last executing test programs: 2m53.424282626s ago: executing program 0 (id=493): clock_gettime(0x5, &(0x7f0000000140)) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc1105518, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, [0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000]}) 2m53.295866897s ago: executing program 0 (id=494): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "00000100ebffffff", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', "006e34e400"}, 0x28) sendto$inet6(r0, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, '\x00', "c0b67cb29ca2b838d41ac2fc7ddf972d", "e9be1eae", "0daf7461cfccf6ce"}, 0x28) recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/120, 0x4000}], 0x1}, 0x20) 2m52.81588042s ago: executing program 0 (id=498): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() getdents(0xffffffffffffffff, 0x0, 0x48) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_clone3(&(0x7f0000000780)={0x100200080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, 0x0}, 0x58) 2m51.848745375s ago: executing program 0 (id=515): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fe0500000000000000000000950000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_CROP(r4, 0x4014563c, &(0x7f0000000000)={0x0, {0x2, 0x530f, 0x1, 0xfffffffa}}) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_opts(r5, 0x0, 0xee8cc499168dfa47, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r6, 0xc100565c, &(0x7f00000013c0)={0x3, 0x2, 0x2, {0x5, @vbi={0xb5, 0x0, 0x80003, 0x0, [0xfffffffc, 0x8000000], [0x8200, 0x1]}}}) 2m50.426407292s ago: executing program 0 (id=523): r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000040)=@file={0xd570d0466b6018f, './file0\x00'}, 0xa) setuid(0xee01) r1 = socket$unix(0x1, 0x5, 0x0) connect$unix(r1, &(0x7f0000000000)=@file={0xd1653077bafa0114, './file0\x00'}, 0xa) 2m50.293986973s ago: executing program 0 (id=525): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffdae, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2m34.963127622s ago: executing program 32 (id=525): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffdae, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 10.579999456s ago: executing program 2 (id=1442): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x1c, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c00000024"], 0x1c}}, 0x0) 10.464237217s ago: executing program 2 (id=1443): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$bfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x800a, &(0x7f0000000040)={[{'\''}, {'bfs\x00'}, {'5\x00Rl\x00\xc0'}, {'bfs\x00'}, {'bfs\x00'}]}, 0x1, 0x6c, &(0x7f0000000140)="$eJzszrEJQkEQBNDxkgtFMBcswB4sRQw1M1Ks0RLswMAKNFgNzgaEz3uwC7OT7K2nzJPXoOd0vhx2x9phklqSRZJlktW68mNb3ezT35/X/Xeq6X/9GQAAAAAAAAAYtWx+83B4BwAA///WxR5U") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) mount(&(0x7f00000001c0)=@nullb, &(0x7f0000000280)='./bus\x00', &(0x7f0000000000)='omfs\x00', 0x8004, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x880, &(0x7f0000000280)={[{@nobarrier}, {@part={'part', 0x3d, 0x3}}, {@nobarrier}, {@nls={'nls', 0x3d, 'iso8859-14'}}, {@uid}, {@gid}, {@nobarrier}, {@uid}]}, 0x1, 0x5e7, &(0x7f0000000680)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 9.75829676s ago: executing program 2 (id=1449): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000040)=@srh={0x88, 0x0, 0x4, 0x0, 0x80, 0x8, 0x4}, 0x8) 9.301786033s ago: executing program 2 (id=1452): mkdir(&(0x7f0000002880)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1adc51, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f00000001c0)='./file0/../file0/../file0\x00') umount2(&(0x7f0000000240)='./file0/../file0/../file0\x00', 0x0) 8.883831335s ago: executing program 2 (id=1454): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x101000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000800)=0x2) 7.88106466s ago: executing program 2 (id=1460): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$bfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x800a, &(0x7f0000000040)={[{'\''}, {'bfs\x00'}, {'5\x00Rl\x00\xc0'}, {'bfs\x00'}, {'bfs\x00'}]}, 0x1, 0x6c, &(0x7f0000000140)="$eJzszrEJQkEQBNDxkgtFMBcswB4sRQw1M1Ks0RLswMAKNFgNzgaEz3uwC7OT7K2nzJPXoOd0vhx2x9phklqSRZJlktW68mNb3ezT35/X/Xeq6X/9GQAAAAAAAAAYtWx+83B4BwAA///WxR5U") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) mount(&(0x7f00000001c0)=@nullb, &(0x7f0000000280)='./bus\x00', &(0x7f0000000000)='omfs\x00', 0x8004, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x880, &(0x7f0000000280)={[{@nobarrier}, {@part={'part', 0x3d, 0x3}}, {@nobarrier}, {@nls={'nls', 0x3d, 'iso8859-14'}}, {@uid}, {@gid}, {@nobarrier}, {@uid}]}, 0x1, 0x5e7, &(0x7f0000000680)="$eJzs3cFvHFcdB/DvbGLHDiLdpElTEBJWOYAakdjeyAQJCSgFWahClbj0aiWb2somjewtcntAAXFu/wEO5WDOHLiAgpQDZ/4Fox4R3H0LmtlZ78bZbO3Uza7bz0eafe/tm/fmN7/MTmZmZW2Ar6zVdzLzKEVWr7y1XbZ3d1qd3Z3W3X49yZkkjWQuSVG+/dcknyYP0lvyjX7HOMXHqzfXH350udeaq5dqXHGY8ePtx9LsxVqVxzXf8ueeb7CHC0ku1CVM3OO+f4/s/pyfSwBgmhXJqVHvN5Oz9cV6eR/QuyruXWNPhfmvP9+4B8cdCAAAAEyhl/ayl+2cm3QcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcJLUv/9f1EujX19I0f/9/9n6vdT1E+3RpAMAAAAAAAAAgGPw7b3sZTvn+u3HRfWd/2tV42L1+rW8n620s5mr2c5auulmM0tJmkMTzW6vdbubS4cYuTxy5PKL2V8AAAAAAAAA+JL6fVYH3/8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMA0KJJTvaJaLvbrzTROJ5lLMluu9yB52K+fZI8mHQAAAAC8AC/tZS/bOddvPy6qe/5Xqvv+ubyfe+lmI9100s6t6llA766/sbvT6uzutO6Wy9Pz/vR/RwqjmjG9Zw+jt7xYrXFpf8RqfpFf50oW8nY2s5HfZC3dtLOQN6vaWoo066cXzX6co+P9yROttz8r1lerSOZzOxtVbFdzM++lk1tpVPtQrTN+i78rs1P8uHbIHN2qy3KPflmX06FZZWRmPyOLde7LbJwfn4kjHicHt7SUxv4zqItfQM7P1mWZ6zcnkPPGM3sOZmJ56Oh7ZXwmksXl/95f79y7s35768r0HEbP6WAmWkOZuPyVysRsnY3eWfRoZ8vXqrHnspFf5b3cSjs3spgbWcn1tLKSH2ZlKK+XDvFZaxzts/ad79WVmSQ/r8vpUOb1/FBeh890zapv+J1Bli4c/xnp9DfrSnmwvjF1/wucP3Bu7mfi5fGZ+NPj8nWrc+/O5vra/UNu77t1WWbgZ1OVifJ4uVD+Y1WtJ4+Osu/lkX1LVd/F/b7GU32X9vs+65M6W1/DPT3TctV3eWRfq+p7dahv1FUOAFPv7OtnZ+f/M/+v+U/m/zC/Pv/W3Btnbpz51mxm/nn676f+0vhz40fF6/kkvx3c/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAM9v64MP76x1Ou1Nleep/O2PyRSEUVf6v5w1LfGonODKhE9MwBfuWvfu/WtbH3z4/Y27a++2323fu760snz9+uLKD25cu73RaS/2XicdJgBwjAYX/ZOOBAAAAAAAAAAAAAAAeJYX8efEk95HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgy231ncw8SpGlxauLZXt3p9Upl359sOZckqKs/CPJp8mD9JY0h6YrnrWd4uPVm+sPP7o8mGuuv34xbtzhPBFL40BMT2gcfb7lcfMdymAPF5JcqEuYuP8HAAD//9F4/7E=") syz_mount_image$fuse(0x0, &(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 7.742432611s ago: executing program 33 (id=1460): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$bfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x800a, &(0x7f0000000040)={[{'\''}, {'bfs\x00'}, {'5\x00Rl\x00\xc0'}, {'bfs\x00'}, {'bfs\x00'}]}, 0x1, 0x6c, &(0x7f0000000140)="$eJzszrEJQkEQBNDxkgtFMBcswB4sRQw1M1Ks0RLswMAKNFgNzgaEz3uwC7OT7K2nzJPXoOd0vhx2x9phklqSRZJlktW68mNb3ezT35/X/Xeq6X/9GQAAAAAAAAAYtWx+83B4BwAA///WxR5U") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) mount(&(0x7f00000001c0)=@nullb, &(0x7f0000000280)='./bus\x00', &(0x7f0000000000)='omfs\x00', 0x8004, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x880, &(0x7f0000000280)={[{@nobarrier}, {@part={'part', 0x3d, 0x3}}, {@nobarrier}, {@nls={'nls', 0x3d, 'iso8859-14'}}, {@uid}, {@gid}, {@nobarrier}, {@uid}]}, 0x1, 0x5e7, &(0x7f0000000680)="$eJzs3cFvHFcdB/DvbGLHDiLdpElTEBJWOYAakdjeyAQJCSgFWahClbj0aiWb2somjewtcntAAXFu/wEO5WDOHLiAgpQDZ/4Fox4R3H0LmtlZ78bZbO3Uza7bz0eafe/tm/fmN7/MTmZmZW2Ar6zVdzLzKEVWr7y1XbZ3d1qd3Z3W3X49yZkkjWQuSVG+/dcknyYP0lvyjX7HOMXHqzfXH350udeaq5dqXHGY8ePtx9LsxVqVxzXf8ueeb7CHC0ku1CVM3OO+f4/s/pyfSwBgmhXJqVHvN5Oz9cV6eR/QuyruXWNPhfmvP9+4B8cdCAAAAEyhl/ayl+2cm3QcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcJLUv/9f1EujX19I0f/9/9n6vdT1E+3RpAMAAAAAAAAAgGPw7b3sZTvn+u3HRfWd/2tV42L1+rW8n620s5mr2c5auulmM0tJmkMTzW6vdbubS4cYuTxy5PKL2V8AAAAAAAAA+JL6fVYH3/8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMA0KJJTvaJaLvbrzTROJ5lLMluu9yB52K+fZI8mHQAAAAC8AC/tZS/bOddvPy6qe/5Xqvv+ubyfe+lmI9100s6t6llA766/sbvT6uzutO6Wy9Pz/vR/RwqjmjG9Zw+jt7xYrXFpf8RqfpFf50oW8nY2s5HfZC3dtLOQN6vaWoo066cXzX6co+P9yROttz8r1lerSOZzOxtVbFdzM++lk1tpVPtQrTN+i78rs1P8uHbIHN2qy3KPflmX06FZZWRmPyOLde7LbJwfn4kjHicHt7SUxv4zqItfQM7P1mWZ6zcnkPPGM3sOZmJ56Oh7ZXwmksXl/95f79y7s35768r0HEbP6WAmWkOZuPyVysRsnY3eWfRoZ8vXqrHnspFf5b3cSjs3spgbWcn1tLKSH2ZlKK+XDvFZaxzts/ad79WVmSQ/r8vpUOb1/FBeh890zapv+J1Bli4c/xnp9DfrSnmwvjF1/wucP3Bu7mfi5fGZ+NPj8nWrc+/O5vra/UNu77t1WWbgZ1OVifJ4uVD+Y1WtJ4+Osu/lkX1LVd/F/b7GU32X9vs+65M6W1/DPT3TctV3eWRfq+p7dahv1FUOAFPv7OtnZ+f/M/+v+U/m/zC/Pv/W3Btnbpz51mxm/nn676f+0vhz40fF6/kkvx3c/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAM9v64MP76x1Ou1Nleep/O2PyRSEUVf6v5w1LfGonODKhE9MwBfuWvfu/WtbH3z4/Y27a++2323fu760snz9+uLKD25cu73RaS/2XicdJgBwjAYX/ZOOBAAAAAAAAAAAAAAAeJYX8efEk95HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgy231ncw8SpGlxauLZXt3p9Upl359sOZckqKs/CPJp8mD9JY0h6YrnrWd4uPVm+sPP7o8mGuuv34xbtzhPBFL40BMT2gcfb7lcfMdymAPF5JcqEuYuP8HAAD//9F4/7E=") syz_mount_image$fuse(0x0, &(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 7.634191441s ago: executing program 1 (id=1463): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) ioctl$GIO_SCRNMAP(r0, 0x560b, 0x0) 7.485839652s ago: executing program 1 (id=1464): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000101a81, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000000)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x0, 0x0}}, 0x53) write$binfmt_elf32(r0, &(0x7f0000000240)={{0x7f, 0x45, 0x4c, 0x46, 0xe6, 0x8, 0xb7, 0x3, 0x6, 0x2, 0x3e, 0x8, 0x3e8, 0x38, 0x3c4, 0x5, 0x85, 0x20, 0x2, 0x2, 0x6f6}, [{0x6, 0x1, 0x400, 0x81, 0x7, 0x81, 0x9, 0xfffff219}]}, 0x58) 7.379680372s ago: executing program 1 (id=1465): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000580)={0x58, 0x0, &(0x7f0000000480)=[@decrefs={0x40046307, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}, @enter_looper], 0x0, 0x0, &(0x7f0000000540)}) rt_tgsigqueueinfo(0x0, 0x0, 0x1f, &(0x7f0000000140)={0x0, 0x0, 0x1}) 4.649069897s ago: executing program 1 (id=1482): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000004d00)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0xfe06, @mcast2, 0x5}, 0x1c) 4.506036267s ago: executing program 1 (id=1483): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@mpls_newroute={0x1c, 0x18, 0x601}, 0x1c}}, 0x0) 4.166307789s ago: executing program 1 (id=1485): unshare(0x64000600) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="040e0600120c"], 0x9) 2.765888706s ago: executing program 3 (id=1492): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000480)=0x102, 0x4) sendto$packet(r0, 0x0, 0x0, 0xa0c0, &(0x7f0000000540)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 2.652503767s ago: executing program 3 (id=1493): syz_mount_image$ext4(&(0x7f0000000400)='ext2\x00', &(0x7f0000000440)='./file0\x00', 0x1000040, &(0x7f00000001c0)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x8005}}]}, 0x1, 0x3db, &(0x7f00000004c0)="$eJzs3M9rHFUcAPDvTH61TetGbaxVwYWCBsRN06ZqwYO5iAdvevSy5BfFbVO6K5i04A/EoyB69VDEi+DJP0CPevXmVS9SCCL+ASuzmUnXdDftdrNuzH4+MOG9ebO878zLm5e8mbcBjKxyRHwYEZMRsRYRpXx/km/x2s6WHff3X7eWsy2JZvOtP5NWeZaPts9kprMfacRcGpF+EvF0h3rrm1vvVmu11Rt5fr5x9fp8fXPrxStXq+ur66vXXrr08uLC5YuXzh/cuT47Pbv5xfU3Ln+29Wlpffmbc1m8J/Oy9vM4KOUo716TvQ7wtA6Fk8MOgIeSRsRYRIy3+n8pxlqpHaX44J2hBgcADESz2RzbkwcAjrzEmA8AI6b4v794tjeI52AcXttLEXGsU/uP7z4Jmhjg871yRCz+dPz7bIsBPYcFAAAAGGU/LkXEK53mf9J4pu24UxHxSL4+YCYiHo2IxyLi8T7rL+/J3zv/k97pswr2sb0U8WrH+d+0OGRmLM+darX9RLJ2pbZ6Pv99mIuJqSy/sE8dN7/9/dduZe3zf9mW1V/MBeZx3Bmf+vdnVqqNaj/nzF3bH0U8Nd6p/ZPd+d8kIk73Ucdvn9e/61Z2//ZnkJq3I57r2P/vrlxK9l2fNd+6HcwXN4UObv8w+3O3+rX/cGX9/8T+7T+TtK/Xq/dex9df3Wp0K3vY+/9k8nYrwMl83/vVRuPGQsRk8ua9+y/0HvNRVVyP4npl7T93rvP4X9zzsws6GxFPRMSZiHgyIs72UOeZs7/c7Fam/w9X1v4rPfX/3hOV51//uFv9D9b/F1vBzOV7/P13fw/aQMOOEwAAAAAAAICDkbbWdidpZTedppXKznd4n44TaW2j3nhhbeO9ays7a8BnYiItXvUqtb0PupC/F1zkL+zJX8zfGf5y6ngrX1neqK0M++QBYERNdxn/M39MDTs6AGBgjg07AADgP2f8B4DRY/wHgNFj/AeA0WP8B4DRY/wHgJHSz/f6S0hIHNXEsO9MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/2//BAAA//8Q3dmN") 2.165980339s ago: executing program 3 (id=1495): bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040)}, 0x38) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.sectors\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random='\\\x00\x00 \x00@'}) 2.05907108s ago: executing program 3 (id=1496): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x2, 0x2}, 0x4) 1.946280421s ago: executing program 3 (id=1497): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001040), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000001080)={0x14, r1, 0x1, 0x70bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x0) 1.725848122s ago: executing program 3 (id=1498): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fe0500000000000000000000950000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_CROP(r4, 0x4014563c, &(0x7f0000000000)={0x0, {0x2, 0x530f, 0x1, 0xfffffffa}}) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_opts(r5, 0x0, 0xee8cc499168dfa47, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r6, 0xc100565c, &(0x7f00000013c0)={0x3, 0x2, 0x2, {0x5, @vbi={0xb5, 0x0, 0x80003, 0x0, [0xfffffffc, 0x8000000], [0x8200, 0x1]}}}) 1.607079632s ago: executing program 4 (id=1499): getrandom(&(0x7f0000000240)=""/240, 0xf0, 0x3) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c1000003e0007012ebd700004101c000100000004000002041001"], 0x101c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240100003b0007010000000000000000047c0000040000000c0001800600060005"], 0x124}}, 0xc000) 1.454688153s ago: executing program 4 (id=1500): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x2804049, &(0x7f0000000300)=ANY=[@ANYRES16=0x0, @ANYRESOCT=0x0, @ANYRESDEC, @ANYRES8, @ANYRES16], 0x42, 0x304, &(0x7f0000000a40)="$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") capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0185879, 0x0) 1.285325104s ago: executing program 5 (id=1501): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FLAGS={0x8, 0x8, 0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 1.081882685s ago: executing program 4 (id=1502): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x1, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x420, 0x10}, [@IFLA_IFALIAS={0x14, 0x14, 'veth0_virt_wifi\x00'}, @IFLA_GROUP={0x8}]}, 0x3c}}, 0x0) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)="5c00000013006bcd9e3fe3dc4e48aa31086b8703470000001f00000000000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e7868888f7c5a7797ba5a6d0bdd7fcf50e45", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x8000) 1.081771125s ago: executing program 5 (id=1503): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000140)={0x1f, @fixed}, 0x8) r1 = dup2(r0, r0) listen(r0, 0x3) setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, 0x0, 0x0) 975.401436ms ago: executing program 5 (id=1504): socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$nl_route(0x10, 0x3, 0x0) socket$pppoe(0x18, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000040850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000000), &(0x7f0000000040)=r2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x27, 0x0, 0x0, 0x0, 0x0, 0x5ee, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 843.059476ms ago: executing program 5 (id=1505): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000002080)=ANY=[@ANYRES64=0x0], 0x1, 0x178, &(0x7f0000000240)="$eJzslL9OAkEQxr/dQxDjE9hYSCIWHneHGhsKGisLE/8QCxOJnAQ9xMAVQmLhE/gMFr6Htj6EQRttsNL6zN4u3Gr4Y0yUGOdXzH17Ozs3O5d8IAji3/L48NYOXnNPBoBppJBQ75+NKIdr+feTL+e362uFy73ru0TbTParGQRf/34MwE3egN87+/F0Sj23wHt6GxwLShfAYCq9D44dpV0w7Cp9pOmayDfNw4rnmgc1rySEJYItgiNC9nN/nQuGktYf0/YbzdZx0fPc+g+KUfPr5DlyWn/6/+rOxtLmZ4PDVjoLhk2lV5HozkaORLv/TCyqb/zy/UmQIPHXRORPwRXDvOZPMc0/Mn71NNNothYr1WLZLbsnjpNdsZYsa9nJhEYk4xD/S4b+NKXVnxiQG2dxnBV9v27L2Fs7MvZzXB76H0d6Tq6F98cHdiP3mTrHQpU2hqQTBEGMjVmw0DNH4GyMu1GCIAiCIAiCIAiCIL7NewAAAP//Lt94Bg==") r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') read$FUSE(r0, &(0x7f0000000040)={0x2020}, 0x2020) 510.024508ms ago: executing program 5 (id=1506): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCADDRT(r0, 0x890b, 0x0) 408.298788ms ago: executing program 5 (id=1507): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0xc000, &(0x7f0000000380), 0x2, 0x24d, &(0x7f0000000440)="$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") mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000140)=@v1={0x0, @adiantum, 0x4, @desc3}) chdir(&(0x7f0000000000)='./file0\x00') add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000240)={'fscrypt:', @desc3}, &(0x7f00000002c0)={0x0, "615a091a55a8c9a640115d99d981b3886420589c6695d4982a83b71b906769e737201ac6b7a7804454156569cb03a5be811debc957b5831b89b59d703e748c7c", 0x25}, 0x48, 0xfffffffffffffffd) acct(&(0x7f0000000180)='./file0\x00') r1 = add_key$keyring(&(0x7f0000001300), &(0x7f0000001340)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key$fscrypt_v1(&(0x7f00000024c0), &(0x7f0000002500)={'fscrypt:', @desc3}, &(0x7f0000002540)={0x0, "99590a726517e36b541babd48ac03ae757d6126ffa68541bad32271bfd4aac074ff34e3e6dc4ce54e97c2ac4fc7a8cc0e383db0283446ebf9fa3cff655405bef", 0x2a}, 0x48, r1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) 372.866539ms ago: executing program 4 (id=1508): pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r2, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r0, 0xffffffffffffffff) 157.98328ms ago: executing program 4 (id=1509): r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff02000000000000000000000000000104004e20004d13"], 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r1, &(0x7f0000001800)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000040)=""/244, 