745622][ T6184] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.757321][ T6184] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.760167][ T6201] loop0: detected capacity change from 0 to 40427 [ 130.777000][ T6184] device bridge_slave_0 entered promiscuous mode [ 130.815335][ T6184] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.824596][ T6184] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.849040][ T6184] device bridge_slave_1 entered promiscuous mode [ 130.861166][ T6201] F2FS-fs (loop0): invalid crc value [ 130.877420][ T6201] F2FS-fs (loop0): Found nat_bits in checkpoint [ 130.888387][ T5189] usb 5-1: config 0 has no interfaces? [ 130.893895][ T5189] usb 5-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 130.941652][ T5189] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.957821][ T5189] usb 5-1: config 0 descriptor?? [ 130.960287][ T6201] F2FS-fs (loop0): Start checkpoint disabled! [ 130.976814][ T6201] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 131.022775][ T6201] attempt to access beyond end of device [ 131.022775][ T6201] loop0: rw=2049, want=45192, limit=40427 [ 131.049931][ T6184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 131.077156][ T6184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 131.103721][ T4224] attempt to access beyond end of device [ 131.103721][ T4224] loop0: rw=2049, want=40984, limit=40427 [ 131.123085][ T1109] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 131.139142][ T6184] team0: Port device team_slave_0 added [ 131.156120][ T6184] team0: Port device team_slave_1 added [ 131.201502][ T6184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 131.216347][ T6184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 131.221344][ T5189] usb 5-1: USB disconnect, device number 8 [ 131.251903][ T6184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 131.296338][ T6184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 131.320527][ T6184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 131.356463][ T6184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 131.399824][ T6184] device hsr_slave_0 entered promiscuous mode [ 131.406758][ T6184] device hsr_slave_1 entered promiscuous mode [ 131.408238][ T1109] usb 2-1: Using ep0 maxpacket: 16 [ 131.418402][ T6184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 131.432767][ T6184] Cannot create hsr debugfs directory [ 131.438430][ T23] Bluetooth: hci3: command 0x0409 tx timeout [ 131.548336][ T1109] usb 2-1: config index 0 descriptor too short (expected 16456, got 72) [ 131.560075][ T1109] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 131.577319][ T1109] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 131.604764][ T1109] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 131.615911][ T1109] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 131.624970][ T1109] usb 2-1: config 0 has no interface number 0 [ 131.631556][ T1109] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 131.633646][ T9] device hsr_slave_0 left promiscuous mode [ 131.642827][ T1109] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 131.658644][ T9] device hsr_slave_1 left promiscuous mode [ 131.658665][ T1109] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 131.674558][ T1109] usb 2-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 131.687829][ T1109] usb 2-1: config 0 interface 125 has no altsetting 0 [ 131.693458][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 131.695027][ T1109] usb 2-1: config 0 interface 125 has no altsetting 2 [ 131.707345][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 131.718813][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 131.726343][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 131.735544][ T9] device bridge_slave_1 left promiscuous mode [ 131.742070][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.751959][ T9] device bridge_slave_0 left promiscuous mode [ 131.761695][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.800753][ T6222] loop2: detected capacity change from 0 to 64 [ 131.834401][ T9] device veth1_macvtap left promiscuous mode [ 131.865140][ T9] device veth0_macvtap left promiscuous mode [ 131.872346][ T9] device veth1_vlan left promiscuous mode [ 131.884504][ T9] device veth0_vlan left promiscuous mode [ 131.898755][ T1109] usb 2-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 131.915728][ T1109] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.936244][ T1109] usb 2-1: Product: syz [ 131.942665][ T1109] usb 2-1: Manufacturer: syz [ 131.947773][ T1109] usb 2-1: SerialNumber: syz [ 131.955035][ T1109] usb 2-1: config 0 descriptor?? [ 132.000052][ T1109] usb 2-1: selecting invalid altsetting 2 [ 132.190729][ T9] team0 (unregistering): Port device team_slave_1 removed [ 132.207335][ T9] team0 (unregistering): Port device team_slave_0 removed [ 132.219604][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 132.234888][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 132.332372][ T9] bond0 (unregistering): Released all slaves [ 132.790361][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.796701][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.867359][ T1109] parport0: fix this legacy no-device port driver! [ 133.090171][ T23] usb 2-1: USB disconnect, device number 11 [ 133.128113][ T6184] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 133.163200][ T6184] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 133.200447][ T6184] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 133.250311][ T6184] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 133.389159][ T6259] loop4: detected capacity change from 0 to 164 [ 133.489580][ T6184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 133.521437][ T23] Bluetooth: hci3: command 0x041b tx timeout [ 133.554701][ T436] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 133.570365][ T436] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 133.610970][ T6259] iso9660: Corrupted directory entry in block 0 of inode 1920 [ 133.626767][ T6184] 8021q: adding VLAN 0 to HW filter on device team0 [ 133.663608][ T436] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 133.691247][ T436] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 133.740530][ T436] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.747621][ T436] bridge0: port 1(bridge_slave_0) entered forwarding state [ 133.785712][ T4166] VFS: Busy inodes after unmount of