last executing test programs: 3.486875089s ago: executing program 4 (id=960): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x6, 0x4, 0x6, 0x3, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) 3.36205119s ago: executing program 4 (id=963): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000003c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905040200de7e001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000063c0)={0x44, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0x80015b11, 0x0) 1.484501167s ago: executing program 2 (id=982): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000300)={@multicast1, @local, 0x1}, 0x10) 1.343416188s ago: executing program 2 (id=984): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000400)=0x2, 0x4) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000001a00)=0xf2b, 0x37) getsockopt$inet6_buf(r0, 0x29, 0x6, 0x0, &(0x7f00000000c0)=0xa4) 1.276283669s ago: executing program 0 (id=985): r0 = socket(0x200000000000011, 0x2, 0x80000000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r0, &(0x7f0000000980)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) bind$packet(r0, &(0x7f0000000340)={0x11, 0x17, r1, 0x1, 0x40, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}}, 0x14) 1.210347649s ago: executing program 2 (id=987): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)={0x38, r1, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}]]}, 0x38}}, 0x0) 1.14698689s ago: executing program 0 (id=989): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r0, 0x1) setsockopt$sock_int(r1, 0x1, 0x22, &(0x7f0000000040)=0x7, 0x4) recvmmsg(r1, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/19, 0x13}}], 0x1, 0x2302, 0x0) 1.14415144s ago: executing program 4 (id=990): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) syz_mount_image$fuse(0x0, &(0x7f00000002c0)='./bus\x00', 0x18a0a4, 0x0, 0x1, 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./bus\x00', &(0x7f0000000040)='smb3\x00', 0x0, &(0x7f00000000c0)='rdma') 1.025100151s ago: executing program 2 (id=992): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000f40)=[{{&(0x7f0000000080)={0xa, 0x4e22, 0x4, @dev={0xfe, 0x80, '\x00', 0xa}, 0xa}, 0x1c, &(0x7f0000000280)=[{&(0x7f00000022c0)='t', 0x1}], 0x1}}], 0x1, 0x48081) shutdown(r0, 0x1) getsockopt$bt_hci(r0, 0x84, 0x81, &(0x7f0000002300)=""/4113, &(0x7f00000000c0)=0x1011) 944.133771ms ago: executing program 0 (id=993): r0 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000a0c100000000000000fff00", 0x58}], 0x1) 900.711902ms ago: executing program 3 (id=994): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_setup(0x5914, &(0x7f0000000440)={0x0, 0x0, 0x800, 0x0, 0x2f6}, &(0x7f0000000280)=0x0, &(0x7f0000000500)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x423914bc5d6b5704}) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) 840.822262ms ago: executing program 2 (id=995): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x300001a, &(0x7f0000000b80)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], 0xfc, 0x2b5, &(0x7f00000001c0)="$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") r0 = open(&(0x7f0000000040)='./file2\x00', 0x181042, 0x0) read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) sendfile(r0, r0, &(0x7f00000002c0), 0x7f03) 815.528553ms ago: executing program 1 (id=996): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth1_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_ALPHA={0x8, 0x5, 0x412}]}}]}, 0x3c}}, 0x0) 749.590583ms ago: executing program 3 (id=997): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='batadv_slave_1\x00', 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@random="9b43a409aa81", @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @private, @broadcast}, @echo_reply={0xe0, 0x0, 0x0, 0xfffd}}}}}, 0x0) 679.579244ms ago: executing program 4 (id=998): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000480)={'netdevsim0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003803000010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r1], 0xb4}}, 0x0) 653.349434ms ago: executing program 3 (id=999): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x48}, {0x6, 0x37, 0x0, 0x9}]}, 0x10) syz_emit_ethernet(0x22, &(0x7f0000000000)={@local, @multicast, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x4, 0x14, 0x0, 0x0, 0x0, 0x33, 0x0, @local, @rand_addr=0x64010101}}}}}, 0x0) 636.369774ms ago: executing program 0 (id=1000): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = dup(r0) fallocate(r1, 0x11, 0x0, 0x74000) 632.192314ms ago: executing program 1 (id=1001): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x34, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x18, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x14, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0x30]}, @NL80211_TXRATE_HT={0x5, 0x2, [{}]}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) 497.521565ms ago: executing program 3 (id=1002): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa40000000000000704000007000000b70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b7050000080000008500"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x8, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x22, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32={[0x0, 0x0, 0x95ffffff]}}], 0xffc8) 413.906756ms ago: executing program 1 (id=1003): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='kmem_cache_free\x00', r0}, 0x10) r1 = socket(0x1d, 0x3, 0x1) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f00000002c0)={&(0x7f0000000080)={0x1d, 0x0, 0x2}, 0xc, &(0x7f0000000280)={0x0, 0x10}}, 0x0) 353.259926ms ago: executing program 0 (id=1004): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x1214040, 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0) 352.389137ms ago: executing program 1 (id=1005): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000540)='./file2\x00', 0x808d, &(0x7f00000000c0), 0xfe, 0x504, &(0x7f0000000a80)="$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") capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000100)) r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0xc0185879, 0x0) 310.926957ms ago: executing program 3 (id=1006): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000380)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000400)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {r1, 0x3}}, 0x10) 269.168547ms ago: executing program 4 (id=1007): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@newtaction={0x218, 0x30, 0x8, 0x70bd2d, 0x25dfdbff, {}, [{0x204, 0x1, [@m_nat={0x2c, 0xc, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_csum={0x154, 0x13, 0x0, 0x0, {{0x9}, {0x11c, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x3, 0x6, 0x10000000, 0x8, 0x9}, 0x16}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x84, 0x0, 0x0, 0x5, 0x6}, 0x6f}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x100, 0x6, 0x20000000, 0x9, 0x10}, 0x1c}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x6e54, 0x20000000, 0xff, 0x9}, 0x72}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xe, 0x3, 0x5, 0x200, 0x1}, 0xc}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x3ef, 0x40, 0x8, 0x96, 0x1000}, 0x28}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x5, 0x2, 0x5, 0x6}, 0x79}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0xf, 0x2, 0x7, 0x10}, 0xc}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x10001, 0x4, 0x3, 0x3}, 0x20}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0xbace, 0x20000000, 0x5, 0x6}, 0x55}}]}, {0xd, 0x6, "e38eb63fbdb3bc45bb"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_sample={0x54, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0x25, 0x6, "4d11ef01da7337625695ddc3d5012aa6f3638794346943b9ee757a1a4ac5f8ce5f"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ct={0x2c, 0x11, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x218}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 189.879738ms ago: executing program 0 (id=1008): syz_open_dev$video4linux(&(0x7f0000000000), 0x4000000000404, 0x101100) r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0xffffffff, 0xffdffffe}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x47f4, 0x0, 0x0, 0x0, 0x0) 173.425678ms ago: executing program 3 (id=1009): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000000)=0x5, 0x4) r1 = dup(r0) sendmsg$inet(r1, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0xffe7}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}, @ip_retopts={{0x14, 0x0, 0x7, {[@timestamp={0x44, 0x4, 0x73}]}}}], 0x38}, 0x0) 149.718958ms ago: executing program 1 (id=1010): r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000380)={{0x0, 0x989680}}, 0x0) clock_settime(0x0, &(0x7f0000000100)={0x77359400}) read(r0, &(0x7f00000002c0)=""/114, 0x72) 145.561389ms ago: executing program 2 (id=1011): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x51, &(0x7f0000000240)="b9425b44651dd2324196359900610511000000f4b4f1f0add7fcf2b877fceafffffffffff1ffdf2c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa63713") 78.052369ms ago: executing program 4 (id=1012): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0xc3b, 0x8000, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e23}]}}}]}, 0x40}}, 0x0) 0s ago: executing program 1 (id=1013): r0 = socket$inet6_dccp(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) shutdown(r0, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) kernel console output (not intermixed with test programs): ce bond0 [ 61.502111][ T4170] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 61.517242][ T4170] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 61.528852][ T4170] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 61.539251][ T4170] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 61.588349][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.599011][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.611359][ T4180] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.621514][ T4167] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.650690][ T4169] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 61.668498][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.677566][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.687511][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.694878][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.703715][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.721205][ T4180] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.729315][ T4169] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 61.739430][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.749305][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.757903][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.766974][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.775685][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.782903][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.819075][ T4169] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 61.830641][ T4169] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 61.842260][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.851658][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.861884][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.869003][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.877684][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.886785][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.895631][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.902688][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.911090][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.920270][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.929288][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 61.940619][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.949472][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.957749][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 61.980205][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.990121][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.005844][ T4168] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.038673][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.048511][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.057646][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.066583][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.077859][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 62.087176][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.098767][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.108124][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.134535][ T4170] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.144699][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.152669][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.162964][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.176721][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.186219][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.212800][ T4170] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.230262][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.239796][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.249032][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.258056][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.279975][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.296607][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.305726][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.312789][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.320847][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.330805][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.339911][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.347035][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.358813][ T4180] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 62.370195][ T4180] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 62.380998][ T4168] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.395389][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.404512][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 62.414432][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.433653][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.450832][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.459494][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.467028][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.475343][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.485242][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.532629][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.545631][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.565028][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.573984][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.582615][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.591244][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.600166][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.610044][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.618906][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.627472][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.634553][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.647809][ T4170] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 62.659238][ T4170] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 62.680971][ T4167] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.694954][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.708704][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 62.720190][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.730049][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 62.742438][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 62.755177][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.811364][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.821279][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.834205][ T4215] Bluetooth: hci3: command 0x041b tx timeout [ 62.839512][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.840336][ T4215] Bluetooth: hci0: command 0x041b tx timeout [ 62.850973][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 