0x45}, {0x0}], 0x2}, 0x5}], 0x1, 0x0, 0x0) 0s ago: executing program 4 (id=1510): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000580)={0x58, 0x0, &(0x7f0000000480)=[@decrefs={0x40046307, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}, @enter_looper], 0x0, 0x0, &(0x7f0000000540)}) rt_tgsigqueueinfo(0x0, 0x0, 0x1f, &(0x7f0000000140)={0x0, 0x0, 0x1}) kernel console output (not intermixed with test programs): ag 0x0 [ 225.889422][ T13] sony 0003:054C:0268.0004: unknown main item tag 0x0 [ 225.905899][ T13] sony 0003:054C:0268.0004: hiddev0,hidraw0: USB HID v80.00 Device [HID 054c:0268] on usb-dummy_hcd.3-1/input0 [ 225.917786][ T13] sony 0003:054C:0268.0004: failed to claim input [ 225.939102][ T13] usb 4-1: USB disconnect, device number 6 [ 225.971670][ T6582] XFS (loop4): Ending clean mount [ 226.001064][ T6582] XFS (loop4): Quotacheck needed: Please wait. [ 226.064508][ T6649] loop1: detected capacity change from 0 to 512 [ 226.130950][ T6582] XFS (loop4): Quotacheck: Done. [ 226.162477][ T6649] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 226.182330][ T4166] XFS (loop4): Unmounting Filesystem [ 226.231070][ T6649] ext4 filesystem being mounted at /118/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 226.392237][ T5094] team0 (unregistering): Port device team_slave_1 removed [ 226.427246][ T5094] team0 (unregistering): Port device team_slave_0 removed [ 226.442455][ T5094] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 226.457691][ T5094] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 226.585740][ T5094] bond0 (unregistering): Released all slaves [ 226.720817][ T6351] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 226.755746][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 226.767716][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 228.172983][ T4215] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 228.661769][ T6672] loop2: detected capacity change from 0 to 32768 [ 228.842476][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 228.851639][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 228.910912][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 228.920523][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 228.933110][ T6351] device veth0_vlan entered promiscuous mode [ 228.967674][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 228.975809][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 229.003050][ T4215] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 229.022784][ T6672] attempt to access beyond end of device [ 229.022784][ T6672] loop2: rw=34817, want=2631711, limit=32768 [ 229.053046][ T4215] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 229.092741][ T4215] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 229.171580][ T6672] attempt to access beyond end of device [ 229.171580][ T6672] loop2: rw=34817, want=2633759, limit=32768 [ 229.183596][ T4215] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.226626][ T6351] device veth1_vlan entered promiscuous mode [ 229.244224][ T6672] attempt to access beyond end of device [ 229.244224][ T6672] loop2: rw=34817, want=2635807, limit=32768 [ 229.258647][ T6672] attempt to access beyond end of device [ 229.258647][ T6672] loop2: rw=34817, want=2637824, limit=32768 [ 229.278178][ T4215] usb 4-1: config 0 descriptor?? [ 229.372106][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 229.397270][ T276] blkno = 50400, nblocks = 400 [ 229.402063][ T276] ERROR: (device loop2): dbUpdatePMap: blocks are outside the map [ 229.402063][ T276] [ 229.417051][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 229.438486][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 229.451969][ T276] ERROR: (device loop2): remounting filesystem as read-only [ 229.479596][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 229.493006][ T276] blkno = 50400, nblocks = 400 [ 229.497821][ T276] ERROR: (device loop2): dbFree: block to be freed is outside the map [ 229.497821][ T276] [ 229.529741][ T6351] device veth0_macvtap entered promiscuous mode [ 229.551315][ T6351] device veth1_macvtap entered promiscuous mode [ 229.602103][ T6351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 229.626168][ T6351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.648543][ T6351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 229.671484][ T6351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.712503][ T6351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 229.741647][ T6351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.762864][ T4213] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 229.785217][ T6351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 229.806630][ T4215] pyra 0003:1E7D:2CF6.0005: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.3-1/input0 [ 229.809279][ T6351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.859388][ T6351] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 229.886913][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 229.903783][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 229.923443][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 229.943198][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 229.965878][ T6351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.997131][ T6351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.018361][ T6351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 230.043111][ T6351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.072731][ T6351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 230.092723][ T6351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.112783][ T6351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 230.123922][ T4213] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 230.142775][ T6351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.152774][ T4213] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 230.162637][ T4213] usb 5-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 230.184197][ T6351] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 230.202808][ T4213] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.226209][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 230.255438][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 230.271079][ T4213] usb 5-1: config 0 descriptor?? [ 230.295792][ T6351] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.312741][ T6351] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.321592][ T6351] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.352773][ T6351] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.518346][ T4219] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.574184][ T4219] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.615016][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 230.615515][ T4226] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.649648][ T4226] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.672506][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 230.775118][ T4213] arvo 0003:1E7D:30D4.0006: unknown main item tag 0x0 [ 230.781947][ T4213] arvo 0003:1E7D:30D4.0006: unknown main item tag 0xe [ 230.829826][ T4213] arvo 0003:1E7D:30D4.0006: item fetching failed at offset 6/7 [ 230.853745][ T4213] arvo 0003:1E7D:30D4.0006: parse failed [ 230.863064][ T4213] arvo: probe of 0003:1E7D:30D4.0006 failed with error -22 [ 231.124176][ T4394] usb 5-1: USB disconnect, device number 6 [ 232.112886][ T4215] pyra 0003:1E7D:2CF6.0005: couldn't init struct pyra_device [ 232.120334][ T4215] pyra 0003:1E7D:2CF6.0005: couldn't install mouse [ 232.184255][ T4215] pyra: probe of 0003:1E7D:2CF6.0005 failed with error -71 [ 232.946950][ T4215] usb 4-1: USB disconnect, device number 7 [ 233.119587][ T6785] loop2: detected capacity change from 0 to 1024 [ 233.294030][ T6785] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 233.408718][ T6785] EXT4-fs (loop2): mounted filesystem without journal. Opts: user_xattr,data_err=abort,resuid=0x0000000000000000,errors=remount-ro,norecovery,max_dir_size_kb=0x00000000000007b1,stripe=0x0000000000000005,noinit_itable,nomblk_io_submit,grpquota,nogrpid,. Quota mode: writeback. [ 233.760792][ T6802] loop4: detected capacity change from 0 to 4096 [ 233.977614][ T6802] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 234.951839][ T6826] loop2: detected capacity change from 0 to 1024 [ 235.406178][ T6792] loop3: detected capacity change from 0 to 32768 [ 235.482278][ T6792] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.749 (6792) [ 235.633809][ T6792] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 235.662861][ T6792] BTRFS info (device loop3): using free space tree [ 235.669413][ T6792] BTRFS info (device loop3): has skinny extents [ 236.374088][ T6792] BTRFS error (device loop3): open_ctree failed [ 236.642853][ T4512] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by udevd (4512) [ 236.856819][ T6897] loop4: detected capacity change from 0 to 8 [ 237.512277][ T6921] loop5: detected capacity change from 0 to 1024 [ 237.694219][ T6925] netlink: 20 bytes leftover after parsing attributes in process `syz.4.773'. [ 238.253128][ T6884] syz.1.763 (6884): drop_caches: 2 [ 238.466407][ T6941] loop3: detected capacity change from 0 to 64 [ 239.114456][ T6973] loop3: detected capacity change from 0 to 17 [ 239.934972][ T6982] loop5: detected capacity change from 0 to 2048 [ 240.031379][ T6982] UDF-fs: error (device loop5): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 240.109569][ T6982] UDF-fs: error (device loop5): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 240.127225][ T6982] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 240.139427][ T6982] UDF-fs: Scanning with blocksize 512 failed [ 240.159609][ T6982] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 240.257829][ T6989] loop4: detected capacity change from 0 to 64 [ 240.723545][ T6977] loop3: detected capacity change from 0 to 1024 [ 240.769801][ T7000] loop5: detected capacity change from 0 to 256 [ 240.789310][ T7000] UDF-fs: bad mount option "=" or missing value [ 240.851795][ T6954] loop1: detected capacity change from 0 to 40427 [ 240.993874][ T6954] F2FS-fs (loop1): invalid crc value [ 241.011012][ T6954] F2FS-fs (loop1): Found nat_bits in checkpoint [ 241.093396][ T7009] loop2: detected capacity change from 0 to 2048 [ 241.673288][ T7009] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 242.087246][ T7009] EXT4-fs (loop2): Online resizing not supported with bigalloc [ 242.169608][ T7027] loop5: detected capacity change from 0 to 256 [ 242.361550][ T7042] netlink: 464 bytes leftover after parsing attributes in process `syz.2.808'. [ 242.536356][ T7048] loop3: detected capacity change from 0 to 17 [ 243.685456][ T7063] loop5: detected capacity change from 0 to 512 [ 243.744751][ T7066] dccp_close: ABORT with 4 bytes unread [ 243.784838][ T7063] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2219: inode #15: comm syz.5.820: corrupted in-inode xattr [ 243.913702][ T7063] EXT4-fs error (device loop5): ext4_orphan_get:1406: comm syz.5.820: couldn't read orphan inode 15 (err -117) [ 243.993529][ T7063] EXT4-fs (loop5): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,nogrpid,init_itable,noquota,grpjquota=.nouid32,grpjquota=,jqfmt=vfsv1,grpid,,,errors=continue. Quota mode: writeback. [ 244.079636][ T7076] loop2: detected capacity change from 0 to 2048 [ 244.094478][ T7063] EXT4-fs error (device loop5): ext4_xattr_set_entry:1615: inode #2: comm syz.5.820: corrupted xattr entries [ 244.344337][ T7085] loop5: detected capacity change from 0 to 256 [ 244.347362][ T7084] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 244.461853][ T7087] loop3: detected capacity change from 0 to 1024 [ 244.475820][ T7085] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x72684843, utbl_chksum : 0xe619d30d) [ 244.623041][ T13] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 245.816800][ T7108] loop5: detected capacity change from 0 to 128 [ 245.834260][ T13] usb 2-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b [ 245.843425][ T13] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.853674][ T13] usb 2-1: config 0 descriptor?? [ 245.911008][ T7113] loop4: detected capacity change from 0 to 128 [ 245.996856][ T7118] blk_update_request: I/O error, dev loop2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 246.063920][ T7118] blk_update_request: I/O error, dev loop2, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 246.086781][ T7118] Mount JFS Failure: -5 [ 246.096799][ T7118] jfs_mount failed w/return code = -5 [ 246.158172][ T7127] loop5: detected capacity change from 0 to 17 [ 246.185958][ T4394] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 246.323038][ T13] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 246.346744][ T13] asix: probe of 2-1:0.0 failed with error -71 [ 246.416092][ T13] usb 2-1: USB disconnect, device number 4 [ 246.593076][ T4394] usb 4-1: config 0 has an invalid interface number: 104 but max is 0 [ 246.628450][ T4394] usb 4-1: config 0 has no interface number 0 [ 246.645223][ T4394] usb 4-1: config 0 interface 104 has no altsetting 0 [ 247.413891][ T4167] Bluetooth: hci1: link tx timeout [ 247.419057][ T4167] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 247.427299][ T4167] Bluetooth: hci1: link tx timeout [ 247.432434][ T4167] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 247.623044][ T4394] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=a1.c9 [ 247.632136][ T4394] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.681177][ T4394] usb 4-1: Product: syz [ 247.696875][ T4394] usb 4-1: Manufacturer: syz [ 247.703016][ T4394] usb 4-1: SerialNumber: syz [ 247.723168][ T4394] usb 4-1: config 0 descriptor?? [ 247.775335][ T4394] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 247.969401][ T7127] loop5: detected capacity change from 0 to 1024 [ 247.992846][ T4394] gspca_vc032x: reg_r err -71 [ 247.997673][ T4394] gspca_vc032x: I2c Bus Busy Wait 00 [ 248.022081][ T4394] gspca_vc032x: I2c Bus Busy Wait 00 [ 248.034457][ T4394] gspca_vc032x: I2c Bus Busy Wait 00 [ 248.040103][ T4394] gspca_vc032x: I2c Bus Busy Wait 00 [ 248.046832][ T4394] gspca_vc032x: I2c Bus Busy Wait 00 [ 248.064597][ T4394] gspca_vc032x: I2c Bus Busy Wait 00 [ 248.069960][ T4394] gspca_vc032x: I2c Bus Busy Wait 00 [ 248.102723][ T4394] gspca_vc032x: I2c Bus Busy Wait 00 [ 248.109741][ T4394] gspca_vc032x: I2c Bus Busy Wait 00 [ 248.124151][ T4394] gspca_vc032x: I2c Bus Busy Wait 00 [ 248.130697][ T4394] gspca_vc032x: I2c Bus Busy Wait 00 [ 248.137188][ T4394] gspca_vc032x: I2c Bus Busy Wait 00 [ 248.143037][ T4394] gspca_vc032x: I2c Bus Busy Wait 00 [ 248.148336][ T4394] gspca_vc032x: I2c Bus Busy Wait 00 [ 248.154391][ T4394] gspca_vc032x: I2c Bus Busy Wait 00 [ 248.159692][ T4394] gspca_vc032x: I2c Bus Busy Wait 00 [ 248.165714][ T4394] gspca_vc032x: I2c Bus Busy Wait 00 [ 248.171068][ T4394] gspca_vc032x: I2c Bus Busy Wait 00 [ 248.177137][ T4394] gspca_vc032x: Unknown sensor... [ 248.182325][ T4394] vc032x: probe of 4-1:0.104 failed with error -22 [ 248.192049][ T4394] usb 4-1: USB disconnect, device number 8 [ 248.251919][ T7174] loop2: detected capacity change from 0 to 128 [ 248.309802][ T7174] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 248.342468][ T7174] ext4 filesystem being mounted at /182/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 248.468500][ T26] audit: type=1804 audit(1732096390.288:20): pid=7174 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.857" name="/newroot/182/file0/file0" dev="loop2" ino=12 res=1 errno=0 [ 248.490868][ T4249] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 249.447741][ T6882] Bluetooth: hci1: command 0x0406 tx timeout [ 249.537111][ T4249] usb 2-1: Using ep0 maxpacket: 8 [ 249.843180][ T4249] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 249.863973][ T4249] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.922722][ T4249] usb 2-1: Product: syz [ 249.929045][ T4249] usb 2-1: Manufacturer: syz [ 249.937777][ T4249] usb 2-1: SerialNumber: syz [ 249.957024][ T4249] usb 2-1: config 0 descriptor?? [ 250.233990][ T4249] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 250.732483][ C0] Unknown status report in ack skb [ 250.792292][ T7239] loop4: detected capacity change from 0 to 17 [ 251.311206][ T7244] loop4: detected capacity change from 0 to 1024 [ 251.443107][ T4249] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -71 [ 251.459481][ T4249] usb 2-1: USB disconnect, device number 5 [ 251.537751][ T4178] Bluetooth: min 0 < 6 [ 252.730032][ T7280] loop3: detected capacity change from 0 to 732 [ 252.871887][ T7286] netlink: 60 bytes leftover after parsing attributes in process `syz.4.890'. [ 253.106736][ T7296] loop1: detected capacity change from 0 to 17 [ 253.333718][ T7307] smb3: Bad value for 'gid' [ 253.615097][ T4249] Bluetooth: hci4: command 0x2021 tx timeout [ 254.922951][ T4394] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 255.026955][ T7341] loop1: detected capacity change from 0 to 1024 [ 255.222907][ T6886] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 255.242967][ T4394] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 255.333031][ T4394] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 255.343559][ T4394] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 255.355215][ T4394] usb 3-1: config 0 interface 0 has no altsetting 0 [ 255.453587][ T4394] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 255.473519][ T6886] usb 5-1: Using ep0 maxpacket: 16 [ 255.548685][ T1426] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.559218][ T4394] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 255.571717][ T4394] usb 3-1: config 0 interface 0 has no altsetting 0 [ 255.593068][ T6886] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 255.624508][ T6886] usb 5-1: New USB device found, idVendor=046d, idProduct=c52f, bcdDevice= 0.00 [ 255.663108][ T6886] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.667661][ T4394] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 255.684205][ T6886] usb 5-1: config 0 descriptor?? [ 255.702873][ T4394] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 255.748045][ T4394] usb 3-1: config 0 interface 0 has no altsetting 0 [ 255.833800][ T4394] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 255.847414][ T4394] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 255.871611][ T4394] usb 3-1: config 0 interface 0 has no altsetting 0 [ 255.993164][ T4394] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 256.006114][ T4394] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 256.027479][ T4394] usb 3-1: config 0 interface 0 has no altsetting 0 [ 256.497909][ T6886] usb 5-1: USB disconnect, device number 7 [ 257.087081][ T4394] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 257.096110][ T4394] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 257.107223][ T4394] usb 3-1: config 0 interface 0 has no altsetting 0 [ 257.180946][ T7407] loop5: detected capacity change from 0 to 17 [ 257.212924][ T4394] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 257.252464][ T4394] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 257.312798][ T4394] usb 3-1: config 0 interface 0 has no altsetting 0 [ 257.472906][ T4394] usb 3-1: unable to read config index 7 descriptor/all [ 257.487447][ T4394] usb 3-1: can't read configurations, error -71 [ 258.137243][ T7432] loop5: detected capacity change from 0 to 1024 [ 258.140670][ T7397] loop1: detected capacity change from 0 to 32768 [ 258.232800][ T4394] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 258.348507][ T7397] XFS (loop1): Mounting V5 Filesystem [ 258.575126][ T7397] XFS (loop1): Ending clean mount [ 258.653199][ T4394] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 258.676963][ T4394] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.707748][ T4394] usb 3-1: config 0 descriptor?? [ 258.711991][ T7397] syz.1.916 (7397) used greatest stack depth: 18688 bytes left [ 258.743395][ T4551] XFS (loop1): Unmounting Filesystem [ 258.764389][ T4394] cp210x 3-1:0.0: cp210x converter detected [ 259.823215][ T4394] usb 3-1: cp210x converter now attached to ttyUSB0 [ 260.076677][ T6882] usb 3-1: USB disconnect, device number 8 [ 260.130342][ T6882] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 260.214084][ T6882] cp210x 3-1:0.0: device disconnected [ 260.465137][ T7485] loop3: detected capacity change from 0 to 2048 [ 260.579692][ T7485] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a802e01c, mo2=0002] [ 260.608779][ T7485] System zones: 0-7 [ 260.632564][ T7485] EXT4-fs (loop3): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000001,bsdgroups,resgid=0x0000000000000000,nouid32,debug,acl,,errors=continue. Quota mode: none. [ 260.725447][ T7497] loop1: detected capacity change from 0 to 17 [ 260.742989][ T6879] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 260.772556][ T26] audit: type=1800 audit(1732096402.588:21): pid=7485 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.935" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 261.092769][ T6879] usb 5-1: Using ep0 maxpacket: 8 [ 261.302925][ T6879] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 261.322783][ T6879] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xBE, skipping [ 261.333140][ T7508] loop1: detected capacity change from 0 to 1024 [ 261.342747][ T6879] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 261.513872][ T7504] loop5: detected capacity change from 0 to 32768 [ 261.532895][ T6879] usb 5-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 261.542071][ T6879] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 261.550501][ T6879] usb 5-1: Product: syz [ 261.555786][ T6879] usb 5-1: Manufacturer: syz [ 261.560434][ T6879] usb 5-1: SerialNumber: syz [ 261.567817][ T6879] usb 5-1: config 0 descriptor?? [ 261.620275][ T6879] radio-si470x 5-1:0.0: could not find interrupt in endpoint [ 261.645031][ T6879] radio-si470x: probe of 5-1:0.0 failed with error -5 [ 261.652051][ T6879] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 261.718324][ T7504] XFS (loop5): Mounting V5 Filesystem [ 261.847911][ T7504] XFS (loop5): Ending clean mount [ 261.886241][ T7504] XFS (loop5): Quotacheck needed: Please wait. [ 262.022778][ T7504] XFS (loop5): Quotacheck: Done. [ 262.663817][ T13] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 262.802284][ T6351] XFS (loop5): Unmounting Filesystem [ 263.023157][ T13] usb 4-1: Using ep0 maxpacket: 16 [ 263.183150][ T13] usb 4-1: config 0 has no interfaces? [ 263.288989][ T13] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 263.303982][ T13] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 263.330967][ T13] usb 4-1: Manufacturer: syz [ 263.394131][ T13] usb 4-1: config 0 descriptor?? [ 263.500303][ T6883] usb 5-1: USB disconnect, device number 8 [ 263.729473][ T7552] loop4: detected capacity change from 0 to 17 [ 264.318561][ T7561] input: syz1 as /devices/virtual/input/input11 [ 264.379783][ T7560] loop4: detected capacity change from 0 to 1024 [ 264.507659][ T13] usb 4-1: USB disconnect, device number 9 [ 265.746146][ T7587] binder: 7586:7587 ioctl c0306201 20000140 returned -14 [ 265.915132][ T6883] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 266.236056][ T7593] P [ 266.443653][ T6883] usb 6-1: unable to get BOS descriptor or descriptor too short [ 266.572989][ T6883] usb 6-1: config 3 has an invalid interface number: 199 but max is 0 [ 266.591934][ T6883] usb 6-1: config 3 has no interface number 0 [ 266.598964][ T6883] usb 6-1: config 3 interface 199 has no altsetting 0 [ 266.780918][ T6883] usb 6-1: New USB device found, idVendor=0c45, idProduct=8008, bcdDevice=ad.8a [ 266.797067][ T6883] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.866722][ T6883] usb 6-1: Product: syz [ 266.871027][ T6883] usb 6-1: Manufacturer: syz [ 266.900947][ T6883] usb 6-1: SerialNumber: syz [ 267.006203][ T7613] capability: warning: `syz.4.976' uses deprecated v2 capabilities in a way that may be insecure [ 267.207105][ T6883] hub 6-1:3.199: bad descriptor, ignoring hub [ 267.220258][ T6883] hub: probe of 6-1:3.199 failed with error -5 [ 267.231408][ T6883] gspca_main: sn9c2028-2.14.0 probing 0c45:8008 [ 267.259897][ T6883] gspca_sn9c2028: read1 error -71 [ 267.290255][ T6883] gspca_sn9c2028: read1 error -71 [ 267.312976][ T6883] gspca_sn9c2028: read1 error -71 [ 267.319345][ T6883] sn9c2028: probe of 6-1:3.199 failed with error -71 [ 267.363646][ T6883] usb 6-1: USB disconnect, device number 2 [ 267.365552][ T7600] loop3: detected capacity change from 0 to 32768 [ 267.538880][ T7625] loop4: detected capacity change from 0 to 17 [ 267.546574][ T7600] XFS (loop3): Mounting V5 Filesystem [ 267.639763][ T7600] XFS (loop3): Ending clean mount [ 268.098061][ T4171] XFS (loop3): Unmounting Filesystem [ 268.420177][ T7641] loop4: detected capacity change from 0 to 1024 [ 270.174015][ T7664] loop2: detected capacity change from 0 to 40427 [ 270.198494][ T7664] F2FS-fs (loop2): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 270.206748][ T7664] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 270.232334][ T7664] F2FS-fs (loop2): invalid crc value [ 270.251027][ T7664] F2FS-fs (loop2): Found nat_bits in checkpoint [ 270.314156][ T7664] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 270.321805][ T7664] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 270.511817][ T4170] attempt to access beyond end of device [ 270.511817][ T4170] loop2: rw=2049, want=45104, limit=40427 [ 270.517983][ T7689] loop1: detected capacity change from 0 to 512 [ 270.613080][ T7689] EXT4-fs (loop1): external journal device major/minor numbers have changed [ 270.683106][ T7689] EXT4-fs (loop1): failed to open journal device unknown-block(7,255) -6 [ 270.831039][ T7693] loop3: detected capacity change from 0 to 17 [ 271.705324][ T7693] loop3: detected capacity change from 0 to 1024 [ 272.711783][ T7735] loop3: detected capacity change from 0 to 2048 [ 272.836005][ T7735] UDF-fs: warning (device loop3): udf_fill_super: No partition found (2) [ 273.354421][ T7725] loop2: detected capacity change from 0 to 32768 [ 273.413365][ T7725] XFS: ikeep mount option is deprecated. [ 273.519315][ T7725] XFS (loop2): Mounting V5 Filesystem [ 273.597229][ T7725] XFS (loop2): Ending clean mount [ 273.613296][ T7725] XFS (loop2): Quotacheck needed: Please wait. [ 273.725232][ T7725] XFS (loop2): Quotacheck: Done. [ 273.994721][ T4170] XFS (loop2): Unmounting Filesystem [ 274.008368][ T7766] loop3: detected capacity change from 0 to 17 [ 274.280294][ T7768] netlink: 'syz.1.1030': attribute type 1 has an invalid length. [ 274.541341][ T7771] bond1: (slave ipip0): The slave device specified does not support setting the MAC address [ 274.635547][ T7771] bond1: (slave ipip0): Setting fail_over_mac to active for active-backup mode [ 274.675464][ T7771] bond1: (slave ipip0): making interface the new active one [ 274.707384][ T7771] bond1: (slave ipip0): Enslaving as an active interface with an up link [ 275.020337][ T7783] loop3: detected capacity change from 0 to 1024 [ 275.321126][ T13] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 275.603477][ T13] usb 6-1: Using ep0 maxpacket: 8 [ 275.743347][ T13] usb 6-1: config 0 has an invalid interface number: 93 but max is 0 [ 275.763226][ T13] usb 6-1: config 0 has no interface number 0 [ 275.997103][ T7778] loop2: detected capacity change from 0 to 32768 [ 276.073269][ T13] usb 6-1: New USB device found, idVendor=04b4, idProduct=3610, bcdDevice=9a.75 [ 276.087708][ T13] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.111253][ T13] usb 6-1: Product: syz [ 276.124584][ T13] usb 6-1: Manufacturer: syz [ 276.139068][ T13] usb 6-1: SerialNumber: syz [ 276.177825][ T13] usb 6-1: config 0 descriptor?? [ 276.449754][ T7809] ax25_connect(): syz.1.1044 uses autobind, please contact jreuter@yaina.de [ 276.492913][ T13] ax88179_178a 6-1:0.93 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 276.518624][ T7811] netlink: 'syz.4.1043': attribute type 1 has an invalid length. [ 276.533753][ T13] ax88179_178a 6-1:0.93 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 276.663412][ T7813] bond1: (slave ipip0): The slave device specified does not support setting the MAC address [ 276.673813][ T7813] bond1: (slave ipip0): Setting fail_over_mac to active for active-backup mode [ 276.730368][ T7813] bond1: (slave ipip0): making interface the new active one [ 276.773942][ T7813] bond1: (slave ipip0): Enslaving as an active interface with an up link [ 277.113000][ T13] ax88179_178a 6-1:0.93 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 277.267603][ T26] audit: type=1800 audit(1732096419.088:22): pid=7828 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1048" name="/" dev="fuse" ino=1 res=0 errno=0 [ 277.305964][ T7827] loop2: detected capacity change from 0 to 1024 [ 277.392900][ T13] ax88179_178a 6-1:0.93 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 277.433400][ T7827] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 277.452956][ T13] ax88179_178a 6-1:0.93 (unnamed net_device) (uninitialized): Failed to read reg index 0x0006: -71 [ 277.474874][ T13] ax88179_178a 6-1:0.93 (unnamed net_device) (uninitialized): invalid MAC address, using random [ 277.512970][ T13] ax88179_178a 6-1:0.93 (unnamed net_device) (uninitialized): Failed to write reg index 0x0006: -71 [ 277.552928][ T13] ax88179_178a 6-1:0.93 (unnamed net_device) (uninitialized): Failed to write reg index 0x0005: -71 [ 277.583179][ T13] ax88179_178a 6-1:0.93 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 277.620050][ T13] ax88179_178a 6-1:0.93 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 277.709095][ T13] ax88179_178a 6-1:0.93 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 277.815498][ T13] ax88179_178a 6-1:0.93 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 277.923101][ T13] ax88179_178a 6-1:0.93 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 277.953495][ T7836] loop2: detected capacity change from 0 to 17 [ 278.042991][ T13] ax88179_178a 6-1:0.93 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 278.093001][ T13] ax88179_178a 6-1:0.93 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 278.148471][ T7815] loop1: detected capacity change from 0 to 32768 [ 278.155457][ T13] ax88179_178a 6-1:0.93 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 278.212996][ T13] ax88179_178a 6-1:0.93 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 278.255284][ T13] ax88179_178a 6-1:0.93 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 278.345798][ T13] ax88179_178a 6-1:0.93 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 278.463025][ T13] ax88179_178a 6-1:0.93 (unnamed net_device) (uninitialized): Failed to write reg index 0x0019: -71 [ 278.512970][ T13] ax88179_178a 6-1:0.93 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 278.573207][ T13] ax88179_178a 6-1:0.93 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 278.635360][ T7815] XFS (loop1): Mounting V5 Filesystem [ 278.643778][ T13] ax88179_178a 6-1:0.93 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 278.733204][ T13] ax88179_178a 6-1:0.93 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 278.771605][ T7815] XFS (loop1): Ending clean mount [ 278.784579][ T13] ax88179_178a 6-1:0.93 (unnamed net_device) (uninitialized): Failed to read reg index 0x000e: -71 [ 278.811088][ T7815] XFS (loop1): Quotacheck needed: Please wait. [ 278.837247][ T13] ax88179_178a 6-1:0.93 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 278.889947][ T7849] loop2: detected capacity change from 0 to 1024 [ 278.913016][ T13] ax88179_178a 6-1:0.93 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 279.023083][ T13] ax88179_178a 6-1:0.93 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 279.073003][ T13] ax88179_178a 6-1:0.93 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 279.139122][ T7815] XFS (loop1): Quotacheck: Done. [ 279.163193][ T13] ax88179_178a 6-1:0.93 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 279.353107][ T13] ax88179_178a 6-1:0.93 eth5: register 'ax88179_178a' at usb-dummy_hcd.5-1, Cypress GX3 SuperSpeed to Gigabit Ethernet Controller, f6:fe:a8:ba:a9:2e [ 279.434350][ T13] usb 6-1: USB disconnect, device number 3 [ 279.462477][ T7861] loop4: detected capacity change from 0 to 164 [ 279.470103][ T13] ax88179_178a 6-1:0.93 eth5: unregister 'ax88179_178a' usb-dummy_hcd.5-1, Cypress GX3 SuperSpeed to Gigabit Ethernet Controller [ 279.527237][ T4551] XFS (loop1): Unmounting Filesystem [ 279.651860][ T7861] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 280.406672][ T7858] loop3: detected capacity change from 0 to 32768 [ 281.595344][ T7894] loop4: detected capacity change from 0 to 17 [ 282.036476][ T7898] loop4: detected capacity change from 0 to 1024 [ 282.367197][ T7902] loop5: detected capacity change from 0 to 128 [ 282.544064][ T7902] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 282.561016][ T7902] ext4 filesystem being mounted at /70/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 282.620645][ T7906] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 283.102841][ T13] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 283.517095][ T13] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 8192, setting to 1024 [ 283.562695][ T13] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 1024 [ 283.608623][ T13] usb 6-1: New USB device found, idVendor=0499, idProduct=1035, bcdDevice=56.12 [ 283.683021][ T13] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.720116][ T13] usb 6-1: config 0 descriptor?? [ 283.885803][ T7930] loop2: detected capacity change from 0 to 17 [ 283.910060][ T7916] loop4: detected capacity change from 0 to 32768 [ 283.971507][ T7912] loop1: detected capacity change from 0 to 32768 [ 283.980318][ T4174] usb 6-1: USB disconnect, device number 4 [ 284.059097][ T7916] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 284.341482][ T7938] loop2: detected capacity change from 0 to 1024 [ 284.363168][ T7916] BTRFS info (device loop4): enabling auto defrag [ 284.448058][ T7916] BTRFS info (device loop4): using free space tree [ 284.499486][ T7916] BTRFS info (device loop4): has skinny extents [ 284.521774][ T7912] XFS (loop1): Mounting V5 Filesystem [ 284.804600][ T7916] BTRFS info (device loop4): enabling ssd optimizations [ 284.861840][ T7968] loop5: detected capacity change from 0 to 256 [ 284.910593][ T7912] XFS (loop1): Starting recovery (logdev: internal) [ 284.933487][ T6885] XFS (loop1): Metadata corruption detected at xfs_buf_ioend+0x26a/0x6e0, xfs_inode block 0x1080 xfs_inode_buf_verify [ 284.948114][ T6885] XFS (loop1): Unmount and run xfs_repair [ 284.954702][ T6885] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 284.966790][ T6885] 00000000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 284.977037][ T6885] 00000010: 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 285.004749][ T6885] 00000020: 34 f7 58 68 a5 a5 b6 11 34 f7 58 68 a5 a5 b6 11 4.Xh....4.Xh.... [ 285.030131][ T6885] 00000030: 34 f7 58 68 a5 a5 b6 11 00 00 00 00 00 00 23 28 4.Xh..........