loop4. Self-destruct in 5 seconds. Have a nice day... [ 133.815208][ T436] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 133.870752][ T436] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 133.895689][ T436] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 133.951862][ T436] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.959018][ T436] bridge0: port 2(bridge_slave_1) entered forwarding state [ 134.034487][ T436] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 134.080346][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 134.107770][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 134.109834][ T6257] loop0: detected capacity change from 0 to 32768 [ 134.151952][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 134.191707][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 134.222461][ T6257] JBD2: Ignoring recovery information on journal [ 134.257395][ T436] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 134.289724][ T436] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 134.296669][ T6257] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 134.304745][ T436] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 134.318600][ T436] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 134.327106][ T436] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 134.335633][ T436] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 134.345076][ T6184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 134.409721][ T26] audit: type=1800 audit(1736885390.594:83): pid=6257 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.634" name="file1" dev="loop0" ino=16946 res=0 errno=0 [ 134.504880][ T4169] ocfs2: Unmounting device (7,0) on (node local) [ 134.512495][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 134.520528][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 134.534102][ T6184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 134.788499][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 134.797829][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 134.818745][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 134.827406][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 134.838475][ T6184] device veth0_vlan entered promiscuous mode [ 134.849456][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 134.857858][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 134.868757][ T6184] device veth1_vlan entered promiscuous mode [ 134.893172][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 134.908596][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 134.919069][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 134.927680][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 134.939908][ T6184] device veth0_macvtap entered promiscuous mode [ 134.951807][ T6184] device veth1_macvtap entered promiscuous mode [ 134.973593][ T6184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.990940][ T6184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.006467][ T6184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 135.019232][ T6184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.034637][ T6184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 135.047384][ T6184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.062317][ T6184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 135.071246][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 135.080192][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 135.088737][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 135.098620][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 135.109430][ T6184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.131130][ T6184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.144252][ T6184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.157003][ T6184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.170567][ T6184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.184537][ T6184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.203308][ T6184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 135.213878][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 135.223337][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 135.237808][ T6184] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.248657][ T6184] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.257371][ T6184] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.266534][ T6184] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.371720][ T5130] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.398333][ T5130] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.413880][ T4224] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.424403][ T4224] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.430307][ T436] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 135.449840][ T436] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 138.053081][ T436] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.717847][ T436] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.794723][ T436] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.836091][ T436] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.719460][ T436] device hsr_slave_0 left promiscuous mode [ 140.726083][ T436] device hsr_slave_1 left promiscuous mode [ 140.741303][ T436] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 140.755297][ T436] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 140.763221][ T436] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 140.776435][ T436] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 140.784602][ T436] device bridge_slave_1 left promiscuous mode [ 140.796556][ T436] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.807364][ T436] device bridge_slave_0 left promiscuous mode [ 140.819802][ T436] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.836858][ T436] device veth1_macvtap left promiscuous mode [ 140.845312][ T436] device veth0_macvtap left promiscuous mode [ 140.856691][ T436] device veth1_vlan left promiscuous mode [ 140.865773][ T436] device veth0_vlan left promiscuous mode [ 141.167647][ T436] team0 (unregistering): Port device team_slave_1 removed [ 141.188352][ T436] team0 (unregistering): Port device team_slave_0 removed [ 141.202390][ T436] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 141.217805][ T436] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 141.320098][ T436] bond0 (unregistering): Released all slaves