62.863043][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 62.872693][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.884071][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.892602][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 62.901676][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 62.913958][ T4212] Bluetooth: hci4: command 0x041b tx timeout [ 62.915885][ T4180] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.928181][ T4212] Bluetooth: hci2: command 0x041b tx timeout [ 62.948363][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.962824][ T4212] Bluetooth: hci1: command 0x041b tx timeout [ 62.964566][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.003741][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.027334][ T4168] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.039338][ T4168] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.061124][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 63.070700][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 63.080773][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.090712][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.104692][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 63.113038][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 63.122945][ T4167] device veth0_vlan entered promiscuous mode [ 63.138878][ T4169] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.166893][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.176200][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.199636][ T4167] device veth1_vlan entered promiscuous mode [ 63.220630][ T4170] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.240380][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.251550][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.268110][ T4169] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.298262][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 63.313699][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 63.332472][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.342192][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.359585][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.366749][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.375410][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.385325][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.394218][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.401307][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.409780][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.445019][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.453075][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 63.462289][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 63.472015][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 63.481413][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 63.490467][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.500252][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.509681][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.518490][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.530129][ T4167] device veth0_macvtap entered promiscuous mode [ 63.546938][ T4167] device veth1_macvtap entered promiscuous mode [ 63.565580][ T4169] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 63.577392][ T4169] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.599077][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 63.607975][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 63.622567][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.632225][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.644487][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.652960][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.661874][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.670541][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.679016][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.686667][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.698640][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.708547][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 63.717766][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 63.747336][ T4168] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.758948][ T4180] device veth0_vlan entered promiscuous mode [ 63.767008][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 63.782579][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 63.799917][ T4170] device veth0_vlan entered promiscuous mode [ 63.818865][ T4167] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.835518][ T4167] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.842892][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 63.851844][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 63.861343][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 63.871412][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 63.880815][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 63.889790][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 63.898779][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 63.907275][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 63.922696][ T4170] device veth1_vlan entered promiscuous mode [ 63.939391][ T4180] device veth1_vlan entered promiscuous mode [ 63.950666][ T4167] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.961820][ T4167] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.974225][ T4167] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.982934][ T4167] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.069693][ T4169] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.082788][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 64.091610][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 64.100538][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 64.109134][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 64.118975][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.126783][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.134730][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.143740][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.162953][ T4170] device veth0_macvtap entered promiscuous mode [ 64.218121][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.227649][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.237978][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.246718][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.255579][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.264013][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.272442][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.284841][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.295321][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.304223][ T4180] device veth0_macvtap entered promiscuous mode [ 64.313581][ T4170] device veth1_macvtap entered promiscuous mode [ 64.333180][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.346233][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.358259][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.371144][ T4180] device veth1_macvtap entered promiscuous mode [ 64.381677][ T4168] device veth0_vlan entered promiscuous mode [ 64.420212][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.428497][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.433038][ T4180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.449085][ T4180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.460770][ T4180] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.474689][ T4168] device veth1_vlan entered promiscuous mode [ 64.487728][ T4169] device veth0_vlan entered promiscuous mode [ 64.498463][ T4170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.511492][ T4170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.523114][ T4170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.535272][ T4170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.548880][ T4170] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.557809][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.565925][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 64.575364][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.584632][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.592876][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.601981][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 64.612270][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.621099][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.629042][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.646725][ T4180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.661513][ T4180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.672790][ T4180] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.685735][ T4170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.696321][ T4170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.706328][ T4170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.716947][ T4170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.728257][ T4170] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.741246][ T4170] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.750995][ T4170] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.760235][ T4170] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.772980][ T4170] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.787807][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 64.796758][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.806153][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 64.815183][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.828132][ T4180] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.838367][ T4180] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.847211][ T4180] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.856063][ T4180] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.870408][ T4169] device veth1_vlan entered promiscuous mode [ 64.889530][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.898084][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.913997][ T23] Bluetooth: hci0: command 0x040f tx timeout [ 64.920208][ T23] Bluetooth: hci3: command 0x040f tx timeout [ 64.929455][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 64.942501][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 64.951261][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 64.974134][ T4168] device veth0_macvtap entered promiscuous mode [ 64.994571][ T23] Bluetooth: hci1: command 0x040f tx timeout [ 65.000846][ T23] Bluetooth: hci2: command 0x040f tx timeout [ 65.007399][ T23] Bluetooth: hci4: command 0x040f tx timeout [ 65.021398][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.038080][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.048505][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.058237][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.069743][ T4168] device veth1_macvtap entered promiscuous mode [ 65.102970][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.118102][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.166787][ T4169] device veth0_macvtap entered promiscuous mode [ 65.198182][ T4169] device veth1_macvtap entered promiscuous mode [ 65.213953][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.236848][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.246893][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.249565][ T4246] loop0: detected capacity change from 0 to 128 [ 65.257358][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.257381][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.257399][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.259093][ T4168] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.314311][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.322764][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.340124][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.354363][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.390824][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.418048][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.429612][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.440953][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.452613][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.464288][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.477838][ T4168] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.504737][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.517345][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.529745][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.540995][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.551137][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.563823][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.573712][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.584497][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.595076][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.606152][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.617347][ T4169] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.637250][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.637986][ T4168] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.673350][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.690490][ T4168] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.702006][ T4168] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.711593][ T4168] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.771973][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 65.786333][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.796328][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.811109][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.822941][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.833110][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.843755][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.853941][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.864542][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.875751][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.887671][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.899218][ T4169] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.911912][ T4169] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.921204][ T4169] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.930449][ T4169] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.939656][ T4169] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.963909][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.975303][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.012091][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.046499][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.102231][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.138660][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.148503][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.165483][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.180651][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.188198][ T4253] bridge0: port 1(bridge_slave_0) entered listening state [ 66.211443][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.253901][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.261923][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.280756][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.292615][ T26] audit: type=1326 audit(1741917113.830:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4254 comm="syz.0.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd735423169 code=0x7ffc0000 [ 66.317701][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.338277][ T26] audit: type=1326 audit(1741917113.880:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4254 comm="syz.0.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd735423169 code=0x7ffc0000 [ 66.360054][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.360114][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.376819][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.408878][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.410501][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.425403][ T26] audit: type=1326 audit(1741917113.920:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4254 comm="syz.0.