#( [ 285.057373][ T6885] 00000040: 00 00 00 00 00 00 00 03 00 00 00 00 00 00 00 01 ................ [ 285.085415][ T6885] 00000050: 00 00 18 02 00 00 00 00 00 00 00 00 4e 73 88 02 ............Ns.. [ 285.103436][ T6885] 00000060: ff ff ff ff a3 23 1a bd 00 00 00 00 00 00 00 06 .....#.......... [ 285.133053][ T6885] 00000070: 00 00 00 01 00 00 00 10 00 00 00 00 00 00 00 08 ................ [ 285.171087][ T7912] XFS (loop1): metadata I/O error in "xlog_recover_items_pass2+0xe6/0x130" at daddr 0x1080 len 128 error 117 [ 285.213591][ T7912] XFS (loop1): log mount/recovery failed: error -117 [ 285.402824][ T26] audit: type=1800 audit(1732096427.198:23): pid=7916 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1078" name="bus" dev="loop4" ino=263 res=0 errno=0 [ 285.540839][ T7912] XFS (loop1): log mount failed [ 286.068502][ T7988] loop5: detected capacity change from 0 to 2048 [ 286.236993][ T7988] NILFS (loop5): invalid segment: Checksum error in segment payload [ 286.279053][ T7988] NILFS (loop5): trying rollback from an earlier position [ 286.332423][ T7988] NILFS (loop5): recovery complete [ 286.378065][ T7989] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 286.516086][ T26] audit: type=1800 audit(1732096428.338:24): pid=7988 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1094" name="bus" dev="loop5" ino=12 res=0 errno=0 [ 287.365924][ T8013] loop5: detected capacity change from 0 to 17 [ 287.770545][ T8019] loop5: detected capacity change from 0 to 1024 [ 288.377582][ T8009] loop4: detected capacity change from 0 to 32768 [ 288.524838][ T8009] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 288.588454][ T8009] BTRFS info (device loop4): using free space tree [ 288.622324][ T8009] BTRFS info (device loop4): has skinny extents [ 288.839628][ T8045] overlayfs: workdir and upperdir must reside under the same mount [ 289.092870][ T8009] BTRFS info (device loop4): enabling ssd optimizations [ 289.148265][ T8060] tipc: Enabling of bearer rejected, failed to enable media [ 289.539767][ T8075] loop1: detected capacity change from 0 to 17 [ 289.936911][ T8076] loop1: detected capacity change from 0 to 1024 [ 291.121382][ T8101] loop2: detected capacity change from 0 to 8 [ 291.229746][ T8103] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 291.254157][ T8103] overlayfs: failed to set xattr on upper [ 291.260020][ T8103] overlayfs: ...falling back to index=off,metacopy=off. [ 292.011072][ T8120] loop3: detected capacity change from 0 to 17 [ 292.424260][ T8115] loop4: detected capacity change from 0 to 32768 [ 292.440424][ T8121] loop3: detected capacity change from 0 to 1024 [ 292.552552][ T8115] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.1131 (8115) [ 292.945103][ T8115] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 292.954236][ T8115] BTRFS info (device loop4): setting nodatacow, compression disabled [ 292.968754][ T8115] BTRFS info (device loop4): enabling auto defrag [ 292.975832][ T8115] BTRFS info (device loop4): max_inline at 0 [ 292.981925][ T8115] BTRFS info (device loop4): using free space tree [ 292.989046][ T8115] BTRFS info (device loop4): has skinny extents [ 293.412926][ T6877] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 293.683274][ T6877] usb 4-1: Using ep0 maxpacket: 8 [ 293.813025][ T6877] usb 4-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 293.848617][ T6877] usb 4-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 15 [ 293.899668][ T6877] usb 4-1: config 0 interface 0 has no altsetting 0 [ 293.918670][ T6877] usb 4-1: New USB device found, idVendor=056e, idProduct=00fc, bcdDevice= 0.00 [ 293.947206][ T6877] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.001427][ T6877] usb 4-1: config 0 descriptor?? [ 294.506581][ T6877] elecom 0003:056E:00FC.0008: unknown main item tag 0x0 [ 294.519135][ T8155] loop2: detected capacity change from 0 to 32768 [ 294.534314][ T6877] elecom 0003:056E:00FC.0008: unknown main item tag 0x0 [ 294.582133][ T8155] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.1142 (8155) [ 294.587523][ T6877] elecom 0003:056E:00FC.0008: unknown main item tag 0x0 [ 294.608529][ T6877] elecom 0003:056E:00FC.0008: unknown main item tag 0x0 [ 294.615885][ T6877] elecom 0003:056E:00FC.0008: unknown main item tag 0x0 [ 294.623929][ T6877] elecom 0003:056E:00FC.0008: unknown main item tag 0x0 [ 294.630903][ T6877] elecom 0003:056E:00FC.0008: unknown main item tag 0x0 [ 294.638523][ T6877] elecom 0003:056E:00FC.0008: unknown main item tag 0x0 [ 294.652775][ T6877] elecom 0003:056E:00FC.0008: unknown main item tag 0x0 [ 294.659787][ T6877] elecom 0003:056E:00FC.0008: unknown main item tag 0x0 [ 294.677347][ T6877] elecom 0003:056E:00FC.0008: unknown main item tag 0x0 [ 294.692735][ T6877] elecom 0003:056E:00FC.0008: unknown main item tag 0x0 [ 294.699752][ T6877] elecom 0003:056E:00FC.0008: unknown main item tag 0x0 [ 294.738396][ T6877] elecom 0003:056E:00FC.0008: unknown main item tag 0x0 [ 294.746182][ T6877] elecom 0003:056E:00FC.0008: unknown main item tag 0x0 [ 294.769705][ T6877] elecom 0003:056E:00FC.0008: unknown main item tag 0x0 [ 294.782845][ T6877] elecom 0003:056E:00FC.0008: unknown main item tag 0x0 [ 294.789927][ T6877] elecom 0003:056E:00FC.0008: unknown main item tag 0x0 [ 294.808570][ T6877] elecom 0003:056E:00FC.0008: unknown main item tag 0x0 [ 294.822723][ T6877] elecom 0003:056E:00FC.0008: unknown main item tag 0x0 [ 294.829797][ T6877] elecom 0003:056E:00FC.0008: unknown main item tag 0x0 [ 294.852847][ T6877] elecom 0003:056E:00FC.0008: unknown main item tag 0x0 [ 294.859844][ T6877] elecom 0003:056E:00FC.0008: unknown main item tag 0x0 [ 294.867341][ T6877] elecom 0003:056E:00FC.0008: unknown main item tag 0x0 [ 294.877298][ T6877] elecom 0003:056E:00FC.0008: unknown main item tag 0x0 [ 294.887424][ T6877] elecom 0003:056E:00FC.0008: unknown main item tag 0x0 [ 294.902760][ T6877] elecom 0003:056E:00FC.0008: unknown main item tag 0x0 [ 294.911078][ T6877] elecom 0003:056E:00FC.0008: unknown main item tag 0x0 [ 294.931103][ T6877] elecom 0003:056E:00FC.0008: unknown main item tag 0x0 [ 294.938464][ T6877] elecom 0003:056E:00FC.0008: unknown main item tag 0x0 [ 294.952766][ T6877] elecom 0003:056E:00FC.0008: unknown main item tag 0x0 [ 294.963495][ T6877] elecom 0003:056E:00FC.0008: unknown main item tag 0x0 [ 294.980732][ T6877] elecom 0003:056E:00FC.0008: unknown main item tag 0x0 [ 295.000985][ T6877] elecom 0003:056E:00FC.0008: unknown main item tag 0x0 [ 295.008519][ T6877] elecom 0003:056E:00FC.0008: unknown main item tag 0x0 [ 295.027304][ T6877] elecom 0003:056E:00FC.0008: unknown main item tag 0x0 [ 295.043024][ T6877] elecom 0003:056E:00FC.0008: unknown main item tag 0x0 [ 295.050443][ T6877] elecom 0003:056E:00FC.0008: unknown main item tag 0x0 [ 295.072774][ T6877] elecom 0003:056E:00FC.0008: unknown main item tag 0x0 [ 295.079764][ T6877] elecom 0003:056E:00FC.0008: unknown main item tag 0x0 [ 295.102732][ T6877] elecom 0003:056E:00FC.0008: unknown main item tag 0x0 [ 295.109732][ T6877] elecom 0003:056E:00FC.0008: unknown main item tag 0x0 [ 295.118344][ T6877] elecom 0003:056E:00FC.0008: unknown main item tag 0x0 [ 295.131365][ T6877] elecom 0003:056E:00FC.0008: unknown main item tag 0x0 [ 295.138495][ T6877] elecom 0003:056E:00FC.0008: unknown main item tag 0x0 [ 295.151471][ T6877] elecom 0003:056E:00FC.0008: unknown main item tag 0x0 [ 295.158541][ T6877] elecom 0003:056E:00FC.0008: unknown main item tag 0x0 [ 295.171445][ T6877] elecom 0003:056E:00FC.0008: unknown main item tag 0x0 [ 295.178548][ T6877] elecom 0003:056E:00FC.0008: unknown main item tag 0x0 [ 295.191322][ T6877] elecom 0003:056E:00FC.0008: unknown main item tag 0x0 [ 295.198395][ T6877] elecom 0003:056E:00FC.0008: unknown main item tag 0x0 [ 295.212151][ T6877] elecom 0003:056E:00FC.0008: unknown main item tag 0x0 [ 295.259445][ T6877] elecom 0003:056E:00FC.0008: unknown main item tag 0x0 [ 295.269680][ T6877] elecom 0003:056E:00FC.0008: unknown main item tag 0x0 [ 295.666699][ T6877] elecom 0003:056E:00FC.0008: unknown main item tag 0x0 [ 295.673853][ T6877] elecom 0003:056E:00FC.0008: unknown main item tag 0x1 [ 295.703707][ T6877] elecom 0003:056E:00FC.0008: unknown main item tag 0x0 [ 295.710708][ T6877] elecom 0003:056E:00FC.0008: unknown main item tag 0x0 [ 295.717803][ T6877] elecom 0003:056E:00FC.0008: unknown main item tag 0x0 [ 295.727031][ T6877] elecom 0003:056E:00FC.0008: unknown main item tag 0x0 [ 295.737822][ T6877] elecom 0003:056E:00FC.0008: unknown main item tag 0x0 [ 295.744897][ T6877] elecom 0003:056E:00FC.0008: unknown main item tag 0x0 [ 295.751882][ T6877] elecom 0003:056E:00FC.0008: unknown main item tag 0x0 [ 295.772768][ T6877] elecom 0003:056E:00FC.0008: unknown main item tag 0x0 [ 295.779770][ T6877] elecom 0003:056E:00FC.0008: unknown main item tag 0x0 [ 295.802739][ T6877] elecom 0003:056E:00FC.0008: unknown main item tag 0x0 [ 295.809741][ T6877] elecom 0003:056E:00FC.0008: unknown main item tag 0x0 [ 295.822729][ T6877] elecom 0003:056E:00FC.0008: unknown main item tag 0x0 [ 295.830886][ T6877] elecom 0003:056E:00FC.0008: unknown main item tag 0x0 [ 295.852765][ T6877] elecom 0003:056E:00FC.0008: unknown main item tag 0x0 [ 295.859757][ T6877] elecom 0003:056E:00FC.0008: unknown main item tag 0x0 [ 295.882771][ T6877] elecom 0003:056E:00FC.0008: unknown main item tag 0x0 [ 295.889778][ T6877] elecom 0003:056E:00FC.0008: unknown main item tag 0x0 [ 295.912752][ T6877] elecom 0003:056E:00FC.0008: unknown main item tag 0x0 [ 295.919878][ T6877] elecom 0003:056E:00FC.0008: unknown main item tag 0x2 [ 295.931290][ T6877] elecom 0003:056E:00FC.0008: unknown main item tag 0x0 [ 295.944180][ T6877] elecom 0003:056E:00FC.0008: unexpected long global item [ 295.951826][ T6877] elecom: probe of 0003:056E:00FC.0008 failed with error -22 [ 295.986407][ T6877] usb 4-1: USB disconnect, device number 10 [ 296.081871][ T8155] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 296.117229][ T8155] BTRFS info (device loop2): setting nodatacow, compression disabled [ 296.127427][ T8191] loop5: detected capacity change from 0 to 17 [ 296.164229][ T8155] BTRFS info (device loop2): setting datacow [ 296.170267][ T8155] BTRFS info (device loop2): doing ref verification [ 296.362984][ T8155] BTRFS info (device loop2): force clearing of disk cache [ 296.405110][ T8155] BTRFS info (device loop2): turning off barriers [ 296.421797][ T8192] loop5: detected capacity change from 0 to 1024 [ 296.439696][ T8155] BTRFS info (device loop2): enabling ssd optimizations [ 296.472227][ T8155] BTRFS info (device loop2): using spread ssd allocation scheme [ 296.492928][ T8155] BTRFS info (device loop2): not using ssd optimizations [ 296.513447][ T8155] BTRFS info (device loop2): not using spread ssd allocation scheme [ 296.536180][ T8155] BTRFS info (device loop2): using free space tree [ 296.548987][ T8155] BTRFS info (device loop2): has skinny extents [ 296.621998][ T8155] BTRFS error (device loop2): open_ctree failed [ 296.688425][ T8188] loop3: detected capacity change from 0 to 32768 [ 296.786762][ T8188] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.1152 (8188) [ 296.893210][ T8188] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 296.908419][ T8188] BTRFS info (device loop3): using free space tree [ 296.928720][ T8188] BTRFS info (device loop3): has skinny extents [ 297.330992][ T8188] BTRFS info (device loop3): enabling ssd optimizations [ 297.617320][ T8184] loop1: detected capacity change from 0 to 65618 [ 297.672784][ T4397] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 297.992856][ T4397] usb 5-1: Using ep0 maxpacket: 8 [ 298.475552][ T8184] XFS (loop1): Mounting V5 Filesystem [ 298.590964][ T8184] XFS (loop1): log mount failed [ 298.773061][ T4397] usb 5-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 298.788313][ T4397] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.796631][ T4397] usb 5-1: Product: syz [ 298.801177][ T4397] usb 5-1: Manufacturer: syz [ 298.806104][ T4397] usb 5-1: SerialNumber: syz [ 298.824027][ T4397] usb 5-1: config 0 descriptor?? [ 298.908967][ T4397] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 299.243738][ T8266] tipc: Enabled bearer , priority 10 [ 299.388280][ T8268] loop2: detected capacity change from 0 to 17 [ 299.746856][ T8270] loop2: detected capacity change from 0 to 1024 [ 299.932090][ T8277] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 300.040442][ T4273] usb 5-1: USB disconnect, device number 9 [ 300.352793][ T6879] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 300.862956][ T6879] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 300.905053][ T6879] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 301.085846][ T6879] usb 6-1: New USB device found, idVendor=056a, idProduct=005d, bcdDevice= 0.00 [ 301.101905][ T6879] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.115302][ T6879] usb 6-1: config 0 descriptor?? [ 301.769898][ T8307] loop4: detected capacity change from 0 to 17 [ 301.986990][ T4397] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 302.173528][ T6879] wacom 0003:056A:005D.0009: hidraw0: USB HID v0.00 Device [HID 056a:005d] on usb-dummy_hcd.5-1/input0 [ 302.327603][ T6879] usb 6-1: USB disconnect, device number 5 [ 302.348095][ T8314] loop4: detected capacity change from 0 to 1024 [ 302.621104][ T4397] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 302.630359][ T4397] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.645586][ T4397] usb 2-1: config 0 descriptor?? [ 302.700049][ T8316] tipc: Enabling of bearer rejected, failed to enable media [ 302.726804][ T4397] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 303.200276][ T8331] loop4: detected capacity change from 0 to 256 [ 303.283926][ T8331] exfat: Deprecated parameter 'utf8' [ 303.289328][ T8331] exfat: Deprecated parameter 'namecase' [ 303.300185][ T8331] exfat: Deprecated parameter 'utf8' [ 303.335515][ T4397] gspca_cpia1: usb_control_msg 01, error -71 [ 303.341539][ T4397] cpia1 2-1:0.0: only firmware version 1 is supported (got: 0) [ 303.364680][ T4397] usb 2-1: USB disconnect, device number 6 [ 303.406720][ T8331] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 303.458408][ T8318] loop3: detected capacity change from 0 to 40427 [ 303.467813][ T8331] attempt to access beyond end of device [ 303.467813][ T8331] loop4: rw=524288, want=34359738496, limit=256 [ 303.500132][ T8331] attempt to access beyond end of device [ 303.500132][ T8331] loop4: rw=0, want=34359738496, limit=256 [ 303.514817][ T26] audit: type=1800 audit(1732096445.328:25): pid=8331 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1186" name="file1" dev="loop4" ino=1049041 res=0 errno=0 [ 303.604936][ T8318] F2FS-fs (loop3): Found nat_bits in checkpoint [ 303.767609][ T8318] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 303.808898][ T26] audit: type=1800 audit(1732096445.628:26): pid=8318 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1181" name="file1" dev="loop3" ino=10 res=0 errno=0 [ 303.983026][ T4171] attempt to access beyond end of device [ 303.983026][ T4171] loop3: rw=2049, want=45104, limit=40427 [ 305.441888][ T8365] loop3: detected capacity change from 0 to 17 [ 305.715744][ T8367] loop2: detected capacity change from 0 to 128 [ 305.899765][ T8350] loop5: detected capacity change from 0 to 32768 [ 305.990347][ T8367] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 306.012196][ T8367] ext4 filesystem being mounted at /255/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 306.050340][ T8370] loop3: detected capacity change from 0 to 1024 [ 306.051233][ T8350] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 scanned by syz.5.1194 (8350) [ 306.126864][ T8350] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 306.152816][ T8350] BTRFS info (device loop5): use zlib compression, level 3 [ 306.192966][ T8350] BTRFS info (device loop5): doing ref verification [ 306.219998][ T8350] BTRFS info (device loop5): setting nodatacow, compression disabled [ 306.251638][ T8350] BTRFS info (device loop5): disabling tree log [ 306.271898][ T8350] BTRFS info (device loop5): using free space tree [ 306.382785][ T8350] BTRFS info (device loop5): has skinny extents [ 306.813934][ T6876] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 307.010333][ T8374] loop4: detected capacity change from 0 to 32768 [ 307.197092][ T6876] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 307.215873][ T6876] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.251523][ T6876] usb 4-1: config 0 descriptor?? [ 307.294955][ T6876] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 307.351871][ T8374] XFS (loop4): Mounting V5 Filesystem [ 307.543239][ T8374] XFS (loop4): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 307.598466][ T8374] XFS (loop4): Starting recovery (logdev: internal) [ 307.635469][ T8374] XFS (loop4): Ending recovery (logdev: internal) [ 307.734556][ T6883] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 307.806227][ T6876] gspca_cpia1: usb_control_msg 03, error -71 [ 307.833048][ T6876] gspca_cpia1: usb_control_msg 01, error -71 [ 307.843202][ T6876] cpia1 4-1:0.0: only firmware version 1 is supported (got: 0) [ 307.854258][ T4166] XFS (loop4): Unmounting Filesystem [ 307.866894][ T6876] usb 4-1: USB disconnect, device number 11 [ 308.762905][ T6883] usb 2-1: Using ep0 maxpacket: 8 [ 308.787189][ T8437] loop2: detected capacity change from 0 to 17 [ 308.882934][ T6883] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 308.890377][ T6883] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 308.903232][ T6883] usb 2-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 309.147831][ T6883] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 309.157805][ T6883] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 309.192858][ T6883] usb 2-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 309.385391][ T6876] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 309.514442][ T8448] loop2: detected capacity change from 0 to 1024 [ 310.042895][ T6883] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 310.051000][ T6883] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 310.101318][ T6883] usb 2-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 310.253180][ T6876] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 310.323030][ T6883] usb 2-1: string descriptor 0 read error: -71 [ 310.329481][ T6883] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 310.346170][ T6876] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 310.389691][ T6883] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.402854][ T6876] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 310.433606][ T6876] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 310.443001][ T6883] usb 2-1: can't set config #168, error -71 [ 310.450269][ T6876] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.467751][ T6883] usb 2-1: USB disconnect, device number 7 [ 310.483461][ T6876] usb 4-1: config 0 descriptor?? [ 310.513242][ T8433] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 310.842762][ T6883] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 310.975352][ T6876] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 310.990548][ T6876] plantronics 0003:047F:FFFF.000A: No inputs registered, leaving [ 311.097659][ T4178] Bluetooth: hci1: link tx timeout [ 311.103348][ T4178] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 311.111191][ T4178] Bluetooth: hci1: link tx timeout [ 311.125846][ T6876] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 311.126809][ T4178] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 311.402891][ T6883] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 311.583105][ T6883] usb 2-1: New USB device found, idVendor=0bfd, idProduct=0017, bcdDevice=2f.a3 [ 311.601251][ T6883] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.622373][ T6883] usb 2-1: Product: syz [ 311.628210][ T6883] usb 2-1: Manufacturer: syz [ 311.639940][ T6883] usb 2-1: SerialNumber: syz [ 311.649521][ T6883] usb 2-1: config 0 descriptor?? [ 311.723878][ T6883] kvaser_usb 2-1:0.0: Cannot get usb endpoint(s) [ 311.724380][ T8478] loop4: detected capacity change from 0 to 17 [ 311.942358][ T6883] usb 2-1: USB disconnect, device number 8 [ 312.130742][ T8480] loop4: detected capacity change from 0 to 1024 [ 312.278519][ T8471] loop2: detected capacity change from 0 to 40427 [ 312.424361][ T8471] F2FS-fs (loop2): Found nat_bits in checkpoint [ 312.687430][ T8471] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 313.397758][ T8490] loop5: detected capacity change from 0 to 512 [ 313.543672][ T6883] usb 4-1: USB disconnect, device number 12 [ 313.605468][ T8490] EXT4-fs error (device loop5): ext4_orphan_get:1401: inode #15: comm syz.5.1230: casefold flag without casefold feature [ 313.663906][ T8490] EXT4-fs error (device loop5): ext4_orphan_get:1406: comm syz.5.1230: couldn't read orphan inode 15 (err -117) [ 313.749602][ T8490] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 314.365988][ T8492] loop4: detected capacity change from 0 to 40427 [ 314.403249][ T8492] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 314.411200][ T8492] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 314.446086][ T8492] F2FS-fs (loop4): invalid crc value [ 314.471972][ T8492] F2FS-fs (loop4): Found nat_bits in checkpoint [ 314.630239][ T8492] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 314.639751][ T8492] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 314.755235][ T8524] loop3: detected capacity change from 0 to 17 [ 315.031264][ T8525] loop3: detected capacity change from 0 to 1024 [ 315.068586][ T8527] netlink: 'syz.5.1242': attribute type 4 has an invalid length. [ 315.369735][ T8512] loop2: detected capacity change from 0 to 32768 [ 315.447062][ T8512] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.1237 (8512) [ 315.545468][ T8512] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 316.018009][ T8512] BTRFS info (device loop2): using free space tree [ 316.252999][ T8512] BTRFS info (device loop2): has skinny extents [ 316.538634][ T8545] loop5: detected capacity change from 0 to 512 [ 316.643410][ T8512] BTRFS info (device loop2): enabling ssd optimizations [ 316.691542][ T8545] EXT4-fs (loop5): Ignoring removed bh option [ 316.723342][ T8545] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 316.752960][ T7993] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 316.858022][ T26] audit: type=1800 audit(1732096458.668:27): pid=8512 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1237" name="bus" dev="loop2" ino=263 res=0 errno=0 [ 316.902442][ T8545] EXT4-fs (loop5): 1 truncate cleaned up [ 316.912412][ T8545] EXT4-fs (loop5): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,bh,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 316.966609][ T1426] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.032753][ T7993] usb 4-1: Using ep0 maxpacket: 32 [ 317.162996][ T7993] usb 4-1: config 0 has an invalid interface number: 165 but max is 0 [ 317.176830][ T7993] usb 4-1: config 0 has no interface number 0 [ 317.198567][ T7993] usb 4-1: config 0 interface 165 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 317.230585][ T7993] usb 4-1: config 0 interface 165 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 317.249001][ T7993] usb 4-1: config 0 interface 165 has no altsetting 0 [ 317.449351][ T7993] usb 4-1: New USB device found, idVendor=1608, idProduct=030c, bcdDevice=3c.96 [ 317.468607][ T7993] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.486960][ T7993] usb 4-1: Product: syz [ 317.491167][ T7993] usb 4-1: Manufacturer: syz [ 317.512236][ T7993] usb 4-1: SerialNumber: syz [ 317.544238][ T7993] usb 4-1: config 0 descriptor?? [ 317.577051][ T8543] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 317.597152][ T8543] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 317.923866][ T8575] loop2: detected capacity change from 0 to 16 [ 317.934345][ T7993] io_ti 4-1:0.165: required endpoints missing [ 317.950987][ T7993] usb 4-1: USB disconnect, device number 13 [ 317.963217][ T8575] erofs: (device loop2): mounted with root inode @ nid 36. [ 318.034610][ T8575] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 318.112071][ T26] audit: type=1800 audit(1732096459.928:28): pid=8545 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1246" name="file0" dev="loop5" ino=13 res=0 errno=0 [ 318.152745][ T6885] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 318.444635][ T8581] loop3: detected capacity change from 0 to 17 [ 318.542808][ T6885] usb 2-1: Using ep0 maxpacket: 16 [ 318.703008][ T6885] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 318.781299][ T8587] loop3: detected capacity change from 0 to 1024 [ 318.847383][ T8589] ICMPv6: NA: fd:f9:a6:84:a5:1b advertised our address fe80::aa on syz_tun! [ 318.873343][ T6885] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 318.884108][ T6885] usb 2-1: New USB device found, idVendor=1532, idProduct=011b, bcdDevice= 0.00 [ 318.893575][ T6885] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.904087][ T6885] usb 2-1: config 0 descriptor?? [ 319.148648][ T8597] loop2: detected capacity change from 0 to 256 [ 319.385689][ T6885] hid-generic 0003:1532:011B.000B: unknown main item tag 0x0 [ 319.403157][ T6885] hid-generic 0003:1532:011B.000B: unknown main item tag 0x0 [ 319.422245][ T6885] hid-generic 0003:1532:011B.000B: unknown main item tag 0x0 [ 319.438550][ T6885] hid-generic 0003:1532:011B.000B: unknown main item tag 0x0 [ 319.447322][ T6885] hid-generic 0003:1532:011B.000B: unknown main item tag 0x0 [ 319.480524][ T6885] hid-generic 0003:1532:011B.000B: hidraw0: USB HID v0.00 Device [HID 1532:011b] on usb-dummy_hcd.1-1/input0 [ 319.767184][ T8604] loop2: detected capacity change from 0 to 4096 [ 319.901656][ T8604] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512) [ 319.960848][ T8604] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 319.983189][ T8612] loop3: detected capacity change from 0 to 1024 [ 320.003186][ T8604] ntfs3: loop2: Failed to load $Extend. [ 320.040941][ T8612] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 320.075804][ T8612] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 320.151285][ T8612] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,errors=remount-ro,dioread_nolock,max_dir_size_kb=0x0000000000000009,nomblk_io_submit,data_err=abort,. Quota mode: writeback. [ 320.662923][ T6879] usb 3-1: new low-speed USB device number 9 using dummy_hcd [ 320.889805][ T6883] usb 2-1: USB disconnect, device number 9 [ 320.938507][ T8629] loop1: detected capacity change from 0 to 17 [ 321.073297][ T6879] usb 3-1: unable to get BOS descriptor or descriptor too short [ 321.321832][ T6879] usb 3-1: config 1 interface 0 altsetting 128 endpoint 0x1 is Bulk; changing to Interrupt [ 321.342910][ T6879] usb 3-1: config 1 interface 0 has no altsetting 0 [ 321.582966][ T6879] usb 3-1: string descriptor 0 read error: -22 [ 321.592548][ T6879] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 321.614829][ T6879] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.643688][ T8642] loop4: detected capacity change from 0 to 512 [ 321.653367][ T8617] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 321.701943][ T8631] loop1: detected capacity change from 0 to 1024 [ 321.748077][ T8642] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 321.912404][ T6883] usb 3-1: USB disconnect, device number 9 [ 322.562841][ T6876] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 322.932927][ T6876] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 322.955769][ T6876] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 322.996229][ T6876] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 10 [ 323.029921][ T6876] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 323.060764][ T6876] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 323.102786][ T6876] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 323.118084][ T6876] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.148703][ T6876] usb 6-1: config 0 descriptor?? [ 323.292863][ T6876] rc_core: IR keymap rc-hauppauge not found [ 323.299001][ T6876] Registered IR keymap rc-empty [ 323.343916][ T6876] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 323.374496][ T6876] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 323.410494][ T6876] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 323.454499][ T6876] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input15 [ 323.662890][ T6876] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 323.706064][ T6876] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 324.096954][ T6876] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 324.139006][ T6876] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 324.172864][ T6876] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 324.212918][ T6876] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 324.244696][ T6876] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 324.282808][ T6876] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 324.312797][ T6876] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 324.438944][ T6876] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 324.474398][ T8687] loop4: detected capacity change from 0 to 17 [ 324.490639][ T6876] mceusb 6-1:0.0: Registered with mce emulator interface version 1 [ 324.505609][ T6876] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 324.529686][ T6876] usb 6-1: USB disconnect, device number 6 [ 324.551631][ T8674] loop3: detected capacity change from 0 to 40427 [ 324.630747][ T8674] F2FS-fs (loop3): invalid crc value [ 324.651663][ T8674] F2FS-fs (loop3): Found nat_bits in checkpoint [ 324.826494][ T8674] F2FS-fs (loop3): Cannot turn on quotas: -2 on 1 [ 324.856203][ T8674] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 324.872854][ T8695] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1290'. [ 324.967914][ T8674] F2FS-fs (loop3): switch extent_cache option is not allowed [ 325.081115][ T4171] attempt to access beyond end of device [ 325.081115][ T4171] loop3: rw=2049, want=45112, limit=40427 [ 325.224717][ T8689] loop4: detected capacity change from 0 to 1024 [ 326.892572][ T8734] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 327.420081][ T8747] loop2: detected capacity change from 0 to 17 [ 327.882434][ T8750] loop2: detected capacity change from 0 to 1024 [ 328.256075][ T8744] loop3: detected capacity change from 0 to 32768 [ 328.389393][ T8744] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.1307 (8744) [ 328.764622][ T8744] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 328.829715][ T8762] IPv6: addrconf: prefix option has invalid lifetime [ 328.836489][ T8762] IPv6: addrconf: prefix option has invalid lifetime [ 328.855090][ T8744] BTRFS info (device loop3): using free space tree [ 328.884301][ T8744] BTRFS info (device loop3): has skinny extents [ 328.944770][ T6883] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 329.313697][ T6883] usb 6-1: Using ep0 maxpacket: 32 [ 329.588311][ T8744] BTRFS info (device loop3): enabling ssd optimizations [ 329.733066][ T6883] usb 6-1: config 1 interface 0 has no altsetting 0 [ 329.893151][ T6883] usb 6-1: New USB device found, idVendor=046d, idProduct=c087, bcdDevice= 0.40 [ 329.970156][ T8768] loop2: detected capacity change from 0 to 32768 [ 329.992041][ T6883] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.000438][ T6883] usb 6-1: Product: syz [ 330.005594][ T6883] usb 6-1: Manufacturer: syz [ 330.010214][ T6883] usb 6-1: SerialNumber: syz [ 330.054482][ T8768] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.1315 (8768) [ 330.174217][ T8768] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 330.202971][ T8768] BTRFS info (device loop2): using free space tree [ 330.212114][ T8768] BTRFS info (device loop2): has skinny extents [ 330.613153][ T8768] BTRFS info (device loop2): enabling ssd optimizations [ 331.039775][ T6883] usbhid 6-1:1.0: can't add hid device: -71 [ 331.045893][ T6883] usbhid: probe of 6-1:1.0 failed with error -71 [ 331.084279][ T6883] usb 6-1: USB disconnect, device number 7 [ 331.435527][ T8832] loop2: detected capacity change from 0 to 17 [ 332.177930][ T8840] loop2: detected capacity change from 0 to 1024 [ 332.584614][ T8852] loop4: detected capacity change from 0 to 2048 [ 332.658274][ T8852] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 332.737836][ T8855] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 332.954876][ T8861] Can't find a SQUASHFS superblock on loop1 [ 333.115621][ T8871] loop5: detected capacity change from 0 to 64 [ 333.434193][ T8875] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 333.441077][ T8848] loop3: detected capacity change from 0 to 32768 [ 333.475028][ T8875] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 333.503126][ T8848] BTRFS: device fsid 92aec1fe-fee8-4e05-92dc-790b47b871d9 devid 1 transid 8 /dev/loop3 scanned by syz.3.1330 (8848) [ 333.540349][ T8848] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 333.560623][ T8848] BTRFS info (device loop3): using free space tree [ 333.569466][ T8848] BTRFS info (device loop3): has skinny extents [ 333.629323][ T8878] loop5: detected capacity change from 0 to 17 [ 333.991111][ T8891] loop5: detected capacity change from 0 to 1024 [ 334.191135][ T8848] BTRFS info (device loop3): enabling ssd optimizations [ 335.338117][ T8915] loop3: detected capacity change from 0 to 1024 [ 335.447135][ T8915] EXT4-fs (loop3): Ignoring removed orlov option [ 335.487406][ T8915] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 335.571354][ T8915] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 335.733030][ T8915] loop_set_status: loop3 () has still dirty pages (nrpages=3) [ 336.202942][ T1110] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 336.315038][ T8917] loop5: detected capacity change from 0 to 40427 [ 336.348196][ T8917] F2FS-fs (loop5): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 336.348619][ T8935] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 336.367692][ T8917] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 336.388645][ T8935] overlayfs: missing 'lowerdir' [ 336.422494][ T8917] F2FS-fs (loop5): Unrecognized mount option "age_extent_cache" or missing value [ 336.452957][ T1110] usb 3-1: Using ep0 maxpacket: 16 [ 336.595518][ T8943] loop3: detected capacity change from 0 to 17 [ 336.798553][ T1110] usb 3-1: unable to get BOS descriptor or descriptor too short [ 336.867003][ T8946] loop3: detected capacity change from 0 to 1024 [ 336.873872][ T4214] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 336.892884][ T1110] usb 3-1: config 1 has an invalid interface number: 32 but max is 1 [ 336.901367][ T1110] usb 3-1: config 1 has an invalid interface number: 189 but max is 1 [ 336.928730][ T1110] usb 3-1: config 1 has no interface number 0 [ 336.943449][ T1110] usb 3-1: config 1 has no interface number 1 [ 336.956847][ T1110] usb 3-1: config 1 interface 32 has no altsetting 0 [ 336.964270][ T1110] usb 3-1: config 1 