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fd735423169 code=0x7ffc0000 [ 66.455655][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.467128][ T26] audit: type=1326 audit(1741917113.920:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4254 comm="syz.0.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd735423169 code=0x7ffc0000 [ 66.548160][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.563310][ T26] audit: type=1326 audit(1741917113.920:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4254 comm="syz.0.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd735423169 code=0x7ffc0000 [ 66.620520][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.678915][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.687349][ T26] audit: type=1326 audit(1741917113.950:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4254 comm="syz.0.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd735423169 code=0x7ffc0000 [ 66.761748][ T26] audit: type=1326 audit(1741917113.950:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4254 comm="syz.0.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd735423169 code=0x7ffc0000 [ 66.816426][ T4268] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3'. [ 66.838481][ T26] audit: type=1326 audit(1741917113.950:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4254 comm="syz.0.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd735423169 code=0x7ffc0000 [ 66.856295][ T4268] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 66.921352][ T26] audit: type=1326 audit(1741917113.950:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4254 comm="syz.0.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fd735423169 code=0x7ffc0000 [ 66.985996][ T4274] loop4: detected capacity change from 0 to 1024 [ 66.996223][ T4158] Bluetooth: hci3: command 0x0419 tx timeout [ 67.013554][ T26] audit: type=1326 audit(1741917113.950:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4254 comm="syz.0.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd735423169 code=0x7ffc0000 [ 67.036316][ T4158] Bluetooth: hci0: command 0x0419 tx timeout [ 67.180626][ T4158] Bluetooth: hci4: command 0x0419 tx timeout [ 67.187443][ T4158] Bluetooth: hci2: command 0x0419 tx timeout [ 67.218611][ T4158] Bluetooth: hci1: command 0x0419 tx timeout [ 67.327687][ T23] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 67.593084][ T4298] netlink: 72 bytes leftover after parsing attributes in process `syz.2.24'. [ 67.603448][ T23] usb 4-1: Using ep0 maxpacket: 8 [ 67.617617][ T4294] loop1: detected capacity change from 0 to 4096 [ 67.681501][ T4294] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 67.723679][ T23] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 67.749092][ T23] usb 4-1: config 0 interface 0 has no altsetting 0 [ 67.788896][ T4276] loop0: detected capacity change from 0 to 32768 [ 67.854285][ T4276] XFS: ikeep mount option is deprecated. [ 67.923646][ T23] usb 4-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=bc.76 [ 67.943736][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.956548][ T23] usb 4-1: Product: syz [ 67.960774][ T23] usb 4-1: Manufacturer: syz [ 67.965515][ T23] usb 4-1: SerialNumber: syz [ 67.977317][ T23] usb 4-1: config 0 descriptor?? [ 67.998142][ T4276] XFS (loop0): Mounting V5 Filesystem [ 68.049318][ T23] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 found [ 68.085015][ T4276] XFS (loop0): Ending clean mount [ 68.130498][ T4276] XFS (loop0): Quotacheck needed: Please wait. [ 68.202413][ T4276] XFS (loop0): Quotacheck: Done. [ 68.247863][ T23] snd_usb_toneport 4-1:0.0: cannot get proper max packet size [ 68.284065][ T23] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 now disconnected [ 68.314930][ T23] snd_usb_toneport: probe of 4-1:0.0 failed with error -22 [ 68.410869][ T4167] XFS (loop0): Unmounting Filesystem [ 68.500902][ T4211] usb 4-1: USB disconnect, device number 2 [ 68.568159][ T4302] loop2: detected capacity change from 0 to 32768 [ 68.647709][ T4302] XFS: ikeep mount option is deprecated. [ 68.846670][ T4302] XFS (loop2): Mounting V5 Filesystem [ 68.957493][ T4342] netlink: 'syz.4.37': attribute type 4 has an invalid length. [ 69.037856][ T4302] XFS (loop2): Ending clean mount [ 69.061090][ T4347] loop1: detected capacity change from 0 to 8192 [ 69.077383][ T4302] XFS (loop2): Quotacheck needed: Please wait. [ 69.144458][ T4302] XFS (loop2): Quotacheck: Done. [ 69.180130][ T4347] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 69.223978][ T4347] REISERFS (device loop1): using journaled data mode [ 69.230698][ T4347] reiserfs: using flush barriers [ 69.282108][ T4358] loop4: detected capacity change from 0 to 4096 [ 69.295842][ T4347] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 69.321152][ T4347] REISERFS (device loop1): checking transaction log (loop1) [ 69.329619][ T4168] XFS (loop2): Unmounting Filesystem [ 69.344549][ T4347] REISERFS (device loop1): Using r5 hash to sort names [ 69.357271][ T4347] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 69.377681][ T4347] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 69.436962][ T4358] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 69.498162][ T4358] EXT4-fs (loop4): re-mounted. Opts: (null). Quota mode: writeback. [ 69.771808][ T4364] capability: warning: `syz.2.46' uses 32-bit capabilities (legacy support in use) [ 69.886483][ T4367] loop4: detected capacity change from 0 to 128 [ 70.220681][ T4374] loop0: detected capacity change from 0 to 4096 [ 70.387672][ T4391] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 70.706254][ T4396] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 70.919326][ T4404] loop3: detected capacity change from 0 to 24 [ 70.990358][ T4404] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 71.033196][ T4408] capability: warning: `syz.1.65' uses deprecated v2 capabilities in a way that may be insecure [ 71.054689][ T4404] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 71.109802][ T4378] loop2: detected capacity change from 0 to 32768 [ 71.179232][ T4411] netem: incorrect ge model size [ 71.211202][ T4411] netem: change failed [ 71.238427][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.245875][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.308659][ T4378] XFS (loop2): Mounting V5 Filesystem [ 71.318951][ T4415] loop3: detected capacity change from 0 to 1024 [ 71.458807][ T4415] hfsplus: xattr exists yet [ 71.516700][ T4425] loop0: detected capacity change from 0 to 256 [ 71.563413][ T4425] ======================================================= [ 71.563413][ T4425] WARNING: The mand mount option has been deprecated and [ 71.563413][ T4425] and is ignored by this kernel. Remove the mand [ 71.563413][ T4425] option from the mount to silence this warning. [ 71.563413][ T4425] ======================================================= [ 71.581815][ T4386] loop4: detected capacity change from 0 to 65536 [ 71.612783][ T4378] XFS (loop2): Ending clean mount [ 71.626932][ T4378] XFS (loop2): Quotacheck needed: Please wait. [ 71.673207][ T4425] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x0e5ad3fb, utbl_chksum : 0xe619d30d) [ 71.713143][ T4378] XFS (loop2): Quotacheck: Done. [ 71.744289][ T4386] XFS (loop4): Mounting V5 Filesystem [ 71.873770][ T4168] XFS (loop2): Unmounting Filesystem [ 71.887409][ T4386] XFS (loop4): Ending clean mount [ 71.896095][ T4386] XFS (loop4): Quotacheck needed: Please wait. [ 71.965047][ T154] XFS (loop4): Metadata CRC error detected at xfs_allocbt_read_verify+0x39/0xc0, xfs_cntbt block 0x6 [ 72.030448][ T154] XFS (loop4): Unmount and run xfs_repair [ 72.073490][ T154] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 72.077798][ T4442] loop1: detected capacity change from 0 to 2048 [ 72.091841][ T154] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 72.123378][ T154] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [ 72.149813][ T154] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 72.174924][ T154] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 72.188088][ T154] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 72.197450][ T4448] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 72.225659][ T154] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [ 72.268277][ T154] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 72.277225][ T4447] loop3: detected capacity change from 0 to 4096 [ 72.323171][ T154] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 72.355108][ T154] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x26e/0x370" at daddr 0x6 len 2 error 74 [ 72.380164][ T4386] XFS (loop4): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 72.395176][ T4447] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 72.486421][ T4386] XFS (loop4): EXPERIMENTAL online shrink feature in use. Use at your own risk! [ 72.606489][ T4180] XFS (loop4): Unmounting Filesystem [ 72.791386][ T4462] xt_CONNSECMARK: invalid mode: 0 [ 73.168286][ T4476] loop2: detected capacity change from 0 to 256 [ 73.261914][ T26] kauditd_printk_skb: 8 callbacks suppressed [ 73.261931][ T26] audit: type=1326 audit(1741917120.800:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4479 comm="syz.1.91" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad59b74169 code=0x7ffc0000 [ 73.355561][ T26] audit: type=1326 audit(1741917120.810:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4479 comm="syz.1.91" exe="/root/syz-executor" sig=0 arch=c000003e syscall=129 compat=0 ip=0x7fad59b74169 code=0x7ffc0000 [ 73.363400][ T4215] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 73.443306][ T26] audit: type=1326 audit(1741917120.810:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4479 comm="syz.1.91" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad59b74169 code=0x7ffc0000 [ 73.652126][ T4465] loop0: detected capacity change from 0 to 32768 [ 73.681084][ T4490] loop2: detected capacity change from 0 to 2048 [ 73.723377][ T4215] usb 4-1: Using ep0 maxpacket: 8 [ 73.731011][ T4490] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 73.779886][ T4465] XFS (loop0): Mounting V5 Filesystem [ 73.843455][ T4215] usb 4-1: unable to get BOS descriptor or descriptor too short [ 73.854761][ T4215] usb 4-1: no configurations [ 73.872207][ T4215] usb 4-1: can't read configurations, error -22 [ 73.962006][ T4465] XFS (loop0): Ending clean mount [ 73.978205][ T4465] XFS (loop0): Quotacheck needed: Please wait. [ 74.074966][ T4512] Zero length message leads to an empty skb [ 74.099312][ T4465] XFS (loop0): Quotacheck: Done. [ 74.164371][ T4465] XFS (loop0): User initiated shutdown received. [ 74.167582][ T4514] netlink: 4 bytes leftover after parsing attributes in process `syz.2.101'. [ 74.171451][ T4465] XFS (loop0): Log I/O Error (0x6) detected at xfs_fs_goingdown+0xde/0x150 (fs/xfs/xfs_fsops.c:491). Shutting down filesystem. [ 74.196021][ T4465] XFS (loop0): Please unmount the filesystem and rectify the problem(s) [ 74.199587][ T4514] netlink: 4 bytes leftover after parsing attributes in process `syz.2.101'. [ 74.231026][ T4167] XFS (loop0): Unmounting Filesystem [ 74.477329][ T4520] loop2: detected capacity change from 0 to 2048 [ 74.564162][ T4520] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 74.636312][ T4524] loop4: detected capacity change from 0 to 8192 [ 74.773530][ T4215] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 74.778442][ T4530] loop0: detected capacity change from 0 to 64 [ 74.991704][ T4538] netlink: 28 bytes leftover after parsing attributes in process `syz.2.114'. [ 75.000834][ T4538] netlink: 28 bytes leftover after parsing attributes in process `syz.2.114'. [ 75.043870][ T4538] device erspan0 entered promiscuous mode [ 75.058928][ T4538] device erspan0 left promiscuous mode [ 75.143511][ T4215] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 75.173399][ T4215] usb 4-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 75.198889][ T4215] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.256833][ T4215] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 75.333579][ T4554] mmap: syz.0.120 (4554) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 75.523567][ T4211] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 75.763458][ T4211] usb 3-1: Using ep0 maxpacket: 16 [ 75.803735][ T23] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 75.883459][ T4211] usb 3-1: config 4 has an invalid interface number: 52 but max is 1 [ 75.891681][ T4211] usb 3-1: config 4 has an invalid interface number: 52 but max is 1 [ 75.900828][ T4211] usb 3-1: config 4 has 1 interface, different from the descriptor's value: 2 [ 75.910874][ T4211] usb 3-1: config 4 has no interface number 0 [ 75.917305][ T4211] usb 3-1: config 4 interface 52 altsetting 62 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 75.931445][ T4211] usb 3-1: config 4 interface 52 has no altsetting 0 [ 75.940150][ T4211] usb 3-1: config 4 interface 52 has no altsetting 1 [ 76.103766][ T4211] usb 3-1: New USB device found, idVendor=0b95, idProduct=7720, bcdDevice=18.78 [ 76.119031][ T4211] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.128936][ T4211] usb 3-1: Product: syz [ 76.133400][ T4211] usb 3-1: Manufacturer: syz [ 76.139186][ T4211] usb 3-1: SerialNumber: syz [ 76.164063][ T23] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 76.173602][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.195214][ T23] usb 1-1: config 0 descriptor?? [ 76.235059][ T23] cp210x 1-1:0.0: cp210x converter detected [ 76.393573][ T4215] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -32 [ 76.402038][ T4215] stv0680 4-1:4.0: STV(e): camera ping failed!! [ 76.410002][ T4211] asix 3-1:4.52 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 76.422349][ T4211] asix: probe of 3-1:4.52 failed with error -71 [ 76.423581][ T1324] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 76.442495][ T4211] usb 3-1: USB disconnect, device number 2 [ 76.453778][ T4215] stv0680 4-1:4.0: last error: 0, command = 0x0 [ 76.513037][ T4576] loop1: detected capacity change from 0 to 1024 [ 76.612309][ T4576] hfsplus: bad catalog entry type [ 76.637785][ T9] hfsplus: b-tree write err: -5, ino 4 [ 76.663492][ T23] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 76.673818][ T4244] usb 4-1: USB disconnect, device number 4 [ 76.724315][ T23] usb 1-1: cp210x converter now attached to ttyUSB0 [ 76.733458][ T1324] usb 5-1: Using ep0 maxpacket: 8 [ 76.893429][ T1324] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 76.901942][ T1324] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 76.912319][ T1324] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 76.933131][ T1324] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 76.962348][ T1324] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 76.997477][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 77.012229][ T4578] loop1: detected capacity change from 0 to 32768 [ 77.014233][ T1324] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 77.033005][ T1324] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.049942][ T7] usb 1-1: USB disconnect, device number 2 [ 77.061695][ T7] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 77.074523][ T7] cp210x 1-1:0.0: device disconnected [ 77.256983][ T4587] loop3: detected capacity change from 0 to 512 [ 77.313713][ T1324] usb 5-1: GET_CAPABILITIES returned 0 [ 77.319469][ T1324] usbtmc 5-1:16.0: can't read capabilities [ 77.571205][ T1324] usb 5-1: USB disconnect, device number 2 [ 77.581243][ T4587] EXT4-fs (loop3): Test dummy encryption mode enabled [ 77.607487][ T4587] EXT4-fs (loop3): Test dummy encryption mode enabled [ 77.663489][ T4587] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 77.723360][ T4587] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 77.808834][ T4611] loop2: detected capacity change from 0 to 2048 [ 77.830932][ T4587] EXT4-fs (loop3): 1 truncate cleaned up [ 77.841717][ T4587] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,test_dummy_encryption,noauto_da_alloc,minixdf,errors=remount-ro,quota,. Quota mode: writeback. [ 77.951480][ T4587] EXT4-fs (loop3): Test dummy encryption mode enabled [ 77.969363][ T4618] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 78.022807][ T4587] EXT4-fs (loop3): journaled quota format not specified [ 78.037516][ T4622] loop0: detected capacity change from 0 to 16 [ 78.049405][ T4611] NILFS error (device loop2): nilfs_dotdot: directory #12 missing '..' [ 78.107027][ T4611] Remounting filesystem read-only [ 78.120211][ T4169] EXT4-fs error (device loop3): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=16, rec_len=0, size=1024 fake=0 [ 78.182785][ T4622] erofs: (device loop0): mounted with root inode @ nid 36. [ 78.183805][ T4169] EXT4-fs (loop3): Remounting filesystem read-only [ 78.238072][ T4169] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 78.333010][ T4169] EXT4-fs (loop3): Remounting filesystem read-only [ 78.389214][ T4633] loop2: detected capacity change from 0 to 64 [ 78.525120][ T4637] loop4: detected capacity change from 0 to 512 [ 78.546423][ T4641] program syz.1.158 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 78.591472][ T4637] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 78.725473][ T4637] EXT4-fs (loop4): mounted filesystem without journal. Opts: stripe=0x0000000000000010,stripe=0x0000000000000004,dioread_nolock,mblk_io_submit,discard,nogrpid,,errors=continue. Quota mode: none. [ 78.871536][ T26] audit: type=1800 audit(1741917126.410:23): pid=4637 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.157" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 78.928777][ T4659] loop0: detected capacity change from 0 to 512 [ 79.032563][ T4652] loop1: detected capacity change from 0 to 4096 [ 79.051583][ T4659] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 79.124512][ T4652] ntfs: (device loop1): ntfs_read_locked_inode(): $DATA attribute is missing. [ 79.124547][ T4652] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 79.124611][ T4652] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 79.133470][ T4652] ntfs: volume version 3.1. [ 79.142547][ T4669] netlink: 56 bytes leftover after parsing attributes in process `syz.4.167'. [ 79.150439][ T4659] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 79.162777][ T4652] ntfs: (device loop1): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 79.162809][ T4652] ntfs: (device loop1): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 79.162832][ T4652] ntfs: (device loop1): load_system_files(): Failed to determine if Windows is hibernated. Mounting read-only. Run chkdsk. [ 79.246940][ T4659] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2219: inode #15: comm syz.0.165: corrupted in-inode xattr [ 79.491427][ T4680] loop4: detected capacity change from 0 to 128 [ 79.525359][ T4659] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.165: couldn't read orphan inode 15 (err -117) [ 79.596668][ T4659] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,max_batch_time=0x0000000000000001,debug,noload,nombcache,noblock_validity,init_itable=0x0000000000000601,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none. [ 79.597233][ T4680] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 79.610327][ T4680] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 79.684564][ T4686] loop2: detected capacity change from 0 to 1024 [ 79.751659][ T4684] loop3: detected capacity change from 0 to 4096 [ 79.847143][ T4684] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 79.857602][ T9] hfsplus: b-tree write err: -5, ino 4 [ 79.900138][ T4684] ntfs3: loop3: Failed to load $Extend. [ 79.998984][ T4694] loop2: detected capacity change from 0 to 512 [ 80.066932][ T4694] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 80.151102][ T4694] EXT4-fs (loop2): 1 truncate cleaned up [ 80.187474][ T4694] EXT4-fs (loop2): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000002,resuid=0x0000000000000000,noauto_da_alloc,auto_da_alloc,errors=remount-ro,lazytime,. Quota mode: none. [ 80.486093][ T4688] loop1: detected capacity change from 0 to 32768 [ 80.690720][ T4688] XFS (loop1): Mounting V5 Filesystem [ 80.786752][ T4713] loop2: detected capacity change from 0 to 8192 [ 80.842157][ T4688] XFS (loop1): Ending clean mount [ 80.857783][ T4688] XFS (loop1): Quotacheck needed: Please wait. [ 80.931594][ T4713] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 80.988363][ T4723] loop3: detected capacity change from 0 to 2048 [ 80.995551][ T4713] REISERFS (device loop2): using ordered data mode [ 81.002084][ T4713] reiserfs: using flush barriers [ 81.010185][ T4713] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 81.026861][ T4690] loop4: detected capacity change from 0 to 32768 [ 81.034986][ T4713] REISERFS (device loop2): checking transaction log (loop2) [ 81.037749][ T4688] XFS (loop1): Quotacheck: Done. [ 81.086129][ T4723] EXT4-fs (loop3): Ignoring removed orlov option [ 81.105864][ T4690] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.179 (4690) [ 81.173997][ T4723] EXT4-fs (loop3): mounted filesystem without journal. Opts: orlov,errors=remount-ro,. Quota mode: none. [ 81.279928][ T4735] loop0: detected capacity change from 0 to 256 [ 81.298547][ T4713] REISERFS (device loop2): Using tea hash to sort names [ 81.310858][ T4723] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 81.320560][ T4690] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 81.327833][ T4713] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 81.349412][ T4723] EXT4-fs (loop3): Remounting filesystem read-only [ 81.389690][ T4690] BTRFS info (device loop4): using free space tree [ 81.417532][ T4690] BTRFS info (device loop4): has skinny extents [ 81.420299][ T4735] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xb107716d, utbl_chksum : 0xe619d30d) [ 81.442829][ T4170] XFS (loop1): Unmounting Filesystem [ 81.502529][ T1108] cfg80211: failed to load regulatory.db [ 81.711575][ T4747] loop3: detected capacity change from 0 to 256 [ 81.985282][ T4690] BTRFS info (device loop4): enabling ssd optimizations [ 82.419178][ T4769] loop3: detected capacity change from 0 to 2048 [ 82.443039][ T4771] loop2: detected capacity change from 0 to 512 [ 82.564570][ T4771] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 82.634508][ T4771] ext4 filesystem being mounted at /44/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.689959][ T4771] EXT4-fs error (device loop2): ext4_do_update_inode:5174: inode #2: comm syz.2.200: corrupted inode contents [ 82.710426][ T4771] EXT4-fs error (device loop2): ext4_dirty_inode:6010: inode #2: comm syz.2.200: mark_inode_dirty error [ 82.773971][ T4771] EXT4-fs error (device loop2): ext4_do_update_inode:5174: inode #2: comm syz.2.200: corrupted inode contents [ 82.808459][ T4771] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #2: comm syz.2.200: mark_inode_dirty error [ 83.229449][ T4808] loop3: detected capacity change from 0 to 512 [ 83.354299][ T4810] loop0: detected capacity change from 0 to 4096 [ 83.453416][ T4810] ntfs3: loop0: Different NTFS' sector size (2048) and media sector size (512) [ 83.497349][ T4808] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 83.532647][ T4808] ext4 filesystem being mounted at /29/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.573079][ T4822] process 'syz.2.216' launched './file0' with NULL argv: empty string added [ 83.745180][ T4808] syz.3.207 (4808) used greatest stack depth: 19384 bytes left [ 83.954465][ T4211] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 84.005467][ T4836] loop2: detected capacity change from 0 to 256 [ 84.213357][ T4211] usb 2-1: Using ep0 maxpacket: 32 [ 84.265838][ T4845] input: syz0 as /devices/virtual/input/input5 [ 84.339451][ T4211] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.392032][ T4211] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 84.440522][ T4211] usb 2-1: New USB device found, idVendor=056a, idProduct=00fa, bcdDevice= 0.00 [ 84.451126][ T4211] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.471169][ T4211] usb 2-1: config 0 descriptor?? [ 84.531555][ T4856] loop4: detected capacity change from 0 to 256 [ 84.610253][ T4856] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 84.664344][ T4860] loop0: detected capacity change from 0 to 512 [ 84.743923][ T4862] (unnamed net_device) (uninitialized): ARP validating cannot be used with MII monitoring [ 84.870927][ T4860] EXT4-fs (loop0): mounted filesystem without journal. Opts: nouid32,,errors=continue. Quota mode: none. [ 85.003568][ T4871] tipc: Started in network mode [ 85.008830][ T4871] tipc: Node identity -, cluster identity 4711 [ 85.016108][ T4211] wacom 0003:056A:00FA.0001: hidraw0: USB HID v0.00 Device [HID 056a:00fa] on usb-dummy_hcd.1-1/input0 [ 85.263781][ T13] usb 2-1: USB disconnect, device number 2 [ 85.297622][ T4879] syz.3.241 (4879) used greatest stack depth: 19288 bytes left [ 85.676385][ T4899] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 86.065581][ T4913] loop1: detected capacity change from 0 to 2048 [ 86.180276][ T4920] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 86.494764][ T4926] 8021q: adding VLAN 0 to HW filter on device bond1 [ 86.512515][ T4926] bond0: (slave bond1): Enslaving as an active interface with an up link [ 86.540727][ T4929] loop1: detected capacity change from 0 to 256 [ 86.567676][ T4890] loop2: detected capacity change from 0 to 32768 [ 86.623983][ T4890] XFS: noikeep mount option is deprecated. [ 86.642319][ T4929] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x99a53fd9, utbl_chksum : 0xe619d30d) [ 86.749241][ T4919] loop3: detected capacity change from 0 to 40427 [ 86.781450][ T4936] ALSA: seq fatal error: cannot create timer (-22) [ 86.789849][ T4890] XFS (loop2): Mounting V5 Filesystem [ 86.804010][ T4919] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 86.812309][ T4919] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 86.826031][ T4938] sch_tbf: burst 9 is lower than device veth0_to_bridge mtu (1514) ! [ 86.844394][ T4919] F2FS-fs (loop3): invalid crc value [ 86.895858][ T4919] F2FS-fs (loop3): Found nat_bits in checkpoint [ 87.132707][ T4890] XFS (loop2): Ending clean mount [ 87.179189][ T4890] XFS (loop2): Quotacheck needed: Please wait. [ 87.232282][ T4919] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 87.242672][ T4952] sctp: [Deprecated]: syz.0.269 (pid 4952) Use of int in maxseg socket option. [ 87.242672][ T4952] Use struct sctp_assoc_value instead [ 87.276326][ T4919] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 87.325908][ T4955] loop4: detected capacity change from 0 to 2048 [ 87.344756][ T4890] XFS (loop2): Quotacheck: Done. [ 87.492012][ T4955] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 87.530415][ T4168] XFS (loop2): Unmounting Filesystem [ 87.571639][ T4955] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug_want_extra_isize=0x0000000000000004,usrjquota=,errors=remount-ro,dioread_lock,max_batch_time=0x0000000000000005,mblk_io_submit,minixdf,barrier=0x0000000000000000,nombcache,bsddf,. Quota mode: none. [ 88.476365][ T4801] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 88.864299][ T4801] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.883297][ T4801] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 88.913279][ T4801] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.941310][ T4801] usb 5-1: config 0 descriptor?? [ 89.066667][ T5011] overlayfs: failed to clone lowerpath [ 89.186746][ T4990] loop1: detected capacity change from 0 to 32768 [ 89.244909][ T5018] loop0: detected capacity change from 0 to 256 [ 89.293426][ T4990] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop1 scanned by syz.1.287 (4990) [ 89.358923][ T4990] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 89.398318][ T4990] BTRFS info (device loop1): enabling ssd optimizations [ 89.416513][ T4990] BTRFS info (device loop1): turning off barriers [ 89.434941][ T4801] keytouch 0003:0926:3333.0002: fixing up Keytouch IEC report descriptor [ 89.440180][ T4990] BTRFS info (device loop1): use no compression [ 89.469384][ T4801] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0002/input/input9 [ 89.513429][ T4990] BTRFS info (device loop1): using free space tree [ 89.550559][ T4990] BTRFS info (device loop1): has skinny extents [ 89.620169][ T4801] keytouch 0003:0926:3333.0002: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 89.786225][ T5008] loop3: detected capacity change from 0 to 32768 [ 90.031264][ T5008] XFS (loop3): Mounting V5 Filesystem [ 90.154293][ T5008] XFS (loop3): Ending clean mount [ 90.177943][ T5008] XFS (loop3): Quotacheck needed: Please wait. [ 90.268333][ T5008] XFS (loop3): Quotacheck: Done. [ 90.494783][ T4803] usb 5-1: USB disconnect, device number 3 [ 90.639800][ T5056] loop2: detected capacity change from 0 to 4096 [ 90.723787][ T4169] XFS (loop3): Unmounting Filesystem [ 90.866598][ T5056] ntfs: volume version 3.1. [ 90.977315][ T5056] ntfs: (device loop2): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set iso8859-13. You might want to try to use the mount option nls=utf8. [ 91.085098][ T5056] ntfs: (device loop2): ntfs_filldir(): Skipping unrepresentable inode 0x4. [ 91.615093][ T5092] loop2: detected capacity change from 0 to 128 [ 91.660186][ T5092] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 91.698483][ T5092] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 91.787158][ T5101] loop4: detected capacity change from 0 to 128 [ 91.979436][ T5103] loop2: detected capacity change from 0 to 2048 [ 91.994099][ T13] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 92.083094][ T5103] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_nolock,minixdf,nolazytime,journal_ioprio=0x0000000000000000,journal_ioprio=0x0000000000000007,,errors=continue. Quota mode: none. [ 92.083605][ T4801] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 92.115636][ T5103] ext4 filesystem being mounted at /58/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.164642][ T5105] bridge0: port 1(bridge_slave_0) entered listening state [ 92.192303][ T5103] fs-verity: sha512 using implementation "sha512-avx2" [ 92.228989][ T5103] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.321: bg 0: block 345: padding at end of block bitmap is not set [ 92.273787][ T13] usb 4-1: Using ep0 maxpacket: 8 [ 92.308365][ T5103] fs-verity (loop2, inode 13): Error -117 writing Merkle tree block 0 [ 92.323487][ T5103] fs-verity (loop2, inode 13): Error -117 building Merkle tree [ 92.354354][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.453612][ T4801] usb 1-1: Using ep0 maxpacket: 32 [ 92.483876][ T13] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 92.515558][ T13] usb 4-1: config 179 has no interface number 0 [ 92.518417][ T5116] loop2: detected capacity change from 0 to 128 [ 92.521932][ T13] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 92.542791][ T13] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 92.561413][ T13] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 92.573094][ T13] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 92.590810][ T13] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 92.603342][ T4215] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 92.620938][ T13] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 92.630954][ T13] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.663745][ T5097] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 92.813714][ T4801] usb 1-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 92.833487][ T4801] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.841560][ T4801] usb 1-1: Product: syz [ 92.864027][ T4801] usb 1-1: Manufacturer: syz [ 92.873730][ T4801] usb 1-1: SerialNumber: syz [ 92.905773][ T4801] usb 1-1: config 0 descriptor?? [ 92.909046][ T4215] usb 5-1: Using ep0 maxpacket: 16 [ 92.986837][ T4801] rtl8150 1-1:0.0: couldn't find required endpoints [ 93.003365][ T13] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input10 [ 93.015667][ T4801] rtl8150: probe of 1-1:0.0 failed with error -5 [ 93.033660][ T4215] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 93.093342][ T4215] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 93.151945][ T1108] usb 4-1: USB disconnect, device number 5 [ 93.163333][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 93.181320][ T1108] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 93.254122][ T4215] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 93.284458][ T4215] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.292496][ T4215] usb 5-1: Product: syz [ 93.302528][ T4215] usb 5-1: Manufacturer: syz [ 93.307620][ T4215] usb 5-1: SerialNumber: syz [ 93.410381][ T5122] loop2: detected capacity change from 0 to 32768 [ 93.587598][ T5122] XFS (loop2): Mounting V5 Filesystem [ 93.653774][ T5122] XFS (loop2): Ending clean mount [ 93.662459][ T5122] XFS (loop2): Quotacheck needed: Please wait. [ 93.735876][ T5122] XFS (loop2): Quotacheck: Done. [ 93.823611][ T4215] usb 5-1: 0:2 : does not exist [ 93.924061][ T4168] XFS (loop2): Unmounting Filesystem [ 94.229335][ T5151] loop3: detected capacity change from 0 to 32768 [ 94.308568][ T4215] usb 5-1: USB disconnect, device number 4 [ 94.379664][ T5162] loop2: detected capacity change from 0 to 512 [ 94.418714][ T5151] JBD2: Ignoring recovery information on journal [ 94.491546][ T5168] fuse: Bad value for 'fd' [ 94.509483][ T5162] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.344: inode #1: comm syz.2.344: iget: illegal inode # [ 94.542504][ T5151] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 94.594482][ T4159] udevd[4159]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 94.629676][ T5162] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.344: error while reading EA inode 1 err=-117 [ 94.690871][ T5162] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2816: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 94.724890][ T5162] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.344: inode #1: comm syz.2.344: iget: illegal inode # [ 94.748615][ T5162] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.344: error while reading EA inode 1 err=-117 [ 94.774260][ T5162] EXT4-fs (loop2): 1 orphan inode deleted [ 94.791023][ T5151] (syz.3.339,5151,0):ocfs2_group_extend:306 ERROR: The disk is too old and small. Force to do offline resize. [ 94.801047][ T5162] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,journal_dev=0x0000000000008000,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,grpquota,usrjquota=,,errors=continue. Quota mode: writeback. [ 94.831093][ T4215] usb 1-1: USB disconnect, device number 3 [ 94.838212][ C0] vkms_vblank_simulate: vblank timer overrun [ 94.983065][ T4169] ocfs2: Unmounting device (7,3) on (node local) [ 95.163026][ T5175] loop4: detected capacity change from 0 to 2048 [ 95.311569][ T5175] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 95.332817][ T4159] udevd[4159]: incorrect nilfs2 checksum on /dev/loop4 [ 95.401334][ T5180] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 95.488024][ T5175] attempt to access beyond end of device [ 95.488024][ T5175] loop4: rw=0, want=3122, limit=2048 [ 95.522234][ T5175] Buffer I/O error on dev loop4, logical block 1560, async page read [ 95.561782][ T5175] attempt to access beyond end of device [ 95.561782][ T5175] loop4: rw=0, want=3122, limit=2048 [ 95.573397][ T4803] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 95.630040][ T5175] Buffer I/O error on dev loop4, logical block 1560, async page read [ 95.675245][ T26] audit: type=1800 audit(1741917143.220:24): pid=5175 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.350" name="file2" dev="loop4" ino=16 res=0 errno=0 [ 95.710231][ T5173] loop0: detected capacity change from 0 to 32768 [ 95.850702][ T5173] XFS (loop0): Mounting V5 Filesystem [ 95.870683][ T5175] syz.4.350 (5175) used greatest stack depth: 18680 bytes left [ 95.947019][ T5206] program syz.3.359 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 96.034649][ T5173] XFS (loop0): Ending clean mount [ 96.059791][ T5173] XFS (loop0): Quotacheck needed: Please wait. [ 96.122982][ T5173] XFS (loop0): Quotacheck: Done. [ 96.214018][ T5216] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode active-backup(1) [ 96.233626][ T4803] usb 3-1: New USB device found, idVendor=1943, idProduct=2250, bcdDevice= 0.01 [ 96.242720][ T4803] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.261335][ T4803] usb 3-1: Product: syz [ 96.267028][ T4803] usb 3-1: Manufacturer: syz [ 96.271959][ T4803] usb 3-1: SerialNumber: syz [ 96.294872][ T5218] loop4: detected capacity change from 0 to 64 [ 96.297987][ T4803] usb 3-1: config 0 descriptor?? [ 96.369679][ T4803] go7007 3-1:0.0: Sensoray 2250 found [ 96.380976][ T4803] go7007: probe of 3-1:0.0 failed with error -12 [ 96.433280][ T5218] hfs: unable to locate alternate MDB [ 96.443792][ T4167] XFS (loop0): Unmounting Filesystem [ 96.459378][ T5218] hfs: continuing without an alternate MDB [ 96.623945][ T4803] usb 3-1: USB disconnect, device number 3 [ 97.116168][ T5236] loop0: detected capacity change from 0 to 512 [ 97.178767][ T5236] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 97.240041][ T5236] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 97.253641][ T5242] loop4: detected capacity change from 0 to 256 [ 97.271729][ T5236] EXT4-fs (loop0): 1 truncate cleaned up [ 97.280014][ T5236] EXT4-fs (loop0): mounted filesystem without journal. Opts: noload,resuid=0x000000000000ee01,debug_want_extra_isize=0x000000000000002e,lazytime,quota,quota,,errors=continue. Quota mode: writeback. [ 97.957700][ T5250] loop2: detected capacity change from 0 to 32768 [ 98.043653][ T5250] [ 98.043653][ T5250] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 98.043653][ T5250] [ 98.045770][ T4215] usb 1-1: new low-speed USB device number 4 using dummy_hcd [ 98.150767][ T5258] loop4: detected capacity change from 0 to 32768 [ 98.151374][ T9] ERROR: (device loop2): diWrite: ixpxd invalid [ 98.151374][ T9] [ 98.182892][ T9] ERROR: (device loop2): txCommit: [ 98.182892][ T9] [ 98.202624][ T5258] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.380 (5258) [ 98.211230][ T9] jfs_write_inode: jfs_commit_inode failed! [ 98.233510][ T4168] [ 98.233510][ T4168] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 98.233510][ T4168] [ 98.260030][ T4168] [ 98.260030][ T4168] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 98.260030][ T4168] [ 98.288789][ T5258] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 98.313372][ T5258] BTRFS info (device loop4): using free space tree [ 98.319924][ T5258] BTRFS info (device loop4): has skinny extents [ 98.453629][ T4215] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 98.463424][ T5264] loop3: detected capacity change from 0 to 32768 [ 98.497160][ T4215] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 98.533478][ T5264] (syz.3.383,5264,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 98.572563][ T5258] BTRFS info (device loop4): enabling ssd optimizations [ 98.578419][ T4215] usb 1-1: New USB device found, idVendor=05ac, idProduct=0240, bcdDevice= 0.00 [ 98.631215][ T5264] (syz.3.383,5264,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 98.645410][ T4215] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.689561][ T4215] usb 1-1: config 0 descriptor?? [ 98.723637][ T5262] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 98.747393][ T4215] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input11 [ 98.835752][ T5291] loop2: detected capacity change from 0 to 256 [ 98.874724][ T5264] JBD2: Ignoring recovery information on journal [ 98.981433][ T5264] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 99.001624][ T3531] bcm5974 1-1:0.0: could not read from device [ 99.129328][ T4215] usb 1-1: USB disconnect, device number 4 [ 99.391265][ T5298] loop2: detected capacity change from 0 to 2048 [ 99.467802][ T4169] ocfs2: Unmounting device (7,3) on (node local) [ 99.538333][ T5298] EXT4-fs (loop2): mounted filesystem without journal. Opts: nombcache,data_err=ignore,max_batch_time=0x0000000000000009,sysvgroups,,errors=continue. Quota mode: none. [ 99.593740][ T5298] ext4 filesystem being mounted at /71/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.615417][ T5298] fs-verity: sha256 using implementation "sha256-avx2" [ 99.709326][ T5298] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.389: bg 0: block 137: padding at end of block bitmap is not set [ 99.777486][ T5298] fs-verity (loop2, inode 13): ext4_end_enable_verity() failed with err -117 [ 100.224256][ T5323] loop2: detected capacity change from 0 to 4096 [ 100.414012][ T5330] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 100.702766][ T5320] loop0: detected capacity change from 0 to 32768 [ 100.738354][ T5304] loop4: detected capacity change from 0 to 40427 [ 100.771062][ T5320] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.399 (5320) [ 100.824446][ T5304] F2FS-fs (loop4): invalid crc value [ 100.863873][ T5304] F2FS-fs (loop4): Found nat_bits in checkpoint [ 100.878653][ T5320] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 100.899444][ T5320] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 100.953533][ T5320] BTRFS info (device loop0): use zstd compression, level 3 [ 100.960792][ T5320] BTRFS info (device loop0): using free space tree [ 101.004820][ T5320] BTRFS info (device loop0): has skinny extents [ 101.101900][ T5304] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 101.192737][ T5337] attempt to access beyond end of device [ 101.192737][ T5337] loop4: rw=2049, want=45104, limit=40427 [ 101.285656][ T5332] loop3: detected capacity change from 0 to 32768 [ 101.334026][ T5332] XFS: ikeep mount option is deprecated. [ 101.350198][ T5332] XFS: noikeep mount option is deprecated. [ 101.394746][ T5320] BTRFS info (device loop0): enabling ssd optimizations [ 101.506386][ T5332] XFS (loop3): Mounting V5 Filesystem [ 101.781279][ T5332] XFS (loop3): Ending clean mount [ 101.795520][ T5332] XFS (loop3): Quotacheck needed: Please wait. [ 101.819681][ T5351] loop2: detected capacity change from 0 to 32768 [ 102.006120][ T5351] XFS (loop2): Mounting V5 Filesystem [ 102.097018][ T5332] XFS (loop3): Quotacheck: Done. [ 102.221907][ T4169] XFS (loop3): Unmounting Filesystem [ 102.227603][ T5351] XFS (loop2): Ending clean mount [ 102.327221][ T5351] XFS (loop2): Quotacheck needed: Please wait. [ 102.378587][ T5398] netlink: 20 bytes leftover after parsing attributes in process `syz.0.408'. [ 102.378746][ T5399] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.397702][ T5399] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.406587][ T5399] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.415587][ T5399] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.452098][ T5351] XFS (loop2): Quotacheck: Done. [ 102.683138][ T4168] XFS (loop2): Unmounting Filesystem [ 103.038024][ T5428] loop4: detected capacity change from 0 to 64 [ 103.158420][ T5428] hfs: request for non-existent node 24 in B*Tree [ 103.193490][ T5428] hfs: request for non-existent node 24 in B*Tree [ 103.258611][ T5434] netlink: 16 bytes leftover after parsing attributes in process `syz.1.431'. [ 103.581131][ T5422] loop0: detected capacity change from 0 to 32768 [ 104.101229][ T5458] loop3: detected capacity change from 0 to 4096 [ 104.298810][ T5467] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 104.328246][ T5458] NILFS error (device loop3): nilfs_dotdot: directory #12 missing '.' [ 104.349114][ T5458] Remounting filesystem read-only [ 104.969331][ T5463] loop0: detected capacity change from 0 to 32768 [ 105.030628][ T5489] loop4: detected capacity change from 0 to 512 [ 105.141317][ T5489] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue. Quota mode: writeback. [ 105.213444][ T5489] ext4 filesystem being mounted at /75/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 105.279371][ T5463] XFS (loop0): Mounting V5 Filesystem [ 105.344320][ T5504] loop3: detected capacity change from 0 to 1024 [ 105.439759][ T5504] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 105.469631][ T5504] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 105.485185][ T5481] loop2: detected capacity change from 0 to 40427 [ 105.520492][ T5463] XFS (loop0): Ending clean mount [ 105.545855][ T5481] F2FS-fs (loop2): invalid crc value [ 105.547426][ T5463] XFS (loop0): Quotacheck needed: Please wait. [ 105.578907][ T5504] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 105.593100][ T5504] EXT4-fs (loop3): This should not happen!! Data will be lost [ 105.593100][ T5504] [ 105.606901][ T5504] EXT4-fs (loop3): Total free blocks count 0 [ 105.613006][ T5504] EXT4-fs (loop3): Free/Dirty block details [ 105.613794][ T5481] F2FS-fs (loop2): Found nat_bits in checkpoint [ 105.629914][ T5504] EXT4-fs (loop3): free_blocks=68451041280 [ 105.648925][ T5504] EXT4-fs (loop3): dirty_blocks=80 [ 105.698193][ T5504] EXT4-fs (loop3): Block reservation details [ 105.717714][ T5463] XFS (loop0): Quotacheck: Done. [ 105.763737][ T5504] EXT4-fs (loop3): i_reserved_data_blocks=5 [ 105.785644][ T5517] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 64 with error 28 [ 105.820087][ T5481] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 105.845323][ T5517] EXT4-fs (loop3): This should not happen!! Data will be lost [ 105.845323][ T5517] [ 105.929891][ T4167] XFS (loop0): Unmounting Filesystem [ 106.012530][ T4168] attempt to access beyond end of device [ 106.012530][ T4168] loop2: rw=2049, want=45104, limit=40427 [ 107.431032][ T5533] loop0: detected capacity change from 0 to 32768 [ 107.553503][ T5533] BTRFS: device fsid 92aec1fe-fee8-4e05-92dc-790b47b871d9 devid 1 transid 8 /dev/loop0 scanned by syz.0.463 (5533) [ 107.635804][ T5533] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 107.664333][ T5533] BTRFS info (device loop0): using free space tree [ 107.684149][ T5533] BTRFS info (device loop0): has skinny extents [ 107.702644][ T5556] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.478'. [ 107.739591][ T5554] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.478'. [ 107.739695][ T5537] loop3: detected capacity change from 0 to 32768 [ 107.915552][ T5540] loop2: detected capacity change from 0 to 32768 [ 107.928892][ T5571] ieee802154 phy0 wpan0: encryption failed: -22 [ 108.007310][ T5533] BTRFS info (device loop0): enabling ssd optimizations [ 108.028740][ T5540] XFS (loop2): Mounting V5 Filesystem [ 108.346389][ T5540] XFS (loop2): Ending clean mount [ 108.378212][ T5540] XFS (loop2): Quotacheck needed: Please wait. [ 108.524824][ T5540] XFS (loop2): Quotacheck: Done. [ 108.530361][ T5597] loop3: detected capacity change from 0 to 164 [ 108.696014][ T4168] XFS (loop2): Unmounting Filesystem [ 108.863251][ T5611] loop4: detected capacity change from 0 to 64 [ 109.159320][ T5624] loop3: detected capacity change from 0 to 1024 [ 109.306138][ T5624] hfsplus: bad catalog entry type [ 109.421969][ T3057] hfsplus: b-tree write err: -5, ino 4 [ 109.706781][ T5654] netlink: 20 bytes leftover after parsing attributes in process `syz.1.511'. [ 109.747745][ T5656] overlayfs: upper fs does not support tmpfile. [ 109.858129][ T5661] loop2: detected capacity change from 0 to 256 [ 110.017582][ T5661] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 110.069471][ T5672] loop3: detected capacity change from 0 to 512 [ 110.081245][ T5673] loop0: detected capacity change from 0 to 24 [ 110.181103][ T5672] EXT4-fs (loop3): Ignoring removed oldalloc option [ 110.223782][ T5672] EXT4-fs error (device loop3): ext4_xattr_inode_iget:400: comm syz.3.520: Parent and EA inode have the same ino 15 [ 110.250995][ T5672] EXT4-fs error (device loop3): ext4_xattr_inode_iget:400: comm syz.3.520: Parent and EA inode have the same ino 15 [ 110.299357][ T5672] EXT4-fs (loop3): 1 orphan inode deleted [ 110.313736][ T5672] EXT4-fs (loop3): mounted filesystem without journal. Opts: nojournal_checksum,nolazytime,debug_want_extra_isize=0x000000000000005c,quota,usrjquota=,oldalloc,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback. [ 110.399559][ T5672] EXT4-fs error (device loop3): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.3.520: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 110.558700][ T5687] loop2: detected capacity change from 0 to 128 [ 110.638490][ T5687] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 110.714725][ T5687] UDF-fs: error (device loop2): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 110.733166][ T5696] netlink: 8 bytes leftover after parsing attributes in process `syz.0.530'. [ 111.153588][ T4799] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 111.232793][ T5716] ucma_write: process 222 (syz.4.536) changed security contexts after opening file descriptor, this is not