interface 189 has no altsetting 0 [ 337.132754][ T4214] usb 2-1: Using ep0 maxpacket: 8 [ 337.498612][ T1110] usb 3-1: New USB device found, idVendor=04c1, idProduct=009d, bcdDevice=87.9d [ 337.510260][ T1110] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.519150][ T1110] usb 3-1: Product: syz [ 337.523893][ T1110] usb 3-1: Manufacturer: syz [ 337.528509][ T1110] usb 3-1: SerialNumber: syz [ 337.629892][ T4214] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 337.651015][ T4214] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 337.667499][ T4214] usb 2-1: too many endpoints for config 0 interface 0 altsetting 58: 56, using maximum allowed: 30 [ 337.679463][ T4214] usb 2-1: config 0 interface 0 altsetting 58 has 0 endpoint descriptors, different from the interface descriptor's value: 56 [ 337.712983][ T4214] usb 2-1: config 0 interface 0 has no altsetting 1 [ 337.719632][ T4214] usb 2-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice= 9.ac [ 337.750846][ T4214] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.782530][ T4214] usb 2-1: config 0 descriptor?? [ 337.846067][ T4214] qmi_wwan: probe of 2-1:0.0 failed with error -22 [ 337.899028][ T1110] usb 3-1: USB disconnect, device number 10 [ 337.986382][ T8956] loop4: detected capacity change from 0 to 256 [ 338.051302][ T4214] usb 2-1: USB disconnect, device number 10 [ 338.310160][ T8960] loop5: detected capacity change from 0 to 8192 [ 338.362497][ T8960] loop5: p1 p3 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p2 [ 338.367182][ T8960] loop5: p1 size 33751040 extends beyond EOD, [ 338.388274][ T8964] netlink: 'syz.2.1367': attribute type 29 has an invalid length. [ 338.470717][ T8960] truncated [ 338.477187][ T8964] netlink: 'syz.2.1367': attribute type 29 has an invalid length. [ 338.484074][ T8960] loop5: p4 start 8323079 is beyond EOD, truncated [ 338.489753][ T8965] netlink: 'syz.2.1367': attribute type 29 has an invalid length. [ 338.492269][ T8960] loop5: p5 size 33751040 extends beyond EOD, truncated [ 338.509262][ T8960] loop5: p6 start 8323079 is beyond EOD, truncated [ 338.516567][ T8960] loop5: p7 size 33751040 extends beyond EOD, truncated [ 338.549658][ T8960] loop5: p8 start 8323079 is beyond EOD, truncated [ 338.562316][ T8960] loop5: p9 size 33751040 extends beyond EOD, truncated [ 338.581674][ T8960] loop5: p10 start 8323079 is beyond EOD, truncated [ 338.594427][ T8960] loop5: p11 size 33751040 extends beyond EOD, truncated [ 338.638142][ T8960] loop5: p12 start 8323079 is beyond EOD, truncated [ 338.648474][ T8960] loop5: p13 size 33751040 extends beyond EOD, truncated [ 338.702962][ T8960] loop5: p14 start 8323079 is beyond EOD, truncated [ 338.719865][ T8960] loop5: p15 size 33751040 extends beyond EOD, truncated [ 338.744849][ T8960] loop5: p16 start 8323079 is beyond EOD, truncated [ 338.765964][ T8960] loop5: p17 size 33751040 extends beyond EOD, truncated [ 338.791632][ T8960] loop5: p18 start 8323079 is beyond EOD, truncated [ 338.817801][ T8960] loop5: p19 size 33751040 extends beyond EOD, truncated [ 338.847379][ T8960] loop5: p20 start 8323079 is beyond EOD, truncated [ 338.871851][ T8960] loop5: p21 size 33751040 extends beyond EOD, truncated [ 338.897538][ T8960] loop5: p22 start 8323079 is beyond EOD, truncated [ 338.910073][ T8960] loop5: p23 size 33751040 extends beyond EOD, truncated [ 338.949118][ T8960] loop5: p24 start 8323079 is beyond EOD, truncated [ 338.971445][ T8960] loop5: p25 size 33751040 extends beyond EOD, truncated [ 338.999344][ T8960] loop5: p26 start 8323079 is beyond EOD, truncated [ 339.020558][ T8960] loop5: p27 size 33751040 extends beyond EOD, truncated [ 339.063060][ T8960] loop5: p28 start 8323079 is beyond EOD, truncated [ 339.090163][ T8960] loop5: p29 size 33751040 extends beyond EOD, truncated [ 339.133056][ T8960] loop5: p30 start 8323079 is beyond EOD, truncated [ 339.155623][ T8960] loop5: p31 size 33751040 extends beyond EOD, truncated [ 339.172009][ T8960] loop5: p32 start 8323079 is beyond EOD, truncated [ 339.186702][ T8960] loop5: p33 size 33751040 extends beyond EOD, truncated [ 339.203164][ T8960] loop5: p34 start 8323079 is beyond EOD, truncated [ 339.217680][ T8960] loop5: p35 size 33751040 extends beyond EOD, truncated [ 339.241583][ T8960] loop5: p36 start 8323079 is beyond EOD, truncated [ 339.252533][ T8960] loop5: p37 size 33751040 extends beyond EOD, truncated [ 339.276546][ T8960] loop5: p38 start 8323079 is beyond EOD, truncated [ 339.297247][ T8960] loop5: p39 size 33751040 extends beyond EOD, truncated [ 339.320702][ T8960] loop5: p40 start 8323079 is beyond EOD, truncated [ 339.340481][ T8960] loop5: p41 size 33751040 extends beyond EOD, truncated [ 339.374941][ T8960] loop5: p42 start 8323079 is beyond EOD, truncated [ 339.391614][ T8960] loop5: p43 size 33751040 extends beyond EOD, truncated [ 339.411315][ T8960] loop5: p44 start 8323079 is beyond EOD, truncated [ 339.422786][ T8820] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 339.434954][ T8960] loop5: p45 size 33751040 extends beyond EOD, truncated [ 339.454827][ T8960] loop5: p46 start 8323079 is beyond EOD, truncated [ 339.478730][ T8960] loop5: p47 size 33751040 extends beyond EOD, truncated [ 339.489116][ T8960] loop5: p48 start 8323079 is beyond EOD, truncated [ 339.496506][ T8960] loop5: p49 size 33751040 extends beyond EOD, truncated [ 339.501940][ T8973] loop1: detected capacity change from 0 to 32768 [ 339.510515][ T8960] loop5: p50 start 8323079 is beyond EOD, truncated [ 339.517881][ T8960] loop5: p51 size 33751040 extends beyond EOD, truncated [ 339.526680][ T8960] loop5: p52 start 8323079 is beyond EOD, truncated [ 339.534562][ T8960] loop5: p53 size 33751040 extends beyond EOD, truncated [ 339.543192][ T8960] loop5: p54 start 8323079 is beyond EOD, truncated [ 339.550035][ T8960] loop5: p55 size 33751040 extends beyond EOD, truncated [ 339.563031][ T8960] loop5: p56 start 8323079 is beyond EOD, truncated [ 339.570950][ T8960] loop5: p57 size 33751040 extends beyond EOD, truncated [ 339.583602][ T8960] loop5: p58 start 8323079 is beyond EOD, truncated [ 339.590223][ T8960] loop5: p59 size 33751040 extends beyond EOD, truncated [ 339.599461][ T8960] loop5: p60 start 8323079 is beyond EOD, truncated [ 339.606806][ T8960] loop5: p61 size 33751040 extends beyond EOD, truncated [ 339.623034][ T8960] loop5: p62 start 8323079 is beyond EOD, truncated [ 339.629845][ T8973] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.1370 (8973) [ 339.649708][ T8960] loop5: p63 size 33751040 extends beyond EOD, truncated [ 339.672899][ T8820] usb 5-1: Using ep0 maxpacket: 16 [ 339.704108][ T8960] loop5: p64 start 8323079 is beyond EOD, truncated [ 339.704720][ T8973] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 339.711335][ T8960] loop5: p65 size 33751040 extends beyond EOD, truncated [ 339.729113][ T8960] loop5: p66 start 8323079 is beyond EOD, truncated [ 339.736275][ T8960] loop5: p67 size 33751040 extends beyond EOD, truncated [ 339.750880][ T8960] loop5: p68 start 8323079 is beyond EOD, truncated [ 339.755193][ T8973] BTRFS info (device loop1): setting nodatacow, compression disabled [ 339.765775][ T8960] loop5: p69 size 33751040 extends beyond EOD, truncated [ 339.785016][ T8960] loop5: p70 start 8323079 is beyond EOD, truncated [ 339.787336][ T8973] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8) [ 339.800062][ T8960] loop5: p71 size 33751040 extends beyond EOD, [ 339.803669][ T8820] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 339.806835][ T8960] truncated [ 339.809964][ T8820] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 339.809995][ T8820] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 339.839096][ T8960] loop5: p72 start 8323079 is beyond EOD, truncated [ 339.870698][ T8960] loop5: p73 size 33751040 extends beyond EOD, truncated [ 339.881916][ T8973] BTRFS info (device loop1): force lzo compression, level 0 [ 339.889063][ T8960] loop5: p74 start 8323079 is beyond EOD, truncated [ 339.904016][ T8960] loop5: p75 size 33751040 extends beyond EOD, truncated [ 339.905296][ T8973] BTRFS info (device loop1): metadata ratio 8 [ 339.925460][ T8973] BTRFS info (device loop1): doing ref verification [ 339.936234][ T8820] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice= 0.00 [ 339.942418][ T8960] loop5: p76 start 8323079 is beyond EOD, [ 339.945568][ T8973] BTRFS info (device loop1): metadata ratio 32769 [ 339.961623][ T8960] truncated [ 339.966105][ T8820] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.974698][ T8973] BTRFS info (device loop1): turning off barriers [ 339.981192][ T8973] BTRFS info (device loop1): enabling ssd optimizations [ 339.982696][ T8960] loop5: p77 size 33751040 extends beyond EOD, truncated [ 340.008200][ T8820] usb 5-1: config 0 descriptor?? [ 340.022760][ T8973] BTRFS info (device loop1): using spread ssd allocation scheme [ 340.030130][ T8960] loop5: p78 start 8323079 is beyond EOD, truncated [ 340.036252][ T8973] BTRFS info (device loop1): turning on barriers [ 340.056892][ T8973] BTRFS info (device loop1): using free space tree [ 340.060804][ T8960] loop5: p79 size 33751040 extends beyond EOD, truncated [ 340.070535][ T8973] BTRFS info (device loop1): has skinny extents [ 340.082105][ T8983] loop3: detected capacity change from 0 to 17 [ 340.084846][ T8960] loop5: p80 start 8323079 is beyond EOD, truncated [ 340.101564][ T8960] loop5: p81 size 33751040 extends beyond EOD, truncated [ 340.133852][ T8960] loop5: p82 start 8323079 is beyond EOD, truncated [ 340.148772][ T8960] loop5: p83 size 33751040 extends beyond EOD, truncated [ 340.159762][ T8960] loop5: p84 start 8323079 is beyond EOD, truncated [ 340.182863][ T8960] loop5: p85 size 33751040 extends beyond EOD, truncated [ 340.191541][ T8960] loop5: p86 start 8323079 is beyond EOD, truncated [ 340.205510][ T8960] loop5: p87 size 33751040 extends beyond EOD, truncated [ 340.334074][ T8960] loop5: p88 start 8323079 is beyond EOD, truncated [ 340.340866][ T8960] loop5: p89 size 33751040 extends beyond EOD, truncated [ 340.349516][ T8960] loop5: p90 start 8323079 is beyond EOD, truncated [ 340.356510][ T8960] loop5: p91 size 33751040 extends beyond EOD, truncated [ 340.368808][ T8960] loop5: p92 start 8323079 is beyond EOD, truncated [ 340.376665][ T8960] loop5: p93 size 33751040 extends beyond EOD, truncated [ 340.392993][ T8992] loop3: detected capacity change from 0 to 1024 [ 340.400890][ T8960] loop5: p94 start 8323079 is beyond EOD, truncated [ 340.423257][ T8960] loop5: p95 size 33751040 extends beyond EOD, truncated [ 340.447928][ T8960] loop5: p96 start 8323079 is beyond EOD, truncated [ 340.475851][ T8960] loop5: p97 size 33751040 extends beyond EOD, truncated [ 340.507578][ T8960] loop5: p98 start 8323079 is beyond EOD, truncated [ 340.522990][ T8960] loop5: p99 size 33751040 extends beyond EOD, truncated [ 340.535602][ T8960] loop5: p100 start 8323079 is beyond EOD, truncated [ 340.554836][ T8960] loop5: p101 size 33751040 extends beyond EOD, truncated [ 340.574287][ T8960] loop5: p102 start 8323079 is beyond EOD, truncated [ 340.581706][ T8820] hid-generic 0003:0955:7214.000C: hidraw0: USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.4-1/input0 [ 340.583451][ T8960] loop5: p103 size 33751040 extends beyond EOD, truncated [ 340.618777][ T8960] loop5: p104 start 8323079 is beyond EOD, truncated [ 340.630879][ T8960] loop5: p105 size 33751040 extends beyond EOD, truncated [ 340.663501][ T8960] loop5: p106 start 8323079 is beyond EOD, truncated [ 340.680863][ T8960] loop5: p107 size 33751040 extends beyond EOD, truncated [ 340.689883][ T8960] loop5: p108 start 8323079 is beyond EOD, truncated [ 340.698124][ T8960] loop5: p109 size 33751040 extends beyond EOD, truncated [ 340.708922][ T8960] loop5: p110 start 8323079 is beyond EOD, truncated [ 340.715761][ T8960] loop5: p111 size 33751040 extends beyond EOD, truncated [ 340.738366][ T8960] loop5: p112 start 8323079 is beyond EOD, truncated [ 340.747826][ T8960] loop5: p113 size 33751040 extends beyond EOD, truncated [ 340.764014][ T8960] loop5: p114 start 8323079 is beyond EOD, truncated [ 340.770963][ T8960] loop5: p115 size 33751040 extends beyond EOD, truncated [ 340.787383][ T8960] loop5: p116 start 8323079 is beyond EOD, truncated [ 340.801809][ T8960] loop5: p117 size 33751040 extends beyond EOD, truncated [ 340.810884][ T8960] loop5: p118 start 8323079 is beyond EOD, truncated [ 340.824048][ T8960] loop5: p119 size 33751040 extends beyond EOD, truncated [ 340.837626][ T8960] loop5: p120 start 8323079 is beyond EOD, truncated [ 340.844633][ T8960] loop5: p121 size 33751040 extends beyond EOD, truncated [ 340.859044][ T8960] loop5: p122 start 8323079 is beyond EOD, truncated [ 340.873027][ T8960] loop5: p123 size 33751040 extends beyond EOD, truncated [ 340.881990][ T8960] loop5: p124 start 8323079 is beyond EOD, truncated [ 340.897541][ T8960] loop5: p125 size 33751040 extends beyond EOD, truncated [ 340.906712][ T8960] loop5: p126 start 8323079 is beyond EOD, truncated [ 340.919706][ T8960] loop5: p127 size 33751040 extends beyond EOD, truncated [ 340.928750][ T8960] loop5: p128 start 8323079 is beyond EOD, truncated [ 340.941596][ T8960] loop5: p129 size 33751040 extends beyond EOD, truncated [ 340.951450][ T8960] loop5: p130 start 8323079 is beyond EOD, truncated [ 340.966504][ T8960] loop5: p131 size 33751040 extends beyond EOD, truncated [ 340.983170][ T8960] loop5: p132 start 8323079 is beyond EOD, truncated [ 340.991242][ T8960] loop5: p133 size 33751040 extends beyond EOD, truncated [ 341.006130][ T8960] loop5: p134 start 8323079 is beyond EOD, truncated [ 341.013322][ T8960] loop5: p135 size 33751040 extends beyond EOD, truncated [ 341.022163][ T8960] loop5: p136 start 8323079 is beyond EOD, truncated [ 341.035678][ T8960] loop5: p137 size 33751040 extends beyond EOD, truncated [ 341.044789][ T8960] loop5: p138 start 8323079 is beyond EOD, truncated [ 341.051639][ T8960] loop5: p139 size 33751040 extends beyond EOD, truncated [ 341.067466][ T8960] loop5: p140 start 8323079 is beyond EOD, truncated [ 341.074684][ T8960] loop5: p141 size 33751040 extends beyond EOD, truncated [ 341.088472][ T8960] loop5: p142 start 8323079 is beyond EOD, truncated [ 341.102730][ T8960] loop5: p143 size 33751040 extends beyond EOD, truncated [ 341.111404][ T8960] loop5: p144 start 8323079 is beyond EOD, truncated [ 341.124422][ T8960] loop5: p145 size 33751040 extends beyond EOD, truncated [ 341.139323][ T8960] loop5: p146 start 8323079 is beyond EOD, truncated [ 341.147013][ T8960] loop5: p147 size 33751040 extends beyond EOD, truncated [ 341.156245][ T8960] loop5: p148 start 8323079 is beyond EOD, truncated [ 341.160558][ T4221] usb 5-1: USB disconnect, device number 10 [ 341.169645][ T8960] loop5: p149 size 33751040 extends beyond EOD, truncated [ 341.209908][ T8960] loop5: p150 start 8323079 is beyond EOD, truncated [ 341.222017][ T8960] loop5: p151 size 33751040 extends beyond EOD, truncated [ 341.717519][ T4214] Bluetooth: hci3: command 0x0409 tx timeout [ 341.725951][ T8960] loop5: p152 start 8323079 is beyond EOD, truncated [ 341.742795][ T8960] loop5: p153 size 33751040 extends beyond EOD, truncated [ 341.767752][ T8960] loop5: p154 start 8323079 is beyond EOD, truncated [ 341.783208][ T8960] loop5: p155 size 33751040 extends beyond EOD, truncated [ 341.817067][ T8960] loop5: p156 start 8323079 is beyond EOD, truncated [ 341.834529][ T8960] loop5: p157 size 33751040 extends beyond EOD, truncated [ 341.861972][ T8960] loop5: p158 start 8323079 is beyond EOD, truncated [ 341.893105][ T8960] loop5: p159 size 33751040 extends beyond EOD, truncated [ 341.926355][ T8960] loop5: p160 start 8323079 is beyond EOD, truncated [ 341.941669][ T8960] loop5: p161 size 33751040 extends beyond EOD, truncated [ 341.956270][ T9024] loop4: detected capacity change from 0 to 512 [ 341.967192][ T8960] loop5: p162 start 8323079 is beyond EOD, truncated [ 341.983220][ T8960] loop5: p163 size 33751040 extends beyond EOD, truncated [ 342.008088][ T8960] loop5: p164 start 8323079 is beyond EOD, truncated [ 342.016090][ T8960] loop5: p165 size 33751040 extends beyond EOD, truncated [ 342.033896][ T8960] loop5: p166 start 8323079 is beyond EOD, truncated [ 342.040638][ T8960] loop5: p167 size 33751040 extends beyond EOD, truncated [ 342.077131][ T8960] loop5: p168 start 8323079 is beyond EOD, truncated [ 342.084928][ T8960] loop5: p169 size 33751040 extends beyond EOD, truncated [ 342.104456][ T8960] loop5: p170 start 8323079 is beyond EOD, truncated [ 342.111301][ T8960] loop5: p171 size 33751040 extends beyond EOD, truncated [ 342.127763][ T9024] EXT4-fs (loop4): orphan cleanup on readonly fs [ 342.134879][ T8960] loop5: p172 start 8323079 is beyond EOD, truncated [ 342.141592][ T8960] loop5: p173 size 33751040 extends beyond EOD, truncated [ 342.150365][ T8960] loop5: p174 start 8323079 is beyond EOD, truncated [ 342.160082][ T8960] loop5: p175 size 33751040 extends beyond EOD, truncated [ 342.168615][ T8960] loop5: p176 start 8323079 is beyond EOD, truncated [ 342.175665][ T8960] loop5: p177 size 33751040 extends beyond EOD, truncated [ 342.184141][ T8960] loop5: p178 start 8323079 is beyond EOD, truncated [ 342.190923][ T8960] loop5: p179 size 33751040 extends beyond EOD, truncated [ 342.199427][ T8960] loop5: p180 start 8323079 is beyond EOD, truncated [ 342.206383][ T8960] loop5: p181 size 33751040 extends beyond EOD, truncated [ 342.214755][ T8960] loop5: p182 start 8323079 is beyond EOD, truncated [ 342.221720][ T8960] loop5: p183 size 33751040 extends beyond EOD, truncated [ 342.230232][ T8960] loop5: p184 start 8323079 is beyond EOD, truncated [ 342.231014][ T9024] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.1382: bg 0: block 248: padding at end of block bitmap is not set [ 342.254344][ T8960] loop5: p185 size 33751040 extends beyond EOD, truncated [ 342.288982][ T8960] loop5: p186 start 8323079 is beyond EOD, truncated [ 342.296291][ T8960] loop5: p187 size 33751040 extends beyond EOD, truncated [ 342.331466][ T8960] loop5: p188 start 8323079 is beyond EOD, truncated [ 342.352930][ T8960] loop5: p189 size 33751040 extends beyond EOD, truncated [ 342.359190][ T9024] Quota error (device loop4): write_blk: dquota write failed [ 342.373437][ T8960] loop5: p190 start 8323079 is beyond EOD, truncated [ 342.392830][ T8960] loop5: p191 size 33751040 extends beyond EOD, truncated [ 342.401763][ T9024] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 342.419135][ T8960] loop5: p192 start 8323079 is beyond EOD, truncated [ 342.438376][ T9024] EXT4-fs error (device loop4): ext4_acquire_dquot:6197: comm syz.4.1382: Failed to acquire dquot type 1 [ 342.442781][ T8960] loop5: p193 size 33751040 extends beyond EOD, truncated [ 342.480000][ T9024] EXT4-fs (loop4): 1 truncate cleaned up [ 342.492119][ T9017] loop2: detected capacity change from 0 to 32768 [ 342.503990][ T8960] loop5: p194 start 8323079 is beyond EOD, truncated [ 342.509858][ T9024] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,abort,noload,noload,,errors=continue. Quota mode: writeback. [ 342.529684][ T8960] loop5: p195 size 33751040 extends beyond EOD, truncated [ 342.553062][ T8960] loop5: p196 start 8323079 is beyond EOD, truncated [ 342.565309][ T9017] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.1379 (9017) [ 342.565522][ T8960] loop5: p197 size 33751040 extends beyond EOD, truncated [ 342.620254][ T9024] EXT4-fs error (device loop4): ext4_remount:5855: comm syz.4.1382: Abort forced by user [ 342.633675][ T8960] loop5: p198 start 8323079 is beyond EOD, truncated [ 342.652703][ T9017] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 342.671870][ T9017] BTRFS info (device loop2): using free space tree [ 342.674167][ T8960] loop5: p199 size 33751040 extends beyond EOD, truncated [ 342.683372][ T9017] BTRFS info (device loop2): has skinny extents [ 342.800201][ T8960] loop5: p200 start 8323079 is beyond EOD, truncated [ 342.831404][ T8960] loop5: p201 size 33751040 extends beyond EOD, truncated [ 342.893873][ T8960] loop5: p202 start 8323079 is beyond EOD, truncated [ 342.950831][ T9054] loop4: detected capacity change from 0 to 17 [ 342.957908][ T8960] loop5: p203 size 33751040 extends beyond EOD, truncated [ 342.979151][ T8960] loop5: p204 start 8323079 is beyond EOD, truncated [ 342.998435][ T8960] loop5: p205 size 33751040 extends beyond EOD, truncated [ 343.017765][ T9017] BTRFS info (device loop2): enabling ssd optimizations [ 343.042036][ T8960] loop5: p206 start 8323079 is beyond EOD, truncated [ 343.073232][ T9017] fs-verity: sha256 using implementation "sha256-avx2" [ 343.179075][ T9017] fs-verity (loop2, inode 258): fs-verity keyring is empty, rejecting signed file! [ 343.190708][ T8960] loop5: p207 size 33751040 extends beyond EOD, truncated [ 343.233236][ T8960] loop5: p208 start 8323079 is beyond EOD, truncated [ 343.272802][ T8960] loop5: p209 size 33751040 extends beyond EOD, truncated [ 343.324013][ T8960] loop5: p210 start 8323079 is beyond EOD, truncated [ 343.349371][ T9059] loop4: detected capacity change from 0 to 1024 [ 343.357860][ T8960] loop5: p211 size 33751040 extends beyond EOD, truncated [ 343.382957][ T8960] loop5: p212 start 8323079 is beyond EOD, truncated [ 343.389710][ T8960] loop5: p213 size 33751040 extends beyond EOD, truncated [ 343.483529][ T8960] loop5: p214 start 8323079 is beyond EOD, truncated [ 343.511715][ T8960] loop5: p215 size 33751040 extends beyond EOD, truncated [ 343.538653][ T8960] loop5: p216 start 8323079 is beyond EOD, truncated [ 343.552676][ T8960] loop5: p217 size 33751040 extends beyond EOD, truncated [ 343.573926][ T8960] loop5: p218 start 8323079 is beyond EOD, truncated [ 343.580728][ T8960] loop5: p219 size 33751040 extends beyond EOD, truncated [ 343.609955][ T8960] loop5: p220 start 8323079 is beyond EOD, truncated [ 343.617651][ T8960] loop5: p221 size 33751040 extends beyond EOD, truncated [ 343.627984][ T8960] loop5: p222 start 8323079 is beyond EOD, truncated [ 343.634769][ T8960] loop5: p223 size 33751040 extends beyond EOD, truncated [ 343.650244][ T8960] loop5: p224 start 8323079 is beyond EOD, truncated [ 343.702691][ T8960] loop5: p225 size 33751040 extends beyond EOD, truncated [ 343.745642][ T8960] loop5: p226 start 8323079 is beyond EOD, truncated [ 343.762710][ T8960] loop5: p227 size 33751040 extends beyond EOD, truncated [ 343.893551][ T8960] loop5: p228 start 8323079 is beyond EOD, truncated [ 343.900347][ T8960] loop5: p229 size 33751040 extends beyond EOD, truncated [ 343.908647][ T8960] loop5: p230 start 8323079 is beyond EOD, truncated [ 343.916145][ T8960] loop5: p231 size 33751040 extends beyond EOD, truncated [ 343.927633][ T8960] loop5: p232 start 8323079 is beyond EOD, truncated [ 343.942764][ T8960] loop5: p233 size 33751040 extends beyond EOD, truncated [ 343.971859][ T8960] loop5: p234 start 8323079 is beyond EOD, truncated [ 343.994006][ T8960] loop5: p235 size 33751040 extends beyond EOD, truncated [ 344.017995][ T8960] loop5: p236 start 8323079 is beyond EOD, truncated [ 344.032787][ T8960] loop5: p237 size 33751040 extends beyond EOD, truncated [ 344.077861][ T8960] loop5: p238 start 8323079 is beyond EOD, truncated [ 344.088193][ T8960] loop5: p239 size 33751040 extends beyond EOD, truncated [ 344.219606][ T8960] loop5: p240 start 8323079 is beyond EOD, truncated [ 344.236878][ T8960] loop5: p241 size 33751040 extends beyond EOD, truncated [ 344.266309][ T8960] loop5: p242 start 8323079 is beyond EOD, truncated [ 344.282682][ T8960] loop5: p243 size 33751040 extends beyond EOD, truncated [ 344.301810][ T8960] loop5: p244 start 8323079 is beyond EOD, truncated [ 344.320536][ T8960] loop5: p245 size 33751040 extends beyond EOD, truncated [ 344.341825][ T8960] loop5: p246 start 8323079 is beyond EOD, truncated [ 344.398133][ T8960] loop5: p247 size 33751040 extends beyond EOD, truncated [ 344.433272][ T8960] loop5: p248 start 8323079 is beyond EOD, truncated [ 344.450403][ T8960] loop5: p249 size 33751040 extends beyond EOD, truncated [ 344.477475][ T8960] loop5: p250 start 8323079 is beyond EOD, truncated [ 344.484729][ T8960] loop5: p251 size 33751040 extends beyond EOD, truncated [ 344.493802][ T8960] loop5: p252 start 8323079 is beyond EOD, truncated [ 344.500729][ T8960] loop5: p253 size 33751040 extends beyond EOD, truncated [ 344.530808][ T8960] loop5: p254 start 8323079 is beyond EOD, truncated [ 344.559290][ T8960] loop5: p255 size 33751040 extends beyond EOD, truncated [ 344.622847][ T6889] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 344.852829][ T1110] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 345.008665][ T6889] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 345.036476][ T6889] usb 5-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.00 [ 345.051212][ T4156] udevd[4156]: inotify_add_watch(7, /dev/loop5p7, 10) failed: No such file or directory [ 345.064078][ T4502] udevd[4502]: inotify_add_watch(7, /dev/loop5p11, 10) failed: No such file or directory [ 345.064696][ T4184] udevd[4184]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 345.085747][ T6889] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.086824][ T4392] udevd[4392]: inotify_add_watch(7, /dev/loop5p5, 10) failed: No such file or directory [ 345.097797][ T4498] udevd[4498]: inotify_add_watch(7, /dev/loop5p9, 10) failed: No such file or directory [ 345.109210][ T4158] udevd[4158]: inotify_add_watch(7, /dev/loop5p13, 10) failed: No such file or directory [ 345.126346][ T4505] udevd[4505]: inotify_add_watch(7, /dev/loop5p15, 10) failed: No such file or directory [ 345.134188][ T4502] udevd[4502]: inotify_add_watch(7, /dev/loop5p25, 10) failed: No such file or directory [ 345.142460][ T4183] udevd[4183]: inotify_add_watch(7, /dev/loop5p17, 10) failed: No such file or directory [ 345.159189][ T4512] udevd[4512]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 345.207900][ T6889] usb 5-1: config 0 descriptor?? [ 345.212750][ T1110] usb 2-1: Using ep0 maxpacket: 8 [ 345.352991][ T1110] usb 2-1: config 0 has an invalid interface number: 211 but max is 0 [ 345.385239][ T1110] usb 2-1: config 0 has no interface number 0 [ 345.426888][ T1110] usb 2-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=76.ff [ 345.485651][ T1110] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.510873][ T9081] loop5: detected capacity change from 0 to 2048 [ 345.544025][ T1110] usb 2-1: config 0 descriptor?? [ 345.601650][ T9081] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a802e01c, mo2=0002] [ 345.640668][ T9081] System zones: 0-7 [ 345.733166][ T9081] EXT4-fs (loop5): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000001,bsdgroups,resgid=0x0000000000000000,nouid32,debug,acl,,errors=continue. Quota mode: none. [ 345.735677][ T6889] hid-generic 0003:07B5:0312.000D: unknown main item tag 0x1 [ 345.760004][ T6889] hid-generic 0003:07B5:0312.000D: item fetching failed at offset 1/3 [ 345.769535][ T6889] hid-generic: probe of 0003:07B5:0312.000D failed with error -22 [ 345.939518][ T1110] usb 5-1: USB disconnect, device number 11 [ 346.196467][ T9082] infiniband syz1: set active [ 346.201805][ T9082] infiniband syz1: added team_slave_0 [ 346.359661][ T9082] RDS/IB: syz1: added [ 346.386627][ T9082] smc: adding ib device syz1 with port count 1 [ 346.395258][ T9095] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 346.444181][ T9082] smc: ib device syz1 port 1 has pnetid [ 346.470371][ T9097] loop2: detected capacity change from 0 to 128 [ 346.509521][ T9099] loop4: detected capacity change from 0 to 17 [ 346.810943][ T9102] loop4: detected capacity change from 0 to 1024 [ 347.861992][ T6883] usb 2-1: USB disconnect, device number 11 [ 348.122326][ T9117] loop1: detected capacity change from 0 to 2048 [ 348.375181][ T9117] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 348.462746][ T4213] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 348.702899][ T4213] usb 3-1: Using ep0 maxpacket: 32 [ 348.822920][ T4213] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 348.846449][ T4213] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 348.882070][ T4213] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 348.918886][ T4213] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.944715][ T4213] usb 3-1: config 0 descriptor?? [ 349.013888][ T4213] hub 3-1:0.0: USB hub found [ 349.202305][ T9140] loop1: detected capacity change from 0 to 17 [ 349.328425][ T4213] hub 3-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 349.521910][ T6883] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 349.592131][ T9141] loop1: detected capacity change from 0 to 1024 [ 349.632851][ T4213] usbhid 3-1:0.0: can't add hid device: -71 [ 349.638907][ T4213] usbhid: probe of 3-1:0.0 failed with error -71 [ 349.701221][ T4213] usb 3-1: USB disconnect, device number 11 [ 350.553241][ T6883] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 350.680171][ T6883] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 350.708500][ T6883] usb 4-1: New USB device found, idVendor=0499, idProduct=1035, bcdDevice=56.12 [ 350.733272][ T6883] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.790894][ T6883] usb 4-1: config 0 descriptor?? [ 350.975446][ T6883] snd-usb-audio: probe of 4-1:0.0 failed with error -12 [ 351.050385][ T4392] udevd[4392]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 351.055709][ T9155] loop5: detected capacity change from 0 to 2048 [ 351.079172][ T6883] usb 4-1: USB disconnect, device number 14 [ 351.102816][ T6882] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 351.178243][ T9155] EXT4-fs (loop5): mounted filesystem without journal. Opts: commit=0x0000000000000005,,errors=continue. Quota mode: none. [ 351.228077][ T26] audit: type=1800 audit(1732096493.048:29): pid=9155 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1421" name="file2" dev="loop5" ino=16 res=0 errno=0 [ 351.274353][ T9155] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 351.306638][ T9150] loop4: detected capacity change from 0 to 32768 [ 351.363911][ T9150] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.1418 (9150) [ 351.381534][ T9150] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 351.391345][ T9150] BTRFS info (device loop4): metadata ratio 2 [ 351.398152][ T9150] BTRFS info (device loop4): allowing degraded mounts [ 351.405707][ T9150] BTRFS info (device loop4): force zlib compression, level 3 [ 351.413696][ T9150] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 351.423933][ T9150] BTRFS info (device loop4): use zstd compression, level 3 [ 351.432087][ T9150] BTRFS info (device loop4): force clearing of disk cache [ 351.440006][ T9150] BTRFS info (device loop4): max_inline at 0 [ 351.447305][ T9150] BTRFS info (device loop4): using free space tree [ 351.454469][ T9150] BTRFS info (device loop4): has skinny extents [ 351.463070][ T6882] usb 3-1: config 0 has an invalid interface number: 213 but max is 0 [ 351.471515][ T6882] usb 3-1: config 0 has no interface number 0 [ 351.578433][ T9150] BTRFS info (device loop4): enabling ssd optimizations [ 351.589686][ T9150] BTRFS info (device loop4): clearing free space tree [ 351.597633][ T9150] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 351.612901][ T9150] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 351.642973][ T6882] usb 3-1: New USB device found, idVendor=0565, idProduct=0005, bcdDevice= 9.0b [ 351.660479][ T6882] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.670820][ T6882] usb 3-1: Product: syz [ 351.722179][ T6882] usb 3-1: Manufacturer: syz [ 351.740739][ T6882] usb 3-1: SerialNumber: syz [ 351.786160][ T9150] BTRFS info (device loop4): creating free space tree [ 351.799196][ T9150] BTRFS info (device loop4): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 351.809750][ T9150] BTRFS info (device loop4): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 351.810266][ T6882] usb 3-1: config 0 descriptor?? [ 351.848555][ T26] audit: type=1800 audit(1732096493.668:30): pid=9150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1418" name="bus" dev="loop4" ino=263 res=0 errno=0 [ 351.876853][ T9185] loop1: detected capacity change from 0 to 256 [ 351.913384][ T9185] exfat: Deprecated parameter 'namecase' [ 351.965304][ T9185] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 352.194913][ T6882] kaweth 3-1:0.213: Firmware present in device. [ 352.262826][ T6882] kaweth 3-1:0.213: Error reading configuration (-71), no net device created [ 352.282825][ T6882] kaweth: probe of 3-1:0.213 failed with error -5 [ 352.334420][ T6882] usb 3-1: USB disconnect, device number 12 [ 352.541983][ T9165] loop5: detected capacity change from 0 to 32768 [ 352.600860][ T9192] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 352.610846][ T9192] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 352.619594][ T9192] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 352.658811][ T9192] bond0: (slave bond_slave_0): Releasing backup interface [ 352.725423][ T9165] XFS (loop5): Mounting V5 Filesystem [ 352.778281][ T9192] bond0: (slave bond_slave_1): Releasing backup interface [ 352.962656][ T9165] XFS (loop5): Ending clean mount [ 353.035553][ T6351] XFS (loop5): Unmounting Filesystem [ 353.163852][ T9208] loop4: detected capacity change from 0 to 17 [ 353.164555][ T9192] team0: Port device team_slave_0 removed [ 353.245600][ T9192] team0: Port device team_slave_1 removed [ 353.280350][ T9192] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 353.311601][ T9192] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 353.374728][ T9192] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 353.393940][ T9192] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 353.472436][ T9192] bond1: (slave ipip0): Releasing backup interface [ 353.589920][ T9209] loop4: detected capacity change from 0 to 1024 [ 355.240488][ T9225] MTD: Couldn't look up '/dev/sg0': -15 [ 355.252719][ T4394] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 355.398578][ T9227] loop5: detected capacity change from 0 to 512 [ 355.502832][ T4394] usb 5-1: Using ep0 maxpacket: 8 [ 355.508026][ T9227] UDF-fs: warning (device loop5): udf_load_vrs: No VRS found [ 355.525162][ T9227] UDF-fs: Scanning with blocksize 512 failed [ 355.553416][ T9227] UDF-fs: warning (device loop5): udf_load_vrs: No VRS found [ 355.560832][ T9227] UDF-fs: Scanning with blocksize 1024 failed [ 355.609179][ T9227] UDF-fs: warning (device loop5): udf_load_vrs: No VRS found [ 355.628733][ T9227] UDF-fs: Scanning with blocksize 2048 failed [ 355.653141][ T4394] usb 5-1: config 0 has an invalid interface number: 186 but max is 0 [ 355.661355][ T4394] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 355.672312][ T9227] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 355.692988][ T4394] usb 5-1: config 0 has no interface number 0 [ 355.699112][ T4394] usb 5-1: config 0 interface 186 altsetting 3 endpoint 0x6 has invalid wMaxPacketSize 0 [ 355.722504][ T4394] usb 5-1: config 0 interface 186 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 355.758405][ T9216] loop1: detected capacity change from 0 to 32768 [ 355.768342][ T9227] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 355.777272][ T4394] usb 5-1: config 0 interface 186 has no altsetting 0 [ 355.786477][ T4394] usb 5-1: New USB device found, idVendor=0a12, idProduct=5d10, bcdDevice=d6.1d [ 355.815158][ T4394] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.837188][ T4394] usb 5-1: config 0 descriptor?? [ 355.876062][ T9227] loop_set_status: loop5 () has still dirty pages (nrpages=3) [ 356.012253][ T9216] XFS (loop1): Mounting V5 Filesystem [ 356.123002][ T4394] usb 5-1: string descriptor 0 read error: -71 [ 356.148689][ T9216] XFS (loop1): Ending clean mount [ 356.194371][ T4394] ushc: probe of 5-1:0.186 failed with error -71 [ 356.242021][ T4551] XFS (loop1): Unmounting Filesystem [ 356.262860][ T4394] usb 5-1: USB disconnect, device number 12 [ 356.265171][ T9230] loop3: detected capacity change from 0 to 32768 [ 356.292179][ T9254] loop2: detected capacity change from 0 to 17 [ 356.300915][ T9251] loop5: detected capacity change from 0 to 256 [ 356.428050][ T9251] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xadbf5ead, utbl_chksum : 0xe619d30d) [ 356.698394][ T9254] loop2: detected capacity change from 0 to 1024 [ 358.470166][ T4170] bridge0: port 3(syz_tun) entered disabled state [ 358.488888][ T4170] device syz_tun left promiscuous mode [ 358.507063][ T4170] bridge0: port 3(syz_tun) entered disabled state [ 358.592722][ T6883] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 358.727321][ T4263] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.832092][ T9266] loop5: detected capacity change from 0 to 32768 [ 358.832941][ T6883] usb 5-1: Using ep0 maxpacket: 32 [ 358.865358][ T4263] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.926087][ T4263] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.973085][ T6883] usb 5-1: config 0 has no interfaces? [ 358.978612][ T6883] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 359.029355][ T6883] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.033707][ T9266] XFS (loop5): Mounting V5 Filesystem [ 359.059983][ T6883] usb 5-1: config 0 descriptor?? [ 359.079872][ T4263] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.329527][ T9266] XFS (loop5): Ending clean mount [ 359.362307][ T6882] usb 5-1: USB disconnect, device number 13 [ 359.547128][ T4263] tipc: Disabling bearer [ 359.553991][ T6351] XFS (loop5): Unmounting Filesystem [ 359.564647][ T4263] tipc: Disabling bearer [ 359.606987][ T4263] tipc: Left network mode [ 360.276472][ T9307] chnl_net:caif_netlink_parms(): no params data found [ 360.707762][ T9307] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.747882][ T9307] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.809951][ T9307] device bridge_slave_0 entered promiscuous mode [ 360.890917][ T9307] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.912889][ T9307] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.924155][ T9307] device bridge_slave_1 entered promiscuous mode [ 361.033360][ T9307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 361.086265][ T9307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 361.101020][ T9335] loop3: detected capacity change from 0 to 32768 [ 361.204947][ T9307] team0: Port device team_slave_0 added [ 361.215065][ T9307] team0: Port device team_slave_1 added [ 361.215700][ T8084] Bluetooth: hci0: command 0x0409 tx timeout [ 361.253425][ T9335] XFS (loop3): Mounting V5 Filesystem [ 361.344550][ T9307] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 361.351504][ T9307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 361.469539][ T9385] loop4: detected capacity change from 0 to 1024 [ 361.506449][ T9335] XFS (loop3): Ending clean mount [ 361.527060][ T9335] XFS (loop3): Quotacheck needed: Please wait. [ 361.543530][ T9307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 361.548039][ T9385] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 361.592853][ T9385] EXT4-fs (loop4): inline encryption not supported [ 361.624017][ T9307] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 361.630987][ T9307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 361.691063][ T9385] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpid,debug_want_extra_isize=0x0000000000000084,resuid=0x0000000000000000,max_batch_time=0x0000000000000005,lazytime,jqfmt=vfsold,usrquota,inlinecrypt,,errors=continue. Quota mode: writeback. [ 361.766735][ T9335] XFS (loop3): Quotacheck: Done. [ 361.837206][ T4171] XFS (loop3): Unmounting Filesystem [ 361.845119][ T9307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 362.091906][ T9394] loop4: detected capacity change from 0 to 2048 [ 362.196454][ T9307] device hsr_slave_0 entered promiscuous mode [ 362.226062][ T9394] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 362.255999][ T9307] device hsr_slave_1 entered promiscuous mode [ 362.295771][ T9307] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 362.313745][ T9307] Cannot create hsr debugfs directory [ 362.315511][ T26] audit: type=1800 audit(1732096504.138:31): pid=9394 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1481" name="bus" dev="loop4" ino=1367 res=0 errno=0 [ 362.922769][ T6889] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 362.932257][ T4263] device hsr_slave_0 left promiscuous mode [ 362.959438][ T4263] device hsr_slave_1 left promiscuous mode [ 362.989818][ T4263] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 363.017990][ T4263] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 363.048031][ T4263] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 363.066031][ T4263] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 363.083480][ T4263] device bridge_slave_1 left promiscuous mode [ 363.089884][ T4263] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.099111][ T4263] device bridge_slave_0 left promiscuous mode [ 363.106597][ T4263] bridge0: port 1(bridge_slave_0) entered disabled state [ 363.121540][ T4263] device veth1_macvtap left promiscuous mode [ 363.127899][ T4263] device veth0_macvtap left promiscuous mode [ 363.134620][ T4263] device veth1_vlan left promiscuous mode [ 363.140615][ T4263] device veth0_vlan left promiscuous mode [ 363.166321][ T6889] usb 5-1: Using ep0 maxpacket: 16 [ 363.283118][ T6889] usb 5-1: New USB device found, idVendor=17ef, idProduct=720c, bcdDevice= 0.90 [ 363.283507][ T4394] Bluetooth: hci0: command 0x041b tx timeout [ 363.301177][ T6889] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.320634][ T6889] r8152-cfgselector 5-1: config 0 descriptor?? [ 363.348086][ T4263] bond1 (unregistering): Released all slaves [ 363.488888][ T4263] team0 (unregistering): Port device team_slave_1 removed [ 363.507373][ T4263] team0 (unregistering): Port device team_slave_0 removed [ 363.527379][ T4263] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 363.547397][ T4263] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 363.585678][ T6889] r8152-cfgselector 5-1: Unknown version 0x0000 [ 363.612835][ T6889] r8152-cfgselector 5-1: Unknown version 0x0000 [ 363.623735][ T6889] r8152-cfgselector 5-1: USB disconnect, device number 14 [ 363.675096][ T4263] bond0 (unregistering): Released all slaves [ 363.759649][ T9425] device bridge2 entered promiscuous mode [ 363.909909][ T9307] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 363.945456][ T9307] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 364.021349][ T9307] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 364.035786][ T9441] loop3: detected capacity change from 0 to 512 [ 364.051852][ T9307] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 364.200743][ T9441] EXT4-fs (loop3): Mount option "journal_ioprio=0x0000000000008005" incompatible with ext2 [ 364.456918][ T9307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 364.535202][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 364.553020][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 364.620855][ T9307] 8021q: adding VLAN 0 to HW filter on device team0 [ 364.638277][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 364.686160][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 364.719796][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.726974][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 364.771574][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 364.831353][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 364.869439][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 364.899941][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 364.907207][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 364.970974][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 364.998142][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 365.023794][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 365.062562][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 365.102317][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 365.147893][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 365.183262][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 365.220350][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 365.233670][ T9467] loop4: detected capacity change from 0 to 128 [ 365.239399][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 365.284872][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 365.305626][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 365.352159][ T9307] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 365.373081][ T4394] Bluetooth: hci0: command 0x040f tx timeout [ 365.384228][ T9467] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 365.607488][ T9477] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 365.700536][ T9477] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 365.756356][ T9477] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 365.841994][ T9485] loop5: detected capacity change from 0 to 16 [ 365.900304][ T9480] netlink: 'syz.4.1502': attribute type 10 has an invalid length. [ 365.929953][ T9480] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1502'. [ 365.958481][ T9485] erofs: (device loop5): mounted with root inode @ nid 36. [ 366.033741][ T9480] batman_adv: batadv0: Adding interface: wlan0 [ 366.075931][ T9480] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 366.150464][ T9480] batman_adv: batadv0: Interface activated: wlan0 [ 366.235503][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 366.250512][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 366.298823][ T9307] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 366.312107][ T9500] loop5: detected capacity change from 0 to 128 [ 366.487988][ T9500] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 366.558416][ T9500] ext4 filesystem being mounted at /166/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 366.643018][ T6882] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 366.651319][ T6882] Bluetooth: hci1: Injecting HCI hardware error event [ 366.691479][ T9500] syz.5.1507 (pid 9500) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 366.733251][ T4182] Bluetooth: hci1: hardware error 0x00 [ 367.121085][ T5777] ------------[ cut here ]------------ [ 367.128989][ T5777] sysfs group 'byte_queue_limits' not found for kobject 'tx-0' [ 367.136911][ T5777] WARNING: CPU: 1 PID: 5777 at fs/sysfs/group.c:281 sysfs_remove_group+0x179/0x2a0 [ 367.154300][ T5777] Modules linked in: [ 367.158279][ T5777] CPU: 1 PID: 5777 Comm: kbnepd bnep0 Not tainted 5.15.173-syzkaller #0 [ 367.167484][ T5777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 367.178006][ T5777] RIP: 0010:sysfs_remove_group+0x179/0x2a0 [ 367.183608][ T9500] fscrypt (loop5, inode 12): Error allocating 'adiantum(xchacha12,aes)' transform: -4 [ 367.184674][ T5777] Code: 8b 36 4c 89 e0 48 c1 e8 03 80 3c 28 00 74 08 4c 89 e7 e8 4a a1 cc ff 49 8b 14 24 48 c7 c7 40 bc 99 8a 4c 89 f6 e8 c7 64 4e ff <0f> 0b 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 e1 c8 82 ff [ 367.215388][ T5777] RSP: 0018:ffffc90003247928 EFLAGS: 00010246 [ 367.221497][ T5777] RAX: 241da2cf0e2eae00 RBX: ffff8880792c7848 RCX: ffff88807f4a9dc0 [ 367.229906][ T5777] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 367.238188][ T5777] RBP: dffffc0000000000 R08: ffffffff81669a1c R09: fffff52000648e65 [ 367.246225][ T5777] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff8880792c7818 [ 367.254374][ T5777] R13: 1ffffffff16fd878 R14: ffffffff8b7ecae0 R15: ffff8880259269f8 [ 367.262381][ T5777] FS: 0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 367.271951][ T5777] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 367.278711][ T5777] CR2: 00005646dd2a5318 CR3: 000000002a2fa000 CR4: 00000000003506e0 [ 367.284155][ T9520] fscrypt: Adiantum using implementation "adiantum(xchacha12-simd,aes-aesni,nhpoly1305-avx2)" [ 367.286766][ T5777] Call Trace: [ 367.286779][ T5777] [ 367.286790][ T5777] ? __warn+0x15b/0x300 [ 367.309581][ T5777] ? sysfs_remove_group+0x179/0x2a0 [ 367.314917][ T5777] ? report_bug+0x1b7/0x2e0 [ 367.319467][ T5777] ? handle_bug+0x3d/0x70 [ 367.334678][ T5777] ? exc_invalid_op+0x16/0x40 [ 367.339512][ T5777] ? asm_exc_invalid_op+0x16/0x20 [ 367.345299][ T5777] ? __wake_up_klogd+0xcc/0x100 [ 367.350290][ T5777] ? sysfs_remove_group+0x179/0x2a0 [ 367.356056][ T5777] ? sysfs_remove_group+0x179/0x2a0 [ 367.361390][ T5777] netdev_queue_update_kobjects+0x37c/0x3f0 [ 367.368087][ T5777] netdev_unregister_kobject+0x10d/0x250 [ 367.377625][ T5777] unregister_netdevice_many+0x13a6/0x18f0 [ 367.383955][ T5777] ? alloc_netdev_mqs+0xc10/0xc10 [ 367.389116][ T5777] ? mutex_lock_io_nested+0x60/0x60 [ 367.401327][ T5777] ? read_lock_is_recursive+0x10/0x10 [ 367.410505][ T5777] unregister_netdev+0x19b/0x210 [ 367.417929][ T5777] ? clear_nonspinnable+0x60/0x60 [ 367.423531][ T5777] ? unlist_netdevice+0x5b0/0x5b0 [ 367.428699][ T5777] bnep_session+0x2b57/0x2d40 [ 367.434157][ T5777] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 367.440281][ T5777] ? bnep_add_connection+0xdb0/0xdb0 [ 367.446291][ T8084] Bluetooth: hci0: command 0x0419 tx timeout [ 367.452441][ T5777] ? _raw_spin_unlock+0x40/0x40 [ 367.457845][ T5777] ? lockdep_hardirqs_on+0x4/0x130 [ 367.463571][ T5777] ? wait_woken+0x1b0/0x1b0 [ 367.468973][ T5777] ? __kthread_parkme+0x15c/0x1c0 [ 367.474600][ T5777] kthread+0x3f6/0x4f0 [ 367.478861][ T5777] ? bnep_add_connection+0xdb0/0xdb0 [ 367.484923][ T5777] ? kthread_blkcg+0xd0/0xd0 [ 367.490911][ T5777] ret_from_fork+0x1f/0x30 [ 367.495929][ T5777] [ 367.499056][ T5777] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 367.506344][ T5777] CPU: 0 PID: 5777 Comm: kbnepd bnep0 Not tainted 5.15.173-syzkaller #0 [ 367.514715][ T5777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 367.524889][ T5777] Call Trace: [ 367.528189][ T5777] [ 367.531129][ T5777] dump_stack_lvl+0x1e3/0x2d0 [ 367.535832][ T5777] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 367.541490][ T5777] ? panic+0x860/0x860 [ 367.545598][ T5777] ? sysfs_remove_group+0xd0/0x2a0 [ 367.550824][ T5777] ? sysfs_remove_group+0xd0/0x2a0 [ 367.555956][ T5777] panic+0x318/0x860 [ 367.559876][ T5777] ? __warn+0x16a/0x300 [ 367.564059][ T5777] ? fb_is_primary_device+0xd0/0xd0 [ 367.569289][ T5777] ? ret_from_fork+0x1f/0x30 [ 367.573890][ T5777] ? sysfs_remove_group+0x179/0x2a0 [ 367.579100][ T5777] __warn+0x2b2/0x300 [ 367.583200][ T5777] ? sysfs_remove_group+0x179/0x2a0 [ 367.588417][ T5777] report_bug+0x1b7/0x2e0 [ 367.592774][ T5777] handle_bug+0x3d/0x70 [ 367.596949][ T5777] exc_invalid_op+0x16/0x40 [ 367.601638][ T5777] asm_exc_invalid_op+0x16/0x20 [ 367.606513][ T5777] RIP: 0010:sysfs_remove_group+0x179/0x2a0 [ 367.612334][ T5777] Code: 8b 36 4c 89 e0 48 c1 e8 03 80 3c 28 00 74 08 4c 89 e7 e8 4a a1 cc ff 49 8b 14 24 48 c7 c7 40 bc 99 8a 4c 89 f6 e8 c7 64 4e ff <0f> 0b 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 e1 c8 82 ff [ 367.631956][ T5777] RSP: 0018:ffffc90003247928 EFLAGS: 00010246 [ 367.638053][ T5777] RAX: 241da2cf0e2eae00 RBX: ffff8880792c7848 RCX: ffff88807f4a9dc0 [ 367.646048][ T5777] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 367.654034][ T5777] RBP: dffffc0000000000 R08: ffffffff81669a1c R09: fffff52000648e65 [ 367.662162][ T5777] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff8880792c7818 [ 367.670153][ T5777] R13: 1ffffffff16fd878 R14: ffffffff8b7ecae0 R15: ffff8880259269f8 [ 367.678150][ T5777] ? __wake_up_klogd+0xcc/0x100 [ 367.683025][ T5777] ? sysfs_remove_group+0x179/0x2a0 [ 367.688229][ T5777] netdev_queue_update_kobjects+0x37c/0x3f0 [ 367.694127][ T5777] netdev_unregister_kobject+0x10d/0x250 [ 367.699762][ T5777] unregister_netdevice_many+0x13a6/0x18f0 [ 367.705582][ T5777] ? alloc_netdev_mqs+0xc10/0xc10 [ 367.710606][ T5777] ? mutex_lock_io_nested+0x60/0x60 [ 367.715808][ T5777] ? read_lock_is_recursive+0x10/0x10 [ 367.721195][ T5777] unregister_netdev+0x19b/0x210 [ 367.726130][ T5777] ? clear_nonspinnable+0x60/0x60 [ 367.731151][ T5777] ? unlist_netdevice+0x5b0/0x5b0 [ 367.736179][ T5777] bnep_session+0x2b57/0x2d40 [ 367.740889][ T5777] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 367.746878][ T5777] ? bnep_add_connection+0xdb0/0xdb0 [ 367.752163][ T5777] ? _raw_spin_unlock+0x40/0x40 [ 367.757016][ T5777] ? lockdep_hardirqs_on+0x4/0x130 [ 367.762132][ T5777] ? wait_woken+0x1b0/0x1b0 [ 367.766650][ T5777] ? __kthread_parkme+0x15c/0x1c0 [ 367.771677][ T5777] kthread+0x3f6/0x4f0 [ 367.775743][ T5777] ? bnep_add_connection+0xdb0/0xdb0 [ 367.781024][ T5777] ? kthread_blkcg+0xd0/0xd0 [ 367.785613][ T5777] ret_from_fork+0x1f/0x30 [ 367.790039][ T5777] [ 367.793397][ T5777] Kernel Offset: disabled [ 367.798059][ T5777] Rebooting in 86400 seconds..