allowed. [ 111.777988][ T5737] loop2: detected capacity change from 0 to 1024 [ 111.813345][ T5734] loop4: detected capacity change from 0 to 32768 [ 111.852230][ T5703] loop3: detected capacity change from 0 to 32768 [ 111.886162][ T5703] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.532 (5703) [ 111.920682][ T5734] ERROR: (device loop4): diAllocBit: iag inconsistent [ 111.920682][ T5734] [ 111.933747][ T5734] ialloc: diAlloc returned -5! [ 111.963900][ T4799] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 111.982294][ T5703] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 112.001260][ T4799] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.011157][ T5703] BTRFS info (device loop3): using free space tree [ 112.018267][ T4799] usb 1-1: Product: syz [ 112.022458][ T4799] usb 1-1: Manufacturer: syz [ 112.032937][ T5703] BTRFS info (device loop3): has skinny extents [ 112.040518][ T4799] usb 1-1: SerialNumber: syz [ 112.058357][ T4799] usb 1-1: config 0 descriptor?? [ 112.332076][ T5703] BTRFS info (device loop3): enabling ssd optimizations [ 112.354560][ T4799] usb-storage 1-1:0.0: USB Mass Storage device detected [ 112.826456][ T4244] usb 1-1: USB disconnect, device number 5 [ 113.013648][ T5378] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 113.218717][ T5803] loop0: detected capacity change from 0 to 256 [ 113.383555][ T5378] usb 5-1: config 0 interface 0 altsetting 190 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.409902][ T5378] usb 5-1: config 0 interface 0 altsetting 190 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.422416][ T5378] usb 5-1: config 0 interface 0 has no altsetting 0 [ 113.430002][ T5378] usb 5-1: New USB device found, idVendor=056a, idProduct=00e3, bcdDevice= 0.00 [ 113.440161][ T5378] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.458729][ T5378] usb 5-1: config 0 descriptor?? [ 113.727208][ T5828] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 113.840751][ T26] audit: type=1326 audit(1741917161.380:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5831 comm="syz.3.576" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd0bbcbb169 code=0x0 [ 114.192077][ T5378] wacom 0003:056A:00E3.0003: hidraw0: USB HID v0.00 Device [HID 056a:00e3] on usb-dummy_hcd.4-1/input0 [ 114.271004][ T5842] loop2: detected capacity change from 0 to 128 [ 114.287274][ T5378] usb 5-1: USB disconnect, device number 5 [ 114.414370][ T5824] loop0: detected capacity change from 0 to 32768 [ 114.511745][ T5824] ERROR: (device loop0): dtSearch: DT_GETPAGE: dtree page corrupt [ 114.511745][ T5824] [ 114.554049][ T5847] device wlan0 entered promiscuous mode [ 114.561114][ T5824] ERROR: (device loop0): remounting filesystem as read-only [ 114.571252][ T5824] jfs_lookup: dtSearch returned -5 [ 114.580927][ T5847] device macvtap1 entered promiscuous mode [ 114.588454][ T5848] ERROR: (device loop0): dtReadFirst: DT_GETPAGE: dtree page corrupt [ 114.588454][ T5848] [ 114.600725][ T5848] jfs_readdir: unexpected rc = -5 from dtReadNext [ 115.122339][ T5869] loop3: detected capacity change from 0 to 64 [ 115.429675][ T5883] tipc: Started in network mode [ 115.466834][ T5883] tipc: Node identity 3a20300a74797065, cluster identity 4711 [ 115.493386][ T5883] tipc: Enabling of bearer rejected, failed to enable media [ 115.556907][ T5892] loop3: detected capacity change from 0 to 16 [ 115.633188][ T5892] erofs: (device loop3): mounted with root inode @ nid 36. [ 116.388404][ T5910] device macvtap1 entered promiscuous mode [ 117.008966][ T5925] loop0: detected capacity change from 0 to 512 [ 117.065155][ T5909] loop4: detected capacity change from 0 to 32768 [ 117.090659][ T5925] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 117.128557][ T5925] EXT4-fs error (device loop0): __ext4_iget:4872: inode #11: block 2: comm syz.0.620: invalid block [ 117.157606][ T5925] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.620: couldn't read orphan inode 11 (err -117) [ 117.174011][ T5925] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 117.227088][ T5925] EXT4-fs (loop0): shut down requested (1) [ 117.353842][ T5377] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 117.957020][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 117.970834][ T5952] netlink: 'syz.1.631': attribute type 12 has an invalid length. [ 117.987638][ T5952] netlink: 'syz.1.631': attribute type 29 has an invalid length. [ 118.015399][ T5377] usb 3-1: config 0 has an invalid interface number: 121 but max is 0 [ 118.046893][ T5377] usb 3-1: config 0 has no interface number 0 [ 118.053021][ T5377] usb 3-1: config 0 interface 121 has no altsetting 0 [ 118.072645][ T5952] netlink: 'syz.1.631': attribute type 2 has an invalid length. [ 118.083475][ T5952] netlink: 'syz.1.631': attribute type 2 has an invalid length. [ 118.106955][ T5952] netlink: 'syz.1.631': attribute type 1 has an invalid length. [ 118.140288][ T5936] loop3: detected capacity change from 0 to 32768 [ 118.150813][ T5952] netlink: 'syz.1.631': attribute type 37 has an invalid length. [ 118.162826][ T5952] netlink: 'syz.1.631': attribute type 2 has an invalid length. [ 118.174137][ T5952] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.195058][ T5936] XFS: noikeep mount option is deprecated. [ 118.200921][ T5936] XFS: noikeep mount option is deprecated. [ 118.233433][ T5377] usb 3-1: New USB device found, idVendor=12d1, idProduct=9e36, bcdDevice=b1.f8 [ 118.255151][ T5377] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.278618][ T5377] usb 3-1: Product: syz [ 118.282951][ T5377] usb 3-1: Manufacturer: syz [ 118.324365][ T5969] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 118.329443][ T5377] usb 3-1: SerialNumber: syz [ 118.351710][ T5936] XFS (loop3): Mounting V5 Filesystem [ 118.365465][ T5377] usb 3-1: config 0 descriptor?? [ 118.589779][ T5936] XFS (loop3): Ending clean mount [ 118.608921][ T5979] loop4: detected capacity change from 0 to 64 [ 118.620001][ T5936] XFS (loop3): Quotacheck needed: Please wait. [ 118.672627][ T5936] XFS (loop3): Quotacheck: Done. [ 118.685117][ T5377] option 3-1:0.121: GSM modem (1-port) converter detected [ 118.702012][ T5377] usb 3-1: USB disconnect, device number 4 [ 118.709355][ T5377] option 3-1:0.121: device disconnected [ 118.855277][ T4169] XFS (loop3): Unmounting Filesystem [ 119.407365][ T5999] tap0: tun_chr_ioctl cmd 1074025677 [ 119.425567][ T5999] tap0: linktype set to 65534 [ 119.877123][ T5985] loop0: detected capacity change from 0 to 32768 [ 119.977744][ T5985] JBD2: Ignoring recovery information on journal [ 120.144222][ T5985] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 120.221320][ T6023] loop2: detected capacity change from 0 to 128 [ 120.310256][ T6023] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 120.332770][ T6023] ext4 filesystem being mounted at /124/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 120.442874][ T5994] loop4: detected capacity change from 0 to 40427 [ 120.537853][ T4167] ocfs2: Unmounting device (7,0) on (node local) [ 120.548367][ T5994] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 120.583310][ T5994] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 120.729242][ T5994] F2FS-fs (loop4): Found nat_bits in checkpoint [ 120.915955][ T5994] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 120.929386][ T5994] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 121.136991][ T26] audit: type=1800 audit(1741917168.680:26): pid=5994 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.647" name="file2" dev="loop4" ino=10 res=0 errno=0 [ 121.453681][ T4800] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 121.525734][ T6057] netlink: 12 bytes leftover after parsing attributes in process `syz.0.672'. [ 121.829104][ T6067] mkiss: ax0: crc mode is auto. [ 121.849434][ T4800] usb 3-1: config 0 has no interfaces? [ 121.856228][ T4800] usb 3-1: New USB device found, idVendor=056a, idProduct=0016, bcdDevice= 0.00 [ 121.873820][ T4800] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.890700][ T4800] usb 3-1: config 0 descriptor?? [ 122.149409][ T4800] usb 3-1: USB disconnect, device number 5 [ 122.238396][ T6089] loop0: detected capacity change from 0 to 1024 [ 122.344835][ T6089] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsv1,min_batch_time=0x00000000000000c0,delalloc,noauto_da_alloc,debug_want_extra_isize=0x000000000000007c,nouid32,resgid=0x0000000000000000,grpquota,sysvgroups,,errors=continue. Quota mode: writeback. [ 122.561661][ T6080] loop4: detected capacity change from 0 to 32768 [ 122.604149][ T6080] XFS: ikeep mount option is deprecated. [ 122.682113][ T6108] netlink: 24 bytes leftover after parsing attributes in process `syz.0.689'. [ 122.763160][ T6108] netlink: 24 bytes leftover after parsing attributes in process `syz.0.689'. [ 122.808023][ T6080] XFS (loop4): Mounting V5 Filesystem [ 122.891955][ T6128] loop0: detected capacity change from 0 to 64 [ 122.924972][ T6080] XFS (loop4): Ending clean mount [ 122.933052][ T6080] XFS (loop4): Quotacheck needed: Please wait. [ 122.955830][ T5383] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 123.079469][ T6080] XFS (loop4): Quotacheck: Done. [ 123.221565][ T4180] XFS (loop4): Unmounting Filesystem [ 123.333732][ T5383] usb 4-1: config 7 has an invalid interface number: 34 but max is 0 [ 123.360499][ T5383] usb 4-1: config 7 has no interface number 0 [ 123.425879][ T6141] loop0: detected capacity change from 0 to 2048 [ 123.501068][ T6141] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 123.534561][ T5383] usb 4-1: New USB device found, idVendor=0fe9, idProduct=db51, bcdDevice=5e.35 [ 123.555677][ T5383] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.566501][ T5383] usb 4-1: Product: syz [ 123.570878][ T5383] usb 4-1: Manufacturer: syz [ 123.584425][ T6146] loop2: detected capacity change from 0 to 256 [ 123.595273][ T5383] usb 4-1: SerialNumber: syz [ 123.684160][ T6146] FAT-fs (loop2): Directory bread(block 1285) failed [ 123.732073][ T6146] FAT-fs (loop2): FAT read failed (blocknr 1281) [ 123.862213][ T6156] input: syz1 as /devices/virtual/input/input15 [ 124.119272][ T6168] loop0: detected capacity change from 0 to 1024 [ 124.189654][ T6168] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 124.198059][ T6170] loop4: detected capacity change from 0 to 512 [ 124.277880][ T6170] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 124.371907][ T6170] EXT4-fs (loop4): 1 truncate cleaned up [ 124.383625][ T6170] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,nombcache,inode_readahead_blks=0x0000000000000002,stripe=0x0000000002004000,max_batch_time=0x0000000000000002,max_batch_time=0x0000000000000004,,errors=continue. Quota mode: none. [ 124.432465][ T5383] dvb-usb: found a 'DViCO FusionHDTV DVB-T Dual USB' in warm state. [ 124.541459][ T5383] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 124.617312][ T5383] dvb-usb: DViCO FusionHDTV DVB-T Dual USB error while loading driver (-19) [ 124.617691][ T5383] dvb_usb_cxusb: probe of 4-1:7.34 failed with error -22 [ 124.700019][ T4244] usb 4-1: USB disconnect, device number 6 [ 124.867192][ T6189] syz.4.724 sent an empty control message without MSG_MORE. [ 124.988864][ T6192] device hsr0 entered promiscuous mode [ 125.129471][ T6198] loop4: detected capacity change from 0 to 4096 [ 125.191952][ T6175] loop2: detected capacity change from 0 to 40427 [ 125.253355][ T6175] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504) [ 125.262553][ T6202] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 125.264022][ T6175] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 125.310503][ T6175] F2FS-fs (loop2): invalid crc value [ 125.343442][ T4215] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 125.371482][ T6175] F2FS-fs (loop2): Found nat_bits in checkpoint [ 125.515711][ T6175] F2FS-fs (loop2): Start checkpoint disabled! [ 125.545944][ T6216] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 125.553068][ T6216] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 125.579690][ T6175] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 125.593368][ T6175] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 125.630750][ T6221] netlink: 24 bytes leftover after parsing attributes in process `syz.3.738'. [ 125.694211][ T6221] bond0: option ad_select: unable to set because the bond device is up [ 125.703757][ T4215] usb 1-1: config 0 has an invalid interface number: 19 but max is 0 [ 125.712211][ T4215] usb 1-1: config 0 has no interface number 0 [ 125.725607][ T6223] tipc: Started in network mode [ 125.730653][ T6223] tipc: Node identity ac14140f, cluster identity 4711 [ 125.749557][ T6223] tipc: New replicast peer: 255.255.255.255 [ 125.765202][ T6223] tipc: Enabled bearer , priority 10 [ 125.791232][ T6228] sch_fq: defrate 2048 ignored. [ 125.906350][ T4215] usb 1-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice=ef.dd [ 125.921970][ T3057] attempt to access beyond end of device [ 125.921970][ T3057] loop2: rw=2049, want=40992, limit=40427 [ 125.928202][ T4215] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.974781][ T4215] usb 1-1: Product: syz [ 125.984023][ T4215] usb 1-1: Manufacturer: syz [ 125.988658][ T4215] usb 1-1: SerialNumber: syz [ 126.009494][ T4215] usb 1-1: config 0 descriptor?? [ 126.064530][ T4215] kalmia: probe of 1-1:0.19 failed with error -22 [ 126.075272][ T4215] option 1-1:0.19: GSM modem (1-port) converter detected [ 126.370695][ T4244] usb 1-1: USB disconnect, device number 6 [ 126.404809][ T4244] option 1-1:0.19: device disconnected [ 126.588862][ T4793] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 126.648213][ T6232] loop4: detected capacity change from 0 to 32768 [ 126.734623][ T6232] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.743 (6232) [ 126.782798][ T6232] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 126.812057][ T6232] BTRFS info (device loop4): using free space tree [ 126.848045][ T6232] BTRFS info (device loop4): has skinny extents [ 126.885863][ T5378] tipc: Node number set to 2886997007 [ 126.888255][ T4793] usb 4-1: Using ep0 maxpacket: 32 [ 127.023483][ T4793] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 127.043670][ T4793] usb 4-1: config 0 has no interface number 0 [ 127.063810][ T4793] usb 4-1: config 0 interface 12 has no altsetting 0 [ 127.215940][ T6232] BTRFS info (device loop4): enabling ssd optimizations [ 127.263800][ T4793] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 127.283154][ T4793] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.291280][ T4793] usb 4-1: Product: syz [ 127.296651][ T6304] netlink: 'syz.2.758': attribute type 16 has an invalid length. [ 127.303261][ T4793] usb 4-1: Manufacturer: syz [ 127.319210][ T4793] usb 4-1: SerialNumber: syz [ 127.345437][ T6304] netlink: 'syz.2.758': attribute type 3 has an invalid length. [ 127.352508][ T4793] usb 4-1: config 0 descriptor?? [ 127.382524][ T6304] netlink: 'syz.2.758': attribute type 1 has an invalid length. [ 127.422069][ T6304] netlink: 'syz.2.758': attribute type 1 has an invalid length. [ 127.438527][ T6304] netlink: 'syz.2.758': attribute type 2 has an invalid length. [ 127.463700][ T6304] netlink: 64006 bytes leftover after parsing attributes in process `syz.2.758'. [ 128.283721][ T4793] f81534 4-1:0.12: f81534_set_register: reg: 1003 data: b0 failed: -71 [ 128.292083][ T4793] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 128.341433][ T4793] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 128.370706][ T4793] f81534: probe of 4-1:0.12 failed with error -71 [ 128.411474][ T4793] usb 4-1: USB disconnect, device number 7 [ 128.457222][ T6345] loop4: detected capacity change from 0 to 1024 [ 128.519891][ T6345] EXT4-fs (loop4): Ignoring removed nobh option [ 128.542615][ T6345] EXT4-fs (loop4): Ignoring removed bh option [ 128.565908][ T6345] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 128.601576][ T6350] SET target dimension over the limit! [ 128.641561][ T6350] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 0 [ 128.657510][ T6345] EXT4-fs (loop4): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,errors=remount-ro,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,. Quota mode: writeback. [ 128.717940][ T6345] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:3876: comm syz.4.771: Allocating blocks 481-513 which overlap fs metadata [ 128.772666][ T6357] loop2: detected capacity change from 0 to 1024 [ 128.782369][ T6345] EXT4-fs (loop4): Remounting filesystem read-only [ 128.890952][ T6357] hfsplus: xattr searching failed [ 128.981973][ T6340] loop0: detected capacity change from 0 to 32768 [ 128.984030][ T154] hfsplus: bad catalog file entry [ 129.003884][ T154] hfsplus: b-tree write err: -5, ino 3 [ 129.159097][ T6340] ERROR: (device loop0): dbAllocAG: unable to allocate blocks [ 129.159097][ T6340] [ 129.181754][ T6340] jfs_rename: dtInsert returned -EIO [ 129.336472][ T6373] netlink: 8 bytes leftover after parsing attributes in process `syz.4.782'. [ 129.553082][ T6383] loop2: detected capacity change from 0 to 1024 [ 129.817100][ T6397] input: syz0 as /devices/virtual/input/input16 [ 130.096428][ T6400] loop3: detected capacity change from 0 to 32768 [ 130.137483][ T6400] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 scanned by syz.3.795 (6400) [ 130.218022][ T6400] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 130.227394][ T6400] BTRFS info (device loop3): force zlib compression, level 3 [ 130.234914][ T6400] BTRFS info (device loop3): force clearing of disk cache [ 130.242051][ T6400] BTRFS info (device loop3): setting nodatasum [ 130.248316][ T6400] BTRFS info (device loop3): enabling disk space caching [ 130.255410][ T6400] BTRFS info (device loop3): disk space caching is enabled [ 130.262630][ T6400] BTRFS info (device loop3): has skinny extents [ 130.375722][ T6418] netlink: 8 bytes leftover after parsing attributes in process `syz.0.800'. [ 130.436713][ T6418] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.462761][ T6418] netlink: 'syz.0.800': attribute type 2 has an invalid length. [ 130.476009][ T6400] BTRFS info (device loop3): enabling ssd optimizations [ 130.485933][ T6400] BTRFS info (device loop3): clearing free space tree [ 130.493426][ T6400] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 130.503745][ T6400] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 130.663298][ T6400] BTRFS info (device loop3): balance: start -f -sprofiles=data|metadata|single|raid10|raid1|dup|raid0|raid5|raid6|raid1c3|raid1c4|0xfffefffffffff800,usage=1..9,devid=0,drange=9..1,vrange=2..1024,stripes=3..2145695905 [ 130.688885][ T6400] BTRFS info (device loop3): balance: ended with status: 0 [ 130.777005][ T6440] loop4: detected capacity change from 0 to 128 [ 130.913493][ T6440] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 130.925405][ T6440] ext4 filesystem being mounted at /144/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 131.155242][ T6440] fscrypt (loop4, inode 12): Unsupported encryption flags (0x0c) [ 131.621201][ T6458] netlink: 'syz.3.812': attribute type 21 has an invalid length. [ 131.689703][ T6458] IPv6: NLM_F_CREATE should be specified when creating new route [ 131.870657][ T6439] loop0: detected capacity change from 0 to 32768 [ 132.022388][ T26] audit: type=1800 audit(1741917179.560:27): pid=6439 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.803" name="file1" dev="loop0" ino=4 res=0 errno=0 [ 132.110332][ T6439] ERROR: (device loop0): dbAllocAG: Corrupt dmapctl page [ 132.110332][ T6439] [ 132.177040][ T6439] ERROR: (device loop0): remounting filesystem as read-only [ 132.675522][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.681930][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.781082][ T6469] loop2: detected capacity change from 0 to 32768 [ 132.833963][ T6469] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.818 (6469) [ 132.909518][ T6469] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 132.952264][ T6469] BTRFS info (device loop2): setting nodatacow, compression disabled [ 132.983454][ T6469] BTRFS info (device loop2): force clearing of disk cache [ 133.009267][ T6469] BTRFS info (device loop2): enabling ssd optimizations [ 133.019384][ T6509] smb3: Unknown parameter 'rdma' [ 133.059805][ T6469] BTRFS info (device loop2): using spread ssd allocation scheme [ 133.083752][ T6469] BTRFS info (device loop2): doing ref verification [ 133.094080][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 133.104539][ T6469] BTRFS info (device loop2): force zlib compression, level 3 [ 133.127747][ T6469] BTRFS info (device loop2): not using ssd optimizations [ 133.165882][ T6469] BTRFS info (device loop2): not using spread ssd allocation scheme [ 133.204012][ T6469] BTRFS info (device loop2): using free space tree [ 133.251124][ T6469] BTRFS info (device loop2): has skinny extents [ 133.435425][ T6534] netlink: 'syz.0.843': attribute type 10 has an invalid length. [ 133.489301][ T6490] loop4: detected capacity change from 0 to 32768 [ 133.529704][ T6490] gfs2: fsid=(œ[{{{+: Trying to join cluster "lock_nolock", "(œ[{{{+" [ 133.563819][ T6469] BTRFS info (device loop2): clearing free space tree [ 133.571050][ T6490] gfs2: fsid=(œ[{{{+: Now mounting FS (format 0)... [ 133.586777][ T6469] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 133.607780][ T6469] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 133.681472][ T6469] BTRFS info (device loop2): creating free space tree [ 133.712781][ T6469] BTRFS info (device loop2): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 133.734127][ T6469] BTRFS info (device loop2): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 133.743892][ T6554] loop0: detected capacity change from 0 to 64 [ 133.746009][ T6490] gfs2: fsid=(œ[{{{+.0: journal 0 mapped with 22 extents in 0ms [ 133.772557][ T26] audit: type=1800 audit(1741917181.310:28): pid=6554 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.849" name="file1" dev="loop0" ino=18 res=0 errno=0 [ 133.826090][ T5387] gfs2: fsid=(œ[{{{+.0: jid=0, already locked for use [ 133.835921][ T5387] gfs2: fsid=(œ[{{{+.0: jid=0: Looking at journal... [ 133.952960][ T5387] gfs2: fsid=(œ[{{{+.0: jid=0: Journal head lookup took 117ms [ 133.988898][ T5387] gfs2: fsid=(œ[{{{+.0: jid=0: Done [ 134.009995][ T6490] gfs2: fsid=(œ[{{{+.0: first mount done, others may mount [ 134.151416][ T6559] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8) [ 134.329830][ T6563] netlink: 24 bytes leftover after parsing attributes in process `syz.3.853'. [ 134.409359][ T6565] loop0: detected capacity change from 0 to 512 [ 134.521167][ T6568] loop3: detected capacity change from 0 to 2048 [ 134.609644][ T6565] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,nouid32,sysvgroups,noblock_validity,user_xattr,errors=remount-ro,barrier=0x0000000000000a0f,. Quota mode: writeback. [ 134.628026][ C0] vkms_vblank_simulate: vblank timer overrun [ 134.640007][ T6578] xt_CT: No such helper "snmp_trap" [ 134.669600][ T6565] ext4 filesystem being mounted at /178/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 134.719152][ T6568] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodelalloc,minixdf,nolazytime,stripe=0x000000000000001f,,errors=continue. Quota mode: none. [ 134.735030][ T6568] ext4 filesystem being mounted at /146/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 134.765166][ T26] audit: type=1800 audit(1741917182.300:29): pid=6568 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.856" name="file0" dev="loop3" ino=13 res=0 errno=0 [ 134.820323][ T6568] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.856: bg 0: block 345: padding at end of block bitmap is not set [ 134.840437][ T6568] fs-verity (loop3, inode 13): Error -117 writing Merkle tree block 0 [ 134.850082][ T6568] fs-verity (loop3, inode 13): Error -117 building Merkle tree [ 135.423122][ T6600] netlink: 'syz.0.867': attribute type 1 has an invalid length. [ 135.445121][ T6599] loop3: detected capacity change from 0 to 2048 [ 135.529215][ T6604] netlink: 8 bytes leftover after parsing attributes in process `syz.2.855'. [ 135.579792][ T6593] loop4: detected capacity change from 0 to 32768 [ 135.654468][ T6593] XFS: ikeep mount option is deprecated. [ 135.782228][ T6593] XFS (loop4): Mounting V5 Filesystem [ 135.793637][ T23] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 135.947019][ T6593] XFS (loop4): Ending clean mount [ 135.974742][ T6593] XFS (loop4): Quotacheck needed: Please wait. [ 136.048293][ T23] usb 1-1: Using ep0 maxpacket: 32 [ 136.076752][ T6593] XFS (loop4): Quotacheck: Done. [ 136.144093][ T4180] XFS (loop4): Unmounting Filesystem [ 136.182945][ T23] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 136.203886][ T23] usb 1-1: config 0 has no interface number 0 [ 136.363768][ T23] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 136.372926][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.387423][ T23] usb 1-1: Product: syz [ 136.391651][ T23] usb 1-1: Manufacturer: syz [ 136.397831][ T23] usb 1-1: SerialNumber: syz [ 136.409511][ T23] usb 1-1: config 0 descriptor?? [ 136.455361][ T23] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 136.686419][ T23] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 136.731538][ T23] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 136.876917][ T6659] loop3: detected capacity change from 0 to 512 [ 136.910189][ T6602] udc-core: couldn't find an available UDC or it's busy [ 136.933517][ T6602] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 136.963377][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - status message too short [ 137.009180][ T6659] EXT4-fs (loop3): mounted filesystem without journal. Opts: nojournal_checksum,quota,auto_da_alloc=0x0000000000000002,noload,user_xattr,nombcache,,errors=continue. Quota mode: writeback. [ 137.128236][ T6659] ext4 filesystem being mounted at /152/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 137.156345][ T4244] usb 1-1: USB disconnect, device number 7 [ 137.163316][ C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 137.174468][ T4244] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 137.198173][ T4244] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 137.220350][ T4244] quatech2 1-1:0.51: device disconnected [ 137.260635][ T6664] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 137.335155][ T6659] Quota error (device loop3): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 137.346748][ T6659] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 137.358031][ T6659] EXT4-fs error (device loop3): ext4_acquire_dquot:6197: comm syz.3.889: Failed to acquire dquot type 0 [ 137.397742][ T6659] overlayfs: failed to verify origin (/, ino=2, err=-117) [ 137.408349][ T6659] overlayfs: failed to verify upper root origin [ 137.692432][ T6671] loop3: detected capacity change from 0 to 4096 [ 137.754873][ T6675] loop0: detected capacity change from 0 to 256 [ 137.838278][ T6675] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x421408f7, utbl_chksum : 0xe619d30d) [ 137.873942][ T6675] exFAT-fs (loop0): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 137.913160][ T6678] loop2: detected capacity change from 0 to 16 [ 138.008740][ T6678] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 138.521073][ T6687] loop2: detected capacity change from 0 to 32768 [ 138.631553][ T6687] [ 138.631553][ T6687] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 138.631553][ T6687] [ 138.690743][ T6699] netlink: 4 bytes leftover after parsing attributes in process `syz.3.906'. [ 138.744507][ T4168] [ 138.744507][ T4168] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 138.744507][ T4168] [ 138.781359][ T4168] [ 138.781359][ T4168] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 138.781359][ T4168] [ 139.199038][ T6718] sp0: Synchronizing with TNC [ 139.573575][ T6709] loop3: detected capacity change from 0 to 40427 [ 139.638968][ T6709] F2FS-fs (loop3): invalid crc value [ 139.695814][ T6709] F2FS-fs (loop3): Found nat_bits in checkpoint [ 139.845834][ T6709] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 139.926351][ T6719] loop4: detected capacity change from 0 to 32768 [ 140.036766][ T6722] loop2: detected capacity change from 0 to 40427 [ 140.044632][ T4169] attempt to access beyond end of device [ 140.044632][ T4169] loop3: rw=2049, want=45104, limit=40427 [ 140.087754][ T6719] XFS (loop4): Mounting V5 Filesystem [ 140.143048][ T6722] F2FS-fs (loop2): invalid crc value [ 140.172116][ T6722] F2FS-fs (loop2): Found nat_bits in checkpoint [ 140.198362][ T6746] netlink: 8 bytes leftover after parsing attributes in process `syz.1.923'. [ 140.291068][ T6726] loop0: detected capacity change from 0 to 32768 [ 140.330463][ T6719] XFS (loop4): Ending clean mount [ 140.338772][ T6719] XFS (loop4): Quotacheck needed: Please wait. [ 140.361141][ T6726] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.918 (6726) [ 140.414999][ T6748] xt_NFQUEUE: number of total queues is 0 [ 140.427302][ T6722] F2FS-fs (loop2): Start checkpoint disabled! [ 140.429434][ T6726] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 140.462684][ T6726] BTRFS info (device loop0): enabling auto defrag [ 140.483561][ T6726] BTRFS info (device loop0): doing ref verification [ 140.490210][ T6726] BTRFS info (device loop0): use no compression [ 140.501257][ T6722] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 140.503057][ T6719] XFS (loop4): Quotacheck: Done. [ 140.563385][ T6726] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 140.632718][ T6726] BTRFS info (device loop0): use zstd compression, level 3 [ 140.681092][ T6726] BTRFS info (device loop0): enabling ssd optimizations [ 140.710739][ T6726] BTRFS info (device loop0): using spread ssd allocation scheme [ 140.738564][ T4180] XFS (loop4): Unmounting Filesystem [ 140.755886][ T6726] BTRFS info (device loop0): using free space tree [ 140.771598][ T6726] BTRFS info (device loop0): has skinny extents [ 140.914138][ T3057] attempt to access beyond end of device [ 140.914138][ T3057] loop2: rw=2049, want=40984, limit=40427 [ 140.969093][ T6767] loop3: detected capacity change from 0 to 1024 [ 141.081806][ T6767] EXT4-fs (loop3): inline encryption not supported [ 141.112011][ T6767] EXT4-fs (loop3): Mount option "nouser_xattr" will be removed by 3.5 [ 141.112011][ T6767] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 141.112011][ T6767] [ 141.142882][ T6767] EXT4-fs (loop3): mounted filesystem without journal. Opts: auto_da_alloc=0x000000000000dbe0,debug_want_extra_isize=0x0000000000000088,inlinecrypt,max_batch_time=0x0000000000000003,lazytime,noauto_da_alloc,nojournal_checksum,nouser_xattr,,errors=continue. Quota mode: writeback. [ 141.377007][ T6781] netlink: 32 bytes leftover after parsing attributes in process `syz.4.930'. [ 141.544766][ T6785] netlink: 4 bytes leftover after parsing attributes in process `syz.4.931'. [ 141.726706][ T6789] loop4: detected capacity change from 0 to 8 [ 142.066389][ T26] audit: type=1800 audit(1741917189.610:30): pid=6789 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.932" name="file1" dev="loop4" ino=5 res=0 errno=0 [ 142.619575][ T6805] loop4: detected capacity change from 0 to 1024 [ 142.723422][ T6805] EXT4-fs (loop4): Ignoring removed nobh option [ 142.755284][ T6805] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 142.862681][ T6805] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,delalloc,noblock_validity,usrquota,dioread_nolock,nobh,inode_readahead_blks=0x0000000000000004,grpjquota=,grpid,,errors=continue. Quota mode: writeback. [ 143.430302][ T6833] loop4: detected capacity change from 0 to 256 [ 143.635421][ T6838] loop2: detected capacity change from 0 to 64 [ 144.065469][ T6811] loop3: detected capacity change from 0 to 32768 [ 144.124159][ T6811] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 144.132539][ T6811] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 144.163341][ T4244] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 144.231290][ T6811] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 144.257877][ T5381] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 144.280016][ T5381] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 144.353331][ T5377] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 144.363490][ T5381] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 83ms [ 144.403379][ T5381] gfs2: fsid=syz:syz.0: jid=0: Done [ 144.408793][ T6811] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 144.429568][ T4244] usb 1-1: Using ep0 maxpacket: 16 [ 144.508825][ T6811] gfs2: fsid=syz:syz.0: gfs2_check_dirent: gfs2_dirent too small (not first in block) [ 144.545289][ T6811] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 144.545289][ T6811] inode = 12 2341 [ 144.545289][ T6811] function = gfs2_dirent_scan, file = fs/gfs2/dir.c, line = 602 [ 144.564518][ T4244] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 144.571098][ T6869] gfs2: fsid=syz:syz.0: gfs2_check_dirent: gfs2_dirent too small (not first in block) [ 144.579002][ T4244] usb 1-1: config 0 interface 0 has no altsetting 0 [ 144.602379][ T6869] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 144.602379][ T6869] inode = 12 2341 [ 144.602379][ T6869] function = gfs2_dirent_scan, file = fs/gfs2/dir.c, line = 602 [ 144.605344][ T4244] usb 1-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 144.629739][ T6869] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 144.639067][ T6869] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 144.653750][ T5377] usb 5-1: Using ep0 maxpacket: 8 [ 144.667014][ T6869] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 144.671485][ T4244] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.690167][ T6869] gfs2: fsid=syz:syz.0: File system withdrawn [ 144.698593][ T4244] usb 1-1: config 0 descriptor?? [ 144.706786][ T6869] CPU: 1 PID: 6869 Comm: syz.3.943 Not tainted 5.15.179-syzkaller #0 [ 144.714886][ T6869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 144.724971][ T6869] Call Trace: [ 144.728267][ T6869] [ 144.731206][ T6869] dump_stack_lvl+0x1e3/0x2d0 [ 144.735912][ T6869] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 144.741564][ T6869] ? panic+0x860/0x860 [ 144.745659][ T6869] ? do_raw_spin_unlock+0x137/0x8b0 [ 144.750886][ T6869] gfs2_withdraw+0xe9e/0x14e0 [ 144.755604][ T6869] ? gfs2_lm+0x230/0x230 [ 144.759883][ T6869] ? gfs2_dirent_scan+0x276/0x640 [ 144.764934][ T6869] ? panic+0x860/0x860 [ 144.769110][ T6869] ? gfs2_consist_inode_i+0xc0/0xe0 [ 144.774452][ T6869] gfs2_dirent_scan+0x512/0x640 [ 144.779331][ T6869] ? gfs2_dirent_scan+0x640/0x640 [ 144.784380][ T6869] gfs2_dir_read+0x831/0x1af0 [ 144.789100][ T6869] ? gfs2_dir_hash_inval+0x80/0x80 [ 144.794229][ T6869] ? _raw_spin_unlock+0x24/0x40 [ 144.799094][ T6869] ? gfs2_glock_nq+0xc6e/0x15e0 [ 144.804282][ T6869] ? gfs2_glock_wait+0x137/0x1c0 [ 144.809285][ T6869] gfs2_readdir+0x146/0x1a0 [ 144.813813][ T6869] ? __fdget_pos+0x2cb/0x380 [ 144.818426][ T6869] ? gfs2_fallocate+0x490/0x490 [ 144.823300][ T6869] ? gfs2_readdir+0x102/0x1a0 [ 144.827992][ T6869] ? iterate_dir+0x10a/0x570 [ 144.832779][ T6869] ? iterate_dir+0x10a/0x570 [ 144.837386][ T6869] ? fsnotify_perm+0x442/0x590 [ 144.842172][ T6869] iterate_dir+0x224/0x570 [ 144.846607][ T6869] ? gfs2_fallocate+0x490/0x490 [ 144.851482][ T6869] __se_sys_getdents64+0x209/0x4f0 [ 144.856625][ T6869] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 144.862777][ T6869] ? __x64_sys_getdents64+0x80/0x80 [ 144.867997][ T6869] ? filldir+0x720/0x720 [ 144.872357][ T6869] ? syscall_enter_from_user_mode+0x2e/0x240 [ 144.878349][ T6869] ? lockdep_hardirqs_on+0x94/0x130 [ 144.883566][ T6869] ? syscall_enter_from_user_mode+0x2e/0x240 [ 144.889595][ T6869] do_syscall_64+0x3b/0xb0 [ 144.894035][ T6869] ? clear_bhb_loop+0x15/0x70 [ 144.899222][ T6869] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 144.905148][ T6869] RIP: 0033:0x7fd0bbcbb169 [ 144.909584][ T6869] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 144.929406][ T6869] RSP: 002b:00007fd0b9b03038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 144.937860][ T6869] RAX: ffffffffffffffda RBX: 00007fd0bbed4080 RCX: 00007fd0bbcbb169 [ 144.945894][ T6869] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 144.954014][ T6869] RBP: 00007fd0bbd3c2a0 R08: 0000000000000000 R09: 0000000000000000 [ 144.962026][ T6869] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 144.970024][ T6869] R13: 0000000000000001 R14: 00007fd0bbed4080 R15: 00007ffc577713c8 [ 144.978034][ T6869] [ 144.981297][ C1] vkms_vblank_simulate: vblank timer overrun [ 145.043654][ T5377] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 56832, setting to 1024 [ 145.064671][ T5377] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 145.089770][ T5377] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 145.116916][ T5377] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 145.136808][ T5377] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 145.148892][ T5377] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.231214][ T4244] hid (null): unknown global tag 0xe [ 145.253586][ T4244] hid (null): report_id 15736 is invalid [ 145.259308][ T4244] hid (null): unknown global tag 0xe [ 145.273832][ T4244] cougar 0003:060B:500A.0004: unexpected long global item [ 145.281537][ T4244] cougar 0003:060B:500A.0004: parse failed [ 145.287842][ T4244] cougar: probe of 0003:060B:500A.0004 failed with error -22 [ 145.443507][ T5377] usb 5-1: GET_CAPABILITIES returned 0 [ 145.449132][ T5377] usbtmc 5-1:16.0: can't read capabilities [ 145.523537][ T5377] usb 1-1: USB disconnect, device number 8 [ 145.709888][ T4158] usb 5-1: USB disconnect, device number 6 [ 145.867763][ T6895] loop3: detected capacity change from 0 to 512 [ 146.022854][ T6895] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpjquota=,stripe=0x0000000000000002,,errors=continue. Quota mode: writeback. [ 146.040432][ T6895] ext4 filesystem being mounted at /168/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 146.403560][ T6913] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 146.430082][ C1] vkms_vblank_simulate: vblank timer overrun [ 146.575222][ T6913] CIFS mount error: No usable UNC path provided in device string! [ 146.575222][ T6913] [ 146.638255][ T6913] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 146.665541][ T6928] loop2: detected capacity change from 0 to 256 [ 146.808393][ T6932] netlink: 8 bytes leftover after parsing attributes in process `syz.4.998'. [ 146.866868][ T6932] netlink: 36 bytes leftover after parsing attributes in process `syz.4.998'. [ 146.890364][ T6928] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 198) [ 146.934425][ T6928] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF [ 252.363170][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 252.370164][ C1] rcu: 0-...!: (0 ticks this GP) idle=34d/1/0x4000000000000000 softirq=17369/17369 fqs=3 [ 252.381949][ C1] (detected by 1, t=10502 jiffies, g=22449, q=169) [ 252.388568][ C1] Sending NMI from CPU 1 to CPUs 0: [ 252.394378][ C0] NMI backtrace for cpu 0 [ 252.394395][ C0] CPU: 0 PID: 3057 Comm: kworker/u4:4 Not tainted 5.15.179-syzkaller #0 [ 252.394412][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 252.394435][ C0] Workqueue: bat_events batadv_nc_worker [ 252.394470][ C0] RIP: 0010:rb_erase+0xf8/0xe20 [ 252.394490][ C0] Code: 00 00 fc ff df 80 3c 08 00 74 d2 48 89 ef e8 df 33 92 fd eb c8 48 89 d8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 <74> 08 48 89 df e8 be 33 92 fd 4c 8b 3b 4c 89 fd 4c 8b 6c 24 18 48 [ 252.394504][ C0] RSP: 0000:ffffc90000007cc8 EFLAGS: 00000046 [ 252.394517][ C0] RAX: 1ffff1100fb74468 RBX: ffff88807dba2340 RCX: dffffc0000000000 [ 252.394529][ C0] RDX: 0000000000010000 RSI: ffff8880b8e2a450 RDI: ffff88807dba2348 [ 252.394542][ C0] RBP: dffffc0000000000 R08: ffffffff843904b4 R09: fffffbfff1c153f6 [ 252.394554][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000 [ 252.394565][ C0] R13: 1ffff1100fb7446a R14: 0000000000000000 R15: ffff88807dba2350 [ 252.394577][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 252.394591][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 252.394602][ C0] CR2: 0000001b3071affc CR3: 000000001f5ea000 CR4: 00000000003506f0 [ 252.394616][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 252.394626][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 252.394636][ C0] Call Trace: [ 252.394643][ C0] [ 252.394651][ C0] ? nmi_cpu_backtrace+0x39f/0x4a0 [ 252.394668][ C0] ? read_lock_is_recursive+0x10/0x10 [ 252.394688][ C0] ? nmi_trigger_cpumask_backtrace+0x2a0/0x2a0 [ 252.394706][ C0] ? unknown_nmi_error+0xd0/0xd0 [ 252.394731][ C0] ? nmi_cpu_backtrace_handler+0x8/0x10 [ 252.394749][ C0] ? nmi_handle+0xf7/0x370 [ 252.394766][ C0] ? rb_erase+0xf8/0xe20 [ 252.394781][ C0] ? default_do_nmi+0x62/0x150 [ 252.394800][ C0] ? exc_nmi+0xa8/0x100 [ 252.394817][ C0] ? end_repeat_nmi+0x16/0x31 [ 252.394837][ C0] ? timerqueue_del+0x44/0xf0 [ 252.394855][ C0] ? rb_erase+0xf8/0xe20 [ 252.394872][ C0] ? rb_erase+0xf8/0xe20 [ 252.394888][ C0] ? rb_erase+0xf8/0xe20 [ 252.394903][ C0] [ 252.394908][ C0] [ 252.394917][ C0] timerqueue_del+0xa8/0xf0 [ 252.394935][ C0] __hrtimer_run_queues+0x3e9/0xcf0 [ 252.394962][ C0] ? hrtimer_interrupt+0x980/0x980 [ 252.394978][ C0] ? ktime_get_update_offsets_now+0x407/0x420 [ 252.395000][ C0] hrtimer_interrupt+0x392/0x980 [ 252.395027][ C0] __sysvec_apic_timer_interrupt+0x13b/0x4b0 [ 252.395046][ C0] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 252.395067][ C0] [ 252.395071][ C0] [ 252.395076][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 252.395094][ C0] RIP: 0010:lock_acquire+0x252/0x4f0 [ 252.395110][ C0] Code: 2b 00 74 08 4c 89 f7 e8 0c ac 67 00 f6 44 24 61 02 0f 85 84 01 00 00 41 f7 c7 00 02 00 00 74 01 fb 48 c7 44 24 40 0e 36 e0 45 <4b> c7 44 25 00 00 00 00 00 43 c7 44 25 09 00 00 00 00 43 c7 44 25 [ 252.395123][ C0] RSP: 0000:ffffc9000ce5fa80 EFLAGS: 00000206 [ 252.395137][ C0] RAX: 0000000000000001 RBX: 1ffff920019cbf5c RCX: 1ffff920019cbefc [ 252.395148][ C0] RDX: dffffc0000000000 RSI: ffffffff8aab3d00 RDI: ffffffff8af9fa80 [ 252.395161][ C0] RBP: ffffc9000ce5fbd8 R08: dffffc0000000000 R09: fffffbfff2131e19 [ 252.395173][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff920019cbf58 [ 252.395184][ C0] R13: dffffc0000000000 R14: ffffc9000ce5fae0 R15: 0000000000000246 [ 252.395276][ C0] ? read_lock_is_recursive+0x10/0x10 [ 252.395304][ C0] ? rcu_lock_release+0x5/0x20 [ 252.395323][ C0] ? __lock_acquire+0x1ff0/0x1ff0 [ 252.395343][ C0] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 252.395365][ C0] rcu_lock_acquire+0x2a/0x30 [ 252.395384][ C0] ? rcu_lock_acquire+0x5/0x30 [ 252.395400][ C0] batadv_nc_worker+0xc1/0x5b0 [ 252.395422][ C0] process_one_work+0x8a1/0x10c0 [ 252.395458][ C0] ? worker_detach_from_pool+0x260/0x260 [ 252.395478][ C0] ? _raw_spin_lock_irqsave+0x120/0x120 [ 252.395496][ C0] ? kthread_data+0x4e/0xc0 [ 252.395512][ C0] ? wq_worker_running+0x97/0x170 [ 252.395530][ C0] worker_thread+0xaca/0x1280 [ 252.395560][ C0] kthread+0x3f6/0x4f0 [ 252.395576][ C0] ? rcu_lock_release+0x20/0x20 [ 252.395593][ C0] ? kthread_blkcg+0xd0/0xd0 [ 252.395611][ C0] ret_from_fork+0x1f/0x30 [ 252.395637][ C0] [ 252.396366][ C1] rcu: rcu_preempt kthread starved for 10496 jiffies! g22449 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 252.831048][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 252.841025][ C1] rcu: RCU grace-period kthread stack dump: [ 252.846927][ C1] task:rcu_preempt state:R running task stack:27000 pid: 15 ppid: 2 flags:0x00004000 [ 252.857760][ C1] Call Trace: [ 252.861064][ C1] [ 252.864015][ C1] __schedule+0x12c4/0x45b0 [ 252.868548][ C1] ? _raw_spin_unlock_irqrestore+0x8b/0x130 [ 252.874464][ C1] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 252.880390][ C1] ? __mod_timer+0xa8e/0xeb0 [ 252.885007][ C1] ? release_firmware_map_entry+0x190/0x190 [ 252.890935][ C1] ? mod_timer_pending+0x20/0x20 [ 252.895991][ C1] ? lockdep_softirqs_off+0x420/0x420 [ 252.901395][ C1] schedule+0x11b/0x1f0 [ 252.905579][ C1] schedule_timeout+0x1b9/0x300 [ 252.910446][ C1] ? console_conditional_schedule+0x40/0x40 [ 252.916362][ C1] ? update_process_times+0x200/0x200 [ 252.921776][ C1] ? prepare_to_swait_event+0x321/0x340 [ 252.927366][ C1] rcu_gp_fqs_loop+0x2bf/0x1080 [ 252.932248][ C1] ? dyntick_save_progress_counter+0x230/0x230 [ 252.938433][ C1] ? rcu_gp_init+0x1140/0x1140 [ 252.943230][ C1] ? finish_swait+0xc5/0x1d0 [ 252.947864][ C1] rcu_gp_kthread+0xa4/0x360 [ 252.952484][ C1] ? _raw_spin_unlock+0x40/0x40 [ 252.957354][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 252.962488][ C1] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 252.968422][ C1] ? __kthread_parkme+0x15c/0x1c0 [ 252.973483][ C1] kthread+0x3f6/0x4f0 [ 252.977580][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 252.982708][ C1] ? kthread_blkcg+0xd0/0xd0 [ 252.987313][ C1] ret_from_fork+0x1f/0x30 [ 252.991756][ C1] [ 252.994792][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 253.001113][ C1] NMI backtrace for cpu 1 [ 253.005446][ C1] CPU: 1 PID: 5377 Comm: kworker/1:14 Not tainted 5.15.179-syzkaller #0 [ 253.013774][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 253.023835][ C1] Workqueue: events fqdir_free_fn [ 253.028872][ C1] Call Trace: [ 253.032154][ C1] [ 253.035000][ C1] dump_stack_lvl+0x1e3/0x2d0 [ 253.039691][ C1] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 253.045417][ C1] ? panic+0x860/0x860 [ 253.049505][ C1] nmi_cpu_backtrace+0x46a/0x4a0 [ 253.054449][ C1] ? __wake_up_klogd+0xd5/0x100 [ 253.059311][ C1] ? nmi_trigger_cpumask_backtrace+0x2a0/0x2a0 [ 253.065469][ C1] ? _printk+0xd1/0x120 [ 253.069630][ C1] ? cpu_online+0x1f/0x40 [ 253.073964][ C1] ? panic+0x860/0x860 [ 253.078039][ C1] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 253.084287][ C1] nmi_trigger_cpumask_backtrace+0x181/0x2a0 [ 253.090277][ C1] rcu_check_gp_kthread_starvation+0x1d2/0x240 [ 253.096448][ C1] print_other_cpu_stall+0x137a/0x14d0 [ 253.101932][ C1] ? print_cpu_stall+0x600/0x600 [ 253.106989][ C1] ? __lock_acquire+0x1ff0/0x1ff0 [ 253.112124][ C1] ? do_raw_spin_unlock+0x137/0x8b0 [ 253.117363][ C1] rcu_sched_clock_irq+0xa38/0x1150 [ 253.122580][ C1] ? rcutree_dead_cpu+0x20/0x20 [ 253.127446][ C1] ? hrtimer_run_queues+0x163/0x450 [ 253.132663][ C1] ? account_process_tick+0x232/0x3a0 [ 253.138053][ C1] update_process_times+0x196/0x200 [ 253.143265][ C1] tick_sched_timer+0x386/0x550 [ 253.148126][ C1] ? tick_setup_sched_timer+0x2d0/0x2d0 [ 253.153683][ C1] __hrtimer_run_queues+0x55b/0xcf0 [ 253.158921][ C1] ? hrtimer_interrupt+0x980/0x980 [ 253.164038][ C1] ? ktime_get_update_offsets_now+0x407/0x420 [ 253.170123][ C1] hrtimer_interrupt+0x392/0x980 [ 253.175216][ C1] __sysvec_apic_timer_interrupt+0x13b/0x4b0 [ 253.181224][ C1] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 253.186968][ C1] [ 253.189904][ C1] [ 253.192838][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 253.198834][ C1] RIP: 0010:smp_call_function_single+0x297/0x530 [ 253.205189][ C1] Code: 00 44 8b 6c 24 48 44 89 ee 83 e6 01 31 ff e8 20 ef 0b 00 41 83 e5 01 75 0a e8 b5 eb 0b 00 e9 eb 00 00 00 f3 90 42 0f b6 04 23 <84> c0 75 15 f7 44 24 48 01 00 00 00 0f 84 cd 00 00 00 e8 92 eb 0b [ 253.224816][ C1] RSP: 0018:ffffc9000356fa60 EFLAGS: 00000293 [ 253.230920][ C1] RAX: 0000000000000000 RBX: 1ffff920006adf55 RCX: ffff88807d903b80 [ 253.238900][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 253.246962][ C1] RBP: ffffc9000356fb50 R08: ffffffff8174b100 R09: ffffed10171c7679 [ 253.254955][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 253.262934][ C1] R13: 0000000000000001 R14: ffffc9000356faa8 R15: 0000000000000000 [ 253.270925][ C1] ? smp_call_function_single+0x280/0x530 [ 253.276683][ C1] ? rcu_rdp_is_offloaded+0x1a0/0x1a0 [ 253.282063][ C1] ? flush_smp_call_function_from_idle+0x280/0x280 [ 253.288831][ C1] ? rcu_rdp_is_offloaded+0x1a0/0x1a0 [ 253.294213][ C1] ? rcu_read_lock_bh_held+0x110/0x110 [ 253.299692][ C1] rcu_barrier+0x262/0x4e0 [ 253.304118][ C1] ? cond_synchronize_rcu+0x20/0x20 [ 253.309323][ C1] ? print_irqtrace_events+0x210/0x210 [ 253.314812][ C1] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 253.320722][ C1] ? do_raw_spin_unlock+0x137/0x8b0 [ 253.325947][ C1] fqdir_free_fn+0x2e/0x130 [ 253.330476][ C1] process_one_work+0x8a1/0x10c0 [ 253.335448][ C1] ? worker_detach_from_pool+0x260/0x260 [ 253.341099][ C1] ? _raw_spin_lock_irqsave+0x120/0x120 [ 253.346659][ C1] ? kthread_data+0x4e/0xc0 [ 253.351170][ C1] ? wq_worker_running+0x97/0x170 [ 253.356204][ C1] worker_thread+0xaca/0x1280 [ 253.360915][ C1] kthread+0x3f6/0x4f0 [ 253.364990][ C1] ? rcu_lock_release+0x20/0x20 [ 253.369847][ C1] ? kthread_blkcg+0xd0/0xd0 [ 253.374449][ C1] ret_from_fork+0x1f/0x30 [ 253.378889][ C1] [ 253.382642][ C1] vkms_vblank_simulate: vblank timer overrun